last executing test programs: 10m38.677539941s ago: executing program 4 (id=1441): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc01000019000100fdffffffffdbdf25ff010000000000000000000000000001000000000000000000000000000000014e23000bf7ff00060a00800032000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x1fc}, 0x1, 0x0, 0x0, 0x20002884}, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x2000) fsopen(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$dvb_demux(&(0x7f00000000c0), 0x0, 0x40200) r1 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x3b, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "e907f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f8a1d34c07c3260049e4f8d3ee0878ae95bc7f52363c468b257ffb3baf7aea4fb76dcfd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3c4891f9150d685a7d7c27df0355808390666e827d61dcc3a633bb0b1250b5a293e3877adc1a1b44b99c93d57fd720a170e7f5670e419dc64febf7ddc73fd4a5a0b6c281e05c541471d8d2a58f5edac665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) pwritev(r3, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001340)}], 0x5, 0x4, 0x5) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000001040)="99d3c9f30f09b993080000b800000000ba000000800f30660f38dfb1e4000000f4cfc4e1fe12230f01c3b9800000c00f3235010000000f30", 0x38}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r4, 0xae80, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r6 = fcntl$dupfd(r5, 0x0, 0xffffffffffffffff) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0x8, 0x6, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r7 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r7, &(0x7f0000000200)=[{&(0x7f0000000000)='4', 0x1}], 0x1) 10m37.232924393s ago: executing program 4 (id=1450): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r1, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x20000, 0x0}, &(0x7f0000000340)="1a1229c5e4e8", 0x0, 0xfffffffc, 0x10, 0x2, 0x0}) ioctl$TCXONC(r0, 0x540a, 0x3) close(r0) 10m37.117640855s ago: executing program 4 (id=1452): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="6800000042000100000000000000000003010000060000002600010000112233445566778899aabb88a8450088a800000e0001170000010203040506070800000c00020006002000080000000c0003"], 0x68}}, 0x0) (fail_nth: 11) 10m36.729497286s ago: executing program 4 (id=1456): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x404, 0x80000000, 0x0, 0xfffffc01, 0x0, 0x6, 0x1, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb99, 0xfffffffe, 0x1, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x482, 0x61f, 0x300000, 0x3, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0x0, 0x3, 0xa, 0x8da8, 0x2, 0x200, 0xffffffff, 0x5, 0xe, 0x4, 0x2, 0x6f, 0x243, 0x7, 0x1, 0x199d, 0x6, 0x2, 0x9, 0x9, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x3, 0x25, 0x5, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x2, 0x8, 0x10000, 0x3fe, 0x7ffd, 0x3, 0x3, 0x297, 0x5, 0x0, 0xa, 0x4, 0x0, 0xc, 0x0, 0xfffffffe, 0x8, 0x1000003, 0x10, 0xfffffff9, 0xffffffff, 0x7, 0x1, 0xffffffff, 0x6, 0x2000008, 0x800, 0xfdff, 0x2, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0xb, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x1fe, 0x3], [0x401, 0x8000e584, 0xffff, 0xcd3, 0xb, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0x1e86, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x7, 0x200003, 0x100, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0x9, 0x8, 0x3, 0xbf23, 0x9, 0x9, 0x956, 0x0, 0x5, 0xe, 0x3, 0x100fffd, 0x93, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0x0, 0x0, 0x7d, 0x401, 0x5], [0x108f, 0xffff, 0x3, 0x0, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x406, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x8000, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x0, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413fd, 0x4, 0x20008, 0x8a5, 0x8a, 0x46, 0x9, 0x6, 0x4, 0x168, 0x800, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0xf, 0x3, 0x200, 0x207, 0xd4, 0xfffffffd, 0xa, 0xe, 0x101, 0xfff, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) write$uinput_user_dev(r2, &(0x7f0000000300)={'syz1\x00', {0x706, 0x0, 0xdad2, 0x8}, 0x30, [0x9, 0x0, 0x80, 0x8, 0x1ff, 0xc, 0x70000, 0xffffff00, 0x4, 0x3, 0x2, 0x5, 0x0, 0x3, 0x0, 0x8, 0x6, 0x2, 0x6, 0x101, 0x6, 0x9, 0x7, 0x3, 0x5, 0x10, 0x7fffffff, 0x5, 0x1, 0x3, 0xfffffff8, 0x200, 0x6, 0xfffffff8, 0x0, 0x10000, 0x5, 0x7, 0x8, 0x8, 0x9, 0x36, 0x0, 0x6, 0x2, 0x9727, 0x4, 0x9, 0x8, 0x273, 0x1, 0x8, 0x1ff, 0x0, 0x900, 0x800, 0x8, 0x24ec, 0x4, 0x6, 0xb, 0x4, 0x33, 0x2], [0x401, 0x0, 0x8001, 0xf58, 0x8, 0xfffffffa, 0xa, 0x8000, 0xbd3a, 0x0, 0x5, 0x7, 0x2, 0x5, 0x921, 0x0, 0xf, 0x0, 0x7, 0x2, 0x99d, 0x2, 0xe24, 0x4, 0x4, 0x8000, 0x5, 0x80000001, 0x2, 0x3, 0x3, 0x5, 0x8001, 0x101, 0x2, 0xa, 0x2, 0x97, 0x1c8, 0x1, 0x5, 0x9, 0x18d, 0xf2, 0x800, 0x7, 0x5, 0x5, 0xffffcb6b, 0x80000000, 0x6, 0xffffff01, 0x1, 0x7f, 0x9, 0x7, 0x23d, 0x4, 0x1, 0xff, 0x80000001, 0x4, 0x7, 0x5], [0x8000, 0x80000001, 0x9, 0xff, 0x81, 0xe4, 0xd2, 0xd0fd, 0x6, 0x0, 0x2, 0x17, 0x4, 0x4, 0x20000, 0x80000001, 0x88, 0x97, 0x800, 0x8, 0x2, 0x6, 0x0, 0x6c60d0d6, 0x68, 0x147, 0x1, 0x5, 0x100, 0xff, 0x3ff, 0xbeb, 0xfa, 0x2, 0x0, 0x0, 0x2, 0x800, 0x7ff, 0x2, 0x8, 0x10000, 0xfff, 0x5, 0x1, 0x6, 0x8, 0xd5c, 0x3e, 0xf8000000, 0x3, 0x8001, 0xfffff800, 0x5, 0x9, 0xf44a, 0x4, 0x3, 0x6, 0x6, 0x2, 0x4, 0xa, 0x8bae], [0xd, 0x2, 0x10001, 0x8000, 0x3, 0x8, 0x10, 0x9, 0xfffffe00, 0x9adc, 0x7ff, 0x3, 0x1, 0x7f, 0xfffffffc, 0x0, 0x800, 0x1ff, 0x8, 0x0, 0x0, 0x3, 0x7, 0x9, 0x70, 0x8, 0x6e2348c5, 0x13, 0x1130, 0xffffffff, 0x2, 0x2, 0x0, 0x3, 0x6, 0x2, 0x8, 0x3, 0x0, 0x5, 0xff, 0x5, 0x3, 0x464, 0x3, 0x4, 0x5, 0x4, 0x8000, 0x2, 0xffff, 0x6, 0x7, 0x6, 0xb, 0x7, 0x3, 0x7, 0x4, 0x8, 0x4, 0x6b, 0x4, 0x9]}, 0x45c) readv(r2, &(0x7f00000001c0)=[{&(0x7f00000012c0)=""/41, 0x29}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000700)='mountinfo\x00') r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x26}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r6, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r5, 0x0}]) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e22, 0xffffffff, @mcast1, 0x9}}, 0x8, 0x0, 0x2762, 0x4, 0x10, 0x1, 0x3}, 0x9c) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x74, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x44, 0x2, {{0x3, 0x2003, 0x435f, 0x7, 0xffffffff, 0x3}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x93, 0x7fffffff, 0x3, 0x3, 0x8}}]}, @TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(0xffffffffffffffff, 0x80184151, &(0x7f00000000c0)={0x0, &(0x7f0000000080)="2aef4ebd841f414da6d2ea498ad4026e7e7ca568005b7bedb8599d6233ab78c059", 0x21}) sendto$packet(r9, &(0x7f0000000240)="800000800000210ee7decd7a0003", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r8, 0x1, 0xd8, 0x6, @broadcast}, 0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="70000000480001002abd7000fedbdf250a000000", @ANYRES32=0x0, @ANYBLOB="05000000140001000000000000000000000000000000000014000100ff020008000000000000000000000001080002000c0000000800020002000000aeff02000100000014000100fc010000000000000000040000000001282e1a197f"], 0x70}, 0x1, 0x0, 0x0, 0x4008804}, 0x20040040) 10m36.458199546s ago: executing program 4 (id=1459): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)=@ipv6_newroute={0x1c, 0x18, 0x111, 0x1, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 10m36.046068143s ago: executing program 4 (id=1465): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) mmap$snddsp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000009, 0x13, r1, 0x6000) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x8, 0x50, 0x60, "", [{{0x9, 0x4, 0x0, 0x40, 0x2, 0x7, 0x1, 0x3, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x5, 0x4, 0x1a}}}}}]}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0x5501, &(0x7f00000000c0)=0x18) 10m35.666754086s ago: executing program 32 (id=1465): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) mmap$snddsp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000009, 0x13, r1, 0x6000) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x8, 0x50, 0x60, "", [{{0x9, 0x4, 0x0, 0x40, 0x2, 0x7, 0x1, 0x3, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x5, 0x4, 0x1a}}}}}]}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0x5501, &(0x7f00000000c0)=0x18) 11.168483026s ago: executing program 1 (id=4785): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000d00)='/proc/asound/seq/clients\x00', 0x41, 0x0) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)="aefdda9d24e100000090f57f07703aeff0f64ebbee07022c2277ae11b44e65d76641cb010052f436dd2a", 0x2a}], 0x1) r2 = syz_io_uring_setup(0x34b9, &(0x7f0000000540)={0x0, 0xba, 0x1, 0x1, 0xec}, 0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, r3, r4, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x4, 0xfffffffffffffffd, 0x0, 0x0, 0x1c}) io_uring_enter(r2, 0x1, 0x1, 0x1, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000002f000903feff00000000000006"], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r6) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="2800000009867981000000000000c9ad446700000900020073790004000000000500010007004000497b5d716e2a0d0d044c8b81ff3dd1f5ae1ee7"], 0x28}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) socketpair(0x27, 0x4, 0x2, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) fstat(r8, &(0x7f0000000300)) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISASSOCIATE(r7, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="02002abd70c17a7f6c9f6ab5c72e17d5d86d128af1184421143600010000"], 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x40) syz_open_procfs(0x0, &(0x7f0000000040)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0xc0200) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)}, 0x0) r10 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r10, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r10, &(0x7f00000004c0), 0x48, 0x820b, 0x0) setsockopt$inet6_int(r10, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r10, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) r11 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r11, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r11, 0x0, 0x0, 0x0, 0x0, 0x0) 7.946477939s ago: executing program 1 (id=4798): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=ANY=[@ANYBLOB="4c0000001000ffff27bd7000fadbdf2500000000", @ANYRES32=0x0, @ANYBLOB="100a1900231201002c00128009000100626f6e64001800001c00028005000c0002000000050001000100000008000b"], 0x4c}, 0x1, 0x1000000000000, 0x0, 0x20000011}, 0x44040) 7.410751105s ago: executing program 1 (id=4801): syz_usb_connect$uac3(0x0, 0xa0, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e68ad01002040080b0201012130c60904000000010130000a2401040900"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0x1, 0x1, 0x0, 0x1}) r0 = socket(0x1, 0x80802, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_batadv\x00'}) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000000), 0x90) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x400000}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x240440c4) r2 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r2, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty, 0xffff8301}, 0x20) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0xc9d3, 0x0, 0x0, 0x2}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f00000007c0)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000180)={0x2e, 0x42, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(r3, r8, &(0x7f0000000740)={0x0, 0x1460, 0x420, 0x1, 0xb2, 0x0, r3}, &(0x7f00000002c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5e4a, 0x4000, 0x80, 0x2a9, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd576, 0x20, 0x1009, 0x27f, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3cb5, 0x100, 0xffffffff, 0xed}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8a5a, 0x8000, 0x2000003, 0x2a3, 0x0, r3}}], 0x4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x6}, 0x0, r7, '\x00', {0x1, 0x487, 0x0, 0x0}}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) 5.652987264s ago: executing program 2 (id=4808): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000d00)='/proc/asound/seq/clients\x00', 0x41, 0x0) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)="aefdda9d24e100000090f57f07703aeff0f64ebbee07022c2277ae11b44e65d76641cb010052f436dd2a", 0x2a}], 0x1) r2 = syz_io_uring_setup(0x34b9, &(0x7f0000000540)={0x0, 0xba, 0x1, 0x1, 0xec}, 0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, r3, r4, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x4, 0xfffffffffffffffd, 0x0, 0x0, 0x1c}) io_uring_enter(r2, 0x1, 0x1, 0x1, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000002f000903feff00000000000006"], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r6) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="2800000009867981000000000000c9ad446700000900020073790004000000000500010007004000497b5d716e2a0d0d044c8b81ff3dd1f5ae1ee7"], 0x28}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) socketpair(0x27, 0x4, 0x2, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) fstat(r8, &(0x7f0000000300)) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISASSOCIATE(r7, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="02002abd70c17a7f6c9f6ab5c72e17d5d86d128af1184421143600010000"], 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x40) syz_open_procfs(0x0, &(0x7f0000000040)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0xc0200) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)}, 0x0) r10 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r10, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r10, &(0x7f00000004c0), 0x48, 0x820b, 0x0) setsockopt$inet6_int(r10, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r10, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) r11 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r11, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r11, 0x0, 0x0, 0x0, 0x0, 0x0) 5.12352707s ago: executing program 1 (id=4812): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x18, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) 4.96324974s ago: executing program 1 (id=4814): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000020000000000000002000000183a00000200000000000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x7, 0x4c, &(0x7f0000000080)=""/76, 0x41000, 0x4, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000140)={0x2, 0xb, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000180)=[{0x2, 0x3, 0xf, 0xc}, {0x3, 0x5, 0x3, 0x2}, {0x4, 0x2, 0x4, 0x2}, {0x3, 0x1, 0x4, 0x9}, {0x3, 0x4, 0x10, 0x7}, {0x5, 0x5, 0x1}], 0x10, 0x8001}, 0x94) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x7a) pipe2(0x0, 0x0) io_submit(0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) r3 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002c10db287"], 0x0) syz_usb_control_io(r3, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESDEC=r3], 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x8) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) r5 = timerfd_create(0x0, 0x0) timerfd_settime(r5, 0x3, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0) timerfd_settime(r5, 0x0, &(0x7f0000000080)={{0x77359400}}, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)="5a80648c3d5dbed5a4f243f2a246a59e3481bdbbdb9f1422de00003a4860d6fedca14bc35b9ff3ac277e313ca1439fb7", 0x30}], 0x1}, 0x0) recvmsg$kcm(r4, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000100)=""/189, 0x9a}, {&(0x7f0000002b80)=""/191, 0xbf}, {&(0x7f00000001c0)=""/124, 0x7c}, {&(0x7f0000000740)=""/195, 0xc3}, {&(0x7f0000003cc0)=""/4077, 0xfed}, {&(0x7f00000002c0)=""/193, 0xc1}, {&(0x7f00000003c0)=""/139, 0x8b}, {&(0x7f0000000480)=""/81, 0x51}, {&(0x7f00000070c0)=""/4096, 0x1000}], 0x9}, 0x0) inotify_init() r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r7, @ANYBLOB="40005200060010"], 0x24}}, 0x0) connect$can_j1939(r0, &(0x7f0000000500)={0x1d, r7, 0x0, {0x0, 0xff, 0x3}, 0x2}, 0x18) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69) syz_open_dev$ttys(0xc, 0x2, 0x0) close(r1) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000380)="7472616e73706f08743d66632c7472616464723d6e6e2d307833333a706e2d307834343434343434343434340500000000000065f94d0073745f7472616464723d6e6e2d30782d3131313131313131313131312131313a706e2d30783232323232c535828a0f32323232323232323232322c2c944fec3f9d42708026509b1a4140ce524813b824d076d500bf82c40e5faaae10148d99faf4", 0x1f) 3.917612804s ago: executing program 3 (id=4819): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000800)={0x0, 0x6, 0xc, {0x600000, 0xe}, 0xbfc, 0x1000}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0xfe, 0x7fff0006}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa8203, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000080)={0x20004, r3, 0x2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000440)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x59, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f00000001c0)={0x1, r6, 0xff, 0x100007, 0xa, 0x1ff, 0x20}) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000001b0f000000000a30000000050aefcf0000000000000000020000020900010073797a30000000000900030073797a32000000000400048014"], 0x58}, 0x1, 0x0, 0x0, 0x2800c005}, 0x4) 3.801789171s ago: executing program 2 (id=4821): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x9f) socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x545040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x400}) socket$kcm(0x2, 0xa, 0x2) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) unshare(0x2040400) r1 = semget$private(0x0, 0x7, 0x193) semtimedop(r1, &(0x7f0000000200)=[{0x0, 0xffff, 0x2000}, {0x4, 0x3, 0x1800}], 0x2, 0x0) semop(r1, &(0x7f0000000040)=[{0x1, 0xe8c7, 0x1000}], 0x1) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') r2 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x326, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa1f08004500001c000000044011907800000000000000004e244e2000089078"], 0x0) landlock_restrict_self(r2, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) renameat2(r4, &(0x7f00000001c0)='./file0\x00', r4, &(0x7f0000000200)='.\x02\x00', 0x4) renameat2(r4, &(0x7f0000000000)='.\x02\x00', r4, &(0x7f0000000140)='./file0\x00', 0x2) 3.733468449s ago: executing program 3 (id=4822): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c010000160001000000000000000000ffffffff000000000000000000000000e00000020000000000000000000000000000000000000000000000003c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000006c000000ac1414aa0000000000000000000000000000000000000000000010320000000000000000000000000000000000000000000000000000007e00000000000000000400000000000000000000000000000000000000000000000000000000000000ff0f00000000000000000080000000000000000000000000000000000000000000000000000000010000000000000000000000003210000008"], 0x12c}}, 0x0) 3.658037008s ago: executing program 3 (id=4824): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x18, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) 3.589402382s ago: executing program 3 (id=4826): socket(0x1e, 0x80000, 0xa68c) (async) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000bd02c440560831ac1e93010203010902120081000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) r1 = syz_usb_connect(0x0, 0x5d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000b36cec20ca08602058c60102030109024b0e01000000000904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$uac1(r1, 0x0, 0x0) (async) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) (async) syz_usb_control_io$printer(r1, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000880)={{0x12, 0x1, 0x2c9, 0xf3, 0x52, 0xac, 0x8, 0x9fb, 0x602d, 0x8ffc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x10, 0xc0, 0x9, "", [{{0x9, 0x4, 0x2, 0x4, 0x0, 0x27, 0xc1, 0xd1, 0x1}}]}}]}}, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0}) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) (async) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000e00)={0x2c, &(0x7f0000000bc0)={0x20, 0x12}, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000007c0)={0x18, &(0x7f00000005c0)=ANY=[@ANYBLOB=' \b\f'], 0x0, 0x0, 0x0, 0x0}) 3.356081241s ago: executing program 5 (id=4828): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, 0x3f9, 0x1, 0x0, 0x25dfdbfb, {0x1, 0x1}, [""]}, 0x18}}, 0x18080) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000540)="43210098") socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) (async) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async) sendmsg$AUDIT_TTY_SET(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, 0x3f9, 0x1, 0x0, 0x25dfdbfb, {0x1, 0x1}, [""]}, 0x18}}, 0x18080) (async) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000540)="43210098") (async) 3.264173124s ago: executing program 0 (id=4829): landlock_create_ruleset(0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xa) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x21) r1 = syz_io_uring_setup(0xf04, &(0x7f0000000400)={0x0, 0x595f, 0x8, 0x0, 0x10000051}, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x23456, 0x0, 0x12, 0x1}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r7, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r6, 0x0}]) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000100)=0x2000002) readv(r5, &(0x7f00000001c0)=[{&(0x7f0000000780)=""/4080, 0xff0}], 0x1) r8 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) r9 = socket(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) setfsuid(0x0) write(r9, &(0x7f0000000000)="2400000011005f0414f900655e00000000ae00002d000000000000ea08000f0001000000", 0x24) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r10 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) fsetxattr$security_capability(r10, &(0x7f0000000000), 0x0, 0x0, 0x1) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000200)={'lo\x00'}) syz_emit_ethernet(0x3a, &(0x7f00000004c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa1908004500002c00000000000690780a010100ffffffff00004e29a722717eb753711252ed6629bd5a30da6b41f3f71c1a32eeb04fca50585eb5383f1b3ddce0b52f20e21df141f9a184863e8040a7fb4dfb17ca50c2c3f3d3c5e8318706441bd34161ef7d4a3abff8b339d644666498fbc9ea26cf388d8f5c8f60d42abc062bac1de23dbe722b9e9a9b24bfe3c824c6c0aa6671a9f7dddf8685b26d124f219b6998bf3a87582af6b6ac3927def66d30aa9066668d194c39fc1040b9efffd5582b7d88fff0b9c4c851ec3ee4618b4970069bc7c57a21b0b9b1254eafe754ca7e3764beebd61eb584e5c52ea703c02bd46d909c8db9fbf4aabe12998fd02751475bd894ffadb9f442e3ec8abb84a664d3754d093248a85c8b4ecde1594353e01d0bc2771b4fd100a1aed10371dd9295f738303ec58ed228f9e2ab71830785d846a752cde4ff495faf599b0833a37fde312c9dfeccf5680e915c9061fadd3ec7dc886442646a72a57f8c93e3f53194669d5929b7de00816d8534e3f3d2cd854bc0da8ea96705d0df92bb3c7b7c1d273394a2271418bfbc47f60edf7e1b62ac2ba1cbabdcc6fae5b0141011b07270520aac8b0f257c45b65eb034d5be90e6c870c8fb6167f944a75b6a275d0e61982929ed1f3ba09908795575de086f08b6fbe75db565c7b98e4a0dc8ac8e850c8605b2df68ab4e63f2b31954911bad65e27ad7d287b6818fa72c19fc9e2c0dce821fd3c2b1aec3addea2c367022ad9c8e61a30dd601f8bafde60d1318981112cd8f738f48180171da64837ac14affcc535485cce9d831291036b223752aef1c564131f932c52d4d778035ec1a42d05f21968d190940be2209a8f0dc3cf0b64d5e92af8f19fe5d05b5b51c0cd3395f9d2f79e88b82294439c1ddda97613cdc5a4e2b195c2dc1e986e5e20d4182966955966b795f225a9cedd26a0fe67b3dc63cd3f00845572004b1bd9b51bfac415ccd087", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="600404019078000303020000"], 0x0) socket$packet(0x11, 0x2, 0x300) 3.194125568s ago: executing program 5 (id=4830): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a000007080002400000fd020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) 3.137441869s ago: executing program 5 (id=4831): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf8}}, 0xffbfffff}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x24088000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080ba785d960001000000000000fffffffd7efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000000000000004000", [0x8, 0xffffffff9673e35d]}}) 2.742712664s ago: executing program 2 (id=4832): r0 = syz_open_dev$sg(&(0x7f00000001c0), 0x0, 0x200000) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f8, 0x8, 0x70bd26, 0x25dfdbff, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r1, &(0x7f0000000280)=ANY=[@ANYBLOB='lock io'], 0xc) r2 = epoll_create(0x12d6) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)) write$vga_arbiter(r1, &(0x7f0000000040)=@unlock_all, 0xb) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) ioctl$XFS_IOC_FREE_EOFBLOCKS(r0, 0x8080583a, &(0x7f0000000200)={0x0, 0x5, 0x3, 0xff, 0x10, 0x0, 0x5}) 2.434373002s ago: executing program 3 (id=4833): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000844) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000340)=0xc6, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x60042, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) write$sndseq(r1, &(0x7f0000000080)=[{0x32, 0xc, 0x0, 0xfd, @tick, {}, {0xe}, @connect}], 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x5, @empty}, 0x1c) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x140) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x8}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={r2, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e22, 0x3, @empty, 0x8}]}, &(0x7f0000000280)=0x10) r3 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) r6 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000402609333340000102030109022d000101ff90090904000d020301010509210500770122b10f09058103204003086409050203"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4009}, 0x8000002) syz_usb_control_io(r6, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r5, 0xc0884113, &(0x7f0000000680)={0x1, 0x1, 0xffff4f11, 0xfffd, 0xffffdfffffffffff, 0x9, 0xd18, 0x200, 0x4a, 0x28, 0x80000005, 0x2}) ioctl$SNDCTL_DSP_GETOPTR(r4, 0x800c5012, &(0x7f0000000000)) 2.309424394s ago: executing program 2 (id=4834): socket$inet6(0xa, 0x1, 0x8010000000000084) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0x2, 0x3, 0x84) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f00000002c0)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r2, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x50000000}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000400)}], 0x1}}], 0x1, 0x81) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000009c0)=ANY=[@ANYBLOB="12e01b3989dd", @ANYRES32=r1], 0x1000f) 2.238214122s ago: executing program 0 (id=4835): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="020320001900000000000000000000000400030000000000000000000000000000000000000000010000000000000000030006000000000002004e207f00000100000000000000000400040000000000feffffffffffffff0000000000000003000000000000000002000100000000000000000600000000030005000000000002004e21ffffffff00a849000000000005000700000000000a004e2200000005fc0100000000000000000000000000000000000000000000020013"], 0xc8}}, 0x0) 2.178785051s ago: executing program 2 (id=4836): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40102, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xe) write$binfmt_misc(r1, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000280)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xca}, 0x38) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491", 0x89}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea", 0x26}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23a", 0x1a}], 0x2, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000180)="f7790066baa00066b86b42460f22c7d466ba420000b8e20066ef0f29902cbb0000c4e2b1ba8c88d90000006666f6440f386b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x38, 0x0, 0x0) write$FUSE_STATX(0xffffffffffffffff, &(0x7f00000002c0)={0x130, 0x0, 0x0, {0x4000000000007, 0xc, 0x0, '\x00', {0x20, 0x80000000, 0xf, 0x0, 0xffffffffffffffff, 0x0, 0xa000, '\x00', 0x3, 0x8004, 0xd60b, 0x8000000000000001, {0x200b, 0xfffffff0}, {0x203d7f, 0x2, 0xc000000}, {0x40c, 0x9}, {0xfffffffffffffffd, 0xdb23}, 0xffffffff, 0x5, 0x1ff, 0x8000}}}, 0x130) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x4d, 0x3, 0x7, 0x0, 0xf84, 0x8, 0x0, 0xe3, 0x5, 0x7, 0x5, 0x3, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, '\x00', 0x5, 0x3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.073129204s ago: executing program 0 (id=4837): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1c) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000000)={0x10004, 0x0, 0x4, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (async) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) (async) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000040)={0x54, @tick=0x5, 0x6, {0x3, 0x4}, 0x9, 0x1, 0xfe}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x103002) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f00000000c0)={0x7, 0xb, 0xd15, {0x2, 0xd}, 0x40, 0x3}) (async) userfaultfd(0x800) (async) ioctl$KVM_SET_BOOT_CPU_ID(r0, 0xae78, &(0x7f0000000140)) (async) fcntl$setflags(r1, 0x2, 0x1) r2 = eventfd2(0x55, 0xe93781ae2907a292) (async) r3 = eventfd(0xcfe9) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000180)={r2, 0x6, 0x2, r3}) (async) r4 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r5 = ioctl$KVM_GET_STATS_FD_cpu(r4, 0xaece) ioctl$DRM_IOCTL_GET_CLIENT(r5, 0xc0286405, &(0x7f0000000200)={0x2, 0x4, {}, {0x0}, 0x5, 0x80}) r7 = getpid() sendmsg$nl_generic(r5, &(0x7f0000001500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000014c0)={&(0x7f0000000240)={0x1260, 0x13, 0x200, 0x70bd25, 0x25dfdbff, {0xf}, [@typed={0x8, 0x91, 0x0, 0x0, @ipv4=@private=0x1000000}, @generic="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", @nested={0x4, 0x46}, @nested={0x240, 0xf6, 0x0, 0x1, [@nested={0x4, 0x105}, @generic="842f2096b28cb73bea69f9399a423f570ac86a1befff7a4f1cbc343ad5fc91c77a675017fcc1d0bbe242c02e791934b140bacac93d04c6584296d3a5c22a71961d9ea17244de96c8c2e8353e7c9019089dbf57a0c35bdac43c13e0acfbdbe89198b978974a87eea1e1ce24d6845959c53243c35295867115", @typed={0x8, 0x83, 0x0, 0x0, @pid}, @generic="f7e9e53a25b01e9686aacca805f5b60fb2adac7bf3c0d350c681cb8aa62a25696a487d477c47cf5d0cd05ddd6e7fdf26f8942bc3d305c1edd2d71f1b375346e19d1323a3ede32db14e45c0d536d8378aaf90379844817e8faf6dee13e89e84880e8e4f3d9f809654489fa81aceec007bff487fcd5cfaaba5c8eda460f2b228a62ecd5566aeefcc88838c20062dd949d36b2ca6bb33b5dc08f78e8fe2f5334843fe52451fb609e0", @generic="3cbd73acfe1c90c118565b5200d0ab06c84b158b7055377d70a75f8ba06b0a11a52ce016613a2b6899d2be140ecfb3b83b727482ab9762e08d2e043298bfdc4dd8d2f22d27aee8bd1e6ab867c15887db43e815a94151adccfcf61952b5669f3e16f2cf537c8f2cf6ec20770e73898f6db12933b8409ba0ffef593d761b1d106c831d12fddffc9c3acb25f61abe9e571daa0d077986fa7047acf6ae52923ad08038711f707e579b216921602a80cf4fce40522364631500dcd041c168fabc8f52659de1a3da49d44e56c6874d95923bd4b2d71b6c8942bcd86f76cf3f5048cc3ddf90cc0b8b8edea7830f6abd6c1a57c55c0430991ee3f8a84f867e7d11", @nested={0x4, 0xef}, @typed={0x8, 0x130, 0x0, 0x0, @uid=r6}, @typed={0x8, 0x120, 0x0, 0x0, @pid=r7}]}]}, 0x1260}, 0x1, 0x0, 0x0, 0x20000080}, 0x10) (async) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000001540)={{0x58000, 0x0, 0x10, 0x0, 0x5, 0x0, 0x8, 0xfa, 0x8f, 0x6, 0xc, 0x5}, {0xeeeb7000, 0xffff1000, 0xf, 0x2, 0x3, 0x9, 0x5, 0xfd, 0x9, 0xfd, 0x1, 0x73}, {0xd000, 0x5000, 0xd, 0x5, 0x9, 0x4c, 0x64, 0x82, 0x7, 0x3, 0x2, 0x1}, {0xb000, 0x3000, 0xb, 0x7, 0x3, 0x2, 0x3, 0x10, 0x8, 0xf, 0xf, 0x3}, {0x40000, 0x9000, 0x3, 0x4, 0x4, 0x80, 0x3, 0x8, 0x9, 0x6, 0xf}, {0xeeee8000, 0xd000, 0x3, 0x5, 0x1, 0x5, 0x8, 0xad, 0x7, 0x9, 0x3, 0x1}, {0xeeee8000, 0xc000, 0x10, 0x5, 0xaf, 0x3, 0x8, 0x10, 0x1, 0x9, 0xeb, 0x6}, {0xeeee0000, 0xdddd1000, 0x10, 0xa6, 0x6d, 0x5, 0x7, 0x8, 0xec, 0x7, 0x10, 0x5}, {0xdddd0000, 0x2}, {0x200000, 0x3}, 0x10009, 0x0, 0xdddd0000, 0x24054c, 0xc, 0x8101, 0xf000, [0x8, 0x7, 0x0, 0xc]}) (async) file_setattr(r5, &(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)={0x80000400, 0x69, 0x5, 0x9, 0xa}, 0x18, 0x1000) (async) ioctl$KVM_CLEAR_DIRTY_LOG(r0, 0xc018aec0, &(0x7f0000001b00)={0x103ff, 0x80, 0x200, &(0x7f0000001700)=[0x5, 0x79, 0x1, 0x1, 0x1ff, 0x8, 0x4, 0xfffffffffffffffd, 0x5, 0x5, 0x9, 0x60, 0x4, 0x9, 0xca, 0x6, 0x3, 0x7, 0x6, 0xe, 0x7, 0x3, 0x3, 0x18fb, 0x0, 0x40, 0xa677, 0x8, 0xc, 0x81, 0x0, 0x40, 0x2, 0x9, 0xfff, 0x2, 0x8000000000000001, 0x7, 0x8, 0x6, 0x2, 0xe, 0x7, 0xffffffff, 0x10, 0x9, 0xff, 0x7fffffff, 0xffffffff, 0x9, 0x3, 0x7, 0x1, 0x6, 0xf, 0x5, 0x80, 0x5, 0x10000, 0x0, 0x6, 0x0, 0x5, 0xfffffffffffffff8, 0x99b4, 0xb, 0x2, 0x80000001, 0x0, 0x60, 0x7, 0x80000000, 0xe00, 0xffffffff, 0x0, 0x0, 0xf, 0x400, 0x8, 0x5, 0x5, 0xb, 0x6, 0x1000, 0x2, 0x6, 0x200, 0xb8, 0x4, 0x5, 0x3, 0x1ff, 0x80, 0x1, 0x0, 0x1ff, 0x8001, 0xd5, 0x6, 0x897, 0x2, 0x6, 0x3, 0x4, 0x7, 0x1, 0xffff, 0x7, 0x6, 0x8, 0x1, 0x1000, 0x0, 0x2, 0x5, 0x3, 0x2, 0x3, 0x6, 0x9, 0x8, 0x0, 0x7fff, 0x0, 0x704, 0x100000001, 0x4, 0x7]}) ioctl$KVM_CAP_XEN_HVM(r5, 0x4068aea3, &(0x7f0000001b40)={0x26, 0x0, 0xe1}) fchdir(r3) (async) ioctl$DVB_DEMUX_DMX_SET_BUFFER_SIZE(r5, 0x6f2d, 0x0) (async) r8 = openat$vsock(0xffffffffffffff9c, &(0x7f0000001bc0), 0x101000, 0x0) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000001c00)={r8, 0x49, 0x4, r5}) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f0000001c40)={0x7, 0xfff7, 0x3, 0x2, 0x0, 0x6, 0x40, 0x7, 0x0}, &(0x7f0000001c80)=0x20) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000001cc0)={r9, @in={{0x2, 0x4e24, @rand_addr=0x64010102}}, 0x2, 0x721, 0x8, 0x7f9f, 0xc9, 0xf, 0x5}, &(0x7f0000001d80)=0x9c) (async) r10 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x1f) ioctl$KVM_IOEVENTFD(r10, 0x4040ae79, &(0x7f0000001dc0)={0x10000, 0x8001, 0x8, r5, 0x6}) (async) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000001e00)={0x4, 0x54000, 0x2, 0x60, 0x6}) 1.997303677s ago: executing program 5 (id=4838): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000f9000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000037000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 1.969911337s ago: executing program 0 (id=4839): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40938, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0xb173, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000140)={0x3e, 0x1, 0x2, "4749572000000021000000080e1609d60000000000d70200", 0x30383653}) 1.808129766s ago: executing program 1 (id=4840): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50) r0 = socket$inet6(0xa, 0x80003, 0x6) set_mempolicy(0x6005, &(0x7f0000000080)=0x1, 0x4) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x40, @empty}, 0x1c) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x8000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000280)={0x7, 0x2, 0x2, "d5470000002f1a0e0000000700", 0x51424752}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x15, &(0x7f0000000000)=[{0x2, 0x4, 0x7, 0x1}, {0x61, 0x6, 0x3, 0x1}]}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3, 0xfff3}, {0x1}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x3, 0x4, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private0, @in=@rand_addr=0x64010100, 0x0, 0x0, 0x4e22, 0x800, 0xa}, {0xfffffffffffffffe, 0x0, 0x4}, {0x0, 0x4, 0xfffffffffffffc01, 0xa78a}, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@loopback, 0x4d6, 0x33}, 0x0, @in=@loopback, 0x0, 0x3, 0x1, 0x7}}, 0xe8) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000f40)={&(0x7f0000000e40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000e80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000ec0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000f00)=[0x0, 0x0, 0x0], 0xa, 0x9, 0x6, 0x3}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000f80)={&(0x7f0000000e00)=[0x0], 0x1, r4, r5, 0x5, 0x5, 0x5, 0x8, {0xb, 0x8, 0xfffe, 0x6, 0x4, 0x2, 0x9, 0x1ff, 0x4, 0xff, 0x6, 0x4, 0x2, 0xffffffff, "da92279a3f6625210141b0b8602cddab383958770747b71da35742f67ecd4533"}}) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r6) syz_usb_connect(0x2, 0x46f, &(0x7f00000004c0)={{0x12, 0x1, 0x201, 0xae, 0x56, 0xb8, 0x10, 0x921, 0x1000, 0x50e4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45d, 0x3, 0x40, 0x2, 0x80, 0xb7, "", [{{0x9, 0x4, 0x61, 0xcb, 0x0, 0xc4, 0xf1, 0xa7, 0x26, [@uac_control={{0xa, 0x24, 0x1, 0x0, 0xa}}, @uac_as={[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x6, 0x3d, 0x1, '\b'}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x6, 0x8, 0x0, 0x1}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x9, 0x5, 0x2, "5c76598edde97eb3"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x8, 0x2, 0x7f, 0x3, 0xfc}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xf7, 0x4, 0x1, 0xc}]}]}}, {{0x9, 0x4, 0x16, 0x3, 0xe, 0x5e, 0xb4, 0x53, 0x6, [], [{{0x9, 0x5, 0x86, 0x10, 0x400, 0x2, 0x9, 0x5}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0x8, 0x0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xc, 0xca53}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0xe0}]}}, {{0x9, 0x5, 0xd, 0x3, 0x8, 0xc, 0xb, 0xa}}, {{0x9, 0x5, 0x2, 0x2, 0x608, 0x2b, 0x0, 0x6}}, {{0x9, 0x5, 0xc, 0x0, 0x8, 0x5, 0xd0, 0x9b, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xd, 0xaf3}, @generic={0x75, 0xc, "6868d983d1b6190825537fd661dac5330c27bdf4314c2df0ffa94b1b6b4e86549910d3ac320f1a7fd42aa2ea807918a37d16af6dc8395fef3bafa0cc05c36a175c04830a9195f5235da427a13bc39df8c96d88103857b0ff4011694a56cae0a64aa1022f7e52b5ca969dcd39b366162ab97cf8"}]}}, {{0x9, 0x5, 0xc, 0x3, 0x8, 0x1, 0x40, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x9, 0x4}]}}, {{0x9, 0x5, 0x6, 0xc, 0x3ff, 0x4, 0x0, 0x4}}, {{0x9, 0x5, 0x2, 0x4, 0x8, 0x57, 0x8, 0x4f, [@generic={0x8d, 0x6, "7f6fa6fcaaf282b066e320da76ee4de96db44adf6d920c8d91a56400c745733971d6a18de8bdaa6b037f678017db679b96e1e7d23051ff0a79e8384036b441725c864e62088bc13b7df2256cb81ea49f4422803ca2de352899438de412cd4457c05b74e7f85de71d75c7cd6a6575dbd1f59d95b2c9864456c060a9f45d7d23c7817e5870a271e1e7dd4024"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xc2, 0x1}]}}, {{0x9, 0x5, 0xd, 0x3, 0x400, 0x9b, 0xa, 0x7b, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x2, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x8}]}}, {{0x9, 0x5, 0x80, 0x4, 0x8, 0x80, 0x10, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xd, 0x9}]}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0x0, 0x83, 0x7f}}, {{0x9, 0x5, 0xc, 0xc, 0x200, 0xff, 0x0, 0xfd}}, {{0x9, 0x5, 0xb, 0x0, 0x8, 0x4, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x4}]}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0x1, 0x8, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x4, 0x1000}]}}]}}, {{0x9, 0x4, 0x83, 0x4, 0x8, 0xff, 0x5, 0x1, 0x14, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "963a"}, {0x5, 0x24, 0x0, 0x1000}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x9, 0x71, 0x5}, {0x6, 0x24, 0x1a, 0x7, 0x20}, [@mdlm={0x15, 0x24, 0x12, 0x5}, @acm={0x4, 0x24, 0x2, 0x5}, @acm={0x4, 0x24, 0x2, 0x4}, @call_mgmt={0x5, 0x24, 0x1, 0x1}, @acm={0x4, 0x24, 0x2, 0x9}]}], [{{0x9, 0x5, 0x3, 0xc, 0x200, 0x5, 0x1, 0x80, [@generic={0x93, 0x0, "f642b93d71b1b302a38a6746428c545a4b34246bc084cd7e9f4d67941890933c82c2ec84b2f2aec2c1dc41c8f7b446152b74089a4261f87463456cf524b26bd490b46e42bf79f212e8825001879500cc8b91176a3c50b4ca1beac637b300483ed6ef9b1c989db936f2dd9bbf38f5f4d58d6d45fe948dfc2f0230a117e9263fb14762a03a4d2900cd7a4884d995f7543779"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x9, 0x9, 0xf4}}, {{0x9, 0x5, 0xf, 0xc, 0x20, 0x79, 0x0, 0xda, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x40}]}}, {{0x9, 0x5, 0x9, 0x10, 0x40, 0x5, 0x9, 0x2, [@generic={0x65, 0x22, "8032e19b759d7612c197418eadca89f3c231fca6a11a3e2c09b08b412d9d39cbcbd74a4bee45ffa0178e8b57587828a21a8e5d92fc4f95c9183b0c01f1bde5fec14ac5da1cfd871c0879e5c48ab0b5a29646f63af2d832902fd9844da4ea29bcc22119"}, @generic={0xa8, 0x21, "0b4fb33c3dfbb7a452d3d80bc46f70d5ec4a6d552835f50ae59f83705c872849b88d6ac69939352d0724476c84be99cd65add5d7301958f8a3e404a6b2abc49b4c221518c49225364ff5a590f28c805cfe1bcddc76d01ed559eae15a4293f220f5ab71edf4237b7761581c2beaac9e4bf6367535ee2cc93d718ba1cce4ceff47cad48a90607cbeeb37d281e0287e536812e310fd8c89b078648ae693d364ec94e7767d170d56"}]}}, {{0x9, 0x5, 0x2, 0x4, 0x200, 0x6, 0x4, 0x5}}, {{0x9, 0x5, 0x4, 0x10, 0x20, 0x6, 0x24}}, {{0x9, 0x5, 0xc3, 0x0, 0x400, 0x0, 0x9}}, {{0x9, 0x5, 0xa, 0x2, 0x20, 0x84, 0x7, 0x9}}]}}]}}]}}, &(0x7f0000000d80)={0xa, &(0x7f0000000ac0)={0xa, 0x6, 0x300, 0x3, 0x1, 0x2, 0x40, 0xa}, 0x113, &(0x7f0000000b00)={0x5, 0xf, 0x113, 0x4, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "6ef5b357d4430854bd71fcf15b614a94"}, @ssp_cap={0xc, 0x10, 0xa, 0x8, 0x0, 0x6, 0xf00f, 0xa9a}, @generic={0xeb, 0x10, 0x3, "ebbfe455444c7e788d44fc35af6419faa7923bfe958ea0a3a45c8504586f8969a48f2370877f2ad6f937a1a76cf6196a63bc8366529df0c00691ba280384e30e9b9b769d9cd3df77064fbf29b851c5283569838b78416beceb767fd95bc9e9691df2daf37321bdf53fc06741bd34c416a44a5f88d07d4a6c1a1bf21335e3ef66fd6dff7952e8f15e5449cda6dec2868f28de1cf27848829af24ecdec4a9cafa448e0bb56cdee4dce5f05131c506d2e987de06fd408c353f447942cbb95ac27cf8db50ae70e397ca1ba16a41fb5e19c76c219b94ea3f75821194f9632415007da86a5a2132b3abee3"}]}, 0x3, [{0xb, &(0x7f0000000c40)=@string={0xb, 0x3, "98ebd62a113587353f"}}, {0xb5, &(0x7f0000000c80)=@string={0xb5, 0x3, "be2b1f19d60ed80902e76d82e6f92326e6a411789e9e302d0cfe68e2561c3d087bb758fefc41e44f7512db2ab899f773dbd2c6eab663ccc5fe045f7b3496f1fe22dd1d52155e981f029c25a980739fa94d5c8a869fd036fdf5bcd29593f43ee98f306088f8dc9172f3685939d5c9dfc396784306885961bf9a750622f6463f1306d7efd44b97dac371e933f3c7782fdafc6bccaad6e71e92eabedfc670552a55d405c2b08cf19ec4965ba5b8def317fe7b2a4c"}}, {0x23, &(0x7f0000000d40)=@string={0x23, 0x3, "79b68b157296b6c87a84087e8de351696c5de4a789fd5ac486b21d02abac376147"}}]}) 1.377531948s ago: executing program 5 (id=4841): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000030900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) 1.184954244s ago: executing program 5 (id=4842): syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="20170400000400000073"], 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) socket$inet6_sctp(0xa, 0x801, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) r3 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180c}}, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24044010) r4 = syz_io_uring_setup(0xf04, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x10000051}, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(r4, 0x1452, 0xfffffffd, 0x60, 0x0, 0x0) close(0x3) r5 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) pread64(r0, 0x0, 0x0, 0x7) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) syz_usb_control_io$rtl8150(r5, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) 863.318155ms ago: executing program 0 (id=4843): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000080)="01", 0x1, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000140), &(0x7f00000003c0)={'syz', 0x0}, &(0x7f0000000740)="f40fc24077021c9b084c60ffc26f26db12b9e78d629870bb26edb4a5e1cc0942ed8c58ca4fe84b94a0e31ea64089ee9ca1efb52945ffebbfea11dd3d0df936a10285eccab940ab5c96cb5d81dac1ad2243d878dde6cfd6ea08d5abcb00bb35436929ddabce530b63fab525337057438cf64a506d54d5c83e3e593d1d53ad0e6a44168fe8cfc6ad98b653d80636e4ddc1f2ab58762b3494250b9557f5b606a43e50874c90143034142cd5f7bd9b4dd876b97b7feb75b9138dde818a3c6b96dd80", 0xc0, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000040)={r1, r2, r2}, &(0x7f0000003380)=""/4094, 0xffe, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x34, 0x10, 0x403, 0x0, 0x80000000, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x80}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'vlan1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x600}, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000180)=0x6f) read$dsp(0xffffffffffffffff, 0x0, 0x0) write$dsp(r5, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x10007, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r6 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r7, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00db6072000001ea89de2b4410000e60080b8785d960000100000000000000000000000000000000000527000", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000000000100", [0x0, 0x2000000000001]}}) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000001000010027bd7001000000000000bcc36a9c2f9f26cccd825e5b3144fb2ac27a9da2965164abad3fe12470d3dc0000", @ANYRES32=0x0, @ANYBLOB="000000000021000008001b00000000000c001a800800028004000180"], 0x34}}, 0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 447.574458ms ago: executing program 3 (id=4844): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)="180c4553", 0x4) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="03c869649033a60ef728ac5134b68fabe16d6d3708df37af826a590a67354423dddbcb1932f3e7f320414dc3c2ea10f47e0e5f9b2367c653480898d78c370eee30fd4962fd10892021cdf5a59d8b8f84e813d4ba582c4e3c274d409023f1dbaf6c4cb484bea129906f"], 0x69) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) socket$inet6_sctp(0xa, 0x5, 0x84) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000180)) r2 = socket$inet_sctp(0x2, 0x5, 0x84) shutdown(r2, 0x0) syz_usb_connect$uac3(0x3, 0x80, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000480)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) r6 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r8, 0x1, 0x43, &(0x7f00000001c0)={0x0, 0xea60}, 0x10) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) connect$unix(r7, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000700)={0x14, 0x0, &(0x7f00000006c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x820}}}, &(0x7f0000000c40)={0x34, &(0x7f0000000740)={0x0, 0x8, 0x24, "9480a852c464a1a165f0950f43cac13d0b38581fc7ac52a5147552e31f9a3c88e5d700c8"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000a80)={0x0, 0x8, 0x1, 0xf}, 0x0, &(0x7f0000000bc0)={0x20, 0x1, 0x1, 0x2}, &(0x7f0000000c00)={0x20, 0x0, 0x1, 0x2e}}) r9 = socket(0x840000000002, 0x3, 0x100) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, 0x0, 0x0) syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xad58, 0x400, 0x2100, 0x10000004, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x20, 0xfffffffe, 0xae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x1f0, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x490) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c55080000000c547d03d8a0f4bd00", [0x0, 0x6]}}) 53.918868ms ago: executing program 0 (id=4845): syz_usb_connect(0x3, 0x5c, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40b113420000010000000109024a0001010080fa0904000008ffffff000705810200020007058202000200070583020002000705840340000107050102000200070502020002000705030200020007050402000200"], 0x0) (async) nanosleep(&(0x7f0000000300)={0x3}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000201000008000100000000000500590001000000"], 0x24}}, 0x0) r2 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000c40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') read$FUSE(r3, &(0x7f00000007c0)={0x2020}, 0x2020) syz_usb_control_io(r2, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000001580)={0x84, &(0x7f0000001000)={0x40, 0x5, 0x4, "e66b9587"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 2 (id=4846): socket$inet6(0xa, 0x1, 0x8010000000000084) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0x2, 0x3, 0x84) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f00000002c0)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r2, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x50000000}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000400)}], 0x1}}], 0x1, 0x81) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000009c0)=ANY=[@ANYBLOB="12e01b3989dd", @ANYRES32=r1], 0x1000f) kernel console output (not intermixed with test programs): ted: G L syzkaller #0 PREEMPT(full) [ 963.450183][T23140] Tainted: [L]=SOFTLOCKUP [ 963.450193][T23140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 963.450207][T23140] Call Trace: [ 963.450216][T23140] [ 963.450226][T23140] dump_stack_lvl+0xe8/0x150 [ 963.450268][T23140] should_fail_ex+0x40c/0x560 [ 963.450306][T23140] _copy_to_user+0x31/0xb0 [ 963.450332][T23140] simple_read_from_buffer+0xe1/0x170 [ 963.450372][T23140] proc_fail_nth_read+0x1bb/0x230 [ 963.450409][T23140] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 963.450448][T23140] ? rw_verify_area+0x24a/0x4c0 [ 963.450473][T23140] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 963.450506][T23140] vfs_read+0x213/0xa80 [ 963.450535][T23140] ? __pfx___mutex_lock+0x10/0x10 [ 963.450566][T23140] ? __pfx_vfs_read+0x10/0x10 [ 963.450590][T23140] ? __fget_files+0x2a/0x420 [ 963.450628][T23140] ? __fget_files+0x3a2/0x420 [ 963.450660][T23140] ? __fget_files+0x2a/0x420 [ 963.450701][T23140] ksys_read+0x150/0x270 [ 963.450727][T23140] ? __pfx_ksys_read+0x10/0x10 [ 963.450760][T23140] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 963.450795][T23140] do_syscall_64+0x174/0x580 [ 963.450825][T23140] ? trace_irq_disable+0x3b/0x140 [ 963.450855][T23140] ? clear_bhb_loop+0x40/0x90 [ 963.450883][T23140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 963.450908][T23140] RIP: 0033:0x7f687775e84e [ 963.450930][T23140] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 963.450949][T23140] RSP: 002b:00007f68786b4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 963.450975][T23140] RAX: ffffffffffffffda RBX: 00007f68786b56c0 RCX: 00007f687775e84e [ 963.450993][T23140] RDX: 000000000000000f RSI: 00007f68786b50a0 RDI: 0000000000000004 [ 963.451007][T23140] RBP: 00007f68786b5090 R08: 0000000000000000 R09: 0000000000000000 [ 963.451021][T23140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 963.451035][T23140] R13: 00007f6877a26038 R14: 00007f6877a25fa0 R15: 00007f6877b4fa48 [ 963.451069][T23140] [ 963.925382][T21209] usb 6-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 963.951110][T21209] usb 6-1: unit 37 not found! [ 963.967467][T21209] usb 6-1: unit 0 not found! [ 963.972777][T21203] usb 3-1: USB disconnect, device number 61 [ 964.163539][ T10] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 964.217307][T21209] usb 6-1: USB disconnect, device number 23 [ 964.337537][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 964.372539][ T10] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 964.383151][ T10] usb 2-1: config 0 has no interface number 0 [ 964.393775][ T10] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 964.415501][ T10] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 964.446213][ T10] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 66, changing to 10 [ 964.464698][ T10] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 24952, setting to 1024 [ 964.478726][ T10] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 964.495936][ T10] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 964.539135][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 964.578995][T23185] nvme_fabrics: unknown parameter or missing value 'n' in ctrl creation request [ 964.601557][ T10] usb 2-1: config 0 descriptor?? [ 964.658804][ T10] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 964.887829][ T5749] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 964.957082][ T10] usb 2-1: USB disconnect, device number 38 [ 964.993324][ T10] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 965.051082][ T5749] usb 4-1: device descriptor read/64, error -71 [ 965.287962][T21203] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 965.320104][ T5749] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 965.333433][T23228] bond13: entered allmulticast mode [ 965.427740][T21209] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 965.469321][T21203] usb 6-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 16416, setting to 1024 [ 965.479491][ T5749] usb 4-1: device descriptor read/64, error -71 [ 965.500991][T21203] usb 6-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 965.536347][T21203] usb 6-1: config 1 interface 0 altsetting 13 endpoint 0x2 has invalid wMaxPacketSize 0 [ 965.578160][T21209] usb 3-1: Using ep0 maxpacket: 16 [ 965.583759][T21203] usb 6-1: config 1 interface 0 has no altsetting 0 [ 965.598032][T21203] usb 6-1: string descriptor 0 read error: -22 [ 965.604908][T21203] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 965.605951][ T5749] usb usb4-port1: attempt power cycle [ 965.614898][T21203] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 965.630126][T21209] usb 3-1: unable to get BOS descriptor or descriptor too short [ 965.648050][T21209] usb 3-1: config 7 has an invalid interface number: 106 but max is 3 [ 965.663480][T21209] usb 3-1: config 7 has an invalid interface number: 182 but max is 3 [ 965.687603][ T10] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 965.700168][T21209] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 965.736378][T21209] usb 3-1: config 7 has 2 interfaces, different from the descriptor's value: 4 [ 965.764612][T21209] usb 3-1: config 7 has no interface number 0 [ 965.791883][T21209] usb 3-1: config 7 has no interface number 1 [ 965.822253][T21209] usb 3-1: config 7 interface 106 altsetting 89 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 965.855935][T21209] usb 3-1: config 7 interface 106 altsetting 89 has a duplicate endpoint with address 0x2, skipping [ 965.889936][ T10] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 965.894919][T21209] usb 3-1: config 7 interface 106 altsetting 89 has a duplicate endpoint with address 0x2, skipping [ 965.912190][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 965.938845][T21209] usb 3-1: config 7 interface 106 altsetting 89 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 965.964258][ T10] usb 1-1: config 0 descriptor?? [ 965.977017][T21209] usb 3-1: config 7 interface 106 altsetting 89 has 6 endpoint descriptors, different from the interface descriptor's value: 13 [ 965.989102][ T10] cp210x 1-1:0.0: cp210x converter detected [ 966.004816][ T5749] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 966.024317][T21209] usb 3-1: config 7 interface 182 altsetting 248 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 966.043890][ T5749] usb 4-1: device descriptor read/8, error -71 [ 966.061228][T21209] usb 3-1: config 7 interface 182 altsetting 248 has an invalid descriptor for endpoint zero, skipping [ 966.089532][T21203] usbhid 6-1:1.0: can't add hid device: -71 [ 966.103263][T21203] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 966.111645][ T5706] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 966.123719][T21209] usb 3-1: config 7 interface 182 altsetting 248 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 966.157955][T21203] usb 6-1: USB disconnect, device number 24 [ 966.178751][T21209] usb 3-1: config 7 interface 106 has no altsetting 0 [ 966.197114][T21209] usb 3-1: config 7 interface 182 has no altsetting 0 [ 966.211000][T21209] usb 3-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=c7.5a [ 966.220987][T21209] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.229219][T21209] usb 3-1: Product: syz [ 966.233521][T21209] usb 3-1: Manufacturer: syz [ 966.246015][T21209] usb 3-1: SerialNumber: syz [ 966.277628][ T5706] usb 2-1: Using ep0 maxpacket: 32 [ 966.293980][ T5706] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 966.298551][ T5749] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 966.321693][ T5706] usb 2-1: config 0 has no interface number 0 [ 966.335286][ T5706] usb 2-1: config 0 interface 184 has no altsetting 0 [ 966.348169][ T5749] usb 4-1: device descriptor read/8, error -71 [ 966.364686][ T5706] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 966.384698][ T5706] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.408841][ T5706] usb 2-1: Product: syz [ 966.425792][ T5706] usb 2-1: Manufacturer: syz [ 966.454514][ T5706] usb 2-1: SerialNumber: syz [ 966.461127][ T5749] usb usb4-port1: unable to enumerate USB device [ 966.546647][ T5706] usb 2-1: config 0 descriptor?? [ 966.625838][T21209] usb 3-1: USB disconnect, device number 62 [ 967.137656][T21203] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 967.187607][ T5706] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 967.232342][ T5706] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 967.319749][T21203] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 967.346660][T21203] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 967.355899][T21203] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.370141][T21203] usb 6-1: config 0 descriptor?? [ 967.409535][T21203] pwc: Askey VC010 type 2 USB webcam detected. [ 967.467093][ T5706] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 967.479825][ T5706] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 967.490522][ T5706] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 967.502942][ T5706] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -61 [ 967.650647][T23340] nvme_fabrics: unknown parameter or missing value 'n' in ctrl creation request [ 967.796067][T21203] pwc: recv_control_msg error -32 req 02 val 2b00 [ 967.814049][T21203] pwc: recv_control_msg error -32 req 02 val 2700 [ 967.829939][T21203] pwc: recv_control_msg error -32 req 02 val 2c00 [ 967.848056][T21203] pwc: recv_control_msg error -32 req 04 val 1000 [ 967.864282][T21203] pwc: recv_control_msg error -32 req 04 val 1300 [ 967.875969][T21203] pwc: recv_control_msg error -32 req 04 val 1400 [ 967.887086][T21203] pwc: recv_control_msg error -32 req 02 val 2000 [ 967.895931][T21203] pwc: recv_control_msg error -32 req 02 val 2100 [ 968.123673][T21203] pwc: recv_control_msg error -71 req 02 val 2500 [ 968.147949][T21203] pwc: recv_control_msg error -71 req 02 val 2400 [ 968.162643][T21203] pwc: recv_control_msg error -71 req 02 val 2600 [ 968.178179][T21203] pwc: recv_control_msg error -71 req 02 val 2900 [ 968.198857][T21203] pwc: recv_control_msg error -71 req 02 val 2800 [ 968.207019][T21203] pwc: recv_control_msg error -71 req 04 val 1100 [ 968.214241][T21203] pwc: recv_control_msg error -71 req 04 val 1200 [ 968.229811][T21203] pwc: Registered as video103. [ 968.251718][T21203] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input82 [ 968.288837][T21203] usb 6-1: USB disconnect, device number 25 [ 968.359498][ T5749] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 968.443967][ T10] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 968.464755][ T10] cp210x 1-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 968.473849][ T10] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 968.487377][ T10] usb 1-1: cp210x converter now attached to ttyUSB0 [ 968.510878][ T10] usb 1-1: USB disconnect, device number 45 [ 968.531054][ T5749] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 968.542716][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 968.553254][ T5749] usb 3-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 968.566433][ T5749] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 968.575670][ T10] cp210x 1-1:0.0: device disconnected [ 968.611990][ T5749] as10x_usb: device has been detected [ 968.619414][ T5749] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 968.651100][ T5749] usb 3-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 968.680170][ T5749] as10x_usb: error during firmware upload part1 [ 968.687288][ T5749] Registered device Abilis Systems DVB-Titan [ 968.903375][T21203] usb 2-1: USB disconnect, device number 39 [ 968.917894][ T10] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 969.090440][ T10] usb 1-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 16416, setting to 1024 [ 969.134086][ T10] usb 1-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 969.176348][ T10] usb 1-1: config 1 interface 0 altsetting 13 endpoint 0x2 has invalid wMaxPacketSize 0 [ 969.206976][ T10] usb 1-1: config 1 interface 0 has no altsetting 0 [ 969.224761][ T10] usb 1-1: string descriptor 0 read error: -22 [ 969.241126][ T10] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 969.255986][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 969.458411][ T5749] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 969.607768][ T5749] usb 2-1: device descriptor read/64, error -71 [ 969.699486][ T10] usbhid 1-1:1.0: can't add hid device: -71 [ 969.728882][ T10] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 969.779728][ T10] usb 1-1: USB disconnect, device number 46 [ 969.867978][ T5749] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 970.016478][T23448] nvme_fabrics: unknown parameter or missing value 'n' in ctrl creation request [ 970.038635][ T5749] usb 2-1: device descriptor read/64, error -71 [ 970.119611][T23454] FAULT_INJECTION: forcing a failure. [ 970.119611][T23454] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 970.136267][T23454] CPU: 1 UID: 0 PID: 23454 Comm: syz.5.4515 Tainted: G L syzkaller #0 PREEMPT(full) [ 970.136309][T23454] Tainted: [L]=SOFTLOCKUP [ 970.136317][T23454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 970.136332][T23454] Call Trace: [ 970.136342][T23454] [ 970.136351][T23454] dump_stack_lvl+0xe8/0x150 [ 970.136391][T23454] should_fail_ex+0x40c/0x560 [ 970.136425][T23454] _copy_from_iter+0x1d3/0x1660 [ 970.136455][T23454] ? kmem_cache_alloc_node_noprof+0x1f1/0x610 [ 970.136488][T23454] ? rcu_is_watching+0x15/0xb0 [ 970.136510][T23454] ? trace_kmem_cache_alloc+0x29/0xe0 [ 970.136539][T23454] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 970.136568][T23454] ? __pfx__copy_from_iter+0x10/0x10 [ 970.136598][T23454] ? __alloc_skb+0x276/0x7a0 [ 970.136621][T23454] ? __alloc_skb+0x276/0x7a0 [ 970.136650][T23454] ? netlink_sendmsg+0x650/0xb40 [ 970.136678][T23454] ? skb_put+0x112/0x210 [ 970.136706][T23454] netlink_sendmsg+0x6c0/0xb40 [ 970.136744][T23454] ? __pfx_netlink_sendmsg+0x10/0x10 [ 970.136777][T23454] ? aa_sock_msg_perm+0xf1/0x1b0 [ 970.136810][T23454] ? __pfx_netlink_sendmsg+0x10/0x10 [ 970.136838][T23454] sock_sendmsg_nosec+0x13a/0x180 [ 970.136875][T23454] ____sys_sendmsg+0x54e/0x850 [ 970.136908][T23454] ? __pfx_____sys_sendmsg+0x10/0x10 [ 970.136952][T23454] ? import_iovec+0x73/0xa0 [ 970.136977][T23454] ___sys_sendmsg+0x2a5/0x360 [ 970.137004][T23454] ? __lock_acquire+0x683/0x2cf0 [ 970.137045][T23454] ? __pfx____sys_sendmsg+0x10/0x10 [ 970.137109][T23454] ? __fget_files+0x2a/0x420 [ 970.137140][T23454] ? __fget_files+0x3a2/0x420 [ 970.137181][T23454] __x64_sys_sendmsg+0x1b1/0x290 [ 970.137212][T23454] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 970.137255][T23454] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.137286][T23454] do_syscall_64+0x174/0x580 [ 970.137314][T23454] ? trace_irq_disable+0x3b/0x140 [ 970.137343][T23454] ? clear_bhb_loop+0x40/0x90 [ 970.137371][T23454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.137393][T23454] RIP: 0033:0x7f40ff39e019 [ 970.137414][T23454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 970.137434][T23454] RSP: 002b:00007f41001e4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 970.137463][T23454] RAX: ffffffffffffffda RBX: 00007f40ff625fa0 RCX: 00007f40ff39e019 [ 970.137479][T23454] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 970.137494][T23454] RBP: 00007f41001e4090 R08: 0000000000000000 R09: 0000000000000000 [ 970.137508][T23454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 970.137522][T23454] R13: 00007f40ff626038 R14: 00007f40ff625fa0 R15: 00007f40ff74fa48 [ 970.137557][T23454] [ 970.421253][ T5749] usb usb2-port1: attempt power cycle [ 970.634074][T23468] bond7: entered allmulticast mode [ 970.767688][ T5749] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 970.777868][T21209] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 970.788364][ T5749] usb 2-1: device descriptor read/8, error -71 [ 970.821809][T23508] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4521'. [ 970.880170][ T50] Bluetooth: hci0: unexpected event for opcode 0x2002 [ 970.929495][T21209] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 970.938728][T21209] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 970.950895][T21209] usb 6-1: config 0 descriptor?? [ 970.961479][T21209] cp210x 6-1:0.0: cp210x converter detected [ 971.027612][ T5749] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 971.048395][ T5749] usb 2-1: device descriptor read/8, error -71 [ 971.077636][ T10] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 971.127578][T21203] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 971.159293][ T5749] usb usb2-port1: unable to enumerate USB device [ 971.227608][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 971.239620][ T10] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 971.249039][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.257134][ T10] usb 1-1: Product: syz [ 971.262127][ T10] usb 1-1: Manufacturer: syz [ 971.266808][ T10] usb 1-1: SerialNumber: syz [ 971.275058][ T10] usb 1-1: config 0 descriptor?? [ 971.283291][T21203] usb 4-1: Using ep0 maxpacket: 32 [ 971.295883][ T10] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 971.306780][T21203] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 971.315257][T21203] usb 4-1: config 0 has no interface number 0 [ 971.325255][T21203] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 971.334493][T21203] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.342714][T21203] usb 4-1: Product: syz [ 971.347316][T21203] usb 4-1: Manufacturer: syz [ 971.352105][T21203] usb 4-1: SerialNumber: syz [ 971.362114][T21203] usb 4-1: config 0 descriptor?? [ 971.376562][T21203] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 971.584237][T21203] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 971.600044][T21203] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 971.789069][ T5749] usb 3-1: USB disconnect, device number 63 [ 971.808246][ T10] ssu100 1-1:0.0: probe with driver ssu100 failed with error -110 [ 971.877019][ T5749] Unregistered device Abilis Systems DVB-Titan [ 971.883176][ T5749] as10x_usb: device has been disconnected [ 972.040382][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 972.050471][ T10] usb 4-1: USB disconnect, device number 48 [ 972.094682][ T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 972.143521][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 972.184110][ T10] quatech2 4-1:0.51: device disconnected [ 972.381561][T23545] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4523'. [ 972.955917][T23609] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4530'. [ 972.965317][ T10] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 973.120100][ T10] usb 3-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 16416, setting to 1024 [ 973.131873][ T10] usb 3-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 973.143202][ T10] usb 3-1: config 1 interface 0 altsetting 13 endpoint 0x2 has invalid wMaxPacketSize 0 [ 973.158392][ T10] usb 3-1: config 1 interface 0 has no altsetting 0 [ 973.168358][T23616] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4532'. [ 973.178042][ T10] usb 3-1: string descriptor 0 read error: -22 [ 973.186006][ T10] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 973.196298][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 973.299815][ T5706] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 973.457590][ T5706] usb 4-1: Using ep0 maxpacket: 8 [ 973.468775][ T5706] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 973.478043][ T5706] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 973.487389][ T5706] usb 4-1: Product: syz [ 973.493043][ T5706] usb 4-1: Manufacturer: syz [ 973.507612][ T5706] usb 4-1: SerialNumber: syz [ 973.512377][T21203] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 973.555880][T21209] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 973.594887][T21209] cp210x 6-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 973.609184][T21198] usb 1-1: USB disconnect, device number 47 [ 973.624520][T21209] cp210x 6-1:0.0: GPIO initialisation failed: -71 [ 973.625644][ T10] usbhid 3-1:1.0: can't add hid device: -71 [ 973.673931][ T10] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 973.686102][T21203] usb 2-1: Using ep0 maxpacket: 8 [ 973.693486][T21209] usb 6-1: cp210x converter now attached to ttyUSB0 [ 973.718252][T21203] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 973.733418][T21209] usb 6-1: USB disconnect, device number 26 [ 973.752148][ T10] usb 3-1: USB disconnect, device number 64 [ 973.762856][T21203] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 973.792121][T21209] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 973.804190][T21203] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 973.826780][T21203] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 973.840433][T21209] cp210x 6-1:0.0: device disconnected [ 973.841067][T21203] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 973.858861][T21203] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 974.076395][ T5706] usb 4-1: unit 0 not found! [ 974.101306][T21203] usb 2-1: GET_CAPABILITIES returned 0 [ 974.118348][T21203] usbtmc 2-1:16.0: can't read capabilities [ 974.304461][ C1] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 974.304621][ C1] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 974.304719][ C1] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 974.424504][T23698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 974.426330][T23698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 974.467434][T23691] 8021q: adding VLAN 0 to HW filter on device bond7 [ 974.654324][ T5749] usb 4-1: USB disconnect, device number 49 [ 974.837768][ T5706] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 974.901179][T23763] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4543'. [ 974.987609][ T5706] usb 6-1: Using ep0 maxpacket: 16 [ 974.994771][ T5706] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 975.006166][ T5706] usb 6-1: config 0 interface 0 has no altsetting 0 [ 975.014267][ T5706] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 975.023543][ T5706] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 975.035277][ T5706] usb 6-1: config 0 descriptor?? [ 975.197877][ T5749] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 975.370435][ T5749] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 975.381298][ T5749] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 975.394007][ T5749] usb 3-1: config 0 descriptor?? [ 975.412868][ T5749] cp210x 3-1:0.0: cp210x converter detected [ 975.467336][ T5706] nzxt-smart2 0003:1E71:2009.0060: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0 [ 975.564471][T21203] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 975.717751][T21209] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 975.740123][T21203] usb 1-1: unable to get BOS descriptor or descriptor too short [ 975.748801][T21203] usb 1-1: not running at top speed; connect to a high speed hub [ 975.758211][T21203] usb 1-1: config 1 has an invalid descriptor of length 231, skipping remainder of the config [ 975.769055][T21203] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 975.780601][T21203] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 975.798233][T21203] usb 1-1: string descriptor 0 read error: -22 [ 975.804924][T21203] usb 1-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 975.814479][T21203] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 975.839284][T21203] usb 1-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 975.848092][T21203] usb 1-1: found format II with max.bitrate = 512, frame size=4095 [ 975.858382][T21203] usb 1-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 975.875712][T21203] usb 1-1: found format II with max.bitrate = 512, frame size=4095 [ 975.891641][T21209] usb 4-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 16416, setting to 1024 [ 975.917652][T21209] usb 4-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 975.950785][T21209] usb 4-1: config 1 interface 0 altsetting 13 endpoint 0x2 has invalid wMaxPacketSize 0 [ 975.978072][T21209] usb 4-1: config 1 interface 0 has no altsetting 0 [ 975.994140][T21209] usb 4-1: string descriptor 0 read error: -22 [ 976.001210][T21209] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 976.015158][T21209] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.072462][T23778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 976.097349][T23778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 976.251040][T23778] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 976.370703][T23778] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 976.423382][T23778] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 976.459933][T23778] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 976.492786][T23778] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 976.510048][T21198] usb 2-1: USB disconnect, device number 44 [ 976.551840][T21209] usbhid 4-1:1.0: can't add hid device: -71 [ 976.602730][T23778] kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 976.614896][T21209] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 976.662482][T23778] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 976.718216][T21209] usb 4-1: USB disconnect, device number 50 [ 976.735025][T23778] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 976.759959][T23778] kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 976.768632][T23778] kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 976.813023][ T29] usb 6-1: USB disconnect, device number 27 [ 976.999584][T23845] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4549'. [ 977.204177][T21203] usb 1-1: USB disconnect, device number 48 [ 977.213767][T23865] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4551'. [ 977.497818][ T29] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 977.515729][T23888] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 977.673099][ T29] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 977.711489][ T29] usb 2-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 977.733121][ T29] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 977.754022][ T29] usb 2-1: config 220 interface 0 has no altsetting 0 [ 977.767331][ T29] usb 2-1: config 220 interface 1 has no altsetting 0 [ 977.785608][ T29] usb 2-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=6c.b9 [ 977.802480][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.824028][ T29] usb 2-1: Product: syz [ 977.833307][ T29] usb 2-1: Manufacturer: syz [ 977.842260][ T29] usb 2-1: SerialNumber: syz [ 977.988036][T23901] FAULT_INJECTION: forcing a failure. [ 977.988036][T23901] name failslab, interval 1, probability 0, space 0, times 0 [ 978.008198][T23901] CPU: 0 UID: 0 PID: 23901 Comm: syz.0.4557 Tainted: G L syzkaller #0 PREEMPT(full) [ 978.008237][T23901] Tainted: [L]=SOFTLOCKUP [ 978.008254][T23901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 978.008269][T23901] Call Trace: [ 978.008278][T23901] [ 978.008288][T23901] dump_stack_lvl+0xe8/0x150 [ 978.008332][T23901] should_fail_ex+0x40c/0x560 [ 978.008370][T23901] should_failslab+0xa8/0x100 [ 978.008409][T23901] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 978.008438][T23901] ? device_add_class_symlinks+0x1cf/0x240 [ 978.008468][T23901] ? __kernfs_new_node+0xe6/0x980 [ 978.008538][T23901] ? __kernfs_new_node+0xe6/0x980 [ 978.008579][T23901] __kernfs_new_node+0xe6/0x980 [ 978.008624][T23901] ? __pfx___kernfs_new_node+0x10/0x10 [ 978.008659][T23901] ? kernfs_root+0x1c/0x230 [ 978.008697][T23901] ? kernfs_root+0x1c/0x230 [ 978.008728][T23901] ? kernfs_root+0x1c/0x230 [ 978.008758][T23901] ? kernfs_root+0x1c/0x230 [ 978.008796][T23901] kernfs_new_node+0xea/0x140 [ 978.008835][T23901] __kernfs_create_file+0x4b/0x2e0 [ 978.008865][T23901] sysfs_add_file_mode_ns+0x237/0x300 [ 978.008903][T23901] internal_create_group+0x679/0x1180 [ 978.008953][T23901] ? __pfx_internal_create_group+0x10/0x10 [ 978.008991][T23901] ? up_write+0x19f/0x4a0 [ 978.009024][T23901] sysfs_create_groups+0x59/0x120 [ 978.009063][T23901] device_add_attrs+0x1b1/0x600 [ 978.009093][T23901] ? __pfx_device_add_attrs+0x10/0x10 [ 978.009126][T23901] ? device_add_class_symlinks+0x21f/0x240 [ 978.009157][T23901] device_add+0x488/0xb80 [ 978.009189][T23901] cdev_device_add+0x1c6/0x380 [ 978.009224][T23901] nvme_add_ctrl+0x132/0x270 [ 978.009271][T23901] nvme_rdma_create_ctrl+0x752/0xb10 [ 978.009304][T23901] nvmf_dev_write+0x24ca/0x2d90 [ 978.009366][T23901] ? __pfx_nvmf_dev_write+0x10/0x10 [ 978.009405][T23901] ? get_pid_task+0x20/0x1f0 [ 978.009465][T23901] ? bpf_lsm_file_permission+0x9/0x20 [ 978.009494][T23901] ? security_file_permission+0x75/0x260 [ 978.009533][T23901] ? rw_verify_area+0x203/0x4c0 [ 978.009558][T23901] ? __pfx_nvmf_dev_write+0x10/0x10 [ 978.009582][T23901] vfs_write+0x296/0xba0 [ 978.009614][T23901] ? __pfx_vfs_write+0x10/0x10 [ 978.009640][T23901] ? __fget_files+0x2a/0x420 [ 978.009675][T23901] ? __fget_files+0x2a/0x420 [ 978.009707][T23901] ? __fget_files+0x3a2/0x420 [ 978.009738][T23901] ? __fget_files+0x2a/0x420 [ 978.009779][T23901] ksys_write+0x150/0x270 [ 978.009805][T23901] ? __pfx_ksys_write+0x10/0x10 [ 978.009838][T23901] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 978.009867][T23901] do_syscall_64+0x174/0x580 [ 978.009899][T23901] ? trace_irq_disable+0x3b/0x140 [ 978.009930][T23901] ? clear_bhb_loop+0x40/0x90 [ 978.009958][T23901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 978.009980][T23901] RIP: 0033:0x7f24d719e019 [ 978.010002][T23901] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 978.010023][T23901] RSP: 002b:00007f24d53f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 978.010044][T23901] RAX: ffffffffffffffda RBX: 00007f24d7425fa0 RCX: 00007f24d719e019 [ 978.010059][T23901] RDX: 0000000000000038 RSI: 0000200000000680 RDI: 0000000000000003 [ 978.010073][T23901] RBP: 00007f24d53f6090 R08: 0000000000000000 R09: 0000000000000000 [ 978.010087][T23901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 978.010100][T23901] R13: 00007f24d7426038 R14: 00007f24d7425fa0 R15: 00007f24d754fa48 [ 978.010135][T23901] [ 978.376326][ T5749] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 978.384471][ T5749] cp210x 3-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 978.392195][ T5749] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 978.554118][ T5749] usb 3-1: cp210x converter now attached to ttyUSB0 [ 978.635010][ T5749] usb 3-1: USB disconnect, device number 65 [ 978.703482][T23918] netlink: 268 bytes leftover after parsing attributes in process `syz.5.4558'. [ 978.740880][ T5749] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 978.803197][ T5749] cp210x 3-1:0.0: device disconnected [ 979.128785][ T5749] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 979.242189][T23961] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 979.296923][T23968] loop4: detected capacity change from 0 to 3679 [ 979.322825][ T5749] usb 3-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 16416, setting to 1024 [ 979.357992][T23968] loop4: [ 979.372108][ T5749] usb 3-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 979.408144][ T5749] usb 3-1: config 1 interface 0 altsetting 13 endpoint 0x2 has invalid wMaxPacketSize 0 [ 979.451060][ T5749] usb 3-1: config 1 interface 0 has no altsetting 0 [ 979.510533][ T5749] usb 3-1: string descriptor 0 read error: -22 [ 979.525508][ T5749] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 979.555462][ T5749] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.674688][ T29] usb 2-1: selecting invalid altsetting 0 [ 979.775270][ T29] uvcvideo 2-1:220.0: probe with driver uvcvideo failed with error -22 [ 979.901463][T21209] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 979.921319][ T29] usb 2-1: selecting invalid altsetting 0 [ 979.965258][ T29] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 980.050095][ T5749] usbhid 3-1:1.0: can't add hid device: -71 [ 980.064762][ T29] usb 2-1: USB disconnect, device number 45 [ 980.109094][ T5749] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 980.119436][T21209] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 980.187399][T21209] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 980.219420][ T5749] usb 3-1: USB disconnect, device number 66 [ 980.289099][T21209] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 980.553503][T21209] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 980.622165][T21209] usb 4-1: config 0 descriptor?? [ 980.767109][T21209] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 980.885020][T24012] FAULT_INJECTION: forcing a failure. [ 980.885020][T24012] name failslab, interval 1, probability 0, space 0, times 0 [ 980.944363][T24012] CPU: 1 UID: 0 PID: 24012 Comm: syz.0.4571 Tainted: G L syzkaller #0 PREEMPT(full) [ 980.944401][T24012] Tainted: [L]=SOFTLOCKUP [ 980.944410][T24012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 980.944424][T24012] Call Trace: [ 980.944433][T24012] [ 980.944443][T24012] dump_stack_lvl+0xe8/0x150 [ 980.944483][T24012] should_fail_ex+0x40c/0x560 [ 980.944527][T24012] should_failslab+0xa8/0x100 [ 980.944565][T24012] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 980.944595][T24012] ? __kernfs_new_node+0xe6/0x980 [ 980.944625][T24012] ? __kernfs_new_node+0xe6/0x980 [ 980.944664][T24012] __kernfs_new_node+0xe6/0x980 [ 980.944711][T24012] ? __pfx___kernfs_new_node+0x10/0x10 [ 980.944745][T24012] ? kernfs_root+0x1c/0x230 [ 980.944785][T24012] ? kernfs_root+0x1c/0x230 [ 980.944816][T24012] ? kernfs_root+0x1c/0x230 [ 980.944845][T24012] ? kernfs_root+0x1c/0x230 [ 980.944883][T24012] kernfs_new_node+0xea/0x140 [ 980.944922][T24012] __kernfs_create_file+0x4b/0x2e0 [ 980.944952][T24012] sysfs_add_file_mode_ns+0x237/0x300 [ 980.944988][T24012] internal_create_group+0x679/0x1180 [ 980.945037][T24012] ? __pfx_internal_create_group+0x10/0x10 [ 980.945072][T24012] ? up_write+0x19f/0x4a0 [ 980.945102][T24012] sysfs_create_groups+0x59/0x120 [ 980.945135][T24012] device_add_attrs+0x1b1/0x600 [ 980.945165][T24012] ? __pfx_device_add_attrs+0x10/0x10 [ 980.945195][T24012] ? device_add_class_symlinks+0x21f/0x240 [ 980.945224][T24012] device_add+0x488/0xb80 [ 980.945252][T24012] cdev_device_add+0x1c6/0x380 [ 980.945285][T24012] nvme_add_ctrl+0x132/0x270 [ 980.945322][T24012] nvme_rdma_create_ctrl+0x752/0xb10 [ 980.945353][T24012] nvmf_dev_write+0x24ca/0x2d90 [ 980.945414][T24012] ? __pfx_nvmf_dev_write+0x10/0x10 [ 980.945451][T24012] ? get_pid_task+0x20/0x1f0 [ 980.945518][T24012] ? bpf_lsm_file_permission+0x9/0x20 [ 980.945546][T24012] ? security_file_permission+0x75/0x260 [ 980.945583][T24012] ? rw_verify_area+0x203/0x4c0 [ 980.945606][T24012] ? __pfx_nvmf_dev_write+0x10/0x10 [ 980.945629][T24012] vfs_write+0x296/0xba0 [ 980.945659][T24012] ? __pfx_vfs_write+0x10/0x10 [ 980.945684][T24012] ? __fget_files+0x2a/0x420 [ 980.945718][T24012] ? __fget_files+0x2a/0x420 [ 980.945749][T24012] ? __fget_files+0x3a2/0x420 [ 980.945779][T24012] ? __fget_files+0x2a/0x420 [ 980.945820][T24012] ksys_write+0x150/0x270 [ 980.945846][T24012] ? __pfx_ksys_write+0x10/0x10 [ 980.945878][T24012] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.945903][T24012] do_syscall_64+0x174/0x580 [ 980.945932][T24012] ? trace_irq_disable+0x3b/0x140 [ 980.945978][T24012] ? clear_bhb_loop+0x40/0x90 [ 980.946006][T24012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.946030][T24012] RIP: 0033:0x7f24d719e019 [ 980.946050][T24012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 980.946070][T24012] RSP: 002b:00007f24d53f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 980.946095][T24012] RAX: ffffffffffffffda RBX: 00007f24d7425fa0 RCX: 00007f24d719e019 [ 980.946112][T24012] RDX: 0000000000000038 RSI: 0000200000000680 RDI: 0000000000000003 [ 980.946127][T24012] RBP: 00007f24d53f6090 R08: 0000000000000000 R09: 0000000000000000 [ 980.946142][T24012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 980.946156][T24012] R13: 00007f24d7426038 R14: 00007f24d7425fa0 R15: 00007f24d754fa48 [ 980.946191][T24012] [ 981.594665][T24023] bond8: entered allmulticast mode [ 981.747602][T21209] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 981.813517][T24069] FAULT_INJECTION: forcing a failure. [ 981.813517][T24069] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 981.828495][T24069] CPU: 0 UID: 0 PID: 24069 Comm: syz.5.4578 Tainted: G L syzkaller #0 PREEMPT(full) [ 981.828530][T24069] Tainted: [L]=SOFTLOCKUP [ 981.828539][T24069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 981.828582][T24069] Call Trace: [ 981.828614][T24069] [ 981.828650][T24069] dump_stack_lvl+0xe8/0x150 [ 981.828768][T24069] should_fail_ex+0x40c/0x560 [ 981.828862][T24069] _copy_from_user+0x2d/0xb0 [ 981.828929][T24069] memdup_user_nul+0x66/0x110 [ 981.829033][T24069] nvmf_dev_write+0x12e/0x2d90 [ 981.829114][T24069] ? aa_file_perm+0x18b/0x15f0 [ 981.829225][T24069] ? aa_file_perm+0x18b/0x15f0 [ 981.829302][T24069] ? aa_file_perm+0x4ed/0x15f0 [ 981.829371][T24069] ? aa_file_perm+0x18b/0x15f0 [ 981.829463][T24069] ? __pfx_nvmf_dev_write+0x10/0x10 [ 981.829526][T24069] ? kstrtoull+0x12f/0x1d0 [ 981.829608][T24069] ? __pfx_aa_file_perm+0x10/0x10 [ 981.829682][T24069] ? get_pid_task+0x20/0x1f0 [ 981.829773][T24069] ? get_pid_task+0x20/0x1f0 [ 981.829875][T24069] ? __lock_acquire+0x683/0x2cf0 [ 981.829973][T24069] ? apparmor_file_permission+0x1f4/0x300 [ 981.830088][T24069] ? bpf_lsm_file_permission+0x9/0x20 [ 981.830171][T24069] ? security_file_permission+0x75/0x260 [ 981.830263][T24069] ? rw_verify_area+0x203/0x4c0 [ 981.830324][T24069] ? __pfx_nvmf_dev_write+0x10/0x10 [ 981.830378][T24069] vfs_write+0x296/0xba0 [ 981.830459][T24069] ? __pfx_vfs_write+0x10/0x10 [ 981.830520][T24069] ? __fget_files+0x2a/0x420 [ 981.830610][T24069] ? __fget_files+0x2a/0x420 [ 981.830684][T24069] ? __fget_files+0x3a2/0x420 [ 981.830763][T24069] ? __fget_files+0x2a/0x420 [ 981.830858][T24069] ksys_write+0x150/0x270 [ 981.830922][T24069] ? __pfx_ksys_write+0x10/0x10 [ 981.831002][T24069] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 981.831064][T24069] do_syscall_64+0x174/0x580 [ 981.831136][T24069] ? trace_irq_disable+0x3b/0x140 [ 981.831216][T24069] ? clear_bhb_loop+0x40/0x90 [ 981.831280][T24069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 981.831341][T24069] RIP: 0033:0x7f40ff39e019 [ 981.831394][T24069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 981.831472][T24069] RSP: 002b:00007f41001e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 981.831546][T24069] RAX: ffffffffffffffda RBX: 00007f40ff625fa0 RCX: 00007f40ff39e019 [ 981.831596][T24069] RDX: 0000000000000070 RSI: 0000200000000a00 RDI: 0000000000000003 [ 981.831629][T24069] RBP: 00007f41001e4090 R08: 0000000000000000 R09: 0000000000000000 [ 981.831670][T24069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 981.831703][T24069] R13: 00007f40ff626038 R14: 00007f40ff625fa0 R15: 00007f40ff74fa48 [ 981.831791][T24069] [ 981.958960][T21209] usb 2-1: config 8 has an invalid interface number: 223 but max is 0 [ 981.958996][T21209] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 981.959020][T21209] usb 2-1: config 8 has no interface number 0 [ 981.959065][T21209] usb 2-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 981.986273][T21209] usb 2-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 981.986299][T21209] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.986315][T21209] usb 2-1: Product: syz [ 981.986328][T21209] usb 2-1: Manufacturer: syz [ 981.986340][T21209] usb 2-1: SerialNumber: syz [ 982.755829][T21209] usb 2-1: USB disconnect, device number 46 [ 982.918210][T21203] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 983.227588][T21203] usb 6-1: Using ep0 maxpacket: 8 [ 983.300566][T21203] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 983.411308][T21203] usb 6-1: config 0 has no interfaces? [ 983.447756][T21203] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 983.471974][T21203] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 983.496742][T21203] usb 6-1: config 0 descriptor?? [ 983.653246][T29812] usb 4-1: USB disconnect, device number 51 [ 983.786130][T21203] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 983.791316][ T5749] usb 6-1: USB disconnect, device number 28 [ 983.964987][T24157] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 984.017954][T21203] usb 1-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 16416, setting to 1024 [ 984.034809][T21203] usb 1-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 984.046084][T21203] usb 1-1: config 1 interface 0 altsetting 13 endpoint 0x2 has invalid wMaxPacketSize 0 [ 984.056272][T21203] usb 1-1: config 1 interface 0 has no altsetting 0 [ 984.068517][T21203] usb 1-1: string descriptor 0 read error: -22 [ 984.075154][T21203] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 984.084957][T21203] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.111460][T24169] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4586'. [ 984.427783][ T5749] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 984.525784][T21203] usbhid 1-1:1.0: can't add hid device: -71 [ 984.542326][T21203] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 984.574860][T21203] usb 1-1: USB disconnect, device number 49 [ 984.617793][ T5749] usb 4-1: Using ep0 maxpacket: 16 [ 984.632483][ T5749] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 984.657401][ T5749] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.680605][ T5749] usb 4-1: Product: syz [ 984.689992][ T5749] usb 4-1: Manufacturer: syz [ 984.694659][ T5749] usb 4-1: SerialNumber: syz [ 984.729262][ T5749] usb 4-1: config 0 descriptor?? [ 984.929028][T24227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 984.959467][T24227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 985.057779][T29812] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 985.147589][T21203] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 985.157772][ T5749] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 985.175150][ T5749] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 985.191383][ T5749] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 985.199838][ T5749] usb 4-1: media controller created [ 985.219566][ T5749] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 985.221129][T29812] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 64 [ 985.245961][T29812] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 985.256501][T29812] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 985.267939][ T5706] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 985.275879][T29812] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 985.292455][T29812] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 64 [ 985.303958][T29812] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 64 [ 985.317242][T29812] usb 3-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 985.328786][T29812] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 985.340861][T21203] usb 2-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 985.351921][T21203] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 985.362066][T29812] usb 3-1: Product: syz [ 985.366379][T29812] usb 3-1: Manufacturer: syz [ 985.371522][T21203] usb 2-1: Product: syz [ 985.376129][T24174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 985.387004][T21203] usb 2-1: Manufacturer: syz [ 985.391997][T21203] usb 2-1: SerialNumber: syz [ 985.407275][T24220] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 985.408807][T24174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 985.418017][ T5706] usb 6-1: device descriptor read/64, error -71 [ 985.442053][T21203] usb 2-1: config 0 descriptor?? [ 985.454833][T24220] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 985.464809][ T5749] zl10353_read_register: readreg error (reg=127, ret==0) [ 985.474732][ T5749] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 985.478938][T24220] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 985.497405][T24220] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 985.505247][T24220] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 985.505969][ T5749] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 985.530085][T24220] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 985.545525][T29812] usb 3-1: USB2VGA dongle found at address 67 [ 985.584329][T29812] usb 3-1: Allocated 8 output buffers [ 985.611152][T29812] usb 3-1: Failed to early initialize device [ 985.619538][T24174] xt_CT: You must specify a L4 protocol and not use inversions on it [ 985.635709][ T5749] usb 4-1: USB disconnect, device number 52 [ 985.680339][T21203] mos7840 2-1:0.0: required endpoints missing [ 985.694410][ T5706] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 985.729185][T21203] usb 2-1: USB disconnect, device number 47 [ 985.783875][ T5749] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 985.807220][ T29] usb 3-1: USB disconnect, device number 67 [ 985.867631][ T5706] usb 6-1: device descriptor read/64, error -71 [ 985.981716][ T5706] usb usb6-port1: attempt power cycle [ 986.137596][ T24] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 986.289381][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 986.309218][ T24] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 986.318762][ T24] usb 1-1: config 0 has no interface number 0 [ 986.324954][ T24] usb 1-1: config 0 interface 184 has no altsetting 0 [ 986.331358][ T5706] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 986.343512][ T24] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 986.354074][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.362438][ T24] usb 1-1: Product: syz [ 986.366918][ T24] usb 1-1: Manufacturer: syz [ 986.376555][ T24] usb 1-1: SerialNumber: syz [ 986.384368][ T5706] usb 6-1: device descriptor read/8, error -71 [ 986.402992][ T24] usb 1-1: config 0 descriptor?? [ 986.435155][T24300] FAULT_INJECTION: forcing a failure. [ 986.435155][T24300] name failslab, interval 1, probability 0, space 0, times 0 [ 986.466567][T24300] CPU: 1 UID: 0 PID: 24300 Comm: syz.1.4601 Tainted: G L syzkaller #0 PREEMPT(full) [ 986.466609][T24300] Tainted: [L]=SOFTLOCKUP [ 986.466619][T24300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 986.466641][T24300] Call Trace: [ 986.466652][T24300] [ 986.466662][T24300] dump_stack_lvl+0xe8/0x150 [ 986.466703][T24300] should_fail_ex+0x40c/0x560 [ 986.466740][T24300] should_failslab+0xa8/0x100 [ 986.466779][T24300] __kmalloc_node_track_caller_noprof+0x100/0x730 [ 986.466811][T24300] ? __kasan_kmalloc+0x93/0xb0 [ 986.466843][T24300] ? nvmf_dev_write+0x460/0x2d90 [ 986.466864][T24300] ? nvmf_dev_write+0x460/0x2d90 [ 986.466892][T24300] kstrdup+0x42/0x100 [ 986.466926][T24300] nvmf_dev_write+0x460/0x2d90 [ 986.466949][T24300] ? lockdep_hardirqs_on+0x7a/0x110 [ 986.466979][T24300] ? trace_irq_disable+0x3b/0x140 [ 986.467025][T24300] ? aa_file_perm+0x18b/0x15f0 [ 986.467059][T24300] ? aa_file_perm+0x4ed/0x15f0 [ 986.467093][T24300] ? __pfx_nvmf_dev_write+0x10/0x10 [ 986.467119][T24300] ? kstrtoull+0x12f/0x1d0 [ 986.467153][T24300] ? __pfx_aa_file_perm+0x10/0x10 [ 986.467183][T24300] ? get_pid_task+0x20/0x1f0 [ 986.467216][T24300] ? get_pid_task+0x20/0x1f0 [ 986.467258][T24300] ? __lock_acquire+0x683/0x2cf0 [ 986.467294][T24300] ? apparmor_file_permission+0x1f4/0x300 [ 986.467332][T24300] ? bpf_lsm_file_permission+0x9/0x20 [ 986.467358][T24300] ? security_file_permission+0x75/0x260 [ 986.467394][T24300] ? rw_verify_area+0x203/0x4c0 [ 986.467417][T24300] ? __pfx_nvmf_dev_write+0x10/0x10 [ 986.467440][T24300] vfs_write+0x296/0xba0 [ 986.467469][T24300] ? __pfx_vfs_write+0x10/0x10 [ 986.467492][T24300] ? __fget_files+0x2a/0x420 [ 986.467525][T24300] ? __fget_files+0x2a/0x420 [ 986.467553][T24300] ? __fget_files+0x3a2/0x420 [ 986.467583][T24300] ? __fget_files+0x2a/0x420 [ 986.467621][T24300] ksys_write+0x150/0x270 [ 986.467654][T24300] ? __pfx_ksys_write+0x10/0x10 [ 986.467686][T24300] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 986.467711][T24300] do_syscall_64+0x174/0x580 [ 986.467739][T24300] ? trace_irq_disable+0x3b/0x140 [ 986.467769][T24300] ? clear_bhb_loop+0x40/0x90 [ 986.467796][T24300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 986.467819][T24300] RIP: 0033:0x7f687779e019 [ 986.467840][T24300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 986.467860][T24300] RSP: 002b:00007f68786b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 986.467883][T24300] RAX: ffffffffffffffda RBX: 00007f6877a25fa0 RCX: 00007f687779e019 [ 986.467900][T24300] RDX: 0000000000000070 RSI: 0000200000000a00 RDI: 0000000000000003 [ 986.467914][T24300] RBP: 00007f68786b5090 R08: 0000000000000000 R09: 0000000000000000 [ 986.467928][T24300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 986.467941][T24300] R13: 00007f6877a26038 R14: 00007f6877a25fa0 R15: 00007f6877b4fa48 [ 986.467975][T24300] [ 986.820899][ T5706] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 986.838560][T24304] binder_alloc: 24303: binder_alloc_buf size 1024 failed, no address space [ 986.850179][T24304] binder_alloc: allocated: 12288 (num: 2 largest: 12280), free: 0 (num: 0 largest: 0) [ 986.860395][ T5706] usb 6-1: device descriptor read/8, error -71 [ 986.988532][ T5706] usb usb6-port1: unable to enumerate USB device [ 987.034674][T24309] bond15: entered allmulticast mode [ 987.077312][T24345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4606'. [ 987.595948][ T24] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 987.630530][ T24] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 987.727899][ T5706] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 987.889187][T24287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 987.898881][ T5706] usb 3-1: Using ep0 maxpacket: 32 [ 987.904738][T24287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 987.939589][ T24] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 987.950059][ T5706] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 987.973063][ T24] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 987.995511][ T24] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 988.009611][T24366] 8021q: adding VLAN 0 to HW filter on device bond8 [ 988.016907][ T24] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 988.027538][ T24] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 988.031811][ T5706] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 988.053499][ T24] usb 1-1: USB disconnect, device number 50 [ 988.104115][ T5706] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 988.141874][ T5706] usb 3-1: config 1 has no interface number 0 [ 988.170049][ T5706] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 988.212339][ T5706] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 988.248900][ T5706] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 988.258971][ T5706] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 988.285936][ T5706] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 988.483229][ T5706] snd_usb_pod 3-1:1.1: invalid control EP [ 988.497825][ T5706] snd_usb_pod 3-1:1.1: cannot start listening: -22 [ 988.516197][ T5706] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 988.535300][ T5706] snd_usb_pod 3-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 988.607662][ T24] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 988.662003][T24441] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4619'. [ 988.668181][ T5749] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 988.769571][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 988.787546][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 988.807777][ T24] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 988.827547][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 988.835663][ T5749] usb 2-1: Using ep0 maxpacket: 16 [ 988.850797][ T5749] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 988.865121][ T24] usb 4-1: config 0 descriptor?? [ 988.882459][ T5749] usb 2-1: config 0 interface 0 has no altsetting 0 [ 988.899938][ T24] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 988.917565][ T5749] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 988.926834][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 988.938997][ T5749] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 988.950766][ T24] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 988.976559][ T24] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 988.991355][ T5749] usb 2-1: config 0 descriptor?? [ 989.008985][ T24] usb 4-1: media controller created [ 989.026937][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 989.069424][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 989.075824][ T24] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 989.126438][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input84 [ 989.174223][ T24] dvb-usb: schedule remote query interval to 150 msecs. [ 989.205076][ T24] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 989.359327][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 989.413072][ T24] dvb-usb: error while querying for an remote control event. [ 989.472514][ T5749] mcp2221 0003:04D8:00DD.0061: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 989.522728][T24426] dvb-usb: bulk message failed: -22 (2/0) [ 989.535926][ T24] usb 4-1: USB disconnect, device number 53 [ 989.594331][ T24] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 989.657993][ T5706] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 989.817574][ T5706] usb 1-1: Using ep0 maxpacket: 16 [ 989.832457][ T5706] usb 1-1: unable to get BOS descriptor or descriptor too short [ 989.850912][ T5706] usb 1-1: config 9 has an invalid interface number: 129 but max is 0 [ 989.861030][ T5706] usb 1-1: config 9 has no interface number 0 [ 989.868540][ T5706] usb 1-1: config 9 interface 129 has no altsetting 0 [ 989.878923][ T5706] usb 1-1: New USB device found, idVendor=10b8, idProduct=1f9c, bcdDevice=d5.0b [ 989.889391][ T5706] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.898618][ T5706] usb 1-1: Product: syz [ 989.903098][ T5706] usb 1-1: Manufacturer: syz [ 989.910115][ T5706] usb 1-1: SerialNumber: syz [ 989.935987][ T5749] usb 2-1: USB disconnect, device number 48 [ 990.109945][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 990.109964][ T30] audit: type=1326 audit(1785872646.434:11079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24540 comm="syz.5.4630" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f40ff39e019 code=0x0 [ 990.166279][ T5706] dvb-usb: found a 'DiBcom TFE8096P reference design' in cold state, will try to load a firmware [ 990.234897][ T5706] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 990.243474][ T5706] dib0700: firmware download failed at 7 with -8 [ 990.257401][ T5706] usb 1-1: USB disconnect, device number 51 [ 990.306741][T21203] usb 3-1: USB disconnect, device number 68 [ 990.612709][T24578] binder: BINDER_SET_CONTEXT_MGR already set [ 990.623061][T24578] binder: 24577:24578 ioctl 4018620d 200000004a80 returned -16 [ 990.643167][T24578] binder: 24577:24578 ioctl 8933 2000000003c0 returned -22 [ 990.997689][T21203] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 991.147564][T21203] usb 1-1: Using ep0 maxpacket: 32 [ 991.155827][T21203] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 991.165394][T21203] usb 1-1: config 0 has no interface number 0 [ 991.174986][T21203] usb 1-1: config 0 interface 12 has no altsetting 0 [ 991.188321][T21203] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 991.198065][T21203] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 991.206272][T21203] usb 1-1: Product: syz [ 991.211442][T21203] usb 1-1: Manufacturer: syz [ 991.216241][T21203] usb 1-1: SerialNumber: syz [ 991.225516][T21203] usb 1-1: config 0 descriptor?? [ 993.579065][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.586355][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.761419][ T5749] IPVS: starting estimator thread 0... [ 993.868560][T24601] IPVS: using max 27 ests per chain, 64800 per kthread [ 993.941241][T24609] bond10: entered allmulticast mode [ 994.473380][T24678] pim6reg: entered allmulticast mode [ 994.549056][T24677] pim6reg: left allmulticast mode [ 994.634868][ T30] audit: type=1326 audit(1785872650.954:11080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24687 comm="syz.2.4655" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0c9199e019 code=0x0 [ 994.689791][T24689] input: syz1 as /devices/virtual/input/input85 [ 994.926407][T24694] bond9: entered allmulticast mode [ 995.032254][T21203] f81534 1-1:0.12: f81534_set_register: reg: 1003 data: e8 failed: -71 [ 995.062253][T21203] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 995.108061][T21203] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 995.135094][T21203] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 995.179622][T21203] usb 1-1: USB disconnect, device number 52 [ 995.524449][T20090] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 995.546503][T20090] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 995.558156][T20090] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 995.569882][T20090] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 995.578122][ T5749] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 995.582532][T20090] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 995.787554][ T5749] usb 2-1: Using ep0 maxpacket: 32 [ 995.815291][ T5749] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 995.840422][ T5749] usb 2-1: config 0 has no interface number 0 [ 995.869627][ T5749] usb 2-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 995.896798][ T5749] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 995.916727][ T5749] usb 2-1: Product: syz [ 995.926848][ T5749] usb 2-1: Manufacturer: syz [ 995.945587][ T5749] usb 2-1: SerialNumber: syz [ 995.990220][ T5749] usb 2-1: config 0 descriptor?? [ 996.014698][ T5749] hub 2-1:0.89: bad descriptor, ignoring hub [ 996.024399][ T5706] IPVS: starting estimator thread 0... [ 996.037097][ T5749] hub 2-1:0.89: probe with driver hub failed with error -5 [ 996.064984][ T5749] option 2-1:0.89: GSM modem (1-port) converter detected [ 996.128009][T24794] IPVS: using max 27 ests per chain, 64800 per kthread [ 996.161442][ T5749] usb 2-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 996.249891][T24745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 996.275840][T24745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 996.403175][T24824] bond10: entered allmulticast mode [ 996.408496][ T5749] usb 2-1: USB disconnect, device number 49 [ 996.429148][ T5749] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 996.450699][ T5749] option 2-1:0.89: device disconnected [ 996.587633][T21203] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 996.780116][T21203] usb 3-1: Using ep0 maxpacket: 16 [ 996.821922][T21203] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 996.877429][T21203] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 996.913167][T21203] usb 3-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 996.962924][T21203] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 997.018613][T21203] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 997.061345][T21203] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 997.093250][T21203] usb 3-1: Manufacturer: syz [ 997.128878][T21203] usb 3-1: config 0 descriptor?? [ 997.604518][T24763] bridge0: port 1(bridge_slave_0) entered blocking state [ 997.636283][T24763] bridge0: port 1(bridge_slave_0) entered disabled state [ 997.649595][ T50] Bluetooth: hci4: command tx timeout [ 997.680582][T24763] bridge_slave_0: entered allmulticast mode [ 997.691946][T24763] bridge_slave_0: entered promiscuous mode [ 997.701318][T24763] bridge0: port 2(bridge_slave_1) entered blocking state [ 997.708703][T24763] bridge0: port 2(bridge_slave_1) entered disabled state [ 997.716485][T24763] bridge_slave_1: entered allmulticast mode [ 997.724636][T24763] bridge_slave_1: entered promiscuous mode [ 997.828018][ T5749] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 997.836080][ T24] usb 3-1: USB disconnect, device number 69 [ 997.932754][T24763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 997.982085][T24763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 998.018611][ T5749] usb 2-1: Using ep0 maxpacket: 32 [ 998.030807][ T5749] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 998.079287][ T5749] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 998.135879][T24763] team0: Port device team_slave_0 added [ 998.145441][ T5749] usb 2-1: config 0 descriptor?? [ 998.159225][T24763] team0: Port device team_slave_1 added [ 998.211217][ T5749] as10x_usb: device has been detected [ 998.229403][ T5749] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 998.280230][ T5749] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 998.285548][T24763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 998.319106][T24763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 998.393977][T24763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 998.403928][ T5749] as10x_usb: error during firmware upload part1 [ 998.430840][ T5749] Registered device nBox DVB-T Dongle [ 998.432155][T24763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 998.461751][ T5749] usb 2-1: USB disconnect, device number 50 [ 998.477393][T24763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 998.563037][ T5749] Unregistered device nBox DVB-T Dongle [ 998.570795][ T5749] as10x_usb: device has been disconnected [ 998.572164][T24763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 998.826498][T24763] hsr_slave_0: entered promiscuous mode [ 998.849383][T24763] hsr_slave_1: entered promiscuous mode [ 998.867302][T24763] debugfs: 'hsr0' already exists in 'hsr' [ 998.879606][T24763] Cannot create hsr debugfs directory [ 998.886758][T25111] syz_tun: entered allmulticast mode [ 999.107371][T25172] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4680'. [ 999.147571][T21203] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 999.229094][T25111] nvme nvme0: rdma connection establishment failed (-104) [ 999.280292][T25106] syz_tun: left allmulticast mode [ 999.329343][T21203] usb 4-1: Using ep0 maxpacket: 16 [ 999.350095][T21203] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 999.385106][T21203] usb 4-1: config 0 interface 0 has no altsetting 0 [ 999.415266][T21203] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 999.437376][T25206] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4684'. [ 999.455380][T21203] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 999.479141][T21203] usb 4-1: config 0 descriptor?? [ 999.535930][T24763] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.575105][T25212] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4687'. [ 999.609637][T25212] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4687'. [ 999.622412][T25212] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4687'. [ 999.632787][ T1174] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 999.667119][ T1174] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 999.700202][ T1174] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 999.727217][ T1174] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 999.737906][ T50] Bluetooth: hci4: command tx timeout [ 999.849626][T24763] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.930856][T21203] nzxt-smart2 0003:1E71:2009.0062: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 999.987683][ T24] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 1000.170444][ T24] usb 2-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 1000.195208][ T24] usb 2-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1000.230408][T24763] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1000.250634][ T24] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1000.263193][ T24] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1000.275044][T25239] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4689'. [ 1000.297034][ T24] usb 2-1: Manufacturer: syz [ 1000.314560][ T24] usb 2-1: SerialNumber: syz [ 1000.541507][T25240] nvme nvme0: rdma connection establishment failed (-104) [ 1001.277594][T29812] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1001.477676][T29812] usb 3-1: Using ep0 maxpacket: 32 [ 1001.495790][T29812] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1001.531679][T29812] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1001.572304][T29812] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1001.608802][T29812] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1001.641306][T29812] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.664790][T29812] usb 3-1: Product: syz [ 1001.670578][T29812] usb 3-1: Manufacturer: syz [ 1001.675698][T29812] usb 3-1: SerialNumber: syz [ 1001.710716][T29812] usb 3-1: config 0 descriptor?? [ 1001.783875][T24763] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1001.807699][ T50] Bluetooth: hci4: command tx timeout [ 1001.829924][T24763] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1001.852140][T24763] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1001.902871][ T5706] usb 4-1: USB disconnect, device number 54 [ 1001.934343][T24763] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1001.984363][T24763] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1002.065942][T24763] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1002.084329][T24763] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1002.125704][T24763] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1002.166711][T29812] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 1002.384408][T29812] gs_usb 3-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 1002.440909][T29812] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -22 [ 1002.658856][T29812] usb 3-1: USB disconnect, device number 70 [ 1002.761371][ T24] usbhid 2-1:36.0: couldn't find an input interrupt endpoint [ 1002.814442][ T24] usb 2-1: USB disconnect, device number 51 [ 1002.916615][T24763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1002.955814][T24763] 8021q: adding VLAN 0 to HW filter on device team0 [ 1003.085837][T18697] bridge0: port 1(bridge_slave_0) entered blocking state [ 1003.093108][T18697] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1003.171485][T18697] bridge0: port 2(bridge_slave_1) entered blocking state [ 1003.178749][T18697] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1003.573455][T25377] bond11: entered allmulticast mode [ 1003.677962][ T5749] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1003.701530][T25350] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4697'. [ 1003.839898][ T5749] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1003.888005][ T50] Bluetooth: hci4: command tx timeout [ 1003.905503][ T5749] usb 3-1: config index 0 descriptor too short (expected 26766, got 142) [ 1003.987925][ T5749] usb 3-1: config 1 has too many interfaces: 173, using maximum allowed: 32 [ 1004.004644][ T5749] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1004.046685][ T5749] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 173 [ 1004.092096][ T5749] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1004.159544][T24763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1004.209287][ T5749] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1004.227696][ T5749] usb 3-1: Product: syz [ 1004.249932][ T5749] usb 3-1: Manufacturer: syz [ 1004.255328][ T5749] usb 3-1: SerialNumber: syz [ 1004.301747][ T5749] usb 3-1: selecting invalid altsetting 1 [ 1004.409215][ T5749] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1004.493406][T25449] netlink: 'syz.1.4705': attribute type 4 has an invalid length. [ 1004.528355][T24763] veth0_vlan: entered promiscuous mode [ 1004.549680][T27676] udevd[27676]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1004.646480][T24763] veth1_vlan: entered promiscuous mode [ 1004.774689][T25467] FAULT_INJECTION: forcing a failure. [ 1004.774689][T25467] name failslab, interval 1, probability 0, space 0, times 0 [ 1004.829281][T25467] CPU: 0 UID: 0 PID: 25467 Comm: syz.3.4708 Tainted: G L syzkaller #0 PREEMPT(full) [ 1004.829323][T25467] Tainted: [L]=SOFTLOCKUP [ 1004.829330][T25467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1004.829340][T25467] Call Trace: [ 1004.829346][T25467] [ 1004.829354][T25467] dump_stack_lvl+0xe8/0x150 [ 1004.829383][T25467] should_fail_ex+0x40c/0x560 [ 1004.829409][T25467] should_failslab+0xa8/0x100 [ 1004.829435][T25467] __kmalloc_node_track_caller_noprof+0x100/0x730 [ 1004.829460][T25467] ? nvmf_dev_write+0x10ab/0x2d90 [ 1004.829476][T25467] ? nvmf_dev_write+0x10ab/0x2d90 [ 1004.829496][T25467] kmemdup_nul+0x36/0xf0 [ 1004.829522][T25467] nvmf_dev_write+0x10ab/0x2d90 [ 1004.829562][T25467] ? __pfx_nvmf_dev_write+0x10/0x10 [ 1004.829588][T25467] ? get_pid_task+0x20/0x1f0 [ 1004.829628][T25467] ? bpf_lsm_file_permission+0x9/0x20 [ 1004.829646][T25467] ? security_file_permission+0x75/0x260 [ 1004.829672][T25467] ? rw_verify_area+0x203/0x4c0 [ 1004.829688][T25467] ? __pfx_nvmf_dev_write+0x10/0x10 [ 1004.829703][T25467] vfs_write+0x296/0xba0 [ 1004.829725][T25467] ? __pfx_vfs_write+0x10/0x10 [ 1004.829741][T25467] ? __fget_files+0x2a/0x420 [ 1004.829765][T25467] ? __fget_files+0x2a/0x420 [ 1004.829785][T25467] ? __fget_files+0x3a2/0x420 [ 1004.829806][T25467] ? __fget_files+0x2a/0x420 [ 1004.829836][T25467] ksys_write+0x150/0x270 [ 1004.829854][T25467] ? __pfx_ksys_write+0x10/0x10 [ 1004.829876][T25467] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1004.829893][T25467] do_syscall_64+0x174/0x580 [ 1004.829935][T25467] ? trace_irq_disable+0x3b/0x140 [ 1004.829965][T25467] ? clear_bhb_loop+0x40/0x90 [ 1004.829998][T25467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1004.830015][T25467] RIP: 0033:0x7f32a699e019 [ 1004.830030][T25467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1004.830044][T25467] RSP: 002b:00007f32a77af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1004.830061][T25467] RAX: ffffffffffffffda RBX: 00007f32a6c25fa0 RCX: 00007f32a699e019 [ 1004.830073][T25467] RDX: 0000000000000038 RSI: 0000200000000680 RDI: 0000000000000003 [ 1004.830083][T25467] RBP: 00007f32a77af090 R08: 0000000000000000 R09: 0000000000000000 [ 1004.830093][T25467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1004.830102][T25467] R13: 00007f32a6c26038 R14: 00007f32a6c25fa0 R15: 00007f32a6d4fa48 [ 1004.830126][T25467] [ 1004.837402][T24763] veth0_macvtap: entered promiscuous mode [ 1005.110492][T21203] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 1005.131727][T24763] veth1_macvtap: entered promiscuous mode [ 1005.165431][T24763] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1005.182378][ T5749] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1005.194461][T24763] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1005.204011][ T29] usb 3-1: USB disconnect, device number 71 [ 1005.258553][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1005.302852][T21203] usb 2-1: config 0 has no interfaces? [ 1005.311282][T21203] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1005.328066][T18697] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1005.334639][T21203] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1005.352309][T18697] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1005.361828][T21203] usb 2-1: config 0 descriptor?? [ 1005.367294][ T5749] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1005.385952][ T5749] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1005.404882][ T5749] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1005.414902][ T5749] usb 1-1: config 1 has no interface number 0 [ 1005.421782][T18697] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1005.431832][ T5749] usb 1-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 1005.443863][ T5749] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 1005.483274][ T5749] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1005.538256][ T5749] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.591418][ T5749] usb 1-1: Product: syz [ 1005.601798][T25449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1005.603582][ T5749] usb 1-1: Manufacturer: syz [ 1005.615120][ T5749] usb 1-1: SerialNumber: syz [ 1005.631566][T25449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1005.677406][T18697] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1005.686079][T18697] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1005.724059][ T10] usb 2-1: USB disconnect, device number 52 [ 1005.866374][ T1174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1005.880239][ T1174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1005.941402][T25522] fuse: Bad value for 'user_id' [ 1005.949579][T25522] fuse: Bad value for 'user_id' [ 1005.956060][T25523] loop4: detected capacity change from 0 to 2167 [ 1005.978277][T25523] loop4: [ 1006.098631][ T10] usb 1-1: USB disconnect, device number 53 [ 1006.507617][ T5749] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1006.729209][ T5749] usb 4-1: Using ep0 maxpacket: 16 [ 1006.746360][ T5749] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1006.777907][ T5749] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1006.815112][ T5749] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1006.855050][ T5749] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1006.878715][ T5749] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1006.906378][ T5749] usb 4-1: config 0 descriptor?? [ 1007.170550][T25571] ip6tnl1: entered allmulticast mode [ 1007.205528][T25575] FAULT_INJECTION: forcing a failure. [ 1007.205528][T25575] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1007.223090][T25575] CPU: 1 UID: 0 PID: 25575 Comm: syz.2.4720 Tainted: G L syzkaller #0 PREEMPT(full) [ 1007.223126][T25575] Tainted: [L]=SOFTLOCKUP [ 1007.223135][T25575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1007.223149][T25575] Call Trace: [ 1007.223158][T25575] [ 1007.223168][T25575] dump_stack_lvl+0xe8/0x150 [ 1007.223207][T25575] should_fail_ex+0x40c/0x560 [ 1007.223242][T25575] _copy_from_iter+0x1d3/0x1660 [ 1007.223273][T25575] ? kmem_cache_alloc_node_noprof+0x1f1/0x610 [ 1007.223306][T25575] ? rcu_is_watching+0x15/0xb0 [ 1007.223329][T25575] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1007.223358][T25575] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 1007.223387][T25575] ? __pfx__copy_from_iter+0x10/0x10 [ 1007.223420][T25575] ? __alloc_skb+0x276/0x7a0 [ 1007.223446][T25575] ? __alloc_skb+0x276/0x7a0 [ 1007.223475][T25575] ? netlink_sendmsg+0x650/0xb40 [ 1007.223505][T25575] ? skb_put+0x112/0x210 [ 1007.223532][T25575] netlink_sendmsg+0x6c0/0xb40 [ 1007.223571][T25575] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1007.223613][T25575] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1007.223645][T25575] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1007.223673][T25575] sock_sendmsg_nosec+0x13a/0x180 [ 1007.223712][T25575] ____sys_sendmsg+0x54e/0x850 [ 1007.223744][T25575] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1007.223781][T25575] ? import_iovec+0x73/0xa0 [ 1007.223807][T25575] ___sys_sendmsg+0x2a5/0x360 [ 1007.223835][T25575] ? __lock_acquire+0x683/0x2cf0 [ 1007.223872][T25575] ? __pfx____sys_sendmsg+0x10/0x10 [ 1007.223937][T25575] ? __fget_files+0x2a/0x420 [ 1007.223967][T25575] ? __fget_files+0x3a2/0x420 [ 1007.224009][T25575] __x64_sys_sendmsg+0x1b1/0x290 [ 1007.224047][T25575] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1007.224094][T25575] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1007.224121][T25575] do_syscall_64+0x174/0x580 [ 1007.224149][T25575] ? trace_irq_disable+0x3b/0x140 [ 1007.224179][T25575] ? clear_bhb_loop+0x40/0x90 [ 1007.224206][T25575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1007.224228][T25575] RIP: 0033:0x7f0c9199e019 [ 1007.224249][T25575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1007.224269][T25575] RSP: 002b:00007f0c9280c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1007.224293][T25575] RAX: ffffffffffffffda RBX: 00007f0c91c25fa0 RCX: 00007f0c9199e019 [ 1007.224310][T25575] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1007.224324][T25575] RBP: 00007f0c9280c090 R08: 0000000000000000 R09: 0000000000000000 [ 1007.224338][T25575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1007.224352][T25575] R13: 00007f0c91c26038 R14: 00007f0c91c25fa0 R15: 00007f0c91d4fa48 [ 1007.224386][T25575] [ 1007.759026][T25600] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4723'. [ 1007.820950][T25608] netlink: 'syz.1.4725': attribute type 4 has an invalid length. [ 1007.911719][T25541] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1007.947724][T25610] nvme nvme0: rdma connection establishment failed (-104) [ 1008.039372][ T5749] microsoft 0003:045E:07DA.0063: unknown main item tag 0x0 [ 1008.067758][ T24] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 1008.117790][ T5749] microsoft 0003:045E:07DA.0063: unknown main item tag 0x0 [ 1008.125280][ T5749] microsoft 0003:045E:07DA.0063: unknown main item tag 0x0 [ 1008.132711][ T5749] microsoft 0003:045E:07DA.0063: unknown main item tag 0x0 [ 1008.140130][ T5749] microsoft 0003:045E:07DA.0063: unknown main item tag 0x0 [ 1008.149449][ T5749] microsoft 0003:045E:07DA.0063: unknown main item tag 0x0 [ 1008.218521][ T5749] microsoft 0003:045E:07DA.0063: unknown main item tag 0x0 [ 1008.237656][T21209] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1008.247422][ T5749] microsoft 0003:045E:07DA.0063: unknown main item tag 0x0 [ 1008.274223][ T5749] microsoft 0003:045E:07DA.0063: unknown main item tag 0x0 [ 1008.301088][ T5749] microsoft 0003:045E:07DA.0063: unknown main item tag 0x0 [ 1008.314445][T25632] macsec1: entered promiscuous mode [ 1008.320045][T25632] macsec1: entered allmulticast mode [ 1008.335849][ T24] usb 2-1: config 0 has no interfaces? [ 1008.347822][ T24] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1008.363313][ T5749] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0063/input/input86 [ 1008.381654][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1008.407894][T21209] usb 1-1: Using ep0 maxpacket: 16 [ 1008.425814][T21209] usb 1-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 1008.436633][ T24] usb 2-1: config 0 descriptor?? [ 1008.443694][T21209] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1008.455389][ T5749] microsoft 0003:045E:07DA.0063: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 1008.467917][T21209] usb 1-1: Product: syz [ 1008.483691][T21209] usb 1-1: Manufacturer: syz [ 1008.501913][T21209] usb 1-1: SerialNumber: syz [ 1008.517398][ T5749] usb 4-1: USB disconnect, device number 55 [ 1008.531901][T21209] usb 1-1: config 0 descriptor?? [ 1008.555330][T21209] uvcvideo 1-1:0.0: Found UVC 0.00 device syz (046d:0721) [ 1008.575653][T21209] uvcvideo 1-1:0.0: No valid video chain found. [ 1008.633018][T21203] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1008.678078][T25649] fido_id[25649]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 1008.700738][T25608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1008.721221][T25608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1008.794154][ T24] usb 2-1: USB disconnect, device number 53 [ 1008.812279][T21203] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1008.843684][T21203] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1008.906981][T21203] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1008.962833][T21203] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1009.014275][T25680] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1009.038376][T21203] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1009.078776][T21203] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1009.126686][T21203] usb 3-1: Product: syz [ 1009.134130][T21203] usb 3-1: Manufacturer: syz [ 1009.206043][T21203] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1009.483389][T25637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1009.499303][T25637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1009.705320][T25701] FAULT_INJECTION: forcing a failure. [ 1009.705320][T25701] name failslab, interval 1, probability 0, space 0, times 0 [ 1009.719669][T25701] CPU: 0 UID: 0 PID: 25701 Comm: syz.1.4733 Tainted: G L syzkaller #0 PREEMPT(full) [ 1009.719705][T25701] Tainted: [L]=SOFTLOCKUP [ 1009.719714][T25701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1009.719727][T25701] Call Trace: [ 1009.719737][T25701] [ 1009.719746][T25701] dump_stack_lvl+0xe8/0x150 [ 1009.719785][T25701] should_fail_ex+0x40c/0x560 [ 1009.719820][T25701] should_failslab+0xa8/0x100 [ 1009.719858][T25701] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 1009.719888][T25701] ? skb_clone+0x212/0x3a0 [ 1009.719915][T25701] ? skb_clone+0x212/0x3a0 [ 1009.719951][T25701] skb_clone+0x212/0x3a0 [ 1009.719983][T25701] __netlink_deliver_tap+0x413/0x860 [ 1009.720022][T25701] ? netlink_deliver_tap+0x2e/0x1b0 [ 1009.720051][T25701] netlink_deliver_tap+0x19c/0x1b0 [ 1009.720079][T25701] netlink_unicast+0x77f/0x940 [ 1009.720117][T25701] netlink_sendmsg+0x813/0xb40 [ 1009.720156][T25701] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1009.720191][T25701] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1009.720228][T25701] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1009.720256][T25701] sock_sendmsg_nosec+0x13a/0x180 [ 1009.720294][T25701] ____sys_sendmsg+0x54e/0x850 [ 1009.720328][T25701] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1009.720367][T25701] ? import_iovec+0x73/0xa0 [ 1009.720394][T25701] ___sys_sendmsg+0x2a5/0x360 [ 1009.720429][T25701] ? __lock_acquire+0x683/0x2cf0 [ 1009.720466][T25701] ? __pfx____sys_sendmsg+0x10/0x10 [ 1009.720533][T25701] ? __fget_files+0x2a/0x420 [ 1009.720564][T25701] ? __fget_files+0x3a2/0x420 [ 1009.720606][T25701] __x64_sys_sendmsg+0x1b1/0x290 [ 1009.720638][T25701] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1009.720687][T25701] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1009.720712][T25701] do_syscall_64+0x174/0x580 [ 1009.720740][T25701] ? trace_irq_disable+0x3b/0x140 [ 1009.720771][T25701] ? clear_bhb_loop+0x40/0x90 [ 1009.720797][T25701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1009.720819][T25701] RIP: 0033:0x7f687779e019 [ 1009.720840][T25701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1009.720859][T25701] RSP: 002b:00007f68786b5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1009.720883][T25701] RAX: ffffffffffffffda RBX: 00007f6877a25fa0 RCX: 00007f687779e019 [ 1009.720899][T25701] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1009.720913][T25701] RBP: 00007f68786b5090 R08: 0000000000000000 R09: 0000000000000000 [ 1009.720927][T25701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1009.720939][T25701] R13: 00007f6877a26038 R14: 00007f6877a25fa0 R15: 00007f6877b4fa48 [ 1009.720974][T25701] [ 1010.360177][T25704] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4734'. [ 1010.417357][T25704] netlink: 'syz.5.4734': attribute type 1 has an invalid length. [ 1010.680604][ T24] usb 3-1: USB disconnect, device number 72 [ 1010.733890][T25714] socket: no more sockets [ 1011.003508][ T24] usb 1-1: USB disconnect, device number 54 [ 1011.096581][T25732] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4738'. [ 1011.416982][T25749] netlink: 'syz.1.4742': attribute type 4 has an invalid length. [ 1011.487649][ T24] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1011.516918][T25750] kvm: pic: non byte write [ 1011.671772][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1011.679805][ T24] usb 4-1: no configurations [ 1011.700998][ T24] usb 4-1: can't read configurations, error -22 [ 1011.732263][T21209] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 1011.868900][ T24] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1011.939238][T21209] usb 2-1: config 0 has no interfaces? [ 1011.956557][T21209] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1011.965986][T21209] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1011.994826][T21209] usb 2-1: config 0 descriptor?? [ 1012.067817][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1012.075812][ T24] usb 4-1: no configurations [ 1012.081736][ T24] usb 4-1: can't read configurations, error -22 [ 1012.088792][ T24] usb usb4-port1: attempt power cycle [ 1012.220967][T25752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1012.231993][T25752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1012.421496][ T24] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1012.454616][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1012.462737][ T24] usb 4-1: no configurations [ 1012.467536][ T24] usb 4-1: can't read configurations, error -22 [ 1012.584848][ T24] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1012.621746][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1012.629998][ T24] usb 4-1: no configurations [ 1012.634839][ T24] usb 4-1: can't read configurations, error -22 [ 1012.642368][ T24] usb usb4-port1: unable to enumerate USB device [ 1014.040105][T25773] nvme nvme0: rdma connection establishment failed (-104) [ 1014.366728][T25782] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4746'. [ 1014.967616][ T24] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1015.153203][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 1015.194731][ T24] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1015.209931][ T24] usb 4-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 1015.219116][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.227163][ T24] usb 4-1: Product: syz [ 1015.231877][ T24] usb 4-1: Manufacturer: syz [ 1015.236563][ T24] usb 4-1: SerialNumber: syz [ 1015.266853][ T24] snd-ua101 4-1:1.1: sample format descriptor not found [ 1015.274254][ T24] snd-ua101 4-1:1.0: invalid num_altsetting [ 1015.511218][ T24] usb 4-1: USB disconnect, device number 60 [ 1015.864180][ T5706] usb 2-1: USB disconnect, device number 54 [ 1015.979288][T25768] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4744'. [ 1015.996712][T25811] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4749'. [ 1016.059488][T25811] bond16: option packets_per_slave: invalid value (67108864) [ 1016.067409][T25811] bond16: option packets_per_slave: allowed values 0 - 65535 [ 1016.083974][T25811] bond16 (unregistering): Released all slaves [ 1016.409907][T25893] bond12: entered allmulticast mode [ 1016.938268][ T5706] usb 3-1: new full-speed USB device number 73 using dummy_hcd [ 1016.985452][ T50] Bluetooth: hci0: unexpected event for opcode 0x2039 [ 1016.993127][ T50] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 1017.125905][T25962] nvme nvme0: rdma connection establishment failed (-104) [ 1017.147923][ T5706] usb 3-1: config 206 has an invalid interface number: 83 but max is 0 [ 1017.181302][ T5706] usb 3-1: config 206 has no interface number 0 [ 1017.210209][ T5706] usb 3-1: config 206 interface 83 has no altsetting 0 [ 1017.240040][ T5706] usb 3-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a7.a6 [ 1017.291088][T25991] netlink: 200 bytes leftover after parsing attributes in process `syz.5.4762'. [ 1017.303486][ T5706] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1017.348766][ T5706] usb 3-1: Product: syz [ 1017.373947][ T5706] usb 3-1: Manufacturer: syz [ 1017.392744][T25991] kvm: pic: non byte read [ 1017.397379][T25991] kvm: pic: non byte read [ 1017.403425][T25991] kvm: pic: non byte read [ 1017.411730][ T5706] usb 3-1: SerialNumber: syz [ 1017.416276][T25991] kvm: pic: non byte read [ 1017.426115][T25991] kvm: pic: non byte read [ 1017.435910][T25982] usb usb8: usbfs: process 25982 (syz.5.4762) did not claim interface 0 before use [ 1017.627651][ T5749] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1017.814098][ T5749] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1017.864502][ T5749] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1017.877778][ T5706] xbox_remote_probe: Unexpected desc.bNumEndpoints: 2 [ 1017.903354][ T5749] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1017.943207][T26013] mac80211_hwsim hwsim26 syzkaller1: entered promiscuous mode [ 1017.951056][T26013] mac80211_hwsim hwsim26 syzkaller1: entered allmulticast mode [ 1017.952003][ T5749] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1018.021580][ T5749] usb 1-1: config 0 descriptor?? [ 1018.472306][ T5749] hid_parser_main: 5 callbacks suppressed [ 1018.472331][ T5749] hid-steam 0003:28DE:1142.0064: unknown main item tag 0x0 [ 1018.489503][ T5749] hid-steam 0003:28DE:1142.0064: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 1018.557678][ T5749] hid-steam 0003:28DE:1142.0064: Steam wireless receiver connected [ 1018.566426][ T5749] hid-steam 0003:28DE:1142.0064: No HID_FEATURE_REPORT submitted - nothing to read [ 1018.593248][ T5749] hid-steam 0003:28DE:1142.0065: unknown main item tag 0x0 [ 1018.639223][ T5749] hid-steam 0003:28DE:1142.0065: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 1018.677701][T21203] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1018.847722][T21203] usb 6-1: Using ep0 maxpacket: 8 [ 1018.860126][T21203] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1018.884080][T21203] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 1018.898789][T21203] usb 6-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1018.908244][T21203] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1018.924458][T21203] usb 6-1: config 0 descriptor?? [ 1019.039928][T26058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1019.068292][T26058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1019.288124][ T5749] usb 1-1: USB disconnect, device number 55 [ 1019.338929][ T5749] hid-steam 0003:28DE:1142.0064: Steam wireless receiver disconnected [ 1019.432292][T21203] arvo 0003:1E7D:30D4.0066: unexpected long global item [ 1019.455901][T21203] arvo 0003:1E7D:30D4.0066: parse failed [ 1019.464771][T21203] arvo 0003:1E7D:30D4.0066: probe with driver arvo failed with error -22 [ 1019.477575][T29812] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1019.501834][T26083] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 1019.575607][ T10] usb 3-1: USB disconnect, device number 73 [ 1019.625999][T26032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1019.650883][T29812] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1019.662232][T26032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1019.677160][T29812] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.695096][T26106] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4776'. [ 1019.706008][T29812] usb 4-1: Product: syz [ 1019.711033][T29812] usb 4-1: Manufacturer: syz [ 1019.718061][T29812] usb 4-1: SerialNumber: syz [ 1019.763674][T21203] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1019.811868][T29812] usb 6-1: USB disconnect, device number 33 [ 1019.917941][ T5749] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1020.030005][T21209] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1020.087634][ T5749] usb 2-1: Using ep0 maxpacket: 16 [ 1020.098149][ T5749] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1020.113049][ T5749] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1020.123829][ T5749] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1020.139070][ T5749] usb 2-1: New USB device found, idVendor=045e, idProduct=07c2, bcdDevice= 0.00 [ 1020.148661][ T5749] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.168229][ T5749] usb 2-1: config 0 descriptor?? [ 1020.202237][T21209] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1020.222176][T21209] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1020.247569][T21209] usb 3-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1020.269435][T21209] usb 3-1: config 1 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1020.297976][T21209] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1020.310366][T21209] usb 3-1: string descriptor 0 read error: -22 [ 1020.327655][T21209] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.40 [ 1020.337256][T21209] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.397714][ T5749] hid (null): report_id 0 is invalid [ 1020.428343][ T5749] hid (null): unknown global tag 0xe [ 1020.434701][ T5749] hid (null): unknown global tag 0xd [ 1020.460507][ T5749] hid-generic 0003:045E:07C2.0067: unknown main item tag 0x0 [ 1020.510099][ T5749] hid-generic 0003:045E:07C2.0067: unknown main item tag 0x0 [ 1020.527400][ T5749] hid-generic 0003:045E:07C2.0067: unknown main item tag 0x0 [ 1020.548522][ T5749] hid-generic 0003:045E:07C2.0067: report_id 0 is invalid [ 1020.559750][ T5749] hid-generic 0003:045E:07C2.0067: item 0 0 1 8 parsing failed [ 1020.575557][ T5749] hid-generic 0003:045E:07C2.0067: probe with driver hid-generic failed with error -22 [ 1020.599657][T26149] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4782'. [ 1020.627823][ T5749] usb 2-1: USB disconnect, device number 55 [ 1020.819905][T21209] kone 0003:1E7D:2CED.0068: unknown main item tag 0x0 [ 1020.847881][T21203] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1020.855141][T21209] kone 0003:1E7D:2CED.0068: unknown main item tag 0x0 [ 1020.886347][T21209] kone 0003:1E7D:2CED.0068: unknown main item tag 0x0 [ 1020.905106][T21209] kone 0003:1E7D:2CED.0068: unknown main item tag 0x0 [ 1020.906015][T21203] ath9k_htc: Failed to initialize the device [ 1020.945950][T21209] kone 0003:1E7D:2CED.0068: unknown main item tag 0x0 [ 1021.076960][T21209] kone 0003:1E7D:2CED.0068: hidraw0: USB HID v0.05 Device [HID 1e7d:2ced] on usb-dummy_hcd.2-1/input0 [ 1021.113397][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 1021.121772][T21209] kone 0003:1E7D:2CED.0068: couldn't init struct kone_device [ 1021.129725][T21209] kone 0003:1E7D:2CED.0068: couldn't install mouse [ 1021.161857][T21209] kone 0003:1E7D:2CED.0068: probe with driver kone failed with error -5 [ 1021.206823][T21203] usb 4-1: ath9k_htc: USB layer deinitialized [ 1021.225524][T21209] usb 3-1: USB disconnect, device number 74 [ 1021.237595][ T5728] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1021.257627][T29812] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1021.315088][T26212] fido_id[26212]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 1021.411501][ T5728] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1021.425967][ T5728] usb 6-1: config index 0 descriptor too short (expected 26766, got 142) [ 1021.438280][ T5728] usb 6-1: config 1 has too many interfaces: 173, using maximum allowed: 32 [ 1021.447392][ T5728] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1021.459538][ T5728] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 173 [ 1021.462295][T29812] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1021.477423][ T5728] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1021.477990][ T5728] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1021.478026][ T5728] usb 6-1: Product: syz [ 1021.478043][ T5728] usb 6-1: Manufacturer: syz [ 1021.478061][ T5728] usb 6-1: SerialNumber: syz [ 1021.523028][T29812] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1021.533305][T21203] usb 4-1: USB disconnect, device number 61 [ 1021.576514][ T5728] usb 6-1: selecting invalid altsetting 1 [ 1021.608092][T29812] usb 2-1: config 0 descriptor?? [ 1021.640942][T29812] cp210x 2-1:0.0: cp210x converter detected [ 1021.727969][ T5728] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1021.919243][T27676] udevd[27676]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1022.032080][T26245] bond10: entered allmulticast mode [ 1022.307877][T21209] usb 6-1: USB disconnect, device number 34 [ 1022.352164][T26292] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4788'. [ 1022.439356][ T5728] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1022.568189][T26314] loop4: detected capacity change from 0 to 2327 [ 1022.584108][T26314] loop4: [ 1022.613458][ T5728] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1022.635381][ T5728] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1022.656337][ T5728] usb 3-1: Product: syz [ 1022.670059][ T5728] usb 3-1: Manufacturer: syz [ 1022.684460][ T5728] usb 3-1: SerialNumber: syz [ 1022.711918][ T5728] usb 3-1: config 0 descriptor?? [ 1022.740577][ T5728] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1022.772155][ T5728] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1022.798532][ T5728] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1022.821516][ T5728] usb 3-1: media controller created [ 1022.893898][ T5728] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1022.959428][T26282] dvb-usb: bulk message failed: -22 (7/0) [ 1023.145963][ T5728] DVB: Unable to find symbol mt352_attach() [ 1023.273467][ T5728] DVB: Unable to find symbol nxt6000_attach() [ 1023.303150][ T5728] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1023.351333][ T5728] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input87 [ 1023.435939][ T5728] dvb-usb: schedule remote query interval to 1000 msecs. [ 1023.474390][ T5728] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1023.475586][T26346] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4793'. [ 1023.533319][ T5728] dvb-usb: bulk message failed: -22 (7/0) [ 1023.555818][ T5728] dvb-usb: bulk message failed: -22 (7/0) [ 1023.605303][ T5728] usb 3-1: USB disconnect, device number 75 [ 1023.886822][ T5728] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1024.085482][T29812] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 1024.120151][T29812] cp210x 2-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 1024.128864][T21209] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1024.146274][T29812] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 1024.191742][T29812] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1024.212884][T26374] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4797'. [ 1024.242099][T29812] usb 2-1: USB disconnect, device number 56 [ 1024.300637][T29812] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1024.318118][T21209] usb 4-1: Using ep0 maxpacket: 16 [ 1024.332240][T21209] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1024.346398][T21209] usb 4-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1024.361108][T21209] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1024.368171][T21209] usb 4-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 1024.378318][T21209] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1024.386750][T29812] cp210x 2-1:0.0: device disconnected [ 1024.414689][T21209] usb 4-1: config 0 descriptor?? [ 1024.429272][T26354] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1024.525592][T26377] bond16: entered allmulticast mode [ 1024.871074][T21209] hid_parser_main: 4012 callbacks suppressed [ 1024.871094][T21209] samsung 0003:0419:0001.0069: unknown main item tag 0x0 [ 1024.923509][T21209] samsung 0003:0419:0001.0069: unknown main item tag 0x0 [ 1024.947954][T21209] samsung 0003:0419:0001.0069: unknown main item tag 0x0 [ 1024.973321][T21209] samsung 0003:0419:0001.0069: unknown main item tag 0x0 [ 1024.993543][T21209] samsung 0003:0419:0001.0069: unknown main item tag 0x0 [ 1025.004618][ T24] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1025.016826][T21209] samsung 0003:0419:0001.0069: unknown main item tag 0x0 [ 1025.038753][T21209] samsung 0003:0419:0001.0069: unknown main item tag 0x0 [ 1025.054557][T21209] samsung 0003:0419:0001.0069: unknown main item tag 0x0 [ 1025.095690][T21209] samsung 0003:0419:0001.0069: unknown main item tag 0x0 [ 1025.137575][T21209] samsung 0003:0419:0001.0069: unknown main item tag 0x0 [ 1025.166924][T26440] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4802'. [ 1025.186643][T21209] samsung 0003:0419:0001.0069: unbalanced collection at end of report description [ 1025.209831][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1025.223374][T21209] samsung 0003:0419:0001.0069: parse failed [ 1025.238581][ T24] usb 2-1: config index 0 descriptor too short (expected 26766, got 142) [ 1025.256259][T21209] samsung 0003:0419:0001.0069: probe with driver samsung failed with error -22 [ 1025.272247][ T24] usb 2-1: config 1 has too many interfaces: 173, using maximum allowed: 32 [ 1025.322679][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1025.346229][T21209] usb 4-1: USB disconnect, device number 62 [ 1025.366853][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 173 [ 1025.422728][ T24] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1025.458095][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1025.492736][ T24] usb 2-1: Product: syz [ 1025.507548][ T24] usb 2-1: Manufacturer: syz [ 1025.534200][ T24] usb 2-1: SerialNumber: syz [ 1025.598343][ T24] usb 2-1: selecting invalid altsetting 1 [ 1025.867268][ T24] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1026.104325][T27676] udevd[27676]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1026.275611][T26508] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4806'. [ 1026.296133][ T24] usb 2-1: USB disconnect, device number 57 [ 1026.717976][T21203] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1026.881044][T21203] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1026.915278][T21203] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.978215][T21203] usb 3-1: config 0 descriptor?? [ 1027.005971][T21203] cp210x 3-1:0.0: cp210x converter detected [ 1027.160597][T26536] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1027.447808][ T10] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 1027.621350][ T10] usb 2-1: config 4 has an invalid interface number: 44 but max is 0 [ 1027.664778][T21203] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 1027.677236][ T10] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1027.695285][T26596] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 1027.706379][T26589] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 1027.721000][T21203] cp210x 3-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 1027.736487][T26596] ALSA: mixer_oss: invalid index 137438 [ 1027.742619][ T10] usb 2-1: config 4 has no interface number 0 [ 1027.762659][T21203] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 1027.772048][ T10] usb 2-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1027.813304][T26596] netlink: 'syz.5.4817': attribute type 30 has an invalid length. [ 1027.837859][ T10] usb 2-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 1027.851480][T21203] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1027.864204][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.898649][T21203] usb 3-1: USB disconnect, device number 76 [ 1027.910041][ T10] usb 2-1: Product: syz [ 1027.926444][ T10] usb 2-1: Manufacturer: syz [ 1027.957953][ T10] usb 2-1: SerialNumber: syz [ 1028.017427][T21203] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1028.061899][T21203] cp210x 3-1:0.0: device disconnected [ 1028.123855][T26619] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4818'. [ 1028.346745][T26631] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4822'. [ 1028.504858][T26639] nvme_fabrics: unknown parameter or missing value 'transpot=fc' in ctrl creation request [ 1028.596689][T26649] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1028.768168][T21203] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1028.885023][T26698] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4830'. [ 1028.940422][T21203] usb 4-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 1028.972184][T21203] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 1028.986003][T26702] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4829'. [ 1028.998653][ T30] audit: type=1326 audit(1785872685.304:11081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26693 comm="syz.0.4829" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d719e019 code=0x7ffc0000 [ 1029.038332][ T30] audit: type=1326 audit(1785872685.304:11082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26693 comm="syz.0.4829" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d719e019 code=0x7ffc0000 [ 1029.064784][T21203] usb 4-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1029.074622][T21203] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.085218][ T30] audit: type=1326 audit(1785872685.304:11083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26693 comm="syz.0.4829" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d719e019 code=0x7ffc0000 [ 1029.112772][T21203] usb 4-1: Product: syz [ 1029.123015][T21203] usb 4-1: Manufacturer: syz [ 1029.132094][T21203] usb 4-1: SerialNumber: syz [ 1029.164736][T21203] usb 4-1: config 0 descriptor?? [ 1029.178506][ T30] audit: type=1326 audit(1785872685.304:11084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26693 comm="syz.0.4829" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f24d719e019 code=0x7ffc0000 [ 1029.213586][T26702] hsr_slave_0 (unregistering): left promiscuous mode [ 1029.230942][T26708] loop4: detected capacity change from 0 to 631 [ 1029.277684][ T30] audit: type=1326 audit(1785872685.304:11085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26693 comm="syz.0.4829" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d719e019 code=0x7ffc0000 [ 1029.327729][ T30] audit: type=1326 audit(1785872685.304:11086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26693 comm="syz.0.4829" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d719e019 code=0x7ffc0000 [ 1029.352716][T26708] loop4: [ 1029.388005][ T30] audit: type=1326 audit(1785872685.304:11087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26693 comm="syz.0.4829" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d719e019 code=0x7ffc0000 [ 1029.414260][ T30] audit: type=1326 audit(1785872685.304:11088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26693 comm="syz.0.4829" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f24d719e019 code=0x7ffc0000 [ 1029.446910][T26643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1029.462848][T26643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1029.499074][ T30] audit: type=1326 audit(1785872685.364:11089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26693 comm="syz.0.4829" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f24d719dd82 code=0x7ffc0000 [ 1029.539075][T21203] mos7840 4-1:0.0: required endpoints missing [ 1029.554712][T26725] netlink: 'syz.2.4832': attribute type 10 has an invalid length. [ 1029.580728][T26725] syz_tun: entered promiscuous mode [ 1029.594363][ T30] audit: type=1326 audit(1785872685.364:11090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26693 comm="syz.0.4829" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f24d719dd82 code=0x7ffc0000 [ 1029.622490][T21203] usb 4-1: USB disconnect, device number 63 [ 1029.642209][T26725] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1030.017658][T21203] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1030.192172][T21203] usb 4-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 16416, setting to 1024 [ 1030.229579][ T10] dvb-usb: found a 'Gigabyte U7000' in cold state, will try to load a firmware [ 1030.259972][T21203] usb 4-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1030.291577][ T10] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1030.322111][T21203] usb 4-1: config 1 interface 0 altsetting 13 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1030.328794][T26767] netlink: 'syz.1.4840': attribute type 13 has an invalid length. [ 1030.345899][ T10] dib0700: firmware download failed at 7 with -22 [ 1030.354111][T26767] netlink: 'syz.1.4840': attribute type 17 has an invalid length. [ 1030.386791][T21203] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1030.408413][ T10] usb 2-1: USB disconnect, device number 58 [ 1030.427093][T21203] usb 4-1: string descriptor 0 read error: -22 [ 1030.448204][T21203] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1030.460677][T26756] bridge0: port 1(dummy0) entered disabled state [ 1030.490931][T21203] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1030.774361][T26789] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4841'. [ 1030.797644][ T10] usb 2-1: new full-speed USB device number 59 using dummy_hcd [ 1030.956654][T21203] usbhid 4-1:1.0: can't add hid device: -71 [ 1030.982409][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 1030.996189][T21203] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 1031.027137][ T10] usb 2-1: config 64 has an invalid interface number: 97 but max is 2 [ 1031.041595][T21203] usb 4-1: USB disconnect, device number 64 [ 1031.051669][ T10] usb 2-1: config 64 has an invalid interface number: 22 but max is 2 [ 1031.082981][ T10] usb 2-1: config 64 has an invalid interface number: 131 but max is 2 [ 1031.130806][ T10] usb 2-1: config 64 has no interface number 0 [ 1031.163661][ T10] usb 2-1: config 64 has no interface number 1 [ 1031.191408][ T10] usb 2-1: config 64 has no interface number 2 [ 1031.211763][ T10] usb 2-1: config 64 interface 22 altsetting 3 endpoint 0x86 has invalid maxpacket 1024, setting to 64 [ 1031.254373][ T10] usb 2-1: config 64 interface 22 altsetting 3 endpoint 0x2 has invalid maxpacket 1544, setting to 64 [ 1031.276184][ T10] usb 2-1: config 64 interface 22 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 1031.297563][ T10] usb 2-1: config 64 interface 22 altsetting 3 has a duplicate endpoint with address 0x6, skipping [ 1031.317558][ T10] usb 2-1: config 64 interface 22 altsetting 3 has a duplicate endpoint with address 0x2, skipping [ 1031.340265][ T10] usb 2-1: config 64 interface 22 altsetting 3 has a duplicate endpoint with address 0xD, skipping [ 1031.356835][ T10] usb 2-1: config 64 interface 22 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 1031.360519][ T5638] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1031.398784][ T10] usb 2-1: config 64 interface 22 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 1031.412307][ T10] usb 2-1: config 64 interface 131 altsetting 4 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1031.423898][ T10] usb 2-1: config 64 interface 131 altsetting 4 has a duplicate endpoint with address 0xF, skipping [ 1031.436740][ T10] usb 2-1: config 64 interface 131 altsetting 4 has a duplicate endpoint with address 0x2, skipping [ 1031.449135][ T10] usb 2-1: config 64 interface 131 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 1031.464610][ T10] usb 2-1: config 64 interface 131 altsetting 4 has an endpoint descriptor with address 0xC3, changing to 0x83 [ 1031.512910][ T10] usb 2-1: config 64 interface 131 altsetting 4 has a duplicate endpoint with address 0x83, skipping [ 1031.548088][ T10] usb 2-1: config 64 interface 97 has no altsetting 0 [ 1031.580549][ T5638] usb 6-1: Using ep0 maxpacket: 16 [ 1031.585953][ T10] usb 2-1: config 64 interface 22 has no altsetting 0 [ 1031.603211][ T10] usb 2-1: config 64 interface 131 has no altsetting 0 [ 1031.614075][ T5638] usb 6-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 1031.632646][ T5638] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.634788][ T10] usb 2-1: New USB device found, idVendor=0921, idProduct=1000, bcdDevice=50.e4 [ 1031.641500][ T5638] usb 6-1: Product: syz [ 1031.667817][ T5638] usb 6-1: Manufacturer: syz [ 1031.675336][ T5638] usb 6-1: SerialNumber: syz [ 1031.678400][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.706933][ T10] usb 2-1: Product: 뙹ᖋ陲좶葺縈楑嵬꟤ﶉ쑚늆ȝ겫愷 [ 1031.718899][ T10] usb 2-1: Manufacturer: ⮾᤟໖৘艭罹☣ꓦ砑麞ⴰ︌᱖࠽띻﹘䇼俤ት⫛馸珷틛掶엌Ӿ筟阴ﻱ初帕ᾘ鰂ꤥ玀ꦟ屍蚊킟ﴶ복闒わ衠犑棳㥙징쏟碖ك妈뽡疚∆䛶ጿ휆퓯靋쏚磇毼꫌鈞뻪웟啰唪ה냂쒞宖뢥︗⩻ [ 1031.766824][ T50] Bluetooth: hci0: SCO packet for unknown connection handle 2504 [ 1031.784432][ T10] usb 2-1: SerialNumber: syz [ 1031.801495][T26767] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1031.837692][ T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.865559][ T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.878277][T26825] loop3: detected capacity change from 0 to 7 [ 1031.884547][ T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.907379][T26825] Dev loop3: unable to read RDB block 7 [ 1031.913306][T26825] loop3: unable to read partition table [ 1031.923351][T26825] loop3: partition table beyond EOD, truncated [ 1031.930098][T26825] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 1031.959837][ T5638] usb 6-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 1032.008824][ T5638] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1032.034312][ T5638] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 1032.066467][ T5638] usb 6-1: media controller created [ 1032.101315][ T10] belkin_sa 2-1:64.97: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 1032.109113][ T5638] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1032.130923][ T10] usb 2-1: bcdDevice: 50e4, bfc: 0 [ 1032.139475][ T10] usb 2-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 1032.156476][T26805] ------------[ cut here ]------------ [ 1032.157273][ T10] belkin_sa 2-1:64.22: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 1032.163093][T26805] usb 6-1: BOGUS control dir, pipe 80002380 doesn't match bRequestType c0 [ 1032.175250][T26846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1032.184324][T26805] WARNING: drivers/usb/core/urb.c:413 at usb_submit_urb+0x1057/0x18b0, CPU#1: syz.5.4842/26805 [ 1032.202635][T26805] Modules linked in: [ 1032.207720][T26805] CPU: 1 UID: 0 PID: 26805 Comm: syz.5.4842 Tainted: G L syzkaller #0 PREEMPT(full) [ 1032.208566][ T10] usb 2-1: bcdDevice: 50e4, bfc: 0 [ 1032.221376][T26805] Tainted: [L]=SOFTLOCKUP [ 1032.228554][T26805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1032.240844][T26805] RIP: 0010:usb_submit_urb+0x1100/0x18b0 [ 1032.246599][T26805] Code: b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 0f 85 b2 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 18 4c 89 f2 44 89 f9 <67> 48 0f b9 3a 48 bd 00 00 00 00 00 fc ff df e9 ba f2 ff ff 44 89 [ 1032.266510][T26805] RSP: 0018:ffffc900072d7718 EFLAGS: 00010246 [ 1032.272925][T26805] RAX: 0000000000000000 RBX: ffff88807b49a500 RCX: 0000000080002380 [ 1032.278420][T26846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1032.281183][T26805] RDX: ffff888076c95800 RSI: ffffffff8ca32060 RDI: ffffffff90658e10 [ 1032.296786][T26805] RBP: dffffc0000000000 R08: 00000000000000c0 R09: 0000000000000000 [ 1032.305051][T26805] R10: ffffc900072d7800 R11: fffff52000e5af0c R12: 1ffff110040d39ec [ 1032.313369][T26805] R13: ffff88802069cf60 R14: ffff888076c95800 R15: 0000000080002380 [ 1032.321628][T26805] FS: 00007fbd43d406c0(0000) GS:ffff88812504b000(0000) knlGS:0000000000000000 [ 1032.327819][T26787] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1032.331196][T26805] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1032.344866][T26805] CR2: 000000000000002c CR3: 00000000774b2000 CR4: 00000000003526f0 [ 1032.352970][T26805] Call Trace: [ 1032.356295][T26805] [ 1032.359348][T26805] usb_start_wait_urb+0x13f/0x5b0 [ 1032.364528][T26805] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1032.370395][T26805] usb_control_msg+0x234/0x3e0 [ 1032.375244][T26805] gl861_ctrl_msg+0x207/0x420 [ 1032.380135][T26805] ? __pfx_gl861_ctrl_msg+0x10/0x10 [ 1032.385386][T26805] ? aa_file_perm+0x4ed/0x15f0 [ 1032.390314][T26805] gl861_i2c_master_xfer+0x439/0x6a0 [ 1032.395664][T26805] __i2c_transfer+0x7be/0x1fe0 [ 1032.400741][T26805] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1032.406601][T26805] ? lockdep_hardirqs_on+0x7a/0x110 [ 1032.412115][T26805] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1032.419138][T26805] ? rt_mutex_lock_nested+0x156/0x1c0 [ 1032.424590][T26805] ? i2c_transfer+0xc8/0x2d0 [ 1032.429371][T26805] i2c_transfer+0x1cc/0x2d0 [ 1032.433946][T26805] i2c_transfer_buffer_flags+0x10d/0x1a0 [ 1032.439676][T26805] ? __lock_acquire+0x683/0x2cf0 [ 1032.444676][T26805] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 1032.450985][ T10] usb 2-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB1 [ 1032.461090][T26805] ? i2cdev_read+0xe8/0x250 [ 1032.465754][T26805] i2cdev_read+0x10d/0x250 [ 1032.470292][T26805] ? __pfx_i2cdev_read+0x10/0x10 [ 1032.475296][T26805] vfs_read+0x213/0xa80 [ 1032.479567][T26805] ? __pfx_vfs_read+0x10/0x10 [ 1032.484301][T26805] ? __fget_files+0x2a/0x420 [ 1032.489012][T26805] ? __fget_files+0x2a/0x420 [ 1032.493663][T26805] ? __fget_files+0x3a2/0x420 [ 1032.498453][T26805] ? __fget_files+0x2a/0x420 [ 1032.503109][T26805] __x64_sys_pread64+0x196/0x220 [ 1032.508148][T26805] ? __pfx___x64_sys_pread64+0x10/0x10 [ 1032.513672][T26805] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1032.519870][T26787] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 1.00 [ 1032.519900][T26787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.537502][T26805] do_syscall_64+0x174/0x580 [ 1032.542156][T26805] ? trace_irq_disable+0x3b/0x140 [ 1032.547286][T26805] ? clear_bhb_loop+0x40/0x90 [ 1032.552089][T26805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1032.558082][T26805] RIP: 0033:0x7fbd42d9e019 [ 1032.562542][T26805] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1032.582284][T26805] RSP: 002b:00007fbd43d40028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 1032.590798][T26805] RAX: ffffffffffffffda RBX: 00007fbd43025fa0 RCX: 00007fbd42d9e019 [ 1032.598893][T26805] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1032.606918][T26805] RBP: 00007fbd42e3500c R08: 0000000000000000 R09: 0000000000000000 [ 1032.618430][T26805] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 1032.627337][T26805] R13: 00007fbd43026038 R14: 00007fbd43025fa0 R15: 00007fbd4314fa48 [ 1032.635651][T26805] [ 1032.638789][T26805] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1032.646113][T26805] CPU: 1 UID: 0 PID: 26805 Comm: syz.5.4842 Tainted: G L syzkaller #0 PREEMPT(full) [ 1032.657093][T26805] Tainted: [L]=SOFTLOCKUP [ 1032.661456][T26805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1032.671600][T26805] Call Trace: [ 1032.674915][T26805] [ 1032.677892][T26805] vpanic+0x56c/0xa60 [ 1032.681931][T26805] ? __pfx__printk+0x10/0x10 [ 1032.686579][T26805] ? __pfx_vpanic+0x10/0x10 [ 1032.691137][T26805] ? is_bpf_text_address+0x292/0x2b0 [ 1032.696479][T26805] ? is_bpf_text_address+0x26/0x2b0 [ 1032.701746][T26805] panic+0xc5/0xd0 [ 1032.705535][T26805] ? __pfx_panic+0x10/0x10 [ 1032.710032][T26805] __warn+0x315/0x4c0 [ 1032.714052][T26805] ? usb_submit_urb+0x1057/0x18b0 [ 1032.719140][T26805] ? usb_submit_urb+0x1057/0x18b0 [ 1032.724220][T26805] __report_bug+0x276/0x570 [ 1032.728853][T26805] ? usb_submit_urb+0x1057/0x18b0 [ 1032.733914][T26805] ? __pfx___report_bug+0x10/0x10 [ 1032.738972][T26805] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1032.744820][T26805] ? __kmalloc_noprof+0x1ad/0x720 [ 1032.749880][T26805] ? kasan_save_track+0x4f/0x80 [ 1032.754767][T26805] report_bug_entry+0x19a/0x290 [ 1032.759647][T26805] ? usb_submit_urb+0x1100/0x18b0 [ 1032.764706][T26805] ? usb_submit_urb+0x1105/0x18b0 [ 1032.769765][T26805] handle_bug+0xce/0x200 [ 1032.774047][T26805] exc_invalid_op+0x1a/0x50 [ 1032.778581][T26805] asm_exc_invalid_op+0x1a/0x20 [ 1032.783455][T26805] RIP: 0010:usb_submit_urb+0x1100/0x18b0 [ 1032.789121][T26805] Code: b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 0f 85 b2 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 18 4c 89 f2 44 89 f9 <67> 48 0f b9 3a 48 bd 00 00 00 00 00 fc ff df e9 ba f2 ff ff 44 89 [ 1032.808756][T26805] RSP: 0018:ffffc900072d7718 EFLAGS: 00010246 [ 1032.814856][T26805] RAX: 0000000000000000 RBX: ffff88807b49a500 RCX: 0000000080002380 [ 1032.822855][T26805] RDX: ffff888076c95800 RSI: ffffffff8ca32060 RDI: ffffffff90658e10 [ 1032.830852][T26805] RBP: dffffc0000000000 R08: 00000000000000c0 R09: 0000000000000000 [ 1032.838847][T26805] R10: ffffc900072d7800 R11: fffff52000e5af0c R12: 1ffff110040d39ec [ 1032.846877][T26805] R13: ffff88802069cf60 R14: ffff888076c95800 R15: 0000000080002380 [ 1032.854897][T26805] ? usb_submit_urb+0x1091/0x18b0 [ 1032.859985][T26805] usb_start_wait_urb+0x13f/0x5b0 [ 1032.865053][T26805] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1032.870651][T26805] usb_control_msg+0x234/0x3e0 [ 1032.875457][T26805] gl861_ctrl_msg+0x207/0x420 [ 1032.880169][T26805] ? __pfx_gl861_ctrl_msg+0x10/0x10 [ 1032.885399][T26805] ? aa_file_perm+0x4ed/0x15f0 [ 1032.890196][T26805] gl861_i2c_master_xfer+0x439/0x6a0 [ 1032.895519][T26805] __i2c_transfer+0x7be/0x1fe0 [ 1032.900319][T26805] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1032.906158][T26805] ? lockdep_hardirqs_on+0x7a/0x110 [ 1032.911396][T26805] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1032.917232][T26805] ? rt_mutex_lock_nested+0x156/0x1c0 [ 1032.922635][T26805] ? i2c_transfer+0xc8/0x2d0 [ 1032.927266][T26805] i2c_transfer+0x1cc/0x2d0 [ 1032.931825][T26805] i2c_transfer_buffer_flags+0x10d/0x1a0 [ 1032.937496][T26805] ? __lock_acquire+0x683/0x2cf0 [ 1032.942473][T26805] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 1032.948666][T26805] ? i2cdev_read+0xe8/0x250 [ 1032.953210][T26805] i2cdev_read+0x10d/0x250 [ 1032.957664][T26805] ? __pfx_i2cdev_read+0x10/0x10 [ 1032.962636][T26805] vfs_read+0x213/0xa80 [ 1032.966825][T26805] ? __pfx_vfs_read+0x10/0x10 [ 1032.971523][T26805] ? __fget_files+0x2a/0x420 [ 1032.976148][T26805] ? __fget_files+0x2a/0x420 [ 1032.980772][T26805] ? __fget_files+0x3a2/0x420 [ 1032.985483][T26805] ? __fget_files+0x2a/0x420 [ 1032.990112][T26805] __x64_sys_pread64+0x196/0x220 [ 1032.995082][T26805] ? __pfx___x64_sys_pread64+0x10/0x10 [ 1033.000577][T26805] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1033.006673][T26805] do_syscall_64+0x174/0x580 [ 1033.011297][T26805] ? trace_irq_disable+0x3b/0x140 [ 1033.016353][T26805] ? clear_bhb_loop+0x40/0x90 [ 1033.021061][T26805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1033.026982][T26805] RIP: 0033:0x7fbd42d9e019 [ 1033.031424][T26805] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1033.051058][T26805] RSP: 002b:00007fbd43d40028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 1033.059507][T26805] RAX: ffffffffffffffda RBX: 00007fbd43025fa0 RCX: 00007fbd42d9e019 [ 1033.067504][T26805] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1033.075504][T26805] RBP: 00007fbd42e3500c R08: 0000000000000000 R09: 0000000000000000 [ 1033.083497][T26805] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 1033.091490][T26805] R13: 00007fbd43026038 R14: 00007fbd43025fa0 R15: 00007fbd4314fa48 [ 1033.099503][T26805] [ 1033.103163][T26805] Kernel Offset: disabled [ 1033.107547][T26805] Rebooting in 86400 seconds..