last executing test programs: 49.401873336s ago: executing program 2 (id=1142): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x4, @loopback, 0x4}], 0x1c) setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f00000000c0)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback={0xe0ff}, 0xc5f}, 0x1c) 48.550580837s ago: executing program 2 (id=1150): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000002d00)=[{{0x0, 0x0, 0x0}, 0x8103}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001300)=""/193, 0xc1}, {&(0x7f0000000000)=""/261, 0x105}, {&(0x7f0000003d40)=""/4097, 0x1001}], 0x3}, 0x80000000}], 0x3, 0x20, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r0) 47.620399115s ago: executing program 2 (id=1160): ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000080)={0x9, 0xd44, 0x0, 0x200, 0x7f, "8ecc4ad8281b6b4c93d0d913e8f3277cbfe40b", 0x1001, 0x105}) r1 = socket$inet(0x2, 0x3, 0x8) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f00000002c0)) setsockopt$inet_int(r1, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4) r3 = socket$inet(0x2, 0x3, 0x6) dup3(r1, r3, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) r7 = socket$xdp(0x2c, 0x3, 0x0) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x6) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) syz_usb_connect(0x2, 0x2d, &(0x7f00000010c0)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a800800904000001030000000905", @ANYRES16], 0x0) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000140)=0x200, 0x4) bind$xdp(r7, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x100080, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f0000000080)='nfs\x00', 0x0, &(0x7f00000001c0)='\x05\x00\x00\x00\x04\xb0\xfe\x98\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\xc77\x8b') ioctl$TCSETSF(r8, 0x5404, &(0x7f0000000280)={0x401, 0x6, 0x0, 0xfffffff8, 0x5, "9b0bed824a6ec57acdce3f966789ade1075bf3"}) ioctl$TIOCSSOFTCAR(r8, 0x5453, 0x0) 46.933440286s ago: executing program 2 (id=1167): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000007c0)='usrquota') chdir(&(0x7f0000000100)='./file1\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r1, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e20, 0x0, @loopback, 0x7}}, 0x0, 0x0, 0x47, 0x0, "09be2271b78506e6dd938d324c415acd403a4480fd1afa34432bcdfa64d957e93efafd27ad06a6f589bb643f167cf0fcd370239aaa93f6ded3c5032c96ead0cdc68474d402ab73e482db7ec1e0a57489"}, 0xd8) bind$inet6(r1, &(0x7f0000000a00)={0xa, 0x4e20, 0x200000c, @empty, 0x7}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffff1, @empty, 0x2}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @empty, 0x9f}, 0x1c) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r3, &(0x7f00000029c0)={0x2020}, 0x2020) write$cgroup_int(r3, &(0x7f0000000280)=0x5, 0x12) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) ptrace$getregset(0x4212, r2, 0x202, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x4001410c2, 0x766c618eb221465a) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x84, &(0x7f0000000000)={r9, @in={{0x2, 0x0, @empty}}}, 0x90) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f0000000180)={r9, 0x16, "21fdb7acb28c45f1c94de5d3324eda3e7e4855ef2ef2"}, &(0x7f0000000200)=0x1e) quotactl_fd$Q_SETINFO(r5, 0xffffffff80000600, 0x0, &(0x7f00000001c0)={0x8, 0x401, 0x0, 0x7}) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000040)={0x9, {0x81, 0x2, 0x948}}) setns(r6, 0x0) 46.866595126s ago: executing program 2 (id=1168): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x25, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x0, 0x12a3, 0x6, 0x79, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x558e0d31, 0x4, 0x5f5f2640, 0x91, 0x4, 0x4, 0x7, 0x0, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x40, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0x2, 0x6, 0x6], [0x9, 0x3, 0x2, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x8000, 0x5, 0x2, 0x9, 0x80000c1, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x3, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x1, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x4, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fbf, 0x35db, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0xfffffffe, 0x9, 0x95, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x5, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x4, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0x7000000, 0x401, 0x101, 0xdd83, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x6, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0x20bfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x4000085, 0x3, 0x9, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x7fff, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x5393, 0x1, 0x1b18]}, 0x45c) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x4, 0x7f, 0x4, 0x4000000}, 0x18) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff1100020002000008", 0x1d) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYBLOB="00442dbd7000fddbdf25254de903"], 0x14}, 0x1, 0x0, 0x0, 0x2010}, 0x4001) writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f00000001c0)="84", 0x1}], 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xe, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x5a, 0x9e, 0xa, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x6, 0x0, 0x45, 0x1, 0xbdb], 0x1, 0x1c4213}) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000bc0)=[{{&(0x7f0000000180)={0x2, 0x4e27, @empty}, 0x10, 0x0}}], 0x1, 0x20004840) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r8, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r8, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmmsg$inet(r8, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 44.854718178s ago: executing program 2 (id=1185): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000002d00)=[{{0x0, 0x0, 0x0}, 0x8103}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001300)=""/193, 0xc1}, {&(0x7f0000000000)=""/261, 0x105}, {&(0x7f0000003d40)=""/4097, 0x1001}], 0x3}, 0x80000000}], 0x3, 0x20, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r0) 44.655524814s ago: executing program 32 (id=1185): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000002d00)=[{{0x0, 0x0, 0x0}, 0x8103}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001300)=""/193, 0xc1}, {&(0x7f0000000000)=""/261, 0x105}, {&(0x7f0000003d40)=""/4097, 0x1001}], 0x3}, 0x80000000}], 0x3, 0x20, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r0) 11.135453841s ago: executing program 0 (id=1458): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x558e0d31, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x0, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x40, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x2, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x8000, 0x5, 0x2, 0x9, 0x80000c1, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x1, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x4, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fbf, 0x35db, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x5, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x4, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd83, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0x20bfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x4000081, 0x3, 0x9, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x5393, 0x1, 0x1b18]}, 0x45c) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x2010}, 0x4001) writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f00000001c0)}], 0x1) lsm_set_self_attr(0x65, &(0x7f0000000240)={0x6b, 0x52f9, 0x20}, 0x20, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r3, &(0x7f0000000740)=[{0x84, 0x77, 0x0, 0x0, @tick=0x200, {}, {}, @raw32}, {0x2, 0x9, 0x40, 0x2, @tick, {0xa, 0x5}, {0x2, 0x7}, @addr={0x72, 0x4}}], 0x38) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xe, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x5a, 0x9e, 0xa, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000bc0)=[{{&(0x7f0000000180)={0x2, 0x4e27, @empty}, 0x10, 0x0}}], 0x1, 0x20004840) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 10.717871449s ago: executing program 0 (id=1459): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) prctl$PR_SET_KEEPCAPS(0x8, 0x0) unshare(0x8000000) r3 = socket$netlink(0x10, 0x3, 0x14) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007c00)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000d80)="f9ff282dd35800f0bba89ebb87e80abb89adcac937", 0x15}], 0x1}}], 0x1, 0x20000840) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="fc01000013000100000000000000000000000000000000000000000000000001fc0200000000000000000000000000014e24000d040000090a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x1fc}, 0x1, 0x0, 0x0, 0x11}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x18, 0x1411, 0x1, 0x70bd2d, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) semget$private(0x0, 0x4000, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) semctl$SETVAL(0x0, 0x1, 0x10, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x8140aecc, &(0x7f0000000080)={0x2, 0x0, 0x6}) r5 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000001c0)={0x0, 0xe1, "dd994e2a709791fd477b895c1ddf39a29293326a68976e602ba7d33c8887358b26d3dd39009fbe62279625a7ad532a1a291c9710e0a42e7e3bf1000568a7186c1762713b138d443d3084a1cb79e99a83d98e2d9f04858485dee042a46daf1ea141561d79f61409c5e4dbc8f55fa477973f10d9c08252bc11b1adfeee9d211c5cc92bea1dd7a57613506251e929e8dcaf91781d76951d8db8007f66e253d066695e486c264154a4aa85144e905436cf6d4040274f1dcbe92fe356eb83189dc9c8cc3d911a6994228fcae23ace90b7a31c3c2b6256d88eb8af034d1c40256840ae05"}, &(0x7f0000000000)=0xe9) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xffffd000) openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) r8 = socket$key(0xf, 0x3, 0x2) bind(r8, 0x0, 0x0) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={r7, 0xbc, &(0x7f00000002c0)=[@in={0x2, 0x4e24, @multicast2}, @in6={0xa, 0x4e23, 0xe6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800}, @in6={0xa, 0x4e23, 0xff, @remote, 0xfffffff6}, @in6={0xa, 0x4e21, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x401}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e21, @private=0xa010102}, @in6={0xa, 0x4e23, 0x5931, @empty, 0x3}, @in6={0xa, 0x4e23, 0x7, @empty, 0xb8}]}, &(0x7f0000000100)=0x10) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007}) fcntl$addseals(r5, 0x409, 0xb) ioctl$KVM_SET_MSRS(r2, 0x4140aecd, &(0x7f0000000040)=ANY=[]) 9.57355605s ago: executing program 0 (id=1464): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000140)={0x0, 0x7530}, 0x10) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000040)) r2 = dup2(r1, r1) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000080)=0xfff, 0x4) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10) ioctl$PIO_UNISCRNMAP(r0, 0x4b46, &(0x7f00000000c0)) 9.365829077s ago: executing program 0 (id=1466): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) memfd_create(0x0, 0x71a38dbf99b46d40) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x5}) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x40046109, &(0x7f0000000040)={0xd0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 8.150161506s ago: executing program 4 (id=1472): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x402, @private2, 0x3f096d47}, 0x1c) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_RUN(r5, 0x8913, 0x0) ioctl$KVM_SET_CPUID(r5, 0x4008ae8a, &(0x7f0000000100)=ANY=[@ANYBLOB="030000000000fbff0000000010000000000000000004000004000000000000000700008002000000b900000008000000070000000000000000000000a40000000d000000030000000500000000000000"]) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) capset(&(0x7f0000000040)={0x20080522}, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo/3\x00') ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_GET_IRQCHIP(r6, 0xc208ae62, &(0x7f0000000500)={0x2, 0x0, @ioapic={0x6000, 0x6, 0x1, 0xe0d1, 0x0, [{0x80, 0x3, 0x66, '\x00', 0x2}, {0x6, 0x9, 0x7, '\x00', 0xce}, {0x9, 0xe, 0x81, '\x00', 0x6}, {0x1, 0x8, 0x38, '\x00', 0x7}, {0x0, 0x6, 0x0, '\x00', 0x74}, {0x0, 0x18, 0x80, '\x00', 0x40}, {0x0, 0xc0, 0x1, '\x00', 0x3}, {0x3, 0xf, 0xd0, '\x00', 0x9}, {0x0, 0x5, 0x17, '\x00', 0x1}, {0x2, 0xd9, 0x8, '\x00', 0x5}, {0x2, 0x0, 0x1, '\x00', 0xff}, {0x8, 0x9, 0x5, '\x00', 0xfd}, {0x7, 0x1, 0x6, '\x00', 0x7}, {0x3, 0x8, 0xf8, '\x00', 0xc6}, {0x5, 0xc, 0x3, '\x00', 0xfa}, {0xf1, 0x25, 0x2}, {0x90, 0x8b, 0x81, '\x00', 0x8}, {0xfe, 0x8, 0x36, '\x00', 0x1}, {0x5, 0x7, 0x8, '\x00', 0x4}, {0x9, 0x42, 0xc4, '\x00', 0x2}, {0x4, 0x8, 0x2, '\x00', 0x1}, {0x2, 0x0, 0xb, '\x00', 0x5}, {0x5e, 0xfa, 0x4}, {0x7b, 0x3, 0x6, '\x00', 0x6}]}}) 7.790051928s ago: executing program 4 (id=1473): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x20441, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001600), 0x6, 0x22c01) setreuid(0x0, 0xee00) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x34, r3, 0x1, 0x70bd2d, 0x20000000, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000300)=ANY=[@ANYRES64=r1, @ANYRES64=r1]) (async) ioctl$BLKDISCARD(r0, 0x125f, 0x0) 7.705141629s ago: executing program 4 (id=1474): r0 = syz_usb_connect_ath9k(0x3, 0xffffffffffffff6d, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e4b0, [{{0x9, 0x2, 0x48}}]}}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000003c0), &(0x7f0000000400)=0x4) syz_usb_disconnect(r0) r2 = syz_usb_connect(0x0, 0x6d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003cda2a200a111022"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[], 0x0) syz_usb_disconnect(r2) 5.989908911s ago: executing program 1 (id=1477): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x558e0d31, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x0, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x40, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x2, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x8000, 0x5, 0x2, 0x9, 0x80000c1, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x1, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x4, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fbf, 0x35db, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x5, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x4, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd83, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0x20bfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x4000081, 0x3, 0x9, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x5393, 0x1, 0x1b18]}, 0x45c) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x2010}, 0x4001) writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f00000001c0)}], 0x1) lsm_set_self_attr(0x65, &(0x7f0000000240)={0x6b, 0x52f9, 0x20}, 0x20, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r3, &(0x7f0000000740)=[{0x84, 0x77, 0x0, 0x0, @tick=0x200, {}, {}, @raw32}, {0x2, 0x9, 0x40, 0x2, @tick, {0xa, 0x5}, {0x2, 0x7}, @addr={0x72, 0x4}}], 0x38) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xe, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x5a, 0x9e, 0xa, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000bc0)=[{{&(0x7f0000000180)={0x2, 0x4e27, @empty}, 0x10, 0x0}}], 0x1, 0x20004840) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 5.725393847s ago: executing program 1 (id=1480): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x20, 0x0, 0x607, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x20}, 0x1, 0x0, 0x0, 0x8801}, 0x810) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49de, 0x6, 0xfffb, 0xbfff, 0x1c, "ec28a144f13d7607"}) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x20) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0xfffffffc, 0x0, 0x0, 0x10, "0062ba5d8200"}) r1 = syz_open_pts(r0, 0x20800) dup3(r1, r0, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback, 0x200000}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000180), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "2000a200009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) recvfrom$inet6(r3, &(0x7f00000000c0)=""/3, 0x3, 0x40000043, 0x0, 0x0) bind$bt_sco(r2, &(0x7f00000001c0), 0x8) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000440)=0x1, &(0x7f00000007c0)=0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x44) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000000), 0x4) 5.003505758s ago: executing program 0 (id=1481): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000139000/0x1000)=nil, 0x1000, 0x15) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_clone(0x78503ef09497f070, &(0x7f0000000c80)="8cbfa05d74d17fdc01b9e9b4abdd52f56c4a4cf26c57cdd5376cd3d3eb596a3a2bf21c0e3c78da7a222655d60e30c5dd8eccfe180f07633536afbf79ccab16ca6ff8b09846b11e0aa39633343c2b4cb48c459345188f1d3f452f269f9b602f4779151137b6c526b6c13f495d2d987aae989fa1f8dc6c4d81e5807351a91a89153470cdaefc349cb37ad934263ff5201323517a5b5ef07148a17e581b7dda1ea832754121819cd5c1ced51794059fd55b0ecd9a5d25437c7dd1d6aff882c0e4c581906293c7a27be37e1b28fdfa11e5adb8c186fbc84ecb8a0628a892afda23132e1d6d5d58c6a672ee9251ea72084f1be24136c524ba0c7049aefd7637b50d387cb9f5c17bfa9cc40a6d53d03da772fb8348a89101ffd5ea356fd68a34bfa1c3f42001d95590918a46d569343ad17f317d46b235cdf715ee01e280500c6ceb060de893cd7ce3fbc7a5224249bb37acc06566ebb73cc60d24e71ab6864f2cdcc69d90cc0fcd217c8d14a2233327d3e7beb20b0acfd33a67922f48ce83600ba4e22581105e10fe10e078a39bbdbc38e82aff57984e9107113767db238e189bc93f50109f1267ba47ce7e189346c500913a655df909209e0deafe3b28a4d61ca11bc2eb18d95e44021b95bed93771c73abd61df8bd4579cd09294cf93566f1ad9ec55c6482a11f967e01c54d8d3ddfbf46710b11aa6cc15681624e6869fa5f0c5d485862595ef4d7645b2c9aa6666f7fc43e3d4203b453dff3bd2681c0f342329dedde688a99b25ca470b31cf27fe210b273867f7c09201be94c377dd3f4bd6c2514d0a0541c71328de928680cea08779c572ef3292f49b2093eb4d126f657393387f06c35f89bca30fddd1cf6264a2224810ea8238669af7b3f9e8750e8d920e13b1ce1a4748aeb58ab8851eddb325e832af249a1f6673344690381c6768d2035823aff0deffb012b5ce9b0f60ba64505684e455b8a285f98dfea5b82ea7f5470b4f7694afcf4655ce2a4798563c51cb3abb64e3f546abc6e89c08108351fbdc6f2d2e8d8709f3504b6bc9f5d34b8f2efc3ed021a61b8241095f747056aefba327dc52d29c43a1d737ec3b7b8c3e7b4bd4a11fe44ad86bcb471c61c22d264bbd7dd34668e8dec1217d57fb65162019d0e1a064e151f766afd070b4c47e0221353a44a5c450873974ad2615614f489af2a49283d02afcd384718c8ffdb783adc0f57f67b0ae8c90602a013e1d4f17d76f16812797c45f5ea7d87eb45c03220565166912c3d8c8f8243e89631db0e00cc38b596304e73e5e9db66c38d52b4a9e2cf61a42f11603613ad968d281d89f149269be0e672ca50cd4f9d084215f8d972bede751f322da1f120e2f21d8e0028eb3f9165a4668ea36d88416f9cbf961e033f0bbccc3f4f4568c3e8b38c6ccbc3a26dbc7c67d1f8f1a2bb8278f580e6e15ce7e0ddee388616351c022f2bb35563f360984d55bf23b508bd57214e052a8e0960ebfbaf8428edb876006f69934f461081e5d5f1bbf85af54b54deb51d531f90526a8e88ef24b5f47", 0x447, 0x0, &(0x7f00000000c0), 0x0) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 4.757767938s ago: executing program 1 (id=1482): syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) (async) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001580)={0x34, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8500, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000200)={0xf0003, 0x0, [0xfffffffffffffff8, 0x6, 0x200000000000000, 0x5, 0x3, 0x0, 0x10000, 0xa3f]}) ioctl$KVM_SET_DEBUGREGS(r3, 0x4080aea2, &(0x7f0000000080)={[0x6000, 0x5000, 0x5000, 0x4000], 0x8, 0x6}) r4 = syz_usb_connect$cdc_ncm(0x1, 0x85, &(0x7f0000000040)={{0x12, 0x1, 0x210, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x73, 0x2, 0x1, 0x1, 0x90, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x7660faaf, 0x401, 0x9000, 0xf8}, {0x6, 0x24, 0x1a, 0x0, 0x18}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0xff}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x4}, @mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x81, 0x2}, @mdlm_detail={0x5, 0x24, 0x13, 0x66, "ce"}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x2, 0x2, 0x15}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x80, 0x1, 0x84}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x9, 0x6, 0xea}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x6d8, 0x1, 0x6, 0x0, 0xff, 0x5}, 0x6c, &(0x7f0000000140)={0x5, 0xf, 0x6c, 0x6, [@ssp_cap={0x24, 0x10, 0xa, 0xc4, 0x6, 0x6, 0xf00, 0x6, [0xffc000, 0x3f08, 0xc0, 0x208f, 0xc030, 0xc0]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x1, 0x7, 0x9}, @ssp_cap={0x14, 0x10, 0xa, 0x4, 0x2, 0x9, 0x1e00f, 0x8, [0x3f18, 0xf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xe4, 0x9, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x0, 0x8, 0x3ca}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "e2484f7f46c525fb262233657c97d0c6"}]}, 0x7, [{0x5c, &(0x7f00000001c0)=@string={0x5c, 0x3, "8688dbbd7ff2a16e0810f5a008286e436b75da244da089d929fb51921c5f0c97e8a702c14c551bd042284d5028f5cbb3c458c3a4390625251a0fc20c786c6a0a9c0841da6c7b933b0b2263b0d2cb3330bd18eed1848c536e6c3a"}}, {0x35, &(0x7f0000000240)=@string={0x35, 0x3, "3b0b7a2589fc7557d6eb20c2c3acae515340590c6210ed387e52e8ba4d174f56bfca522d6af0b07de932da003621f84ade13f6"}}, {0x27, &(0x7f0000000280)=@string={0x27, 0x3, "5d6fcd87efa13a7fb6f842b9b55b6e5afdcc410321791d03dd22d2691c6b5e0ef43c0a9261"}}, {0x8, &(0x7f00000002c0)=@string={0x8, 0x3, "3c18737ee905"}}, {0x3c, &(0x7f0000000940)=@string={0x3c, 0x3, "63327b2b988655232e154dde6c515498c7fc44c8e45f579c260340fad72cfa1fb096bea92f522532ff75a98b82801a79f93985313f8c6cf59125"}}, {0x91, &(0x7f0000000980)=@string={0x91, 0x3, "770cd2520387c7b9504c9e7ebebd5c2a56e5608f5e0a9ea59ffde240ac4b0e2bac1a1e38d845a7c72499dba5a597d0ade77ba67e0f7fb7ffa3a28760fbe6b9728223ca06c83bca13a95e25ed0a7d1a9d2d6c55ce87c0cdded70b90b2b4d153fd488f00482ea918eb1051005d219711bbc2ee8dd6fb06640da7bf55df241ba8172bd270e9e0ca1c7a227408f6c55416"}}, {0xa2, &(0x7f0000000440)=@string={0xa2, 0x3, "09136eba6064a454d3e3f310d2005ec4551c7e6497eb422dc634a28ae50d31a17d8c2d33dd9d180a589ba4d4ee5376dceeb3a759c94915f08de329f0115bef7ff6bfa3f2d9c3f73d15d8082d479286169a638ecfb4af8d0117e5e29b4c982208a0562c5fc9a29321345b5e5a556045dcd963b9e9a96c2e90cb4f35e670513f0670f4290cb2a16c2452297f1948c9b183df7e844a80e143259be704ce376540eb"}}]}) syz_usb_control_io$cdc_ncm(r4, &(0x7f0000000640)={0x14, &(0x7f0000000500)={0x40, 0x4, 0xbe, {0xbe, 0x22, "245ead670cb1abc1b28903695a9636bda0a98574cce3be07b5a899cadb6d1db19721f8dee2417d113577e4d93ca51eecc6532d5df1fc97583d98a9579e38829482a69415ed1cd9a0f89692ab3dcbd23fc74314e98778578d6c30269f200a0ddfd3a264e2b4a1530700a4e0ce39112b5c1af698170e2f54b69edfd1bc70d09ea6e250772195f92fd767b88a3ddde6d59edd5eac34ee6ae0004e183be26c4767267eb79ab181ba831caba455023da6a9d4a70a02d589dc1c0fe8c56192"}}, &(0x7f0000000600)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000008c0)={0x44, &(0x7f0000000680)={0x0, 0x14, 0x6b, "3448ca8742b60d1cf8baa2d1ea0abb6d21ec7a212e43fd28925e9387c3c32b3400b04945592008ddf36265bf7e8953e8a25e3675e5936ab07c8b1d0c7a57535490656f35f21fa7e1779c38913efe2f1fc46d93ad6972c91bcf0f71423b95f2d56b5c7789be70f2f12d5aef"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000780)={0x20, 0x80, 0x1c, {0xab, 0x100, 0x5, 0x2, 0x0, 0xe2, 0x8, 0x7f, 0x7, 0x8, 0x7, 0x2}}, &(0x7f00000007c0)={0x20, 0x85, 0x4, 0x8}, &(0x7f0000000800)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000840)={0x20, 0x87, 0x2, 0x4}, &(0x7f0000000880)={0x20, 0x89, 0x2, 0x1}}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x3) read$char_usb(r6, &(0x7f0000000000)=""/17, 0x11) (async) read$char_usb(r6, &(0x7f0000000000)=""/17, 0x11) writev(r5, &(0x7f0000000400)=[{&(0x7f0000002980)="016a6fcb9236d9f0a303d5c0b4905b2671bd2a5284736abf824f5e28481ddd2eb768e34e461ed5e118d1a22c78e43a9ed1c6c2384396b750559c20625becd339251bc68e3868edcafc894342401cc6a98695178f480238d72c22b2e795f07ae0d066ed0617498eee702fd3a794d4302339281d98157ea837959238422ece27849b017c8355451f58b67c67fe81d6a64010a8dfd0d11b072c98c035da2e8a79f86c385c3b6c416c725ee89a53c940e34f715990402ba4006a22db1858956c6fff89994fc8146bdccb732d664ecf445947fd0dfcdf05458be581c84a9e246cf29d187ef5a9944cbfa0878f025aec260e59e191bfaa4723d7ada81cf199679601cd1144463b2d73731636323e8e3aaddf2f1cd1fa904077c91627276b83079526f17d40dd05bbd644ff8ee1eaa92cd68e8dd44290a35ea927a3649e731b642f54882561674878b8c18ca800682b4c522ad2eba351975de15214d20717fc7067855a4a2ae9e3402dfb0735e629ad3fe8fbefa4b604412c4f676293f0e1860df0b80b99c9bb98e40c5e85ea1f1974658312fc797e5be3b9fb53d594d9c66e9328888eed0c9f25b24aa7a2b66d13b23e3ac21540ffd219b1915c7202a4dfbbf7c23d5a6c0245c0db33fc9e28b3c98b1902743b467eccac1d81eb7cf03a47ad5fd985fa2d427e03e1b0c92c1437b53290760bd34bbfdd48d17d373bdc8ca1c5d4b012d210defa41fd643d85efa665fab52c24316030fe8c8ed9ff488772088f69d53d713ada631acf24ddadfd7f13507a039d616ed576420f94c340343c6040f57d35cf224c97cc4cb1d4d72afdd826332cbe1dafa97eaaea008cf9208a527a28ca072c3c5a6fe4cd37d1f618a7c8cb8ccb8ef717757c6d57aaec7d56940e71ca1c16b35888044a6001308034361d5a6a478e8ad15b02ff2e9c5cb3210b81756038bd3817400d934ca6c54f5ed81c068b5ad20e24059be727ea21d4c46854a8a2b81a927b2d06ea623f7fcda1d54c739028e677828a9a5b3e836a913061f6f85a4186103dc20122f23cd9a2f85839c884051995a30c124f1ee9dc61ec4a12e3bc0a6f780ca8fa498a3eef952376e06a06b700832ba01e26e6fdcf5f6007fffa66242caecaaff913f86aa47375eec1d7d4c21d3a7f37b9695f5b0a5f76481d37bc6da1b6df647e0a8ece344bd037974c6703d61661e1f7def0245e7df31c973fbc34facf62f5e4ab1d5e17c32c5f198d2708fa23fe36ebaf5b974df91e832acf61b3bd0c37f57a38439baa7b5e413d3b4758aaebf5e92c63f487a5951ea7528189bfd0b4eb38a37ab7ef2805b48a37cdc88b0aa8dc69d76b759fbb975775d58c6d10b41d380de9db1522f257baee1594909ea8bf48806e3239caa213be835c596348337f403e227f679c0854b14ad55b7c6d3dff8e99a6ba1d45126e7cbfc6cdf10c9307a14232c59ac68b93ce00fc501e7e1faf78dec1acdbe7b1f23a0232d72d44116c857160fa59e29bf8132a9318fcda60722c975c1694e3e695aebd9c20b059bd4a7cfe3b9b1928881e972b7aaeaec841ec75bdad5087c60911d871fc6cfd79d5e6f55b23f4432da94d2359164c6ce1665a00618273841da69f3534ee8263657934fe6151bbd339444a7931d4a5d3ff152ce1ae3789cc07dcdfb8bf8233b87d28cd388cb57814c85ecf92f6cd85ae48dd7f5d69e28e7a44e9499006045f97d0b746034b4da5a24795d33f20416258fb08cc92b57b408602a048ecc95fe0b1a75101484ccbce336a4ad64adbddc6a0f2d304da423d511bc4502a6032c0369339a555409c2df361e395704798c55127c41bb80d3c2a59afbc9b4ffc23a89f0939119bdc7ec924eb5ab553c78676c2ff13bb94f720cc9f7ec374cc5a0a22ee5a83ea9d342eb94f536e86dfede8862025caee60578f4d5a84f68a7468a90f37b81d404d947007378e775b2d88b8dc0324fdfc0187138109f1138c0a5522547d70988f310af9747add28911c8df70bc24580a0f96cb7cbb017de98ba939769901374b5f49060b8c6580152ac164f0ce9368e9489af2f6ba69c734652eb293689baa9183f75421400ec920715a8a9942c6791f3b67ceefba93df040b4566aefa31615073fc10cedbedc317eff8a2a04a7395c9346ea75b0bf56d9ff687e9c5d668671a6be3c7ebdf44144c904b5970088c19ee181bf1707a2921c7bede61c253362dce154c6f618407ca214553d12b7393eb1f9591b4bb003ee8e6e73d623e0da0b3393fcd2199f333c861826162f659e5b97837937dbe9d79565dc029eb4b5772db9d290a28954e8210f8a597465f92db6d8ccb82c561ce21f40699630bb900947366a8272e80edaec8c0ca034e83a5057d00abcc86610095ec4bd3fd92a17bb1b02ca1df7a753e5d99ffc2fe60d45175855612bb13db0408c61122b1e13bc0a620c7589e5d223afd346c069ab0275a26b200318a0f8b5991d93313c4a972cf792e1c6f217cdaacfe2823bb9e62b10c3a22b41e9eef996bac6b81036bf0c5dbc256229cbd3a0edc488b4a9915f4b210bae63f004271f0c38382a8e5a0bb9f6975879e4e4cd0cbdaae928f0ba0e287e7d2f6aa8730941379f421cea001e9df269e18fb342a6e61ae46d3965b84eb3ea81ccde376d3f0f6bbbf78cb17858d666f9d700edc31564ce4aba2bd6239a6306dd3b4971dfcdcde304a4bc5f867c1d050267c773a936f57a073cd493311da67d901c02ca61a33e878c9e615866aa57d795d4426e3fea82b66377e5a3ab28604a3d850a6221ad4501d8dc641465d8f545fe3599a3f69bb8753fb8e88e9be3fa16e0085f0dfc9d66db14c26051168bff7fe63afa510e12157393c1afafbf345559717732db33a9e37ec1ad7b3dce504fbb2437581fd249a7c0eebc19652786cbf6944bb9ecd8fa3f468a37ce0695bb95d5dbb4c7a366463c1ff9ca404036039fe65e294c2f60d3c8b5fa9a29dc4625fdcc949237aa6a7ff70013d0c01b752a23452cc574d69db756a570bd6da2e354ab1a71f2739d74ecfc04ac00c1906610585f2897b982acdb1d0661673518bc40bf9668b91d9d37d6e60d5fa6b8119c98345743b460218ef5e7f86996ab476954fe8089c3afff9d7b4272c313b7876f9610f5322c57bca51bd3594bc854e7415fddd778f6589b05ab012d22e766bd89cad223fbd70251cf4cb79a947f217fbf5673035d1673e280e4ab41c7a1ce0186ffc650d7b745b61a75221ed1577fef89e94b1175734250d2dafdc85861aaaa23dc966614799983d10ffae74d50cf44843a42d658a0c043d1aa1dee1ad1f837b297313740fbb8df445efcd53c8cfc7d8bcd2f977940f03e472e7d97987cd5e3c27235c16fbfd420996415b2c6cbe1f7da8187df6a8eee3faa3ea51b2d2467ff012f76b7c9d4e377c493f9343dd78e1b9b2006f0b8a17c9e4fb998c7f08957f026e5be3dc6d36190a7790d85507c91b9303a8b9e39d268a3c7740fcb66a3fb63951d3f7f4d68fa1d3eade7fe694fc430df46fc0acc331a1bd10ae91e14769e7882a465ba13c2683768d38e06d2df46ec3aa6cfd58ac34aab88c5c7bfd76913539d65d3042060e0d486be6c37e029fa34abddd65b24192685a19c2b8596b7fa2b17e934899780d564fd18dcd5a4bc750f831821959cad1c8f1f89843a9f35df6a277e5022dfb8adbde0388632b07b230ec2b11617723b4dc7f159d18f97eb3cbcb1e027a10fab1b23e82bad3f4413baa434122d59f9c7dfa66a4024046fdf31087da6771b2b247ac739e9852f52fc2bfcba9605526c90784abe01b2f2ff7d18c41f3a07651a05d1dc71176e936219669e1524b153cffd7ecc0f9f792056119806e3537fb763ada9065a1e1a8089d345dfb84137b072c1056f0a3bb293fe2bdf2b4038a624a186b5c7f6ef104b864a8f5bb8423bce74305fa00e4ee1eead8bf0e3856ffe138aebe4d9a16fbd315582b07ca89be65dc7d0607e50c9312f4b97b06acbbbd308887cd6cca075f6774dea9e3b8af5c1ad80ef1bdb10ff46ffbd0b7afed9563b1d6c9effecdcd62419bac1b59ec09b82ae38529b2ea18c794ed37f7caa0d8902eecfb8f2673c1378a3e617dac6a6fcf19c1451fceefee5f305a0eebedd80ca7942d3924bb0b6642771543e24b543bf7dd0bcec674c7157d79f014a33dd93ecce454e256fbca9bad6ef7ffbfaa3924fd280a60b44190befaf061038fd28104be52013a41e173025523fec380973886b33e94551ed5344ff3948a5f0d3460e2ef901855638ca02036fef6b8c467b4b47295ec61d2404808fb600d4dd3ab640767f01a2d5c107191bd3316a3f44201d100d37e6f28eac4eb03b24d451e6469ae71b33c5c2ed9e2c37c79a7f0fc890b0c7c5a03ba297a8d68a930bedeb6221dff0b0d56fe82684ae9e0518de04f8b5a5a92cc6e0b74988b1a395fc82cd14520394a0a20f192721ed0ec45a77ceb42787e3e42708f53d930367990e5ae042f2b0da86881deab6f906dbbb98c215fe41f6a25f15f0f0226a3a3b9fc7a733a84c3494e15c896aa94884f889881a2459f68faa0440819bec61157a496edabcb7ab83b9f0e12cc22f2c44b82ff419cadc313a3ea5dfe8f24a88575429c11f1e41861900875e0ec018273dc92f8b44d0ec8edd14806591fda0f7cbb4f66e6d835166b553ac436498fa961cee22181a3a7c4fdbf2ca4fff20a1d0a7933c2a43024528739dc871e58ff8e8ca6931c4f819319e88d1988df4cb31f8dadecbc6c65e3b08c856ec6726f16a8e97e7d519557d471a631bbe2406cf8934d28f8cb3a4cfe77d25a4bcb6b1c591ebf76fd4eb7e334abcedeaf167736f9777ea1e3d0ff128387fe35bec6da3dec2de08fadfe6f8f91bcce77288067838c6c6f84cdb78a43c14d89832bfccb3efdcfe415f5459895cd268e8b6421aae25984bd4fe465d0797ce667f9299d3f9730228758e1e2f85b5835da87556043328b02e1238becfe2d7a85dfcb380787134a300ed7fc67eff44d3844697d1434a750c8a7e146930d678ae807aab59ce8a01ba49b1a2a3766a6826e3b588d3534fa8b20685cbf5335018638c9bc113ddf31d38d2f6f9d329624c75ce93a7860ec3d3e33de803b1d6b4cb603fcc81d31ee42d9533fb49ce36520dd9864ff2b5b3854af6ea1d4ee7a9f78f338891e31d60fac7d7a350a6c1f7f2e8ef058e32dba2a94071df9c3293a93d6479e4a4081db72a600ec3afb2b9bc1fbab8e847a9fb28103b8698689c05ccd25b1afbbd9748f8ef9ebc7465fe65ba7c9cf2b981c4f8a083fd778ea2d75bd7269dafd5fc88595233d54785599958bd2bbcbe564a64b9a1c9360705900e9c790fc7a833382efe73efe922b709cdd180e5e0199eff5bc97169939ede3b8c476db1a890071828f35badf4be9082089d8354306e3e2b7eecdb6a7662d0c4fa107e322213aa9da66900157ed4f6bfb4bf0ffd2d499ecb40a0fcd03da590271fbbf247a3d38fcf1b0595cedcfa2006178ff6a7a1593d534de6641c842461e8f2b83bb9a4738fdafc35194c80e112d9406602e473df0e7b5b321c819c987e368cd005f9371163a256a4c132a1283c49cdf78bc36e0201b63d9612825c58e8a27b787f1b5ac2813f331021197ac91d7f3eb65a4919757e177bbc4ec778d38f04f1b10989641a175d3e7aaa6614e86ffd77c2d90a705a9cc0eeefccc1cb4d31a396a84ae5633ba2b137d25d7f8b140f006ff495732b948fa6c13576acb5b01a04e54676bdf9b9b2d0bf277c614592e03d90e5d0ca84", 0xff5}], 0x1) (async) writev(r5, &(0x7f0000000400)=[{&(0x7f0000002980)="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", 0xff5}], 0x1) 4.668387545s ago: executing program 3 (id=1484): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.554075014s ago: executing program 4 (id=1485): mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000ddc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000200)={0x50, 0x0, r1, {0x7, 0x24, 0x0, 0x400023, 0xffff, 0x0, 0xf7, 0x0, 0x0, 0x0, 0x1}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000006d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000100), 0x100) symlink(&(0x7f0000000080)='./file0/../file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00') 4.507188759s ago: executing program 1 (id=1486): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_connect(0x5, 0x6f6, &(0x7f0000000b40)={{0x12, 0x1, 0x200, 0xef, 0x6f, 0x40, 0x40, 0x1e59, 0x2, 0xbf13, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e4, 0x3, 0x2, 0x0, 0x80, 0x3, [{{0x9, 0x4, 0x5a, 0xf, 0x0, 0x2f, 0x9a, 0x78, 0x4}}, {{0x9, 0x4, 0x1b, 0x7, 0x2, 0xff, 0x3, 0x34, 0x7, [@generic={0x3e, 0x31, "8eb739eb2c1a3858e944243b19aee8d17a719802f1c8bc7f10ad67d5dc62ec917c6e92f4b5cd2e93c4d7ca5b4fb343992745040a341de2e5e48152fe"}, @cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "ea1955"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x7, 0x0, 0x7}, {0x6, 0x24, 0x1a, 0x0, 0x8}, [@mdlm_detail={0xfd, 0x24, 0x13, 0x8, "b144eaae707cbe183aa32585a14260f4073c74a24333ebe807f566412fd5aa40fed4c19ecc53d22f8962829315386c3bb4549d0e50ec448414b28bdd190ad51720b9a95bd6e14bb43bb8ff87b1d80b02622f531bd0828cdd3e4d5c56b0b2999416adcfc1e0bf279f82cbfbebe8983619948937f02cbc605805b4fcd245cf78c86d6e7c7b8c90784928325d99ead37049b8177db673ca1a96ad9d2eefa971ca761ec350e8d1ca1a96af40173261efee337d6b72817e1970fdab23cd0a8911d856b1305d9e8c611b16e9ae2186a706ac1047bd47f5029edce92dc2a3da79c212ded992f00db055db72f224fee5604696e1a42251fb007963ee7c"}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x4}, @mbim_extended={0x8, 0x24, 0x1c, 0x2, 0x4, 0x1}]}], [{{0x9, 0x5, 0xe, 0x3, 0x20, 0x4, 0xbe, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xe, 0x4}]}}, {{0x9, 0x5, 0x6, 0x10, 0x10, 0xa7, 0x2, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x4}]}}]}}, {{0x9, 0x4, 0x53, 0x8, 0xb, 0x9f, 0xf6, 0xb5, 0x3, [@uac_as={[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x3, 0x4, 0x0, 0x2, "6979f34b"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x17, 0x2, 0x0, 0x7, "306aa167add0"}, @as_header={0x7, 0x24, 0x1, 0x97, 0x2, 0x1001}]}], [{{0x9, 0x5, 0xb, 0x8, 0x20, 0x1, 0x4, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xc, 0x1}, @generic={0x9b, 0x1, "fc7461d8bd1b74ad1c4e8e0eaf5a0cf10a93bd82c5064ff7dfe404d98b50bb146c2b497182d2176d8fe3952333bb6a69e274f6a44690f2ff165ac79ca72948e9bdc22c0eba13c7b282a3d6a307e0fa1d1cf3344b2ed79d8de3884857c362fa2fb7d9510071b4b66c4953ac26929c985f687358d45e605648bb62dae302fa04aa0f8cfce1ff7a2e344e790e431db38ab6f3338fe87e759e3fc9"}]}}, {{0x9, 0x5, 0xf, 0x2, 0x8, 0xfe, 0x7, 0xc4, [@generic={0x11, 0x8, "5741bf273abe72e79fd4d730d595fc"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x7}]}}, {{0x9, 0x5, 0xe, 0x0, 0x210, 0x1, 0xfd, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x7, 0x5, 0x497e}, @generic={0xd6, 0x5, "b1bf101297f61231721766984f9bb98764d67ca10d7519bd3555a99716f2375f796dffa6ac484d15dfe0d2c0ea5e54e5d36407b07c37db2effaf53fc0aaa77c2dbe8d06b7788d2563a3c6c15d61743e3c26095ee716467b328106c262d1c0eb16dfb58292afa4a57048978d18506dd244c590cdb07264d94fcbd61b59d46515a07e62fca191b0aecdd84a51cc50212c5c4e783381c37f05f60d18721d1728a08fe687995e2fb0c8adcc73a4d4e7527da0f8e2d6da30dfc12227c85045134f10b10b199ae378f3edcdf4770ffbc22a85d019a9cb5"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x40, 0x6, 0x5, 0x6, [@generic={0x9a, 0x6, "6cf9a4e3c8f110752f8b46cdd109df858f46212f1d4b7ab8ca34d9d2c06bff16933ee44285c55bdfbacf1628614bde79ca918d6a52a437a5c54c44518401bc29714e9d0cbec5d79a75ae10f93f8f5022fe09f29b8f93e9203d65e12cbd5dc710bd19c455509733b17e408ccd7f22c1fc2b782f66abb442ca35fc08cf89ef8c7458d2e7e5e711c1284868d85304325ddc79da040146100edb"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x400, 0x2, 0x3, 0xc2, [@uac_iso={0x7, 0x25, 0x1, 0x1}]}}, {{0x9, 0x5, 0x6, 0x0, 0x200, 0x4, 0x1, 0x9, [@generic={0xf0, 0x2, "06eb1525603a0969f30cc439401cc8bc9010e14f6f9831879773caa531270c8db33ce277664af7cfb2fd829705af057346d74aca07b2b0d5b9f1337bc6b3b54a8402e5612d0fda72f067dda1658fe48781017b007666ee5ca5a1971e8ea63ac0edc62dd895cd75381b017264cad9e2c175fd5e0e9df16d1ede27f96540fa90baa30df2cb17a13ccff4be23ef8cdbbce9e6cf6b05a5624a21303715e9ae851042ca3402947576ce2f9cd5c26eb1c8b8a8fc1f7d2e3b3c5ab5ae95b7a7dab454431bb853f2bdd28adcd01070ceb69da1aebd9743abbf7704c2e6e481cfda2f01d677b173a09210171ac604c8b87533"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x60, 0x1}]}}, {{0x9, 0x5, 0x80, 0x10, 0x40, 0x5, 0x2, 0xe, [@generic={0x79, 0x21, "c66993805582f86259db2864bd86f5776473c0f995ba81340ac57bc856dab94c5e0d492f0f5b0e24b407a6ab4263c7ab8ff56a80bfabae385594f9403d9c0141da47ae817b1819cb015c9542c1cc3a66c14b87fa174793cbf237a589a4db6efa4da46d6e1a955d450a726e42cb9dd70c3be588fc073111"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x81, 0x1f, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x8}]}}, {{0x9, 0x5, 0x8a, 0x10, 0x400, 0x18, 0x0, 0x40}}, {{0x9, 0x5, 0x6, 0x8, 0x20, 0xf1, 0x0, 0x15}}, {{0x9, 0x5, 0xa, 0x8, 0x200, 0xd, 0x84, 0x8, [@generic={0x3e, 0xf, "92ffacc34c29e3d2449c2aa01ccb0c7d6d319f9cbaa3c0dc746ac9657548afd6cd88d84d1254b2a325a77f3e3f0da90bc30a18bfcd1f00c64d0711ca"}, @generic={0xc7, 0x31, "d7e935cd4aa8ca0d57cf6fda774afda3c32a61961699231843a215e91c6453ca321a56498ec2170e156816145b32938dcb72ee395d31038ca1806b7e959aaad2d013dea4d424eb4b552435d65b4a240f0f7db511e0ef1ba5cb417d32c360cafed4fb0b3646c8ae77a24123f23f4b9c79518c8878560541231e71cda828c26c7172585022d701f94b6c285f8026df743191a6ae6d0205dc7f49c5c48d4e80a223de70b84cbb1fd3eac21cbbc1c0593a200c82795f63a069aea3aeee23af685a88eae1b1d63e"}]}}]}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x140, 0x8, 0x3, 0x6e, 0x20, 0x4}, 0x83, &(0x7f00000001c0)={0x5, 0xf, 0x83, 0x5, [@ptm_cap={0x3}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x4c, 0x81, 0x2, 0x8, 0xe}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0xf7, 0x8, 0xfffe}, @generic={0x63, 0x10, 0x836b706876014add, "d979e23e1840eaa83ceade96598d21c10ce39730ad0c17afc7b3f7b8bc444d6f84dfecfbc6c7784f0d5f8eb03ef8e9271c6bcaa3ab9db107f805e548b3f2ac994874d49a19101c9bba6a15655269a147dab078cc035ac6cab5a2d7651857193e"}]}, 0x4, [{0xbb, &(0x7f0000000440)=@string={0xbb, 0x3, "8fa63e2ffec080973e8cd7c164e959f7bc20d6a56741ad400f7cfce18c230aff58646fb5d0982512eecb9e1c7b34372002d83f3a23500837b54074107a0c58a7b699872eb8ae73f5b007d5fb04d9bc70f988ff198b8eb68c3a2c1dc270a9dd13c21d1b6caad41994c099dc4a50ae9e2751b988df1ba0cb3dc5179f6825a4fa0be45f4a7a98d1a36608580c9f0244bf56fd51581795cd5ebafae2f85a93dc4b3a88a9078a151aea18a79de61e2e21160175b8f2e4b5ecee29fd"}}, {0x7e, &(0x7f0000000500)=@string={0x7e, 0x3, "f3d76eadc560d60ffb5e5a378be932b62de01ec2ddcf769cc6a60efe834ffe576f1d8cea652a0872ea345d2b2ee21fa66b2defc170de5561ba769e78a325d588dc8010d8aaa5bd7d3159d44b0163f21414af8cc5ed07dd7563c2ba31cb235edd3ae57f3476dbe68b5f1e0db7a5bf4dfe96624f7b3b71ae1c054e726f"}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x41b}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0xd8f5}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') mount$afs(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000600), 0x1081c00, &(0x7f00000001c0)) read$FUSE(r1, &(0x7f0000002380)={0x2020}, 0x2020) syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0xe7, 0x0, 0xc, [{{0x9, 0x4, 0x0, 0xa7, 0x3, 0x2, 0x6, 0x0, 0x7d, {{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0xb1, 0xffb4, 0x8001, 0x9}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0xad, 0x7, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x81, 0x2}}}}}]}}]}}, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x9, [{0x0, 0x0}, {0x4c, &(0x7f0000000140)=ANY=[@ANYBLOB="4c039a079188c407ac352ce5c4461808c0b175e1c6f90ca17b4ef39b354b04a8c22920228f5e3b7eac908812d602144d202ae44cead492d11e6afa7f794057d1a57e9f2d485ea3f5"]}, {0x0, 0x0}, {0x1f, &(0x7f0000000700)=@string={0x1f, 0x3, "0e406293ce12baeb6b7f6190ad28e66ec5971b5cb504b8de5751f6d25e"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x40a}}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0xe9, &(0x7f00000008c0)=ANY=[@ANYBLOB="e9035968496309bd3717eeb8ce4f06ab08a5adf552dc696f8c9ae252e0e2c9fa557007c6c7369233db7356fc85d47bbfd2cfc44230068dd40d62d48d735089c37de1621aea1dfc80a6d0e51a492085f22efa74516ed2e8efb232b421d02928633fae8f001d3527083c5e3bf44b41de3f24d3ed4aaf70b39bdcaf8cf73fe3ef2dcc6347de464efdf082a74323a6e030ec83ad4429d466f62bc438d988c0e91fdbb590e65cf33e69c89c62562c8b9d6c79c38e0543eb3751f1ba31467fd039581837051aec223dea03201a683f8276d743d19b931b84067b14f32ba4adb3d1cecf0714707c97f0020000"]}]}) 3.706025329s ago: executing program 4 (id=1487): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x8000f28, 0x0) splice(r2, 0x0, r1, 0x0, 0x7f, 0xe) write(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000734000/0x4000)=nil, 0x4000, 0x0, 0xbc32038f2d035af6, 0xffffffffffffffff, 0x2882c000) r4 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') lseek(r4, 0x2004, 0x0) getpid() r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000787000/0x2000)=nil, 0x2000, &(0x7f00000003c0)='+++\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000789000/0x2000)=nil, 0x2000, &(0x7f0000000000)='\x00') r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x7, 0x7, 0x1, 0x4, 0x2, 0x1, 0x1, 0xff, 0x7, 0x0, 0xe, 0x9, 0xa, 0x2, 0xd, 0x5}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002cbd7001008000003400000008007300000000000e0001006e657464657673696d0001000f0002006e657464657673696d300000162658372f585bad83cc61d1a77e6eab78d7a6307ab681963b8c7e01fb8f8224bc74bda4de6ac774b5e6a024bee62c7f7a1a5d2c6f24a2d86f29fcd0dbb6e4bd035220dbb109dae3f601559937e5fcf2f4c3bece9b735ee7386bf43d12a76631cdd73910d1101de5aa841d324d6c40113762bd55dab4ef0e9a7f10695bb0f9"], 0x3c}}, 0x20000000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_IRQ_LINE_STATUS(r6, 0xc008ae67, &(0x7f0000000000)={0x2, 0x7f}) r9 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000aa3a3740480b032061390000000109021b000100000000090453"], 0x0) socket$kcm(0x2, 0x3, 0x2) syz_usb_ep_write(r9, 0xff, 0xab, &(0x7f00000000c0)="5b0cf88debfe3117a0ea68ad2b5436bb139c0181fc81b5ecdf69e7b65700debdec1a63cf0defac6e56f33eab05f677860ab32b9044c3607562f7b26d3a62055cdeb8bcebe97d5fc24f6cae4391870ac2f1cd795e4e09f94dbfc85f31751e710daebdae3391df40fd5505c784cb6292c200599f35d028927f355ce78fde57121b16eca6ce05879eab8e74d5995dab8a34474ab08584386d9ea1167e0faa2600a5e1f6129a2c656000dc349e") 2.186042668s ago: executing program 0 (id=1488): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd31, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x18000}, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x400) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0xb, 0x6, "0d98f14f74a2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="48000000120001000000000000000000ac141400000000000000000000000000000000000000000014000d"], 0x48}}, 0x4014) read$FUSE(r6, 0x0, 0x0) write$FUSE_DIRENTPLUS(r6, &(0x7f00000026c0)={0x10}, 0x10) getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0)=0x7, &(0x7f0000000200)=0x4) syz_usb_control_io$printer(r5, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000640)=ANY=[@ANYBLOB="400006000000ae"], 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x1, 0x1, 0x3}, 0x0}) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r8 = socket$inet6(0xa, 0x5, 0x0) listen(r4, 0x7) setsockopt$sock_int(r8, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r8, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6, 0x4000010, r3, 0x6bb29000) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'das16m1\x00', [0x4f27, 0x7, 0x8, 0x4, 0x5, 0xcc7, 0x6, 0x26, 0xd, 0x100, 0x7, 0x1, 0x1, 0x80000001, 0x6, 0xe1, 0x0, 0x1a449, 0x7, 0x40000003, 0x89, 0xcaa4, 0x0, 0x0, 0xb, 0x4, 0x2c, 0x8, 0x4088, 0x0, 0xfffffff8]}) 2.073642595s ago: executing program 3 (id=1489): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), r0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4040, 0xd) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x48000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r3, 0x4068aea3, &(0x7f0000000000)={0xa3, 0x0, 0x0}) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r3, 0xc008aec1, &(0x7f0000001280)) r4 = socket$phonet(0x23, 0x2, 0x1) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001480)={0x0}, 0x1, 0x0, 0x0, 0x4000014}, 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='hpfs\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0x21, &(0x7f0000001880)=0x40, 0x4) sendmmsg$inet6(r7, &(0x7f0000000980)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x1, @private0, 0x85}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=[@flowinfo={{0x14, 0x29, 0xb, 0x3}}], 0x18}}], 0x1, 0x4000804) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000840)={0x28, r6, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x9}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) 2.064464903s ago: executing program 1 (id=1497): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_connect(0x5, 0x6f6, &(0x7f0000000b40)={{0x12, 0x1, 0x200, 0xef, 0x6f, 0x40, 0x40, 0x1e59, 0x2, 0xbf13, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e4, 0x3, 0x2, 0x0, 0x80, 0x3, [{{0x9, 0x4, 0x5a, 0xf, 0x0, 0x2f, 0x9a, 0x78, 0x4}}, {{0x9, 0x4, 0x1b, 0x7, 0x2, 0xff, 0x3, 0x34, 0x7, [@generic={0x3e, 0x31, "8eb739eb2c1a3858e944243b19aee8d17a719802f1c8bc7f10ad67d5dc62ec917c6e92f4b5cd2e93c4d7ca5b4fb343992745040a341de2e5e48152fe"}, @cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "ea1955"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x7, 0x0, 0x7}, {0x6, 0x24, 0x1a, 0x0, 0x8}, [@mdlm_detail={0xfd, 0x24, 0x13, 0x8, "b144eaae707cbe183aa32585a14260f4073c74a24333ebe807f566412fd5aa40fed4c19ecc53d22f8962829315386c3bb4549d0e50ec448414b28bdd190ad51720b9a95bd6e14bb43bb8ff87b1d80b02622f531bd0828cdd3e4d5c56b0b2999416adcfc1e0bf279f82cbfbebe8983619948937f02cbc605805b4fcd245cf78c86d6e7c7b8c90784928325d99ead37049b8177db673ca1a96ad9d2eefa971ca761ec350e8d1ca1a96af40173261efee337d6b72817e1970fdab23cd0a8911d856b1305d9e8c611b16e9ae2186a706ac1047bd47f5029edce92dc2a3da79c212ded992f00db055db72f224fee5604696e1a42251fb007963ee7c"}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x4}, @mbim_extended={0x8, 0x24, 0x1c, 0x2, 0x4, 0x1}]}], [{{0x9, 0x5, 0xe, 0x3, 0x20, 0x4, 0xbe, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xe, 0x4}]}}, {{0x9, 0x5, 0x6, 0x10, 0x10, 0xa7, 0x2, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x4}]}}]}}, {{0x9, 0x4, 0x53, 0x8, 0xb, 0x9f, 0xf6, 0xb5, 0x3, [@uac_as={[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x3, 0x4, 0x0, 0x2, "6979f34b"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x17, 0x2, 0x0, 0x7, "306aa167add0"}, @as_header={0x7, 0x24, 0x1, 0x97, 0x2, 0x1001}]}], [{{0x9, 0x5, 0xb, 0x8, 0x20, 0x1, 0x4, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xc, 0x1}, @generic={0x9b, 0x1, "fc7461d8bd1b74ad1c4e8e0eaf5a0cf10a93bd82c5064ff7dfe404d98b50bb146c2b497182d2176d8fe3952333bb6a69e274f6a44690f2ff165ac79ca72948e9bdc22c0eba13c7b282a3d6a307e0fa1d1cf3344b2ed79d8de3884857c362fa2fb7d9510071b4b66c4953ac26929c985f687358d45e605648bb62dae302fa04aa0f8cfce1ff7a2e344e790e431db38ab6f3338fe87e759e3fc9"}]}}, {{0x9, 0x5, 0xf, 0x2, 0x8, 0xfe, 0x7, 0xc4, [@generic={0x11, 0x8, "5741bf273abe72e79fd4d730d595fc"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x7}]}}, {{0x9, 0x5, 0xe, 0x0, 0x210, 0x1, 0xfd, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x7, 0x5, 0x497e}, @generic={0xd6, 0x5, "b1bf101297f61231721766984f9bb98764d67ca10d7519bd3555a99716f2375f796dffa6ac484d15dfe0d2c0ea5e54e5d36407b07c37db2effaf53fc0aaa77c2dbe8d06b7788d2563a3c6c15d61743e3c26095ee716467b328106c262d1c0eb16dfb58292afa4a57048978d18506dd244c590cdb07264d94fcbd61b59d46515a07e62fca191b0aecdd84a51cc50212c5c4e783381c37f05f60d18721d1728a08fe687995e2fb0c8adcc73a4d4e7527da0f8e2d6da30dfc12227c85045134f10b10b199ae378f3edcdf4770ffbc22a85d019a9cb5"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x40, 0x6, 0x5, 0x6, [@generic={0x9a, 0x6, "6cf9a4e3c8f110752f8b46cdd109df858f46212f1d4b7ab8ca34d9d2c06bff16933ee44285c55bdfbacf1628614bde79ca918d6a52a437a5c54c44518401bc29714e9d0cbec5d79a75ae10f93f8f5022fe09f29b8f93e9203d65e12cbd5dc710bd19c455509733b17e408ccd7f22c1fc2b782f66abb442ca35fc08cf89ef8c7458d2e7e5e711c1284868d85304325ddc79da040146100edb"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x400, 0x2, 0x3, 0xc2, [@uac_iso={0x7, 0x25, 0x1, 0x1}]}}, {{0x9, 0x5, 0x6, 0x0, 0x200, 0x4, 0x1, 0x9, [@generic={0xf0, 0x2, "06eb1525603a0969f30cc439401cc8bc9010e14f6f9831879773caa531270c8db33ce277664af7cfb2fd829705af057346d74aca07b2b0d5b9f1337bc6b3b54a8402e5612d0fda72f067dda1658fe48781017b007666ee5ca5a1971e8ea63ac0edc62dd895cd75381b017264cad9e2c175fd5e0e9df16d1ede27f96540fa90baa30df2cb17a13ccff4be23ef8cdbbce9e6cf6b05a5624a21303715e9ae851042ca3402947576ce2f9cd5c26eb1c8b8a8fc1f7d2e3b3c5ab5ae95b7a7dab454431bb853f2bdd28adcd01070ceb69da1aebd9743abbf7704c2e6e481cfda2f01d677b173a09210171ac604c8b87533"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x60, 0x1}]}}, {{0x9, 0x5, 0x80, 0x10, 0x40, 0x5, 0x2, 0xe, [@generic={0x79, 0x21, "c66993805582f86259db2864bd86f5776473c0f995ba81340ac57bc856dab94c5e0d492f0f5b0e24b407a6ab4263c7ab8ff56a80bfabae385594f9403d9c0141da47ae817b1819cb015c9542c1cc3a66c14b87fa174793cbf237a589a4db6efa4da46d6e1a955d450a726e42cb9dd70c3be588fc073111"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x81, 0x1f, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x8}]}}, {{0x9, 0x5, 0x8a, 0x10, 0x400, 0x18, 0x0, 0x40}}, {{0x9, 0x5, 0x6, 0x8, 0x20, 0xf1, 0x0, 0x15}}, {{0x9, 0x5, 0xa, 0x8, 0x200, 0xd, 0x84, 0x8, [@generic={0x3e, 0xf, "92ffacc34c29e3d2449c2aa01ccb0c7d6d319f9cbaa3c0dc746ac9657548afd6cd88d84d1254b2a325a77f3e3f0da90bc30a18bfcd1f00c64d0711ca"}, @generic={0xc7, 0x31, "d7e935cd4aa8ca0d57cf6fda774afda3c32a61961699231843a215e91c6453ca321a56498ec2170e156816145b32938dcb72ee395d31038ca1806b7e959aaad2d013dea4d424eb4b552435d65b4a240f0f7db511e0ef1ba5cb417d32c360cafed4fb0b3646c8ae77a24123f23f4b9c79518c8878560541231e71cda828c26c7172585022d701f94b6c285f8026df743191a6ae6d0205dc7f49c5c48d4e80a223de70b84cbb1fd3eac21cbbc1c0593a200c82795f63a069aea3aeee23af685a88eae1b1d63e"}]}}]}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x140, 0x8, 0x3, 0x6e, 0x20, 0x4}, 0x83, &(0x7f00000001c0)={0x5, 0xf, 0x83, 0x5, [@ptm_cap={0x3}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x4c, 0x81, 0x2, 0x8, 0xe}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0xf7, 0x8, 0xfffe}, @generic={0x63, 0x10, 0x836b706876014add, "d979e23e1840eaa83ceade96598d21c10ce39730ad0c17afc7b3f7b8bc444d6f84dfecfbc6c7784f0d5f8eb03ef8e9271c6bcaa3ab9db107f805e548b3f2ac994874d49a19101c9bba6a15655269a147dab078cc035ac6cab5a2d7651857193e"}]}, 0x4, [{0xbb, &(0x7f0000000440)=@string={0xbb, 0x3, "8fa63e2ffec080973e8cd7c164e959f7bc20d6a56741ad400f7cfce18c230aff58646fb5d0982512eecb9e1c7b34372002d83f3a23500837b54074107a0c58a7b699872eb8ae73f5b007d5fb04d9bc70f988ff198b8eb68c3a2c1dc270a9dd13c21d1b6caad41994c099dc4a50ae9e2751b988df1ba0cb3dc5179f6825a4fa0be45f4a7a98d1a36608580c9f0244bf56fd51581795cd5ebafae2f85a93dc4b3a88a9078a151aea18a79de61e2e21160175b8f2e4b5ecee29fd"}}, {0x7e, &(0x7f0000000500)=@string={0x7e, 0x3, "f3d76eadc560d60ffb5e5a378be932b62de01ec2ddcf769cc6a60efe834ffe576f1d8cea652a0872ea345d2b2ee21fa66b2defc170de5561ba769e78a325d588dc8010d8aaa5bd7d3159d44b0163f21414af8cc5ed07dd7563c2ba31cb235edd3ae57f3476dbe68b5f1e0db7a5bf4dfe96624f7b3b71ae1c054e726f"}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x41b}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0xd8f5}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') mount$afs(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000600), 0x1081c00, &(0x7f00000001c0)) read$FUSE(r1, &(0x7f0000002380)={0x2020}, 0x2020) syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0xe7, 0x0, 0xc, [{{0x9, 0x4, 0x0, 0xa7, 0x3, 0x2, 0x6, 0x0, 0x7d, {{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0xb1, 0xffb4, 0x8001, 0x9}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0xad, 0x7, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x81, 0x2}}}}}]}}]}}, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x9, [{0x0, 0x0}, {0x4c, &(0x7f0000000140)=ANY=[@ANYBLOB="4c039a079188c407ac352ce5c4461808c0b175e1c6f90ca17b4ef39b354b04a8c22920228f5e3b7eac908812d602144d202ae44cead492d11e6afa7f794057d1a57e9f2d485ea3f5"]}, {0x0, 0x0}, {0x1f, &(0x7f0000000700)=@string={0x1f, 0x3, "0e406293ce12baeb6b7f6190ad28e66ec5971b5cb504b8de5751f6d25e"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x40a}}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0xe9, &(0x7f00000008c0)=ANY=[@ANYBLOB="e9035968496309bd3717eeb8ce4f06ab08a5adf552dc696f8c9ae252e0e2c9fa557007c6c7369233db7356fc85d47bbfd2cfc44230068dd40d62d48d735089c37de1621aea1dfc80a6d0e51a492085f22efa74516ed2e8efb232b421d02928633fae8f001d3527083c5e3bf44b41de3f24d3ed4aaf70b39bdcaf8cf73fe3ef2dcc6347de464efdf082a74323a6e030ec83ad4429d466f62bc438d988c0e91fdbb590e65cf33e69c89c62562c8b9d6c79c38e0543eb3751f1ba31467fd039581837051aec223dea03201a683f8276d743d19b931b84067b14f32ba4adb3d1cecf0714707c97f0020000"]}]}) 1.866090628s ago: executing program 3 (id=1490): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22300, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x3ff, 0x6, 0x8000000000000, 0xe, 0x10003, 0x41, 0x400200cc0, 0xffd, 0x8008, 0x6, 0x0, 0x0, 0x5, 0x0, 0x6a, 0x400], 0xeeee8000, 0x2011c0}) socket$inet6_udp(0xa, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2d00, 0x0) socket$netlink(0x10, 0x3, 0xf) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) sendmmsg$inet(r3, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4020) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x2, 0x0) inotify_init1(0x800) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) userfaultfd(0x80001) pipe2$9p(&(0x7f0000000240), 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$netlink(0x10, 0x3, 0x0) 1.550973095s ago: executing program 3 (id=1491): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12011001daa18c4089612d187301010203010902120001000000000904"], 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000000)=0x9, 0xe7) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)="580000001400add4275a1bf00c45b45602067fffffff81005e22000d00075bac88262ae4c0c5060d57f251c078ff0028925aa8002000eaa57b00090080000efffeffe809000000ff0000f03a0200f0ffffffffffffffe1ff", 0x58}], 0x1) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 810.185184ms ago: executing program 3 (id=1492): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 231.406674ms ago: executing program 1 (id=1493): r0 = syz_usb_connect(0x1, 0x1b, &(0x7f0000001480)={{0x12, 0x1, 0x250, 0xf8, 0x51, 0x61, 0x8, 0x3eb, 0x30, 0xd7d3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x1, 0x6c, 0x20, 0x7}}]}}, &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x0}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x500, 0x0, 0x1c, {[@window={0xb, 0x3}, @timestamp={0x5, 0x2, 0xfffe, 0x88000}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) syz_usb_ep_read(r0, 0x5, 0x38, &(0x7f0000000000)=""/56) 131.559727ms ago: executing program 3 (id=1494): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x88b02, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x191, 0x78, 0xa0, 0x3f, 0x4, 0x1c0, 0x0, 0x0, {}, {}, {0x0, 0x0, 0x20}, {}, 0x0, 0x80, 0x0, 0x0, 0x0, 0x106, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x2, 0xa}) 0s ago: executing program 4 (id=1495): mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000ddc0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000200)={0x50, 0x0, r1, {0x7, 0x24, 0x0, 0x400023, 0xffff, 0x0, 0xf7, 0x0, 0x0, 0x0, 0x1}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="1827dacb7cd53e01b4852de2d748e21fa033071acb841f449efc23d452101807ae5c485596338a6d31388444ae8ade7b60a85a37d3db29ef19ae4c4d4db9c2c82c7908debb2e2b5ebef336aad77bef942d064955079af4e914f372cec8ed0440f6ee0bded3c565283bdb75124011227712d5f01e8c1eb86cf69205a8b5b374edee58ebaf09d62191cf41190260c30a719bbc9bc29be0d60c678791de6b236c9b5a057247c281937c2b2ae747c858532113e0a1e7af49298ef54f15572301d3c907b02529bc470beab8f9208cf92b17a9df99ceff90a1e384d6bda3fe823d8eff0e2229a43c31781935de69466b1082c0f88d3716f234e1d6e17e1360f6621e686d661af20eaf08cc97c261590ac3291667a87bbf66f86d9005f034ea5517b2187b6dfecebc1cb8fc4dab511a2890a68ed185483c548168803f353520cc6f820d1349ac985e12a3ff6e8a78b29ed97213962fca3ba7d04d1ab4dbcfe93a88831f784ed278d079eb3e2e69d3161600fc7b0dae825b510a59c14315fc6ca0ce68dafd088f02a92ae0ab3f15ca1a863b640e8e4a89407a8b8d752892e1f8b0e793d430c3ec46cbe2b6a4bdad728c34e734864aeac2b6b2eb51c3a2f9e6773c5834166511086dc35847cfa17974889795ed305353d41c9399bb95936a3c1be1099f21795cfc04d9699929eca65a0edcae5d4e564404e5292dc15f40d78d94be9e8dca92983bc71729ab30a70455bbfd5a98d97cab9778d9b7b69fb20019e7e7c7bc17c84da1dab53a187a116ac229e00312c95b1074afff18a8771a4ab47be2205745836dc3cc1ce531fe697e9a734698fb2343b331ad9f13214d1d7d511dc646fb8b3b70fb4611e6d102a0e2bda6311ca824537f699efdefbd8a3a523e26272f07abd75504188edc788af9c75aabf77f4ac883573f63ded319fa5a8b6317d4490391879629446fa5ea4c695f3db9739f7bc1da7a19f3e1c0ccca98307b3a7a38272b7455c8957b17138c9e170c27895fcf47eb5530948b7cc43d61a621293b0c83dc893f02def2b42a8bd7ad6c9cdfeb7a3bde141e98e5af7500b07d85c6314949b754c88cc666bdaaec89271f56ec11bfa0aa337feb1140b8a07fbd5c79bdd0239f8aa1d454c0e5a16e99d38d1212ff709bb1964c317c98bfef37b56944666f0320ec85b5b1e07731de5584901f8c65e14fd2ba83b500fdbb137c7cdf91d66400688a5da6405ca7e0b8107ed65be0ef5c6234b62f613e7e76d6f3d5cc12bde4342391524e25bab6ec0a358c6c66b7cdbdd9301f91589af65cb7c02fe8271a798c5e122fef9e7581d28884d33d01f0475c9ac052d2d014bdc09e2738487742f7bff40facf2e96dcdfefa336c46923b77b334daf7b01a9fd5d957a29b83adf6f23acc507a58dabe6b2804532bc1a865a01b1126127f7c6a8029531db8a51d8472c0abffca5be97b9b5433ad220ab9ad65cf94a1167f3fb2b8804ce66f9f5cae212724b2b3a04343580f5919f446f40eaa0177f25ebe68ee7c7a35d9d5ef6e1cb220eaf8ad9b269b15c2ab9692c345f3c3bd5965f06adfdfa2d672b5e3184ebe192f73e70e829adfac2e6318d238dceb6e3d7d1422d57ff7124793b92966bd229c0725b0d591e59c57f98841b5ffad16d0ae903406014d3e632d0654e9084f870e124046f3ebae3ecbf5c5365aa32ebf169ccf1243dc8fb296cef006d5f00447ecd2980abb98e3b6e6bf6181e5df7994ea1c1273784af0d92a57394c71926dc143228a8ade103ff61860d21ffd467b2c41bbbd2490dd36add865828fb64396f16831a3a74f57ee2254cc93b25b7219bc00339a2518be3caa4765ed63295c84f1d59144e96aacfb57c6441f64f29729bb7d68127ae2472bbf089570003b1e820191878ab6f53db01c180751e34672cf5a96edfefe164580d6101672281b59f58f3c7b1222f2b6d19c8a8e5f9ad539045f7dbadaa767f993da974dae20744bf5ad0e0ec71ee97696659981e067463c78bd9337b8bcfc070e7e5b47303eaaf9651c19f19a15eab8e2c47041828be50994b5695ee5fbc9a9ecacf9de714215eb7992c07f262db8843937934fdf6fdd31d0f3a44f074f3a1dd6622dbdb3364df79d5ec90ead64c29e05a6c5358cc6b9d8493b7e1c53a91c37aa3653cf2002072461f4b99fcdec142e53b87f61ea55cdb834dd4e03f2f57a206cabe2f3f3cbfad3b4117bf4434718022b09a8419959a9bb97fba50a6b3b9a844cd1301de7bae89f8d1bf549b88dd2bd0697e70ce89cc2e383221ca2ae9d3671a730466c250a8963f6411a42ecc85a00c01b2b43c39432d5065a5fd11c29a23169891cd674cf3a31e82587a26c8d48aa3debeaf067a26669599fae850126dd516512e0cf5ab556b5582add7d2f665723a2244007ddc302f0ec29da73578a80c998849be2f766a334c7ade4dd46f37d648899da5cf7437af2d6e8d03d934903387c4c7e260909d59b546dfac9ffdce11fb92e5bb6ff6836fa0e6d0c5942b4660fdd68d3cc8a76ce0960584dbf634695ca75752b19067ba535e4779189b111c9a3e0ea877067c046d10021b0e60eae8d5dd7536b4474d8ab74679e2d8e68bc9208db5561e28d0bec177cda1e2f944a4cd97b6432033ce40063cbced6b36e486b096adffd699c9fdf58d5ec54bf4afdf52493fbfcd91e807da31ff675b567058697aa088118a6ecf1b7c7dceba3ba87d59d882fce3b3b676763ed658e991c4fd5746946815af0a2c1e96aeb27383cf6638d6d7e1932b3a028250fee18db7c46acd7fab33ab22ff91cf78029a4ed96494151652213fb7dcca0a8944568bf84aded113e20e6897d6b8f6f9fe5f6975c7cbf999d15ce5f8d50454d58e7a5b285fce4ef9d14758cf4a9619b17275fa66f2c6c48d44da95657708062bec9b633ba2df082766f549c5c1b661fc8a5f7b8b6699503da733a66df44f116c4a470b73648cb64bf04101e7bc1d048d230addbf22a5b98aea08beda847e33552faf771d9b181f610ce34530543096257856ea3a08276bec1ea40e7bf6957143623ef47b5c41e61d076eef0a5195431b49beab9fd7f07b1a153491a7250a889b26ce657df550b226fb94cb5f52306f47ee3af4627ef0cdc0c50536af7b386440b878ed5d672670abdb3ea3e3c3c031e67293104a4d6476cf325f6fe4762ce2351dffac116387baadb82f987cab7fe88ce1be7d44ccd572bfd29114d2ce4d5e90f4d6bf7be39ce25ab7de52815e4059d783564d518dd208714de1c524ff69a4ec5f29bb631eff605cc6f30a0bcfba44810a3a6fc263891791b51cb4be0d60d3d0798e38b01b9a21150589a436fb4df4584bf6e7094176884921bbb0f87b1bcdfb6df8aef8f58393800816c15647650448da0ba5bb76f7bf76c3be83aceab79eedae80e1fb46a2557a9485aa7a8053a5835e609fdf54222f5b43cba63c9508dbbd0e22953768f88e2070236d7255f682464d09c7ba12b2e8787a1bc889af686d2c355961d8f92f877bb09baef09d70b5b306047d8d3cb97fb06ba8d09bfbae02314dddf98092b6ef275743e9deb391995003d83b549ecd604daa9bd34ef311aeced5db504242241c0717f8302efedcd3fd43686a7ee21c73ba3c5af98c93d09158c9011e11bc4b51a3a4e904c4b6ced1a786adf310073405c27df6aae6d5da4398d78622ba9144ad09902da49b77046ad22fd303f07c1533f271eb82794b402382d2971f46c7907069907a7afb9e94dd4071685f91cfca10d86aad7c385e4d90f0d44d37588a8f1f267c1d8445634ca4194d1a0c5894a6d00cae3af3aec991cfefda59e3f46c0a6e2fac55b35259a9960ec7dbd1c7dd128368393f0de1e0994ba1f5b41762c22213f56bbf4c2cca458dd5731f9379f0651ba61fbf17a5861eb417e20a7fc9df12c6771f5ab322213ec95beff96dc1811dd0f45be8fb1ed93c2cc01e694620b550e45bd265fb357f52699cf9ca3ddf331fe4d11c5e97bb57631d9c7620b5c19562c85ef8e04ecd5cd5b713fbd94b6b76331a83f304cd8ae1a903ffa722cf5697b1e1bde206735656ce57254744daff8013f47f9aa4f062d8c5956fa8df5ee79d6e6ffbc0c47cd0c99517a6d92fe8ad18c001be4b55af7a6533712c6a2ccb7e813016e7cb74a94bf2a2ce9b3b440faae19210d43320cb81a6472d1da775ca27f2b5bbe5964271eefccdfa0bd6b163357af4539fdb5d5e2e7e1795040776d4d75b70928b8efa954556f4d225bd9b6f9e5a71a8e7a3ef5c36d459233c66650ada1c55dfa02bca3997f93b92028881d9c3ec0e7e1a42c587482b0cfbc77e8520c6ca0f3e5127c96b41056b7279d9e62358e39dc95e779affaaaddc8e9ee66ba336feca8b957ccb4f352c0d162390e3bde27b15132407c97c3a6b5f1704e1e559ee12655a71d7dce3711c8af907d7d2875e2407ff8c59c5457678058d3d00a7971d239c1b1c67dac3ff3fbcc2d8c8035e31040118ac46ba5110a16aedd0b7f731a4f86a63a697501a664946eaf7da6d3cc2a296f294ee765b8f26363ba6116e0ea0ef8eabb0f1e7cc429611194cf0bb66463d26a82dd118cbbd3f1040dca2f5f82ac5eb5df41a4658fcb34b68066c5708a4a16c48fd290b32e392e7f5b662f4e3fa2d79a814f52824cf737872604672bdaf80fc527deb1f690339c92b6c6c6c8635de5a2e1a7ff617d0f1c11bc3a3504d0de94d77678025ab5bea511d783df148e58b0793251db3b7b9e03bb201be89d5939c0a60ab548460d543d015082e00ad9d05418c327ebafbad7924aaf70e5fa6eb0be359b65ac2fbbcad495b17712e033cbf1853d1e2450ac4c8d19287074e76ca3d087d376b0f861b525d4949098dd4e3a3cc50118c8587adf6587ed9aa0352b7d812fe66bb64eb0c0f4d46822aa9c3d4848454d49b61cca24d7d6b82fafc5d8eb4e40e3665f24a95182b70b22c5f9303a49d1278f25de9855246c729fc8ba300fad799a949b9b0ce303477d22337d599d4c8441461d25725965183210a729fc59c4e5ddb45c0b9db06a09619e6009aa0653cd1e8b06d0e55c133d5022dcf91f12a21e9f977de2485f886c5133a8837987e7bc90662156b0250cc76cb03ad9fa36733ef371479ea9c1313682866b963f1f96bba8c658e2c6a10e5e29d8a07d4999b735bdef7f60326aa64fc198c3f2670fa4a44717fc613f1282fc324fd9476e6da7866cb6ce1efa8a1577088f2aa757584b8ade9f2ba34a2287870da2cc7704008b6e057eaf8bfe2fd0d6d60cf03e1751d2284c6439ee6079708451e64b1f7e7dc8400ae99e0d834a7daba6c3a8219812adff0760129e18a41eb0448c57a909714cd395933436e9ae040277f213e30ab7b6e7e3109642ffa051b3c423f6ffa7830c75d229acd617d6bc1f7948f09238f5437ff4fb302034fec1fed96c55c46c7d70d6ab3018c1a3d76120077f815fa67ec8815f44fd0cae7d1509d217a432ce904c778f201a508fdea4672e9cff797bd1d0f58d46f39396e148573ae9b2468e4ee5bd9a5abce8166333c524f0a104da2e3c99ddbc51fc6f4e7c628af79c93d0fbe61b1c4a72b11fe423597f126467a01ee6dad848f24abdfe453592f02c84e017fe553f27e639f88824d70aeeaca54758184f95f12d696291798046bb075fefd6876e8ef893f5b9340e21fc63c67feb6f03055f2f394a591164a61b1aab14c468998175b75974543e79b241dc69a6e346374dec5eebae154e36f29d17273e608ce69d539a5e4702f474bad66fbf3348f0c859bf884576faeeac754e290ec97e863526e55420da72b6b6cd209e6685ffb64e9865d00eb017c843d3c0cf3ab26f53f76316fbe009f0b2c4932b0694fecf1a148dbead458ca9f5f6d678d6c6fbd23fb6aea9e951914300eaaaf69bf35d4ce11c0349a02aa14529a083e701eac0177d4ddb305a9f9a5cf8bacd96327a161bb8b877813ea022d62bac8f0ab9eb5e9d145dda4b1fe79c0bee34c8bbfe866ba376d3a71b9809adda06e64eafaa6cf53fff8ed63e15525fd409e13b1809ae6e6e937acf858a59d2073b304171d5ab35ec92f66fbb2d4e34d46e886c3546c1026d0ff27821a15aa397dbc686540d546ea66fb43dcb9beaeadde6250cfe8e563f9033b432018c88bec07279c6a0228f3eb11031d3435d95c9c1789a5338f74aa6db2c853c87f8f2397f9067fa59774770f64b8ae42b9a07f85f1bcabbc6d3b3456a253bdb73ad3de0aa416589b722053c81db90e7b66a835d636615701e6869fef016bfaba9da0a869005ffc3174b605fdabdb8c7346262ce78a64aa7036960913edfffad202d664d1771018de43b6548a6672f48979b8e30017a93da2c093266306e09eb203fb37d7d54466fb26d4414ba88346d02d8811f100dcb0a3e50ae46247b986b928f12c1ad506c6b33b49d7e6955ae9619f73c79b72a95b053d53c4c54d36dceb8ae780b321aa41b5d61caa21a6c65329f08da522bbbb3d07501b39cc6bfbe4a2ef8054d7c57666bc805ed451517a1432b958141f3ce94752a67a17aadb41590037da8efdb251eb56de30b0e0e75adfbf4e06d4777f843a8d7c31e2ab62d98764217491d46960d67d3ee1213d150c28e75d1f440d41ffc3cf876554e2d4a354f70fce17e4c0fdc64992c32e785263ca4ffcab57d3d46d220627ed05f1628551e9843137996bc7a0b773e1ccfe5364216a8003757ffdc052d93793a3463baf4eef5dd283826f8510bb1f20505a6e61cb3d571d0f77e67ff3c0aa5ca91f6d68c7e0d2d79c649b091b30b2911c5c47157c9c531296eba681e039eaecab83722cc2fd5b91913a463ba9f693e34da60b1adb8ee9f4a83fa67e25f19e4cd6e19ed1381cba8b5b4591109637ae1f7f29b5495fc5f8057da565d937e7577735bd98fe626ce8568897d240f054ad69c8e0ca424d1be51b17d5e639253fb2fe6791e01edcf9c4f8404233d7f98b52c31c4996b6b63112d0126036ca20cf52a2da2478683c41bfd8fb5b34de59d5e87b5075e5e1d78ad06c6a2f6e662145be3d30d140b62c49df203350ea4412c97aaeec7aaa00d81b89f3b7295607840de2a8386f52012b5c4e6e0e1986565bc4f99b6bc10f3a2ab59783a8b9f3c696f741af0f51b6592c68ddff861fc7d2b16876b05a54eae9ec0e170fbf26d9358941c6cba50a5c41e77f72c7f41e0bbf6023f04f7701f676a64cb63ea1a8d373ee6a99ba56449699ccdf8a11dc7d840d695cd5ef987f74e5b16594cc8c6c2251c47b429281b6e34c0288c7242052ac3c9c63213f6ddb08726001e0afe1fb312d463db8722f1617972dc7f365de498027ef0b5c6d100e583348cd777a2afbfd60ef59969c8f88358b6995c177a7d7e69d86b11e36f42bae8c9af599d3f828447c31004000163bb74ef20f656f6a1c8159bd0f867f2e283c10656a40a397b2e514c19efb5d5a5f54316509801bd8208a2c84b2ef13e54d7b8af8787b826b50095a15e33a5e8e306454312a83af7869b7ba0039ca601751b580a9190435d35a8ce9d8e9558ca1bcea3cc3604f4e991aee79fd0d2393b9f87e8dac7782e837e1de5e88a7c79385a2b14556041f49c1113df43efd8aea14c4b651d713fc9989b2fd77ce13a98efef5e83cc6843d313117753d82870c5efec8cc6fd855ab6e0fc6d48c66874fdcb2d007db7fbb9371da3836eb23da1106283a20e32617bcaba574b7b6298d48334eaeef905ff348c2bfbc1c83a88d6915b644d1854161ab4f1d1db12e74de2853e48d1a10f9835c226bca6944d0de6a18e0e07df45ad72a7d354045a6997ffdee010e37091a3a5280e5db8aeea0245217a6f1160a6287d9a28c0eeabaebe755b9485da5b7ccb85166ed902e63200e5e8ac464124bef0196eddee6cfe90fce770b416817e1ca78494786bdaeafa3538841f74bbdb2585d63f667ef227287efa56c030c0999e9ead590f1ce383a138233235494ecec0aed97c803b4d7c4fb80ac9a3bcb1dd2bab51382a94195bee034c3f3d3d9efc44add83ec580a5cfe8f5942b1694b0ab3ef4b2d9f7c0b8634b056c6b6eeb946be1825fa452abdbc1545cd94774abed3fdc2b0399929298221030f6cd0a2b38490f5e4bfd53ee20de10eeb2ffacca980d40e0885cb91c94a4d81a61d863efd0f7a12da233e1dacf7af728950892ef887abcc5e4d08c6b57834a1e5dd1dfc69418fc681b47d8cd34c6a3846b0e1afdc7c7f9033ff817a72ac617c0a1e59e4e6ea40bd668c499f221c5f63700e74b68ba3045b4460f0fa60308cf8964d95237d888d5c1b1be0fa7bd2703eaeb0d2914b8d22cbd8693c16f21bb72566f38aa97e86f212557d40e10b285e1d4de0b153c8f91e168e9d0031bb7ee7fec5f0c3fbf15bc6fbceeae6dd363b7e9835b175b0be16a3348a2c2d07468449fbb2fcfca9e7d8b72b623355715a6a1edc87ea4c699ffeacb2277fbb5658a1eb12d0a7a93bf100ab11cf49b35c16a14044ac8e5bd69af05b252325f0eca41f90681b4a1ec399096939a96685926655a0c4d172d06646c87f35b65c0d7654882b79838f78c35febbdb378f9f28d7e6ba1c1fa191bbcdbf991731f546439a966e4f7a15c77367161bde14b731c9f2b91114fa46e02e70f07d3c40988e8140866ed3dcd98ef5524700deb75c1a6414016da0ce6845e936a8692b7beac01bc855a72a490c667c3b755ffaaa57af54af1bd07ae7b203be85f3653aa63cc5ae10f6e585c7bd8a5257604e82fad6c7be6f1a47eb665c1422c03d3263f351671a48bd5eed22077b8c16e706f009880941c29b90c29a11ef008a371b29200f32523b9847d911fab4ee1468bf98a49ff73703e2d9d7bbf6ae37459c3cb502541f304e1d5918518a06225b65f3b38b91f8e0b49a29ef9aacca369ce5cf8b45738e29118ab06078b885189acf4d0a5200b86cb2269dde90dfada27975dbe6ded12232c0faf7ea12ecacbdf416cff8632e48346478a75c0279c1920b7556fc6670704d5d97912c75d3a9cffe6891abdf747a6850ba7d9668e56c7e7ecc03c5c388e886bc984c8bfd9f470b7e4ea4d146c3c28e4f8ff82b9558266343036e6239a26f567f7633911ccc51522c29ff3ca36ad5b8cfd6ec1c86ae08f30d87a503c909e66dc278e9d14f3fae4bfa4813f315b1610ed76fc149d92f319044e813c3769d4978637e0ee732d3bb86e9fa584181f41d4304c07a1cb71d10f07da649288275a213eff161c536c7366d4c010cf9a4b1c2f2940607dc7468e51204c6983c554d616d48f93ae51e6a7769b3285785ae7bcba3cfb27879df1d7f1f18849a70814eb51df6d1d8cbe80b736cb38326f7db7a06e49cd4fe41b3f7a9156cfac9222ac23d13765e7f2910a365fb23a208f192cfca97b2b8a3de44a2d90d3c865bec109f4bdfb1d37216cf5f71a27c39a83b5562b0c06d76b46b2d8f5b15cb1765d6c78d065d24bedf72405dcb8e795fe183196a6b620f918a2dd7fdfac142aa653fd431ec153e3daac8f615a45b3a0d665d5fe36efb6e2f18b8399429e4f363748eddd5cd2a637e9a0a553fac6d05a3e2bd1b26f2f99433f8f59a3691417a4f35ff7d46a22e39e94641d942706850cb2843ff4a34122e37dcc8224ae9f6ab7f64ff4a0bcb0aaff2f429e4f0f5fcf90ab6a2c45e8f2408d9bbd4f60d6b01a0cf527895e1cd063b178b8973930b9488d81d3f0f7985b900d0a894c29642b809ef39294bfaaa5401f5ed50cbb91a047b60ad54b323a2f2ada04d19d6dbda02e0f22d4d6520f9db2263181c97c9bb74dd8a90adedc80bfd064eb103f67d02ea17571f870c779470bb6460c658da4c502b9a10c8050fc26ad5cc1ae1eb02f0d703d05b48f48ab8c9f9a1bd000181ccf929d45544b44e9a3cd0bcd412ad639323283ed229e5486a2a93babb165880a0a7329834bb51a0631cba5caa30637ca3f07074051c608b7c7170c8c415c2eb88bd6a798bd86953ff71052506ccf0e2357deff6cef24de5b7f68a17082c08d096e43fbe727ab0ab1aa27a703ccd58168039e50dce2d400ed7f2a217c1eea7b29455fbf910d36db324d1c6b53343a78484883ad100a0b5b28c74ab6296df5bf8048fb916e8ddda0ded3f5b08d262b9b1cb1ecb149c02a21490ebebe8856c844d448d2a3878dcc930c3c88d9addf73917e9d3f878fb12fba3e602cfde199a0e69eab56e3d4ffa01135b3145baa613be01f0b94af5bd3b8b432339c954f52b8551fd13790bc1ee18be226b819d8001a3da8e097f84c166e4002e4c1043d3a3721f05105cd17a278b9509d7a04826e8a5b4956bbf976ffb4857fd88da99cfea8d2e0a1c4f52f71f87cbee8c02fbf59b12bdaccb67d0b95f0a56693eafafeefce1953d708b56532ed5bbe12626a3d041c031b48a47b34c504f7dd57e21147b920c058385ddc8cbea5332086c269b0d5c2439f30fa431f88d1a10e25eba0df70d8617ecd5546314ffeae9c4baab872ab82a45eeaf0e1e1533e8a6189c324f31b652aeadc52981b66161313999c5a7bd7c79ef4ee55c7cb00ebd9637ffe01924508a44ab72ab16b70b8b815ce7d27772db315122f4a5a7679af5ac685c26320a71cdd8066b19f749705e2e35d1d9166ecb066053dd05a759270e119944cf99b918cb5e4e6c931031ae2eeffe349ac246c92174091c687c58879e1f05c43b010f7ec3f204c106cf60740b0bc2d355f57bbaec7d060dedab9aebaa4094e72ebffbf61cdfb7d69fbd146daea59339fa83c19c5f75b866af5e7f387740e675e1e2ba29c261d9e7237c6e9ef1b39a8fdacb44de0eaff5f4f9e3e42b75d0a37834eab0cf47acf65e882f0962e01982e783c0dae7efbc95dccb235562e5a2e04fd2b4b43388c0292e6e8198c6df0348920d6e1c8acdd2e892d3f7aef7703824dbb08695642f0e444ade6c4f1ec1e267feb5135cccd50fcde643acb66dbd18f507496957ced435e0db0a8e8441a8e2ebc365f995c32399f7d180b6faeb85ee1921b95f82f3194bed7d157e842257d2da26dfac90f32fb53147e48e232d5115f1cd12b45c55330b29775ab776599afa504b7fe114cd7fb3ab4eb6c30becb82f448b284b20010bea918019af99b2a9ccab1585aec19fd1abe8365a6023f96dddf1a37cce2734bb6585143729850bcd811787bd07cb5fdd57cc987f9278b7f5ef3c7529a9b6d20d18cc4446f1036cf7635da6732986c38df4785e2e428f14b84957319772bdbb7d2d2d20321e522b1ec6c807f3a3f575643d4b71e1bbd1e843b5816aa68900298f5058c65a9fe1022978a44a77bde2b99e221de97cd7fa6a2ea440220bac20e3e4c1e4224958aca15681d3a18f74218114c3e5eefa1fc16de8c07f1d1297b0e772d05f205337175c1dbe88dfc876dcfce367304afac68c41b98ed2ba3f04fd1b37db27dd5d9c9aafaeadfcc44585908ea655ffce1fc2516b060256777e8953e2a6861ec4460034691aed001ea2971627615fc7972773d6a8c343117bae3fc68cfd1f187c478c0f52e86b118c65c39848a8c582ed908fb1242ad3455288cc858e52e119d368e00783c2b8c2916ba564a3501326baefe1dcadac8b4b8b666f20a3a245ca171b43af", 0x2000, &(0x7f0000006d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x7, {0x0, 0x0, 0x20000000, 0x4, 0x1ff, 0x0, {0x5, 0x0, 0x7, 0x0, 0x9, 0x3, 0x2fbc, 0x0, 0x0, 0xc000, 0x0, r2, 0x0, 0x403}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100), 0x100) symlink(&(0x7f0000000080)='./file0/../file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00') kernel console output (not intermixed with test programs): 77.977015][ T6564] usb 1-1: config 0 descriptor?? [ 177.992886][ T6564] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 178.002410][ T6564] usb 1-1: Detected FT4232HP [ 178.100202][ T7996] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 178.222083][ T6564] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 178.233746][ T6564] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 178.242909][ T6564] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 178.263420][ T6564] usb 1-1: USB disconnect, device number 46 [ 178.277055][ T6564] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 178.289088][ T6564] ftdi_sio 1-1:0.0: device disconnected [ 178.404087][ T5929] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 178.568114][ T5929] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 52, changing to 7 [ 178.579272][ T5929] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 9272, setting to 1024 [ 178.590540][ T5929] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 178.608540][ T5929] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 178.617864][ T5929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 178.626319][ T5929] usb 4-1: SerialNumber: syz [ 178.683371][ T8007] netlink: 'syz.1.746': attribute type 1 has an invalid length. [ 178.691586][ T8007] netlink: 17 bytes leftover after parsing attributes in process `syz.1.746'. [ 178.841430][ T5929] usbtest 4-1:1.0: Linux user mode ISO test driver [ 178.883210][ T5929] usbtest 4-1:1.0: high-speed {control bulk-in iso-out} tests (+alt) [ 178.943207][ T5929] usb 4-1: USB disconnect, device number 47 [ 179.029760][ T8023] netlink: 'syz.1.749': attribute type 39 has an invalid length. [ 179.032116][ T8019] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 179.049901][ T8019] FAT-fs (loop2): unable to read boot sector [ 179.071731][ T8019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.750'. [ 179.139746][ T8025] netlink: 108 bytes leftover after parsing attributes in process `syz.1.753'. [ 179.260864][ T8027] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 179.460440][ T8042] FAULT_INJECTION: forcing a failure. [ 179.460440][ T8042] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.466552][ T6562] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 179.485046][ T8042] CPU: 0 UID: 0 PID: 8042 Comm: syz.3.761 Not tainted syzkaller #0 PREEMPT(full) [ 179.485073][ T8042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 179.485086][ T8042] Call Trace: [ 179.485094][ T8042] [ 179.485105][ T8042] dump_stack_lvl+0x189/0x250 [ 179.485130][ T8042] ? __pfx____ratelimit+0x10/0x10 [ 179.485159][ T8042] ? __pfx_dump_stack_lvl+0x10/0x10 [ 179.485177][ T8042] ? __pfx__printk+0x10/0x10 [ 179.485206][ T8042] ? __might_fault+0xb0/0x130 [ 179.485239][ T8042] should_fail_ex+0x414/0x560 [ 179.485267][ T8042] _copy_from_user+0x2d/0xb0 [ 179.485287][ T8042] __sys_bind+0x199/0x3e0 [ 179.485319][ T8042] ? __pfx___sys_bind+0x10/0x10 [ 179.485359][ T8042] ? __pfx_ksys_write+0x10/0x10 [ 179.485389][ T8042] __x64_sys_bind+0x7a/0x90 [ 179.485418][ T8042] do_syscall_64+0xfa/0xfa0 [ 179.485445][ T8042] ? lockdep_hardirqs_on+0x9c/0x150 [ 179.485480][ T8042] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.485500][ T8042] ? clear_bhb_loop+0x60/0xb0 [ 179.485524][ T8042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.485543][ T8042] RIP: 0033:0x7f695d38eba9 [ 179.485561][ T8042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.485577][ T8042] RSP: 002b:00007f695e184038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 179.485597][ T8042] RAX: ffffffffffffffda RBX: 00007f695d5d5fa0 RCX: 00007f695d38eba9 [ 179.485610][ T8042] RDX: 0000000000000006 RSI: 0000200000000000 RDI: 0000000000000005 [ 179.485620][ T8042] RBP: 00007f695e184090 R08: 0000000000000000 R09: 0000000000000000 [ 179.485631][ T8042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.485642][ T8042] R13: 00007f695d5d6038 R14: 00007f695d5d5fa0 R15: 00007ffef42e63c8 [ 179.485670][ T8042] [ 179.556747][ T8044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.657924][ T6562] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 179.660280][ T8044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.676805][ T6562] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.681181][ T8044] autofs: Unknown parameter 'fd¶3ô…}’R€^ºáTDFưiC{ÝjøØ‹[W®.RŒö¿æ”éõiÇ…½ÂÞ®õ[’\åÀ½ûí¬§BìhÍ»­±]ÑMZ³Y5.]­É|håúRjN³­×—' [ 179.721315][ T6562] usb 1-1: Product: syz [ 179.740011][ T6562] usb 1-1: Manufacturer: syz [ 179.753564][ T6562] usb 1-1: SerialNumber: syz [ 180.010739][ T8063] loop6: detected capacity change from 0 to 2560 [ 180.036898][ T8063] buffer_io_error: 138 callbacks suppressed [ 180.036920][ T8063] Buffer I/O error on dev loop6, logical block 0, async page read [ 180.050879][ T8063] Buffer I/O error on dev loop6, logical block 0, async page read [ 180.069926][ T8063] Buffer I/O error on dev loop6, logical block 0, async page read [ 180.078740][ T8063] Buffer I/O error on dev loop6, logical block 0, async page read [ 180.093796][ T8063] Buffer I/O error on dev loop6, logical block 0, async page read [ 180.101839][ T8063] Buffer I/O error on dev loop6, logical block 0, async page read [ 180.109926][ T8063] Buffer I/O error on dev loop6, logical block 0, async page read [ 180.117959][ T8063] Buffer I/O error on dev loop6, logical block 0, async page read [ 180.126093][ T8063] ldm_validate_partition_table(): Disk read failed. [ 180.133073][ T8063] Buffer I/O error on dev loop6, logical block 0, async page read [ 180.142667][ T8063] Buffer I/O error on dev loop6, logical block 0, async page read [ 180.154313][ T8063] Dev loop6: unable to read RDB block 0 [ 180.165274][ T8063] loop6: unable to read partition table [ 180.188555][ T8063] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 180.412417][ T8076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.423916][ T8076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.440536][ T8077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.453799][ T8078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.465997][ T8077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.480854][ T8078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.491181][ T8077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.506457][ T8077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.518271][ T8077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.529216][ T8077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.541403][ T8077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.555653][ T8077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.112541][ T8089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.121633][ T8089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.641365][ T6562] net_ratelimit: 1991 callbacks suppressed [ 181.641388][ T6562] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPIPE [ 181.667533][ T6562] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 181.680340][ T6562] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 181.697254][ T6562] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 182.693282][ T5929] usb 1-1: USB disconnect, device number 47 [ 183.567731][ T8121] netlink: 48 bytes leftover after parsing attributes in process `syz.3.788'. [ 183.612794][ T8124] netlink: 'syz.3.789': attribute type 4 has an invalid length. [ 183.620601][ T8124] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.789'. [ 183.899671][ T8137] overlayfs: missing 'workdir' [ 184.084118][ T5929] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 184.145399][ T8145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.154433][ T8145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.257709][ T5929] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 184.266522][ T5929] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.282090][ T5929] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= 0.9c [ 184.291529][ T5929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.300203][ T5929] usb 1-1: Product: syz [ 184.304475][ T5929] usb 1-1: Manufacturer: syz [ 184.309085][ T5929] usb 1-1: SerialNumber: syz [ 184.316720][ T5929] usb 1-1: config 0 descriptor?? [ 184.329591][ T5929] ims_pcu 1-1:0.0: Missing CDC union descriptor [ 184.339088][ T5929] ims_pcu 1-1:0.0: probe with driver ims_pcu failed with error -22 [ 184.345142][ T8147] overlayfs: failed to clone upperpath [ 184.579774][ T5929] usb 1-1: USB disconnect, device number 48 [ 184.699416][ T8152] ptrace attach of "./syz-executor exec"[5861] was attempted by "ÉôÔ“€7çE\x09Å» 宬›ò¾áPÕ"[8152] [ 185.161414][ T8170] C: renamed from team_slave_0 (while UP) [ 185.172044][ T8170] netlink: 'syz.0.806': attribute type 2 has an invalid length. [ 185.180581][ T8170] netlink: 128 bytes leftover after parsing attributes in process `syz.0.806'. [ 185.191211][ T8170] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 185.238968][ T8174] netlink: 4372 bytes leftover after parsing attributes in process `syz.1.807'. [ 185.284213][ T5929] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 185.454854][ T6563] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 185.466396][ T5929] usb 4-1: Using ep0 maxpacket: 32 [ 185.477755][ T5929] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 185.493382][ T5929] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 185.506416][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 185.515535][ T5929] usb 4-1: Product: syz [ 185.519878][ T5929] usb 4-1: Manufacturer: syz [ 185.523648][ T8186] fuse: Unknown parameter 'v$' [ 185.524528][ T5929] usb 4-1: SerialNumber: syz [ 185.531598][ T5929] usb 4-1: config 0 descriptor?? [ 185.551229][ T8166] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 185.624524][ T6563] usb 1-1: Using ep0 maxpacket: 16 [ 185.640370][ T6563] usb 1-1: config 136 has an invalid descriptor of length 165, skipping remainder of the config [ 185.666893][ T6563] usb 1-1: config 136 has 0 interfaces, different from the descriptor's value: 1 [ 185.687418][ T6563] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 185.699849][ T6563] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.711267][ T6563] usb 1-1: Product: syz [ 185.717880][ T6563] usb 1-1: Manufacturer: syz [ 185.723842][ T6563] usb 1-1: SerialNumber: syz [ 185.779939][ T8199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.789669][ T8199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.429640][ T8205] netlink: 'syz.1.819': attribute type 21 has an invalid length. [ 186.438371][ T8205] netlink: 128 bytes leftover after parsing attributes in process `syz.1.819'. [ 186.457637][ T8205] netlink: 'syz.1.819': attribute type 4 has an invalid length. [ 186.483729][ T8205] netlink: 'syz.1.819': attribute type 5 has an invalid length. [ 186.513445][ T8205] netlink: 3 bytes leftover after parsing attributes in process `syz.1.819'. [ 188.110753][ T6562] usb 4-1: USB disconnect, device number 48 [ 188.204639][ T5929] usb 1-1: USB disconnect, device number 49 [ 188.321888][ T8229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.331946][ T8229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.614178][ T6562] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 188.693654][ T8253] netlink: 'syz.1.837': attribute type 1 has an invalid length. [ 188.744133][ T6562] usb 4-1: device descriptor read/64, error -71 [ 188.987926][ T6562] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 189.124187][ T6562] usb 4-1: device descriptor read/64, error -71 [ 189.234475][ T6562] usb usb4-port1: attempt power cycle [ 189.241445][ T8266] tipc: Enabling of bearer rejected, failed to enable media [ 189.314130][ T5929] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 189.479727][ T5929] usb 1-1: config 0 interface 0 altsetting 12 endpoint 0x87 has an invalid bInterval 102, changing to 10 [ 189.491457][ T5929] usb 1-1: config 0 interface 0 altsetting 12 endpoint 0x87 has invalid maxpacket 24624, setting to 1024 [ 189.506650][ T5929] usb 1-1: config 0 interface 0 has no altsetting 0 [ 189.516195][ T5929] usb 1-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 189.526001][ T5929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.535096][ T5929] usb 1-1: Product: syz [ 189.539416][ T5929] usb 1-1: Manufacturer: syz [ 189.545691][ T5929] usb 1-1: SerialNumber: syz [ 189.555375][ T5929] usb 1-1: config 0 descriptor?? [ 189.562412][ T5929] keyspan 1-1:0.0: Keyspan 2 port adapter converter detected [ 189.570713][ T5929] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 7 [ 189.574076][ T6562] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 189.580289][ T5929] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81 [ 189.597831][ T5929] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1 [ 189.607402][ T5929] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2 [ 189.614892][ T6562] usb 4-1: device descriptor read/8, error -71 [ 189.615389][ T5929] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 85 [ 189.628962][ T5929] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 5 [ 189.640553][ T5929] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 189.650833][ T5929] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 83 [ 189.660931][ T5929] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 3 [ 189.668760][ T5929] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 4 [ 189.676665][ T5929] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 86 [ 189.684516][ T5929] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 6 [ 189.695375][ T5929] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 189.787953][ T8264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.806244][ T8264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.823923][ T5929] usb 1-1: USB disconnect, device number 50 [ 189.849177][ T5929] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 189.864283][ T6562] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 189.871046][ T5929] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 189.888122][ T5929] keyspan 1-1:0.0: device disconnected [ 189.905162][ T6562] usb 4-1: device descriptor read/8, error -71 [ 189.937547][ T8278] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 190.014420][ T6562] usb usb4-port1: unable to enumerate USB device [ 190.481678][ T8288] FAULT_INJECTION: forcing a failure. [ 190.481678][ T8288] name failslab, interval 1, probability 0, space 0, times 0 [ 190.497955][ T8288] CPU: 0 UID: 0 PID: 8288 Comm: syz.2.850 Not tainted syzkaller #0 PREEMPT(full) [ 190.497983][ T8288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 190.497996][ T8288] Call Trace: [ 190.498004][ T8288] [ 190.498013][ T8288] dump_stack_lvl+0x189/0x250 [ 190.498047][ T8288] ? __pfx____ratelimit+0x10/0x10 [ 190.498075][ T8288] ? __pfx_dump_stack_lvl+0x10/0x10 [ 190.498094][ T8288] ? __pfx__printk+0x10/0x10 [ 190.498124][ T8288] ? __pfx___might_resched+0x10/0x10 [ 190.498147][ T8288] ? fs_reclaim_acquire+0x7d/0x100 [ 190.498175][ T8288] should_fail_ex+0x414/0x560 [ 190.498204][ T8288] should_failslab+0xa8/0x100 [ 190.498230][ T8288] kmem_cache_alloc_noprof+0x74/0x6e0 [ 190.498248][ T8288] ? fput+0xa0/0xd0 [ 190.498263][ T8288] ? getname_flags+0xb8/0x540 [ 190.498287][ T8288] ? ksys_write+0x22a/0x250 [ 190.498311][ T8288] getname_flags+0xb8/0x540 [ 190.498342][ T8288] __x64_sys_renameat2+0xad/0xe0 [ 190.498371][ T8288] do_syscall_64+0xfa/0xfa0 [ 190.498398][ T8288] ? lockdep_hardirqs_on+0x9c/0x150 [ 190.498431][ T8288] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.498450][ T8288] ? clear_bhb_loop+0x60/0xb0 [ 190.498474][ T8288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.498493][ T8288] RIP: 0033:0x7f5d2718eba9 [ 190.498515][ T8288] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.498532][ T8288] RSP: 002b:00007f5d2802c038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 190.498559][ T8288] RAX: ffffffffffffffda RBX: 00007f5d273d5fa0 RCX: 00007f5d2718eba9 [ 190.498574][ T8288] RDX: ffffffffffffff9c RSI: 0000200000000780 RDI: ffffffffffffff9c [ 190.498588][ T8288] RBP: 00007f5d2802c090 R08: 0000000000000000 R09: 0000000000000000 [ 190.498607][ T8288] R10: 00002000000007c0 R11: 0000000000000246 R12: 0000000000000001 [ 190.498620][ T8288] R13: 00007f5d273d6038 R14: 00007f5d273d5fa0 R15: 00007fffb8287f88 [ 190.498654][ T8288] [ 190.842123][ T8291] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.958167][ T8291] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.081563][ T8291] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.100986][ T8302] tipc: Enabling of bearer rejected, failed to enable media [ 191.205075][ T8291] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.316824][ T50] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.331444][ T50] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.349854][ T50] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.369841][ T1161] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.774144][ T910] usb 1-1: new full-speed USB device number 51 using dummy_hcd [ 191.955976][ T910] usb 1-1: config 0 has an invalid interface number: 128 but max is 0 [ 191.965072][ T910] usb 1-1: config 0 has no interface number 0 [ 191.973498][ T910] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 191.985309][ T910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.993461][ T910] usb 1-1: Product: syz [ 192.000613][ T910] usb 1-1: Manufacturer: syz [ 192.005339][ T910] usb 1-1: SerialNumber: syz [ 192.012915][ T910] usb 1-1: config 0 descriptor?? [ 192.230117][ T910] usb 1-1: Firmware version (0.0) predates our first public release. [ 192.238588][ T910] usb 1-1: Please update to version 0.2 or newer [ 192.687084][ T910] usb 1-1: USB disconnect, device number 51 [ 192.784686][ T6563] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 192.946689][ T6563] usb 4-1: Using ep0 maxpacket: 8 [ 192.966838][ T6563] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 192.977329][ T6563] usb 4-1: config 1 interface 0 altsetting 129 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 192.993797][ T6563] usb 4-1: config 1 interface 0 has no altsetting 0 [ 193.008884][ T6563] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 193.021716][ T6563] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.030338][ T6563] usb 4-1: Product: syz [ 193.037661][ T6563] usb 4-1: Manufacturer: syz [ 193.042442][ T6563] usb 4-1: SerialNumber: syz [ 193.158959][ T8368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.170033][ T8368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.265974][ T6563] usb 4-1: bad CDC descriptors [ 193.281310][ T6563] usb 4-1: USB disconnect, device number 53 [ 193.369540][ T8376] overlayfs: failed to resolve './file0': -2 [ 193.741984][ T8390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.751187][ T8390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.770373][ T8390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.782854][ T8390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.840937][ T8392] loop6: detected capacity change from 0 to 2560 [ 193.850106][ T5864] buffer_io_error: 11 callbacks suppressed [ 193.850124][ T5864] Buffer I/O error on dev loop6, logical block 0, async page read [ 193.867552][ T5864] Buffer I/O error on dev loop6, logical block 0, async page read [ 193.875878][ T5864] Buffer I/O error on dev loop6, logical block 0, async page read [ 193.883871][ T5864] Buffer I/O error on dev loop6, logical block 0, async page read [ 193.892167][ T5864] Buffer I/O error on dev loop6, logical block 0, async page read [ 193.900259][ T5864] Buffer I/O error on dev loop6, logical block 0, async page read [ 193.909197][ T5864] Buffer I/O error on dev loop6, logical block 0, async page read [ 193.917294][ T5864] Buffer I/O error on dev loop6, logical block 0, async page read [ 193.925402][ T5864] ldm_validate_partition_table(): Disk read failed. [ 193.932145][ T5864] Buffer I/O error on dev loop6, logical block 0, async page read [ 193.941822][ T5864] Buffer I/O error on dev loop6, logical block 0, async page read [ 193.953104][ T5864] Dev loop6: unable to read RDB block 0 [ 193.954112][ T6563] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 193.959399][ T5864] loop6: unable to read partition table [ 193.975826][ T8392] ldm_validate_partition_table(): Disk read failed. [ 193.982807][ T8392] Dev loop6: unable to read RDB block 0 [ 193.992772][ T8392] loop6: unable to read partition table [ 193.999206][ T8392] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 194.138271][ T6563] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 194.150550][ T6563] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.161547][ T6563] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 194.181119][ T6563] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.195174][ T6563] usb 1-1: config 0 descriptor?? [ 194.280544][ T8402] kvm: kvm [8401]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc1) = 0x5fc00000000 [ 194.296334][ T8402] kvm: kvm [8401]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc1) = 0x5f900000000 [ 194.311837][ T8402] kvm: kvm [8401]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc1) = 0x5f600000000 [ 194.345076][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.351850][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.416304][ T8406] loop6: detected capacity change from 0 to 524287999 [ 194.490476][ T8408] batadv_slave_0: entered promiscuous mode [ 194.504496][ T8408] batadv_slave_0: left promiscuous mode [ 194.658049][ T6563] savu 0003:1E7D:2D5A.000D: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 194.693700][ T8413] input: syz1 as /devices/virtual/input/input11 [ 195.077208][ T8429] FAULT_INJECTION: forcing a failure. [ 195.077208][ T8429] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.096357][ T8429] CPU: 0 UID: 0 PID: 8429 Comm: syz.2.896 Not tainted syzkaller #0 PREEMPT(full) [ 195.096385][ T8429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 195.096397][ T8429] Call Trace: [ 195.096405][ T8429] [ 195.096417][ T8429] dump_stack_lvl+0x189/0x250 [ 195.096440][ T8429] ? __pfx____ratelimit+0x10/0x10 [ 195.096468][ T8429] ? __pfx_dump_stack_lvl+0x10/0x10 [ 195.096486][ T8429] ? __pfx__printk+0x10/0x10 [ 195.096511][ T8429] ? __might_fault+0xb0/0x130 [ 195.096539][ T8429] should_fail_ex+0x414/0x560 [ 195.096572][ T8429] _copy_from_iter+0x1de/0x1790 [ 195.096607][ T8429] ? __lock_acquire+0xab9/0xd20 [ 195.096636][ T8429] ? __pfx__copy_from_iter+0x10/0x10 [ 195.096682][ T8429] tun_get_user+0x219/0x3e20 [ 195.096728][ T8429] ? aa_file_perm+0x44d/0x1550 [ 195.096745][ T8429] ? __pfx_tun_get_user+0x10/0x10 [ 195.096769][ T8429] ? _parse_integer_limit+0x1ae/0x1f0 [ 195.096804][ T8429] ? __lock_acquire+0xab9/0xd20 [ 195.096828][ T8429] ? ref_tracker_alloc+0x318/0x460 [ 195.096849][ T8429] ? __lock_acquire+0xab9/0xd20 [ 195.096869][ T8429] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 195.096896][ T8429] ? tun_get+0x1c/0x2f0 [ 195.096926][ T8429] ? tun_get+0x1c/0x2f0 [ 195.096951][ T8429] ? tun_get+0x1c/0x2f0 [ 195.096981][ T8429] tun_chr_write_iter+0x113/0x200 [ 195.097011][ T8429] vfs_write+0x5c6/0xb30 [ 195.097039][ T8429] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 195.097065][ T8429] ? __pfx_vfs_write+0x10/0x10 [ 195.097096][ T8429] ? __fget_files+0x2a/0x420 [ 195.097131][ T8429] ksys_write+0x145/0x250 [ 195.097157][ T8429] ? __pfx_ksys_write+0x10/0x10 [ 195.097180][ T8429] ? do_syscall_64+0xbe/0xfa0 [ 195.097212][ T8429] do_syscall_64+0xfa/0xfa0 [ 195.097237][ T8429] ? lockdep_hardirqs_on+0x9c/0x150 [ 195.097262][ T8429] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.097280][ T8429] ? clear_bhb_loop+0x60/0xb0 [ 195.097303][ T8429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.097320][ T8429] RIP: 0033:0x7f5d2718eba9 [ 195.097337][ T8429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.097353][ T8429] RSP: 002b:00007f5d2802c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 195.097374][ T8429] RAX: ffffffffffffffda RBX: 00007f5d273d5fa0 RCX: 00007f5d2718eba9 [ 195.097388][ T8429] RDX: 000000000000003e RSI: 0000200000000280 RDI: 0000000000000004 [ 195.097400][ T8429] RBP: 00007f5d2802c090 R08: 0000000000000000 R09: 0000000000000000 [ 195.097413][ T8429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.097424][ T8429] R13: 00007f5d273d6038 R14: 00007f5d273d5fa0 R15: 00007fffb8287f88 [ 195.097457][ T8429] [ 195.378909][ T6563] usb 1-1: USB disconnect, device number 52 [ 195.424188][ T5960] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 195.549720][ T8438] tipc: Started in network mode [ 195.555785][ T8438] tipc: Node identity ac1414aa, cluster identity 4711 [ 195.563332][ T8438] tipc: Enabled bearer , priority 10 [ 195.585106][ T5960] usb 4-1: Using ep0 maxpacket: 32 [ 195.592063][ T5960] usb 4-1: config 0 has an invalid interface number: 148 but max is 0 [ 195.601080][ T5960] usb 4-1: config 0 has no interface number 0 [ 195.607521][ T5960] usb 4-1: config 0 interface 148 has no altsetting 0 [ 195.653268][ T5960] usb 4-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice=c5.61 [ 195.664166][ T5960] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.672264][ T5960] usb 4-1: Product: syz [ 195.676757][ T5960] usb 4-1: Manufacturer: syz [ 195.681391][ T5960] usb 4-1: SerialNumber: syz [ 195.705378][ T5960] usb 4-1: config 0 descriptor?? [ 195.733795][ T8442] loop6: detected capacity change from 0 to 2560 [ 195.742037][ T8442] ldm_validate_partition_table(): Disk read failed. [ 195.750148][ T8442] Dev loop6: unable to read RDB block 0 [ 195.757430][ T8442] loop6: unable to read partition table [ 195.763374][ T8442] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 195.930983][ T5960] snd-usb-audio 4-1:0.148: probe with driver snd-usb-audio failed with error -71 [ 195.972888][ T5960] usb 4-1: USB disconnect, device number 54 [ 196.038921][ T8446] netlink: 16 bytes leftover after parsing attributes in process `syz.0.904'. [ 196.118719][ T8450] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 196.148643][ T8450] CIFS mount error: No usable UNC path provided in device string! [ 196.148643][ T8450] [ 196.160297][ T8450] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 196.172707][ T8450] ucma_write: process 398 (syz.0.906) changed security contexts after opening file descriptor, this is not allowed. [ 196.474408][ T5960] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 196.555503][ T910] tipc: Node number set to 2886997162 [ 196.614071][ T5960] usb 1-1: device descriptor read/64, error -71 [ 196.864099][ T5960] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 196.884158][ T6564] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 197.004115][ T5960] usb 1-1: device descriptor read/64, error -71 [ 197.036375][ T6564] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 197.045665][ T6564] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.061355][ T6564] usb 4-1: config 0 descriptor?? [ 197.114519][ T5960] usb usb1-port1: attempt power cycle [ 197.220687][ T8465] tipc: Enabling of bearer rejected, already enabled [ 197.285490][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 197.293853][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 197.425101][ T8470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.435105][ T8470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.447748][ T8470] Bluetooth: MGMT ver 1.23 [ 197.455429][ T5960] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 197.476044][ T5960] usb 1-1: device descriptor read/8, error -71 [ 197.480126][ T8470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.492732][ T8470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.589838][ T8475] FAULT_INJECTION: forcing a failure. [ 197.589838][ T8475] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 197.603377][ T8475] CPU: 1 UID: 0 PID: 8475 Comm: syz.2.914 Not tainted syzkaller #0 PREEMPT(full) [ 197.603401][ T8475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 197.603413][ T8475] Call Trace: [ 197.603421][ T8475] [ 197.603428][ T8475] dump_stack_lvl+0x189/0x250 [ 197.603451][ T8475] ? __pfx____ratelimit+0x10/0x10 [ 197.603477][ T8475] ? __pfx_dump_stack_lvl+0x10/0x10 [ 197.603494][ T8475] ? __pfx__printk+0x10/0x10 [ 197.603530][ T8475] should_fail_ex+0x414/0x560 [ 197.603556][ T8475] _copy_to_user+0x31/0xb0 [ 197.603576][ T8475] con_get_unimap+0x37c/0x460 [ 197.603607][ T8475] vt_ioctl+0x14b0/0x1f20 [ 197.603635][ T8475] ? __pfx_vt_ioctl+0x10/0x10 [ 197.603672][ T8475] ? __fget_files+0x2a/0x420 [ 197.603701][ T8475] ? tty_jobctrl_ioctl+0x369/0xb70 [ 197.603722][ T8475] ? __fget_files+0x3a0/0x420 [ 197.603745][ T8475] ? __fget_files+0x2a/0x420 [ 197.603771][ T8475] tty_ioctl+0x926/0xde0 [ 197.603796][ T8475] ? __pfx_tty_ioctl+0x10/0x10 [ 197.603821][ T8475] __se_sys_ioctl+0xfc/0x170 [ 197.603847][ T8475] do_syscall_64+0xfa/0xfa0 [ 197.603874][ T8475] ? lockdep_hardirqs_on+0x9c/0x150 [ 197.603902][ T8475] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.603922][ T8475] ? clear_bhb_loop+0x60/0xb0 [ 197.603989][ T8475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.604008][ T8475] RIP: 0033:0x7f5d2718eba9 [ 197.604020][ T8475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.604029][ T8475] RSP: 002b:00007f5d2802c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 197.604042][ T8475] RAX: ffffffffffffffda RBX: 00007f5d273d5fa0 RCX: 00007f5d2718eba9 [ 197.604050][ T8475] RDX: 0000200000000000 RSI: 0000000000004b66 RDI: 0000000000000003 [ 197.604056][ T8475] RBP: 00007f5d2802c090 R08: 0000000000000000 R09: 0000000000000000 [ 197.604063][ T8475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.604093][ T8475] R13: 00007f5d273d6038 R14: 00007f5d273d5fa0 R15: 00007fffb8287f88 [ 197.604121][ T8475] [ 197.805624][ C1] vkms_vblank_simulate: vblank timer overrun [ 197.814805][ T8462] netlink: 4 bytes leftover after parsing attributes in process `syz.3.910'. [ 197.823740][ T8462] bridge_slave_1: left allmulticast mode [ 197.829613][ T8462] bridge_slave_1: left promiscuous mode [ 197.835464][ T8462] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.850481][ T8462] bridge_slave_0: left allmulticast mode [ 197.858580][ T8462] bridge_slave_0: left promiscuous mode [ 197.864450][ T8462] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.904110][ T5960] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 197.930110][ T5960] usb 1-1: device descriptor read/8, error -71 [ 198.014124][ T6564] ath6kl: Failed to submit usb control message: -71 [ 198.027552][ T6564] ath6kl: unable to send the bmi data to the device: -71 [ 198.041170][ T6564] ath6kl: Unable to send get target info: -71 [ 198.045354][ T5960] usb usb1-port1: unable to enumerate USB device [ 198.057729][ T6564] ath6kl: Failed to init ath6kl core: -71 [ 198.066353][ T6564] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 198.085202][ T6564] usb 4-1: USB disconnect, device number 55 [ 198.820179][ T8498] netlink: 'syz.1.922': attribute type 21 has an invalid length. [ 199.074192][ T6564] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 199.214401][ T5867] Bluetooth: hci3: command 0x0406 tx timeout [ 199.240348][ T6564] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 199.274125][ T6564] usb 4-1: config 1 has no interface number 0 [ 199.274181][ T6564] usb 4-1: config 1 interface 105 has no altsetting 0 [ 199.279021][ T6564] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 199.304393][ T6564] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.312422][ T6564] usb 4-1: Product: syz [ 199.320517][ T6564] usb 4-1: Manufacturer: syz [ 199.332946][ T6564] usb 4-1: SerialNumber: syz [ 199.374358][ T8506] netlink: 'syz.2.924': attribute type 10 has an invalid length. [ 199.389187][ T8506] netlink: 40 bytes leftover after parsing attributes in process `syz.2.924'. [ 199.443780][ T8506] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 199.496866][ T8506] team0: Failed to send options change via netlink (err -105) [ 199.506750][ T8506] team0: Port device geneve0 added [ 199.517234][ T776] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.526692][ T776] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.535567][ T5867] Bluetooth: hci2: command 0x0401 tx timeout [ 199.541741][ T52] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 199.555639][ T776] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.568262][ T8515] overlayfs: failed to resolve './file1': -2 [ 199.575990][ T1161] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.706602][ T6563] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 199.878040][ T6563] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 199.890055][ T6563] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 199.903024][ T6563] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 199.917117][ T6563] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 199.929936][ T6563] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 199.950791][ T6563] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 199.960760][ T6563] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 199.969471][ T6563] usb 1-1: Product: syz [ 199.973912][ T6563] usb 1-1: Manufacturer: syz [ 199.984929][ T6563] cdc_wdm 1-1:1.0: skipping garbage [ 199.990216][ T6563] cdc_wdm 1-1:1.0: skipping garbage [ 199.998124][ T6563] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 200.004148][ T6563] cdc_wdm 1-1:1.0: Unknown control protocol [ 200.111619][ T8535] fuse: blksize only supported for fuseblk [ 200.156684][ T8538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.166138][ T8538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.178580][ T8538] netlink: 48 bytes leftover after parsing attributes in process `syz.2.935'. [ 200.179740][ T6564] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: 0 [ 200.189164][ T8538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.208310][ T8538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.375960][ T6564] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 200.387548][ T6564] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 200.411304][ T6564] aqc111 4-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, f2:e7:be:6c:97:7b [ 200.849792][ T8565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.854127][ T30] audit: type=1107 audit(1757644836.601:380): pid=8562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 200.863177][ T8565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.313270][ T5529] aqc111 4-1:1.105 eth1: Failed to write(0x1) reg index 0x0001: -71 [ 201.314897][ T6564] usb 4-1: USB disconnect, device number 56 [ 201.321611][ T5529] aqc111 4-1:1.105 eth1: Failed to write(0x1) reg index 0x0001: -19 [ 201.338560][ T6564] aqc111 4-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 201.340225][ T5529] aqc111 4-1:1.105 eth1: Failed to read(0x1) reg index 0x0001: -19 [ 201.358130][ T5529] aqc111 4-1:1.105 eth1: Failed to write(0x1) reg index 0x0001: -19 [ 201.366628][ T5529] aqc111 4-1:1.105 eth1: Failed to write(0x61) reg index 0x0000: -19 [ 201.375978][ T5529] aqc111 4-1:1.105 eth1: Error submitting the control message: status=-19 [ 201.385016][ T5529] aqc111 4-1:1.105 eth1: Error submitting the control message: status=-19 [ 201.394453][ T5529] aqc111 4-1:1.105 eth1: Error submitting the control message: status=-19 [ 201.403139][ T5529] aqc111 4-1:1.105 eth1: Error submitting the control message: status=-19 [ 201.439233][ T6564] aqc111 4-1:1.105 eth1: Failed to read(0x1) reg index 0x0002: -19 [ 201.450038][ T6564] aqc111 4-1:1.105 eth1: Failed to write(0x1) reg index 0x0002: -19 [ 201.460809][ T8571] overlayfs: failed to clone upperpath [ 201.463447][ T6564] aqc111 4-1:1.105 eth1: Failed to write(0x1) reg index 0x0002: -19 [ 201.480272][ T6564] aqc111 4-1:1.105 eth1: Failed to write(0x61) reg index 0x0000: -19 [ 201.539556][ T5867] Bluetooth: hci1: command 0x0406 tx timeout [ 201.563991][ T8573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.575675][ T8573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.614190][ T5873] Bluetooth: hci2: command 0x0401 tx timeout [ 201.677997][ T6564] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 201.700270][ T6564] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 201.722318][ T6564] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 202.100563][ T8597] fuse: Unknown parameter 'group_i00000000000000000000' [ 202.364758][ T6563] usb 1-1: USB disconnect, device number 57 [ 202.376615][ T910] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 202.489361][ T8614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.499354][ T8614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.520462][ T8614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.529759][ T8614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.547608][ T910] usb 4-1: Using ep0 maxpacket: 32 [ 202.563212][ T910] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 202.574355][ T910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.582396][ T910] usb 4-1: Product: syz [ 202.594438][ T910] usb 4-1: Manufacturer: syz [ 202.604048][ T910] usb 4-1: SerialNumber: syz [ 202.612633][ T910] usb 4-1: config 0 descriptor?? [ 202.620923][ T910] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 203.242893][ T8623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.250520][ T8624] fuse: Unknown parameter 'group_i00000000000000000000' [ 203.260281][ T8623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.634128][ T6563] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 203.784038][ T6563] usb 1-1: Using ep0 maxpacket: 8 [ 203.791245][ T6563] usb 1-1: unable to get BOS descriptor or descriptor too short [ 203.800620][ T6563] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 203.809761][ T6563] usb 1-1: config 1 has no interface number 1 [ 203.816097][ T6563] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 203.831531][ T6563] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 203.840891][ T6563] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.849464][ T6563] usb 1-1: Product: syz [ 203.853753][ T6563] usb 1-1: Manufacturer: syz [ 203.858613][ T6563] usb 1-1: SerialNumber: syz [ 203.940064][ T8639] No source specified [ 204.072804][ T8631] netlink: 48 bytes leftover after parsing attributes in process `syz.0.963'. [ 204.092575][ T6563] usb 1-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 204.102297][ T6563] usb 1-1: 2:1 : sample bitwidth 128 in over sample bytes 8 [ 204.110051][ T6563] usb 1-1: 2:1 : unsupported sample bitwidth 128 in 8 bytes [ 204.135728][ T6563] usb 1-1: USB disconnect, device number 58 [ 204.163209][ T6001] udevd[6001]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 204.559444][ T8648] fuse: Unknown parameter 'group_id00000000000000000000' [ 204.638307][ T8650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.651197][ T8650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.550259][ T8670] fuse: Unknown parameter 'group_id00000000000000000000' [ 205.596160][ T30] audit: type=1326 audit(1757644841.351:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8671 comm="syz.0.979" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5b9998eba9 code=0x0 [ 205.704113][ T8673] netlink: 40 bytes leftover after parsing attributes in process `syz.0.979'. [ 205.715403][ T910] gspca_stk1135: reg_w 0x352 err -71 [ 205.725984][ T910] gspca_stk1135: serial bus timeout: status=0x00 [ 205.732395][ T910] gspca_stk1135: Sensor write failed [ 205.738175][ T910] gspca_stk1135: serial bus timeout: status=0x00 [ 205.745017][ T910] gspca_stk1135: Sensor write failed [ 205.750299][ T910] gspca_stk1135: serial bus timeout: status=0x00 [ 205.756723][ T910] gspca_stk1135: Sensor read failed [ 205.761940][ T910] gspca_stk1135: serial bus timeout: status=0x00 [ 205.768295][ T910] gspca_stk1135: Sensor read failed [ 205.773505][ T910] gspca_stk1135: Detected sensor type unknown (0x0) [ 205.778545][ T8674] sctp: [Deprecated]: syz.0.979 (pid 8674) Use of struct sctp_assoc_value in delayed_ack socket option. [ 205.778545][ T8674] Use struct sctp_sack_info instead [ 205.780421][ T910] gspca_stk1135: serial bus timeout: status=0x00 [ 205.802831][ T910] gspca_stk1135: Sensor read failed [ 205.808672][ T910] gspca_stk1135: serial bus timeout: status=0x00 [ 205.815346][ T910] gspca_stk1135: Sensor read failed [ 205.820804][ T910] gspca_stk1135: serial bus timeout: status=0x00 [ 205.827153][ T910] gspca_stk1135: Sensor write failed [ 205.832447][ T910] gspca_stk1135: serial bus timeout: status=0x00 [ 205.838818][ T910] gspca_stk1135: Sensor write failed [ 205.844197][ T910] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 205.859921][ T910] usb 4-1: USB disconnect, device number 57 [ 206.124954][ T8689] netlink: 104 bytes leftover after parsing attributes in process `syz.1.984'. [ 206.235487][ T8695] fuse: Unknown parameter 'group_id00000000000000000000' [ 206.634409][ T8705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.647216][ T8705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.678804][ T8705] kvm_intel: kvm [8704]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x3 [ 206.856460][ T8715] 9pnet_fd: Insufficient options for proto=fd [ 207.472836][ T8723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.474235][ T8723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.584564][ T8726] fuse: Bad value for 'user_id' [ 207.584587][ T8726] fuse: Bad value for 'user_id' [ 208.670166][ T8752] fuse: Bad value for 'user_id' [ 208.690376][ T8752] fuse: Bad value for 'user_id' [ 208.964395][ T8761] usb usb8: usbfs: process 8761 (syz.3.1012) did not claim interface 0 before use [ 209.044131][ T910] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 209.214146][ T910] usb 1-1: Using ep0 maxpacket: 32 [ 209.223090][ T910] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 209.232427][ T910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.240508][ T910] usb 1-1: Product: syz [ 209.244816][ T910] usb 1-1: Manufacturer: syz [ 209.249421][ T910] usb 1-1: SerialNumber: syz [ 209.259557][ T910] usb 1-1: config 0 descriptor?? [ 209.278911][ T910] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 210.237812][ T8779] fuse: Bad value for 'user_id' [ 210.242731][ T8779] fuse: Bad value for 'user_id' [ 210.490144][ T8791] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1025'. [ 210.499590][ T8791] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1025'. [ 210.509841][ T8791] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1025'. [ 211.153334][ T8801] fuse: Bad value for 'fd' [ 211.283117][ T8807] FAULT_INJECTION: forcing a failure. [ 211.283117][ T8807] name failslab, interval 1, probability 0, space 0, times 0 [ 211.297767][ T8807] CPU: 0 UID: 0 PID: 8807 Comm: syz.2.1032 Not tainted syzkaller #0 PREEMPT(full) [ 211.297799][ T8807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 211.297812][ T8807] Call Trace: [ 211.297820][ T8807] [ 211.297828][ T8807] dump_stack_lvl+0x189/0x250 [ 211.297853][ T8807] ? __pfx____ratelimit+0x10/0x10 [ 211.297881][ T8807] ? __pfx_dump_stack_lvl+0x10/0x10 [ 211.297900][ T8807] ? __pfx__printk+0x10/0x10 [ 211.297935][ T8807] ? __pfx___might_resched+0x10/0x10 [ 211.297957][ T8807] ? fs_reclaim_acquire+0x7d/0x100 [ 211.297986][ T8807] should_fail_ex+0x414/0x560 [ 211.298015][ T8807] should_failslab+0xa8/0x100 [ 211.298041][ T8807] __kmalloc_noprof+0xcb/0x7f0 [ 211.298060][ T8807] ? tomoyo_encode+0x28b/0x550 [ 211.298103][ T8807] tomoyo_encode+0x28b/0x550 [ 211.298138][ T8807] tomoyo_realpath_from_path+0x58d/0x5d0 [ 211.298180][ T8807] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 211.298204][ T8807] tomoyo_path_number_perm+0x1e8/0x5a0 [ 211.298228][ T8807] ? register_lock_class+0x51/0x320 [ 211.298250][ T8807] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 211.298277][ T8807] ? __lock_acquire+0xab9/0xd20 [ 211.298343][ T8807] ? __pfx_current_check_access_path+0x10/0x10 [ 211.298381][ T8807] tomoyo_path_mknod+0x142/0x190 [ 211.298405][ T8807] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 211.298434][ T8807] ? __pfx_filename_create+0x10/0x10 [ 211.298454][ T8807] ? __might_fault+0xb0/0x130 [ 211.298479][ T8807] security_path_mknod+0x17e/0x3a0 [ 211.298513][ T8807] do_mknodat+0x274/0x4d0 [ 211.298553][ T8807] ? __pfx_do_mknodat+0x10/0x10 [ 211.298579][ T8807] ? strncpy_from_user+0x150/0x290 [ 211.298605][ T8807] ? getname_flags+0x1e5/0x540 [ 211.298637][ T8807] __x64_sys_mknodat+0xa7/0xc0 [ 211.298661][ T8807] do_syscall_64+0xfa/0xfa0 [ 211.298688][ T8807] ? lockdep_hardirqs_on+0x9c/0x150 [ 211.298720][ T8807] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.298738][ T8807] ? clear_bhb_loop+0x60/0xb0 [ 211.298762][ T8807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.298782][ T8807] RIP: 0033:0x7f5d2718eba9 [ 211.298804][ T8807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.298821][ T8807] RSP: 002b:00007f5d2802c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 211.298842][ T8807] RAX: ffffffffffffffda RBX: 00007f5d273d5fa0 RCX: 00007f5d2718eba9 [ 211.298856][ T8807] RDX: 0000000000000040 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 211.298870][ T8807] RBP: 00007f5d2802c090 R08: 0000000000000000 R09: 0000000000000000 [ 211.298883][ T8807] R10: 0000000000000103 R11: 0000000000000246 R12: 0000000000000001 [ 211.298894][ T8807] R13: 00007f5d273d6038 R14: 00007f5d273d5fa0 R15: 00007fffb8287f88 [ 211.298929][ T8807] [ 211.298974][ T8807] ERROR: Out of memory at tomoyo_realpath_from_path. [ 212.354791][ T910] gspca_stk1135: reg_w 0x352 err -71 [ 212.363249][ T910] gspca_stk1135: serial bus timeout: status=0x00 [ 212.369951][ T910] gspca_stk1135: Sensor write failed [ 212.375862][ T910] gspca_stk1135: serial bus timeout: status=0x00 [ 212.382201][ T910] gspca_stk1135: Sensor write failed [ 212.388475][ T910] gspca_stk1135: serial bus timeout: status=0x00 [ 212.395081][ T910] gspca_stk1135: Sensor read failed [ 212.400378][ T910] gspca_stk1135: serial bus timeout: status=0x00 [ 212.406759][ T910] gspca_stk1135: Sensor read failed [ 212.411955][ T910] gspca_stk1135: Detected sensor type unknown (0x0) [ 212.419369][ T910] gspca_stk1135: serial bus timeout: status=0x00 [ 212.425841][ T910] gspca_stk1135: Sensor read failed [ 212.431079][ T910] gspca_stk1135: serial bus timeout: status=0x00 [ 212.437511][ T910] gspca_stk1135: Sensor read failed [ 212.442723][ T910] gspca_stk1135: serial bus timeout: status=0x00 [ 212.449107][ T910] gspca_stk1135: Sensor write failed [ 212.454708][ T910] gspca_stk1135: serial bus timeout: status=0x00 [ 212.461082][ T910] gspca_stk1135: Sensor write failed [ 212.466527][ T910] stk1135 1-1:0.0: probe with driver stk1135 failed with error -71 [ 212.491590][ T910] usb 1-1: USB disconnect, device number 59 [ 212.892278][ T8825] fuse: Bad value for 'fd' [ 212.951738][ T8827] FAULT_INJECTION: forcing a failure. [ 212.951738][ T8827] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 212.965061][ T8827] CPU: 1 UID: 0 PID: 8827 Comm: syz.0.1040 Not tainted syzkaller #0 PREEMPT(full) [ 212.965089][ T8827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 212.965102][ T8827] Call Trace: [ 212.965110][ T8827] [ 212.965118][ T8827] dump_stack_lvl+0x189/0x250 [ 212.965142][ T8827] ? __pfx____ratelimit+0x10/0x10 [ 212.965171][ T8827] ? __pfx_dump_stack_lvl+0x10/0x10 [ 212.965188][ T8827] ? __pfx__printk+0x10/0x10 [ 212.965218][ T8827] ? __might_fault+0xb0/0x130 [ 212.965260][ T8827] should_fail_ex+0x414/0x560 [ 212.965289][ T8827] _copy_from_user+0x2d/0xb0 [ 212.965310][ T8827] kvm_arch_vcpu_ioctl+0xd03/0x2a80 [ 212.965342][ T8827] ? kvm_arch_vcpu_ioctl+0xcc3/0x2a80 [ 212.965369][ T8827] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 212.965403][ T8827] ? __lock_acquire+0xab9/0xd20 [ 212.965448][ T8827] ? is_bpf_text_address+0x26/0x2b0 [ 212.965475][ T8827] ? is_bpf_text_address+0x292/0x2b0 [ 212.965496][ T8827] ? is_bpf_text_address+0x26/0x2b0 [ 212.965521][ T8827] ? kernel_text_address+0xa5/0xe0 [ 212.965542][ T8827] ? __kernel_text_address+0xd/0x40 [ 212.965560][ T8827] ? unwind_get_return_address+0x4d/0x90 [ 212.965586][ T8827] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 212.965615][ T8827] ? arch_stack_walk+0xfc/0x150 [ 212.965653][ T8827] ? stack_trace_save+0x9c/0xe0 [ 212.965683][ T8827] ? stack_depot_save_flags+0x40/0x860 [ 212.965725][ T8827] ? __lock_acquire+0xab9/0xd20 [ 212.965756][ T8827] ? __mutex_trylock_common+0x153/0x260 [ 212.965785][ T8827] ? __pfx___mutex_trylock_common+0x10/0x10 [ 212.965817][ T8827] ? rcu_is_watching+0x15/0xb0 [ 212.965842][ T8827] ? trace_contention_end+0x39/0x120 [ 212.965868][ T8827] ? __mutex_lock+0x335/0x1350 [ 212.965896][ T8827] ? kasan_quarantine_put+0xdd/0x220 [ 212.965916][ T8827] ? lockdep_hardirqs_on+0x9c/0x150 [ 212.965951][ T8827] ? kvm_vcpu_ioctl+0x22e/0xe90 [ 212.965973][ T8827] ? __pfx___mutex_lock+0x10/0x10 [ 212.965992][ T8827] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 212.966022][ T8827] ? do_vfs_ioctl+0xbe8/0x1430 [ 212.966042][ T8827] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 212.966068][ T8827] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 212.966094][ T8827] kvm_vcpu_ioctl+0x74d/0xe90 [ 212.966120][ T8827] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 212.966165][ T8827] ? __fget_files+0x2a/0x420 [ 212.966195][ T8827] ? __fget_files+0x3a0/0x420 [ 212.966219][ T8827] ? __fget_files+0x2a/0x420 [ 212.966248][ T8827] ? bpf_lsm_file_ioctl+0x9/0x20 [ 212.966277][ T8827] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 212.966297][ T8827] __se_sys_ioctl+0xfc/0x170 [ 212.966321][ T8827] do_syscall_64+0xfa/0xfa0 [ 212.966348][ T8827] ? lockdep_hardirqs_on+0x9c/0x150 [ 212.966377][ T8827] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.966396][ T8827] ? clear_bhb_loop+0x60/0xb0 [ 212.966421][ T8827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.966440][ T8827] RIP: 0033:0x7f5b9998eba9 [ 212.966459][ T8827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.966476][ T8827] RSP: 002b:00007f5b9a7cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 212.966498][ T8827] RAX: ffffffffffffffda RBX: 00007f5b99bd5fa0 RCX: 00007f5b9998eba9 [ 212.966514][ T8827] RDX: 0000200000000040 RSI: 00000000c008ae88 RDI: 0000000000000007 [ 212.966528][ T8827] RBP: 00007f5b9a7cf090 R08: 0000000000000000 R09: 0000000000000000 [ 212.966540][ T8827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.966552][ T8827] R13: 00007f5b99bd6038 R14: 00007f5b99bd5fa0 R15: 00007ffd7e6fa008 [ 212.966588][ T8827] [ 213.654209][ T910] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 213.784179][ T5960] usb 1-1: new full-speed USB device number 60 using dummy_hcd [ 213.816050][ T910] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.826651][ T910] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 213.835770][ T910] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 213.844908][ T910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.864782][ T910] usb 4-1: config 0 descriptor?? [ 213.935029][ T5960] usb 1-1: device descriptor read/64, error -71 [ 214.041604][ T8848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.050524][ T8848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.184049][ T5960] usb 1-1: new full-speed USB device number 61 using dummy_hcd [ 214.197309][ T6563] usb 4-1: USB disconnect, device number 58 [ 214.334603][ T5960] usb 1-1: device descriptor read/64, error -71 [ 214.446119][ T5960] usb usb1-port1: attempt power cycle [ 214.749260][ T8857] fuse: Bad value for 'fd' [ 214.784115][ T5960] usb 1-1: new full-speed USB device number 62 using dummy_hcd [ 214.817906][ T5960] usb 1-1: device descriptor read/8, error -71 [ 215.013782][ T8868] loop6: detected capacity change from 0 to 524287999 [ 215.064224][ T5960] usb 1-1: new full-speed USB device number 63 using dummy_hcd [ 215.102568][ T5960] usb 1-1: device descriptor read/8, error -71 [ 215.225584][ T5960] usb usb1-port1: unable to enumerate USB device [ 215.324077][ T6563] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 215.380445][ T8884] fuse: Bad value for 'fd' [ 215.474069][ T6563] usb 4-1: Using ep0 maxpacket: 32 [ 215.482571][ T6563] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 215.491727][ T6563] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.499763][ T6563] usb 4-1: Product: syz [ 215.504016][ T6563] usb 4-1: Manufacturer: syz [ 215.508622][ T6563] usb 4-1: SerialNumber: syz [ 215.515587][ T6563] usb 4-1: config 0 descriptor?? [ 215.523628][ T6563] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 215.877705][ T8889] netlink: 'syz.1.1063': attribute type 5 has an invalid length. [ 215.887857][ T8889] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.1063'. [ 216.262586][ T52] Bluetooth: hci1: unexpected event for opcode 0x2630 [ 216.622282][ T8908] fuse: Bad value for 'fd' [ 217.369517][ T8922] tipc: Enabled bearer , priority 10 [ 217.631405][ T8933] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1078'. [ 217.642694][ T8933] ip6gretap0: entered promiscuous mode [ 217.651821][ T8933] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1078'. [ 217.722023][ T8937] fuse: Bad value for 'fd' [ 217.751999][ T8940] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:16x2160 (0x33424752, 8, 0, 0, 0) [ 217.857751][ T52] Bluetooth: hci1: unexpected event for opcode 0x2630 [ 218.401076][ T8952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.410065][ T8952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.485134][ T888] tipc: Node number set to 1 [ 218.592366][ T6563] gspca_stk1135: reg_w 0x352 err -71 [ 218.598920][ T6563] gspca_stk1135: serial bus timeout: status=0x00 [ 218.605627][ T6563] gspca_stk1135: Sensor write failed [ 218.610948][ T6563] gspca_stk1135: serial bus timeout: status=0x00 [ 218.618373][ T6563] gspca_stk1135: Sensor write failed [ 218.623684][ T6563] gspca_stk1135: serial bus timeout: status=0x00 [ 218.630176][ T6563] gspca_stk1135: Sensor read failed [ 218.635618][ T6563] gspca_stk1135: serial bus timeout: status=0x00 [ 218.641977][ T6563] gspca_stk1135: Sensor read failed [ 218.647263][ T6563] gspca_stk1135: Detected sensor type unknown (0x0) [ 218.653891][ T6563] gspca_stk1135: serial bus timeout: status=0x00 [ 218.660930][ T6563] gspca_stk1135: Sensor read failed [ 218.666247][ T6563] gspca_stk1135: serial bus timeout: status=0x00 [ 218.672674][ T6563] gspca_stk1135: Sensor read failed [ 218.677979][ T6563] gspca_stk1135: serial bus timeout: status=0x00 [ 218.684416][ T6563] gspca_stk1135: Sensor write failed [ 218.689728][ T6563] gspca_stk1135: serial bus timeout: status=0x00 [ 218.696992][ T6563] gspca_stk1135: Sensor write failed [ 218.702371][ T6563] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 218.714452][ T6563] usb 4-1: USB disconnect, device number 59 [ 218.956554][ T8965] fuse: Invalid rootmode [ 218.999393][ T8967] 9pnet: p9_errstr2errno: server reported unknown error @ [ 219.015818][ T8969] netlink: 'syz.0.1091': attribute type 5 has an invalid length. [ 219.051286][ T8970] tmpfs: Unknown parameter 'usrquotaª' [ 219.059610][ T52] Bluetooth: hci2: unexpected event for opcode 0x2630 [ 219.547773][ T8993] fuse: Invalid rootmode [ 219.652560][ T8999] netlink: 'syz.3.1101': attribute type 3 has an invalid length. [ 219.884247][ T5960] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 220.034097][ T5960] usb 1-1: Using ep0 maxpacket: 32 [ 220.043749][ T5960] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 220.057852][ T5960] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.067466][ T5960] usb 1-1: Product: syz [ 220.071745][ T5960] usb 1-1: Manufacturer: syz [ 220.081847][ T5960] usb 1-1: SerialNumber: syz [ 220.091248][ T5960] usb 1-1: config 0 descriptor?? [ 220.106984][ T5960] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 220.439675][ T52] Bluetooth: hci3: unexpected event for opcode 0x2662 [ 220.681936][ T9025] fuse: Invalid rootmode [ 221.102140][ T9043] fuse: Bad value for 'rootmode' [ 221.480557][ T9053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.490682][ T9053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.089885][ T52] Bluetooth: hci1: unexpected event for opcode 0x2662 [ 222.316661][ T9068] fuse: Bad value for 'rootmode' [ 222.653305][ T9072] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1131'. [ 223.186135][ T9096] fuse: Bad value for 'rootmode' [ 223.191328][ T5960] gspca_stk1135: reg_w 0x352 err -71 [ 223.206532][ T5960] gspca_stk1135: serial bus timeout: status=0x00 [ 223.212905][ T5960] gspca_stk1135: Sensor write failed [ 223.238766][ T5960] gspca_stk1135: serial bus timeout: status=0x00 [ 223.245272][ T52] Bluetooth: hci3: unexpected event for opcode 0x2662 [ 223.255574][ T5960] gspca_stk1135: Sensor write failed [ 223.260914][ T5960] gspca_stk1135: serial bus timeout: status=0x00 [ 223.269792][ T5960] gspca_stk1135: Sensor read failed [ 223.277812][ T5960] gspca_stk1135: serial bus timeout: status=0x00 [ 223.286103][ T5960] gspca_stk1135: Sensor read failed [ 223.292768][ T5960] gspca_stk1135: Detected sensor type unknown (0x0) [ 223.299917][ T5960] gspca_stk1135: serial bus timeout: status=0x00 [ 223.306419][ T5960] gspca_stk1135: Sensor read failed [ 223.312157][ T5960] gspca_stk1135: serial bus timeout: status=0x00 [ 223.318573][ T5960] gspca_stk1135: Sensor read failed [ 223.323795][ T5960] gspca_stk1135: serial bus timeout: status=0x00 [ 223.330242][ T5960] gspca_stk1135: Sensor write failed [ 223.337625][ T5960] gspca_stk1135: serial bus timeout: status=0x00 [ 223.344000][ T5960] gspca_stk1135: Sensor write failed [ 223.349342][ T5960] stk1135 1-1:0.0: probe with driver stk1135 failed with error -71 [ 223.360744][ T5960] usb 1-1: USB disconnect, device number 64 [ 223.524189][ T6563] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 223.579681][ T9103] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 223.676160][ T6563] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 223.686731][ T6563] usb 4-1: config 2 has 1 interface, different from the descriptor's value: 4 [ 223.698599][ T6563] usb 4-1: New USB device found, idVendor=0403, idProduct=da71, bcdDevice= 6.1f [ 223.717190][ T6563] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.726158][ T6563] usb 4-1: Product: syz [ 223.731239][ T6563] usb 4-1: Manufacturer: syz [ 223.738984][ T6563] usb 4-1: SerialNumber: syz [ 223.968717][ T6563] usb 4-1: NDI device with a latency value of 1 [ 224.177314][ T6563] ftdi_sio 4-1:2.0: FTDI USB Serial Device converter detected [ 224.195538][ T6563] ftdi_sio ttyUSB0: unknown device type: 0x61f [ 224.207907][ T6563] usb 4-1: USB disconnect, device number 60 [ 224.228066][ T6563] ftdi_sio 4-1:2.0: device disconnected [ 224.496116][ T52] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 224.505901][ T52] Bluetooth: hci3: Injecting HCI hardware error event [ 224.515678][ T5873] Bluetooth: hci3: hardware error 0x00 [ 224.585665][ T9126] fuse: Unknown parameter 'use00000000000000000000' [ 224.934101][ T6563] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 225.064066][ T5960] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 225.084063][ T6563] usb 1-1: Using ep0 maxpacket: 32 [ 225.092252][ T6563] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 225.101905][ T6563] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.109950][ T6563] usb 1-1: Product: syz [ 225.114227][ T6563] usb 1-1: Manufacturer: syz [ 225.118877][ T6563] usb 1-1: SerialNumber: syz [ 225.126546][ T6563] usb 1-1: config 0 descriptor?? [ 225.135991][ T6563] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 225.219538][ T5960] usb 4-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 225.229021][ T5960] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.237928][ T5960] usb 4-1: Product: syz [ 225.242111][ T5960] usb 4-1: Manufacturer: syz [ 225.246980][ T5960] usb 4-1: SerialNumber: syz [ 225.257326][ T5960] usb 4-1: config 0 descriptor?? [ 225.283328][ T52] Bluetooth: hci4: urb ffff888076cfb300 submission failed (2) [ 225.451169][ T9150] fuse: Unknown parameter 'use00000000000000000000' [ 225.579011][ T9140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.592239][ T9140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.595107][ T9153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.628640][ T9153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.018821][ T9169] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1166'. [ 226.095057][ T52] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 226.105054][ T52] Bluetooth: hci1: Injecting HCI hardware error event [ 226.113074][ T52] Bluetooth: hci1: hardware error 0x00 [ 226.359875][ T9175] fuse: Unknown parameter 'use00000000000000000000' [ 226.392438][ T6396] raw-gadget.1 gadget.2: failed to queue disconnect event [ 226.574543][ T5873] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 226.988832][ T9185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.003355][ T9185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.171835][ T9192] dvmrp1: entered allmulticast mode [ 227.945301][ T9201] fuse: Unknown parameter 'user_i00000000000000000000' [ 228.026769][ T9206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.043139][ T9206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.050333][ T9205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.061801][ T9205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.174389][ T52] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 228.270944][ T13] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.357392][ T13] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.451769][ T13] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.521140][ T13] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.626655][ T9221] fuse: Unknown parameter 'user_i00000000000000000000' [ 228.724556][ T6563] gspca_stk1135: reg_w 0x353 err -110 [ 228.741533][ T6563] gspca_stk1135: serial bus timeout: status=0x00 [ 228.763440][ T6563] gspca_stk1135: Sensor write failed [ 228.773577][ T6563] gspca_stk1135: serial bus timeout: status=0x00 [ 228.796537][ T6563] gspca_stk1135: Sensor write failed [ 228.801905][ T6563] gspca_stk1135: serial bus timeout: status=0x00 [ 228.824235][ T6563] gspca_stk1135: Sensor read failed [ 228.838134][ T6563] gspca_stk1135: serial bus timeout: status=0x00 [ 228.859090][ T13] bridge_slave_1: left allmulticast mode [ 228.865574][ T13] bridge_slave_1: left promiscuous mode [ 228.865968][ T6563] gspca_stk1135: Sensor read failed [ 228.873097][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.897428][ T13] bridge_slave_0: left allmulticast mode [ 228.907093][ T6563] gspca_stk1135: Detected sensor type unknown (0x0) [ 228.918244][ T13] bridge_slave_0: left promiscuous mode [ 228.927386][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.934067][ T6563] gspca_stk1135: serial bus timeout: status=0x00 [ 228.940898][ T6563] gspca_stk1135: Sensor read failed [ 228.954076][ T6563] gspca_stk1135: serial bus timeout: status=0x00 [ 228.992559][ T6563] gspca_stk1135: Sensor read failed [ 229.010031][ T6563] gspca_stk1135: serial bus timeout: status=0x00 [ 229.024798][ T5873] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 229.034949][ T5873] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 229.045616][ T6563] gspca_stk1135: Sensor write failed [ 229.050957][ T6563] gspca_stk1135: serial bus timeout: status=0x00 [ 229.057594][ T5873] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 229.066419][ T6563] gspca_stk1135: Sensor write failed [ 229.072118][ T6563] stk1135 1-1:0.0: probe with driver stk1135 failed with error -110 [ 229.080392][ T5873] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 229.091361][ T5873] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 229.184468][ T9230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.198393][ T9230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.470707][ T13] team0: Port device geneve0 removed [ 229.488718][ T5960] usb 1-1: USB disconnect, device number 65 [ 229.711220][ T9230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.727660][ T9230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.781492][ T9250] overlayfs: missing 'lowerdir' [ 229.845303][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 229.863795][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 229.877885][ T13] bond0 (unregistering): Released all slaves [ 230.182246][ T9267] fuse: Unknown parameter 'user_i00000000000000000000' [ 230.279037][ T9226] chnl_net:caif_netlink_parms(): no params data found [ 230.573715][ T9226] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.603428][ T9226] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.630585][ T9226] bridge_slave_0: entered allmulticast mode [ 230.642776][ T9285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.647786][ T9226] bridge_slave_0: entered promiscuous mode [ 230.662368][ T9226] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.673002][ T9285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.693084][ T9226] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.705919][ T9226] bridge_slave_1: entered allmulticast mode [ 230.715871][ T9226] bridge_slave_1: entered promiscuous mode [ 230.776157][ T9226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.794735][ T9226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.861616][ T9226] team0: Port device team_slave_0 added [ 230.869230][ T9295] tipc: Enabling of bearer rejected, already enabled [ 230.887798][ T9226] team0: Port device team_slave_1 added [ 230.973579][ T9226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.991693][ T9226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.018664][ T9226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.032222][ T9226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.039330][ T9226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.065573][ T9226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.122917][ T9226] hsr_slave_0: entered promiscuous mode [ 231.132043][ T9226] hsr_slave_1: entered promiscuous mode [ 231.139013][ T52] Bluetooth: hci1: command tx timeout [ 231.146705][ T9226] debugfs: 'hsr0' already exists in 'hsr' [ 231.153052][ T9226] Cannot create hsr debugfs directory [ 231.187778][ T9301] fuse: Unknown parameter 'user_id00000000000000000000' [ 231.578665][ T13] tipc: Disabling bearer [ 231.594509][ T13] tipc: Left network mode [ 231.773774][ T9226] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 231.822389][ T9226] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 231.880463][ T9226] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 231.910081][ T9226] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 232.166876][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.186330][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.260484][ T9340] fuse: Unknown parameter 'user_id00000000000000000000' [ 232.864310][ T5961] usb 1-1: new full-speed USB device number 66 using dummy_hcd [ 232.910894][ T9354] cgroup: Invalid name [ 232.948158][ T13] team0 (unregistering): Port device team_slave_1 removed [ 233.027688][ T5961] usb 1-1: unable to get BOS descriptor set [ 233.039273][ T5961] usb 1-1: not running at top speed; connect to a high speed hub [ 233.048568][ T13] team0 (unregistering): Port device team_slave_0 removed [ 233.061711][ T5961] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.091225][ T5961] usb 1-1: config 0 has no interfaces? [ 233.104435][ T5961] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 233.122062][ T5961] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.150653][ T5961] usb 1-1: Product: syz [ 233.160149][ T5961] usb 1-1: Manufacturer: syz [ 233.172965][ T9359] fuse: Unknown parameter 'user_id00000000000000000000' [ 233.180179][ T5961] usb 1-1: SerialNumber: syz [ 233.192618][ T5961] usb 1-1: config 0 descriptor?? [ 233.224249][ T52] Bluetooth: hci1: command tx timeout [ 233.429434][ T9344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.452865][ T9344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.489699][ T5961] usb 1-1: USB disconnect, device number 66 [ 233.960046][ T9226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.999052][ T9226] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.043022][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.050228][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.089565][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.096792][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.262621][ T9387] FAULT_INJECTION: forcing a failure. [ 234.262621][ T9387] name failslab, interval 1, probability 0, space 0, times 0 [ 234.290461][ T9387] CPU: 1 UID: 0 PID: 9387 Comm: syz.0.1226 Not tainted syzkaller #0 PREEMPT(full) [ 234.290488][ T9387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 234.290500][ T9387] Call Trace: [ 234.290509][ T9387] [ 234.290517][ T9387] dump_stack_lvl+0x189/0x250 [ 234.290542][ T9387] ? __pfx____ratelimit+0x10/0x10 [ 234.290570][ T9387] ? __pfx_dump_stack_lvl+0x10/0x10 [ 234.290588][ T9387] ? __pfx__printk+0x10/0x10 [ 234.290619][ T9387] ? __pfx___might_resched+0x10/0x10 [ 234.290641][ T9387] ? fs_reclaim_acquire+0x7d/0x100 [ 234.290669][ T9387] should_fail_ex+0x414/0x560 [ 234.290699][ T9387] should_failslab+0xa8/0x100 [ 234.290724][ T9387] kmem_cache_alloc_noprof+0x74/0x6e0 [ 234.290745][ T9387] ? fuse_get_req+0x7b9/0x10b0 [ 234.290771][ T9387] ? stack_trace_save+0x9c/0xe0 [ 234.290802][ T9387] fuse_get_req+0x7b9/0x10b0 [ 234.290828][ T9387] ? stack_depot_save_flags+0x40/0x860 [ 234.290851][ T9387] ? is_bpf_text_address+0x292/0x2b0 [ 234.290877][ T9387] ? kasan_save_track+0x4f/0x80 [ 234.290897][ T9387] ? __pfx_fuse_get_req+0x10/0x10 [ 234.290921][ T9387] ? fuse_atomic_open+0x173/0x440 [ 234.290942][ T9387] ? path_openat+0xf66/0x3830 [ 234.290958][ T9387] ? do_filp_open+0x1fa/0x410 [ 234.290973][ T9387] ? do_sys_openat2+0x121/0x1c0 [ 234.290989][ T9387] ? __x64_sys_openat+0x138/0x170 [ 234.291004][ T9387] ? do_syscall_64+0xfa/0xfa0 [ 234.291031][ T9387] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.291061][ T9387] __fuse_simple_request+0x2aa/0x18d0 [ 234.291099][ T9387] ? __pfx___fuse_simple_request+0x10/0x10 [ 234.291145][ T9387] ? __kasan_kmalloc+0x93/0xb0 [ 234.291167][ T9387] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 234.291197][ T9387] fuse_lookup_name+0x34c/0x860 [ 234.291217][ T9387] ? __lock_acquire+0xab9/0xd20 [ 234.291249][ T9387] ? __pfx_fuse_lookup_name+0x10/0x10 [ 234.291308][ T9387] fuse_lookup+0x1e9/0x640 [ 234.291336][ T9387] ? __pfx_fuse_lookup+0x10/0x10 [ 234.291381][ T9387] ? __pfx_d_alloc_parallel+0x10/0x10 [ 234.291407][ T9387] fuse_atomic_open+0x173/0x440 [ 234.291436][ T9387] ? __pfx_fuse_atomic_open+0x10/0x10 [ 234.291462][ T9387] path_openat+0xf66/0x3830 [ 234.291521][ T9387] ? __pfx_path_openat+0x10/0x10 [ 234.291561][ T9387] do_filp_open+0x1fa/0x410 [ 234.291579][ T9387] ? __lock_acquire+0xab9/0xd20 [ 234.291601][ T9387] ? __pfx_do_filp_open+0x10/0x10 [ 234.291643][ T9387] ? _raw_spin_unlock+0x28/0x50 [ 234.291669][ T9387] ? alloc_fd+0x64c/0x6c0 [ 234.291705][ T9387] do_sys_openat2+0x121/0x1c0 [ 234.291726][ T9387] ? __pfx_do_sys_openat2+0x10/0x10 [ 234.291749][ T9387] ? ksys_write+0x22a/0x250 [ 234.291775][ T9387] ? __pfx_ksys_write+0x10/0x10 [ 234.291800][ T9387] __x64_sys_openat+0x138/0x170 [ 234.291826][ T9387] do_syscall_64+0xfa/0xfa0 [ 234.291852][ T9387] ? lockdep_hardirqs_on+0x9c/0x150 [ 234.291881][ T9387] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.291900][ T9387] ? clear_bhb_loop+0x60/0xb0 [ 234.291923][ T9387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.291941][ T9387] RIP: 0033:0x7f5b9998eba9 [ 234.291960][ T9387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.291977][ T9387] RSP: 002b:00007f5b9a7ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 234.291998][ T9387] RAX: ffffffffffffffda RBX: 00007f5b99bd6090 RCX: 00007f5b9998eba9 [ 234.292013][ T9387] RDX: 0000000000000000 RSI: 0000200000000a80 RDI: ffffffffffffff9c [ 234.292027][ T9387] RBP: 00007f5b9a7ae090 R08: 0000000000000000 R09: 0000000000000000 [ 234.292040][ T9387] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 234.292052][ T9387] R13: 00007f5b99bd6128 R14: 00007f5b99bd6090 R15: 00007ffd7e6fa008 [ 234.292084][ T9387] [ 234.798024][ T9395] fuse: Bad value for 'fd' [ 234.842596][ T9226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.038783][ T13] IPVS: stop unused estimator thread 0... [ 235.304467][ T52] Bluetooth: hci1: command tx timeout [ 235.447667][ T9226] veth0_vlan: entered promiscuous mode [ 235.462278][ T9226] veth1_vlan: entered promiscuous mode [ 235.524320][ T5929] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 235.531986][ T9226] veth0_macvtap: entered promiscuous mode [ 235.561604][ T9226] veth1_macvtap: entered promiscuous mode [ 235.608388][ T9226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.647892][ T9226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.685879][ T50] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.696850][ T5929] usb 1-1: Using ep0 maxpacket: 32 [ 235.704264][ T776] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.716581][ T776] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.729107][ T5929] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 235.738798][ T776] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.747820][ T5929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.757342][ T5929] usb 1-1: Product: syz [ 235.761539][ T5929] usb 1-1: Manufacturer: syz [ 235.769652][ T5929] usb 1-1: SerialNumber: syz [ 235.784899][ T5929] usb 1-1: config 0 descriptor?? [ 235.802484][ T5929] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 235.954111][ T9432] fuse: Bad value for 'fd' [ 235.960433][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.983077][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.064357][ T776] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.092995][ T776] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.152218][ T9439] overlayfs: workdir and upperdir must be separate subtrees [ 236.487998][ T9453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1242'. [ 236.703283][ T9462] fuse: Bad value for 'fd' [ 237.237767][ T9483] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1252'. [ 237.361062][ T9492] fuse: Unknown parameter '0x0000000000000003' [ 237.374170][ T52] Bluetooth: hci1: command tx timeout [ 237.393212][ T9489] openvswitch: netlink: Flow actions attr not present in new flow. [ 237.410457][ T9489] random: crng reseeded on system resumption [ 237.481770][ T9495] delete_channel: no stack [ 237.487990][ T9495] delete_channel: no stack [ 237.488423][ T9489] netlink: 'syz.3.1254': attribute type 3 has an invalid length. [ 237.502492][ T9489] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1254'. [ 237.554886][ T9498] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1257'. [ 237.663076][ T9501] netlink: 'syz.1.1259': attribute type 4 has an invalid length. [ 237.681739][ T9501] netlink: 'syz.1.1259': attribute type 4 has an invalid length. [ 237.705256][ T9501] netlink: 'syz.1.1259': attribute type 4 has an invalid length. [ 237.713418][ T9505] netlink: 'syz.1.1259': attribute type 4 has an invalid length. [ 238.279730][ T9519] fuse: Unknown parameter '0x0000000000000003' [ 238.551238][ T9526] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 238.561305][ T9526] block device autoloading is deprecated and will be removed. [ 238.927015][ T9535] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1268'. [ 239.180899][ T9547] fuse: Unknown parameter '0x0000000000000003' [ 239.404249][ T5929] gspca_stk1135: reg_w 0x353 err -110 [ 239.410683][ T5929] gspca_stk1135: serial bus timeout: status=0x00 [ 239.417676][ T5929] gspca_stk1135: Sensor write failed [ 239.422982][ T5929] gspca_stk1135: serial bus timeout: status=0x00 [ 239.429782][ T5929] gspca_stk1135: Sensor write failed [ 239.436115][ T5929] gspca_stk1135: serial bus timeout: status=0x00 [ 239.442461][ T5929] gspca_stk1135: Sensor read failed [ 239.447756][ T5929] gspca_stk1135: serial bus timeout: status=0x00 [ 239.454476][ T5873] Bluetooth: hci1: command 0x0406 tx timeout [ 239.460518][ T5929] gspca_stk1135: Sensor read failed [ 239.465753][ T5929] gspca_stk1135: Detected sensor type unknown (0x0) [ 239.472356][ T5929] gspca_stk1135: serial bus timeout: status=0x00 [ 239.478715][ T5929] gspca_stk1135: Sensor read failed [ 239.483995][ T5929] gspca_stk1135: serial bus timeout: status=0x00 [ 239.490327][ T5929] gspca_stk1135: Sensor read failed [ 239.495644][ T5929] gspca_stk1135: serial bus timeout: status=0x00 [ 239.501972][ T5929] gspca_stk1135: Sensor write failed [ 239.507687][ T5929] gspca_stk1135: serial bus timeout: status=0x00 [ 239.514077][ T5929] gspca_stk1135: Sensor write failed [ 239.519411][ T5929] stk1135 1-1:0.0: probe with driver stk1135 failed with error -110 [ 239.606464][ T6563] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 239.744119][ T6563] usb 5-1: device descriptor read/64, error -71 [ 239.920982][ T9570] fuse: Unknown parameter '0x0000000000000003' [ 239.969997][ T9572] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1283'. [ 239.993738][ T9572] binder: BINDER_SET_CONTEXT_MGR already set [ 239.994114][ T6563] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 240.000308][ T9572] binder: 9571:9572 ioctl 4018620d 200000000040 returned -16 [ 240.130702][ T6564] usb 1-1: USB disconnect, device number 67 [ 240.145132][ T6563] usb 5-1: device descriptor read/64, error -71 [ 240.266191][ T6563] usb usb5-port1: attempt power cycle [ 240.403192][ T9586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.412437][ T9586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.614212][ T6563] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 240.634748][ T6563] usb 5-1: device descriptor read/8, error -71 [ 240.730101][ T9591] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 240.743792][ T9591] sg_read: process 540 (syz.0.1290) changed security contexts after opening file descriptor, this is not allowed. [ 240.874566][ T6563] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 240.878496][ T9595] fuse: Unknown parameter '0x0000000000000003' [ 240.894697][ T6563] usb 5-1: device descriptor read/8, error -71 [ 241.004581][ T6563] usb usb5-port1: unable to enumerate USB device [ 241.354433][ T9607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.355905][ T9607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.365163][ T9607] random: crng reseeded on system resumption [ 241.991100][ T9619] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 241.997633][ T9619] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 242.005458][ T9619] vhci_hcd vhci_hcd.0: Device attached [ 242.012065][ T9621] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 242.023768][ T1161] vhci_hcd: stop threads [ 242.029472][ T1161] vhci_hcd: release socket [ 242.034184][ T1161] vhci_hcd: disconnect device [ 242.461443][ T9629] fuse: Unknown parameter '0x0000000000000003' [ 242.493118][ T9630] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1302'. [ 242.613057][ T9633] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1303'. [ 242.874089][ T5929] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 243.034053][ T5929] usb 1-1: Using ep0 maxpacket: 32 [ 243.043134][ T5929] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 243.052308][ T910] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 243.059928][ T5929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.068179][ T5929] usb 1-1: Product: syz [ 243.072672][ T5929] usb 1-1: Manufacturer: syz [ 243.078578][ T5929] usb 1-1: SerialNumber: syz [ 243.085581][ T5929] usb 1-1: config 0 descriptor?? [ 243.095129][ T5929] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 243.235686][ T910] usb 5-1: config 0 has an invalid interface number: 69 but max is 0 [ 243.244140][ T910] usb 5-1: config 0 has no interface number 0 [ 243.250274][ T910] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 243.260864][ T910] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 19, changing to 8 [ 243.276266][ T910] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 243.285432][ T910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.293846][ T910] usb 5-1: Product: syz [ 243.298761][ T910] usb 5-1: Manufacturer: syz [ 243.303682][ T910] usb 5-1: SerialNumber: syz [ 243.312487][ T910] usb 5-1: config 0 descriptor?? [ 243.318683][ T9644] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 243.332458][ T910] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 243.349768][ T910] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 243.370667][ T9649] netlink: 'syz.1.1309': attribute type 3 has an invalid length. [ 243.378611][ T9649] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1309'. [ 243.492989][ T9653] fuse: Unknown parameter 'fd0x0000000000000003' [ 244.479918][ T9676] fuse: Unknown parameter 'fd0x0000000000000003' [ 244.631663][ T9684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.650071][ T9684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.820098][ T9697] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1328'. [ 244.917839][ T9701] fuse: Unknown parameter 'fd0x0000000000000003' [ 245.299027][ T9714] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1336'. [ 245.331414][ T9717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.344432][ T9717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.887930][ T6562] usb 5-1: USB disconnect, device number 6 [ 245.924984][ T6562] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 245.960510][ T6562] cyberjack 5-1:0.69: device disconnected [ 246.056469][ T9746] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1345'. [ 246.310160][ T9755] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1349'. [ 246.323489][ T5929] gspca_stk1135: reg_w 0x353 err -71 [ 246.345880][ T5929] gspca_stk1135: serial bus timeout: status=0x00 [ 246.352255][ T5929] gspca_stk1135: Sensor write failed [ 246.358902][ T5929] gspca_stk1135: serial bus timeout: status=0x00 [ 246.366212][ T5929] gspca_stk1135: Sensor write failed [ 246.371702][ T5929] gspca_stk1135: serial bus timeout: status=0x00 [ 246.380218][ T5929] gspca_stk1135: Sensor read failed [ 246.405064][ T5929] gspca_stk1135: serial bus timeout: status=0x00 [ 246.411439][ T5929] gspca_stk1135: Sensor read failed [ 246.428544][ T5929] gspca_stk1135: Detected sensor type unknown (0x0) [ 246.444528][ T5929] gspca_stk1135: serial bus timeout: status=0x00 [ 246.450915][ T5929] gspca_stk1135: Sensor read failed [ 246.477106][ T5929] gspca_stk1135: serial bus timeout: status=0x00 [ 246.483575][ T5929] gspca_stk1135: Sensor read failed [ 246.489352][ T5929] gspca_stk1135: serial bus timeout: status=0x00 [ 246.497239][ T5929] gspca_stk1135: Sensor write failed [ 246.502609][ T5929] gspca_stk1135: serial bus timeout: status=0x00 [ 246.527005][ T5929] gspca_stk1135: Sensor write failed [ 246.532417][ T5929] stk1135 1-1:0.0: probe with driver stk1135 failed with error -71 [ 246.552215][ T5929] usb 1-1: USB disconnect, device number 68 [ 246.629444][ T9767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.663083][ T9767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.663399][ T9768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.689152][ T9768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.854501][ T6563] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 246.947591][ T5873] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 247.024087][ T6563] usb 5-1: Using ep0 maxpacket: 16 [ 247.030901][ T6563] usb 5-1: config 5 has an invalid interface number: 168 but max is 0 [ 247.043557][ T6563] usb 5-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 247.058626][ T9784] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1355'. [ 247.065413][ T6563] usb 5-1: config 5 has no interface number 0 [ 247.073702][ T6563] usb 5-1: config 5 interface 168 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 247.086168][ T6563] usb 5-1: config 5 interface 168 altsetting 7 endpoint 0x8B has invalid wMaxPacketSize 0 [ 247.096172][ T6563] usb 5-1: config 5 interface 168 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 247.109282][ T6563] usb 5-1: config 5 interface 168 has no altsetting 0 [ 247.123785][ T6563] usb 5-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=fc.58 [ 247.136821][ T6563] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.145052][ T6563] usb 5-1: Product: syz [ 247.149330][ T6563] usb 5-1: Manufacturer: syz [ 247.161128][ T6563] usb 5-1: SerialNumber: syz [ 247.340169][ T9797] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 247.463148][ T6563] pn533_usb 5-1:5.168: NFC: Could not find bulk-in or bulk-out endpoint [ 247.489831][ T6563] usb 5-1: USB disconnect, device number 7 [ 247.873806][ T3455] Bluetooth: hci5: Frame reassembly failed (-84) [ 247.888257][ T9822] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 248.766178][ T9857] 9pnet_fd: Insufficient options for proto=fd [ 249.701196][ T9881] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 249.935872][ T52] Bluetooth: hci5: command 0x1003 tx timeout [ 249.936007][ T5873] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 250.338374][ T9896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.350705][ T9896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.357497][ T6562] usb 1-1: new full-speed USB device number 69 using dummy_hcd [ 250.520358][ T6562] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1 [ 250.542425][ T6562] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 97, changing to 4 [ 250.570708][ T6562] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 24929, setting to 1023 [ 250.605194][ T6562] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 250.619117][ T6562] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.634585][ T6562] usb 1-1: Product: syz [ 250.643254][ T6562] usb 1-1: Manufacturer: syz [ 250.655446][ T6562] usb 1-1: SerialNumber: syz [ 250.665455][ T6562] usb 1-1: config 0 descriptor?? [ 250.686887][ T6562] streamzap 1-1:0.0: streamzap_probe: endpoint doesn't match input device 0201 [ 250.884058][ T6554] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 250.900014][ T6562] usb 1-1: USB disconnect, device number 69 [ 250.930404][ T9911] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1387'. [ 250.940185][ T9912] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1387'. [ 250.969069][ T9911] sp0: Synchronizing with TNC [ 251.029114][ T9911] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1387'. [ 251.055960][ T6554] usb 5-1: Using ep0 maxpacket: 32 [ 251.065990][ T6554] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 251.076887][ T6554] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.085151][ T6554] usb 5-1: Product: syz [ 251.089323][ T6554] usb 5-1: Manufacturer: syz [ 251.093902][ T6554] usb 5-1: SerialNumber: syz [ 251.100703][ T6554] usb 5-1: config 0 descriptor?? [ 251.111911][ T6554] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 251.511414][ T9925] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input14 [ 251.748428][ T9939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.763883][ T9939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.464049][ T5961] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 252.615890][ T5961] usb 1-1: Using ep0 maxpacket: 8 [ 252.625344][ T5961] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.639308][ T5961] usb 1-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 252.649092][ T5961] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.657963][ T5961] usb 1-1: Product: syz [ 252.662342][ T5961] usb 1-1: Manufacturer: syz [ 252.669857][ T5961] usb 1-1: SerialNumber: syz [ 252.677011][ T5961] usb 1-1: config 0 descriptor?? [ 252.686155][ T5961] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 252.692312][ T5961] usb 1-1: selecting invalid altsetting 1 [ 252.890069][ T5961] gspca_stk014: init reg: 0x00 [ 252.896907][ T5961] stk014 1-1:0.0: probe with driver stk014 failed with error -5 [ 253.091009][ T9947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.106089][ T9947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.444704][ T9986] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1416'. [ 253.470344][ T9987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.481267][ T9987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.336942][ T6554] gspca_stk1135: reg_w 0x353 err -71 [ 254.343539][ T6554] gspca_stk1135: serial bus timeout: status=0x00 [ 254.351916][ T6554] gspca_stk1135: Sensor write failed [ 254.362693][ T6554] gspca_stk1135: serial bus timeout: status=0x00 [ 254.370268][ T6554] gspca_stk1135: Sensor write failed [ 254.376004][ T6554] gspca_stk1135: serial bus timeout: status=0x00 [ 254.382389][ T6554] gspca_stk1135: Sensor read failed [ 254.387967][ T6554] gspca_stk1135: serial bus timeout: status=0x00 [ 254.394725][ T6554] gspca_stk1135: Sensor read failed [ 254.399937][ T6554] gspca_stk1135: Detected sensor type unknown (0x0) [ 254.407032][ T6554] gspca_stk1135: serial bus timeout: status=0x00 [ 254.413380][ T6554] gspca_stk1135: Sensor read failed [ 254.421819][ T6554] gspca_stk1135: serial bus timeout: status=0x00 [ 254.429461][ T6554] gspca_stk1135: Sensor read failed [ 254.437357][ T6554] gspca_stk1135: serial bus timeout: status=0x00 [ 254.443715][ T6554] gspca_stk1135: Sensor write failed [ 254.451237][ T6554] gspca_stk1135: serial bus timeout: status=0x00 [ 254.460096][ T6554] gspca_stk1135: Sensor write failed [ 254.468139][ T6554] stk1135 5-1:0.0: probe with driver stk1135 failed with error -71 [ 254.483067][ T6554] usb 5-1: USB disconnect, device number 8 [ 254.569441][T10002] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1422'. [ 254.687975][T10009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.696902][T10009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.128790][ T30] audit: type=1804 audit(1757644890.881:382): pid=10023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1428" name="file1" dev="ramfs" ino=33341 res=1 errno=0 [ 255.153042][ T30] audit: type=1804 audit(1757644890.881:383): pid=10023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1428" name="file1" dev="ramfs" ino=33341 res=1 errno=0 [ 255.261540][ T6562] usb 1-1: USB disconnect, device number 70 [ 255.734013][ T6562] usb 1-1: new full-speed USB device number 71 using dummy_hcd [ 255.776513][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.782914][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.888385][ T6562] usb 1-1: unable to get BOS descriptor or descriptor too short [ 255.897472][ T6562] usb 1-1: not running at top speed; connect to a high speed hub [ 255.908096][ T6562] usb 1-1: config 3 has an invalid interface number: 106 but max is 0 [ 255.916424][ T6562] usb 1-1: config 3 has no interface number 0 [ 255.922528][ T6562] usb 1-1: config 3 interface 106 altsetting 10 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 255.933549][ T6562] usb 1-1: config 3 interface 106 altsetting 10 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 255.944868][ T6562] usb 1-1: config 3 interface 106 has no altsetting 0 [ 255.953615][ T6562] usb 1-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=e8.8a [ 255.962865][ T6562] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.971126][ T6562] usb 1-1: Product: syz [ 255.975387][ T6562] usb 1-1: Manufacturer: syz [ 255.979993][ T6562] usb 1-1: SerialNumber: syz [ 255.987701][T10035] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 255.997980][T10035] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 256.212854][ T6562] kobil_sct 1-1:3.106: KOBIL USB smart card terminal converter detected [ 256.228890][ T6562] usb 1-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 256.246022][ T6562] usb 1-1: USB disconnect, device number 71 [ 256.263290][ T6562] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 256.277535][ T6562] kobil_sct 1-1:3.106: device disconnected [ 256.716254][T10058] fuse: Unknown parameter 'group_yd' [ 256.724912][T10058] fuse: Unknown parameter 'group_yd' [ 257.514458][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 257.524288][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 257.537243][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 257.548486][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 257.557166][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 257.844022][ T5960] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 257.961412][T10079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.964764][T10081] sp0: Synchronizing with TNC [ 257.982902][T10082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.994883][T10079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.006886][ T5960] usb 1-1: Using ep0 maxpacket: 32 [ 258.017540][T10082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.036549][ T5960] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 258.049492][ T5960] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.058088][ T5960] usb 1-1: Product: syz [ 258.062403][ T5960] usb 1-1: Manufacturer: syz [ 258.067473][ T5960] usb 1-1: SerialNumber: syz [ 258.075636][ T5960] usb 1-1: config 0 descriptor?? [ 258.089719][ T5960] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 258.217872][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.289474][T10071] chnl_net:caif_netlink_parms(): no params data found [ 258.410033][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.568737][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.788806][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.810633][T10071] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.821101][T10071] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.843372][T10071] bridge_slave_0: entered allmulticast mode [ 258.868962][T10071] bridge_slave_0: entered promiscuous mode [ 258.899074][T10071] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.899261][T10071] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.899456][T10071] bridge_slave_1: entered allmulticast mode [ 258.901401][T10071] bridge_slave_1: entered promiscuous mode [ 259.008095][T10071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.011615][T10071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.121049][T10071] team0: Port device team_slave_0 added [ 259.131420][T10071] team0: Port device team_slave_1 added [ 259.256728][T10071] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.256748][T10071] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.256776][T10071] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.258775][T10071] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.258793][T10071] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.258822][T10071] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.383623][ T13] bridge_slave_1: left allmulticast mode [ 259.383685][ T13] bridge_slave_1: left promiscuous mode [ 259.383987][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.440552][ T13] bridge_slave_0: left allmulticast mode [ 259.463799][ C0] vkms_vblank_simulate: vblank timer overrun [ 259.526926][ T13] bridge_slave_0: left promiscuous mode [ 259.527158][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.634015][ T5873] Bluetooth: hci5: command tx timeout [ 260.562963][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 260.572488][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 260.581482][ T13] bond0 (unregistering): Released all slaves [ 260.607538][T10071] hsr_slave_0: entered promiscuous mode [ 260.609007][T10071] hsr_slave_1: entered promiscuous mode [ 260.609981][T10071] debugfs: 'hsr0' already exists in 'hsr' [ 260.610025][T10071] Cannot create hsr debugfs directory [ 260.711227][ T13] tipc: Disabling bearer [ 260.713900][ T13] tipc: Left network mode [ 261.266178][T10134] mmap: syz.4.1456 (10134) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 261.328978][T10134] netlink: 'syz.4.1456': attribute type 83 has an invalid length. [ 261.364670][ T5960] gspca_stk1135: reg_w 0x353 err -71 [ 261.365714][ T5960] gspca_stk1135: serial bus timeout: status=0x00 [ 261.365730][ T5960] gspca_stk1135: Sensor write failed [ 261.365758][ T5960] gspca_stk1135: serial bus timeout: status=0x00 [ 261.365770][ T5960] gspca_stk1135: Sensor write failed [ 261.365799][ T5960] gspca_stk1135: serial bus timeout: status=0x00 [ 261.365809][ T5960] gspca_stk1135: Sensor read failed [ 261.365837][ T5960] gspca_stk1135: serial bus timeout: status=0x00 [ 261.365848][ T5960] gspca_stk1135: Sensor read failed [ 261.365855][ T5960] gspca_stk1135: Detected sensor type unknown (0x0) [ 261.365884][ T5960] gspca_stk1135: serial bus timeout: status=0x00 [ 261.365894][ T5960] gspca_stk1135: Sensor read failed [ 261.365920][ T5960] gspca_stk1135: serial bus timeout: status=0x00 [ 261.365929][ T5960] gspca_stk1135: Sensor read failed [ 261.365957][ T5960] gspca_stk1135: serial bus timeout: status=0x00 [ 261.365968][ T5960] gspca_stk1135: Sensor write failed [ 261.365995][ T5960] gspca_stk1135: serial bus timeout: status=0x00 [ 261.366006][ T5960] gspca_stk1135: Sensor write failed [ 261.366082][ T5960] stk1135 1-1:0.0: probe with driver stk1135 failed with error -71 [ 261.368259][ T5960] usb 1-1: USB disconnect, device number 72 [ 261.498294][ T13] hsr_slave_0: left promiscuous mode [ 261.502780][ T13] hsr_slave_1: left promiscuous mode [ 261.503731][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.503777][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.518745][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.518771][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.626495][ T13] veth1_macvtap: left promiscuous mode [ 261.626640][ T13] veth0_macvtap: left promiscuous mode [ 261.627809][ T13] veth1_vlan: left promiscuous mode [ 261.628055][ T13] veth0_vlan: left promiscuous mode [ 261.704297][ T5873] Bluetooth: hci5: command tx timeout [ 261.974016][ T6554] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 262.153196][ T6554] usb 5-1: Using ep0 maxpacket: 32 [ 262.157125][ T6554] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.168820][ T6554] usb 5-1: New USB device found, idVendor=257a, idProduct=261f, bcdDevice= 8.ee [ 262.168851][ T6554] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.168869][ T6554] usb 5-1: Product: syz [ 262.168883][ T6554] usb 5-1: Manufacturer: syz [ 262.168896][ T6554] usb 5-1: SerialNumber: syz [ 262.206801][ T6554] usb 5-1: config 0 descriptor?? [ 262.217252][ T6554] hub 5-1:0.0: bad descriptor, ignoring hub [ 262.217283][ T6554] hub 5-1:0.0: probe with driver hub failed with error -5 [ 262.220632][ T6554] option 5-1:0.0: GSM modem (1-port) converter detected [ 262.426776][T10140] binder: BC_ACQUIRE_RESULT not supported [ 262.432549][T10140] binder: 10138:10140 ioctl c0306201 200000000580 returned -22 [ 262.595357][ T5960] usb 5-1: USB disconnect, device number 9 [ 262.602849][ T5960] option 5-1:0.0: device disconnected [ 262.827872][ T13] team0 (unregistering): Port device team_slave_1 removed [ 262.879361][ T13] team0 (unregistering): Port device team_slave_0 removed [ 263.682598][T10171] QAT: Invalid ioctl 21531 [ 263.854431][ T5873] Bluetooth: hci5: command tx timeout [ 263.974866][ T888] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 264.149705][ T888] usb 1-1: Using ep0 maxpacket: 32 [ 264.181862][ T888] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 264.224793][ T888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.264709][ T888] usb 1-1: Product: syz [ 264.276122][ T888] usb 1-1: Manufacturer: syz [ 264.291412][ T888] usb 1-1: SerialNumber: syz [ 264.318292][ T888] usb 1-1: config 0 descriptor?? [ 264.346611][ T888] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 264.380300][ T13] IPVS: stop unused estimator thread 0... [ 264.436372][T10071] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 264.454805][T10071] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 264.472052][T10071] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 264.485493][T10071] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 264.757120][T10071] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.815675][T10071] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.849089][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.856308][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.873565][T10209] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1471'. [ 264.897527][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.904760][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.394800][T10071] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.521010][T10071] veth0_vlan: entered promiscuous mode [ 265.545143][T10071] veth1_vlan: entered promiscuous mode [ 265.596721][T10071] veth0_macvtap: entered promiscuous mode [ 265.612130][T10071] veth1_macvtap: entered promiscuous mode [ 265.644485][T10071] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.668317][T10071] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.690874][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.701117][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.715129][ T5960] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 265.733303][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.751216][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.842519][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.869561][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.878259][ T5960] usb 5-1: too many configurations: 176, using maximum allowed: 8 [ 265.889744][ T5960] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 265.908174][ T5960] usb 5-1: can't read configurations, error -22 [ 265.934626][ T5873] Bluetooth: hci5: command tx timeout [ 265.946140][ T776] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.954306][ T776] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.054660][ T5960] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 266.225728][ T5960] usb 5-1: too many configurations: 176, using maximum allowed: 8 [ 266.256100][ T5960] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 266.271401][ T5960] usb 5-1: can't read configurations, error -22 [ 266.281564][ T5960] usb usb5-port1: attempt power cycle [ 266.624171][ T5960] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 266.656889][ T5960] usb 5-1: too many configurations: 176, using maximum allowed: 8 [ 266.668350][ T5960] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 266.677491][ T5960] usb 5-1: can't read configurations, error -22 [ 266.814610][ T5960] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 266.845858][ T5960] usb 5-1: too many configurations: 176, using maximum allowed: 8 [ 266.856270][ T5960] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 266.865321][ T5960] usb 5-1: can't read configurations, error -22 [ 266.871882][ T5960] usb usb5-port1: unable to enumerate USB device [ 266.929772][T10256] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 267.457267][T10267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.475134][T10267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.579317][ T888] gspca_stk1135: reg_w 0x353 err -71 [ 267.586932][ T888] gspca_stk1135: serial bus timeout: status=0x00 [ 267.595997][ T888] gspca_stk1135: Sensor write failed [ 267.601321][ T888] gspca_stk1135: serial bus timeout: status=0x00 [ 267.607959][ T888] gspca_stk1135: Sensor write failed [ 267.613268][ T888] gspca_stk1135: serial bus timeout: status=0x00 [ 267.620232][ T888] gspca_stk1135: Sensor read failed [ 267.626327][ T888] gspca_stk1135: serial bus timeout: status=0x00 [ 267.632787][ T888] gspca_stk1135: Sensor read failed [ 267.638074][ T888] gspca_stk1135: Detected sensor type unknown (0x0) [ 267.645089][ T888] gspca_stk1135: serial bus timeout: status=0x00 [ 267.651415][ T888] gspca_stk1135: Sensor read failed [ 267.656846][ T888] gspca_stk1135: serial bus timeout: status=0x00 [ 267.663177][ T888] gspca_stk1135: Sensor read failed [ 267.669306][ T888] gspca_stk1135: serial bus timeout: status=0x00 [ 267.676725][ T888] gspca_stk1135: Sensor write failed [ 267.682038][ T888] gspca_stk1135: serial bus timeout: status=0x00 [ 267.688591][ T888] gspca_stk1135: Sensor write failed [ 267.693985][ T888] stk1135 1-1:0.0: probe with driver stk1135 failed with error -71 [ 267.703236][T10267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.716942][T10267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.720211][ T888] usb 1-1: USB disconnect, device number 73 [ 267.753084][T10267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.761821][T10267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.351337][T10275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.365163][T10275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.412323][T10275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.422747][T10275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.584407][ T5960] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 268.614030][ T6554] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 268.796116][ T6554] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.807337][ T6554] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 268.817057][ T6554] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.827244][ T6554] usb 1-1: config 0 descriptor?? [ 268.934246][ T5960] usb 2-1: device descriptor read/64, error -71 [ 269.184071][ T5960] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 269.238943][ T6554] keytouch 0003:0926:3333.000E: fixing up Keytouch IEC report descriptor [ 269.250876][ T6554] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.000E/input/input15 [ 269.353382][ T5960] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.367683][ T5960] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 269.382260][ T5960] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.398761][ T6554] keytouch 0003:0926:3333.000E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 269.415559][ T5960] usb 2-1: config 0 descriptor?? [ 269.573572][ C1] Mem-Info: [ 269.577069][ C1] active_anon:25224 inactive_anon:0 isolated_anon:0 [ 269.577069][ C1] active_file:14936 inactive_file:40016 isolated_file:0 [ 269.577069][ C1] unevictable:768 dirty:27 writeback:0 [ 269.577069][ C1] slab_reclaimable:11485 slab_unreclaimable:91518 [ 269.577069][ C1] mapped:27606 shmem:20616 pagetables:1394 [ 269.577069][ C1] sec_pagetables:0 bounce:0 [ 269.577069][ C1] kernel_misc_reclaimable:0 [ 269.577069][ C1] free:1312353 free_pcp:13401 free_cma:0 [ 269.622435][ C1] Node 0 active_anon:100996kB inactive_anon:0kB active_file:59744kB inactive_file:159860kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:110424kB dirty:104kB writeback:0kB shmem:80928kB shmem_thp:4096kB shmem_pmdmapped:4096kB anon_thp:0kB kernel_stack:12548kB pagetables:5572kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 269.654932][ C1] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:104kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 269.684744][ C1] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 269.714566][ C1] lowmem_reserve[]: 0 2495 2496 2496 2496 [ 269.720321][ C1] Node 0 DMA32 free:1341628kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:100948kB inactive_anon:0kB active_file:59744kB inactive_file:158796kB unevictable:1536kB writepending:100kB zspages:0kB present:3129332kB managed:2555356kB mlocked:0kB bounce:0kB free_pcp:37384kB local_pcp:30072kB free_cma:0kB [ 269.753684][ C1] lowmem_reserve[]: 0 0 1 1 1 [ 269.758401][ C1] Node 0 Normal free:4kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1064kB unevictable:0kB writepending:4kB zspages:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 269.788371][ C1] lowmem_reserve[]: 0 0 0 0 0 [ 269.793092][ C1] Node 1 Normal free:3892420kB boost:0kB min:55668kB low:69584kB high:83500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16192kB local_pcp:6272kB free_cma:0kB [ 269.825250][ C1] lowmem_reserve[]: 0 0 0 0 0 [ 269.829963][ C1] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 269.842632][ C1] Node 0 DMA32: 183*4kB (UME) 202*8kB (UME) 133*16kB (UM) 315*32kB (U) 146*64kB (UME) 161*128kB (UME) 99*256kB (UME) 56*512kB (UM) 16*1024kB (UME) 9*2048kB (UM) 295*4096kB (UM) = 1341660kB [ 269.861307][ C1] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 269.873300][ C1] Node 1 Normal: 195*4kB (UME) 59*8kB (UME) 52*16kB (UME) 121*32kB (UME) 38*64kB (UME) 8*128kB (UME) 2*256kB (M) 5*512kB (UME) 1*1024kB (M) 2*2048kB (UE) 946*4096kB (M) = 3892420kB [ 269.891279][ C1] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 269.903888][ C1] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 269.913183][ C1] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 269.922723][ C1] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 269.932000][ C1] 75564 total pagecache pages [ 269.936675][ C1] 0 pages in swap cache [ 269.940900][ C1] Free swap = 124996kB [ 269.945035][ C1] Total swap = 124996kB [ 269.949174][ C1] 2097051 pages RAM [ 269.952961][ C1] 0 pages HighMem/MovableOnly [ 269.957618][ C1] 426314 pages reserved [ 269.961849][ C1] 0 pages cma reserved [ 269.980421][T10288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.994014][T10288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.209592][ T5960] keytouch 0003:0926:3333.000F: fixing up Keytouch IEC report descriptor [ 270.220996][ T888] usb 1-1: USB disconnect, device number 74 [ 270.225862][ T5960] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.000F/input/input16 [ 270.444548][ T5960] keytouch 0003:0926:3333.000F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 270.490014][ T5960] usb 2-1: USB disconnect, device number 14 [ 270.632762][T10295] fido_id[10295]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 270.912366][T10300] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) Stopping sshd: stopped /usr/sbin/sshd (pid 5623) [ 271.034404][ T888] usb 5-1: new high-speed USB device number 14 using dummy_hcd OK [ 271.145642][T10307] block nbd3: Attempted send on invalid socket [ 271.152377][T10307] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 271.163209][T10307] hpfs: hpfs_map_sector(): read error [ 271.168684][ T5960] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 271.194040][ T888] usb 5-1: device descriptor read/64, error -71 Stopping crond: [ 271.335046][ T5960] usb 1-1: Using ep0 maxpacket: 16 [ 271.344119][ T6562] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 271.353633][ T5960] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 271.364143][ T5960] usb 1-1: config 0 has no interface number 0 [ 271.370281][ T5960] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 271.404261][ T5960] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 stopped /usr/sbin/crond (pid 5607) [ 271.426267][ T5960] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 271.435381][ T888] usb 5-1: new high-speed USB device number 15 using dummy_hcd OK [ 271.445864][ T5960] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.461034][ T5960] usb 1-1: Product: syz [ 271.484481][ T5960] usb 1-1: Manufacturer: syz [ 271.490138][ T5960] usb 1-1: SerialNumber: syz [ 271.502776][ T5960] usb 1-1: config 0 descriptor?? [ 271.520829][T10300] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 271.534535][T10300] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 271.540173][ T6562] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.573899][ T6562] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 271.583232][ T6562] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.591238][T10316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.594239][T10316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.602716][ T888] usb 5-1: device descriptor read/64, error -71 [ 271.632580][ T6562] usb 2-1: config 0 descriptor?? Stopping dhcpcd... [ 271.726048][ T888] usb usb5-port1: attempt power cycle [ 271.752958][T10300] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 271.766651][T10300] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 stopped /sbin/dhcpcd (pid 5528) [ 271.855431][T10305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.871536][T10305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 Stopping network: [ 272.084909][ T888] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 272.097265][ T6562] keytouch 0003:0926:3333.0010: fixing up Keytouch IEC report descriptor [ 272.131610][ T6562] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0010/input/input17 [ 272.164532][ T888] usb 5-1: device descriptor read/8, error -71 [ 272.192079][T10300] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1488'. [ 272.233775][ T5960] asix 1-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 272.255505][ T5960] asix 1-1:0.251: probe with driver asix failed with error -524 [ 272.321535][ T6562] keytouch 0003:0926:3333.0010: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 272.366472][ T6562] usb 2-1: USB disconnect, device number 15 [ 272.405480][ T888] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 272.448795][ T888] usb 5-1: device descriptor read/8, error -71 [ 272.522622][T10329] fido_id[10329]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 272.580422][ T888] usb usb5-port1: unable to enumerate USB device [ 272.633350][ T888] usb 1-1: USB disconnect, device number 75 [ 273.135255][ C0] Oops: divide error: 0000 [#1] SMP KASAN PTI [ 273.141346][ C0] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) [ 273.150621][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 273.160665][ C0] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 273.168470][ C0] RIP: 0010:comedi_buf_write_free+0x3c8/0x7e0 [ 273.174534][ C0] Code: 41 03 45 00 48 8b 4c 24 78 42 0f b6 0c 21 84 c9 4c 8b bc 24 90 00 00 00 44 8b 74 24 54 0f 85 02 01 00 00 31 d2 48 8b 4c 24 30 31 41 89 55 00 48 8b 44 24 70 42 0f b6 04 20 84 c0 0f 85 09 01 [ 273.194126][ C0] RSP: 0018:ffffc90000007bd8 EFLAGS: 00010046 [ 273.200188][ C0] RAX: 0000000000000001 RBX: dffffc0000000000 RCX: ffff88807ceb7480 [ 273.208145][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff888064745000 [ 273.216105][ C0] RBP: 0000000000000002 R08: 0000000000000000 R09: 00000000000000ff [ 273.224061][ C0] R10: dffffc0000000000 R11: ffffffff88faf420 R12: dffffc0000000000 [ 273.232019][ C0] R13: ffff88807ceb7438 R14: 0000000000000000 R15: ffff88807ceb7400 [ 273.239975][ C0] FS: 0000000000000000(0000) GS:ffff8881257b1000(0000) knlGS:0000000000000000 [ 273.248890][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 273.255459][ C0] CR2: 00007f1f9e13dff8 CR3: 00000000755ba000 CR4: 00000000003526f0 [ 273.263424][ C0] DR0: 0000000000000000 DR1: 0000000000006800 DR2: 0000000000009951 [ 273.271382][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 273.279341][ C0] Call Trace: [ 273.282605][ C0] [ 273.285440][ C0] ? __pfx_das16m1_ai_munge+0x10/0x10 [ 273.290809][ C0] comedi_buf_write_samples+0x369/0x5a0 [ 273.296348][ C0] das16m1_handler+0x213/0x4b0 [ 273.301107][ C0] das16m1_interrupt+0xaf/0x180 [ 273.305947][ C0] ? __pfx_das16m1_interrupt+0x10/0x10 [ 273.311398][ C0] __handle_irq_event_percpu+0x295/0xab0 [ 273.317024][ C0] ? __lock_acquire+0xab9/0xd20 [ 273.321862][ C0] ? __pfx___handle_irq_event_percpu+0x10/0x10 [ 273.328007][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 273.333195][ C0] handle_irq_event+0x8b/0x1e0 [ 273.337947][ C0] ? handle_edge_irq+0x229/0xa10 [ 273.342873][ C0] handle_edge_irq+0x23b/0xa10 [ 273.347629][ C0] __common_interrupt+0x141/0x1f0 [ 273.352639][ C0] common_interrupt+0xb6/0xe0 [ 273.357305][ C0] [ 273.360221][ C0] [ 273.363136][ C0] asm_common_interrupt+0x26/0x40 [ 273.368146][ C0] RIP: 0010:__rcu_read_lock+0x32/0x60 [ 273.373502][ C0] Code: 1c 25 08 f0 e6 92 48 81 c3 84 04 00 00 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 c0 75 18 ff 03 8b 03 <3d> 00 00 00 40 7d 07 5b e9 81 e2 e5 09 cc 90 0f 0b 90 eb f3 89 d9 [ 273.393107][ C0] RSP: 0018:ffffc90000117850 EFLAGS: 00000202 [ 273.399164][ C0] RAX: 0000000000000001 RBX: ffff88801d295f44 RCX: dffffc0000000000 [ 273.407124][ C0] RDX: 0000000000000000 RSI: ffffffff8de8f7b6 RDI: ffff88801d295ac0 [ 273.415082][ C0] RBP: ffffc900001179b0 R08: 0000000000000000 R09: ffffffff8b52f3a0 [ 273.423040][ C0] R10: dffffc0000000000 R11: ffffed100f31cb17 R12: ffff888028336700 [ 273.431008][ C0] R13: ffff888028336710 R14: dffffc0000000000 R15: ffff888079115c80 [ 273.438972][ C0] ? batadv_iv_ogm_schedule+0x430/0xf00 [ 273.444520][ C0] batadv_iv_ogm_schedule+0x429/0xf00 [ 273.449887][ C0] ? batadv_iv_ogm_schedule+0x430/0xf00 [ 273.455425][ C0] ? __pfx_batadv_iv_ogm_schedule+0x10/0x10 [ 273.461310][ C0] ? batadv_send_skb_packet+0x45d/0x6d0 [ 273.466845][ C0] batadv_iv_send_outstanding_bat_ogm_packet+0x6c6/0x7e0 [ 273.473860][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 273.479568][ C0] process_scheduled_works+0xae1/0x17b0 [ 273.485108][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 273.491083][ C0] worker_thread+0x8a0/0xda0 [ 273.495672][ C0] kthread+0x711/0x8a0 [ 273.499739][ C0] ? __pfx_worker_thread+0x10/0x10 [ 273.504839][ C0] ? __pfx_kthread+0x10/0x10 [ 273.509422][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 273.514609][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 273.519802][ C0] ? __pfx_kthread+0x10/0x10 [ 273.524383][ C0] ret_from_fork+0x47c/0x820 [ 273.528963][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 273.534069][ C0] ? __switch_to_asm+0x39/0x70 [ 273.538822][ C0] ? __switch_to_asm+0x33/0x70 [ 273.543572][ C0] ? __pfx_kthread+0x10/0x10 [ 273.548160][ C0] ret_from_fork_asm+0x1a/0x30 [ 273.552917][ C0] [ 273.555919][ C0] Modules linked in: [ 273.559811][ C0] ---[ end trace 0000000000000000 ]--- [ 273.565256][ C0] RIP: 0010:comedi_buf_write_free+0x3c8/0x7e0 [ 273.571406][ C0] Code: 41 03 45 00 48 8b 4c 24 78 42 0f b6 0c 21 84 c9 4c 8b bc 24 90 00 00 00 44 8b 74 24 54 0f 85 02 01 00 00 31 d2 48 8b 4c 24 30 31 41 89 55 00 48 8b 44 24 70 42 0f b6 04 20 84 c0 0f 85 09 01 [ 273.591085][ C0] RSP: 0018:ffffc90000007bd8 EFLAGS: 00010046 [ 273.597139][ C0] RAX: 0000000000000001 RBX: dffffc0000000000 RCX: ffff88807ceb7480 [ 273.605099][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff888064745000 [ 273.613055][ C0] RBP: 0000000000000002 R08: 0000000000000000 R09: 00000000000000ff [ 273.621010][ C0] R10: dffffc0000000000 R11: ffffffff88faf420 R12: dffffc0000000000 [ 273.628969][ C0] R13: ffff88807ceb7438 R14: 0000000000000000 R15: ffff88807ceb7400 [ 273.636927][ C0] FS: 0000000000000000(0000) GS:ffff8881257b1000(0000) knlGS:0000000000000000 [ 273.645840][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 273.652414][ C0] CR2: 00007f1f9e13dff8 CR3: 00000000755ba000 CR4: 00000000003526f0 [ 273.660375][ C0] DR0: 0000000000000000 DR1: 0000000000006800 DR2: 0000000000009951 [ 273.668348][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 273.676308][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 273.683745][ C0] Kernel Offset: disabled [ 273.688056][ C0] Rebooting in 86400 seconds..