last executing test programs: 9.788880451s ago: executing program 1 (id=1452): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000780)={0x29e9c934, 0x3, 0x7f, 0x404}, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2010}, 0x4001) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x0, 0x180, 0x2, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x8, 0x0, 0x45, 0x1, 0xbdb], 0xdddd0000, 0x1c4213}) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000380)=@generic={0x3, 0x401, 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0xf000) 9.604526679s ago: executing program 1 (id=1454): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6(0xa, 0x0, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, 0x0, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f0000001480)=[{{0x0, 0xfffffffffffffdf6, &(0x7f0000000340), 0x1}}], 0x1, 0x400c404) exit(0xfe) sendmmsg$inet6(r3, &(0x7f0000004740), 0x0, 0x48c0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8005, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xfffffffd}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000500)={0x601, 0x0, &(0x7f0000000180), &(0x7f0000000480), &(0x7f0000000440)=[0x0], &(0x7f0000000040), 0x0, 0x8}) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r5, 0x0, 0x61, 0x0, &(0x7f0000000080)) setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0xfffffffd, 0x4, 0xfffffffe}, 0x3c) setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x1, 0x0, 0x3}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x84000, 0x0) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000086d04570040000102030109022d0001010800c50904000502030103010921e405010122024f880255b6dded2446d13759ca660409058103"], 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)=@ethtool_cmd={0x4f, 0x5, 0x8, 0x4fec, 0x4, 0x8, 0x1, 0x4, 0x2, 0x3, 0x95, 0x400, 0xfff7, 0x8, 0x6, 0xc3, [0x1, 0x9]}}) 8.96398636s ago: executing program 0 (id=1458): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) setreuid(0xee00, 0xffffffffffffffff) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x4004090) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x40002001) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x29, 0xdb, 0x5, 0xffffffff, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, 0x10, 0x700, 0x6, 0x101}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x4, 0xff, 0xaf, 0x800, 0x0, @empty, @empty, 0x10, 0x40, 0x4, 0x5cb0}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r4, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44840}, 0x8004) r7 = accept4$alg(r0, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE_wg(r7, 0x1, 0x19, &(0x7f0000000480)='wg1\x00', 0x4) sendmmsg$alg(r1, &(0x7f0000004680)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="f78d9ca38fff48f3be52163448412ba8b209f31083af15550f7e45143e156eec0cd410d07361db487eae2e4d35a91c1cfbefe804cb5968", 0x37}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed", 0x39}], 0x2}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001600)=""/4086, 0xff6}], 0x1}, 0x0) 8.736447926s ago: executing program 0 (id=1459): r0 = fsopen(&(0x7f0000000000)='nilfs2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = getpgrp(0x0) r2 = syz_clone3(&(0x7f0000000280)={0x80100, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0, {0x2b}, &(0x7f0000000100)=""/232, 0xe8, &(0x7f0000000200), &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x58) r6 = epoll_create(0x2) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000300)={r6, r0, 0xd588bdf}) r7 = fanotify_init(0x1, 0x1000) r8 = socket$netlink(0x10, 0x3, 0x2) r9 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) ioctl$SNDRV_TIMER_IOCTL_CREATE(r9, 0xc02054a5, &(0x7f0000000340)={0x98, r7, 'id0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r9, 0xc0189378, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r6, {r6}}, './file0\x00'}) ioctl$VIDIOC_G_FBUF(r11, 0x8030560a, &(0x7f0000001400)={0x0, 0x1, &(0x7f0000000400)="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", {0x2, 0x7, 0xa0363159, 0x2, 0xfffffffd, 0x10001, 0x6, 0x3}}) close(0xffffffffffffffff) r13 = fsmount(r12, 0x0, 0xc) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r14, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x34, 0xd, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) r15 = syz_open_dev$vim2m(&(0x7f0000001540), 0xbab, 0x2) ioctl$KVM_GET_MSRS_cpu(r13, 0xc008ae88, &(0x7f0000001580)={0x1, 0x0, [{0x33f, 0x0, 0x1c0000000}]}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000017c0)={&(0x7f00000015c0)="580819df32707d96fc83731d099ba17274c4b0745380a0d36cf002ca92f712fc45c9e5a5f624ee4c28801e54c884c8b4dcff94d6a4b00c42fc854e0cb02c3ec539b4", &(0x7f0000001640)=""/21, &(0x7f0000001680)="080f88cd13429d33535fba3be42410b0855bb50601b469", &(0x7f00000016c0)="802a20fb6282659174dab2794fbfa650d60268fb1a52eb59c0b33f4487bed867841230a634bc0c4bda5ec1fccf9427516c646140572ecbb0baa68f417ef477eb6e2706ea0459948df613b2e7aa6324cd9575221f4c779cbaf9848ad2cc7602b8f80a5d5c28de256ae0e68a39344bf06579eaf1157169aa9f9676aa7cafbacbaeb1c88ca8b4de530432970a25b23224da8709a06b528de75a48a062124207b28b22b6fcae2463bc70e39fbf8a37f3010da0a2ee220c8d216584de5db1a5de40aaed", 0x3, r12}, 0x38) r16 = syz_usb_connect(0x6, 0xf58, &(0x7f0000001800)={{0x12, 0x1, 0x200, 0xea, 0x8c, 0xf8, 0x9f, 0x3eb, 0x30, 0xcd3f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf46, 0x2, 0x80, 0xfd, 0x40, 0x3, [{{0x9, 0x4, 0x76, 0x8, 0xf, 0x4, 0x91, 0x39, 0x7, [@hid_hid={0x9, 0x21, 0x2, 0x2, 0x1, {0x22, 0x6e7}}], [{{0x9, 0x5, 0x5, 0x10, 0xd33f3b78c0ed7aa5, 0x1, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3}]}}, {{0x9, 0x5, 0xa, 0x8, 0x20, 0x6, 0x0, 0x0, [@generic={0xd9, 0x21, "6c3ffb3e3213e2daa7b41515582eae9bc05732a5ec5729b1efaec9ab9149679c5586812ce35dd2f49bee62e51d30e7e024913c8cfe696d6b2e1fc477abe8104ce0575b74519b58ce280d3e310fa535fd0847a8a8932ecf8748fae89f75a34e11d91a039bad0aae640efb17dc31308a4e7165ab9487c300068fa4a51cd5221c3ae386f43409cbbd6e10193dd455655eac3440919a170d663ccb7eee219f8f79e4220374a2a2cbcfda7b222c0ffb0019cb1ad7ce42105c7879bd311187883e4364d1c842f7b94651d9a03b8ccfe0d952034f58d8e2ab4ddf"}, @generic={0xfc, 0xb, "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"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x3ff, 0x9, 0x4, 0x1, [@generic={0x98, 0x9, "b47f35e1c9629a1b94ad862c6b019c1f5ede3ecc7bc734fa24718eb7bad5831f81c5ea8f36aeaa8bd06757ad970782f1461bc056c38e954d1ddde51bdd9c22222bfcad5d94eaa8f16c11882c2d8039f3a04c20c699ebd57f702fee3e853a3e4bc032479efcfc0327728ea1ee3668c0166140f4e94cd1dfbc958f4772a731bf58a51754be0ea6f9f6c26e440d6130d4bbf526e866ff78"}, @generic={0x50, 0x23, "fa7ba38ef4630d1c666773aecf20505fb2819334a8a56c715876b220de82a9383f0997822b4fb1726bd18e04a56d011aa75cb31b4de89fd0c84ba87a084e00446702405c30e25c3611477a836a3f"}]}}, {{0x9, 0x5, 0x1, 0x2, 0x10, 0xff, 0x35, 0x0, [@generic={0x3a, 0x2, "e43a695ea409ffa62932ada7e61d81304c8f76f2deb8df905b1010ef619e3c938607836e7bb437580abbc77cc21bcf3c5db9894890e8e293"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x20, 0x3, 0x3, 0x0, [@generic={0x93, 0xb, "9c7b753543c2ecbb42e55f2ef1e8bf067069cf2426195b07fa4e8921e957d4dcdb14a1bc2897c5352fbf494759ea22737ffd769d942087320b68ba27bf9b28c2287faf1b08169a62921bbe98485cba4db8c4aed808b48fb15b0af7c2da98add866755cb576b998c6b04af6dfb4d044adc14e5fd89d93d8a9164b0fd8f82752f1ee8e9597e368c27700c50ebf6eed4accc0"}, @generic={0xd5, 0x23, "01e6d9d6126f0271dfd47a7f47557c5cd1a0207bf1051983a80151c48dca096ade984f97f2b0f41205deeafb0bf8ff5fa6a85223a0339a18b9f10a37f8cf16fce6124b7a97e6a0a9c9831f9c36d5578ca3d311d0bac7e960adb3a1ef9c51e5226c484c8174fe6e781f7b768811ca3ed3b2aca5cd3770720ba4fe677b5e82427fd17aad4bcfcddae40d8bf14f23c7b89be4f77a8dfbdf010a5c4e945c75b88bcf1b95c8b789d861f9ba3cc15ec667262e086be19a4e3d17f8903fc57d480a83ae63fa7b2dd7a42df5ea83067e20094dc00203ed"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x428, 0x10, 0x6, 0xa1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x5b80}]}}, {{0x9, 0x5, 0xd, 0x6, 0x3ff, 0x6, 0x3, 0x2, [@generic={0x6f, 0x8, "feff5ddadd72538be5d39f4b4cb6240370dd3d6f74c4c69089df6048d6b9d3166ffbbe3e5f2dddfed4308b66e9af07d159ba2f1449eca8ca155fc5e33d7a527fdd8b03f5dcb7b06ee6f54292c5e608f1912004bc4aef8b188ced0ca7751b5d9f207798386e47225850c188a10d"}, @generic={0x5f, 0xc, "c1d9936dc6828869044d680e91eb63edde1497c40eaa20d927049c4a23ed455925b9cfda5272af70d3d1bf0f70cdf821f2e8227402a829a6ca1be3f2326fb81c20b7454ed9b6fb91f87c716a41b3d8ec141dc09b77407a91bc520c0700"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x8, 0x7, 0x86, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0xfff4}]}}, {{0x9, 0x5, 0x2, 0x8, 0x3ff, 0x2, 0xfa, 0x49, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1f, 0x5}]}}, {{0x9, 0x5, 0x1, 0x91b2b7927d9c7341, 0x3ff, 0x4b, 0x2, 0x6, [@generic={0x68, 0xd, "cae76df80d36ddbf42d3c749996c4c351dd4edd2736ad1cc7d91d441e10aac831ee3bbddba31c8c22223b65dcee791c3e993c5b1e9255a30151d6fafe767fba2ec55d82756d082eba35e36616e91cdf8234fd3ccbdf5331948851457ff0614a7e06be56f8b7c"}]}}, {{0x9, 0x5, 0x8, 0x2, 0x20, 0x3, 0x8, 0x9c, [@generic={0x7f, 0x10, "a5ea0db005926818ab9e39e567f30bbebb66601492d44686a0ff102a4cd9138f5d97ef0beccd24185449e7fb8034f5788ba960bbafe5829e6b2421d3669371d17d1d45c073a3443beb19cbbc28460c6801c03365fec864349aa8da4d1c354aea784da27537ef03e30d2f08464c9151dd2e8c20e389011266834ac4d918"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x0, 0x9, 0x9, [@generic={0xdf, 0x23, "b77f5b5c2c60a9e6b1b972e136a917654823b4f082550a9781fcd9b073bc0229172403c59ac364ee11969df3db3b64e6d86ed1fcf541288bcd2b7fcfc6870e079cc003537db57257495c6991b0ce15eec2d088887bc779fe3ade98c7842e342f2ae73502edc4ec9495a9de627c6565ba252af5c0ceffe2744b843962e388bf1eef9cb738d7cb5545ac329bbdc0aba28c54a44cb0a3f60c16ff1f329ebc4bc744c32366e0fdef441df5b79069201537fa28e0a72374bb332cbf1dd513d2d9d151181c1c6ce78b7bbe04665825bcee5ea19be0ca45e9d74d0d5f4dc3f161"}, @generic={0x2, 0x23}]}}, {{0x9, 0x5, 0x0, 0x10, 0x8, 0x0, 0xfb, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x8001}]}}, {{0x9, 0x5, 0xc, 0x10, 0x3ff, 0x2, 0xe9, 0x4, [@generic={0x2e, 0xa, "305cfc48735d36ae02ad8044ba0619c92ffbff37fc4b4c585c50e9a76d877261714f127a252cb3d48573bdaa"}]}}, {{0x9, 0x5, 0x8, 0xc, 0x40, 0xf5, 0xe1, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x100, 0x4, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x1}]}}]}}, {{0x9, 0x4, 0xc9, 0x4, 0xe, 0x9a, 0x1f, 0x3a, 0x82, [@cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "f83accdd10"}, {0x5, 0x24, 0x0, 0x9f60}, {0xd, 0x24, 0xf, 0x1, 0x7f, 0x9, 0x6, 0x59}, [@mbim_extended={0x8, 0x24, 0x1c, 0xe, 0x2}, @obex={0x5}]}], [{{0x9, 0x5, 0x1, 0x10, 0x8, 0xf5, 0x4, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x6, 0x66, 0x5b0}]}}, {{0x9, 0x5, 0x8, 0x10, 0x200, 0xa, 0x4, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xf, 0xfff7}]}}, {{0x9, 0x5, 0xd, 0x0, 0x10, 0x4, 0x9, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1a, 0x6}]}}, {{0x9, 0x5, 0x6, 0x0, 0x200, 0x5, 0x10, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x81}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x4, 0xffff}]}}, {{0x9, 0x5, 0x1, 0x2, 0x8, 0xfc, 0x2, 0x3, [@generic={0x9b, 0x5, "56811ea7bf4632f42c4dbf2580087a9355a4094ab6bf87ea22bb5c0f5baf807761b25508444803bcfd23db71cea7a07b16c5c0f1309dc47ea216975771cbcab03f57b6848473177ed79a362c9977fd1257eafaec6fbe9ec5865de700cbaf2cf61fe68fb6081742b9f000cdb55f08a9d8d7fd5cd7370959e144a9bc9186d9ac7546666fd1f94eb0b9cac1d40d1caa9986aaeab2fb5197c1840a"}]}}, {{0x9, 0x5, 0xe, 0x3, 0x10, 0x5, 0x1, 0x6, [@generic={0x8f, 0x6, "f99b90374186262b608a81f59a46b1cf9cef77b166ddd2cdbdf3cc541097415e820c580fbf92d1003d8f41dfd1ea9094e11663ed897a4ec11de582ebfea2e4ae3cfb25086babe2b790836423a4e22477f107ffc171016d00445c5d3790334af0cf7689153f6b422a33dc4e2090fa024dd10c44c32bd8e97607a34ff9094de2fdd16c910d6ef077527f7dfc5236"}]}}, {{0x9, 0x5, 0x8, 0x13, 0x3ff, 0x80, 0x8, 0x3, [@generic={0x8d, 0x4, "d839c439f80c72c995bf82901f0923702b86864cd89de5dd91d8d9a9e231d1a23b3a0bc7e62254ae6350b42ad15a96576f92c7059fdcdb884d38b02909cce0aab8422af72f10a2c83a80622740d1ea59ab317871a599fa5b3bae38f4bdcbf23efb011f70f2f75799d63181c25f9987bf918677af1aa74a4d768bb7a38241e24c7903ed75745c6e6b9e4782"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x400, 0x5, 0x1, 0x80, [@generic={0xe9, 0xc, "2226a51bdb1b2a2a8a3f6e249a1a0d96174544e284ddab8d7d6c54daae19b229f2e91f1f745c3d291ddd3570d4a01cb98986a9aa2526d764f23c14d7b5db8b2630a46f7a26727a5c2564ef372e7b6b95a3bce1ba728ffe85a8eca820c616a8771c81c7f5f5304e3a6366230c35cfe3625c244bca7bb47c3403a3a35922888826c0ae2346bdbd8bdbfcc7b13d29459144de5065ca2639c28819e8dd1f28b27061c15a6cb01f116f7e99880cff18ce4630e23bd252e942b6ecc188e56903316210f450d02abdb82ba6f3dc1b480a833abae21e3833245a2fcef1e9fb2a24f4bbb5fbfd03645066e1"}]}}, {{0x9, 0x5, 0x7, 0xc, 0x20, 0x6, 0x81, 0x9, [@generic={0xbb, 0x11, "b515f3f92b735d88ad97977ee32dec0dd3a78624b36e6d406e94cf426329687347d86c0a1d1641ec6518023ddc7f83d4490ceacc4e074b4f56f93bd649b7498b6b8c02a70b5abc6b2b9ced057799bd96c8800b014b6c914c57b4306b4b9e001f7ebfd1c1ff42134b0bcff8307a264636e2d9209e019311e03a0002fdc6a1f9e76346a84702f462e750a0a0889f74328d9eae9f386d9c86ffb1c24d4272978ba925fa527923e9a62f012aa7162389facdb72e136f38c6d48ec5"}, @generic={0xec, 0x0, "9c1bbc36f37e6c1b7b5a1eae76df61f2cc81e8bd150fada8687e1af3c70bcfacfddff32c140619a061854eee753e6a5c66a8ba7a2b85e7acca2fd814ca73708792dd9051c5f9cefeb010f1d175cfbfc66d0865309a4479e9e8405019d9602fa6f0fb481be3921e0db5c3e9cbb0fe8b3c6f8e2038b6017701fd5aae0908a86e3e5721f6a6cc9a0e9aceb4eb9393ea0daf6bb211a8dec2358547aa9ac08720842fd5dc0d628fdef6f90fb8ac8fdf84fec8f3089ddf461e3d6b30284140cdd197dfcfbc8b8445c4d8f7031c4fd8b7d951c82a8bd3c0ceba7d51884b40d7cf030b0ad54a7f6811c76b222eec"}]}}, {{0x9, 0x5, 0xa, 0x4, 0x20, 0x81, 0x0, 0x2, [@generic={0x4d, 0xf, "9ec4cb2d4b3e02f3b0094718430c5bd7bb70a6d11ce7b3e34ed135c2505c391c7a7b306e584ca34b2576973ae9924e0743859b3fa17a0d636e3bd36e52144218fbd5807ce3adba0e7e2475"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x8, 0x0, 0x3, 0x4, [@generic={0xae, 0x6, "3ddd6232bb85441fabc3281d6ee554592f3a95392c5eb5ef98dbf4199dc93f913393c7d09f6581a50ad35120be32de4219a4b40c92027c633215fe4c3768a388eef208ec7210cb75a8fc5c5f29d1492b7e1c4d546c29dca758d34d10284dfd5825216e22dd33b78e7acb2977e87d2438464e68c1a1d2555581b37e59b77ae31cc52eb2593b8d67fcaeef8bbebc30d98e55b1032c3dce2f12a0fb22359435d835668b2e98ab2f74f38605e812"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x400, 0x6, 0x5, 0x8, [@generic={0x9a, 0xb, "986491a871903e52526eb4ea452942ca99d9bd2b7ebd68729c391aa0397a99a0cf103aa2193decd5fb914856a8029edcc6f4c502860e7a19c4951913b385ebd5c78252db7c47be98643fbe4b30aad4e79ebd6823a2ab1dcc09ee07b492a9f3caadba110602538d3da8cab2404f4c3a09fe82f81b79d45afd8d4b9746c5340b02fa516f38ed7e445b0031042ca9745d5c847f5234278a8cac"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x5, 0x9, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xe, 0xe}]}}, {{0x9, 0x5, 0xf, 0x8, 0x20, 0x4, 0xa, 0x2, [@generic={0x8c, 0xc, "399b3cd890b3980656c349c3e7cde78ca303bd4067b0f7c8c2ad504359f470385ad53bbd9b6e8d787c94435568430efa241afd029d4bca428996bddb3c0d5042c1b2e4db6b115e8ae3bdf2e3442ca57938602c222ee27d023ee872103965382a1d25bf59d0591f01e2fe3ade4c21b96b7e423ab300801f782b99afb6a91532b71ee556daf4ed000bcd36"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x4}]}}]}}]}}]}}, &(0x7f0000002ac0)={0xa, &(0x7f0000002780)={0xa, 0x6, 0x310, 0x7, 0x7, 0x6, 0x8, 0x3}, 0x200, &(0x7f00000027c0)={0x5, 0xf, 0x200, 0x6, [@generic={0xbc, 0x10, 0x2, "32bd5ebfe09dd531897473669a12e112cee2ace1e00cf8156505379f8b18b9d3439f2c56c83810f035a97bb40dd8a1b287a576fb67350aa9d25c62ba2a79c57e00ebb86ab7bf741edf1c59a829199e449b4b41441de7da069562510350144cf2487f2ff48baec9124c72bab64bc456f56366438e5af23268287962edb90ab06141f66333596ac870665d4c89283dae0265ac7a4b1fe5cac1da96822795511dd7ff9b03cfb689500241ea5d54356defc9914afc36171cf8df7e"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x3, 0x63, 0x1000}, @generic={0x26, 0x10, 0x1, "af7d92039fac897c0e3dc1b83d0c9459b89e095e6b0c7229af820119015238e62dbfd9"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0xa, 0x97, 0x8}, @generic={0x102, 0x10, 0xa, "327c3102e449939fbc1de57cb7fd89db488b4517c03527412d5b14a5698c55d8a0c6f6b9027af1496fd832bc029977fdcfa53385b2b4f02609d183a445c4aab4435ad750c2dd9e477b5b8fbe75761ddafcc725399556b6b0a578ad5b377f7c40dea31fa805702525bc4073a2c32fff6f32fb7c086db410d2eb257ceaf2507e095f4c7ab9a2593077d8aa124737f5d80b7325bf90ba66f2988ad533d78b6e16331ab944a9c1c81ea8a30ed7a825527f3cca61a3dc980eaad3ac0d3de6854334cc7d3883b987844b218ecb69d7d6a7a1cd9792115c0d7758f27d557f2478f16be935019a20ca6480dd76827e640327402d075f1d757a4577e760b2caaa62130e"}, @ptm_cap={0x3}]}, 0x3, [{0x61, &(0x7f00000029c0)=@string={0x61, 0x3, "17cb5b80deaeb810782e143dc1c9cc211f1333bf98e43a449b403ab9f7180e78771f89bee6ba7db2e83d73460deba999d0fe017ebf0bf01ac27a14d3012ea8f9194e02071c9f665126a4b7ad58c0dc876168b7004e9f2eebcc3f56ebedfdce"}}, {0x4, &(0x7f0000002a40)=@lang_id={0x4, 0x3, 0x544a}}, {0x4, &(0x7f0000002a80)=@lang_id={0x4, 0x3, 0x1009}}]}) syz_usb_control_io$hid(r16, &(0x7f0000002c40)={0x24, &(0x7f0000002b00)={0x20, 0x10, 0xa, {0xa, 0x21, "a945c4caf391762c"}}, &(0x7f0000002b40)={0x0, 0x3, 0x46, @string={0x46, 0x3, "324a70b1b6ee8038991b1ac9096683e2bd0caf812959054fcd0c58abea043ac801282136e782af72ea60d1621a963f131a3cae199d3f65cb04dba65d2b1e9ad4fcba62ac"}}, &(0x7f0000002bc0)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0x9, "80"}, @global=@item_4={0x3, 0x1, 0x1, "615c0e40"}]}}, &(0x7f0000002c00)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x2, 0x1, {0x22, 0xd06}}}}, &(0x7f0000002ec0)={0x2c, &(0x7f0000002c80)={0x40, 0x0, 0x67, "26dabd1c912ba55763f31d4154ba4a51f4a537f9f2ef32c2d88815a8a4bb7c63eab7474dc4f25e8be98181ddabc5ac8c776a0c35ac2ff4a255ff02d733df5aa5261b0125d4e6cb572b74a787e13005be03dc8b90ea66fe69df260b8879414179f6fc090a781df7"}, &(0x7f0000002d00)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000002d40)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000002d80)={0x20, 0x1, 0xd1, "f4d5058cd5ebb1c1bbb6a5bba8ed24a05389680894067d4ffabe06880021572f9cdb7019975ba7ad862be82e31d43e69cca713fd0bc8dde5814336b538f3220cfe99643adfdac26611f8b6736d26f24751ad02f9b4b1d050de2a8e62acfa369a151d723937e2234126be41a1c75ed0617e758961b097e098626006570b2fbb4d36874418b3ceec5168ef6e988a112329c8f761dfd7ed4e82ded7dbd47ecd3b7111501e48cfdd5342efdb15b67582ad7b715335e919b61c08c130f6a9629ea8008f9dc19ff7c5793f79a1eda342c68d145a"}, &(0x7f0000002e80)={0x20, 0x3, 0x1, 0x5}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002f00)={0xffffffffffffffff, 0xffffffffffffffff}) ftruncate(r14, 0x8) r19 = socket$inet_tcp(0x2, 0x1, 0x0) r20 = syz_open_dev$tty1(0xc, 0x4, 0x1) r21 = socket$packet(0x11, 0x3, 0x300) r22 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) lstat(&(0x7f0000003000)='./file0\x00', &(0x7f0000003040)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r9, 0xc01864c6, &(0x7f0000003100)={&(0x7f00000030c0)=[0x0, 0x0, 0x0], 0x3, 0x800, 0x0, 0xffffffffffffffff}) sendmmsg$unix(r13, &(0x7f0000008cc0)=[{{&(0x7f0000002f40)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000002fc0), 0x0, &(0x7f0000003240)=[@rights={{0x18, 0x1, 0x1, [r6, r15]}}, @rights={{0x34, 0x1, 0x1, [r11, r12, r19, r14, r12, r9, r8, r10, r20]}}, @rights={{0x24, 0x1, 0x1, [r13, r21, r22, r15, r17]}}, @cred={{0x1c, 0x1, 0x2, {r2, r23, 0xee01}}}, @rights={{0x2c, 0x1, 0x1, [r3, r24, r3, r14, 0xffffffffffffffff, r7, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r2}}}], 0xe8, 0x1}}, {{&(0x7f0000003340)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000004600)=[{&(0x7f00000033c0)="3c3476231bf59943a36fa135f7c788b90d53e913e53d3e38b7dec49fcb14a8b07498e626036a4c28b329a8f169e13427dfe9d7017c619d8273efcdd2037dce93fa60129d94256aee5bcaeea50072f4121ff7be91422e5024bdc7f13c815952df62eff2f7de02a8a51a98ca8de04fd5ef82cc003e097138303a425318ebaeed5800900b6651c37a0041e55c5afc5834396fa0bd23e1ebf7a8ca07edf44d8919983d4fc761ed40efb726f41dbe5ee9eb6d011e27d24de6ed32399ecce982f497bb6c52c184d5f4024dca7cfab44fff84261e6388121cf5ce0a37b393c0bcd933a42862d74889198405941cc1743ee6c81a", 0xf0}, {&(0x7f00000034c0)="d108b4dccc83dc05af80052e5757193f37", 0x11}, {&(0x7f0000003500)="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", 0x1000}, {&(0x7f0000004500)="bf4aa865f4acbec987afadb11060f125c29b98db36c78ecb4de226689fb33d9e630014fdc56c5f436e21cf6ad68c6e2c166fd385eada8545f823ac5b8a6806943e9e6bf9d25742996eb3a42d4d2639fe9f437af188e36cdfe0", 0x59}, {&(0x7f0000004580)="3064a27fe6142c2f8344f0a00f19f4a3df9dac4b9a61a9c4c11f010002b7f865", 0x20}, {&(0x7f00000045c0)="17f01cd4e367e1434c76b9797e6065d8", 0x10}], 0x6, 0x0, 0x0, 0x20000001}}, {{0x0, 0x0, &(0x7f0000004800)=[{&(0x7f0000004680)="a2ad119f304cbc0f69649a75300030442bc1dc75412b7813ac4a28e5", 0x1c}, {&(0x7f00000046c0)="f1f708939e1cd97f02208d70bad81aa50e7a2e2c15fec99aef50fd8cf428483f416c7a805f9fafa9226a83afa31909386c7cb4de3d5983e2fd9bf6e673c2619f1beccefe204608ac86ff458a7461e9035dd78a13588953edfc1a8973ec145ee1171d81e82785efa44797db7028aa280c634bbfccb3ff3d731387176b8abef7e735e28037579dea6540ce67b652bfe657469d47822e28ee92895f4e4215c34e8c07c9f32c6319c18914d28d301b2f818f1eb381b0cc206286e21ffdf7fc7c3840386ccab0a38d2a9a165b62a3fd9e989827c42a6d7b300683d47a9457ef402587f005197612", 0xe5}, {&(0x7f00000047c0)="e2a8127cf1695d22167b09bb3efce9ea251d648d16e2ce5b44767f9a189f95e93193ad74f46c2f145c900e", 0x2b}], 0x3, 0x0, 0x0, 0x4000000}}, {{0x0, 0x0, &(0x7f0000004a40)=[{&(0x7f0000004840)="858d93f0022a73680d76da51f76b7c66d3b64a9a2a8436c187a527aba1b20d46ac707dfed5a22a866d25cb2daf9489d0146f4935b8ed6faf9abace9c730af9762bf5f056084639513c7b0672e731e1c9eaeb3d5212b0da30ad4da862d89725478b1ffd49b18cf1d1f6bdede42cbdf1d00b18b3b9d83fa312e83a4d841de9de46b005e8f0e722d4ad5c100ffcf425233fb1c9658b089ae1505461b5b398bbe3bf2d82b395ad928dc2c95040cc61d209a76c4fdc9e368e68b0df0f7e0ffe88079f2c666295674e87481c422d39843c665f85904994689ae6da0ac2d1069c21cd00a2fc8f36ebc240d98a", 0xe9}, {&(0x7f0000004940)="31f6807aa7ded7295edabf96e9334ba5d91796402c4cace3b8c196b3108efe10c1bf9bb524b97e2b943ba7196e00745c48e197990881c8e9cb7741462aec3f9cdba2e251726e4df240011a3d33b84db1f8337a7bc71c03e8", 0x58}, {&(0x7f00000049c0)="71cf272a89748daf08f159210555d1e028a13907fa9b30702335656b9cf1c159fd9b31fc4b7be2cf92c440fe3aa3356eef6ceca360a68e5d0dbcda17d4ffe1ec29112dc4c1e607ec3c1d3b18407a3b10d1c8e584fc1053063b5d33b28c11f83e28e730d2dd5dc0c7470aec4e", 0x6c}], 0x3, &(0x7f0000004c80)=[@cred={{0x1c, 0x1, 0x2, {r5, 0x0, 0xee01}}}, @rights={{0x18, 0x1, 0x1, [r14, r11]}}, @cred={{0x1c, 0x1, 0x2, {r5}}}], 0x58, 0x1}}, {{&(0x7f0000004d00)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000004ec0)=[{&(0x7f0000004d80)="1953f4305e717c060fcfc16e9086e3e0ca37cbe07e17310d912087b38c4c4cce586b2df11cf1269a85c53cec28ec769092ab748308536708", 0x38}, {&(0x7f0000004dc0)="86bcfc5d37c5e8887c29c5573da55f73de33dbe3cccbe3bbad2c8f522565d0b293023c21b868796821127a378e04c5478f7a795c634b8aa819ddde6e66b95befe411117439548d06dd10a308c310c5091f3955e5705ad6d04b12dc2367ec22769a0762ad5bdf6a2ab846cc1b05d2972b13dd704b9386198794a6a6aaa54928c8278eec9a9ae7aa4dff24a5059f1b6740526cd4801d86065ab4687524b8b8a91f34756613b5772c485a079bed13b0de5fd8e2a9ef13d8d3e1feb29fc5a169cb0d626eaecde260b741e0da9be950347fd4f80bef9462e912876fab258e7fee60602de060ad0e693fc57ae86f715313e7f268db", 0xf2}], 0x2, &(0x7f0000005240)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r5, 0x0, 0xee01}}}, @rights={{0x18, 0x1, 0x1, [r18, r11]}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x14, 0x1, 0x1, [r17]}}, @rights={{0x24, 0x1, 0x1, [r8, r8, r17, r7, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r2, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r4}}}], 0xf8, 0x8001}}, {{0x0, 0x0, &(0x7f0000006700)=[{&(0x7f0000005340)="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", 0x1000}, {&(0x7f0000006340)="905184a0109c2541d689eaca13d816717ef1eaab5cafff266c8c68341ed26194b5bde7f7975a3b767c485386ab5118abc45f549f98eed864e514ec5d7189e09eae9a977600e214e6e4eef577f6fcee8d6a061e4684aa9784f3907da7d7a74289a9d401c9288ee7a7d7a3fa", 0x6b}, {&(0x7f00000063c0)="8476a6a4af53bc3efdc5bc3a13ecca72ad915a6fb1f38f1ed81e8708cb68fcf3f3849bd6a22a9482e20d12d9e92f23f23e295e7f00274d2a63ef83e2b364a04f243b1b9a497bba742657eec2384df81748c2140c5333b61be06207c42e56a15617f0029d0714dd815bcd0e7348792902883e1083524619320b5499ed43e807fdd53b820a811f6604ae10c2431cc428f7092c362c049ec5f3030af1a32c0a45f83313ce3ddcf7da507f8982a21ef152f74f93e9bf773615998e0e10a31fbeacaf6c6eef4da1fed627e7985bb6ec0032221da2c41b56d772c9f76abf5c6a8e6d9bf8b450ce6129771d1e0465bcef75647143", 0xf1}, {&(0x7f00000064c0)="faffaa31930d3c5faacd1dd02bd838652ee3b6d5cec8444faa53436af3e75022ca02607f00c986154f8bf89c60", 0x2d}, {&(0x7f0000006500)="bed190b2807942b6233381a0e4a1e98882cf44f2efb00e12c9966b948021cca5b1003f2739ff2e10b03c0d190be51bf88ca92b9a7844d183b3afdeea726afd1be160d67d2ed5bc0cfa7903c9b5b1ebfec5dc95ec068cdfcabbea843fea4506c96a0dc273d143b39fa2feddeafc018ee10f04f14539e9cc8f708c501102cbb1f901df16c991d901ad1f336acff88cf192f48e98deeab00671a5306092a625d75bc45be3e5a701d94436f3fdf1f55496f88948a39e96288ca4bd4a55134dee1a8569f7db444b7a1150c91a82e2068805d46f72c59c5ef58d4f87024e7ae3c17f74d957aeaa58ff9aa494", 0xe9}, {&(0x7f0000006600)="64e095205dc63df14c4a1197d555a55b15b747a5c263f139e3e5dd7372c015d93b0f63715fbfb4a4996467382e1a2f702e4fa807ce0779dc77e2408cb9a03eae1d2af6ce6ed98e26ce10a2285d2d2d9190b18aca4c48e8285f357fe5707e218c7cccd9ae0e717fae9bb5de8775f66cf74e50888d28595f77fa1965c8fadfdc", 0x7f}, {&(0x7f0000006680)="c406f0b738256355256604434e0226179bd85cca78189d28ac04dc69a399d417d8052db7faf62b989e3004c18a81bffb29f8a7d110f4acf8244feacf33e9d1b7a92aa2dd8dee3a41", 0x48}], 0x7, &(0x7f0000008b80)=[@rights={{0x30, 0x1, 0x1, [r13, 0xffffffffffffffff, r13, r6, r15, r11, r12, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r11, r6]}}, @rights={{0x20, 0x1, 0x1, [r0, r18, r18, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [r10, 0xffffffffffffffff, 0xffffffffffffffff, r11, r9]}}, @cred={{0x1c, 0x1, 0x2, {r4, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r5}}}, @cred={{0x1c, 0x1, 0x2, {r4}}}, @cred={{0x1c, 0x1, 0x2, {r1, 0x0, 0xffffffffffffffff}}}], 0x110, 0x4800}}], 0x6, 0x1) 6.870229399s ago: executing program 4 (id=1467): syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) (async, rerun: 64) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x22, 0x17, 0x4a, 0x20, 0x4b4, 0x861f, 0xf9d6, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x73, 0xa7, 0x7a}}]}}]}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff2}, {}, {0xa, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x400}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) (async) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f00000000c0)="010000000600275eaea4ca5826d8f50ee7f9ff0000006bb57ae0fffc5aadff07000088d18ee9cb1a75d14ff5cf5ad0ca816f40a8333c3532a19673b6dab6301fd45fb0393b6c91a6449faf9de0d0f990dbac85a3b278a5463e299aabc5b97b20e57a6bcb82dfe970afdaab4a", 0x6c, 0xffffffffffffffff) rt_sigqueueinfo(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xffffffff}) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x100}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="18001000", @ANYRES16=r6, @ANYBLOB="010000000000000000000300000004000180"], 0x18}}, 0x0) (async) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$poke(0x5, r7, &(0x7f0000000080), 0xffffffffffffffd) (async, rerun: 32) ptrace$ARCH_SHSTK_LOCK(0x1e, r7, 0x3, 0x5003) (rerun: 32) bind$alg(0xffffffffffffffff, 0x0, 0x0) (async) r8 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee5, 0x1000, 0xffffffff, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) r11 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, r11, 0x0, &(0x7f0000000340)='./file0\x00', 0xe, 0x208040, 0x23456}) (async) sendmsg$nl_xfrm(r1, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)=@getsa={0x1a8, 0x12, 0x10, 0x70bd28, 0x25dfdbfc, {@in6=@dev={0xfe, 0x80, '\x00', 0x8}, 0x4d5, 0xa, 0x3c}, [@algo_auth={0xe3, 0x1, {{'sha1-ce\x00'}, 0x4d8, "ee5df9e6cceab0e2a4cf18bc57b9789bfd89196b80b127247e921719d9bab0b8fd51f57adc9ea4f649decc9b509f2d185136572d9422152f6ff14bca3e7b713f47b1c911200f5f8b21e9922dc5acb49c31d4fb04f49bb89aff684ec0f99140ea77af3b8ccfc7f16adc09e639ba854dc4fd144a5cf9bdbd9d6da2572adecfc3b562d67347090656361969cf89bf253e5d2e4c8f5ae1da40b84d2ef2"}}, @mark={0xc, 0x15, {0x35075a, 0x951e}}, @tfcpad={0x8, 0x16, 0x2}, @lifetime_val={0x24, 0x9, {0x1, 0xfffffffffffffff8, 0x7}}, @lastused={0xc, 0xf, 0x7}, @encap={0x1c, 0x4, {0x3, 0x4e20, 0x4e20, @in=@rand_addr=0x64010101}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x800}, @address_filter={0x28, 0x1a, {@in=@loopback, @in6=@local, 0xa, 0x2c, 0x5}}, @policy_type={0xa, 0x10, {0x1}}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x4810}, 0x15) (async) io_uring_enter(r8, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) 6.647827316s ago: executing program 4 (id=1468): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote, r1}, 0x14) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000500)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=[@dstopts={{0x18, 0x29, 0x37, {0x4}}}, @pktinfo={{0x24, 0x29, 0x32, {@remote, r1}}}], 0x40}}], 0x1, 0x4000001) 6.548583019s ago: executing program 4 (id=1469): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)='u', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x881) (fail_nth: 15) r1 = dup(r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, 0x0, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) 6.489204637s ago: executing program 0 (id=1470): syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x2, 0x1, 0x803}}}, 0x7) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x31, &(0x7f0000007180), 0x3) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x1, 0xc8, @none, 0x0, 0xaa, 0x5, 0x7288, 0x1, 0x2}}}, 0x14) 6.092505857s ago: executing program 1 (id=1471): r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x7f9f, 0x0) ioctl$I2C_SMBUS(r0, 0x720, 0x0) syz_open_dev$vim2m(0x0, 0x7, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x2a, &(0x7f0000000100), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x5, 0xe4340000, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004106cd40cd060f011bd5000000010902"], 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 6.073458655s ago: executing program 4 (id=1472): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000040)={0x20, 0x1, 0x1, "ce"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) sched_setattr(r1, &(0x7f0000000080)={0x38, 0x0, 0x2, 0x6, 0x9, 0x1, 0x0, 0x10, 0x0, 0x6e}, 0x0) 6.072526526s ago: executing program 0 (id=1473): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d080009000200e8fe55a1180015000600142603600e120900210000000401a80016036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7ce000000000000000000", 0x6c}, {&(0x7f0000000540)="47e2ef3330b4efa56e2aed9961d244728046f7e077f2e17fe99eb02cc704ca74e513a8046b12c800061e2d1a3b750e5d29002c99980f4a0ccd7a793f2f41bf6f028eb2ad8ba2068150ea4164d3cc2563ae7aaa346f975c0bbc6150f0b4ad75d246ac5fecbd465371b5cf8316", 0x6c}], 0x2}, 0x8010) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) r3 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg(r3, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {0x0}, {&(0x7f0000001480)="5b36edc7600871bc6dcfed06d3ede244b93e2bb5b710453507f92dfa5dd2ba5efe9747b1cdb0bee7118a14f5d59c0f2e5504cd859ad07aaea6aa70d32bb13e43d76086fa643a4ab9b76efff69534261326c259b2c88e6fcbca536490258f8a", 0x5f}], 0x3}, 0x4000042) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r4, &(0x7f0000000180)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' 00000000000000000000\nVOLUME\nLINE\nMONITOR\nCD \'CD Capture\' 8'], 0x86) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) r6 = dup3(r5, r4, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r7, 0x40045532, &(0x7f00000000c0)=0x5) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDCTL_DSP_GETOSPACE(r8, 0x8010500c, &(0x7f0000000040)) sendmmsg(r6, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="f8bdcf9eb8848fb91af8b687c84a290a5627630f465803108d055552bdabd1f36803afd8cc178346c7bd39ae1581c9639138605c2ace9fb86c87b438174a079e533c5e16d2756e67e07c587b5764f276a958ff82db2eaa225f9c79d526649a0cfde2674e5b17ca45adf9789ddfc830dff7b3e6c93bd804da1ace7464ed9d082aec736f4859d94e0c953d56a0de3bbcad5fffc2694153282ad99c0cf0a1e374d5fbb82e359bdc74d2446c5931616db1b4bde0bb9dcfb27b719acdbcc0f5436abb495c052f5d768c82987942572b15b40512c09b48cf4120fa94588ea286f0410c51a15d", 0xe3}, {&(0x7f0000000400)="8f7c8d13555cd2c4ff503f3473eb3074571af9ca3f88f59b381768cf2fee39ebd04ff72fee187750ce231cdc7893df4b36e8ac30d16a599cbc9dc6ae296e259079000a6366772e99d58050d5d0e5200e0f3579e32c6529ff432758f5f7a704ca1bbb86a019a586b83a37e020b718c516075b7cb233", 0x75}, {&(0x7f00000005c0)="e89ac369898e5a2cfa658dca7467ac6735c12b6e84750695ca55107092e690f24ac253f325298936d28bff9b76093acd9f1e8428e86fead7703e8ed0837d696b36e016ec4d8630f3e6d18ebb6412c81a6a6c3f36d13817cf6939eaa39bccb6c3ccd85c9e200bb300422744f467fc83768e210623116e648456d1f8cc12e0ead4516d7c9a0c23fd77396ec11336c47cd51b2b1166cd9c37c6161b517a8f6888b7fafec4982b7e632c0224c9b7b3e427dba1544f341629385d055768e019ddb7fc23712ae21bbe9942798dda7c92040e93e3d629234597c19408682d257bf824c04edb213b40c4563f5ed39413545361bb5d", 0xf1}, {&(0x7f00000006c0)="28d88110f5567671b30ed68b9c33f5b0be709d54cf22543239fb11fdfc3ec12779cfe75e3c886ae21c32127d5a9dc4db46518d89db9112491fa8675955dcfab44f4ff728ee3e13b4d48d54416cf35be23fbae5593f50bae74bdae15be2e038166f29b4db15466e08908b776227674fa6842c50e115173363407b95e6a2c38c43675be3b8db5df6b959559a8ca07a95756c6a48b391eb0e4e6df01ba681b06c3e044e7725a2130bce04d8a7f1aa17e33f9c6879ab985a88aaacf1d5396cb8df8035fa30de", 0xc4}], 0x4, &(0x7f0000000980)=[{0x78, 0x114, 0x7, "749fc4e09dd0ab3744f36b023532c62beaffb93c0ee5681e18f44fa035788767d30c5011967c83824dbd24118d1094267138ae5a589dd49c49ef99d2c65178b361c35160ed86648a2a5fa5afb80f6d439dbcd33c7b53269c9398ce9ac3ecea969f6060"}, {0xc0, 0x118, 0x9, "7395c1675f9cbe54753faf48a7aa81aed2f25c541a13e475de2d595b468f784c1313fb04d1ecb5bb02edae20cccaf5a649c1a4c955af40a211e26f3df2ac2353d5d41c8bc11a372587c649d06ddfa9f6b6b16cf091b544dbf86cc293223aaa24a37ee55741b8f11fbc91ccd65c5286979dbac534425ef631ce6fe1ccf2115dea4db478b338e3e583fe237763b5a211c856ff8be9fb7306e3925982fc1eb6b39d0fc3c2c8f8f695d869e3"}, {0x38, 0x10d, 0x1, "fe221b2c9aee107bb19b45239f9a236c63100cec0a05b822d6253b12899e3bd3231051b8c32591ee"}, {0xe0, 0x29, 0x1, "9f4241278217d99b2b2bdce0366117f8e52aab267ca4c3e63281583468c98c6d66ca7e0b1ac41ee5b35a17a7be705368c9921004052cc973facadd6510695ae7923b2fe7e2c36dfcd1849859a10e09ee3ce9c01ec808b7cec3918b279237aa852d1482ba4d4ae82e1c25a9149dac4a6fa66eb029c3bca4ab0600641980f3578fcdfa17d48e2d0607e339cab08009ac07086cae323f33bead0ce3790f57a464395ffb582f1979ad90d2e1c8954efa18e63e9e0c4958659d0cbe5a6ea2d6d0fc9cebae1c88bf3148137b2d0b7b8a"}, {0xe8, 0x117, 0x81, "8d614f054c33cd26f4d48b98275ef138ae9d4a337df40ebdfdc244727002565b3542683cd9c4a988f9df55bb7ca0755edd41af9e667a7404e435ad2ab8499fc6162b961d44477f16fe1ffbc6b11c4b4e068ea846ff4510efb487a31ca7d4b20c2493c601160d27051382aad6cb7d41265c8e2fc6fdefbf72bd9bd4969ad2db3f6f406b951d61308bcf828fb88bf4a16463f1ec86da237bdf78e06bb8f7bd7eef848546d3f121891eef155baa718e96075a1b77fef6d284e82840a74ddb401a02e70ab7653c0b9ab628387828e57d8052d639294ffa"}], 0x338}}, {{&(0x7f0000000480)=@l2={0x1f, 0x9, @none, 0xffff}, 0x80, &(0x7f0000000e40)=[{&(0x7f00000007c0)="1b4f78afec24e6b1c9695f7fd15633e4d4c7f8d26fc36da99f36f3ad31fa4e3293ff820acfbf46361ba3aef3e6e5e98275136aebe7802fb77c188520b364553bc701e14530b66f1f6b1e2b851896", 0x4e}, {&(0x7f0000000840)="633826d6374577d05d0026fd7a86a8898889f07865be1b6662acb1ec3076784d626eeda0b115a91052fcfaba40c5f2cd10c596c2cf9925265fdfc8381399f8c6e6e3111b57d98fca8f01b3e41eeb7035fe061c5076cdac15475a36f6fe337c722623bd975ab513478a455e83fa2fd7dd71d9072b43b6265aeb1c2ff31a8774e58961e5bf2be058de64c0180f", 0x8c}, {&(0x7f0000000cc0)="d8129e9b40abc56f2b488477460180dfb44011defdcc61fa7fe45c2b573a4f3b9b6ba65572408f16e2294de038cfa897f92150dcc86c173d41976377545f833aebb800c383f0cc1ab1a7a3a1e0702e0ce09fe3fc192764aa6f7a9e0622005f961348f53281357b489dbab7916a0bc9f347865c50e707876bbc57cc480ed7c7516c079044a2601aea9ea731a9ed976fcb655e15eb3f7eb1f2e98d57803d8557d56a85110c38d42f0ab7cd50be3e2cb0c848284508feffa85ecfaf", 0xba}, {&(0x7f0000000500)}, {&(0x7f0000000900)="6e24c324c1babe5304ce7337600fd7340ffc1432b26dbb142c2c467a32bdaf50c8c02cb166dd59fb23373fcd01a0a2048aea956dcd2d59c44e", 0x39}, {&(0x7f0000000d80)="d9cae604b60ce5f0158528d01850215ceca5bc3d951881df06d6c9279fb6180606ff8d758119a303cb84a685755f5c3c970f320cba8bef2c9c4532b0a00018623be341362d017b6b54c662eac22abfa31ea13bc454eea00a7ae92cd8b467d0dc190856ab8d32761d2569211af218178c0b756dae18bfa598154ea8fd27cdc9c37e5d5ae442bf354875cdb951d51bd79d9e41bb9c1864da00070f0ab92091", 0x9e}], 0x6, &(0x7f0000000ec0)=[{0x50, 0x10d, 0x0, "ed0322946778c92a6d76be6e1f147cfb347155264c1c9ca74a995c07318eb005f571b1e6b760bd99ed8d9771892277d8de32aaa935fcb336aecd637b87"}, {0x88, 0x1, 0x4, "c2aceb991e0148ee14f25f1a04067ad815f23b9c34d155d383de6ffaed0e04397c009ba4d63b5d8097ee0fbbbde037c7e6107d94921b6f526c8c9bbc300c7dc25726c08fe73b96351f414e8342cec5885c13d6f389e0b64058572139de16dd99e80aeb9f1173e98763a1fe4e446ec75ab109"}, {0x88, 0x10b, 0x4, "ad019226f45306939cfeb58c0afae838922bfd227ba75418275df0d42abb60c43335d3d248aaa2aee4830c0e302447359ea33ec5bd1b15de07f22d07b02865d9cf570eeb87aefe267b557d45dadb6c484343481c77b8232debecf976f1d035e2aee20821b21dbfd2842c0b496372afce591bb802"}], 0x160}}], 0x2, 0x20000091) ioctl$SNDCTL_DSP_POST(r8, 0x5008, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(0xffffffffffffffff, 0x8002f515, &(0x7f0000000100)) 5.95192397s ago: executing program 3 (id=1474): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000000)=0x1ff, 0x4) sendto$inet(r0, 0x0, 0xffef, 0x20000000, &(0x7f0000000240)={0x2, 0x4e22, @remote}, 0x10) setsockopt$inet_int(r0, 0x11000000, 0xb, 0x0, 0x0) 5.826484546s ago: executing program 3 (id=1475): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x1003ff, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x2542, 0x4) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x20000000) recvfrom(r0, 0x0, 0x0, 0x2000, 0x0, 0x0) r1 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz2\x00', 0x2, 0x0) write$binfmt_format(r1, &(0x7f0000000080)='1\x00', 0x2) 5.766877611s ago: executing program 3 (id=1476): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000005c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040801}, 0x20008840) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x45f1, 0x4) recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0) (fail_nth: 15) 5.429786259s ago: executing program 3 (id=1477): socket$inet6_sctp(0xa, 0x1, 0x84) openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x204000, 0x0) syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000"], 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) write$dsp(r0, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x5) 5.328021615s ago: executing program 2 (id=1478): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="31032dbd7000ffa600000b19000008000300c0"], 0x1c}}, 0x0) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="110300bd7000fbdbdf25000008000100a7e97d0c03b59d63657a061f982a970fd717a92337f09ae4c1749e0233938c45682e17a27a04e7541d9eedcdd01a44691ed4a4092686fd6b7bbcbfb46166e53e74f8ace139ccfa069727866088af6bce05b366921bdc80a536f6538da0ae9cb80573cb7074d82cc74c37f6ca71364c668e86118ce4ca86708ce8e6a2a0595bccc422b748452c6b828a590ce56b92b9bfe8740bb751659b578d0452453ab4ae6e7331012a", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20}, 0x20000880) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c000000190a0104000000000000000002008000090002008c797a32000000000900010073797a30"], 0x2c}}, 0x8004) 5.084897169s ago: executing program 0 (id=1479): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x7fff}, 0x18) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000000c0)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000000680)={&(0x7f00000001c0)={0x2, 0x1, @multicast2}, 0xfffffffffffffe5f, 0x0, 0x4d, 0x0, 0x0, 0x40001}, 0x8000) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) syz_clone(0x60811, 0x0, 0x31, 0x0, 0x0, 0x0) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @empty}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) write$6lowpan_control(r3, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000000340)) readv(r5, &(0x7f0000003400)=[{0x0}, {&(0x7f00000003c0)=""/4096, 0x1000}, {0x0, 0xffffffab}, {0x0}, {0x0}], 0x5) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="030000000400000004000000060000000000", @ANYRES32, @ANYBLOB="000000000000004c079bdee560a8cd0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r6}, 0x48) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r7, 0x84, 0x20, &(0x7f0000000300), &(0x7f0000000380)=0x4) openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) munlockall() 4.978672193s ago: executing program 2 (id=1480): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0xc0984124, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) r4 = syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x1, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x80086601, 0x0) fsopen(&(0x7f0000000000)='ufs\x00', 0x1) r7 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r8 = fsmount(r7, 0x0, 0x0) r9 = openat$cgroup_pressure(r8, &(0x7f0000000080)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r9, &(0x7f0000000040)={'some', 0x20, 0x17e, 0x20, 0x100002}, 0x2f) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r11, &(0x7f0000000040)=0x900, 0x12) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'gretap0\x00', &(0x7f0000000440)={'erspan0\x00', r10, 0x10, 0x80, 0xdd7, 0x2, {{0x5, 0x4, 0x1, 0x9, 0x14, 0x66, 0x0, 0x2, 0x4, 0x0, @local, @rand_addr=0x64010101}}}}) sendmmsg$inet6(r0, &(0x7f0000000580)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Dd', 0x0) 3.727808314s ago: executing program 1 (id=1481): syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) rseq(&(0x7f0000000a40)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x87, @loopback, 0x4e24, 0x1, 'none\x00', 0x1, 0x32bd, 0x9}, {@loopback, 0x4e22, 0x2, 0xfffffffe, 0x4, 0x12d5c}}, 0x44) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x69, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0x10d000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000840)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000000)={0x5, 0x7, 0x9, 0x3, 0x12, "4bf8269dc8c718c9d46b6fed87700d14836709"}) write$UHID_INPUT(r4, &(0x7f0000001040)={0xc, {"a2e3ad21ed0d52f91b5d360887f70e06d038e7ff7fc6e5539b3272298b089b07081b4d090890e0878f0e1ac6e7049b334a959bfc9a240d2567f3988f7ef319520100ffe8d178708c523c921b1b9b39070d075d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc825d8e524b2451138e495bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546850a27af9544ae15a7e454dea05918b4fd42513f000000000000000a3621c56cea8d20fa911a0c41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bac9c76600025e19c9000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cfe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c198045651cf4778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdc80c47ee4f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2691491abf8ab9c015073014d9e08d4338b8780bdecd436cf0541e4505bc3a45237f104b962102de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78ff95b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd735892892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af0000807e0000000002d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5409711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5407000000e3ad038f2211f1033195563c7f93cd54b9094f226e78b271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b4051db55e0510a6e4114a53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005008000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a6d8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546def271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f00000000000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652770711935f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f42f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d664130bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599af40005b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fd30d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb84d9a88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678458fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000000000000000000000000bd700", 0x1000}}, 0x375) 3.20637641s ago: executing program 2 (id=1482): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) fcntl$setstatus(r1, 0x4, 0x40800) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fef000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) r3 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r3, 0x13) tkill(r3, 0x12) capset(&(0x7f0000000100)={0x19980330, r3}, &(0x7f0000000140)={0x2, 0x3, 0x3, 0xfffffffa, 0x2, 0x3}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) r4 = socket$alg(0x26, 0x5, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f00000028c0)={0x0, 0x28}}, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x800) recvmmsg(r5, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000640)=""/85, 0x55}, {0x0}], 0x2}, 0x4}], 0x100000, 0x10022, 0x0) io_uring_enter(r2, 0x221b, 0x7720, 0x16, 0x0, 0x0) 2.999848695s ago: executing program 4 (id=1483): socket$inet_smc(0x2b, 0x1, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) unshare(0x400) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x24, 0x0, &(0x7f0000000280)) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r2], 0x3c}}, 0x10) 2.725411229s ago: executing program 1 (id=1484): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) socket$xdp(0x2c, 0x3, 0x0) r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000000440), 0x0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, r1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) syz_open_dev$dri(0x0, 0x1, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000006700000000000a58000000060a0b040000000000000000020000002c0004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a30000000000900010073797a30000000000900020073797a320000000014000000113a30cd37707017b51578d716503feb7002b682512178e111a210419cc4f000f5af0cc96c4300"/164], 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/mem_sleep', 0xa0502, 0x49) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x8, r6, &(0x7f0000000180)="282fa8c2", 0x4, 0x5, 0x0, 0x0, r5}]) sendfile(r4, r5, 0x0, 0x20000023896) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x14c, 0x1a, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x70bd28, 0x3500, 0xa, 0x4}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "217d66d38547aa140db8a200000000c538c7cb7a"}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x880}, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000280)={{0x0, 0x2, 0x5, 0x2, 0x10000}, 0x4000000000000003, 0x8010080000000000, 0x3}) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000080)=0xfff, 0x4) setsockopt$inet_int(r8, 0x0, 0x1, &(0x7f0000000000)=0xffffff7e, 0x4) 2.137703479s ago: executing program 3 (id=1485): epoll_create1(0x0) epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x4000910, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="182ca8e5d78e0e000000000000000000"], &(0x7f0000000200)='GPL\x00', 0x7, 0xa4, &(0x7f0000000000)=""/164}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) gettid() r2 = signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0xffffffff7ffffffc]}, 0x8) readv(r2, &(0x7f0000000340)=[{&(0x7f0000006a40)=""/161, 0xa1}], 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r3 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r3, 0x2) r4 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r4, 0x20) 1.897856209s ago: executing program 0 (id=1486): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000040)=0xfffffffc, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@getchain={0x34, 0x66, 0x100, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xf, 0x8}, {0x10, 0xfff2}, {0x1, 0x7}}, [{0x8, 0xb, 0x7ef}, {0x8, 0xb, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x44018}, 0x0) r2 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x2, 0x402) read(r3, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x0) syz_emit_ethernet(0x6a, 0x0, 0x0) r4 = syz_open_procfs(0x0, 0x0) readv(r4, 0x0, 0x0) connect$qrtr(r4, 0x0, 0x0) r5 = fsopen(&(0x7f0000000040)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0xfffffffffffffd66, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032cbd7000ffdbdf250200200000000000de3e000008000200ac14141a"], 0x24}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x400c02, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 1.658415947s ago: executing program 2 (id=1487): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x2c, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x8}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x9}, @TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x9}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0xc6c3}, @TCA_HHF_QUANTUM={0x22, 0x2, 0x3008000}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c010}, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r4, &(0x7f0000000380)={&(0x7f00000000c0)={0xa, 0xa, @local={0xac, 0x14, 0x14, 0x64}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1, 0x0, 0x0, 0xa682c726}, 0x4044091) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x14, 0x5f8e0af0733be127, 0x14}) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f0000000140)) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 1.446326117s ago: executing program 1 (id=1488): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000040)=0xfffffffc, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@getchain={0x34, 0x66, 0x100, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xf, 0x8}, {0x10, 0xfff2}, {0x1, 0x7}}, [{0x8, 0xb, 0x7ef}, {0x8, 0xb, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x44018}, 0x0) r2 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x2, 0x402) read(r3, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x0) syz_emit_ethernet(0x6a, 0x0, 0x0) r4 = syz_open_procfs(0x0, 0x0) readv(r4, 0x0, 0x0) sendfile(r4, r4, &(0x7f0000000180)=0x2, 0x4) r5 = fsopen(&(0x7f0000000040)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0xfffffffffffffd66, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032cbd7000ffdbdf250200200000000000de3e000008000200ac14141a"], 0x24}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x400c02, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 1.249378276s ago: executing program 3 (id=1489): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) read(r2, &(0x7f0000000380)=""/46, 0xfffffeb4) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000200)={0x0, 0x27, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000080601080000000000000004000000040500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40086604, &(0x7f0000000040)={0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}) setsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, 0x0, &(0x7f0000000300)='syzkaller\x00'}, 0x94) socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010800000000000000000a0000000900010073797a31000000004c000000030a010100000000000000000a0000000a000700726f7574650000001400048008000240000000000800014010d8e8bd0900010073797a3100000000090003"], 0x94}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r6, 0x4080aebf, &(0x7f0000001600)={{0x2, 0x0, 0x80, {0xdddd1000, 0x1000, 0x1}}, "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", "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"}) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r7 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000eef76c20c80a01c3650d010203010902120001000010000904"], 0x0) syz_usb_control_io$uac1(r7, 0x0, 0x0) 419.337049ms ago: executing program 4 (id=1490): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) close(r0) 253.988105ms ago: executing program 2 (id=1491): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00000000c0)={@remote}, 0x14) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=[@dstopts={{0x18, 0x29, 0x37, {0x4}}}, @pktinfo={{0x24, 0x29, 0x32, {@remote}}}], 0x40}}], 0x1, 0x4000001) 0s ago: executing program 2 (id=1492): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000060a0b040000000000000000020000001c0005800800024000000002080002400000000608000140000081000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a2070897ef765eeecb339da7b7737b0df55ad350e37f62d1a9985f674d2909e38041b220cd4518c3aecc0be5a42506cf98d5c85f6e9a95dba07da169557cc750c626785b5"], 0x70}}, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x700, 0x0, 0x0) shutdown(r0, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000400)=ANY=[@ANYBLOB="5dd89e254aa1f7d9bd77e0e07752647f6a05826b121bf7a64aa1b89236159330dff808aa2dbbe251709d2c77f58ac4ee44b4f1939fa56a012e9d8a4e0f134cdcad8708d03a8258535abb21657724eba176d20dcb29b1e295daccc0705633923ac8ea13a964b21b59f11a375ed27462eacebc07ed9dbf8e0fff55be62faee920d07c921de10837c84e76e58c1fbe90505be9d39c05671f8cf18f8f108630ce4"], 0x0, 0x24}, 0x28) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="480000000414010028bd7000fedbdf250800010002000000080001000000000008000100000000000800010000000000080001000100000008000100020000000800010001000000cb02a93e47fa6008ec9398df8009459ba9508f6d2efa79b6354dbf2a0b1d4204e3b43467515a408854332c8155cecc28727049716e8ba0ae87e84e2102f07d4aa8c11688dac1b696fbd4785c36b8cb3e63db689b0c8a7ed7788986f35a7e69964863a76fce27c57691ebd68d166edf4f85b29c69a8fd6bbcf543cb1ef2941a8ec79b6674c04e014b7d3abf2fc04ce95dfce050df9f8374e2e5ff0c0cee63f14cc0a4beccdf56c054e42914a46afab82937876402db977753bbabe7d1efcf2bae"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x8044) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000580)={{{@in=@local, @in6=@dev}}, {{@in6=@initdev}, 0x0, @in=@multicast1}}, &(0x7f0000000140)=0xe8) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) socket$inet_sctp(0x2, 0x5, 0x84) open(0x0, 0x0, 0xc) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="12013f00000000407f04ffff0000000000010902240001000000000904000015030000000921400000000905e1a049d20c070411d0a2d804364878d9559f6988d86003efa185042789c4566d948eac6b5fe239e805bf327760f09d2b45124eb582f4629de9275bd1f9b0b28d6dd629838de9d0e0d8b6c7c3d6f27edb68aa8382fc239402b7e066f38b2c58879bff0c9b22374deee7c6b4b059d89a9f71b0a96f18cbc4b0ecfea1", @ANYRESOCT=0x0, @ANYRESHEX=r2], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0x0}, 0x0) r8 = syz_open_dev$hiddev(&(0x7f00000001c0), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r8, 0xc018480b, &(0x7f0000000040)={0x1, 0xffffffff, 0x6f94, 0x5, 0xa45a2b2e, 0x7fff}) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40004) poll(&(0x7f0000000340), 0x0, 0x3) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='ext4_lazy_itable_init\x00', r9, 0x0, 0x401}, 0x18) r10 = socket(0xa, 0x2, 0x0) connect$unix(r10, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e21}, 0x6e) kernel console output (not intermixed with test programs): B2.0 error while loading driver (-23) [ 497.332949][T10665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.341921][T10665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 497.906708][T10696] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 498.257490][ T5838] usb 3-1: new full-speed USB device number 120 using dummy_hcd [ 498.409820][ T5838] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 498.420512][ T5838] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 498.437533][ T5838] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 498.447514][ T5838] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.460119][ T5914] usb 2-1: USB disconnect, device number 104 [ 498.466994][ T5838] usb 3-1: config 0 descriptor?? [ 498.487263][ T5838] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 498.494065][ T5838] dvb-usb: bulk message failed: -22 (3/0) [ 498.502420][ T5838] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 498.534742][ T5838] dvb-usb: Artec T1 USB2.0 error while loading driver (-23) [ 498.547291][ T5838] dvb_usb_dibusb_mb 3-1:0.0: probe with driver dvb_usb_dibusb_mb failed with error -22 [ 498.570506][ T5838] dvb-usb: found a 'Artec T1 USB2.0 TVBOX (please check the warm ID)' in warm state. [ 498.580766][ T5838] dvb-usb: bulk message failed: -22 (3/0) [ 498.601830][ T5838] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 498.620511][ T5951] usb 4-1: USB disconnect, device number 83 [ 498.642682][ T5838] dvb-usb: Artec T1 USB2.0 TVBOX (please check the warm ID) error while loading driver (-23) [ 498.656689][ T5838] dvb_usb_dibusb_mc 3-1:0.0: probe with driver dvb_usb_dibusb_mc failed with error -23 [ 498.685624][ T5838] usb 3-1: USB disconnect, device number 120 [ 498.887579][ T5914] usb 2-1: new low-speed USB device number 105 using dummy_hcd [ 498.983892][ T5915] usb 1-1: USB disconnect, device number 97 [ 499.181563][ T5914] usb 2-1: unable to get BOS descriptor or descriptor too short [ 499.190157][ T5914] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 499.198048][ T5914] usb 2-1: can't read configurations, error -71 [ 499.367517][ T5915] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 499.529902][ T5915] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 499.604033][ T5901] usb 5-1: USB disconnect, device number 100 [ 499.626288][ T5915] usb 1-1: config 0 interface 0 has no altsetting 0 [ 499.638501][ T5915] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 499.662547][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.671116][ T5915] usb 1-1: Product: syz [ 499.684604][ T5915] usb 1-1: Manufacturer: syz [ 499.691982][ T5915] usb 1-1: SerialNumber: syz [ 499.701463][ T5915] usb 1-1: config 0 descriptor?? [ 499.834110][ T5915] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 499.888106][ T5915] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 499.930869][ T5915] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 error while loading driver (-23) [ 499.960436][ T5915] usb 1-1: USB disconnect, device number 98 [ 500.137672][ T5838] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 500.189097][T10729] FAULT_INJECTION: forcing a failure. [ 500.189097][T10729] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 500.205022][T10729] CPU: 1 UID: 0 PID: 10729 Comm: syz.1.1247 Not tainted syzkaller #0 PREEMPT(full) [ 500.205046][T10729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 500.205056][T10729] Call Trace: [ 500.205064][T10729] [ 500.205072][T10729] dump_stack_lvl+0x189/0x250 [ 500.205097][T10729] ? __pfx____ratelimit+0x10/0x10 [ 500.205120][T10729] ? __pfx_dump_stack_lvl+0x10/0x10 [ 500.205143][T10729] ? __pfx__printk+0x10/0x10 [ 500.205173][T10729] should_fail_ex+0x414/0x560 [ 500.205203][T10729] _copy_to_user+0x31/0xb0 [ 500.205226][T10729] simple_read_from_buffer+0xe1/0x170 [ 500.205256][T10729] proc_fail_nth_read+0x1b3/0x220 [ 500.205281][T10729] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 500.205305][T10729] ? rw_verify_area+0x2a6/0x4d0 [ 500.205327][T10729] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 500.205350][T10729] vfs_read+0x200/0xa30 [ 500.205384][T10729] ? __lock_acquire+0xab9/0xd20 [ 500.205408][T10729] ? __pfx_vfs_read+0x10/0x10 [ 500.205430][T10729] ? __might_fault+0xb0/0x130 [ 500.205468][T10729] ksys_read+0x145/0x250 [ 500.205493][T10729] ? __pfx_ksys_read+0x10/0x10 [ 500.205515][T10729] ? __secure_computing+0xe2/0x2a0 [ 500.205544][T10729] do_syscall_64+0xfa/0xfa0 [ 500.205566][T10729] ? lockdep_hardirqs_on+0x9c/0x150 [ 500.205589][T10729] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.205607][T10729] ? clear_bhb_loop+0x60/0xb0 [ 500.205628][T10729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.205646][T10729] RIP: 0033:0x7f88e338e0dc [ 500.205661][T10729] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 500.205676][T10729] RSP: 002b:00007f88e4238030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 500.205696][T10729] RAX: ffffffffffffffda RBX: 00007f88e35e5fa0 RCX: 00007f88e338e0dc [ 500.205714][T10729] RDX: 000000000000000f RSI: 00007f88e42380a0 RDI: 0000000000000000 [ 500.205726][T10729] RBP: 00007f88e4238090 R08: 0000000000000000 R09: 0000000000000000 [ 500.205737][T10729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 500.205747][T10729] R13: 00007f88e35e6038 R14: 00007f88e35e5fa0 R15: 00007f88e370fa28 [ 500.205776][T10729] [ 500.464746][ T5838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 500.485837][ T5838] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 500.512638][ T5838] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.522869][ T5838] usb 5-1: Product: syz [ 500.527035][ T5838] usb 5-1: Manufacturer: syz [ 500.532748][ T5838] usb 5-1: SerialNumber: syz [ 500.578355][ T5838] usb 5-1: config 0 descriptor?? [ 501.507129][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.514892][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.575575][T10744] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 502.456278][T10752] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1255'. [ 502.540884][T10761] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1258'. [ 502.636094][T10758] IPVS: length: 51 != 3960 [ 502.803500][T10766] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1257'. [ 502.907618][ T5914] usb 4-1: new full-speed USB device number 84 using dummy_hcd [ 503.059478][ T5914] usb 4-1: config 8 has an invalid interface number: 177 but max is 0 [ 503.069039][ T5914] usb 4-1: config 8 has no interface number 0 [ 503.077841][ T5914] usb 4-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 503.101341][ T5914] usb 4-1: config 8 interface 177 altsetting 9 endpoint 0x4 has invalid wMaxPacketSize 0 [ 503.107526][ T5838] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 503.120153][ T5914] usb 4-1: config 8 interface 177 has no altsetting 0 [ 503.127254][ T5914] usb 4-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 503.138661][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.153098][T10765] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 503.269897][ T5838] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 503.278896][ T5838] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 503.287674][ T5901] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 503.289604][ T5838] usb 2-1: config 0 has no interface number 0 [ 503.303205][ T5838] usb 2-1: too many endpoints for config 0 interface 117 altsetting 0: 239, using maximum allowed: 30 [ 503.315000][ T5838] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 503.326437][ T5838] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 239 [ 503.342386][ T5838] usb 2-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=61.46 [ 503.351626][ T5838] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.359800][ T5838] usb 2-1: Product: syz [ 503.364191][ T5838] usb 2-1: Manufacturer: syz [ 503.368950][ T5838] usb 2-1: SerialNumber: syz [ 503.371424][ T5914] usb 4-1: string descriptor 0 read error: -71 [ 503.381878][ T5838] usb 2-1: config 0 descriptor?? [ 503.398190][ T5914] ir_toy 4-1:8.177: required endpoints not found [ 503.414369][ T5838] HFC-S_USB 2-1:0.117: probe with driver HFC-S_USB failed with error -5 [ 503.417547][ T5914] usb 4-1: USB disconnect, device number 84 [ 503.449844][ T5901] usb 1-1: Using ep0 maxpacket: 16 [ 503.461850][ T5901] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 503.472561][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.481075][ T5901] usb 1-1: Product: syz [ 503.485285][ T5901] usb 1-1: Manufacturer: syz [ 503.490401][ T5901] usb 1-1: SerialNumber: syz [ 503.497097][ T5901] usb 1-1: config 0 descriptor?? [ 503.506466][ T5901] visor 1-1:0.0: Sony Clie 3.5 converter detected [ 503.647930][ T5914] usb 5-1: USB disconnect, device number 101 [ 503.649960][ T5838] usb 2-1: USB disconnect, device number 107 [ 503.715646][ T5901] usb 1-1: clie_3_5_startup: get config number failed: -71 [ 503.725348][ T5901] visor 1-1:0.0: probe with driver visor failed with error -71 [ 503.749153][ T5901] usb 1-1: USB disconnect, device number 99 [ 504.157471][ T5914] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 504.231652][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 504.231669][ T30] audit: type=1800 audit(1762970576.839:1008): pid=10782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1266" name="file1" dev="tmpfs" ino=1373 res=0 errno=0 [ 504.316548][T10784] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 504.357482][ T5914] usb 5-1: Using ep0 maxpacket: 8 [ 504.385526][ T5914] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 504.426372][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.453059][T10794] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1269'. [ 504.526563][ T5914] pvrusb2: Hardware description: Terratec Grabster AV400 [ 504.549314][ T5914] pvrusb2: ********** [ 504.557871][ T5838] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 504.568838][ T5914] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 504.605666][ T5914] pvrusb2: Important functionality might not be entirely working. [ 504.629966][ T5914] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 504.668932][ T5914] pvrusb2: ********** [ 504.713066][ T5838] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 504.723833][ T5838] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.747550][ T5838] usb 1-1: Product: syz [ 504.749626][ T2346] pvrusb2: Invalid write control endpoint [ 504.751722][ T5838] usb 1-1: Manufacturer: syz [ 504.751741][ T5838] usb 1-1: SerialNumber: syz [ 504.784343][ T5838] usb 1-1: config 0 descriptor?? [ 504.930451][ T2346] pvrusb2: Invalid write control endpoint [ 504.944250][ T2346] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 504.944276][ T30] audit: type=1326 audit(1762970577.549:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10791 comm="syz.1.1270" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f88e338f6c9 code=0x0 [ 504.977333][ T2346] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 504.985066][ T2346] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 505.007941][T10778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.018861][T10778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.046313][ T2346] pvrusb2: Device being rendered inoperable [ 505.062666][ T2346] cx25840 16-0044: Unable to detect h/w, assuming cx23887 [ 505.076226][ T2346] cx25840 16-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 505.096184][ T2346] pvrusb2: Attached sub-driver cx25840 [ 505.103496][ T2346] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 505.121148][ T2346] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 505.155666][T10803] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1272'. [ 505.201074][T10789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.224170][T10789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.654656][ T5838] usb 1-1: Firmware version (0.0) predates our first public release. [ 505.692528][ T5838] usb 1-1: Please update to version 0.2 or newer [ 505.786627][ T5838] usb 1-1: USB disconnect, device number 100 [ 505.947513][ T5901] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 506.105421][ T5914] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 506.129789][ T5901] usb 4-1: config 0 has no interfaces? [ 506.135326][ T5901] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 506.161041][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.183232][ T5901] usb 4-1: config 0 descriptor?? [ 506.289785][ T5914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 506.301239][ T5914] usb 2-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 506.326777][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.337191][T10827] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 506.357058][ T5914] usb 2-1: config 0 descriptor?? [ 506.405896][ T5951] usb 4-1: USB disconnect, device number 85 [ 506.569993][T10825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.578853][T10825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.765340][ T5901] usb 5-1: USB disconnect, device number 102 [ 506.795153][ T5914] holtek 0003:1241:5015.0024: unknown main item tag 0x0 [ 506.846515][ T5914] holtek 0003:1241:5015.0024: hidraw0: USB HID v0.00 Device [HID 1241:5015] on usb-dummy_hcd.1-1/input0 [ 506.865936][ T5914] holtek 0003:1241:5015.0024: no inputs found [ 506.871865][T10832] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1282'. [ 506.993642][T10825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 507.009406][T10825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 507.018492][T10836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 507.030488][T10836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 507.056405][ T5887] usb 2-1: USB disconnect, device number 108 [ 507.219018][ T5914] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 507.262792][ T30] audit: type=1326 audit(1762970579.869:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10843 comm="syz.0.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f364898f6c9 code=0x7ffc0000 [ 507.439112][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 507.448386][ T30] audit: type=1326 audit(1762970579.869:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10843 comm="syz.0.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f364898f6c9 code=0x7ffc0000 [ 507.567306][ T30] audit: type=1326 audit(1762970579.869:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10843 comm="syz.0.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f364898f6c9 code=0x7ffc0000 [ 507.614476][ T5914] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 507.642813][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.666173][ T5914] usb 3-1: Product: syz [ 507.670576][ T5887] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 507.680274][ T5914] usb 3-1: Manufacturer: syz [ 507.708122][ T5914] usb 3-1: SerialNumber: syz [ 507.775466][ T5914] usb 3-1: config 0 descriptor?? [ 507.797559][ T30] audit: type=1326 audit(1762970579.869:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10843 comm="syz.0.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f364898f6c9 code=0x7ffc0000 [ 507.853004][ T30] audit: type=1326 audit(1762970579.869:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10843 comm="syz.0.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f364898f6c9 code=0x7ffc0000 [ 507.950823][ T30] audit: type=1326 audit(1762970579.869:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10843 comm="syz.0.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f364898f6c9 code=0x7ffc0000 [ 507.977558][ T5887] usb 4-1: config 0 has no interfaces? [ 507.988010][ T5887] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 508.007265][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.018777][ T30] audit: type=1326 audit(1762970579.869:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10843 comm="syz.0.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f364898f6c9 code=0x7ffc0000 [ 508.061842][ T5887] usb 4-1: config 0 descriptor?? [ 508.068475][ T30] audit: type=1326 audit(1762970579.869:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10843 comm="syz.0.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f364898f6c9 code=0x7ffc0000 [ 508.311783][ T5914] usb 4-1: USB disconnect, device number 86 [ 508.445904][T10857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.455202][T10857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.846723][ T5887] usb 3-1: USB disconnect, device number 121 [ 510.457696][ T5914] usb 4-1: new full-speed USB device number 87 using dummy_hcd [ 510.590051][ T5915] usb 1-1: new low-speed USB device number 101 using dummy_hcd [ 510.617926][ T5838] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 510.657463][ T5887] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 510.756548][ T5914] usb 4-1: no configurations [ 510.765676][ T5914] usb 4-1: can't read configurations, error -22 [ 510.807458][ T5887] usb 3-1: Using ep0 maxpacket: 8 [ 510.832588][ T5838] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 510.904050][ T5887] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 510.905064][ T5838] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 510.913398][ T5914] usb 4-1: new full-speed USB device number 88 using dummy_hcd [ 510.922424][ T5838] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.930233][ T5901] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 510.950177][T10882] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3693406402 (118189004864 ns) > initial count (17453120 ns). Using initial count to start timer. [ 511.008434][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.037938][ T5838] usb 2-1: Product: syz [ 511.041652][ T5887] pvrusb2: Hardware description: Terratec Grabster AV400 [ 511.190875][ T5887] pvrusb2: ********** [ 511.194911][ T5887] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 511.208019][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 511.225214][ T5887] pvrusb2: Important functionality might not be entirely working. [ 511.225372][ T5838] usb 2-1: Manufacturer: syz [ 511.234384][ T5887] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 511.273765][ T5901] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 511.308850][ T5914] usb 4-1: no configurations [ 511.313547][ T5838] usb 2-1: SerialNumber: syz [ 511.317432][ T5914] usb 4-1: can't read configurations, error -22 [ 511.327323][ T5838] usb 2-1: config 0 descriptor?? [ 511.328201][ T5887] pvrusb2: ********** [ 511.347496][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.376317][ T5914] usb usb4-port1: attempt power cycle [ 511.402138][ T5901] usb 5-1: Product: syz [ 511.473769][ T2346] pvrusb2: Invalid write control endpoint [ 511.499036][ T5901] usb 5-1: Manufacturer: syz [ 511.510134][ T5901] usb 5-1: SerialNumber: syz [ 511.530398][ T5901] usb 5-1: config 0 descriptor?? [ 511.621785][T10878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.634726][T10878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.681753][ T5915] usb 1-1: unable to get BOS descriptor or descriptor too short [ 511.694230][ T5915] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 511.704412][ T5915] usb 1-1: can't read configurations, error -71 [ 511.754654][ T2346] pvrusb2: Invalid write control endpoint [ 511.783677][ T2346] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 511.797236][ T2346] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 511.805863][ T2346] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 511.816554][ T2346] pvrusb2: Device being rendered inoperable [ 511.824585][ T5914] usb 4-1: new full-speed USB device number 89 using dummy_hcd [ 511.833882][ T2346] cx25840 16-0044: Unable to detect h/w, assuming cx23887 [ 511.841239][ T2346] cx25840 16-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 511.851929][ T5914] usb 4-1: no configurations [ 511.856576][ T5914] usb 4-1: can't read configurations, error -22 [ 511.873923][ T2346] pvrusb2: Attached sub-driver cx25840 [ 511.879754][ T2346] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 511.890394][ T2346] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 511.931124][T10894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.946299][T10894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.997489][ T5914] usb 4-1: new full-speed USB device number 90 using dummy_hcd [ 512.019296][ T5914] usb 4-1: no configurations [ 512.023918][ T5914] usb 4-1: can't read configurations, error -22 [ 512.039928][ T5914] usb usb4-port1: unable to enumerate USB device [ 512.160899][T10894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.170349][T10894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.610785][T10903] netdevsim netdevsim3: Firmware load for './cgroup/../file0' refused, path contains '..' component [ 512.747780][ T5915] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 512.902165][ T5915] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 512.923717][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.932253][ T5915] usb 1-1: Product: syz [ 512.937444][ T5915] usb 1-1: Manufacturer: syz [ 512.942456][ T5915] usb 1-1: SerialNumber: syz [ 513.001625][ T5914] usb 3-1: USB disconnect, device number 122 [ 513.107634][ T10] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 513.287492][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 513.296435][ T10] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 513.313080][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.361235][ T10] pvrusb2: Hardware description: Terratec Grabster AV400 [ 513.374711][ T10] pvrusb2: ********** [ 513.380709][ T5915] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 513.414331][ T5951] usb 5-1: USB disconnect, device number 103 [ 513.430453][ T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 513.445725][ T5915] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 513.481573][ T10] pvrusb2: Important functionality might not be entirely working. [ 513.481591][ T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 513.481603][ T10] pvrusb2: ********** [ 513.636093][ T2346] pvrusb2: Invalid write control endpoint [ 513.658396][ T10] usb 2-1: USB disconnect, device number 109 [ 513.828085][ T2346] pvrusb2: Invalid write control endpoint [ 513.853751][T10908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.862284][ T2346] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 513.909754][ T2346] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 513.911001][T10908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.932471][ T2346] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 513.998479][ T2346] pvrusb2: Device being rendered inoperable [ 514.006435][ T2346] cx25840 16-0044: Unable to detect h/w, assuming cx23887 [ 514.034826][ T2346] cx25840 16-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 514.061308][ T2346] pvrusb2: Attached sub-driver cx25840 [ 514.076792][ T2346] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 514.109908][ T2346] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 514.157551][ T5887] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 514.327554][ T5887] usb 2-1: Using ep0 maxpacket: 8 [ 514.363057][ T5887] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 514.372513][ T5887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.422272][ T5887] pvrusb2: Hardware description: Terratec Grabster AV400 [ 514.448341][ T5887] pvrusb2: ********** [ 514.476462][ T5887] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 514.507308][ T5887] pvrusb2: Important functionality might not be entirely working. [ 514.530562][ T5887] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 514.579963][ T5887] pvrusb2: ********** [ 514.635395][ T2346] pvrusb2: Invalid write control endpoint [ 514.904455][ T2346] pvrusb2: Invalid write control endpoint [ 514.913403][ T2346] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 514.922807][ T2346] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 514.931117][ T5915] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPIPE [ 514.931357][ T2346] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 514.961630][T10920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.991191][T10920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.999415][ T2346] pvrusb2: Device being rendered inoperable [ 515.005925][ T2346] cx25840 17-0044: Unable to detect h/w, assuming cx23887 [ 515.035418][ T2346] cx25840 17-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 515.051281][ T2346] pvrusb2: Attached sub-driver cx25840 [ 515.057270][ T2346] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 515.070529][ T2346] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 515.265252][ T5915] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -EPROTO [ 515.283247][ T5915] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 515.332032][ T5915] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 515.390319][ T5915] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 515.427753][ T5914] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 515.466303][ T5915] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 515.520009][ T5915] usb 1-1: USB disconnect, device number 102 [ 515.727452][ T5914] usb 5-1: Using ep0 maxpacket: 16 [ 515.804180][ T5901] usb 4-1: USB disconnect, device number 91 [ 515.853422][T10933] openvswitch: netlink: Actions may not be safe on all matching packets [ 516.161220][T10928] Bluetooth: hci2: command 0x0406 tx timeout [ 516.698044][ T89] usb 1-1: new full-speed USB device number 103 using dummy_hcd [ 516.783654][ T5951] usb 2-1: USB disconnect, device number 110 [ 516.872626][ T89] usb 1-1: no configurations [ 516.877449][ T89] usb 1-1: can't read configurations, error -22 [ 517.035930][ T89] usb 1-1: new full-speed USB device number 104 using dummy_hcd [ 517.157510][ T5915] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 517.228993][ T89] usb 1-1: no configurations [ 517.233732][ T89] usb 1-1: can't read configurations, error -22 [ 517.242375][ T89] usb usb1-port1: attempt power cycle [ 517.307699][ T5915] usb 4-1: Using ep0 maxpacket: 32 [ 517.314760][ T5915] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 517.329749][ T5915] usb 4-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 517.344759][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.368312][ T5915] usb 4-1: Product: syz [ 517.377932][ T5915] usb 4-1: Manufacturer: syz [ 517.389809][ T5915] usb 4-1: SerialNumber: syz [ 517.412380][ T5915] usb 4-1: config 0 descriptor?? [ 517.436836][ T5915] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 517.517563][ T10] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 517.597503][ T89] usb 1-1: new full-speed USB device number 105 using dummy_hcd [ 517.618987][ T89] usb 1-1: no configurations [ 517.623621][ T89] usb 1-1: can't read configurations, error -22 [ 517.628552][T10946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 517.639091][T10947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 517.647925][T10947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 517.655981][T10946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 517.727468][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 517.738399][ T10] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 517.749555][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.772686][ T10] pvrusb2: Hardware description: Terratec Grabster AV400 [ 517.780113][ T10] pvrusb2: ********** [ 517.784258][ T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 517.796670][ T10] pvrusb2: Important functionality might not be entirely working. [ 517.809701][ T89] usb 1-1: new full-speed USB device number 106 using dummy_hcd [ 517.839889][ T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 517.853013][ T89] usb 1-1: no configurations [ 517.857953][ T89] usb 1-1: can't read configurations, error -22 [ 517.867092][ T89] usb usb1-port1: unable to enumerate USB device [ 517.951573][ T10] pvrusb2: ********** [ 518.051543][ T2346] pvrusb2: Invalid write control endpoint [ 518.109785][ T5915] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71 [ 518.116709][ T5915] gspca_pac7302 4-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 518.141965][ T5915] usb 4-1: USB disconnect, device number 92 [ 518.167501][ T5901] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 518.257289][ T5914] usb 5-1: unable to get BOS descriptor or descriptor too short [ 518.282891][ T5914] usb 5-1: no configurations [ 518.292527][ T5914] usb 5-1: can't read configurations, error -22 [ 518.334464][ T2346] pvrusb2: Invalid write control endpoint [ 518.364418][T10956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 518.373679][T10956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 518.382937][ T2346] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 518.415479][ T2346] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 518.426605][ T2346] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 518.454483][ T2346] pvrusb2: Device being rendered inoperable [ 518.464191][ T2346] cx25840 16-0044: Unable to detect h/w, assuming cx23887 [ 518.475711][ T2346] cx25840 16-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 518.489957][ T5901] usb 3-1: config 0 has no interfaces? [ 518.495523][ T5901] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 518.505142][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.664436][ T2346] pvrusb2: Attached sub-driver cx25840 [ 518.670033][ T2346] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 518.723187][ T2346] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 518.733489][ T5901] usb 3-1: config 0 descriptor?? [ 518.949490][ T5901] usb 3-1: USB disconnect, device number 123 [ 519.248830][T10966] input: syz0 as /devices/virtual/input/input55 [ 519.713360][T10973] netlink: 'syz.4.1316': attribute type 12 has an invalid length. [ 519.847106][ T5914] IPVS: starting estimator thread 0... [ 519.854435][T10977] IPVS: lc: FWM 3 0x00000003 - no destination available [ 519.916506][ T5201] Dev loop6: unable to read RDB block 7 [ 519.927405][ T5201] loop6: AHDI p1 p2 p3 [ 519.941261][ T5201] loop6: partition table partially beyond EOD, truncated [ 519.948441][T10978] IPVS: using max 52 ests per chain, 124800 per kthread [ 519.990075][ T5201] loop6: p1 start 926365495 is beyond EOD, truncated [ 520.015278][ T5201] loop6: p2 size 116 extends beyond EOD, truncated [ 520.067466][ T5915] usb 2-1: USB disconnect, device number 111 [ 520.217539][ T5901] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 520.327445][ T5914] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 520.747702][ T5901] usb 4-1: Using ep0 maxpacket: 16 [ 520.772851][ T5901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 520.823433][ T5914] usb 5-1: Using ep0 maxpacket: 32 [ 520.842572][ T5914] usb 5-1: config 0 has no interfaces? [ 520.867926][ T5901] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 520.877138][ T5914] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 520.886304][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.894600][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.902844][ T5901] usb 4-1: Product: syz [ 520.911731][ T5901] usb 4-1: Manufacturer: syz [ 520.926862][ T5914] usb 5-1: config 0 descriptor?? [ 520.942443][ T5901] usb 4-1: SerialNumber: syz [ 520.965680][ T5901] usb 4-1: config 0 descriptor?? [ 520.977519][ T5901] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 521.017303][ T5901] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 521.163643][ T89] usb 5-1: USB disconnect, device number 106 [ 521.650304][ T5901] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 521.967599][ T10] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 522.367895][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 522.374626][ T10] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 522.386602][ T10] usb 1-1: config 0 has no interface number 0 [ 522.400038][ T10] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 522.416978][ T10] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 522.479133][ T10] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 522.495306][ T5901] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 522.507511][ T5901] em28xx 4-1:0.0: board has no eeprom [ 522.513801][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.517469][ T89] usb 5-1: new full-speed USB device number 107 using dummy_hcd [ 522.548395][ T10] usb 1-1: config 0 descriptor?? [ 522.587501][ T5901] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 522.595490][ T5901] em28xx 4-1:0.0: dvb set to bulk mode. [ 522.607773][ T5914] em28xx 4-1:0.0: Binding DVB extension [ 522.760998][ T89] usb 5-1: no configurations [ 522.761544][ T5901] usb 4-1: USB disconnect, device number 93 [ 522.765772][ T89] usb 5-1: can't read configurations, error -22 [ 522.824804][ T5901] em28xx 4-1:0.0: Disconnecting em28xx [ 522.842416][ T5914] em28xx 4-1:0.0: Registering input extension [ 522.851250][ T5901] em28xx 4-1:0.0: Closing input extension [ 522.884420][ T5901] em28xx 4-1:0.0: Freeing device [ 522.957579][ T89] usb 5-1: new full-speed USB device number 108 using dummy_hcd [ 523.120644][ T89] usb 5-1: no configurations [ 523.130349][ T89] usb 5-1: can't read configurations, error -22 [ 523.138362][ T89] usb usb5-port1: attempt power cycle [ 523.168230][ T10] uclogic 0003:28BD:0071.0025: failed retrieving string descriptor #100: -71 [ 523.168321][ T10] uclogic 0003:28BD:0071.0025: failed retrieving pen parameters: -71 [ 523.168362][ T10] uclogic 0003:28BD:0071.0025: pen probing failed: -71 [ 523.194065][ T10] uclogic 0003:28BD:0071.0025: failed probing parameters: -71 [ 523.194138][ T10] uclogic 0003:28BD:0071.0025: probe with driver uclogic failed with error -71 [ 523.199645][ T10] usb 1-1: USB disconnect, device number 107 [ 523.487494][ T89] usb 5-1: new full-speed USB device number 109 using dummy_hcd [ 523.508715][ T89] usb 5-1: no configurations [ 523.513348][ T89] usb 5-1: can't read configurations, error -22 [ 523.647519][ T89] usb 5-1: new full-speed USB device number 110 using dummy_hcd [ 523.668629][ T89] usb 5-1: no configurations [ 523.673256][ T89] usb 5-1: can't read configurations, error -22 [ 523.680018][ T89] usb usb5-port1: unable to enumerate USB device [ 524.087476][ T89] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 524.237562][ T10] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 524.247842][ T89] usb 1-1: config 0 has no interfaces? [ 524.253346][ T89] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 524.263178][ T89] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.273163][ T89] usb 1-1: config 0 descriptor?? [ 524.367520][ T10] usb 3-1: device descriptor read/64, error -71 [ 524.485846][ T89] usb 1-1: USB disconnect, device number 108 [ 524.607652][ T10] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 524.737532][ T10] usb 3-1: device descriptor read/64, error -71 [ 524.857246][ T10] usb usb3-port1: attempt power cycle [ 525.073886][T11037] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1333'. [ 525.118271][ T89] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 525.207704][ T10] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 525.228422][ T10] usb 3-1: device descriptor read/8, error -71 [ 525.357541][ T89] usb 2-1: Using ep0 maxpacket: 8 [ 525.375188][ T89] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 525.393479][ T89] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.572152][ T10] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 525.717896][ T10] usb 3-1: device descriptor read/8, error -71 [ 525.959809][ T89] pvrusb2: Hardware description: Terratec Grabster AV400 [ 525.966915][ T89] pvrusb2: ********** [ 526.059265][ T10] usb usb3-port1: unable to enumerate USB device [ 526.068250][ T89] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 526.103300][ T89] pvrusb2: Important functionality might not be entirely working. [ 526.296708][ T89] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 526.308681][ T89] pvrusb2: ********** [ 526.465381][T11047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.482327][T11047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.517543][ T2346] pvrusb2: Invalid write control endpoint [ 526.673235][ T2346] pvrusb2: Invalid write control endpoint [ 526.684962][ T2346] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 526.714308][ T2346] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 526.731706][ T2346] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 526.752074][ T2346] pvrusb2: Device being rendered inoperable [ 526.758442][ T2346] cx25840 16-0044: Unable to detect h/w, assuming cx23887 [ 526.765597][ T2346] cx25840 16-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 526.778919][ T2346] pvrusb2: Attached sub-driver cx25840 [ 526.784509][ T2346] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 526.795871][ T2346] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 526.819866][T11050] netlink: 'syz.0.1336': attribute type 2 has an invalid length. [ 527.087160][T11057] FAULT_INJECTION: forcing a failure. [ 527.087160][T11057] name failslab, interval 1, probability 0, space 0, times 0 [ 527.126459][T11057] CPU: 1 UID: 0 PID: 11057 Comm: syz.0.1338 Not tainted syzkaller #0 PREEMPT(full) [ 527.126486][T11057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 527.126497][T11057] Call Trace: [ 527.126505][T11057] [ 527.126514][T11057] dump_stack_lvl+0x189/0x250 [ 527.126534][T11057] ? __pfx____ratelimit+0x10/0x10 [ 527.126547][T11057] ? __pfx_dump_stack_lvl+0x10/0x10 [ 527.126560][T11057] ? __pfx__printk+0x10/0x10 [ 527.126572][T11057] ? __mutex_trylock_common+0x153/0x260 [ 527.126588][T11057] should_fail_ex+0x414/0x560 [ 527.126606][T11057] should_failslab+0xa8/0x100 [ 527.126618][T11057] __kmalloc_cache_noprof+0x6f/0x6f0 [ 527.126632][T11057] ? __hw_addr_add_ex+0x1f4/0x770 [ 527.126647][T11057] __hw_addr_add_ex+0x1f4/0x770 [ 527.126661][T11057] dev_addr_init+0x14f/0x230 [ 527.126674][T11057] ? __pfx_dev_addr_init+0x10/0x10 [ 527.126698][T11057] alloc_netdev_mqs+0x2b1/0x11b0 [ 527.126709][T11057] ? __pfx_vxlan_setup+0x10/0x10 [ 527.126728][T11057] rtnl_create_link+0x31f/0xd10 [ 527.126744][T11057] rtnl_newlink_create+0x25c/0xb00 [ 527.126757][T11057] ? __lock_acquire+0xab9/0xd20 [ 527.126770][T11057] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 527.126782][T11057] ? __pfx___mutex_lock+0x10/0x10 [ 527.126801][T11057] ? ns_capable+0x8a/0xf0 [ 527.126815][T11057] rtnl_newlink+0x16e4/0x1c80 [ 527.126830][T11057] ? netlink_deliver_tap+0x19c/0x1b0 [ 527.126846][T11057] ? __pfx_rtnl_newlink+0x10/0x10 [ 527.126872][T11057] ? kasan_quarantine_put+0xdd/0x220 [ 527.126886][T11057] ? lockdep_hardirqs_on+0x9c/0x150 [ 527.126902][T11057] ? nlmon_xmit+0xb0/0x100 [ 527.126912][T11057] ? kmem_cache_free+0x19b/0x690 [ 527.126937][T11057] ? __local_bh_enable_ip+0x12d/0x1c0 [ 527.126955][T11057] ? lockdep_hardirqs_on+0x9c/0x150 [ 527.126976][T11057] ? __local_bh_enable_ip+0x12d/0x1c0 [ 527.126993][T11057] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 527.127015][T11057] ? __dev_queue_xmit+0x27b/0x3b50 [ 527.127032][T11057] ? __dev_queue_xmit+0x27b/0x3b50 [ 527.127050][T11057] ? __dev_queue_xmit+0x27b/0x3b50 [ 527.127070][T11057] ? __dev_queue_xmit+0x1d79/0x3b50 [ 527.127094][T11057] ? __lock_acquire+0xab9/0xd20 [ 527.127136][T11057] ? __pfx_rtnl_newlink+0x10/0x10 [ 527.127151][T11057] rtnetlink_rcv_msg+0x7cf/0xb70 [ 527.127167][T11057] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 527.127180][T11057] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 527.127196][T11057] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 527.127218][T11057] netlink_rcv_skb+0x208/0x470 [ 527.127227][T11057] ? rcu_is_watching+0x15/0xb0 [ 527.127238][T11057] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 527.127253][T11057] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 527.127273][T11057] ? netlink_deliver_tap+0x2e/0x1b0 [ 527.127286][T11057] netlink_unicast+0x82f/0x9e0 [ 527.127304][T11057] ? __pfx_netlink_unicast+0x10/0x10 [ 527.127318][T11057] ? netlink_sendmsg+0x642/0xb30 [ 527.127327][T11057] ? skb_put+0x11b/0x210 [ 527.127338][T11057] netlink_sendmsg+0x805/0xb30 [ 527.127363][T11057] ? __pfx_netlink_sendmsg+0x10/0x10 [ 527.127382][T11057] ? aa_sock_msg_perm+0xf1/0x1d0 [ 527.127406][T11057] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 527.127421][T11057] ? __pfx_netlink_sendmsg+0x10/0x10 [ 527.127437][T11057] __sock_sendmsg+0x21c/0x270 [ 527.127467][T11057] ____sys_sendmsg+0x52d/0x830 [ 527.127491][T11057] ? __pfx_____sys_sendmsg+0x10/0x10 [ 527.127520][T11057] ? import_iovec+0x74/0xa0 [ 527.127546][T11057] ___sys_sendmsg+0x21f/0x2a0 [ 527.127568][T11057] ? __pfx____sys_sendmsg+0x10/0x10 [ 527.127623][T11057] ? __fget_files+0x2a/0x420 [ 527.127639][T11057] ? __fget_files+0x3a0/0x420 [ 527.127666][T11057] __sys_sendmmsg+0x227/0x430 [ 527.127691][T11057] ? __pfx___sys_sendmmsg+0x10/0x10 [ 527.127720][T11057] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 527.127762][T11057] ? ksys_write+0x22a/0x250 [ 527.127788][T11057] ? __pfx_ksys_write+0x10/0x10 [ 527.127813][T11057] __x64_sys_sendmmsg+0xa0/0xc0 [ 527.127834][T11057] do_syscall_64+0xfa/0xfa0 [ 527.127856][T11057] ? lockdep_hardirqs_on+0x9c/0x150 [ 527.127878][T11057] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.127895][T11057] ? clear_bhb_loop+0x60/0xb0 [ 527.127914][T11057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.127932][T11057] RIP: 0033:0x7f364898f6c9 [ 527.127948][T11057] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 527.127963][T11057] RSP: 002b:00007f36498cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 527.127983][T11057] RAX: ffffffffffffffda RBX: 00007f3648be5fa0 RCX: 00007f364898f6c9 [ 527.127996][T11057] RDX: 0492492492492627 RSI: 00002000000000c0 RDI: 0000000000000003 [ 527.128008][T11057] RBP: 00007f36498cf090 R08: 0000000000000000 R09: 0000000000000000 [ 527.128018][T11057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 527.128027][T11057] R13: 00007f3648be6038 R14: 00007f3648be5fa0 R15: 00007f3648d0fa28 [ 527.128057][T11057] [ 528.068699][ T89] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 528.157929][ T10] usb 2-1: USB disconnect, device number 112 [ 528.160052][T11068] input: syz0 as /devices/virtual/input/input57 [ 528.241053][ T89] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 528.251996][ T89] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.262884][ T89] usb 3-1: Product: syz [ 528.267066][ T89] usb 3-1: Manufacturer: syz [ 528.272052][ T89] usb 3-1: SerialNumber: syz [ 528.307622][ T5951] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 528.327297][ T89] usb 3-1: config 0 descriptor?? [ 528.479747][ T5951] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 528.497460][ T5951] usb 1-1: config 0 interface 0 has no altsetting 0 [ 528.509176][ T5951] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 528.518712][ T5951] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.526726][ T5951] usb 1-1: Product: syz [ 528.531650][ T5951] usb 1-1: Manufacturer: syz [ 528.537893][ T5951] usb 1-1: SerialNumber: syz [ 528.551101][ T5951] usb 1-1: config 0 descriptor?? [ 528.598995][T11059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 528.608560][T11059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 528.666551][ T89] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 528.680817][ T5951] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 528.693028][ T5951] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 528.708145][ T5951] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 error while loading driver (-23) [ 528.737480][ T5914] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 528.884322][ T5951] usb 1-1: USB disconnect, device number 109 [ 528.891370][ T10] usb 2-1: new full-speed USB device number 113 using dummy_hcd [ 528.933390][ T5914] usb 5-1: config 0 has no interfaces? [ 528.940256][ T5914] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 528.950981][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.966441][ T5914] usb 5-1: config 0 descriptor?? [ 529.073254][ T10] usb 2-1: config 0 has too many interfaces: 249, using maximum allowed: 32 [ 529.082209][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 529.093722][ T10] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 249 [ 529.106308][ T10] usb 2-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4 [ 529.116295][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.124607][ T10] usb 2-1: Product: syz [ 529.129228][ T10] usb 2-1: Manufacturer: syz [ 529.134038][ T10] usb 2-1: SerialNumber: syz [ 529.182773][ T5914] usb 5-1: USB disconnect, device number 111 [ 529.226244][ T10] usb 2-1: config 0 descriptor?? [ 529.904793][T11095] FAULT_INJECTION: forcing a failure. [ 529.904793][T11095] name failslab, interval 1, probability 0, space 0, times 0 [ 529.941816][T11095] CPU: 1 UID: 0 PID: 11095 Comm: syz.4.1349 Not tainted syzkaller #0 PREEMPT(full) [ 529.941841][T11095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 529.941852][T11095] Call Trace: [ 529.941860][T11095] [ 529.941869][T11095] dump_stack_lvl+0x189/0x250 [ 529.941896][T11095] ? __pfx____ratelimit+0x10/0x10 [ 529.941919][T11095] ? __pfx_dump_stack_lvl+0x10/0x10 [ 529.941941][T11095] ? __pfx__printk+0x10/0x10 [ 529.941965][T11095] ? __pfx___might_resched+0x10/0x10 [ 529.941984][T11095] ? fs_reclaim_acquire+0x7d/0x100 [ 529.942013][T11095] should_fail_ex+0x414/0x560 [ 529.942041][T11095] should_failslab+0xa8/0x100 [ 529.942055][T11095] __kmalloc_noprof+0xcb/0x7f0 [ 529.942069][T11095] ? tomoyo_encode+0x28b/0x550 [ 529.942086][T11095] tomoyo_encode+0x28b/0x550 [ 529.942105][T11095] tomoyo_realpath_from_path+0x58d/0x5d0 [ 529.942146][T11095] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 529.942169][T11095] tomoyo_path_number_perm+0x1e8/0x5a0 [ 529.942193][T11095] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 529.942207][T11095] ? __seccomp_filter+0xaa6/0x1e10 [ 529.942239][T11095] ? __fget_files+0x2a/0x420 [ 529.942253][T11095] ? __fget_files+0x3a0/0x420 [ 529.942266][T11095] ? __fget_files+0x2a/0x420 [ 529.942287][T11095] security_file_ioctl+0xcb/0x2d0 [ 529.942310][T11095] __se_sys_ioctl+0x47/0x170 [ 529.942334][T11095] do_syscall_64+0xfa/0xfa0 [ 529.942353][T11095] ? lockdep_hardirqs_on+0x9c/0x150 [ 529.942366][T11095] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.942376][T11095] ? clear_bhb_loop+0x60/0xb0 [ 529.942388][T11095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.942397][T11095] RIP: 0033:0x7fa7f2b8f6c9 [ 529.942408][T11095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 529.942423][T11095] RSP: 002b:00007fa7f3a6a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 529.942441][T11095] RAX: ffffffffffffffda RBX: 00007fa7f2de5fa0 RCX: 00007fa7f2b8f6c9 [ 529.942454][T11095] RDX: 0000200000000140 RSI: 00000000c010640b RDI: 0000000000000005 [ 529.942464][T11095] RBP: 00007fa7f3a6a090 R08: 0000000000000000 R09: 0000000000000000 [ 529.942475][T11095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 529.942485][T11095] R13: 00007fa7f2de6038 R14: 00007fa7f2de5fa0 R15: 00007fa7f2f0fa28 [ 529.942517][T11095] [ 529.943604][T11095] ERROR: Out of memory at tomoyo_realpath_from_path. [ 530.860742][ T89] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 530.918895][ T89] usb 3-1: USB disconnect, device number 2 [ 531.321940][ T5951] usb 2-1: USB disconnect, device number 113 [ 531.333911][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 531.333928][ T30] audit: type=1326 audit(1762970603.939:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11112 comm="syz.3.1355" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f758958f6c9 code=0x0 [ 531.422030][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 531.507237][T11128] loop2: detected capacity change from 0 to 7 [ 531.579124][ T10] usb 3-1: device descriptor read/64, error -71 [ 531.593491][T11128] Dev loop2: unable to read RDB block 7 [ 531.607690][T11128] loop2: AHDI p1 p2 p3 [ 531.618148][T11134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1356'. [ 531.647609][T11128] loop2: partition table partially beyond EOD, truncated [ 531.656810][T11128] loop2: p1 start 1601398130 is beyond EOD, truncated [ 531.689119][T11128] loop2: p2 start 1702059890 is beyond EOD, truncated [ 531.738101][T11135] FAULT_INJECTION: forcing a failure. [ 531.738101][T11135] name failslab, interval 1, probability 0, space 0, times 0 [ 531.759849][T11135] CPU: 1 UID: 0 PID: 11135 Comm: syz.1.1356 Not tainted syzkaller #0 PREEMPT(full) [ 531.759881][T11135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 531.759891][T11135] Call Trace: [ 531.759898][T11135] [ 531.759906][T11135] dump_stack_lvl+0x189/0x250 [ 531.759933][T11135] ? __pfx____ratelimit+0x10/0x10 [ 531.759956][T11135] ? __pfx_dump_stack_lvl+0x10/0x10 [ 531.759976][T11135] ? __pfx__printk+0x10/0x10 [ 531.760005][T11135] should_fail_ex+0x414/0x560 [ 531.760035][T11135] should_failslab+0xa8/0x100 [ 531.760055][T11135] kmem_cache_alloc_node_noprof+0x77/0x710 [ 531.760078][T11135] ? __alloc_skb+0x112/0x2d0 [ 531.760101][T11135] __alloc_skb+0x112/0x2d0 [ 531.760120][T11135] __ipv6_ifa_notify+0x1e8/0xac0 [ 531.760151][T11135] ? __pfx___ipv6_ifa_notify+0x10/0x10 [ 531.760177][T11135] ? __lock_acquire+0xab9/0xd20 [ 531.760203][T11135] ? __local_bh_enable_ip+0x12d/0x1c0 [ 531.760220][T11135] ? lockdep_hardirqs_on+0x9c/0x150 [ 531.760242][T11135] ? __local_bh_enable_ip+0x12d/0x1c0 [ 531.760260][T11135] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 531.760288][T11135] addrconf_ifdown+0xe69/0x1880 [ 531.760318][T11135] ? tls_dev_event+0x717/0xec0 [ 531.760334][T11135] ? __pfx_addrconf_ifdown+0x10/0x10 [ 531.760367][T11135] addrconf_notify+0x1bc/0x1010 [ 531.760396][T11135] notifier_call_chain+0x1b6/0x3e0 [ 531.760425][T11135] __dev_notify_flags+0x18d/0x2e0 [ 531.760446][T11135] ? __pfx___dev_notify_flags+0x10/0x10 [ 531.760458][T11135] ? __dev_change_flags+0x4cc/0x6d0 [ 531.760479][T11135] ? __pfx___dev_change_flags+0x10/0x10 [ 531.760508][T11135] netif_change_flags+0xe8/0x1a0 [ 531.760531][T11135] do_setlink+0xc55/0x41c0 [ 531.760546][T11135] ? rcu_is_watching+0x15/0xb0 [ 531.760581][T11135] ? __pfx_do_setlink+0x10/0x10 [ 531.760598][T11135] ? net_generic+0x1e/0x240 [ 531.760638][T11135] ? lockdep_rtnl_is_held+0x26/0x40 [ 531.760655][T11135] ? ip6gre_tunnel_find+0x501/0x5a0 [ 531.760686][T11135] ? __ipv6_addr_type+0x247/0x2f0 [ 531.760715][T11135] ? lockdep_rtnl_is_held+0x26/0x40 [ 531.760734][T11135] ? ip6gre_tunnel_link+0x1c8/0x2d0 [ 531.760761][T11135] ? ip6erspan_changelink+0x7cd/0xad0 [ 531.760784][T11135] ? __pfx_ip6erspan_changelink+0x10/0x10 [ 531.760812][T11135] ? ns_capable+0x8a/0xf0 [ 531.760832][T11135] ? rtnl_link_get_net_capable+0x16a/0x350 [ 531.760854][T11135] rtnl_newlink+0x1619/0x1c80 [ 531.760895][T11135] ? __pfx_rtnl_newlink+0x10/0x10 [ 531.760921][T11135] ? is_bpf_text_address+0x26/0x2b0 [ 531.760943][T11135] ? is_bpf_text_address+0x292/0x2b0 [ 531.760959][T11135] ? is_bpf_text_address+0x26/0x2b0 [ 531.760981][T11135] ? __lock_acquire+0xab9/0xd20 [ 531.761009][T11135] ? __lock_acquire+0xab9/0xd20 [ 531.761046][T11135] ? is_bpf_text_address+0x26/0x2b0 [ 531.761068][T11135] ? is_bpf_text_address+0x292/0x2b0 [ 531.761086][T11135] ? is_bpf_text_address+0x26/0x2b0 [ 531.761112][T11135] ? __lock_acquire+0xab9/0xd20 [ 531.761154][T11135] ? __pfx_rtnl_newlink+0x10/0x10 [ 531.761177][T11135] rtnetlink_rcv_msg+0x7cf/0xb70 [ 531.761198][T11135] ? __lock_acquire+0xab9/0xd20 [ 531.761216][T11135] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 531.761237][T11135] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 531.761276][T11135] netlink_rcv_skb+0x208/0x470 [ 531.761291][T11135] ? __lock_acquire+0xab9/0xd20 [ 531.761307][T11135] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 531.761331][T11135] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 531.761367][T11135] ? netlink_deliver_tap+0x2e/0x1b0 [ 531.761390][T11135] netlink_unicast+0x82f/0x9e0 [ 531.761421][T11135] ? __pfx_netlink_unicast+0x10/0x10 [ 531.761444][T11135] ? netlink_sendmsg+0x642/0xb30 [ 531.761457][T11135] ? skb_put+0x11b/0x210 [ 531.761477][T11135] netlink_sendmsg+0x805/0xb30 [ 531.761502][T11135] ? __pfx_netlink_sendmsg+0x10/0x10 [ 531.761522][T11135] ? aa_sock_msg_perm+0xf1/0x1d0 [ 531.761547][T11135] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 531.761563][T11135] ? __pfx_netlink_sendmsg+0x10/0x10 [ 531.761581][T11135] __sock_sendmsg+0x21c/0x270 [ 531.761603][T11135] ____sys_sendmsg+0x505/0x830 [ 531.761625][T11135] ? __pfx_____sys_sendmsg+0x10/0x10 [ 531.761649][T11135] ? import_iovec+0x74/0xa0 [ 531.761671][T11135] ___sys_sendmsg+0x21f/0x2a0 [ 531.761692][T11135] ? __pfx____sys_sendmsg+0x10/0x10 [ 531.761741][T11135] ? __fget_files+0x2a/0x420 [ 531.761757][T11135] ? __fget_files+0x3a0/0x420 [ 531.761782][T11135] __x64_sys_sendmsg+0x19b/0x260 [ 531.761803][T11135] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 531.761831][T11135] ? __pfx_ksys_write+0x10/0x10 [ 531.761858][T11135] ? do_syscall_64+0xbe/0xfa0 [ 531.761893][T11135] do_syscall_64+0xfa/0xfa0 [ 531.761913][T11135] ? lockdep_hardirqs_on+0x9c/0x150 [ 531.761934][T11135] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.761952][T11135] ? clear_bhb_loop+0x60/0xb0 [ 531.761972][T11135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.761988][T11135] RIP: 0033:0x7f88e338f6c9 [ 531.762003][T11135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 531.762017][T11135] RSP: 002b:00007f88e4217038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 531.762035][T11135] RAX: ffffffffffffffda RBX: 00007f88e35e6090 RCX: 00007f88e338f6c9 [ 531.762048][T11135] RDX: 0000000000000012 RSI: 0000200000000000 RDI: 0000000000000004 [ 531.762059][T11135] RBP: 00007f88e4217090 R08: 0000000000000000 R09: 0000000000000000 [ 531.762069][T11135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 531.762079][T11135] R13: 00007f88e35e6128 R14: 00007f88e35e6090 R15: 00007f88e370fa28 [ 531.762110][T11135] [ 531.907062][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 532.817493][ T10] usb 3-1: device descriptor read/64, error -71 [ 532.928075][ T10] usb usb3-port1: attempt power cycle [ 533.267502][ T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 533.297990][ T10] usb 3-1: device descriptor read/8, error -71 [ 533.530444][T11159] tipc: Enabling of bearer rejected, failed to enable media [ 533.537642][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 533.567903][ T10] usb 3-1: device descriptor read/8, error -71 [ 533.677698][ T10] usb usb3-port1: unable to enumerate USB device [ 534.778463][ T5828] Bluetooth: hci0: command 0x0406 tx timeout [ 534.785632][T11144] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 535.678894][T11144] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 535.691184][T11144] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 535.697214][T11144] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 535.706190][T11144] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 535.712383][T11144] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 536.019179][T11174] x_tables: ip_tables: osf match: only valid for protocol 6 [ 536.387499][ T5914] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 536.547428][ T5914] usb 4-1: Using ep0 maxpacket: 8 [ 536.560267][ T5914] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 536.570538][ T5914] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 536.587549][ T43] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 536.598648][ T5914] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 536.654690][ T5914] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 536.887766][ T5914] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 536.899229][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.907422][ T5828] Bluetooth: hci0: command 0x0406 tx timeout [ 536.923476][ T43] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 536.935407][ T5914] hub 4-1:1.0: bad descriptor, ignoring hub [ 536.941551][ T5914] hub 4-1:1.0: probe with driver hub failed with error -5 [ 536.948707][ T43] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 536.967931][ T5914] cdc_wdm 4-1:1.0: skipping garbage [ 536.973149][ T5914] cdc_wdm 4-1:1.0: skipping garbage [ 536.978448][ T43] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 536.998210][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.007768][ T5914] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 537.013684][ T5914] cdc_wdm 4-1:1.0: Unknown control protocol [ 537.029178][T11180] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 537.040729][ T43] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 537.273123][T11180] fuse: Unknown parameter 'rootmod' [ 537.288271][ T10] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 537.402109][T11178] CUSE: unknown device info "€" [ 537.407076][T11178] CUSE: unknown device info "Ö" [ 537.415257][T11178] CUSE: unknown device info "" [ 537.430858][T11178] CUSE: unknown device info "€" [ 537.447703][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 537.454998][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 537.486284][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 537.498110][T11178] CUSE: unknown device info "ðÿÿÿ" [ 537.503241][T11178] CUSE: unknown device info "" [ 537.529722][T11178] CUSE: unknown device info "" [ 537.534600][T11178] CUSE: unknown device info "" [ 537.550005][T11178] CUSE: zero length info key specified [ 537.550390][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 537.576475][ T10] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 537.593335][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.608124][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 537.608435][ T5914] usb 4-1: USB disconnect, device number 94 [ 537.614938][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 537.626711][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 537.648509][ T10] usb 1-1: config 0 descriptor?? [ 537.737654][ T5828] Bluetooth: hci2: command 0x0406 tx timeout [ 537.743716][ T5828] Bluetooth: hci1: command 0x0406 tx timeout [ 537.767602][ T43] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 537.970658][ T43] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 537.981445][ T43] usb 5-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 537.992078][ T43] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 538.001249][ T43] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 538.012619][ T43] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 538.026658][ T43] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 538.036199][ T43] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 538.044394][ T43] usb 5-1: Product: syz [ 538.050463][ T43] usb 5-1: Manufacturer: syz [ 538.077934][ T10] microsoft 0003:045E:07DA.0026: unknown main item tag 0x0 [ 538.079483][ T43] cdc_wdm 5-1:1.0: skipping garbage [ 538.091546][ T10] microsoft 0003:045E:07DA.0026: unknown main item tag 0x0 [ 538.111989][ T10] microsoft 0003:045E:07DA.0026: unknown main item tag 0x0 [ 538.112049][ T43] cdc_wdm 5-1:1.0: skipping garbage [ 538.125661][ T43] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 538.155150][ T10] microsoft 0003:045E:07DA.0026: unknown main item tag 0x0 [ 538.162665][ T5951] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 538.178415][ T10] microsoft 0003:045E:07DA.0026: unknown main item tag 0x0 [ 538.201882][ T10] microsoft 0003:045E:07DA.0026: unknown main item tag 0x0 [ 538.216561][ T10] microsoft 0003:045E:07DA.0026: unknown main item tag 0x0 [ 538.229707][ T10] microsoft 0003:045E:07DA.0026: unknown main item tag 0x0 [ 538.244463][ T10] microsoft 0003:045E:07DA.0026: unknown main item tag 0x0 [ 538.258552][ T10] microsoft 0003:045E:07DA.0026: unknown main item tag 0x0 [ 538.298216][ T10] microsoft 0003:045E:07DA.0026: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 538.330104][ T5951] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 538.349325][ T10] microsoft 0003:045E:07DA.0026: no inputs found [ 538.366205][ T10] microsoft 0003:045E:07DA.0026: could not initialize ff, continuing anyway [ 538.376333][ T5951] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 538.411059][ T5951] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.432048][ T5951] usb 3-1: Product: syz [ 538.468874][ T5951] usb 3-1: Manufacturer: syz [ 538.473771][ T10] usb 1-1: USB disconnect, device number 110 [ 538.510185][ T5951] usb 3-1: SerialNumber: syz [ 538.648575][ T5951] usb 3-1: config 0 descriptor?? [ 539.048941][ T43] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 539.225877][ T5914] usb 2-1: USB disconnect, device number 114 [ 539.247793][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 539.268736][ T43] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 539.306736][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.323681][ T43] usb 4-1: Product: syz [ 539.330940][ T43] usb 4-1: Manufacturer: syz [ 539.336009][ T43] usb 4-1: SerialNumber: syz [ 539.361471][ T43] usb 4-1: config 0 descriptor?? [ 539.373970][ T43] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 539.592069][ T43] gspca_sonixj: reg_w1 err -71 [ 539.602961][ T43] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 539.637065][ T43] usb 4-1: USB disconnect, device number 95 [ 539.818387][ T5951] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 539.826449][T10928] Bluetooth: hci1: command 0x0406 tx timeout [ 539.832645][ T5828] Bluetooth: hci2: command 0x0406 tx timeout [ 540.005927][ T5951] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 540.017468][ T5951] usb 2-1: config 0 interface 0 has no altsetting 0 [ 540.039133][ T5951] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 540.051882][ T5951] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.061464][ T5951] usb 2-1: Product: syz [ 540.066833][ T5951] usb 2-1: Manufacturer: syz [ 540.072980][T11206] syz.0.1375 (11206): drop_caches: 2 [ 540.073442][ T5951] usb 2-1: SerialNumber: syz [ 540.087444][ T5951] usb 2-1: config 0 descriptor?? [ 540.149226][ T5951] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 540.162915][ T5951] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 540.190395][ T5951] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 error while loading driver (-23) [ 540.213390][T11211] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 540.631015][ T5951] usb 5-1: USB disconnect, device number 112 [ 540.759587][ T10] usb 3-1: USB disconnect, device number 7 [ 542.430706][ T89] usb 2-1: USB disconnect, device number 115 [ 542.555560][ T30] audit: type=1326 audit(1762970615.159:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11244 comm="syz.1.1385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e338f6c9 code=0x7ffc0000 [ 542.681064][ T30] audit: type=1326 audit(1762970615.159:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11244 comm="syz.1.1385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e338f6c9 code=0x7ffc0000 [ 542.710378][ T30] audit: type=1326 audit(1762970615.209:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11244 comm="syz.1.1385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f88e338f6c9 code=0x7ffc0000 [ 542.892702][T11257] netlink: 324 bytes leftover after parsing attributes in process `syz.1.1388'. [ 542.959472][ T30] audit: type=1326 audit(1762970615.209:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11244 comm="syz.1.1385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e338f6c9 code=0x7ffc0000 [ 543.327296][ T30] audit: type=1326 audit(1762970615.209:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11244 comm="syz.1.1385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e338f6c9 code=0x7ffc0000 [ 543.502145][ T5828] Bluetooth: hci2: command 0x0406 tx timeout [ 543.569549][ T43] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 543.607550][ T30] audit: type=1326 audit(1762970615.209:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11244 comm="syz.1.1385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f88e338f6c9 code=0x7ffc0000 [ 543.629806][ C0] vkms_vblank_simulate: vblank timer overrun [ 543.715923][ C0] IPVS: lc: FWM 3 0x00000003 - no destination available [ 543.777726][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 543.787286][ T43] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 543.802288][ T43] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 543.833580][ T43] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 543.851059][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.886133][ T43] usb 4-1: Product: syz [ 543.897318][ T43] usb 4-1: Manufacturer: syz [ 543.915126][ T43] usb 4-1: SerialNumber: syz [ 543.994625][ T30] audit: type=1326 audit(1762970615.219:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11244 comm="syz.1.1385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e338f6c9 code=0x7ffc0000 [ 544.114816][ T30] audit: type=1326 audit(1762970615.219:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11244 comm="syz.1.1385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e338f6c9 code=0x7ffc0000 [ 544.188905][ T43] usb 4-1: 0:2 : does not exist [ 544.240410][ T43] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 544.311526][ T43] usb 4-1: USB disconnect, device number 96 [ 544.318788][ T30] audit: type=1326 audit(1762970615.229:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11244 comm="syz.1.1385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f88e338f6c9 code=0x7ffc0000 [ 544.424354][ T30] audit: type=1326 audit(1762970615.229:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11244 comm="syz.1.1385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e338f6c9 code=0x7ffc0000 [ 544.446772][ C0] vkms_vblank_simulate: vblank timer overrun [ 544.906009][T11273] FAULT_INJECTION: forcing a failure. [ 544.906009][T11273] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 544.937943][T11273] CPU: 0 UID: 0 PID: 11273 Comm: syz.4.1392 Not tainted syzkaller #0 PREEMPT(full) [ 544.937967][T11273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 544.937978][T11273] Call Trace: [ 544.937986][T11273] [ 544.937994][T11273] dump_stack_lvl+0x189/0x250 [ 544.938016][T11273] ? __pfx____ratelimit+0x10/0x10 [ 544.938033][T11273] ? __pfx_dump_stack_lvl+0x10/0x10 [ 544.938050][T11273] ? __pfx__printk+0x10/0x10 [ 544.938065][T11273] ? __might_fault+0xb0/0x130 [ 544.938090][T11273] should_fail_ex+0x414/0x560 [ 544.938113][T11273] _copy_from_user+0x2d/0xb0 [ 544.938130][T11273] memdup_user+0x5e/0xd0 [ 544.938145][T11273] strndup_user+0x68/0xd0 [ 544.938160][T11273] __se_sys_fsopen+0x3d/0x2b0 [ 544.938179][T11273] do_syscall_64+0xfa/0xfa0 [ 544.938195][T11273] ? lockdep_hardirqs_on+0x9c/0x150 [ 544.938213][T11273] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.938226][T11273] ? clear_bhb_loop+0x60/0xb0 [ 544.938242][T11273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.938255][T11273] RIP: 0033:0x7fa7f2b8f6c9 [ 544.938267][T11273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 544.938279][T11273] RSP: 002b:00007fa7f3a28038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 544.938294][T11273] RAX: ffffffffffffffda RBX: 00007fa7f2de6180 RCX: 00007fa7f2b8f6c9 [ 544.938304][T11273] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000003c0 [ 544.938312][T11273] RBP: 00007fa7f3a28090 R08: 0000000000000000 R09: 0000000000000000 [ 544.938321][T11273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 544.938329][T11273] R13: 00007fa7f2de6218 R14: 00007fa7f2de6180 R15: 00007fa7f2f0fa28 [ 544.938350][T11273] [ 545.111758][ C0] vkms_vblank_simulate: vblank timer overrun [ 545.190903][T11269] i2c i2c-0: Invalid block read size 255 [ 545.389748][T11276] x_tables: ip_tables: osf match: only valid for protocol 6 [ 545.668993][ T5914] usb 1-1: new full-speed USB device number 111 using dummy_hcd [ 545.853026][ T5914] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 545.861422][ T5914] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 545.881212][ T5914] usb 1-1: config 0 has no interface number 0 [ 545.901171][ T5914] usb 1-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 545.910407][ T5914] usb 1-1: New USB device strings: Mfr=5, Product=2, SerialNumber=3 [ 545.918513][ T5914] usb 1-1: Product: syz [ 545.925779][ T5914] usb 1-1: Manufacturer: syz [ 545.934744][ T5914] usb 1-1: SerialNumber: syz [ 545.957440][ T5914] usb 1-1: config 0 descriptor?? [ 545.993815][ T5914] uvcvideo 1-1:0.105: Found UVC 0.00 device syz (046c:14e8) [ 546.002340][ T5914] uvcvideo 1-1:0.105: Entity type for entity Output 1 was not initialized! [ 546.014549][ T5914] uvcvideo 1-1:0.105: Failed to create links for entity 1 [ 546.022376][ T5914] uvcvideo 1-1:0.105: Failed to register entities (-22). [ 546.131444][ T10] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 546.374393][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 546.391941][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 546.450631][ T10] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 546.475501][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.497458][ T10] usb 2-1: Product: syz [ 546.542523][ T10] usb 2-1: Manufacturer: syz [ 546.588965][ T10] usb 2-1: SerialNumber: syz [ 546.604940][ T10] usb 2-1: config 0 descriptor?? [ 546.622234][ T10] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 546.655134][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 546.678212][ T10] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 error while loading driver (-23) [ 547.117574][ T10] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 547.294828][T11288] input: syz1 as /devices/virtual/input/input58 [ 547.327977][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 547.344926][ T10] usb 4-1: no configurations [ 547.353824][ T10] usb 4-1: can't read configurations, error -22 [ 547.664215][ T5951] usb 1-1: USB disconnect, device number 111 [ 547.677482][ T89] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 547.850828][ T89] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 547.861902][ T89] usb 3-1: config 0 interface 0 has no altsetting 0 [ 547.879572][ T89] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 547.892237][ T89] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.900662][ T89] usb 3-1: Product: syz [ 547.904921][ T89] usb 3-1: Manufacturer: syz [ 547.909562][ T89] usb 3-1: SerialNumber: syz [ 547.916108][ T89] usb 3-1: config 0 descriptor?? [ 547.923499][ T89] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 547.933880][ T89] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 547.948129][ T89] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 error while loading driver (-23) [ 548.117473][ T5914] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 548.156945][ T5951] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 548.637959][ T43] usb 3-1: USB disconnect, device number 8 [ 548.709532][ T5951] usb 1-1: config 0 has no interfaces? [ 548.709661][ T5914] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 548.715551][ T5951] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 548.723872][ T5914] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 548.806201][ T5951] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.817322][ T5951] usb 1-1: config 0 descriptor?? [ 548.817459][ T5914] usb 5-1: config 0 has no interface number 0 [ 548.828849][ T5914] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 548.844989][ T5914] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 548.876211][ T5914] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 548.887631][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.892369][ T5951] usb 2-1: USB disconnect, device number 116 [ 548.895717][ T5914] usb 5-1: Product: syz [ 548.908378][ T5914] usb 5-1: Manufacturer: syz [ 548.916157][ T5914] usb 5-1: SerialNumber: syz [ 548.946550][ T5914] usb 5-1: config 0 descriptor?? [ 549.045384][ T89] usb 1-1: USB disconnect, device number 112 [ 549.180377][ T5914] usbtouchscreen 5-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 549.231100][ T5914] usb 5-1: USB disconnect, device number 113 [ 549.357270][T11319] x_tables: ip_tables: osf match: only valid for protocol 6 [ 549.928486][T11324] netlink: 'syz.0.1407': attribute type 1 has an invalid length. [ 550.098738][T11324] bond1: entered promiscuous mode [ 550.161765][T11324] 8021q: adding VLAN 0 to HW filter on device bond1 [ 550.331284][T11330] 8021q: adding VLAN 0 to HW filter on device bond1 [ 550.359449][T11330] bond1: (slave gre2): The slave device specified does not support setting the MAC address [ 550.375381][T11330] bond1: (slave gre2): Setting fail_over_mac to active for active-backup mode [ 550.393815][T11330] bond1: (slave gre2): making interface the new active one [ 550.401506][T11330] gre2: entered promiscuous mode [ 550.403663][T11340] FAULT_INJECTION: forcing a failure. [ 550.403663][T11340] name failslab, interval 1, probability 0, space 0, times 0 [ 550.407849][T11330] bond1: (slave gre2): Enslaving as an active interface with an up link [ 550.422024][T11340] CPU: 0 UID: 0 PID: 11340 Comm: syz.2.1412 Not tainted syzkaller #0 PREEMPT(full) [ 550.422046][T11340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 550.422058][T11340] Call Trace: [ 550.422065][T11340] [ 550.422073][T11340] dump_stack_lvl+0x189/0x250 [ 550.422099][T11340] ? __pfx____ratelimit+0x10/0x10 [ 550.422121][T11340] ? __pfx_dump_stack_lvl+0x10/0x10 [ 550.422143][T11340] ? __pfx__printk+0x10/0x10 [ 550.422164][T11340] ? __pfx_fib_rules_lookup+0x10/0x10 [ 550.422182][T11340] ? l3mdev_update_flow+0x29/0x640 [ 550.422203][T11340] should_fail_ex+0x414/0x560 [ 550.422232][T11340] should_failslab+0xa8/0x100 [ 550.422253][T11340] kmem_cache_alloc_noprof+0x74/0x6e0 [ 550.422273][T11340] ? __pfx_find_exception+0x10/0x10 [ 550.422295][T11340] ? dst_alloc+0x105/0x170 [ 550.422320][T11340] dst_alloc+0x105/0x170 [ 550.422344][T11340] ip_route_output_key_hash_rcu+0x1560/0x23e0 [ 550.422373][T11340] ? ip_route_output_key_hash+0xc1/0x280 [ 550.422396][T11340] ip_route_output_key_hash+0x174/0x280 [ 550.422421][T11340] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 550.422441][T11340] ? stack_trace_save+0x9c/0xe0 [ 550.422479][T11340] tcp_v4_connect+0x710/0x1a90 [ 550.422494][T11340] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 550.422516][T11340] ? tcp_sendmsg_locked+0x2710/0x5540 [ 550.422555][T11340] ? __pfx_tcp_v4_connect+0x10/0x10 [ 550.422582][T11340] __inet_stream_connect+0x2ae/0xe70 [ 550.422618][T11340] ? __pfx___inet_stream_connect+0x10/0x10 [ 550.422651][T11340] ? __kasan_kmalloc+0x93/0xb0 [ 550.422675][T11340] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 550.422706][T11340] tcp_sendmsg_fastopen+0x3a7/0x5e0 [ 550.422737][T11340] tcp_sendmsg_locked+0x4cc9/0x5540 [ 550.422761][T11340] ? __mutex_trylock_common+0x153/0x260 [ 550.422783][T11340] ? tcp_sendmsg_locked+0x311/0x5540 [ 550.422813][T11340] ? rcu_is_watching+0x15/0xb0 [ 550.422833][T11340] ? trace_contention_end+0x39/0x120 [ 550.422855][T11340] ? look_up_lock_class+0x74/0x170 [ 550.422879][T11340] ? register_lock_class+0x51/0x320 [ 550.422902][T11340] ? __lock_acquire+0xab9/0xd20 [ 550.422932][T11340] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 550.422952][T11340] ? __local_bh_enable_ip+0x12d/0x1c0 [ 550.422978][T11340] ? __local_bh_enable_ip+0x12d/0x1c0 [ 550.423008][T11340] tcp_sendmsg+0x2f/0x50 [ 550.423032][T11340] smc_sendmsg+0x250/0x4d0 [ 550.423056][T11340] ? __pfx_smc_sendmsg+0x10/0x10 [ 550.423078][T11340] __sock_sendmsg+0x21c/0x270 [ 550.423103][T11340] ____sys_sendmsg+0x505/0x830 [ 550.423128][T11340] ? __pfx_____sys_sendmsg+0x10/0x10 [ 550.423155][T11340] ? import_iovec+0x74/0xa0 [ 550.423179][T11340] ___sys_sendmsg+0x21f/0x2a0 [ 550.423200][T11340] ? __pfx____sys_sendmsg+0x10/0x10 [ 550.423255][T11340] ? __fget_files+0x2a/0x420 [ 550.423270][T11340] ? __fget_files+0x3a0/0x420 [ 550.423297][T11340] __x64_sys_sendmsg+0x19b/0x260 [ 550.423318][T11340] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 550.423346][T11340] ? __pfx_ksys_write+0x10/0x10 [ 550.423371][T11340] ? do_syscall_64+0xbe/0xfa0 [ 550.423397][T11340] do_syscall_64+0xfa/0xfa0 [ 550.423417][T11340] ? lockdep_hardirqs_on+0x9c/0x150 [ 550.423438][T11340] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.423455][T11340] ? clear_bhb_loop+0x60/0xb0 [ 550.423475][T11340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.423491][T11340] RIP: 0033:0x7f316cf8f6c9 [ 550.423507][T11340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 550.423522][T11340] RSP: 002b:00007f316decc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 550.423540][T11340] RAX: ffffffffffffffda RBX: 00007f316d1e5fa0 RCX: 00007f316cf8f6c9 [ 550.423552][T11340] RDX: 00000000200040cc RSI: 0000200000000340 RDI: 0000000000000003 [ 550.423564][T11340] RBP: 00007f316decc090 R08: 0000000000000000 R09: 0000000000000000 [ 550.423575][T11340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 550.423585][T11340] R13: 00007f316d1e6038 R14: 00007f316d1e5fa0 R15: 00007f316d30fa28 [ 550.423616][T11340] [ 551.447832][ T5951] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 551.469084][T11357] program syz.0.1417 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 551.691907][ T5951] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 551.795648][ T5951] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 551.805039][ T5951] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.816514][ T5951] usb 2-1: Product: syz [ 551.834434][ T5951] usb 2-1: Manufacturer: syz [ 551.845636][ T5951] usb 2-1: SerialNumber: syz [ 551.862716][ T5951] usb 2-1: config 0 descriptor?? [ 552.210188][T11366] bond2: option primary_reselect: invalid value (13) [ 552.353874][T11366] bond2 (unregistering): Released all slaves [ 553.256219][T11377] netlink: zone id is out of range [ 553.266764][T11377] FAULT_INJECTION: forcing a failure. [ 553.266764][T11377] name failslab, interval 1, probability 0, space 0, times 0 [ 553.319831][T11377] CPU: 1 UID: 0 PID: 11377 Comm: syz.4.1423 Not tainted syzkaller #0 PREEMPT(full) [ 553.319856][T11377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 553.319866][T11377] Call Trace: [ 553.319873][T11377] [ 553.319882][T11377] dump_stack_lvl+0x189/0x250 [ 553.319908][T11377] ? __pfx____ratelimit+0x10/0x10 [ 553.319929][T11377] ? __pfx_dump_stack_lvl+0x10/0x10 [ 553.319951][T11377] ? __pfx__printk+0x10/0x10 [ 553.319975][T11377] ? __pfx___might_resched+0x10/0x10 [ 553.319993][T11377] ? fs_reclaim_acquire+0x7d/0x100 [ 553.320015][T11377] should_fail_ex+0x414/0x560 [ 553.320045][T11377] should_failslab+0xa8/0x100 [ 553.320065][T11377] __kmalloc_cache_noprof+0x6f/0x6f0 [ 553.320090][T11377] ? kvfree_call_rcu+0x3e9/0x4c0 [ 553.320112][T11377] ? ovs_ct_limit_cmd_set+0x2f7/0xb00 [ 553.320137][T11377] ovs_ct_limit_cmd_set+0x2f7/0xb00 [ 553.320172][T11377] genl_family_rcv_msg_doit+0x215/0x300 [ 553.320211][T11377] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 553.320245][T11377] ? bpf_lsm_capable+0x9/0x20 [ 553.320265][T11377] ? security_capable+0x7e/0x2e0 [ 553.320295][T11377] genl_rcv_msg+0x60e/0x790 [ 553.320322][T11377] ? __pfx_genl_rcv_msg+0x10/0x10 [ 553.320342][T11377] ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10 [ 553.320364][T11377] ? __asan_memcpy+0x40/0x70 [ 553.320389][T11377] ? __pfx_ref_tracker_free+0x10/0x10 [ 553.320414][T11377] netlink_rcv_skb+0x208/0x470 [ 553.320429][T11377] ? __lock_acquire+0xab9/0xd20 [ 553.320446][T11377] ? __pfx_genl_rcv_msg+0x10/0x10 [ 553.320468][T11377] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 553.320512][T11377] ? down_read+0x1ad/0x2e0 [ 553.320532][T11377] genl_rcv+0x28/0x40 [ 553.320550][T11377] netlink_unicast+0x82f/0x9e0 [ 553.320583][T11377] ? __pfx_netlink_unicast+0x10/0x10 [ 553.320609][T11377] ? netlink_sendmsg+0x642/0xb30 [ 553.320624][T11377] ? skb_put+0x11b/0x210 [ 553.320645][T11377] netlink_sendmsg+0x805/0xb30 [ 553.320672][T11377] ? __pfx_netlink_sendmsg+0x10/0x10 [ 553.320693][T11377] ? aa_sock_msg_perm+0xf1/0x1d0 [ 553.320719][T11377] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 553.320736][T11377] ? __pfx_netlink_sendmsg+0x10/0x10 [ 553.320755][T11377] __sock_sendmsg+0x21c/0x270 [ 553.320782][T11377] ____sys_sendmsg+0x505/0x830 [ 553.320807][T11377] ? __pfx_____sys_sendmsg+0x10/0x10 [ 553.320836][T11377] ? import_iovec+0x74/0xa0 [ 553.320861][T11377] ___sys_sendmsg+0x21f/0x2a0 [ 553.320883][T11377] ? __pfx____sys_sendmsg+0x10/0x10 [ 553.320935][T11377] ? __fget_files+0x2a/0x420 [ 553.320952][T11377] ? __fget_files+0x3a0/0x420 [ 553.320980][T11377] __x64_sys_sendmsg+0x19b/0x260 [ 553.321002][T11377] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 553.321031][T11377] ? __pfx_ksys_write+0x10/0x10 [ 553.321058][T11377] ? do_syscall_64+0xbe/0xfa0 [ 553.321083][T11377] do_syscall_64+0xfa/0xfa0 [ 553.321122][T11377] ? lockdep_hardirqs_on+0x9c/0x150 [ 553.321143][T11377] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.321158][T11377] ? clear_bhb_loop+0x60/0xb0 [ 553.321177][T11377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.321200][T11377] RIP: 0033:0x7fa7f2b8f6c9 [ 553.321216][T11377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 553.321232][T11377] RSP: 002b:00007fa7f3a6a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 553.321252][T11377] RAX: ffffffffffffffda RBX: 00007fa7f2de5fa0 RCX: 00007fa7f2b8f6c9 [ 553.321265][T11377] RDX: 0000000000004800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 553.321277][T11377] RBP: 00007fa7f3a6a090 R08: 0000000000000000 R09: 0000000000000000 [ 553.321288][T11377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 553.321298][T11377] R13: 00007fa7f2de6038 R14: 00007fa7f2de5fa0 R15: 00007fa7f2f0fa28 [ 553.321329][T11377] [ 553.772440][T11379] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1425'. [ 554.327497][ T5951] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 554.448341][ T89] usb 2-1: USB disconnect, device number 117 [ 554.557672][ T5951] usb 4-1: Using ep0 maxpacket: 8 [ 554.713497][ T5951] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 554.770861][ T5951] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.796475][ T5951] pvrusb2: Hardware description: Terratec Grabster AV400 [ 554.818565][ T5951] pvrusb2: ********** [ 554.824400][ T5951] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 554.952878][ T5951] pvrusb2: Important functionality might not be entirely working. [ 554.968028][ T5914] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 555.036670][ T5951] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 555.150576][ T89] usb 2-1: new low-speed USB device number 118 using dummy_hcd [ 555.159264][ T5914] usb 1-1: config 0 has no interfaces? [ 555.164953][ T5914] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 555.174520][ T5914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.182725][ T5951] pvrusb2: ********** [ 555.358005][T11405] IPv6: NLM_F_REPLACE set, but no existing node found! [ 555.393516][ T2346] pvrusb2: Invalid write control endpoint [ 555.396711][ T5914] usb 1-1: config 0 descriptor?? [ 555.511242][T11405] netlink: 'syz.2.1432': attribute type 10 has an invalid length. [ 555.548544][T11408] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3693406402 (118189004864 ns) > initial count (17453120 ns). Using initial count to start timer. [ 555.575786][T11407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.588839][T11405] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.596071][T11405] bridge0: port 2(bridge_slave_1) entered forwarding state [ 555.603725][T11405] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.610946][T11405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 555.632778][T11405] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 555.641962][ T2346] pvrusb2: Invalid write control endpoint [ 555.652374][ T2346] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 555.669590][ T5951] usb 1-1: USB disconnect, device number 113 [ 555.679336][T11407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.687167][ T2346] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 555.709300][ T2346] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 555.764094][ T2346] pvrusb2: Device being rendered inoperable [ 555.771292][ T2346] cx25840 16-0044: Unable to detect h/w, assuming cx23887 [ 555.802526][ T2346] cx25840 16-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 555.819321][ T2346] pvrusb2: Attached sub-driver cx25840 [ 555.826114][ T2346] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 555.837825][ T2346] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 555.938674][T11412] sock: sock_set_timeout: `syz.4.1433' (pid 11412) tries to set negative timeout [ 555.950078][T11412] FAULT_INJECTION: forcing a failure. [ 555.950078][T11412] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 555.970702][ T89] usb 2-1: unable to get BOS descriptor or descriptor too short [ 555.985224][ T89] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 555.990022][T11414] input: syz1 as /devices/virtual/input/input61 [ 555.994986][ T89] usb 2-1: can't read configurations, error -71 [ 556.009616][T11412] CPU: 0 UID: 0 PID: 11412 Comm: syz.4.1433 Not tainted syzkaller #0 PREEMPT(full) [ 556.009631][T11412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 556.009638][T11412] Call Trace: [ 556.009643][T11412] [ 556.009648][T11412] dump_stack_lvl+0x189/0x250 [ 556.009666][T11412] ? __pfx____ratelimit+0x10/0x10 [ 556.009679][T11412] ? __pfx_dump_stack_lvl+0x10/0x10 [ 556.009692][T11412] ? __pfx__printk+0x10/0x10 [ 556.009708][T11412] should_fail_ex+0x414/0x560 [ 556.009726][T11412] _copy_to_user+0x31/0xb0 [ 556.009740][T11412] simple_read_from_buffer+0xe1/0x170 [ 556.009757][T11412] proc_fail_nth_read+0x1b3/0x220 [ 556.009771][T11412] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 556.009785][T11412] ? rw_verify_area+0x2a6/0x4d0 [ 556.009797][T11412] ? __lock_acquire+0xab9/0xd20 [ 556.009806][T11412] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 556.009818][T11412] vfs_read+0x200/0xa30 [ 556.009830][T11412] ? fdget_pos+0x247/0x320 [ 556.009842][T11412] ? __pfx___mutex_lock+0x10/0x10 [ 556.009856][T11412] ? __pfx_vfs_read+0x10/0x10 [ 556.009869][T11412] ? __fget_files+0x2a/0x420 [ 556.009881][T11412] ? __fget_files+0x3a0/0x420 [ 556.009889][T11412] ? __fget_files+0x2a/0x420 [ 556.009903][T11412] ksys_read+0x145/0x250 [ 556.009916][T11412] ? __pfx_ksys_read+0x10/0x10 [ 556.009931][T11412] ? do_syscall_64+0xbe/0xfa0 [ 556.009946][T11412] do_syscall_64+0xfa/0xfa0 [ 556.009958][T11412] ? lockdep_hardirqs_on+0x9c/0x150 [ 556.009970][T11412] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.009980][T11412] ? clear_bhb_loop+0x60/0xb0 [ 556.009992][T11412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.010002][T11412] RIP: 0033:0x7fa7f2b8e0dc [ 556.010012][T11412] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 556.010021][T11412] RSP: 002b:00007fa7f3a6a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 556.010032][T11412] RAX: ffffffffffffffda RBX: 00007fa7f2de5fa0 RCX: 00007fa7f2b8e0dc [ 556.010040][T11412] RDX: 000000000000000f RSI: 00007fa7f3a6a0a0 RDI: 0000000000000004 [ 556.010046][T11412] RBP: 00007fa7f3a6a090 R08: 0000000000000000 R09: 0000000000000000 [ 556.010053][T11412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 556.010059][T11412] R13: 00007fa7f2de6038 R14: 00007fa7f2de5fa0 R15: 00007fa7f2f0fa28 [ 556.010075][T11412] [ 556.249520][ C0] vkms_vblank_simulate: vblank timer overrun [ 556.367207][T11421] FAULT_INJECTION: forcing a failure. [ 556.367207][T11421] name failslab, interval 1, probability 0, space 0, times 0 [ 556.382588][T11421] CPU: 0 UID: 0 PID: 11421 Comm: syz.2.1436 Not tainted syzkaller #0 PREEMPT(full) [ 556.382613][T11421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 556.382625][T11421] Call Trace: [ 556.382633][T11421] [ 556.382641][T11421] dump_stack_lvl+0x189/0x250 [ 556.382668][T11421] ? __pfx____ratelimit+0x10/0x10 [ 556.382691][T11421] ? __pfx_dump_stack_lvl+0x10/0x10 [ 556.382712][T11421] ? __pfx__printk+0x10/0x10 [ 556.382736][T11421] ? __pfx___might_resched+0x10/0x10 [ 556.382755][T11421] ? fs_reclaim_acquire+0x7d/0x100 [ 556.382776][T11421] should_fail_ex+0x414/0x560 [ 556.382807][T11421] should_failslab+0xa8/0x100 [ 556.382825][T11421] kmem_cache_alloc_lru_noprof+0x79/0x6d0 [ 556.382846][T11421] ? __d_alloc+0x36/0x7a0 [ 556.382869][T11421] __d_alloc+0x36/0x7a0 [ 556.382886][T11421] ? do_raw_spin_unlock+0x122/0x240 [ 556.382913][T11421] d_alloc+0x4b/0x190 [ 556.382930][T11421] ? lookup_one_qstr_excl+0xc8/0x360 [ 556.382953][T11421] lookup_one_qstr_excl+0xdc/0x360 [ 556.382976][T11421] do_renameat2+0x40e/0xa50 [ 556.383015][T11421] ? __pfx_do_renameat2+0x10/0x10 [ 556.383055][T11421] ? getname_flags+0x1e5/0x540 [ 556.383077][T11421] __x64_sys_rename+0x82/0x90 [ 556.383095][T11421] do_syscall_64+0xfa/0xfa0 [ 556.383117][T11421] ? lockdep_hardirqs_on+0x9c/0x150 [ 556.383140][T11421] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.383157][T11421] ? clear_bhb_loop+0x60/0xb0 [ 556.383178][T11421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.383195][T11421] RIP: 0033:0x7f316cf8f6c9 [ 556.383211][T11421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 556.383233][T11421] RSP: 002b:00007f316decc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 556.383253][T11421] RAX: ffffffffffffffda RBX: 00007f316d1e5fa0 RCX: 00007f316cf8f6c9 [ 556.383266][T11421] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000200000000580 [ 556.383278][T11421] RBP: 00007f316decc090 R08: 0000000000000000 R09: 0000000000000000 [ 556.383289][T11421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 556.383300][T11421] R13: 00007f316d1e6038 R14: 00007f316d1e5fa0 R15: 00007f316d30fa28 [ 556.383332][T11421] [ 556.605578][ C0] vkms_vblank_simulate: vblank timer overrun [ 556.943904][T11434] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1440'. [ 556.957218][T11434] bond0: entered promiscuous mode [ 556.962411][T11434] bond_slave_0: entered promiscuous mode [ 556.976986][T11434] bond_slave_1: entered promiscuous mode [ 556.991256][T11434] dummy0: entered promiscuous mode [ 557.008838][T11434] gretap0: entered promiscuous mode [ 557.016095][T11434] hsr1: entered promiscuous mode [ 557.092107][ T5914] usb 4-1: USB disconnect, device number 99 [ 557.207639][ T10] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 557.387716][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 557.415192][ T10] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 557.424382][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.433561][ T10] usb 5-1: Product: syz [ 557.442788][ T10] usb 5-1: Manufacturer: syz [ 557.452029][ T10] usb 5-1: SerialNumber: syz [ 557.465937][ T10] usb 5-1: config 0 descriptor?? [ 557.527501][ T89] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 558.117853][ T89] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 558.136022][ T89] usb 2-1: config 1 has no interface number 0 [ 558.154660][ T89] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 558.166900][ T89] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 558.178370][ T89] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 558.241154][ T89] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 558.301402][ T89] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.337918][ T89] usb 2-1: Product: syz [ 558.348886][ T89] usb 2-1: Manufacturer: syz [ 558.355738][ T89] usb 2-1: SerialNumber: syz [ 558.409610][T11438] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 558.521097][T11424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.566955][T11424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.653953][T11438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.701588][T11438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.742270][T11438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.780430][T11438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.829635][T11438] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 558.840575][ T89] usb 2-1: No status endpoint found [ 559.041560][T11464] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1447'. [ 559.056046][ T10] usb 2-1: USB disconnect, device number 119 [ 559.117527][ T89] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 559.122029][T11466] x_tables: duplicate underflow at hook 1 [ 559.139482][T11466] IPVS: length: 149 != 528 [ 559.145858][T11466] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1448'. [ 559.277456][ T89] usb 1-1: Using ep0 maxpacket: 16 [ 559.286292][ T89] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 559.295730][ T89] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=222 [ 559.304371][ T89] usb 1-1: SerialNumber: syz [ 559.312126][ T89] usb 1-1: config 0 descriptor?? [ 559.333386][ T89] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 559.345888][ T89] usb 1-1: Detected FT232A [ 559.353494][ T89] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 559.576920][ T5914] usb 1-1: USB disconnect, device number 114 [ 559.598310][ T5914] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 559.618847][ T5914] ftdi_sio 1-1:0.0: device disconnected [ 559.691754][ T43] usb 5-1: USB disconnect, device number 114 [ 560.189739][ T5914] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 560.359336][ T5914] usb 4-1: config 0 has no interfaces? [ 560.371030][ T5914] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 560.407480][ T43] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 560.449083][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.470491][ T5914] usb 4-1: config 0 descriptor?? [ 560.568460][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 560.568476][ T30] audit: type=1326 audit(1762970633.159:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11498 comm="syz.0.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f364898f6c9 code=0x7ffc0000 [ 560.598570][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 560.689623][ T89] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 560.715989][ T5914] usb 4-1: USB disconnect, device number 100 [ 560.917236][ T30] audit: type=1326 audit(1762970633.159:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11498 comm="syz.0.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f364898f6c9 code=0x7ffc0000 [ 560.954906][ T89] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 561.025017][ T30] audit: type=1326 audit(1762970633.159:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11498 comm="syz.0.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f364898f6c9 code=0x7ffc0000 [ 561.025050][ T30] audit: type=1326 audit(1762970633.159:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11498 comm="syz.0.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f364898f6c9 code=0x7ffc0000 [ 561.025089][ T30] audit: type=1326 audit(1762970633.159:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11498 comm="syz.0.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f364898f6c9 code=0x7ffc0000 [ 561.025112][ T30] audit: type=1326 audit(1762970633.159:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11498 comm="syz.0.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f364898f6c9 code=0x7ffc0000 [ 561.025133][ T30] audit: type=1326 audit(1762970633.159:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11498 comm="syz.0.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f364898f6c9 code=0x7ffc0000 [ 561.025155][ T30] audit: type=1326 audit(1762970633.159:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11498 comm="syz.0.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f364898f6c9 code=0x7ffc0000 [ 561.025175][ T30] audit: type=1326 audit(1762970633.159:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11498 comm="syz.0.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f364898f6c9 code=0x7ffc0000 [ 561.025196][ T30] audit: type=1326 audit(1762970633.159:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11498 comm="syz.0.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f364898f6c9 code=0x7ffc0000 [ 561.168503][ T89] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 561.168534][ T89] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.168553][ T89] usb 3-1: Product: syz [ 561.168567][ T89] usb 3-1: Manufacturer: syz [ 561.168582][ T89] usb 3-1: SerialNumber: syz [ 561.171795][ T89] usb 3-1: config 0 descriptor?? [ 561.537322][T11506] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1460'. [ 561.537553][T11506] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1460'. [ 561.537785][T11506] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1460'. [ 561.537804][T11506] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1460'. [ 561.538015][T11506] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1460'. [ 561.538031][T11506] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1460'. [ 561.881135][T11509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 561.881515][T11509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 562.446117][T11521] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 562.870088][T11533] FAULT_INJECTION: forcing a failure. [ 562.870088][T11533] name failslab, interval 1, probability 0, space 0, times 0 [ 562.919984][T11533] CPU: 1 UID: 0 PID: 11533 Comm: syz.4.1469 Not tainted syzkaller #0 PREEMPT(full) [ 562.920000][T11533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 562.920007][T11533] Call Trace: [ 562.920012][T11533] [ 562.920017][T11533] dump_stack_lvl+0x189/0x250 [ 562.920035][T11533] ? __pfx____ratelimit+0x10/0x10 [ 562.920048][T11533] ? __pfx_dump_stack_lvl+0x10/0x10 [ 562.920061][T11533] ? __pfx__printk+0x10/0x10 [ 562.920082][T11533] should_fail_ex+0x414/0x560 [ 562.920099][T11533] should_failslab+0xa8/0x100 [ 562.920111][T11533] __kmalloc_cache_noprof+0x6f/0x6f0 [ 562.920125][T11533] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 562.920138][T11533] ? sctp_add_bind_addr+0x8c/0x370 [ 562.920154][T11533] sctp_add_bind_addr+0x8c/0x370 [ 562.920169][T11533] sctp_copy_local_addr_list+0x30b/0x4e0 [ 562.920183][T11533] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 562.920195][T11533] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 562.920210][T11533] ? sctp_v4_is_any+0x35/0x60 [ 562.920222][T11533] ? sctp_copy_one_addr+0x93/0x360 [ 562.920236][T11533] sctp_bind_addr_copy+0xb3/0x3c0 [ 562.920249][T11533] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 562.920262][T11533] sctp_connect_new_asoc+0x2e0/0x690 [ 562.920274][T11533] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 562.920284][T11533] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 562.920294][T11533] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 562.920303][T11533] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 562.920313][T11533] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 562.920323][T11533] ? security_sctp_bind_connect+0x7e/0x2e0 [ 562.920347][T11533] sctp_sendmsg+0x155c/0x2810 [ 562.920363][T11533] ? __pfx_sctp_sendmsg+0x10/0x10 [ 562.920374][T11533] ? aa_sk_perm+0x81e/0x950 [ 562.920390][T11533] ? __pfx_aa_sk_perm+0x10/0x10 [ 562.920404][T11533] ? sock_rps_record_flow+0x19/0x410 [ 562.920420][T11533] ? inet_sendmsg+0x2f4/0x370 [ 562.920428][T11533] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 562.920440][T11533] __sock_sendmsg+0x19c/0x270 [ 562.920455][T11533] ____sys_sendmsg+0x505/0x830 [ 562.920469][T11533] ? __pfx_____sys_sendmsg+0x10/0x10 [ 562.920484][T11533] ? import_iovec+0x74/0xa0 [ 562.920498][T11533] ___sys_sendmsg+0x21f/0x2a0 [ 562.920510][T11533] ? __pfx____sys_sendmsg+0x10/0x10 [ 562.920539][T11533] ? __fget_files+0x2a/0x420 [ 562.920548][T11533] ? __fget_files+0x3a0/0x420 [ 562.920563][T11533] __x64_sys_sendmsg+0x19b/0x260 [ 562.920575][T11533] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 562.920591][T11533] ? __pfx_ksys_write+0x10/0x10 [ 562.920611][T11533] ? do_syscall_64+0xbe/0xfa0 [ 562.920626][T11533] do_syscall_64+0xfa/0xfa0 [ 562.920638][T11533] ? lockdep_hardirqs_on+0x9c/0x150 [ 562.920651][T11533] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.920661][T11533] ? clear_bhb_loop+0x60/0xb0 [ 562.920673][T11533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.920682][T11533] RIP: 0033:0x7fa7f2b8f6c9 [ 562.920693][T11533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 562.920701][T11533] RSP: 002b:00007fa7f3a6a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 562.920712][T11533] RAX: ffffffffffffffda RBX: 00007fa7f2de5fa0 RCX: 00007fa7f2b8f6c9 [ 562.920720][T11533] RDX: 0000000000000881 RSI: 0000200000000700 RDI: 0000000000000003 [ 562.920726][T11533] RBP: 00007fa7f3a6a090 R08: 0000000000000000 R09: 0000000000000000 [ 562.920732][T11533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 562.920738][T11533] R13: 00007fa7f2de6038 R14: 00007fa7f2de5fa0 R15: 00007fa7f2f0fa28 [ 562.920755][T11533] [ 563.285239][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.291578][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.354982][T11538] netlink: 'syz.0.1473': attribute type 2 has an invalid length. [ 563.362797][T11538] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1473'. [ 563.394418][ T43] usb 2-1: unable to get BOS descriptor or descriptor too short [ 563.425389][ T43] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 563.433218][ T43] usb 2-1: can't read configurations, error -71 [ 563.618836][ T89] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 563.664047][T11552] FAULT_INJECTION: forcing a failure. [ 563.664047][T11552] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 563.678505][T11552] CPU: 1 UID: 0 PID: 11552 Comm: syz.3.1476 Not tainted syzkaller #0 PREEMPT(full) [ 563.678529][T11552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 563.678541][T11552] Call Trace: [ 563.678548][T11552] [ 563.678556][T11552] dump_stack_lvl+0x189/0x250 [ 563.678583][T11552] ? __pfx____ratelimit+0x10/0x10 [ 563.678606][T11552] ? __pfx_dump_stack_lvl+0x10/0x10 [ 563.678628][T11552] ? __pfx__printk+0x10/0x10 [ 563.678647][T11552] ? __might_fault+0xb0/0x130 [ 563.678681][T11552] should_fail_ex+0x414/0x560 [ 563.678710][T11552] _copy_from_user+0x2d/0xb0 [ 563.678732][T11552] ___sys_recvmsg+0x12e/0x510 [ 563.678757][T11552] ? __pfx____sys_recvmsg+0x10/0x10 [ 563.678806][T11552] ? __might_fault+0xb0/0x130 [ 563.678832][T11552] do_recvmmsg+0x307/0x770 [ 563.678859][T11552] ? __pfx_do_recvmmsg+0x10/0x10 [ 563.678889][T11552] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 563.678929][T11552] __x64_sys_recvmmsg+0x190/0x240 [ 563.678951][T11552] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 563.678973][T11552] ? do_syscall_64+0xbe/0xfa0 [ 563.678997][T11552] do_syscall_64+0xfa/0xfa0 [ 563.679017][T11552] ? lockdep_hardirqs_on+0x9c/0x150 [ 563.679038][T11552] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.679054][T11552] ? clear_bhb_loop+0x60/0xb0 [ 563.679074][T11552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.679091][T11552] RIP: 0033:0x7f758958f6c9 [ 563.679106][T11552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 563.679120][T11552] RSP: 002b:00007f758a381038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 563.679139][T11552] RAX: ffffffffffffffda RBX: 00007f75897e5fa0 RCX: 00007f758958f6c9 [ 563.679152][T11552] RDX: 03ffffffffffff2e RSI: 0000200000000c00 RDI: 0000000000000003 [ 563.679165][T11552] RBP: 00007f758a381090 R08: 0000000000000000 R09: 0000000000000000 [ 563.679176][T11552] R10: 00001000400000de R11: 0000000000000246 R12: 0000000000000002 [ 563.679187][T11552] R13: 00007f75897e6038 R14: 00007f75897e5fa0 R15: 00007f758990fa28 [ 563.679216][T11552] [ 563.930580][ T89] usb 5-1: Using ep0 maxpacket: 32 [ 563.973563][ T89] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 563.984914][ T89] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.997967][ T43] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 564.039594][ T10] usb 3-1: USB disconnect, device number 9 [ 564.102774][ T89] usb 5-1: config 0 descriptor?? [ 564.180619][ T43] usb 2-1: config 0 has no interfaces? [ 564.198661][ T43] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 564.237416][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.271894][ T43] usb 2-1: config 0 descriptor?? [ 564.320964][T11556] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1478'. [ 564.356834][ T89] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 564.387083][ T89] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 564.428820][ T89] dvb-usb: Elgato EyeTV Sat error while loading driver (-23) [ 564.445865][ T89] dvb_usb_az6027 5-1:0.0: probe with driver dvb_usb_az6027 failed with error -23 [ 564.511638][ T5914] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 564.613118][ T43] usb 2-1: USB disconnect, device number 121 [ 564.734285][ T5914] usb 4-1: Using ep0 maxpacket: 16 [ 564.742537][ T5914] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 564.751105][ T5914] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 564.767456][ T5914] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 564.775925][ T5914] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 564.829676][ T5914] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 564.868115][ T5914] usb 4-1: config 0 has no interface number 0 [ 564.887478][ T5914] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 564.898609][ T5914] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 564.915708][ T5914] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 564.941016][ T5914] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 564.942039][T11565] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 564.965917][T11565] block device autoloading is deprecated and will be removed. [ 564.974851][ T5914] usb 4-1: config 0 interface 125 has no altsetting 0 [ 564.991632][ T5914] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 565.025344][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.044113][ T5914] usb 4-1: Product: syz [ 565.049247][ T5914] usb 4-1: Manufacturer: syz [ 565.059709][ T5914] usb 4-1: SerialNumber: syz [ 565.072932][ T5914] usb 4-1: config 0 descriptor?? [ 566.386030][ T5951] usb 5-1: USB disconnect, device number 115 [ 566.447502][ T89] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 566.597625][ T89] usb 3-1: Using ep0 maxpacket: 8 [ 566.604233][ T89] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 566.615480][ T89] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 566.625197][ T89] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.636495][ T89] usb 3-1: config 0 descriptor?? [ 566.767591][ T5951] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 566.807716][T11584] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1484'. [ 566.856756][ T89] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 566.917585][ T5951] usb 5-1: Using ep0 maxpacket: 32 [ 566.924568][ T5951] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 566.933371][ T5951] usb 5-1: config 0 has no interface number 0 [ 566.939908][ T5951] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 566.954549][ T5951] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 566.964213][ T5951] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.973026][ T5951] usb 5-1: Product: syz [ 566.979382][ T5951] usb 5-1: Manufacturer: syz [ 566.984179][ T5951] usb 5-1: SerialNumber: syz [ 567.001183][ T5951] usb 5-1: config 0 descriptor?? [ 567.015617][ T5951] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 567.027841][ T5951] em28xx 5-1:0.132: Video interface 132 found: [ 567.161194][ T5914] usb 3-1: USB disconnect, device number 10 [ 567.261996][ T5901] usb 4-1: USB disconnect, device number 101 [ 567.429200][ T5951] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 567.759164][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 567.759181][ T30] audit: type=1326 audit(1762970640.369:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11593 comm="syz.2.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f316cf8f6c9 code=0x7ffc0000 [ 567.773446][T11594] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1487'. [ 567.887476][ T5901] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 567.900633][ T30] audit: type=1326 audit(1762970640.369:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11593 comm="syz.2.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f316cf8f6c9 code=0x7ffc0000 [ 567.904019][ T5951] em28xx 5-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 567.959294][ T5951] em28xx 5-1:0.132: board has no eeprom [ 567.980574][ T30] audit: type=1326 audit(1762970640.369:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11593 comm="syz.2.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f316cf8f6c9 code=0x7ffc0000 [ 568.003976][ T30] audit: type=1326 audit(1762970640.369:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11593 comm="syz.2.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f316cf8f6c9 code=0x7ffc0000 [ 568.031762][ T30] audit: type=1326 audit(1762970640.369:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11593 comm="syz.2.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f316cf8f6c9 code=0x7ffc0000 [ 568.057183][ T30] audit: type=1326 audit(1762970640.369:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11593 comm="syz.2.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f316cf8f6c9 code=0x7ffc0000 [ 568.061884][ T5951] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 568.089845][ T5951] em28xx 5-1:0.132: analog set to bulk mode. [ 568.090443][ T30] audit: type=1326 audit(1762970640.369:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11593 comm="syz.2.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f316cf8f6c9 code=0x7ffc0000 [ 568.095902][ T89] em28xx 5-1:0.132: Registering V4L2 extension [ 568.150108][ T5901] usb 1-1: Using ep0 maxpacket: 8 [ 568.398779][ T30] audit: type=1326 audit(1762970640.369:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11593 comm="syz.2.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f316cf8f6c9 code=0x7ffc0000 [ 568.454403][ T5901] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 568.501748][ T5901] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.567440][ T5914] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 568.598796][ T5901] pvrusb2: Hardware description: Terratec Grabster AV400 [ 568.609772][ T30] audit: type=1326 audit(1762970640.369:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11593 comm="syz.2.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f316cf8f6c9 code=0x7ffc0000 [ 568.656522][ T5901] pvrusb2: ********** [ 568.766434][ T5901] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 568.787640][ T30] audit: type=1326 audit(1762970640.369:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11593 comm="syz.2.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f316cf8f6c9 code=0x7ffc0000 [ 568.810052][ C0] vkms_vblank_simulate: vblank timer overrun [ 568.836906][ T5901] pvrusb2: Important functionality might not be entirely working. [ 568.856231][ T5901] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 568.867939][ T5914] usb 2-1: Using ep0 maxpacket: 8 [ 568.883812][ T5901] pvrusb2: ********** [ 568.904545][ T43] usb 5-1: USB disconnect, device number 116 [ 568.931569][ T43] em28xx 5-1:0.132: Disconnecting em28xx [ 568.937578][ T5951] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 568.961739][ T89] em28xx 5-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 568.961798][ T5914] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 569.084849][ T89] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 569.097000][ T89] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 569.124161][T11610] pim6reg1: entered promiscuous mode [ 569.127027][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.131594][ T5951] usb 4-1: Using ep0 maxpacket: 32 [ 569.161322][ T5951] usb 4-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice= d.65 [ 569.172558][T11610] pim6reg1: entered allmulticast mode [ 569.179674][ T5951] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.190424][ T2346] pvrusb2: Invalid write control endpoint [ 569.199707][ T89] em28xx 5-1:0.132: No AC97 audio processor [ 569.240288][T11611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 569.258332][T11611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 569.288325][ T5914] pvrusb2: Hardware description: Terratec Grabster AV400 [ 569.305734][ T5914] pvrusb2: ********** [ 569.317230][ T5914] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 569.344577][ T5951] usb 4-1: Product: syz [ 569.356749][ T5914] pvrusb2: Important functionality might not be entirely working. [ 569.366399][ T5951] usb 4-1: Manufacturer: syz [ 569.372705][ T89] usb 5-1: Decoder not found [ 569.384772][ T89] em28xx 5-1:0.132: failed to create media graph [ 569.391727][ T5951] usb 4-1: SerialNumber: syz [ 569.422395][ T5914] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 569.422414][ T89] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 569.467493][ T5914] pvrusb2: ********** [ 569.468370][ T5951] usb 4-1: config 0 descriptor?? [ 569.476984][ T2346] pvrusb2: Invalid write control endpoint [ 569.534589][ T2346] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 569.545044][ T2346] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 569.553127][ T2346] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 569.563976][ T2346] pvrusb2: Device being rendered inoperable [ 569.570525][ T2346] cx25840 17-0044: Unable to detect h/w, assuming cx23887 [ 569.582263][ T2346] cx25840 17-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 569.595919][ T2346] pvrusb2: Attached sub-driver cx25840 [ 569.602239][ T2346] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 569.613040][ T2346] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 569.623456][ T2346] pvrusb2: Invalid write control endpoint [ 569.633720][ T5951] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 569.649129][T11615] ================================================================== [ 569.657188][T11615] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xac/0x420 [ 569.664539][T11615] Read of size 8 at addr ffff888079ed4740 by task v4l_id/11615 [ 569.672058][T11615] [ 569.674362][T11615] CPU: 1 UID: 0 PID: 11615 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 569.674374][T11615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 569.674381][T11615] Call Trace: [ 569.674386][T11615] [ 569.674391][T11615] dump_stack_lvl+0x189/0x250 [ 569.674407][T11615] ? __virt_addr_valid+0x1c8/0x5c0 [ 569.674420][T11615] ? rcu_is_watching+0x15/0xb0 [ 569.674431][T11615] ? __pfx_dump_stack_lvl+0x10/0x10 [ 569.674443][T11615] ? rcu_is_watching+0x15/0xb0 [ 569.674453][T11615] ? lock_release+0x4b/0x3e0 [ 569.674462][T11615] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 569.674475][T11615] ? __virt_addr_valid+0x1c8/0x5c0 [ 569.674487][T11615] ? __virt_addr_valid+0x4a5/0x5c0 [ 569.674499][T11615] print_report+0xca/0x240 [ 569.674510][T11615] ? v4l2_fh_open+0xac/0x420 [ 569.674519][T11615] kasan_report+0x118/0x150 [ 569.674529][T11615] ? v4l2_fh_open+0xac/0x420 [ 569.674539][T11615] v4l2_fh_open+0xac/0x420 [ 569.674549][T11615] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 569.674563][T11615] em28xx_v4l2_open+0x157/0x9a0 [ 569.674579][T11615] v4l2_open+0x1bf/0x3a0 [ 569.674590][T11615] chrdev_open+0x4cc/0x5e0 [ 569.674600][T11615] ? __pfx_chrdev_open+0x10/0x10 [ 569.674609][T11615] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 569.674620][T11615] ? __pfx_chrdev_open+0x10/0x10 [ 569.674628][T11615] do_dentry_open+0x953/0x13f0 [ 569.674641][T11615] vfs_open+0x3b/0x340 [ 569.674650][T11615] ? path_openat+0x2ecd/0x3830 [ 569.674662][T11615] path_openat+0x2ee5/0x3830 [ 569.674680][T11615] ? __pfx_path_openat+0x10/0x10 [ 569.674695][T11615] do_filp_open+0x1fa/0x410 [ 569.674706][T11615] ? __lock_acquire+0xab9/0xd20 [ 569.674715][T11615] ? __pfx_do_filp_open+0x10/0x10 [ 569.674730][T11615] ? _raw_spin_unlock+0x28/0x50 [ 569.674741][T11615] ? alloc_fd+0x64c/0x6c0 [ 569.674756][T11615] do_sys_openat2+0x121/0x1c0 [ 569.674767][T11615] ? __pfx_do_sys_openat2+0x10/0x10 [ 569.674777][T11615] ? exc_page_fault+0x82/0x100 [ 569.674790][T11615] ? do_user_addr_fault+0xc85/0x1380 [ 569.674800][T11615] __x64_sys_openat+0x138/0x170 [ 569.674811][T11615] do_syscall_64+0xfa/0xfa0 [ 569.674824][T11615] ? lockdep_hardirqs_on+0x9c/0x150 [ 569.674841][T11615] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.674850][T11615] ? clear_bhb_loop+0x60/0xb0 [ 569.674860][T11615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.674870][T11615] RIP: 0033:0x7fc54d2a7407 [ 569.674880][T11615] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 569.674893][T11615] RSP: 002b:00007fffd99733c0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 569.674910][T11615] RAX: ffffffffffffffda RBX: 00007fc54d9a5880 RCX: 00007fc54d2a7407 [ 569.674921][T11615] RDX: 0000000000000000 RSI: 00007fffd9974f1b RDI: ffffffffffffff9c [ 569.674933][T11615] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 569.674941][T11615] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 569.674947][T11615] R13: 00007fffd9973610 R14: 00007fc54db0c000 R15: 000055aa8d9784d8 [ 569.674958][T11615] [ 569.674962][T11615] [ 569.976559][T11615] Allocated by task 89: [ 569.980699][T11615] kasan_save_track+0x3e/0x80 [ 569.985354][T11615] __kasan_kmalloc+0x93/0xb0 [ 569.989917][T11615] __kmalloc_cache_noprof+0x3d5/0x6f0 [ 569.995267][T11615] em28xx_v4l2_init+0x10b/0x2e70 [ 570.000180][T11615] em28xx_init_extension+0x120/0x1c0 [ 570.005436][T11615] process_scheduled_works+0xae1/0x17b0 [ 570.010955][T11615] worker_thread+0x8a0/0xda0 [ 570.015518][T11615] kthread+0x711/0x8a0 [ 570.019558][T11615] ret_from_fork+0x4bc/0x870 [ 570.024117][T11615] ret_from_fork_asm+0x1a/0x30 [ 570.028861][T11615] [ 570.031166][T11615] Freed by task 89: [ 570.034946][T11615] kasan_save_track+0x3e/0x80 [ 570.039603][T11615] __kasan_save_free_info+0x46/0x50 [ 570.044781][T11615] __kasan_slab_free+0x5c/0x80 [ 570.049527][T11615] kfree+0x19a/0x6d0 [ 570.053397][T11615] em28xx_v4l2_init+0x1683/0x2e70 [ 570.058399][T11615] em28xx_init_extension+0x120/0x1c0 [ 570.063659][T11615] process_scheduled_works+0xae1/0x17b0 [ 570.069174][T11615] worker_thread+0x8a0/0xda0 [ 570.073735][T11615] kthread+0x711/0x8a0 [ 570.077783][T11615] ret_from_fork+0x4bc/0x870 [ 570.082349][T11615] ret_from_fork_asm+0x1a/0x30 [ 570.087080][T11615] [ 570.089378][T11615] The buggy address belongs to the object at ffff888079ed4000 [ 570.089378][T11615] which belongs to the cache kmalloc-8k of size 8192 [ 570.103402][T11615] The buggy address is located 1856 bytes inside of [ 570.103402][T11615] freed 8192-byte region [ffff888079ed4000, ffff888079ed6000) [ 570.117341][T11615] [ 570.119649][T11615] The buggy address belongs to the physical page: [ 570.126059][T11615] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x79ed0 [ 570.134810][T11615] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 570.143283][T11615] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 570.150821][T11615] page_type: f5(slab) [ 570.154781][T11615] raw: 00fff00000000040 ffff88801a027280 dead000000000122 0000000000000000 [ 570.163339][T11615] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 570.171899][T11615] head: 00fff00000000040 ffff88801a027280 dead000000000122 0000000000000000 [ 570.180547][T11615] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 570.189196][T11615] head: 00fff00000000003 ffffea0001e7b401 00000000ffffffff 00000000ffffffff [ 570.197854][T11615] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 570.206494][T11615] page dumped because: kasan: bad access detected [ 570.212888][T11615] page_owner tracks the page as allocated [ 570.218574][T11615] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 11593, tgid 11593 (syz.2.1487), ts 567826769272, free_ts 567263415896 [ 570.240078][T11615] post_alloc_hook+0x240/0x2a0 [ 570.244830][T11615] get_page_from_freelist+0x2365/0x2440 [ 570.250378][T11615] __alloc_frozen_pages_noprof+0x181/0x370 [ 570.256157][T11615] alloc_pages_mpol+0x232/0x4a0 [ 570.260979][T11615] allocate_slab+0x96/0x350 [ 570.265454][T11615] ___slab_alloc+0xf56/0x1990 [ 570.270101][T11615] __slab_alloc+0x65/0x100 [ 570.274488][T11615] __kmalloc_cache_noprof+0x411/0x6f0 [ 570.279836][T11615] audit_log_d_path+0xb8/0x1a0 [ 570.284573][T11615] audit_log_d_path_exe+0x42/0x70 [ 570.289567][T11615] audit_log_task+0x2b3/0x3c0 [ 570.294216][T11615] audit_seccomp+0x86/0x190 [ 570.298708][T11615] __seccomp_filter+0xce4/0x1e10 [ 570.303659][T11615] syscall_trace_enter+0xaa/0x160 [ 570.308660][T11615] do_syscall_64+0xd3/0xfa0 [ 570.313144][T11615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.319014][T11615] page last free pid 5835 tgid 5835 stack trace: [ 570.325316][T11615] __free_frozen_pages+0xbc4/0xd30 [ 570.330410][T11615] __put_partials+0x146/0x170 [ 570.335071][T11615] put_cpu_partial+0x1f2/0x2e0 [ 570.339807][T11615] __slab_free+0x2b9/0x390 [ 570.344196][T11615] qlist_free_all+0x97/0x140 [ 570.348763][T11615] kasan_quarantine_reduce+0x148/0x160 [ 570.354199][T11615] __kasan_slab_alloc+0x22/0x80 [ 570.359032][T11615] __kmalloc_cache_noprof+0x36f/0x6f0 [ 570.364386][T11615] kernfs_fop_open+0x397/0xca0 [ 570.369124][T11615] do_dentry_open+0x953/0x13f0 [ 570.373863][T11615] vfs_open+0x3b/0x340 [ 570.377913][T11615] path_openat+0x2ee5/0x3830 [ 570.382574][T11615] do_filp_open+0x1fa/0x410 [ 570.387060][T11615] do_sys_openat2+0x121/0x1c0 [ 570.391717][T11615] __x64_sys_openat+0x138/0x170 [ 570.396576][T11615] do_syscall_64+0xfa/0xfa0 [ 570.401065][T11615] [ 570.403365][T11615] Memory state around the buggy address: [ 570.408973][T11615] ffff888079ed4600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 570.417008][T11615] ffff888079ed4680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 570.425043][T11615] >ffff888079ed4700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 570.433079][T11615] ^ [ 570.439209][T11615] ffff888079ed4780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 570.447253][T11615] ffff888079ed4800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 570.455292][T11615] ================================================================== [ 570.496885][ T89] em28xx 5-1:0.132: Remote control support is not available for this card. [ 570.542244][ T43] em28xx 5-1:0.132: Closing input extension [ 570.584435][T11599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.612776][ T2346] pvrusb2: Invalid write control endpoint [ 570.621677][ T2346] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 570.631635][T11599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.643271][ T2346] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 570.651222][ T2346] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 570.661561][ T2346] pvrusb2: Device being rendered inoperable [ 570.667961][ T2346] cx25840 18-0044: Unable to detect h/w, assuming cx23887 [ 570.675796][ T2346] cx25840 18-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 570.696760][ T2346] pvrusb2: Attached sub-driver cx25840 [ 570.747085][ T2346] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 570.781334][ T2346] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 570.816216][T11615] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 570.823442][T11615] CPU: 0 UID: 0 PID: 11615 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 570.832445][T11615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 570.842496][T11615] Call Trace: [ 570.845766][T11615] [ 570.848673][T11615] dump_stack_lvl+0x99/0x250 [ 570.853247][T11615] ? __asan_memcpy+0x40/0x70 [ 570.857829][T11615] ? __pfx_dump_stack_lvl+0x10/0x10 [ 570.863034][T11615] ? __pfx__printk+0x10/0x10 [ 570.867616][T11615] vpanic+0x237/0x6d0 [ 570.871604][T11615] ? __pfx_vpanic+0x10/0x10 [ 570.876113][T11615] ? preempt_schedule+0xae/0xc0 [ 570.880971][T11615] ? __pfx_preempt_schedule+0x10/0x10 [ 570.886359][T11615] panic+0xb9/0xc0 [ 570.890082][T11615] ? __pfx_panic+0x10/0x10 [ 570.894503][T11615] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 570.900403][T11615] ? is_module_address+0x17/0xf0 [ 570.905343][T11615] ? v4l2_fh_open+0xac/0x420 [ 570.909936][T11615] check_panic_on_warn+0x89/0xb0 [ 570.914881][T11615] ? v4l2_fh_open+0xac/0x420 [ 570.919454][T11615] end_report+0x78/0x160 [ 570.923695][T11615] kasan_report+0x129/0x150 [ 570.928187][T11615] ? v4l2_fh_open+0xac/0x420 [ 570.932762][T11615] v4l2_fh_open+0xac/0x420 [ 570.937160][T11615] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 570.943127][T11615] em28xx_v4l2_open+0x157/0x9a0 [ 570.947971][T11615] v4l2_open+0x1bf/0x3a0 [ 570.952199][T11615] chrdev_open+0x4cc/0x5e0 [ 570.956599][T11615] ? __pfx_chrdev_open+0x10/0x10 [ 570.961521][T11615] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 570.967831][T11615] ? __pfx_chrdev_open+0x10/0x10 [ 570.972756][T11615] do_dentry_open+0x953/0x13f0 [ 570.977505][T11615] vfs_open+0x3b/0x340 [ 570.981553][T11615] ? path_openat+0x2ecd/0x3830 [ 570.986304][T11615] path_openat+0x2ee5/0x3830 [ 570.990888][T11615] ? __pfx_path_openat+0x10/0x10 [ 570.995811][T11615] do_filp_open+0x1fa/0x410 [ 571.000295][T11615] ? __lock_acquire+0xab9/0xd20 [ 571.005127][T11615] ? __pfx_do_filp_open+0x10/0x10 [ 571.010138][T11615] ? _raw_spin_unlock+0x28/0x50 [ 571.015058][T11615] ? alloc_fd+0x64c/0x6c0 [ 571.019378][T11615] do_sys_openat2+0x121/0x1c0 [ 571.024039][T11615] ? __pfx_do_sys_openat2+0x10/0x10 [ 571.029217][T11615] ? exc_page_fault+0x82/0x100 [ 571.033963][T11615] ? do_user_addr_fault+0xc85/0x1380 [ 571.039229][T11615] __x64_sys_openat+0x138/0x170 [ 571.044065][T11615] do_syscall_64+0xfa/0xfa0 [ 571.048560][T11615] ? lockdep_hardirqs_on+0x9c/0x150 [ 571.053755][T11615] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.059811][T11615] ? clear_bhb_loop+0x60/0xb0 [ 571.064481][T11615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.070359][T11615] RIP: 0033:0x7fc54d2a7407 [ 571.074769][T11615] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 571.094359][T11615] RSP: 002b:00007fffd99733c0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 571.102800][T11615] RAX: ffffffffffffffda RBX: 00007fc54d9a5880 RCX: 00007fc54d2a7407 [ 571.110843][T11615] RDX: 0000000000000000 RSI: 00007fffd9974f1b RDI: ffffffffffffff9c [ 571.118832][T11615] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 571.126807][T11615] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 571.134767][T11615] R13: 00007fffd9973610 R14: 00007fc54db0c000 R15: 000055aa8d9784d8 [ 571.142733][T11615] [ 571.146022][T11615] Kernel Offset: disabled [ 571.150331][T11615] Rebooting in 86400 seconds..