last executing test programs: 13.790823442s ago: executing program 2 (id=2315): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fanotify_init(0x200, 0x48801) fanotify_mark(r6, 0x1, 0x1001, r4, 0x0) write$vhost_msg_v2(r5, &(0x7f0000002b00)={0x2, 0x0, {0x0, 0x0, 0x0, 0x1, 0x4}}, 0x48) syz_open_procfs$namespace(0x0, 0x0) r7 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r7, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x4) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x9, 0x0, 0x81, 0xffffffff}) sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) recvmsg$kcm(r8, &(0x7f0000002f80)={0x0, 0x0, 0x0}, 0x10000) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x7a, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000000540)) ioctl$KVM_RUN(r9, 0xae80, 0x0) syz_usb_disconnect(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r4, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000380)={0x6c, 0x0, 0x30c, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7f}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000005}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4c840) socket$nl_netfilter(0x10, 0x3, 0xc) 13.48346786s ago: executing program 1 (id=2317): r0 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x4cc082, 0x0) r2 = syz_usb_connect$uac1(0x0, 0x72, &(0x7f00000001c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x582, 0x16, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x3, 0xa0, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x2, 0x6, 0x4, {0x7, 0x25, 0x1, 0x8, 0x0, 0x40}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x3, 0x3, 0x5, {0x7, 0x25, 0x1, 0xc, 0x8, 0x3ff}}}}}}}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYRES16=r2]}, 0x0) syz_usb_control_io$uac2(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0xb8c}}, './file0\x00'}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04022420"], 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x2, 0xd7}, @l2cap_cid_signaling={{0xd3}, [@l2cap_conf_rsp={{0x5, 0x4, 0x36}, {0xc, 0x100, 0x1adb, [@l2cap_conf_efs={0x6, 0x10, {0x5, 0x1, 0x5, 0x0, 0x5, 0x6}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0xfffa}, @l2cap_conf_ews={0x7, 0x2, 0x7fff}, @l2cap_conf_ews={0x7, 0x2, 0x8000}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x3}, @l2cap_conf_ews={0x7, 0x2, 0x3}, @l2cap_conf_mtu={0x1, 0x2, 0x9}]}}, @l2cap_conf_rsp={{0x5, 0x6, 0x9}, {0x8000, 0x5, 0x2, [@l2cap_conf_fcs={0x5, 0x1, 0x1}]}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x7}}, @l2cap_move_chan_req={{0xe, 0x2, 0x3}, {0xb, 0x6}}, @l2cap_conf_rsp={{0x5, 0x0, 0x36}, {0x8, 0x2, 0x2, [@l2cap_conf_flushto={0x2, 0x2, 0x3}, @l2cap_conf_flushto={0x2, 0x2, 0x4}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0x5, 0x1, 0x200, 0x5, 0x2}}, @l2cap_conf_efs={0x6, 0x10, {0x9, 0x1, 0x2, 0x1, 0x400, 0x1}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0xeb, 0x5, 0xfffe, 0xaf0, 0xfffe}}]}}, @l2cap_conf_req={{0x4, 0xb, 0x2d}, {0x1, 0x202, [@l2cap_conf_rfc={0x4, 0x9, {0x1, 0x7, 0x2, 0xd, 0x9, 0x40}}, @l2cap_conf_flushto={0x2, 0x2, 0x2}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x1ff}, @l2cap_conf_mtu={0x1, 0x2, 0x81}, @l2cap_conf_flushto={0x2, 0x2, 0x8}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0xb4, 0x4, 0x0, 0x33, 0x2}}]}}, @l2cap_create_chan_rsp={{0xd, 0x31, 0x8}, {0xffff, 0x100, 0x7, 0x6}}, @l2cap_conn_req={{0x2, 0x2, 0x4}, {0x8, 0x6}}]}}, 0xdc) 11.546455874s ago: executing program 1 (id=2325): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001d00075f12f5f5000000000007000000", @ANYRES32=r3, @ANYBLOB='\x00\x00g\x00\b\x00\b'], 0x24}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x800) ioctl$I2C_TIMEOUT(r4, 0x702, 0xfffffffffffff95f) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) r7 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r7, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r9, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) setsockopt$inet6_mreq(r9, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) 11.273684259s ago: executing program 2 (id=2326): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x7, &(0x7f0000000500)=0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r6, &(0x7f0000000080)={0x1d, r5, 0x0, {0x2, 0x0, 0x4}, 0x2}, 0x18) sendmsg$can_j1939(r6, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) read$FUSE(r1, &(0x7f0000001740)={0x2020}, 0x2020) close(0x3) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0x20, &(0x7f0000000080)={@in={{0x2, 0x4e23, @empty}}, 0x3, 0x0, 0x1a, 0x0, "5e3b86774ef89ec669fabcaff49c2eeb8c4614c85b196a0c67a7768e058e3008931c08d43101cb8242bc42b8e0662749302c1ffcd1d119000000000000000000000000000000f65f000000000200"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000180)={@in={{0x2, 0x4e1d, @broadcast}}, 0x0, 0x0, 0x31, 0x0, "dc6efbc3b54972ba0604b8e20a587d8607043cff9ba01fb10d4df7171eb926b1343726c9a11ca54306250d2d2002d17c1fb42d00e3cefe6630aa40e9a73a7095657daea8791536fe9c5268be2bdd7a74"}, 0xd8) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f00000006c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x488, 0x320, 0x268, 0x0, 0xc0, 0x320, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x6, &(0x7f0000000280), {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, 0xffffff00, 0xffffffff, 'veth1_to_bond\x00', 'batadv0\x00', {0xff}, {}, 0x29, 0x3, 0x8}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0x36}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0xffffffff, 0xffffff00, 'gretap0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x62, 0x5, 0x3c}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@ttl={{0x28}, {0x3, 0x89}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5a452855407cdda7}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0xfb}}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0xffffffff, 'veth0_virt_wifi\x00', 'veth1_to_batadv\x00', {}, {}, 0x11, 0x1, 0x2}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x5, 0x1, 0x5, 0x7, 0x5, 0x6], 0x2, 0x4}, {0x0, [0x1, 0x1, 0x3, 0x5, 0x6, 0x1], 0x2, 0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e8) io_submit(r3, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000001c0)='m', 0xffffff4c}]) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c73d8a0870272091776c010203030902120001000000000904"], 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="3c0100001000130428bd700000000000e0000001000000000000000000000000ac1414aa000000000000000000000000000000004e2400000200202000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200000000000000000000000000010000000032000000000000000000000000000000000800010400000000000000300000000000000000000000000000000400000000004000fffffff3fffffffffeffffffffffffff7f00000000000000000000000000000000000000000000000800000000000000cc000000000000000000000000000000f600000000000000000000000000000000000000020001fe4fe7318d826428285900004000000000004c00120061656769733132386c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000347cc98e472dbe077af717e563542698ebead9d58d6f9b982e51effd019038fec11d9175494746acae3367078cd749bb4f22a4bf912fbaf16c2452dc081e"], 0x13c}}, 0x804) 9.335024899s ago: executing program 1 (id=2332): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd2d, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}]}, 0x34}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000380)={0x14, &(0x7f0000000080)={0x0, 0x22, 0xe4, {0xe4, 0x2a, "b7bedf02ece67d354b58225acd270156b18405c9ef5215fc35d555cb5fb915274385b2408eab2360bdc733ad760570d742fe6e726936bd0d7851d8851b10f2a5d6c6d08df802d1919c1b1df4e88138fb9ddf5a80031b7a143fff50f54c0b33d4446f683691babd72ed5a1eb7e6727a8063cf87d04470ebb4077d532e6f7d6d6927944f42b731682c11561ee1a6ee134c524b624584693d158c2537bc2930f439d8cb5868c4ba13ea7ee3c19cdce7a1b5ada05ca04561814f4d965f3d3229faf8f6207c215f7e208685ef0b680e38bc3bc095a025635587fe7beb3c704ada6fc2d77a"}}, &(0x7f0000000280)={0x0, 0x3, 0xc6, @string={0xc6, 0x3, "72f05ef41af935fe119ba6c795bafe0b99268963f6dec6e7eab117f14c7b6c3eb30b04ce3b45d81618901d740e7fb9c3d1b380991e7149abe7b5ed405054a0a27e0f92da8c99025e280c18cf56e0759c5f17051d6ab53df38a8232a9359b3c7eebcf5fccaf7421776aa6ab0ca9f40308dbe0f694297a6ddf3e5008ec17e81adf636fe789e00bb0399657e92d1b23c226155775b4afe05fe80ac21a978d62569533993e3eebeff274424368f47ad960eb942d4a411f067b798eff535b8b4dbec23792acde"}}}, &(0x7f0000000540)={0x34, &(0x7f00000003c0)={0x0, 0x18, 0x1a, "55a36ab645302d4c93566990ace3f3caca0c140b5e33e56e39d4"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0xfa}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000480)={0xc0, 0xa1, 0x4, 0x40}, &(0x7f00000004c0)={0x40, 0xa0, 0x4, 0x10000}, &(0x7f0000000500)={0xc0, 0xa2, 0x2f, "ef50bb2e62c867901bb39fe3a4066d7bdacd5b845750b19fe44c0d7f93a2b6a3133a99a106eb7b5c7d857a7426587d"}}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000680)={0x14, &(0x7f0000000580)={0x20, 0x0, 0x90, {0x90, 0x22, "8b31ac3d9bf28fb74d3cbbb55928f0ef13d69d10d70c1a0d0d28b650072e2885aef89071395333025162507bc490c356d1dc69fd161439c5b3e99921d77c1c0a2abcc64623e4dd8b222bb450362b08308d00c31f630e8471c359fce2984a0913f5ec7dabf188af4b3e2aa13e77166d59d45ea6c8d30137e2a12ab57aaaf4695d51726eeb25288d735a5028c0b190"}}, &(0x7f0000000640)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000008c0)={0x44, &(0x7f00000006c0)={0x20, 0x12, 0x1, "9c"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000780)={0x20, 0x80, 0x1c, {0x4, 0x10, 0x7, 0x401, 0x8, 0x1, 0xf, 0x0, 0x10, 0x1, 0x0, 0x1}}, &(0x7f00000007c0)={0x20, 0x85, 0x4, 0x8000}, &(0x7f0000000800)={0x20, 0x83, 0x2}, &(0x7f0000000840)={0x20, 0x87, 0x2, 0x9}, &(0x7f0000000880)={0x20, 0x89, 0x2}}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r2 = syz_usb_connect$lan78xx(0x4, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 8.018222313s ago: executing program 2 (id=2334): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000080000bf0570f3"}, 0x4000c, 0x3}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000000)={0x2, 0x1, 0x3, 0x2, 0x4}) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000100)=0x10002, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x0, 0x2}}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x10004, 0x3, 0x1, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000040)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e0000002ebe660f38049f9e0064f30fc7b000101f20f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f08b8f4008ee0", 0x5b}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r7, 0xc008ae67, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffe84}, 0x68) r8 = socket$kcm(0xa, 0x2, 0x73) sendmsg$sock(r8, &(0x7f0000000000)={&(0x7f00000001c0)=@nl=@unspec={0x0, 0x0, 0x0, 0xd8ff}, 0x80, 0x0, 0x0, &(0x7f0000000380)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x18}, 0x4) recvmsg(r8, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2102) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r8, 0x80089419, &(0x7f0000000140)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0x1, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x7ffffffc, 0x9f69a7a086f70aee, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) 7.696300728s ago: executing program 2 (id=2335): socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) landlock_create_ruleset(0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000068000000060a010400000000000000000100000008000b4000000000400004802800018007000100637400001c000280080001400000000108000240000000090500030000000000140001800a0001007265646972000000040002800900010073797a30"], 0xdc}, 0x1, 0x0, 0x0, 0x5090}, 0x4000000) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010300000000000000000100000a20000000000ad68fc2122e01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900810073797a30000000000900030073797a320000000028000000060a010300000000000000000100000008000b40000000000900010073797a3000000000140000001100010000000000000000"], 0x9c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000080)={0x401, 0x10, 0x80000000, 0x7}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004479bb10b10e07700002010203010902120001fd0090020904b80200ff00ff00"], 0x0) socket(0x1, 0x800, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000240)={r3, @in6={{0xa, 0x4e21, 0xd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0xff, 0x103}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e20, 0x3ae, @private1, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) 7.299738185s ago: executing program 4 (id=2337): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) fremovexattr(r1, &(0x7f0000000000)=@known='system.posix_acl_default\x00') 6.92771746s ago: executing program 0 (id=2339): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000500)=""/187, 0xbb}, {&(0x7f00000006c0)=""/243, 0xf3}, {&(0x7f00000007c0)=""/4041, 0xfc9}, {&(0x7f00000048c0)=""/4122, 0x101a}, {0x0}], 0x5}, 0x0) 6.726034935s ago: executing program 3 (id=2340): r0 = syz_usb_connect$cdc_ncm(0x0, 0x7c, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102020000102505a1a440000102030109026a00020105fa0e0904000001020d00000524060001052400ba000d240f0102000000fb0605000706241a60e122062407046925042413020424130609058103ff0300030609040100"], &(0x7f0000005340)={0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000002ec97000000000000400"/28], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x129a02, 0x0) sendfile(r6, r5, &(0x7f0000000080)=0xb, 0x8) write$UHID_CREATE2(r4, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r4, 0x1000) r7 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) poll(&(0x7f0000000040)=[{r7, 0x1}], 0x1, 0x101) r8 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_CONNECTINFO(r8, 0x80045503, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000f40)=""/4077, 0x1a, 0xfed, 0x2}, 0x28) close_range(r3, 0xffffffffffffffff, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000100000ffffdd0000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a310000000009000300030000000000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c000) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="58000000020605000000000000000000070000000c00078008001240000100010500010006000000050005000a00000005000400000000000900020073797a310000000013000300686173683a6e65742c6966616365"], 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000080)={0x0, 0xc, 0x2d, {0x2d, 0x22, "0ab79c6edc9d1a5fcfdc362bdfb916b4c6bab1ea3dab704496ead94bfa694c4ad2a185c8c18ab98a79b929"}}, &(0x7f00000000c0)={0x0, 0x3, 0xc1, @string={0xc1, 0x3, "93b561d34d7647b5e65c2e8d4d5bc006c0841f8783d7c7dd219e34352abfefbb218367f23cd0e9d509ba95ba67de7a550276662e793a0ec561273a05f95bb6157df333d32db5bf0425c3d742de791c987e1e5946fa75dc6f531ae83f3c6b358f3cbaa737ae7bf5f555b22aa1b148d9e87fce4ced5360ed512f2eeaf5e6e0601440553c7e492cde1daed6d4a1de53bf1da54dfc40a5838e2c492c6b1ac5ab8def3dfc1d1f32ecb80d5898b13cbd437f12e392b817569e00d6c7e0e6712ad54c"}}, &(0x7f00000001c0)={0x0, 0xf, 0xa0, {0x5, 0xf, 0xa0, 0x2, [@wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x8, 0xc000, 0xd}, @generic={0x90, 0x10, 0xb, "ea31ae1bb2bacab3d4b09b73d4257fc79036de4b13de75fea5b9a73a15fa1c96b3a49d6dffb535fcd8441bdac43cee1c44c6d4852f0b48b08fd50778f58df127754a434c1d1a67e3fd96badf27899ff3c4d31f2d40f23ec327b8f1277ea3a6114dfed37b900ad09e447bc0955fc0396b5ee945ca01621657fa5c11f8e672d5b7bd3c230c142c06355a0f171a90"}]}}, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x33, 0x4, 0x9, 0x3, "0a73bec1", "ef56aeaf"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x0, 0xf8, 0x4, 0x4, 0x8, 0x3a89}}}, &(0x7f00000007c0)={0x84, &(0x7f0000000340)={0x20, 0x14, 0xa0, "92676e6f894ffbf54a608bafd67ac8975d92dc04a05b47163f1393cfb62a1d61ce429ad88724423122548270fd8934bcf9c2ec9cbbde543caabf2f7f1c8ef43fd550da7fad3b26458c3ca901ac6d07dbcc50395d6e26b80b8033102b065e835d1a91e4006563d92f695bc833c40798a8c4e427e0667dea441a297674f6db505aa5ae10cb9e8588299c73b35b74c976479615c05d351a838ac741df5887de54ef"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0xde}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x100, 0x20}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0xffff}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0xf9}, &(0x7f0000000580)={0x40, 0xb, 0x2, '\n9'}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0xc4}, &(0x7f0000000600)={0x40, 0x13, 0x6, @local}, &(0x7f0000000640)={0x40, 0x17, 0x6, @link_local}, &(0x7f0000000680)={0x40, 0x19, 0x2, "0cc7"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0x7f}}) 6.661399971s ago: executing program 0 (id=2341): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803", 0x81}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2", 0x47}], 0x2}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0}}], 0x2, 0x20000044) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10010002}, 0xc, &(0x7f0000000c80)={&(0x7f0000000e00)=ANY=[], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x6f4}}, 0x0) 6.40616943s ago: executing program 0 (id=2342): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz1\x00', 0x19}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x9) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000400)=""/5, 0x214000, 0x800}, 0x20) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="ec0100000001050500000000000000000a0000003c0002802c00018014000300ff010000000000000000001f0000000114000400ff0200000000000000000000000000010c00028005000100000080003c0001800c00028005000100000000002c00"], 0x1ec}}, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000f36d666666440f38826b410f786b42d1d107b8010000000f01d98fe9d89afd", 0x3d}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0x10, 0x0, 0x8, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x1}) ioctl$KVM_RUN(r5, 0xae80, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000340)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r6 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = syz_open_dev$vbi(&(0x7f00000003c0), 0x3, 0x2) ioctl$VIDIOC_S_AUDOUT(r8, 0x40345632, &(0x7f0000000400)={0x6, "b4d9d135acf65fd9556b5a424c957422b74f42eaf45b4ff5b7ffffff7fd4b1bd", 0x1, 0x1}) socket(0x400000000010, 0x3, 0x0) 6.296820484s ago: executing program 4 (id=2343): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10010002}, 0xc, &(0x7f0000000c80)={&(0x7f0000000e00)=ANY=[], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {0x0}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 6.176641966s ago: executing program 4 (id=2344): r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, 0x0) wait4(0x0, 0x0, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0xffffffffffffff38, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x0, 0x1, 0x1, 0x0, 0x9}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_SREG={0x0, 0x7, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000001200)={{0x1, 0x1, 0x18, r2, {r2}}, './file0\x00'}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000940)={{0x0, 0x2001, 0x257f, 0x5}, 'syz0\x00', 0x38}) ioctl$UI_DEV_CREATE(r4, 0x5501) ioctl$UI_DEV_SETUP(r4, 0x405c5503, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000001340)={'syztnl2\x00', &(0x7f0000001380)={'ip6tnl0\x00', 0x0, 0x4, 0x98, 0xff, 0x7, 0xc, @local, @private0={0xfc, 0x0, '\x00', 0xfd}, 0x20, 0x20, 0x8001, 0x2}}) sendmsg$nl_route(r2, &(0x7f0000001280)={&(0x7f00000010c0), 0xc, &(0x7f0000001240)={&(0x7f0000001100)=ANY=[@ANYBLOB="e40000004300000226bd7000fedbdf25070000002000068008000b00090000000c000600010100000000000008000e00000000006400068008000e00ff07000008000900060000000c000700d10f0000000000000c00070007000000000000000c00070005000000000000000c00070007000000000000000c00040003000000000000000c000c00010000800000000008000100", @ANYRES32=r5, @ANYBLOB="0c000800090000000000000008000400c600000008000400fcff01000c0008000000000000000200000004000400000008000200000000000c0008000200"/76], 0xe4}, 0x1, 0x0, 0x0, 0x10}, 0x20000045) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="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", @ANYRESHEX=r7, @ANYRESOCT=r6], 0x0) 5.772937012s ago: executing program 0 (id=2345): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fanotify_init(0x200, 0x48801) fanotify_mark(r6, 0x1, 0x1001, r4, 0x0) write$vhost_msg_v2(r5, &(0x7f0000002b00)={0x2, 0x0, {0x0, 0x0, 0x0, 0x1, 0x4}}, 0x48) syz_open_procfs$namespace(0x0, 0x0) r7 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r7, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x4) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x9, 0x0, 0x81, 0xffffffff}) sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) recvmsg$kcm(r8, &(0x7f0000002f80)={0x0, 0x0, 0x0}, 0x10000) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x7a, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000000540)) ioctl$KVM_RUN(r9, 0xae80, 0x0) syz_usb_disconnect(0xffffffffffffffff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r4, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000380)={0x6c, 0x0, 0x30c, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7f}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000005}, 0x10) 5.092090967s ago: executing program 1 (id=2346): r0 = socket(0x2, 0x80805, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) r3 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x84, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2b24d, 0x11a20}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x48, 0x16, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x40, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x3ff, 0x6fb, 0xffffffff, 0x88a8}}, {0x14, 0x1, {0xe39, 0x3f, 0xd, 0x8100}}, {0x14, 0x1, {0x6, 0x6af, 0x7, 0x88a8}}]}]}]}, @IFLA_LINKMODE={0x5, 0x11, 0x6}]}, 0x84}, 0x1, 0x0, 0x0, 0xc1}, 0x0) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040)) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000240), 0x0, 0x2) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}]}) r7 = msgget$private(0x0, 0x4a0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c0000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c0002800600010000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) msgctl$IPC_STAT(r7, 0x2, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0xf, 0x3, 0x4, 0x1000000000000002, 0x102000000000002, 0x8000000d, 0x2004c8, 0xffff, 0x3, 0xffffffff, 0xffffffffffffffff, 0x7fffffffffffffff, 0xd0b, 0xfffffffffffffff9, 0x2000000000000003, 0x5], 0x80a0000, 0x4284}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmmsg$inet(r0, &(0x7f0000004100)=[{{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x6401011f}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000300)="99", 0x1}, {&(0x7f0000000380)="89a5e7e2d5061ecbb22e42e6a1fa46c8761ede6d75a773dee8fea83182086096500c7183f8a09e2e116c5f4f7e4b9db73dc2e363432d2e50880571a92d7ee970a4b7276af9ead063b9c4dc9f72bb26fa060146354e2c49b09fafda6fe52c1af66c52ff3a96c1dc04b6ebcdb40853bbf356829c3b4a7ba5050ef7411716e157908fd1de7f6c37f6b55ca720561be02cb3942eb1b1528bfd9803aac17a5067c9faf11be77571807315e6341eddc8cc7286439df5668a4a1db696dd7657ec8190c8b2c538f46c4fb192c8234a8f1c9d259de517f0b27128d1a39a79f6d2e607e192cfaf9629b67362c820d35dadadc6517ccbb34331390e", 0xf6}], 0x2}}, {{&(0x7f0000000000)={0x2, 0x4e20, @private=0xa010102}, 0x10, &(0x7f0000000a40)=[{&(0x7f00000004c0)="a05b", 0x2}], 0x1}}], 0x2, 0x48000) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xc, &(0x7f0000000340)=@assoc_value={0x0}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000a00)={r10, 0x80000001}, 0x8) 3.990328416s ago: executing program 2 (id=2347): sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x737c03, 0x82) read$dsp(0xffffffffffffffff, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x8800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x3, 0x10, 0xf1, 0x7, 0x7fffffffffffe, 0x5, 0x4, 0x9, 0x7f, 0x800000000f4a, 0x100000000, 0xbdb], 0xc000, 0x4000}) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_usb_connect$lan78xx(0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r2 = inotify_init1(0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x4b8, 0xffffffff, 0x260, 0x260, 0xe8, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @private1, @local, [0xff000000, 0xff000000, 0x0, 0xff], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0x7fffff7f], 0x3c80}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x3, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private1, [0x0, 0x0, 0xff, 0xff], [0x0, 0xffffff00], [0x0, 0xff000000], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) inotify_add_watch(r2, &(0x7f0000000040)='./file1\x00', 0x7f7) fallocate(0xffffffffffffffff, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000320000/0x2000)=nil, 0x2000, 0x27ffff7, 0x10, 0xffffffffffffffff, 0x2000) 3.940907852s ago: executing program 3 (id=2348): socket$inet_sctp(0x2, 0x1, 0x84) mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000, 0x3, &(0x7f000007e000/0x1000)=nil) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = userfaultfd(0x1) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="1400000010000100000000000000000a28000000020a010200000000000000000a00000609000100730000000000000008000240000000013c000000180a00000000000000000000000000060900020073797a310000000008000740000000000900010073797a300000000008000740000000011c000000090a030000000000000000000500000208000c4004000023a7cddd33250bc4221f5e2720ad8914000025bb598052bb410b00000000000100000a00000000"], 0xa8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x4c, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0xd4}, 0x0) socket$kcm(0x10, 0x2, 0x10) socket$alg(0x26, 0x5, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) read(r3, &(0x7f0000000240)=""/115, 0x73) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r4, 0x40044104, &(0x7f00000003c0)=0x80000001) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x5c, 0x2c, 0xf25, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_EMATCHES={0x28, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x100}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7, 0x1, 0xbc}, {0x5, 0x100000, 0x3, 0x4, 0x0, 0x1, 0x1}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$FBIOPAN_DISPLAY(r1, 0x4606, &(0x7f0000000040)={0x320, 0xa0, 0x280, 0x600, 0x0, 0x4, 0x0, 0xfffffffe, {0x9, 0x7}, {0x2a, 0x0, 0x1}, {0x402, 0x7}, {0x1, 0x4, 0xffffffff}, 0x1, 0x0, 0xe512, 0x7fff, 0x1, 0x6e, 0xc, 0x2, 0x803, 0x80, 0x8fac, 0x8, 0x8, 0x1, 0x0, 0x4}) sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000017c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@mask_cswp={0x58, 0x114, 0x9, {{0x401, 0x2}, &(0x7f0000000440)=0x5, 0x0, 0xfffffffffffffffd, 0x0, 0x5, 0x7f, 0x35, 0x89}}], 0x58}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="64000000020601020000000000000000000000000900020073797a31000000000500010007000000050005000a00000014000780080013400000000008001240fffffffa16000300686173683a6e65742c706f72742c6e6574000000050004"], 0x64}, 0x1, 0x0, 0x0, 0x24004010}, 0x0) r8 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x101840) ioctl$VIDIOC_S_SELECTION(r8, 0xc040565f, &(0x7f0000000080)={0xa, 0x1, 0x1, {0xe7ff, 0x1, 0x406, 0x870}}) 3.613278789s ago: executing program 3 (id=2349): socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000540)={'dummy0\x00', &(0x7f0000000440)=@ethtool_drvinfo={0x12, "045499ddcde403e48efcd481ffa7bb790f2d3a3d4500", "3e009c93938e9f9b23eab1502bdbeddc4aec10fa878e1b7b9700", "2bc15739a02b801e68ba8446a73ccfb0ee9082262689a9cbd7362debb8601d1e", "3d771e8033c517b4ecb49b85624ff99614ee20c02e3a8e562d3d6af1bbc9e1ca", "a29157ef062ecc5b78a56b83bdec6b4ec3539b6a1069a07391c6bc59e3480386", "451f955ff4d438a31a1c376c", 0x101, 0x1, 0x1000, 0x6, 0xfffffffe}}) mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000, 0x3, &(0x7f000007e000/0x1000)=nil) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = userfaultfd(0x1) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="1400000010000100000000000000000a28000000020a010200000000000000000a00000609000100730000000000000008000240000000013c000000180a00000000000000000000000000060900020073797a310000000008000740000000000900010073797a300000000008000740000000011c000000090a030000000000000000000500000208000c4004000023a7cddd33250bc4221f5e2720ad8914000025bb598052bb410b00000000000100000a00000000"], 0xa8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x4c, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0xd4}, 0x0) socket$kcm(0x10, 0x2, 0x10) socket$alg(0x26, 0x5, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) read(r4, &(0x7f0000000240)=""/115, 0x73) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r5, 0x40044104, &(0x7f00000003c0)=0x80000001) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x5c, 0x2c, 0xf25, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_EMATCHES={0x28, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x100}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7, 0x1, 0xbc}, {0x5, 0x100000, 0x3, 0x4, 0x0, 0x1, 0x1}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$FBIOPAN_DISPLAY(r2, 0x4606, &(0x7f0000000040)={0x320, 0xa0, 0x280, 0x600, 0x0, 0x4, 0x0, 0xfffffffe, {0x9, 0x7}, {0x2a, 0x0, 0x1}, {0x402, 0x7}, {0x1, 0x4, 0xffffffff}, 0x1, 0x0, 0xe512, 0x7fff, 0x1, 0x6e, 0xc, 0x2, 0x803, 0x80, 0x8fac, 0x8, 0x8, 0x1, 0x0, 0x4}) sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000017c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@mask_cswp={0x58, 0x114, 0x9, {{0x401, 0x2}, &(0x7f0000000440)=0x5, 0x0, 0xfffffffffffffffd, 0x0, 0x5, 0x7f, 0x35, 0x89}}], 0x58}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="64000000020601020000000000000000000000000900020073797a31000000000500010007000000050005000a00000014000780080013400000000008001240fffffffa16000300686173683a6e65742c706f72742c6e6574000000050004"], 0x64}, 0x1, 0x0, 0x0, 0x24004010}, 0x0) syz_open_dev$video(&(0x7f0000000040), 0x8, 0x101840) 3.436362235s ago: executing program 1 (id=2350): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) rmdir(&(0x7f0000000640)='./file0\x00') r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) syz_usb_control_io$uac1(r0, &(0x7f00000004c0)={0x14, &(0x7f00000002c0)={0x40, 0x8, 0x3d, {0x3d, 0x3, "f44fd7ece3c0f4814065a65a7d83216f4ca22459f4dbab6b3a009399e355fe59ecdc23727e71b67aebdba46969372e4d409f02d3398a3c85864fad"}}, &(0x7f0000000340)={0x0, 0x3, 0xfe, @string={0xfe, 0x3, "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"}}}, &(0x7f0000000840)={0x44, &(0x7f0000000540)={0x40, 0x7, 0x30, "263ffbd00f3c04d25edaf82e8b6d4d9b21903430b74a43e44286dbf91834a87f4655d4d3d6e462d0b14aa0451b20e3fb"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000600)={0x20, 0x81, 0x3, "62299f"}, &(0x7f0000000680)={0x20, 0x82, 0x3, "41a0a8"}, &(0x7f0000000780)={0x20, 0x83, 0x3, 'M$n'}, &(0x7f00000007c0)={0x20, 0x84, 0x4, "a88dadee"}, &(0x7f0000000800)={0x20, 0x85, 0x3, "1dbd16"}}) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) writev(r4, &(0x7f0000000280)=[{&(0x7f0000000180)='e', 0x1}], 0x1) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x20000}, 0x8) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001200)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x823}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0xff00000000000000}}]}}}, @IFLA_MTU={0x8, 0x4, 0x44}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000080}, 0xc010) syz_open_dev$vim2m(&(0x7f0000000480), 0x97, 0x2) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000640)={0x0, 0x31}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)={0x40, 0x21, 0x1, 0x6}}) syz_usb_control_io$hid(r0, 0x0, 0x0) 3.210776279s ago: executing program 3 (id=2351): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000500)=""/187, 0xbb}, {&(0x7f00000006c0)=""/243, 0xf3}, {&(0x7f00000007c0)=""/4041, 0xfc9}, {&(0x7f00000048c0)=""/4122, 0x101a}, {0x0}], 0x5}, 0x0) 3.177761817s ago: executing program 3 (id=2352): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr, 0x5}, 0x1c) listen(r0, 0x10040) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000003ed18cd6b0774712c9a03457b2de00000c00fc8008000500", @ANYRES32=r1, @ANYBLOB="0c00018050fd0600", @ANYRES32=0x0, @ANYBLOB="004096", @ANYRESDEC=r0], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000240)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @val={@void}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) r2 = syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12011003faff82083910012181250102030109021b00028c4400600904"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r2) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x38, 0x40, 0x107, 0xfffffffe, 0x2, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x14, 0x2, 0x0, 0x1, [@nested={0x10, 0x14, 0x0, 0x1, [@nested={0xc, 0x16, 0x0, 0x1, [@typed={0x8, 0xb6, 0x0, 0x0, @u32=0x4888}]}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) unshare(0x22020600) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r4, &(0x7f0000000300)="80", 0x1, 0x4048016, &(0x7f00000003c0)={0xa, 0x4e21, 0xc, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x300) keyctl$dh_compute(0x17, &(0x7f0000000000)={r3, r3, r3}, &(0x7f0000000100)=""/83, 0x53, &(0x7f0000000340)={&(0x7f0000000300)={'sha3-224\x00'}}) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x20) r6 = fcntl$dupfd(r5, 0x0, 0xffffffffffffffff) ioctl$AUTOFS_IOC_EXPIRE(r6, 0x810c9365, &(0x7f00000003c0)={{0x1, 0x6}, 0x100, './file0\x00'}) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x2, 0x4}}, 0x20) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000380)={0x7, 0x8}, 0x10) r7 = socket(0x10, 0x3, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newchain={0x24, 0x64, 0x1, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0xfff1, 0x7}, {0x2, 0xc}, {0xfff2, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20044801}, 0x20040000) r10 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0700000000000000000000000000000000650000000000000200000000000000000900"/45, @ANYRES32=0x0, @ANYBLOB="00000040000000000004000000000000"], 0x4c}}, 0x0) 3.071499031s ago: executing program 0 (id=2353): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3", 0x89}], 0x2}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)}], 0x2}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000", @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10010002}, 0xc, &(0x7f0000000c80)={&(0x7f0000000e00)=ANY=[@ANYBLOB="7c0100", @ANYRES16, @ANYBLOB="01002bbd7000fbdbdf25070000000c000180080003000100000074000180140002007767320000000000000000000000000008000300020000001400020070696d3672656730000000000000000014000200677265746170300000", @ANYRES32, @ANYRES32=r0], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.965965401s ago: executing program 4 (id=2354): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10010002}, 0xc, &(0x7f0000000c80)={&(0x7f0000000e00)=ANY=[], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.926967818s ago: executing program 4 (id=2355): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') r1 = socket$kcm(0x29, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, 0x0, {0xfff1}, {0xffff, 0xe}, {0xd}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x7, [0xa, 0x0, 0x5, 0x10, 0xfb, 0x1d, 0x9, 0x8, 0xc, 0x5, 0xd, 0xd, 0x3, 0x4, 0x3, 0xd], 0x1, [0x200, 0xc, 0x101, 0x7, 0x486, 0x3c, 0x0, 0x5, 0x8, 0x2d, 0xa, 0x134e, 0xfffc, 0x6, 0x8, 0xba], [0x3, 0x9, 0x3, 0x0, 0x3, 0x0, 0xc5d4, 0x3, 0x3, 0x48a2, 0xffff, 0x7, 0x5, 0x4, 0x6, 0x6]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc004841}, 0x4040044) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000280)="f0ca8b71c71110c2156ceb7869a4fc08d927a364ae0aadd626ee3b6ee4a8435a3fda42b87fef8ab7324fddba7af318c48061ec58634d31d9dd031f51fcf89080c302d9ebf4ac1961", 0x48}], 0x2}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfe33) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1cc) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x2000}, 0x18, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x20000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000340)={0x2000, r6}, 0x0) landlock_restrict_self(r5, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x400) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4050000ffe0f50571103f00000000006700000000800080950014000000000072c2f98cb7333011f1cf97f165ac0dc8c84c1ed04a84f6871d815bbc0600"/76], &(0x7f0000000200)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) shmctl$IPC_RMID(0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) preadv(r3, 0x0, 0x0, 0x3, 0x8) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f00000001c0)={0x6, 0xb0, 0x8}) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0xffffffffffffffb8) sendmmsg$inet(r1, &(0x7f0000007ac0)=[{{&(0x7f0000000180)={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000240)="2a69c258ca", 0x34000}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000480)="7349b402ed", 0x5}, {0x0, 0x11}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x40) unlinkat(r0, &(0x7f0000000040)='./file0\x00', 0x0) readlinkat(r0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)=""/17, 0x11) 2.908049228s ago: executing program 0 (id=2356): sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x737c03, 0x82) read$dsp(0xffffffffffffffff, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x8800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x3, 0x10, 0xf1, 0x7, 0x7fffffffffffe, 0x5, 0x4, 0x9, 0x7f, 0x800000000f4a, 0x100000000, 0xbdb], 0xc000, 0x4000}) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_usb_connect$lan78xx(0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r2 = inotify_init1(0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x4b8, 0xffffffff, 0x260, 0x260, 0xe8, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @private1, @local, [0xff000000, 0xff000000, 0x0, 0xff], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0x7fffff7f], 0x3c80}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x3, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private1, [0x0, 0x0, 0xff, 0xff], [0x0, 0xffffff00], [0x0, 0xff000000], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518) inotify_add_watch(r2, &(0x7f0000000040)='./file1\x00', 0x7f7) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r4, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000320000/0x2000)=nil, 0x2000, 0x27ffff7, 0x10, r4, 0x2000) 1.44482647s ago: executing program 4 (id=2357): r0 = syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = gettid() timer_create(0x1, &(0x7f0000000900)={0x0, 0x21, 0x4, @tid=r1}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r2, 0xffffffffffffffff, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f00000006c0)='.\x00', 0xaa) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) dup3(r3, r4, 0x0) readv(r4, &(0x7f0000000440)=[{&(0x7f0000000340)=""/48, 0x30}], 0x50) 914.836345ms ago: executing program 1 (id=2358): r0 = syz_usb_connect$cdc_ncm(0x0, 0x7c, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102020000102505a1a440000102030109026a00020105fa0e0904000001020d00000524060001052400ba000d240f0102000000fb0605000706241a60e122062407046925042413020424130609058103ff0300030609040100"], &(0x7f0000005340)={0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000002ec97000000000000400"/28], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x129a02, 0x0) sendfile(r6, r5, &(0x7f0000000080)=0xb, 0x8) write$UHID_CREATE2(r4, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r4, 0x1000) r7 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) poll(&(0x7f0000000040)=[{r7, 0x1}], 0x1, 0x101) r8 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_CONNECTINFO(r8, 0x80045503, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000f40)=""/4077, 0x1a, 0xfed, 0x2}, 0x28) close_range(r3, 0xffffffffffffffff, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000100000ffffdd0000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a310000000009000300030000000000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c000) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="58000000020605000000000000000000070000000c00078008001240000100010500010006000000050005000a00000005000400000000000900020073797a310000000013000300686173683a6e65742c6966616365"], 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000080)={0x0, 0xc, 0x2d, {0x2d, 0x22, "0ab79c6edc9d1a5fcfdc362bdfb916b4c6bab1ea3dab704496ead94bfa694c4ad2a185c8c18ab98a79b929"}}, &(0x7f00000000c0)={0x0, 0x3, 0xc1, @string={0xc1, 0x3, "93b561d34d7647b5e65c2e8d4d5bc006c0841f8783d7c7dd219e34352abfefbb218367f23cd0e9d509ba95ba67de7a550276662e793a0ec561273a05f95bb6157df333d32db5bf0425c3d742de791c987e1e5946fa75dc6f531ae83f3c6b358f3cbaa737ae7bf5f555b22aa1b148d9e87fce4ced5360ed512f2eeaf5e6e0601440553c7e492cde1daed6d4a1de53bf1da54dfc40a5838e2c492c6b1ac5ab8def3dfc1d1f32ecb80d5898b13cbd437f12e392b817569e00d6c7e0e6712ad54c"}}, &(0x7f00000001c0)={0x0, 0xf, 0xa0, {0x5, 0xf, 0xa0, 0x2, [@wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x8, 0x8, 0xc000, 0xd}, @generic={0x90, 0x10, 0xb, "ea31ae1bb2bacab3d4b09b73d4257fc79036de4b13de75fea5b9a73a15fa1c96b3a49d6dffb535fcd8441bdac43cee1c44c6d4852f0b48b08fd50778f58df127754a434c1d1a67e3fd96badf27899ff3c4d31f2d40f23ec327b8f1277ea3a6114dfed37b900ad09e447bc0955fc0396b5ee945ca01621657fa5c11f8e672d5b7bd3c230c142c06355a0f171a90"}]}}, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x33, 0x4, 0x9, 0x3, "0a73bec1", "ef56aeaf"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x0, 0xf8, 0x4, 0x4, 0x8, 0x3a89}}}, &(0x7f00000007c0)={0x84, &(0x7f0000000340)={0x20, 0x14, 0xa0, "92676e6f894ffbf54a608bafd67ac8975d92dc04a05b47163f1393cfb62a1d61ce429ad88724423122548270fd8934bcf9c2ec9cbbde543caabf2f7f1c8ef43fd550da7fad3b26458c3ca901ac6d07dbcc50395d6e26b80b8033102b065e835d1a91e4006563d92f695bc833c40798a8c4e427e0667dea441a297674f6db505aa5ae10cb9e8588299c73b35b74c976479615c05d351a838ac741df5887de54ef"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0xde}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x100, 0x20}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0xffff}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0xf9}, &(0x7f0000000580)={0x40, 0xb, 0x2, '\n9'}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0xc4}, &(0x7f0000000600)={0x40, 0x13, 0x6, @local}, &(0x7f0000000640)={0x40, 0x17, 0x6, @link_local}, &(0x7f0000000680)={0x40, 0x19, 0x2, "0cc7"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0x7f}}) 713.917955ms ago: executing program 2 (id=2359): creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x10, 0xffffffffffffffff, 0xc9c2a000) read$FUSE(r0, &(0x7f0000000180)={0x2020}, 0x2024) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000014c0)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000007040)={'geneve1\x00', &(0x7f0000007000)=@ethtool_cmd={0x15, 0xffffffff, 0x6, 0x0, 0x4, 0x9, 0xff, 0x8, 0x3, 0x7, 0x1, 0x5, 0xa33, 0x1, 0x8, 0x94, [0x0, 0x80000008]}}) ioctl$KVM_RUN(r0, 0xae80, 0x0) lseek(r0, 0xfffffffffffffff5, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) read$FUSE(r3, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x6, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffd}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, &(0x7f00000082c0)={0x14, &(0x7f00000000c0)={0x0, 0xd, 0x84, {0x84, 0xf, "bc4b2b1d4b1eec1474116726bf7165c13e87692a038cbbba3512e857b220d465d43a91b2f792f7e4f361849322a73fe90baeaa3d2b547c0729f6ab4db643943745fe31bc4c49b2ac462fc567c694a916174c03e99cfe22eedcd253718305cc46662ed61104c45208d22709d02c4e7f093763534d6228c18ebc87bc898c816df8f262"}}, &(0x7f00000081c0)={0x0, 0x3, 0xd8, @string={0xd8, 0x3, "67c2ebd4cf6fa8d3199fc84df72749a6d802e99c8d34e65dbed0ed0b8e05046e9397458897b5be556c193245f5c7b7f1ea31abd438be51f45e6aff07e6d1ecbe5663d4453b02b4ec6a6ca16949deae679bac76e128d3fcfac2500791b4f7ed45bda571b086a572c5a86f00aeb02fe4ea220cd46dc2067f71f68cb2911e081f16c64d99ed16014349cfbd6db482ea796acf9cb971653efa3aebeb3ebc44e8be5e0dc8515a141cbf57a73512dc388c655293e2652c8db54153431edaeaf1933ba929c6ebe7d043db4ec977d617959e8c2358fd4c7d1b89"}}}, &(0x7f00000084c0)={0x2c, &(0x7f0000008300)={0x40, 0xa, 0x85, "abd67f32b5326befd28c2ab145224c241d324f3ad8b11862a4b62ad6d85e1005a1e30c17fe0b2e22f35e34030c2380c7d1d0ccde55ab806874fae1c4474038722202460b8b41b7ba25a8286b4b954f946620ae61a824e330d9b31e04f51f0e2a2960fbdae038320f51ad12c53aa77b31fc932d48ad959a34c67a562b3d7aff21c5d770165e"}, &(0x7f00000083c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000008400)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000008440)={0xc0, 0x5, 0x5, "1b2f271ea5"}, &(0x7f0000008480)={0x40, 0x5, 0x5, "efd3fca64f"}}) syz_fuse_handle_req(r3, &(0x7f00000061c0)="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", 0x2000, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x18, 0x0, 0x3, {0x80000000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x18, 0x0, 0x0, {0x104}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009bbd8b08e80430ffd1a601220301090222000100000000090400000129fddd000905e2ffbe"], 0x0) socket$inet6(0xa, 0x3, 0x3a) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$TIOCGSERIAL(r5, 0x541e, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/116}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 0s ago: executing program 3 (id=2360): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000440)={{0x80}, 'port0\x00', 0xe3, 0x1b1c07, 0x0, 0x4}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000280)) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x5) r3 = eventfd2(0x0, 0x0) io_setup(0x4, &(0x7f0000000080)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000038, 0x3, 0x2a8, 0xe8, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x3, 0x6, 0x5, 0x7f, 0x3, 0x2, 0x7, 0x4]}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, [0x0, 0xffffffff], [0x0, 0x0, 0xff000000], 'veth1\x00', 'veth0_to_batadv\x00', {0x8499377069aa4b5f}, {}, 0x3a, 0x80, 0x4}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x7fffffff, 0xfffffffc, 'snmp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_cmd={0xa, 0x8, 0x0, 0x9, 0xf, 0x3, 0x3, 0xfc, 0x5, 0x9, 0x0, 0x2, 0x6, 0xff, 0x0, 0xfffffeff}}) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe2$watch_queue(0x0, 0x80) socket$netlink(0x10, 0x3, 0x0) io_pgetevents(r4, 0x2, 0x2, &(0x7f0000000100)=[{}, {}], 0x0, 0x0) io_submit(r4, 0x2, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffe, r2, 0x0, 0x0, 0x0, 0x0, 0x3, r3}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) io_getevents(r4, 0x2, 0x2, &(0x7f0000000c80)=[{}, {}], 0x0) shutdown(r2, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x201) pwritev2(r7, &(0x7f0000001b00)=[{&(0x7f00000000c0)="05", 0x1}], 0x1, 0x0, 0x0, 0x0) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) sendmsg$MPTCP_PM_CMD_REMOVE(r6, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, r8, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x34}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x44) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, 0x0) kernel console output (not intermixed with test programs): 0000:0000:0000.0038: hidraw0: HID v0.00 Device [syz1] on syz0 [ 500.019025][ T9] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 500.124973][T10243] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 500.144156][T10243] cdc_ncm 3-1:1.0: bind() failure [ 500.181298][ T9] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 500.211638][ T9] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 500.227988][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 500.235400][ T9] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 500.245985][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.274391][ T9] usb 1-1: config 0 descriptor?? [ 500.332392][ T5699] usb 3-1: USB disconnect, device number 109 [ 500.697512][ T9] lua 0003:1E7D:2C2E.0039: unknown main item tag 0x1 [ 500.705050][ T9] lua 0003:1E7D:2C2E.0039: unknown main item tag 0x0 [ 500.712286][ T9] lua 0003:1E7D:2C2E.0039: global environment stack underflow [ 500.720501][ T9] lua 0003:1E7D:2C2E.0039: item 0 4 1 11 parsing failed [ 500.728071][ T9] lua 0003:1E7D:2C2E.0039: parse failed [ 500.734574][ T9] lua 0003:1E7D:2C2E.0039: probe with driver lua failed with error -22 [ 500.898714][T10243] usb 1-1: USB disconnect, device number 98 [ 501.005917][T11835] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2025'. [ 501.076714][T11838] usb usb9: usbfs: process 11838 (syz.4.2025) did not claim interface 4 before use [ 501.087574][T11838] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 501.342246][T11845] fuse: Unknown parameter 'fd#' [ 501.409007][T11847] netlink: 'syz.2.2028': attribute type 2 has an invalid length. [ 501.515582][T11844] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.2029' sets config #-1 [ 501.564469][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.573413][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.594427][T11847] : entered promiscuous mode [ 501.826020][T11847] cgroup: fork rejected by pids controller in /syz2 [ 502.109221][ T9] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 502.161360][T11873] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 502.221836][T11873] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 502.251624][T11874] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 502.279027][T11874] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 502.279550][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 502.319518][T11873] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 502.322245][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 502.338152][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 502.354002][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 502.371261][T11878] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 502.414636][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 502.440377][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.473573][ T9] usb 1-1: Product: syz [ 502.485968][ T9] usb 1-1: Manufacturer: syz [ 502.504764][ T9] usb 1-1: SerialNumber: syz [ 502.768533][ T6518] bond0: (slave syz_tun): Releasing backup interface [ 502.791719][T10243] hid-generic 0000:0000:0000.003A: unknown main item tag 0x0 [ 502.800755][ T5699] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 502.921173][T10243] hid-generic 0000:0000:0000.003A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 502.985161][ T5699] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 503.024677][ T5699] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 503.117626][ T5699] usb 2-1: config 0 interface 0 has no altsetting 0 [ 503.147452][ T5699] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 503.233479][ T5699] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.275296][ T5699] usb 2-1: config 0 descriptor?? [ 503.732781][ T5699] lua 0003:1E7D:2C2E.003B: unknown main item tag 0x1 [ 503.794714][ T5699] lua 0003:1E7D:2C2E.003B: unknown main item tag 0x7 [ 503.835210][ T7256] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 503.857165][ T5699] lua 0003:1E7D:2C2E.003B: unknown global tag 0xd [ 503.876287][ T7256] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.896610][ T5699] lua 0003:1E7D:2C2E.003B: item 0 0 1 13 parsing failed [ 503.993493][ T5699] lua 0003:1E7D:2C2E.003B: parse failed [ 504.036091][ T9] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 504.036197][ T5699] lua 0003:1E7D:2C2E.003B: probe with driver lua failed with error -22 [ 504.053511][ T9] cdc_ncm 1-1:1.0: bind() failure [ 504.146993][ T5699] usb 2-1: USB disconnect, device number 2 [ 504.285423][T10243] usb 1-1: USB disconnect, device number 99 [ 504.373399][ T7256] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 504.401200][ T7256] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.523582][ T5631] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 504.535330][ T5631] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 504.548225][ T5631] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 504.558290][ T5631] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 504.567965][ T5631] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 504.712756][ T7256] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 504.763727][ T7256] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.769610][T11912] syzkaller0: entered promiscuous mode [ 505.791702][T11912] syzkaller0: entered allmulticast mode [ 505.887926][T11916] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2048'. [ 506.108030][T11931] FAULT_INJECTION: forcing a failure. [ 506.108030][T11931] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 506.147084][T11931] CPU: 1 UID: 0 PID: 11931 Comm: syz.3.2050 Not tainted syzkaller #0 PREEMPT(full) [ 506.147108][T11931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 506.147117][T11931] Call Trace: [ 506.147124][T11931] [ 506.147131][T11931] dump_stack_lvl+0xe8/0x150 [ 506.147155][T11931] should_fail_ex+0x412/0x560 [ 506.147180][T11931] _copy_from_user+0x2d/0xb0 [ 506.147202][T11931] ___sys_sendmsg+0x1c6/0x360 [ 506.147221][T11931] ? __lock_acquire+0x6b5/0x2cf0 [ 506.147240][T11931] ? __pfx____sys_sendmsg+0x10/0x10 [ 506.147288][T11931] ? __fget_files+0x2a/0x420 [ 506.147305][T11931] ? __fget_files+0x3a0/0x420 [ 506.147331][T11931] __x64_sys_sendmsg+0x1bd/0x2a0 [ 506.147357][T11931] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 506.147386][T11931] ? __pfx_ksys_write+0x10/0x10 [ 506.147416][T11931] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.147434][T11931] do_syscall_64+0x15f/0xf80 [ 506.147457][T11931] ? trace_irq_disable+0x3b/0x140 [ 506.147481][T11931] ? clear_bhb_loop+0x40/0x90 [ 506.147502][T11931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.147519][T11931] RIP: 0033:0x7fa7bed9ce59 [ 506.147537][T11931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 506.147551][T11931] RSP: 002b:00007fa7bfc10028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 506.147567][T11931] RAX: ffffffffffffffda RBX: 00007fa7bf015fa0 RCX: 00007fa7bed9ce59 [ 506.147578][T11931] RDX: 0000000020040010 RSI: 0000200000001300 RDI: 0000000000000003 [ 506.147587][T11931] RBP: 00007fa7bfc10090 R08: 0000000000000000 R09: 0000000000000000 [ 506.147597][T11931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 506.147607][T11931] R13: 00007fa7bf016038 R14: 00007fa7bf015fa0 R15: 00007fa7bf13fa48 [ 506.147636][T11931] [ 506.670001][ T5631] Bluetooth: hci0: command tx timeout [ 507.615364][ T1636] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 507.787810][ T1636] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 507.802836][ T1636] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 507.814605][ T1636] usb 4-1: config 0 interface 0 has no altsetting 0 [ 507.827488][ T1636] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 507.837137][ T1636] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.854189][ T1636] usb 4-1: config 0 descriptor?? [ 508.293952][ T1636] lua 0003:1E7D:2C2E.003C: unknown main item tag 0x1 [ 508.309888][ T1636] lua 0003:1E7D:2C2E.003C: unknown main item tag 0x0 [ 508.329788][ T1636] lua 0003:1E7D:2C2E.003C: unknown main item tag 0x0 [ 508.336598][ T1636] lua 0003:1E7D:2C2E.003C: unknown main item tag 0x0 [ 508.357078][ T1636] lua 0003:1E7D:2C2E.003C: unknown main item tag 0x0 [ 508.371231][ T1636] lua 0003:1E7D:2C2E.003C: unknown main item tag 0x0 [ 508.383789][ T1636] lua 0003:1E7D:2C2E.003C: unknown main item tag 0x0 [ 508.390880][ T1636] lua 0003:1E7D:2C2E.003C: unknown main item tag 0x0 [ 508.397655][ T1636] lua 0003:1E7D:2C2E.003C: unknown main item tag 0x0 [ 508.404869][ T1636] lua 0003:1E7D:2C2E.003C: unknown main item tag 0x0 [ 508.416021][ T1636] lua 0003:1E7D:2C2E.003C: hidraw0: USB HID v0.20 Device [HID 1e7d:2c2e] on usb-dummy_hcd.3-1/input0 [ 508.497815][ T1636] usb 4-1: USB disconnect, device number 106 [ 508.520803][T11944] fido_id[11944]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:1E7D:2C2E.003C/report_descriptor': No such device [ 508.760216][ T5631] Bluetooth: hci0: command tx timeout [ 509.776989][ T5289] 8021q: adding VLAN 0 to HW filter on device eth1 [ 510.036816][ T7256] bridge_slave_1: left allmulticast mode [ 510.044425][ T7256] bridge_slave_1: left promiscuous mode [ 510.058138][ T7256] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.072617][ T7256] bridge_slave_0: left allmulticast mode [ 510.079989][ T7256] bridge_slave_0: left promiscuous mode [ 510.085843][ T7256] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.116903][ T7256] dvmrp1: left allmulticast mode [ 510.136613][ T7256] bond_slave_0: left promiscuous mode [ 510.143785][ T7256] bond_slave_1: left promiscuous mode [ 510.238859][ T1636] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 510.307984][T11958] sg_write: data in/out 431068/146 bytes for SCSI command 0x0-- guessing data in; [ 510.307984][T11958] program syz.4.2059 not setting count and/or reply_len properly [ 510.338850][ T43] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 510.392853][ T1636] usb 1-1: Using ep0 maxpacket: 16 [ 510.418070][ T1636] usb 1-1: unable to get BOS descriptor or descriptor too short [ 510.427335][ T1636] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 510.447082][ T1636] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 510.480817][ T1636] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 510.491293][ T1636] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.512550][ T1636] usb 1-1: Product: syz [ 510.521524][ T1636] usb 1-1: Manufacturer: syz [ 510.531800][ T1636] usb 1-1: SerialNumber: syz [ 510.741208][ T7256] bond2 (unregistering): (slave macvlan2): Removing an active aggregator [ 510.752435][ T7256] bond2 (unregistering): (slave macvlan2): Releasing backup interface [ 510.791034][ T5768] hid-generic 0000:0000:0000.003D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 510.820692][ T7256] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 510.829044][ T5631] Bluetooth: hci0: command tx timeout [ 510.858009][ T7256] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 510.883294][ T7256] bond0 (unregistering): Released all slaves [ 510.901522][ T43] usb 5-1: device descriptor read/64, error -71 [ 510.922396][ T7256] bond1 (unregistering): Released all slaves [ 510.975390][ T7256] bond2 (unregistering): Released all slaves [ 511.009908][ T7256] bond3 (unregistering): Released all slaves [ 511.032788][ T7256] bond4 (unregistering): Released all slaves [ 511.167201][ T1636] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 511.183088][ T43] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 511.184689][ T1636] cdc_ncm 1-1:1.0: bind() failure [ 511.201926][T11960] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 511.308013][ T7256] : left promiscuous mode [ 511.387134][ T1636] usb 1-1: USB disconnect, device number 100 [ 511.419003][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 511.430305][ T43] usb 5-1: no configurations [ 511.453009][ T43] usb 5-1: can't read configurations, error -22 [ 511.465846][ T43] usb usb5-port1: attempt power cycle [ 511.533929][ T7256] tipc: Left network mode [ 511.696576][T11895] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.724008][T11895] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.745670][T11895] bridge_slave_0: entered allmulticast mode [ 511.762891][T11895] bridge_slave_0: entered promiscuous mode [ 511.823087][T11895] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.830596][ T43] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 511.854085][T11895] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.871163][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 511.876236][T11895] bridge_slave_1: entered allmulticast mode [ 511.879618][ T43] usb 5-1: no configurations [ 511.895612][ T43] usb 5-1: can't read configurations, error -22 [ 511.898433][T11895] bridge_slave_1: entered promiscuous mode [ 512.059539][ T43] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 512.124041][T11895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 512.130365][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 512.165619][ T43] usb 5-1: no configurations [ 512.173653][ T7256] hsr_slave_0: left promiscuous mode [ 512.180408][ T43] usb 5-1: can't read configurations, error -22 [ 512.197089][ T43] usb usb5-port1: unable to enumerate USB device [ 512.215662][ T7256] hsr_slave_1: left promiscuous mode [ 512.235535][ T7256] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 512.260109][ T7256] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 512.275018][ T7256] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 512.288005][ T7256] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 512.361358][ T7256] veth1_macvtap: left promiscuous mode [ 512.374824][ T7256] veth0_macvtap: left promiscuous mode [ 512.385932][ T7256] veth1_vlan: left promiscuous mode [ 512.405533][ T7256] veth0_vlan: left promiscuous mode [ 512.767708][ T7256] team0 (unregistering): Port device team_slave_1 removed [ 512.783088][ T7256] team0 (unregistering): Port device team_slave_0 removed [ 512.909104][ T5631] Bluetooth: hci0: command tx timeout [ 512.922496][T11895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 512.935844][ T5289] 8021q: adding VLAN 0 to HW filter on device eth2 [ 512.980512][T11895] team0: Port device team_slave_0 added [ 512.990612][T11895] team0: Port device team_slave_1 added [ 513.132795][T11895] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 513.169061][T11895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 513.210744][T11895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 513.228373][T12000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2066'. [ 513.243738][T11895] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 513.270051][T11895] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 513.273657][T12002] input: syz1 as /devices/virtual/input/input37 [ 513.342534][T11895] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 513.471134][T11895] hsr_slave_0: entered promiscuous mode [ 513.486067][T11895] hsr_slave_1: entered promiscuous mode [ 513.498133][T11895] debugfs: 'hsr0' already exists in 'hsr' [ 513.535795][T11895] Cannot create hsr debugfs directory [ 513.748897][ T43] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 513.949862][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 513.960293][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 513.999739][ T43] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 514.028593][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.061541][ T43] usb 4-1: Product: syz [ 514.082704][ T43] usb 4-1: Manufacturer: syz [ 514.100919][ T43] usb 4-1: SerialNumber: syz [ 514.134003][ T43] usb 4-1: config 0 descriptor?? [ 514.176859][ T43] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 514.191078][ T5684] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 514.226222][ T43] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 514.392086][ T5684] usb 5-1: config 0 has an invalid interface number: 69 but max is 0 [ 514.429046][ T5684] usb 5-1: config 0 has no interface number 0 [ 514.439484][T12029] bond2: entered promiscuous mode [ 514.448195][T12029] 8021q: adding VLAN 0 to HW filter on device bond2 [ 514.458476][ T5684] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 514.516158][ T5684] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 514.558470][ T5684] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 514.585586][ T5684] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.623696][ T5684] usb 5-1: Product: syz [ 514.641711][ T5684] usb 5-1: Manufacturer: syz [ 514.658495][ T5684] usb 5-1: SerialNumber: syz [ 514.694228][ T5684] usb 5-1: config 0 descriptor?? [ 514.706145][T12018] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 514.741375][ T5684] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 514.837350][ T5684] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 514.857032][ T43] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 514.951371][ T5721] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 515.130210][ T5721] usb 2-1: Using ep0 maxpacket: 16 [ 515.155136][ T5721] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 515.203046][ T5721] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 515.232607][ T5721] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.262904][ T5721] usb 2-1: Product: syz [ 515.275729][T12018] netlink: 'syz.4.2072': attribute type 1 has an invalid length. [ 515.286116][ T5721] usb 2-1: Manufacturer: syz [ 515.289881][T12018] netlink: 'syz.4.2072': attribute type 2 has an invalid length. [ 515.304118][ T5721] usb 2-1: SerialNumber: syz [ 515.331526][ T5721] usb 2-1: config 0 descriptor?? [ 515.363340][ T5721] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 515.398155][ T5721] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 515.434255][T11895] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 515.472906][T11895] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 515.497673][T11895] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 515.513236][ T43] em28xx 4-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 515.543872][T11895] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 515.565561][ T43] em28xx 4-1:0.0: board has no eeprom [ 515.570114][T11895] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 515.643326][T11895] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 515.666192][ T5684] usb 5-1: USB disconnect, device number 125 [ 515.677674][T11895] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 515.690292][ T43] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 515.714173][ T43] em28xx 4-1:0.0: dvb set to bulk mode. [ 515.733358][T11895] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 515.745598][T10243] em28xx 4-1:0.0: Binding DVB extension [ 515.753113][ T5684] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 515.782796][ T43] usb 4-1: USB disconnect, device number 107 [ 515.821879][ T5684] cyberjack 5-1:0.69: device disconnected [ 515.854452][ T43] em28xx 4-1:0.0: Disconnecting em28xx [ 515.952024][T10243] em28xx 4-1:0.0: Registering input extension [ 515.986068][ T43] em28xx 4-1:0.0: Closing input extension [ 516.092313][T12063] FAULT_INJECTION: forcing a failure. [ 516.092313][T12063] name failslab, interval 1, probability 0, space 0, times 0 [ 516.107939][ T43] em28xx 4-1:0.0: Freeing device [ 516.108276][T11895] 8021q: adding VLAN 0 to HW filter on device bond0 [ 516.131180][ T5721] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 516.163262][T12063] CPU: 0 UID: 0 PID: 12063 Comm: syz.0.2077 Not tainted syzkaller #0 PREEMPT(full) [ 516.163287][T12063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 516.163298][T12063] Call Trace: [ 516.163305][T12063] [ 516.163313][T12063] dump_stack_lvl+0xe8/0x150 [ 516.163336][T12063] should_fail_ex+0x412/0x560 [ 516.163365][T12063] should_failslab+0xa8/0x100 [ 516.163391][T12063] __kvmalloc_node_noprof+0x178/0x8a0 [ 516.163415][T12063] ? seq_read_iter+0x202/0xe10 [ 516.163440][T12063] seq_read_iter+0x202/0xe10 [ 516.163456][T12063] ? aa_file_perm+0x192/0x15e0 [ 516.163485][T12063] ? __asan_memset+0x22/0x50 [ 516.163510][T12063] seq_read+0x367/0x480 [ 516.163535][T12063] ? __pfx_seq_read+0x10/0x10 [ 516.163551][T12063] ? __debugfs_file_get+0x5e0/0x720 [ 516.163572][T12063] ? __pfx___debugfs_file_get+0x10/0x10 [ 516.163591][T12063] ? apparmor_file_permission+0x1f4/0x300 [ 516.163613][T12063] full_proxy_read+0x127/0x1f0 [ 516.163632][T12063] ? __pfx_full_proxy_read+0x10/0x10 [ 516.163651][T12063] vfs_read+0x20c/0xa70 [ 516.163680][T12063] ? __pfx___mutex_lock+0x10/0x10 [ 516.163704][T12063] ? __pfx_vfs_read+0x10/0x10 [ 516.163728][T12063] ? __fget_files+0x2a/0x420 [ 516.163751][T12063] ? __fget_files+0x3a0/0x420 [ 516.163769][T12063] ? __fget_files+0x2a/0x420 [ 516.163793][T12063] ksys_read+0x150/0x270 [ 516.163818][T12063] ? __pfx_ksys_read+0x10/0x10 [ 516.163853][T12063] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.163871][T12063] do_syscall_64+0x15f/0xf80 [ 516.163903][T12063] ? clear_bhb_loop+0x40/0x90 [ 516.163925][T12063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.163942][T12063] RIP: 0033:0x7fe7a239ce59 [ 516.163959][T12063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 516.163973][T12063] RSP: 002b:00007fe7a330e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 516.163991][T12063] RAX: ffffffffffffffda RBX: 00007fe7a2616090 RCX: 00007fe7a239ce59 [ 516.164003][T12063] RDX: 0000000000002020 RSI: 0000200000001380 RDI: 0000000000000004 [ 516.164014][T12063] RBP: 00007fe7a330e090 R08: 0000000000000000 R09: 0000000000000000 [ 516.164025][T12063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 516.164036][T12063] R13: 00007fe7a2616128 R14: 00007fe7a2616090 R15: 00007fe7a273fa48 [ 516.164060][T12063] [ 516.417692][T11895] 8021q: adding VLAN 0 to HW filter on device team0 [ 516.457027][T11895] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 516.467489][T11895] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 516.493047][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.500313][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 516.534240][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.541503][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 516.580296][T11895] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 516.618279][T11895] veth0_vlan: entered promiscuous mode [ 516.631104][T11895] veth1_vlan: entered promiscuous mode [ 516.657377][T11895] veth0_macvtap: entered promiscuous mode [ 516.678410][T11895] veth1_macvtap: entered promiscuous mode [ 516.715907][T11895] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 516.727444][T11895] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 516.728107][ T5721] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 516.787023][ T5721] em28xx 2-1:0.0: board has no eeprom [ 516.836924][T12076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2080'. [ 516.865362][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.879904][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.891206][ T5721] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 516.913822][ T5721] em28xx 2-1:0.0: dvb set to bulk mode. [ 516.928853][ T5684] em28xx 2-1:0.0: Binding DVB extension [ 516.948160][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.967527][ T5721] usb 2-1: USB disconnect, device number 3 [ 516.982904][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.034141][ T5721] em28xx 2-1:0.0: Disconnecting em28xx [ 517.109881][ T5684] em28xx 2-1:0.0: Registering input extension [ 517.140715][ T5721] em28xx 2-1:0.0: Closing input extension [ 517.312257][ T5721] em28xx 2-1:0.0: Freeing device [ 517.349644][T10243] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 517.432399][T11383] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 517.467478][T11383] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 517.537496][T10243] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 517.559571][T10243] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 517.568025][ T7254] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 517.578986][T10243] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 517.584372][T10243] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 517.633008][T10243] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.647899][T10243] usb 5-1: Product: syz [ 517.652697][ T7254] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 517.660409][T10243] usb 5-1: Manufacturer: syz [ 517.669389][T10243] usb 5-1: SerialNumber: syz [ 517.694108][T10243] usb 5-1: config 0 descriptor?? [ 517.707805][T12087] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 517.719599][T12087] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 517.731115][T10243] usb 5-1: ucan: probing device on interface #0 [ 518.120147][T12110] kvm: kvm [12108]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x20 [ 518.134670][T12110] kvm: kvm [12108]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x1 [ 518.151107][T12110] kvm: kvm [12108]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x1 [ 518.165010][T12110] kvm: kvm [12108]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x1 [ 518.178510][T12110] kvm: kvm [12108]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100000001 [ 518.189096][ C1] bridge0: port 3(team0) entered forwarding state [ 518.195574][ C1] bridge0: topology change detected, propagating [ 518.281838][T12110] kvm_intel: kvm [12108]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x1 [ 518.308670][T12110] kvm: kvm [12108]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x1 [ 518.346620][T10243] ucan 5-1:0.0: probe with driver ucan failed with error -71 [ 518.392117][T10243] usb 5-1: USB disconnect, device number 126 [ 518.462070][T12123] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 518.659558][ T1636] usb 3-1: new full-speed USB device number 110 using dummy_hcd [ 518.841841][ T1636] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 518.892957][ T1636] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 518.957284][ T1636] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 518.982027][ T1636] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 519.065358][ T1636] usb 3-1: Product: syz [ 519.083858][ T1636] usb 3-1: Manufacturer: syz [ 519.108291][ T1636] hub 3-1:4.0: USB hub found [ 519.312098][ T1636] hub 3-1:4.0: 2 ports detected [ 519.446648][T12152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2093'. [ 520.085840][ T1636] hub 3-1:4.0: set hub depth failed [ 520.098858][ T808] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 520.123104][ T1636] usb 3-1: USB disconnect, device number 110 [ 520.349679][ T808] usb 2-1: Using ep0 maxpacket: 32 [ 520.371555][ T808] usb 2-1: config index 0 descriptor too short (expected 164, got 36) [ 520.380910][ T808] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 520.398109][ T808] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 520.429176][ T808] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 520.451957][ T808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.481775][ T808] usb 2-1: config 0 descriptor?? [ 520.748867][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 520.756144][ C0] bridge0: topology change detected, propagating [ 520.763864][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 520.771144][ C0] bridge0: topology change detected, propagating [ 520.919411][ T1636] usb 4-1: new full-speed USB device number 108 using dummy_hcd [ 520.967178][ T808] logitech 0003:046D:C29C.003E: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.1-1/input0 [ 521.094319][ T1636] usb 4-1: config 0 has an invalid descriptor of length 64, skipping remainder of the config [ 521.153854][ T1636] usb 4-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 521.195220][ T1636] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.236632][ T1636] usb 4-1: Product: syz [ 521.253364][ T1636] usb 4-1: Manufacturer: syz [ 521.274926][ T1636] usb 4-1: SerialNumber: syz [ 521.310348][ T1636] usb 4-1: config 0 descriptor?? [ 521.336427][ T808] logitech 0003:046D:C29C.003E: no inputs found [ 521.353031][ T1636] powermate 4-1:0.0: probe with driver powermate failed with error -22 [ 521.430975][ T808] usb 2-1: USB disconnect, device number 4 [ 521.503478][T12191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2101'. [ 521.561370][T12191] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 521.804278][T12197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2104'. [ 521.908873][ T5721] usb 5-1: new low-speed USB device number 127 using dummy_hcd [ 522.089186][ T5721] usb 5-1: Invalid ep0 maxpacket: 64 [ 522.214237][T12204] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 522.245272][ T5721] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 522.285672][T12204] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 522.420656][ T5721] usb 5-1: Invalid ep0 maxpacket: 64 [ 522.438043][ T5721] usb usb5-port1: attempt power cycle [ 522.441652][T12204] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 522.819004][ T5721] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 522.870917][ T5721] usb 5-1: Invalid ep0 maxpacket: 64 [ 522.980940][ T808] usb 4-1: USB disconnect, device number 108 [ 523.008954][ T5721] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 523.050239][ T5721] usb 5-1: Invalid ep0 maxpacket: 64 [ 523.064875][ T5721] usb usb5-port1: unable to enumerate USB device [ 523.479418][ T29] audit: type=1326 audit(1779112763.244:3159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12215 comm="syz.2.2109" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f797739ce59 code=0x7ffc0000 [ 523.506685][T12216] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2109'. [ 523.561648][ T29] audit: type=1326 audit(1779112763.254:3160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12215 comm="syz.2.2109" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f797739ce59 code=0x7ffc0000 [ 523.616835][ T29] audit: type=1326 audit(1779112763.274:3161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12215 comm="syz.2.2109" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f797739ce59 code=0x7ffc0000 [ 523.754244][ T29] audit: type=1326 audit(1779112763.294:3162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12215 comm="syz.2.2109" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f797739ce59 code=0x7ffc0000 [ 523.792498][ T29] audit: type=1326 audit(1779112763.294:3163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12215 comm="syz.2.2109" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f797739ce59 code=0x7ffc0000 [ 523.861158][ T29] audit: type=1326 audit(1779112763.294:3164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12215 comm="syz.2.2109" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f797739ce59 code=0x7ffc0000 [ 523.925981][ T29] audit: type=1326 audit(1779112763.294:3165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12215 comm="syz.2.2109" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f797739ce59 code=0x7ffc0000 [ 524.799277][ T808] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 524.799360][ T9] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 524.894054][T12245] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2116'. [ 524.968856][ T808] usb 2-1: Using ep0 maxpacket: 32 [ 524.982962][ T9] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 524.994548][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.996110][ T808] usb 2-1: unable to get BOS descriptor or descriptor too short [ 525.015059][ T9] usb 4-1: config 0 descriptor?? [ 525.032035][ T9] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 525.057993][ T808] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 525.086939][ T808] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 525.115168][ T808] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 525.151456][ T808] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 525.170468][ T808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.179028][ T5721] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 525.191352][ T808] usb 2-1: Product: syz [ 525.202892][ T808] usb 2-1: Manufacturer: syz [ 525.207695][ T808] usb 2-1: SerialNumber: syz [ 525.338831][ T5721] usb 5-1: Using ep0 maxpacket: 8 [ 525.354284][ T5721] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 525.365334][ T5721] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.380526][ T5721] usb 5-1: Product: syz [ 525.388991][ T5721] usb 5-1: Manufacturer: syz [ 525.398886][ T5721] usb 5-1: SerialNumber: syz [ 525.414353][ T5721] usb 5-1: config 0 descriptor?? [ 525.438091][ T808] usb 2-1: 0:2 : does not exist [ 525.458702][T12238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 525.541381][T12238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 525.569509][ T808] usb 2-1: USB disconnect, device number 5 [ 525.617567][T12238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 525.675432][ T5721] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 525.678248][T12238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 525.708983][ T5633] udevd[5633]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 525.770167][ T9] gspca_cpia1: usb_control_msg 03, error -71 [ 525.789369][ T5699] usb 3-1: new full-speed USB device number 111 using dummy_hcd [ 525.804468][ T9] gspca_cpia1: usb_control_msg 01, error -71 [ 525.830237][ T9] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 525.881545][ T9] usb 4-1: USB disconnect, device number 109 [ 525.960706][ T5699] usb 3-1: config 0 has an invalid descriptor of length 64, skipping remainder of the config [ 525.987275][ T5699] usb 3-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 526.006570][ T5699] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.025910][ T5699] usb 3-1: Product: syz [ 526.039952][ T5699] usb 3-1: Manufacturer: syz [ 526.057091][ T5699] usb 3-1: SerialNumber: syz [ 526.082275][ T5699] usb 3-1: config 0 descriptor?? [ 526.097603][ T5721] usb write operation failed. (-71) [ 526.130603][ T5721] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 526.165324][ T5721] dvbdev: DVB: registering new adapter (Terratec H7) [ 526.166604][ T5699] powermate 3-1:0.0: probe with driver powermate failed with error -22 [ 526.198128][ T5721] usb 5-1: media controller created [ 526.215065][ T5721] usb read operation failed. (-71) [ 526.235393][ T5721] usb write operation failed. (-71) [ 526.273863][ T5721] dvb_usb_az6007 5-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 526.308550][ T5721] usb 5-1: USB disconnect, device number 5 [ 526.530601][T12260] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2122'. [ 526.570898][T12260] macvtap1: entered promiscuous mode [ 526.576412][T12260] bond0: entered promiscuous mode [ 526.585656][T12263] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2122'. [ 526.595948][T12260] macvtap1: entered allmulticast mode [ 526.605251][ T9] hid_parser_main: 12 callbacks suppressed [ 526.605264][ T9] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0 [ 526.623752][T12260] bond0: entered allmulticast mode [ 526.635656][T12260] bond_slave_0: entered allmulticast mode [ 526.645021][T12260] bond_slave_1: entered allmulticast mode [ 526.651599][ T9] hid-generic 0000:0000:0000.003F: hidraw0: HID v0.00 Device [syz0] on syz0 [ 526.670198][T12260] syz_tun: entered allmulticast mode [ 526.693572][T12260] bridge0: entered allmulticast mode [ 526.723944][T12260] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 526.812791][T12263] bond0: left allmulticast mode [ 526.857715][T12263] bond_slave_0: left allmulticast mode [ 526.877008][T12263] bond_slave_1: left allmulticast mode [ 526.883007][T12263] syz_tun: left allmulticast mode [ 526.892637][T12263] bridge0: left allmulticast mode [ 526.900579][T12263] bond0: left promiscuous mode [ 527.318965][ T808] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 527.432788][ T9] usb 3-1: USB disconnect, device number 111 [ 527.498875][ T808] usb 4-1: Using ep0 maxpacket: 16 [ 527.518610][ T808] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 527.543666][ T808] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 527.561330][ T808] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 527.572035][ T808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.580817][ T808] usb 4-1: Product: syz [ 527.585183][ T808] usb 4-1: Manufacturer: syz [ 527.590135][ T808] usb 4-1: SerialNumber: syz [ 527.597846][ T808] usb 4-1: config 0 descriptor?? [ 527.748831][ T5721] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 527.910173][ T5721] usb 2-1: Using ep0 maxpacket: 16 [ 527.921589][T12290] loop2: detected capacity change from 0 to 7 [ 527.924918][ T5721] usb 2-1: unable to get BOS descriptor or descriptor too short [ 527.939590][T12290] Dev loop2: unable to read RDB block 7 [ 527.945200][ T5721] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 527.945548][T12290] loop2: AHDI p1 p2 p3 [ 527.968183][ T5721] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 527.968892][T12290] loop2: partition table partially beyond EOD, truncated [ 527.994770][ T5721] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 528.018089][ T5721] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.026571][T12290] loop2: p1 start 1601398130 is beyond EOD, truncated [ 528.027850][ T5721] usb 2-1: Product: syz [ 528.037736][ T5721] usb 2-1: Manufacturer: syz [ 528.043917][ T5721] usb 2-1: SerialNumber: syz [ 528.058832][T12290] loop2: p2 start 1702059890 is beyond EOD, truncated [ 528.289390][ T5684] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 528.316553][ T5684] hid-generic 0000:0000:0000.0040: hidraw0: HID v0.00 Device [syz1] on syz0 [ 528.388943][ T808] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 528.570864][ T808] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 528.583706][ T808] usb 3-1: config 0 interface 0 has no altsetting 0 [ 528.593868][ T808] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 528.604012][ T808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.617568][ T808] usb 3-1: config 0 descriptor?? [ 528.731010][ T5721] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 528.738405][ T5721] cdc_ncm 2-1:1.0: bind() failure [ 528.743998][ T5744] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 528.929036][ T5744] usb 1-1: Using ep0 maxpacket: 32 [ 528.941855][ T5744] usb 1-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 528.961357][ T5744] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.977432][ T5721] usb 2-1: USB disconnect, device number 6 [ 528.985630][ T5744] usb 1-1: config 0 descriptor?? [ 529.006854][ T5744] gspca_main: sq930x-2.14.0 probing 041e:403c [ 529.032922][ T808] lua 0003:1E7D:2C2E.0041: unknown main item tag 0x1 [ 529.039974][ T808] lua 0003:1E7D:2C2E.0041: unknown main item tag 0x0 [ 529.046766][ T808] lua 0003:1E7D:2C2E.0041: unknown main item tag 0x0 [ 529.054110][ T808] lua 0003:1E7D:2C2E.0041: unknown main item tag 0x0 [ 529.062040][ T808] lua 0003:1E7D:2C2E.0041: unknown main item tag 0x0 [ 529.070546][ T808] lua 0003:1E7D:2C2E.0041: unknown main item tag 0x0 [ 529.077301][ T808] lua 0003:1E7D:2C2E.0041: unknown main item tag 0x0 [ 529.084412][ T808] lua 0003:1E7D:2C2E.0041: unknown main item tag 0x0 [ 529.094001][ T808] lua 0003:1E7D:2C2E.0041: hidraw0: USB HID v0.20 Device [HID 1e7d:2c2e] on usb-dummy_hcd.2-1/input0 [ 529.237162][ T5699] usb 3-1: USB disconnect, device number 112 [ 529.850787][T12328] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2144'. [ 529.931719][T12326] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2143'. [ 529.940973][ T29] audit: type=1326 audit(1779112769.704:3166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12324 comm="syz.1.2143" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd839ce59 code=0x7ffc0000 [ 529.970221][ T29] audit: type=1326 audit(1779112769.704:3167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12324 comm="syz.1.2143" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd839ce59 code=0x7ffc0000 [ 529.995167][ T29] audit: type=1326 audit(1779112769.704:3168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12324 comm="syz.1.2143" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fccd839ce59 code=0x7ffc0000 [ 530.036966][ T29] audit: type=1326 audit(1779112769.714:3169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12324 comm="syz.1.2143" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd839ce59 code=0x7ffc0000 [ 530.103357][ T29] audit: type=1326 audit(1779112769.714:3170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12324 comm="syz.1.2143" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd839ce59 code=0x7ffc0000 [ 530.151339][ T5721] usb 4-1: USB disconnect, device number 110 [ 530.194593][ T29] audit: type=1326 audit(1779112769.714:3171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12324 comm="syz.1.2143" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7fccd839ce59 code=0x7ffc0000 [ 530.259111][ T5744] gspca_sq930x: reg_w 0105 bf00 failed -71 [ 530.266972][ T5744] sq930x 1-1:0.0: probe with driver sq930x failed with error -71 [ 530.285984][ T29] audit: type=1326 audit(1779112769.714:3172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12324 comm="syz.1.2143" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd839ce59 code=0x7ffc0000 [ 530.347581][ T5744] usb 1-1: USB disconnect, device number 101 [ 530.365251][ T29] audit: type=1326 audit(1779112769.714:3173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12324 comm="syz.1.2143" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd839ce59 code=0x7ffc0000 [ 530.687117][T12347] netlink: 'syz.1.2151': attribute type 4 has an invalid length. [ 530.706291][T12347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2151'. [ 530.762946][T12349] usb usb7: usbfs: process 12349 (syz.1.2151) did not claim interface 0 before use [ 530.828987][ T5699] usb 4-1: new full-speed USB device number 111 using dummy_hcd [ 531.021497][ T5699] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 531.040398][ T5699] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 531.064229][ T5699] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 531.086445][ T5699] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 531.113382][ T5699] usb 4-1: Product: syz [ 531.121041][ T5699] usb 4-1: Manufacturer: syz [ 531.139517][ T5699] hub 4-1:4.0: USB hub found [ 531.248875][ T5706] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 531.338882][ T5744] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 531.344346][ T5699] hub 4-1:4.0: 2 ports detected [ 531.421198][ T5706] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 531.454820][ T5706] usb 1-1: config 0 interface 0 has no altsetting 0 [ 531.478200][ T5706] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 531.492830][ T5744] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 531.516044][ T5706] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.524607][ T5744] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.541217][ T5706] usb 1-1: config 0 descriptor?? [ 531.564687][ T5744] usb 2-1: config 0 descriptor?? [ 531.567371][ T5744] cp210x 2-1:0.0: cp210x converter detected [ 531.695813][ T5699] hub 4-1:4.0: hub_hub_status failed (err = -71) [ 531.708977][ T5699] hub 4-1:4.0: config failed, can't get hub status (err -71) [ 531.750232][ T5699] usb 4-1: USB disconnect, device number 111 [ 531.969804][ T5744] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 531.980666][ T5706] hid_parser_main: 24 callbacks suppressed [ 531.980688][ T5706] lua 0003:1E7D:2C2E.0042: unknown main item tag 0x0 [ 532.006378][ T5706] lua 0003:1E7D:2C2E.0042: unknown main item tag 0x0 [ 532.009120][ T5744] usb 2-1: cp210x converter now attached to ttyUSB0 [ 532.022725][ T5706] lua 0003:1E7D:2C2E.0042: unknown main item tag 0x0 [ 532.037718][ T5706] lua 0003:1E7D:2C2E.0042: unknown main item tag 0x0 [ 532.052032][ T5706] lua 0003:1E7D:2C2E.0042: unknown main item tag 0x0 [ 532.066860][ T5706] lua 0003:1E7D:2C2E.0042: unknown main item tag 0x0 [ 532.083840][ T5706] lua 0003:1E7D:2C2E.0042: unknown main item tag 0x0 [ 532.098262][ T5706] lua 0003:1E7D:2C2E.0042: unknown main item tag 0x0 [ 532.116256][ T5706] lua 0003:1E7D:2C2E.0042: unknown main item tag 0x0 [ 532.135459][ T5706] lua 0003:1E7D:2C2E.0042: unknown main item tag 0x0 [ 532.149410][ T5706] lua 0003:1E7D:2C2E.0042: hidraw0: USB HID v0.20 Device [HID 1e7d:2c2e] on usb-dummy_hcd.0-1/input0 [ 532.204063][ T5706] usb 1-1: USB disconnect, device number 102 [ 532.250913][T12365] fido_id[12365]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 532.309293][T12367] FAULT_INJECTION: forcing a failure. [ 532.309293][T12367] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 532.326929][T12367] CPU: 0 UID: 0 PID: 12367 Comm: syz.2.2158 Not tainted syzkaller #0 PREEMPT(full) [ 532.326955][T12367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 532.326967][T12367] Call Trace: [ 532.326982][T12367] [ 532.326990][T12367] dump_stack_lvl+0xe8/0x150 [ 532.327017][T12367] should_fail_ex+0x412/0x560 [ 532.327043][T12367] _copy_from_user+0x2d/0xb0 [ 532.327067][T12367] __sys_bpf+0x229/0x950 [ 532.327095][T12367] ? __pfx___sys_bpf+0x10/0x10 [ 532.327134][T12367] ? ksys_write+0x242/0x270 [ 532.327160][T12367] ? __pfx_ksys_write+0x10/0x10 [ 532.327189][T12367] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.327208][T12367] __x64_sys_bpf+0x7c/0x90 [ 532.327234][T12367] do_syscall_64+0x15f/0xf80 [ 532.327258][T12367] ? trace_irq_disable+0x3b/0x140 [ 532.327283][T12367] ? clear_bhb_loop+0x40/0x90 [ 532.327305][T12367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.327324][T12367] RIP: 0033:0x7f797739ce59 [ 532.327341][T12367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 532.327356][T12367] RSP: 002b:00007f797829f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 532.327375][T12367] RAX: ffffffffffffffda RBX: 00007f7977615fa0 RCX: 00007f797739ce59 [ 532.327388][T12367] RDX: 0000000000000020 RSI: 0000200000000200 RDI: 0000000000000004 [ 532.327400][T12367] RBP: 00007f797829f090 R08: 0000000000000000 R09: 0000000000000000 [ 532.327411][T12367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 532.327421][T12367] R13: 00007f7977616038 R14: 00007f7977615fa0 R15: 00007f797773fa48 [ 532.327447][T12367] [ 532.563538][ T5721] usb 2-1: USB disconnect, device number 7 [ 532.595730][ T5721] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 532.682081][ T5721] cp210x 2-1:0.0: device disconnected [ 533.158998][ T5721] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 533.311516][ T5721] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 533.328232][ T5721] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 217 [ 533.345412][ T5721] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 533.373605][ T5721] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.396736][ T5721] usb 1-1: config 0 descriptor?? [ 533.413497][T12383] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 533.626734][T12383] openvswitch: netlink: Message has 1 unknown bytes. [ 533.633820][T12383] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 533.673852][ T5721] ath6kl: Failed to submit usb control message: -71 [ 533.682545][ T5744] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 533.691986][ T5721] ath6kl: unable to send the bmi data to the device: -71 [ 533.707732][ T5721] ath6kl: Unable to send get target info: -71 [ 533.747616][ T5721] ath6kl: Failed to init ath6kl core: -71 [ 533.756811][ T5721] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 533.787388][T12404] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 533.805052][ T5721] usb 1-1: USB disconnect, device number 103 [ 533.849386][ T5744] usb 4-1: Using ep0 maxpacket: 32 [ 533.856716][ T5744] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 533.877227][ T1636] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 533.889510][ T5744] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 533.899131][ T5744] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.909504][ T5744] usb 4-1: Product: syz [ 533.916121][ T5744] usb 4-1: Manufacturer: syz [ 533.923429][ T5744] usb 4-1: SerialNumber: syz [ 533.933085][ T5744] usb 4-1: config 0 descriptor?? [ 534.031447][ T1636] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 534.051456][ T1636] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 534.070778][ T1636] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 534.088832][ T1636] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 534.106797][ T1636] usb 2-1: Product: syz [ 534.116701][ T1636] usb 2-1: Manufacturer: syz [ 534.136383][ T1636] hub 2-1:4.0: USB hub found [ 534.344538][ T1636] hub 2-1:4.0: 2 ports detected [ 534.608908][ T5706] usb 1-1: new full-speed USB device number 104 using dummy_hcd [ 534.669123][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 534.783169][ T5706] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 534.792646][ T5706] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.802170][ T5706] usb 1-1: Product: syz [ 534.806807][ T5706] usb 1-1: Manufacturer: syz [ 534.811898][ T5706] usb 1-1: SerialNumber: syz [ 534.816888][ T1636] hub 2-1:4.0: set hub depth failed [ 534.824555][ T5706] usb 1-1: config 0 descriptor?? [ 534.830899][ T9] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 534.841288][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.855667][ T5706] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 534.863879][ T1636] usb 2-1: USB disconnect, device number 8 [ 534.870484][ T9] usb 5-1: config 0 descriptor?? [ 534.881307][ T9] cp210x 5-1:0.0: cp210x converter detected [ 535.052783][T12418] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2176'. [ 535.281127][ T9] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 535.296945][ T9] usb 5-1: cp210x converter now attached to ttyUSB0 [ 535.461382][T12427] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 535.552246][ T5744] usb 5-1: USB disconnect, device number 6 [ 535.568973][ T5744] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 535.582009][ T5744] cp210x 5-1:0.0: device disconnected [ 536.462802][ T9] usb 4-1: USB disconnect, device number 112 [ 536.850342][ T29] audit: type=1326 audit(1779112776.624:3174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12439 comm="syz.3.2181" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7bed9ce59 code=0x7ffc0000 [ 536.903183][ T29] audit: type=1326 audit(1779112776.624:3175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12439 comm="syz.3.2181" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7bed9ce59 code=0x7ffc0000 [ 536.936812][ T29] audit: type=1326 audit(1779112776.624:3176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12439 comm="syz.3.2181" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7bed9ce59 code=0x7ffc0000 [ 536.963119][ T29] audit: type=1326 audit(1779112776.624:3177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12439 comm="syz.3.2181" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7bed9ce59 code=0x7ffc0000 [ 537.032755][ T29] audit: type=1326 audit(1779112776.644:3178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12439 comm="syz.3.2181" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fa7bed9ce59 code=0x7ffc0000 [ 537.095097][ T29] audit: type=1326 audit(1779112776.674:3179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12439 comm="syz.3.2181" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa7bed5d68e code=0x7ffc0000 [ 537.139398][ T29] audit: type=1326 audit(1779112776.674:3180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12439 comm="syz.3.2181" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa7bed5d68e code=0x7ffc0000 [ 537.250408][ T29] audit: type=1326 audit(1779112776.674:3181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12439 comm="syz.3.2181" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa7bed5d68e code=0x7ffc0000 [ 537.328029][ T29] audit: type=1326 audit(1779112776.704:3182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12439 comm="syz.3.2181" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa7bed5d68e code=0x7ffc0000 [ 537.444496][ T29] audit: type=1326 audit(1779112776.704:3183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12439 comm="syz.3.2181" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa7bed5d68e code=0x7ffc0000 [ 537.494236][ T5631] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 537.494409][ T5631] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 537.503505][ T5631] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 537.512995][ T5631] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 537.520483][ T5631] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 537.520987][T12451] trusted_key: encrypted_key: master key parameter is missing [ 537.528036][ T5631] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 537.528096][ T5631] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 537.528167][ T5631] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 537.528216][ T5631] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 537.528284][ T5631] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 537.916074][ T5706] gspca_stk1135: reg_w 0x352 err -71 [ 537.938075][ T5706] gspca_stk1135: serial bus timeout: status=0x00 [ 537.958065][ T5706] gspca_stk1135: Sensor write failed [ 537.973932][ T5706] gspca_stk1135: serial bus timeout: status=0x00 [ 537.989316][ T5706] gspca_stk1135: Sensor write failed [ 538.004963][ T5706] gspca_stk1135: serial bus timeout: status=0x00 [ 538.019466][ T5706] gspca_stk1135: Sensor read failed [ 538.035087][ T5706] gspca_stk1135: serial bus timeout: status=0x00 [ 538.053198][ T5706] gspca_stk1135: Sensor read failed [ 538.069458][ T5706] gspca_stk1135: Detected sensor type unknown (0x0) [ 538.089468][ T5706] gspca_stk1135: serial bus timeout: status=0x00 [ 538.107146][ T5706] gspca_stk1135: Sensor read failed [ 538.123102][ T5706] gspca_stk1135: serial bus timeout: status=0x00 [ 538.144328][ T5706] gspca_stk1135: Sensor read failed [ 538.161725][ T5706] gspca_stk1135: serial bus timeout: status=0x00 [ 538.183723][ T5706] gspca_stk1135: Sensor write failed [ 538.205895][ T5706] gspca_stk1135: serial bus timeout: status=0x00 [ 538.236626][ T5706] gspca_stk1135: Sensor write failed [ 538.248716][ T5706] stk1135 1-1:0.0: probe with driver stk1135 failed with error -71 [ 538.260549][ T5706] usb 1-1: USB disconnect, device number 104 [ 538.357539][T12461] input: syz1 as /devices/virtual/input/input40 [ 538.979104][ T5706] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 539.058562][T12477] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2191'. [ 539.162989][ T5706] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 539.197291][ T5706] usb 2-1: config 0 interface 0 has no altsetting 0 [ 539.220566][ T5706] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 539.249163][ T5706] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.269439][ T5706] usb 2-1: config 0 descriptor?? [ 539.339501][ T5744] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 539.411761][T12497] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2201'. [ 539.508895][ T5744] usb 3-1: Using ep0 maxpacket: 16 [ 539.516585][ T5744] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 539.529763][ T5744] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 539.539638][ T5744] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.547790][ T5744] usb 3-1: Product: syz [ 539.553022][ T5744] usb 3-1: Manufacturer: syz [ 539.557677][ T5744] usb 3-1: SerialNumber: syz [ 539.565004][ T5744] usb 3-1: config 0 descriptor?? [ 539.575016][ T5744] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 539.584613][ T5744] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 539.678932][T10243] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 539.703766][ T5706] hid_parser_main: 26 callbacks suppressed [ 539.703790][ T5706] lua 0003:1E7D:2C2E.0043: unknown main item tag 0x0 [ 539.731145][ T5706] lua 0003:1E7D:2C2E.0043: unknown main item tag 0x0 [ 539.741761][ T5706] lua 0003:1E7D:2C2E.0043: unknown main item tag 0x0 [ 539.749296][ T5706] lua 0003:1E7D:2C2E.0043: unknown main item tag 0x0 [ 539.756123][ T5706] lua 0003:1E7D:2C2E.0043: unknown main item tag 0x0 [ 539.764096][ T5706] lua 0003:1E7D:2C2E.0043: unknown main item tag 0x0 [ 539.771954][ T5706] lua 0003:1E7D:2C2E.0043: unknown main item tag 0x0 [ 539.778715][ T5706] lua 0003:1E7D:2C2E.0043: unknown main item tag 0x0 [ 539.787596][ T5706] lua 0003:1E7D:2C2E.0043: unknown main item tag 0x0 [ 539.794777][ T5706] lua 0003:1E7D:2C2E.0043: unknown main item tag 0x0 [ 539.810489][ T5706] lua 0003:1E7D:2C2E.0043: hidraw0: USB HID v0.20 Device [HID 1e7d:2c2e] on usb-dummy_hcd.1-1/input0 [ 539.839818][T10243] usb 5-1: Using ep0 maxpacket: 8 [ 539.852553][T10243] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 539.878708][T10243] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.890076][T10243] usb 5-1: Product: syz [ 539.894361][T10243] usb 5-1: Manufacturer: syz [ 539.899092][T10243] usb 5-1: SerialNumber: syz [ 539.907151][T10243] usb 5-1: config 0 descriptor?? [ 539.915042][ T5706] usb 2-1: USB disconnect, device number 9 [ 539.969652][ T5721] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 540.118981][ T5721] usb 1-1: Using ep0 maxpacket: 16 [ 540.125472][T10243] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 540.134917][ T5721] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 540.147432][ T5721] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 540.157327][ T5721] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.165584][ T5721] usb 1-1: Product: syz [ 540.170074][ T5721] usb 1-1: Manufacturer: syz [ 540.174763][ T5721] usb 1-1: SerialNumber: syz [ 540.183770][ T5721] usb 1-1: config 0 descriptor?? [ 540.194647][ T5744] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 540.201072][ T5721] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 540.210698][ T5721] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 540.283829][ T5744] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 540.291922][ T5744] em28xx 3-1:0.0: board has no eeprom [ 540.338999][ T5706] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 540.368884][ T5744] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 540.376953][ T5744] em28xx 3-1:0.0: dvb set to bulk mode. [ 540.382728][ T5684] em28xx 3-1:0.0: Binding DVB extension [ 540.408004][ T5744] usb 3-1: USB disconnect, device number 113 [ 540.428563][ T5744] em28xx 3-1:0.0: Disconnecting em28xx [ 540.468158][ T5684] em28xx 3-1:0.0: Registering input extension [ 540.481667][ T5706] usb 4-1: device descriptor read/64, error -71 [ 540.489606][ T5744] em28xx 3-1:0.0: Closing input extension [ 540.525198][ T5744] em28xx 3-1:0.0: Freeing device [ 540.544721][T10243] usb write operation failed. (-71) [ 540.565200][T10243] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 540.578689][T10243] dvbdev: DVB: registering new adapter (Terratec H7) [ 540.586781][T10243] usb 5-1: media controller created [ 540.597221][T10243] usb read operation failed. (-71) [ 540.604887][T10243] usb write operation failed. (-71) [ 540.628082][T10243] dvb_usb_az6007 5-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 540.655642][T10243] usb 5-1: USB disconnect, device number 7 [ 540.759740][ T5706] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 540.820293][ T5721] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 540.913406][ T5721] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 540.922785][T12513] FAULT_INJECTION: forcing a failure. [ 540.922785][T12513] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 540.928900][ T5706] usb 4-1: device descriptor read/64, error -71 [ 540.941030][ T5721] em28xx 1-1:0.0: board has no eeprom [ 540.942757][T12513] CPU: 0 UID: 0 PID: 12513 Comm: syz.2.2206 Not tainted syzkaller #0 PREEMPT(full) [ 540.942778][T12513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 540.942789][T12513] Call Trace: [ 540.942798][T12513] [ 540.942807][T12513] dump_stack_lvl+0xe8/0x150 [ 540.942832][T12513] should_fail_ex+0x412/0x560 [ 540.942860][T12513] _copy_to_user+0x31/0xb0 [ 540.942886][T12513] simple_read_from_buffer+0xe1/0x170 [ 540.942912][T12513] proc_fail_nth_read+0x1bb/0x230 [ 540.942938][T12513] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 540.942963][T12513] ? rw_verify_area+0x2a6/0x4d0 [ 540.942985][T12513] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 540.943007][T12513] vfs_read+0x20c/0xa70 [ 540.943034][T12513] ? __pfx___mutex_lock+0x10/0x10 [ 540.943069][T12513] ? __pfx_vfs_read+0x10/0x10 [ 540.943093][T12513] ? __fget_files+0x2a/0x420 [ 540.943116][T12513] ? __fget_files+0x3a0/0x420 [ 540.943135][T12513] ? __fget_files+0x2a/0x420 [ 540.943163][T12513] ksys_read+0x150/0x270 [ 540.943183][T12513] ? __fget_files+0x2a/0x420 [ 540.943204][T12513] ? __pfx_ksys_read+0x10/0x10 [ 540.943227][T12513] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.943251][T12513] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.943269][T12513] do_syscall_64+0x15f/0xf80 [ 540.943291][T12513] ? trace_irq_disable+0x3b/0x140 [ 540.943315][T12513] ? clear_bhb_loop+0x40/0x90 [ 540.943336][T12513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.943354][T12513] RIP: 0033:0x7f797735d68e [ 540.943370][T12513] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 540.943384][T12513] RSP: 002b:00007f797829efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 540.943403][T12513] RAX: ffffffffffffffda RBX: 00007f797829f6c0 RCX: 00007f797735d68e [ 540.943416][T12513] RDX: 000000000000000f RSI: 00007f797829f0a0 RDI: 0000000000000005 [ 540.943426][T12513] RBP: 00007f797829f090 R08: 0000000000000000 R09: 0000000000000000 [ 540.943438][T12513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 540.943448][T12513] R13: 00007f7977616038 R14: 00007f7977615fa0 R15: 00007f797773fa48 [ 540.943477][T12513] [ 541.205718][ T5706] usb usb4-port1: attempt power cycle [ 541.252138][T12516] netlink: 'syz.2.2207': attribute type 10 has an invalid length. [ 541.326439][ T5721] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 541.337668][T12516] syz_tun: entered allmulticast mode [ 541.346421][ T5721] em28xx 1-1:0.0: dvb set to bulk mode. [ 541.368168][ T5744] em28xx 1-1:0.0: Binding DVB extension [ 541.396318][ T5721] usb 1-1: USB disconnect, device number 105 [ 541.434244][ T5721] em28xx 1-1:0.0: Disconnecting em28xx [ 541.525841][ T5744] em28xx 1-1:0.0: Registering input extension [ 541.551904][ T5721] em28xx 1-1:0.0: Closing input extension [ 541.560948][ T5706] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 541.589091][T10243] usb 3-1: new full-speed USB device number 114 using dummy_hcd [ 541.589781][ T5706] usb 4-1: device descriptor read/8, error -71 [ 541.665863][ T5721] em28xx 1-1:0.0: Freeing device [ 541.747934][T10243] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 95, setting to 64 [ 541.771255][T10243] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 541.798940][T10243] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.821807][T12529] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2212'. [ 541.830020][T10243] usb 3-1: config 0 descriptor?? [ 541.848933][ T5706] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 541.872371][T12516] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 541.891951][ T5706] usb 4-1: device descriptor read/8, error -71 [ 541.993632][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 541.993648][ T29] audit: type=1326 audit(1779112781.764:3218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12525 comm="syz.0.2211" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7a239ce59 code=0x7ffc0000 [ 542.024834][T12526] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2211'. [ 542.024976][ T5706] usb usb4-port1: unable to enumerate USB device [ 542.041518][ T29] audit: type=1326 audit(1779112781.784:3219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12525 comm="syz.0.2211" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7a239ce59 code=0x7ffc0000 [ 542.069013][ T29] audit: type=1326 audit(1779112781.794:3220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12525 comm="syz.0.2211" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe7a239ce59 code=0x7ffc0000 [ 542.101106][ T29] audit: type=1326 audit(1779112781.864:3221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12525 comm="syz.0.2211" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7a239ce59 code=0x7ffc0000 [ 542.128873][ T5699] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 542.140578][T12515] syz_tun: left allmulticast mode [ 542.153703][ T29] audit: type=1326 audit(1779112781.864:3222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12525 comm="syz.0.2211" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7a239ce59 code=0x7ffc0000 [ 542.199292][T10243] ath6kl: Failed to submit usb control message: -71 [ 542.216322][T10243] ath6kl: unable to send the bmi data to the device: -71 [ 542.226578][T10243] ath6kl: Unable to send get target info: -71 [ 542.250568][T10243] ath6kl: Failed to init ath6kl core: -71 [ 542.267991][T10243] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 542.298896][ T5699] usb 5-1: Using ep0 maxpacket: 8 [ 542.308927][T10243] usb 3-1: USB disconnect, device number 114 [ 542.322897][ T5699] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 542.333131][ T5699] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.345034][ T5699] usb 5-1: Product: syz [ 542.360224][ T5699] usb 5-1: Manufacturer: syz [ 542.375226][ T5699] usb 5-1: SerialNumber: syz [ 542.397046][ T5699] usb 5-1: config 0 descriptor?? [ 542.630138][ T5699] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 543.095518][ T5699] usb write operation failed. (-71) [ 543.123180][ T5699] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 543.148038][T12545] FAULT_INJECTION: forcing a failure. [ 543.148038][T12545] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 543.174159][ T5699] dvbdev: DVB: registering new adapter (Terratec H7) [ 543.188857][ T5699] usb 5-1: media controller created [ 543.209696][T12545] CPU: 0 UID: 0 PID: 12545 Comm: syz.2.2217 Not tainted syzkaller #0 PREEMPT(full) [ 543.209720][T12545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 543.209731][T12545] Call Trace: [ 543.209739][T12545] [ 543.209748][T12545] dump_stack_lvl+0xe8/0x150 [ 543.209774][T12545] should_fail_ex+0x412/0x560 [ 543.209801][T12545] _copy_from_user+0x2d/0xb0 [ 543.209827][T12545] ___sys_sendmsg+0x1c6/0x360 [ 543.209851][T12545] ? __lock_acquire+0x6b5/0x2cf0 [ 543.209873][T12545] ? __pfx____sys_sendmsg+0x10/0x10 [ 543.209927][T12545] ? __fget_files+0x2a/0x420 [ 543.209948][T12545] ? __fget_files+0x3a0/0x420 [ 543.209977][T12545] __x64_sys_sendmsg+0x1bd/0x2a0 [ 543.210004][T12545] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 543.210036][T12545] ? __pfx_ksys_write+0x10/0x10 [ 543.210067][T12545] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.210086][T12545] do_syscall_64+0x15f/0xf80 [ 543.210110][T12545] ? trace_irq_disable+0x3b/0x140 [ 543.210144][T12545] ? clear_bhb_loop+0x40/0x90 [ 543.210165][T12545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.210182][T12545] RIP: 0033:0x7f797739ce59 [ 543.210199][T12545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 543.210214][T12545] RSP: 002b:00007f797829f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 543.210234][T12545] RAX: ffffffffffffffda RBX: 00007f7977615fa0 RCX: 00007f797739ce59 [ 543.210246][T12545] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 543.210258][T12545] RBP: 00007f797829f090 R08: 0000000000000000 R09: 0000000000000000 [ 543.210268][T12545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 543.210278][T12545] R13: 00007f7977616038 R14: 00007f7977615fa0 R15: 00007f797773fa48 [ 543.210306][T12545] [ 543.218490][ T5699] usb read operation failed. (-71) [ 543.345098][T12547] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.2218'. [ 543.454935][ T5699] usb write operation failed. (-71) [ 543.475604][ T5699] dvb_usb_az6007 5-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 543.502832][ T5699] usb 5-1: USB disconnect, device number 8 [ 543.648021][T12553] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2220'. [ 543.899544][T10243] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 544.058937][T10243] usb 4-1: Using ep0 maxpacket: 8 [ 544.079399][T10243] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 544.111868][T10243] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.145672][T10243] usb 4-1: Product: syz [ 544.170582][T10243] usb 4-1: Manufacturer: syz [ 544.186136][T10243] usb 4-1: SerialNumber: syz [ 544.221240][T10243] usb 4-1: config 0 descriptor?? [ 544.503273][T12579] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.2230'. [ 544.534079][T12577] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 544.567862][T10243] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 544.961372][T10243] usb write operation failed. (-71) [ 544.969754][ T5721] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 545.001087][T10243] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 545.014171][T10243] dvbdev: DVB: registering new adapter (Terratec H7) [ 545.025001][T10243] usb 4-1: media controller created [ 545.035806][T10243] usb read operation failed. (-71) [ 545.043429][T10243] usb write operation failed. (-71) [ 545.067424][T10243] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 545.089285][T10243] usb 4-1: USB disconnect, device number 117 [ 545.141971][ T5721] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 545.171621][ T5721] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.206528][ T5721] usb 1-1: config 0 descriptor?? [ 545.216011][ T5721] cp210x 1-1:0.0: cp210x converter detected [ 545.618629][ T5721] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 545.642166][ T5721] usb 1-1: cp210x converter now attached to ttyUSB0 [ 545.941889][ T5721] usb 1-1: USB disconnect, device number 106 [ 545.974669][ T5721] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 545.998088][ T5721] cp210x 1-1:0.0: device disconnected [ 546.949337][T10243] usb 1-1: new full-speed USB device number 107 using dummy_hcd [ 547.125175][T10243] usb 1-1: config 0 has an invalid descriptor of length 64, skipping remainder of the config [ 547.154485][T10243] usb 1-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 547.179427][T10243] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.196425][T10243] usb 1-1: Product: syz [ 547.204147][T10243] usb 1-1: Manufacturer: syz [ 547.217623][T10243] usb 1-1: SerialNumber: syz [ 547.250509][T10243] usb 1-1: config 0 descriptor?? [ 547.289912][T10243] powermate 1-1:0.0: probe with driver powermate failed with error -22 [ 547.420484][T12628] FAULT_INJECTION: forcing a failure. [ 547.420484][T12628] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 547.444027][T12628] CPU: 0 UID: 0 PID: 12628 Comm: syz.3.2246 Not tainted syzkaller #0 PREEMPT(full) [ 547.444044][T12628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 547.444051][T12628] Call Trace: [ 547.444056][T12628] [ 547.444061][T12628] dump_stack_lvl+0xe8/0x150 [ 547.444078][T12628] should_fail_ex+0x412/0x560 [ 547.444095][T12628] _copy_from_user+0x2d/0xb0 [ 547.444110][T12628] ___sys_sendmsg+0x1c6/0x360 [ 547.444126][T12628] ? __lock_acquire+0x6b5/0x2cf0 [ 547.444140][T12628] ? __pfx____sys_sendmsg+0x10/0x10 [ 547.444169][T12628] ? __fget_files+0x2a/0x420 [ 547.444181][T12628] ? __fget_files+0x3a0/0x420 [ 547.444197][T12628] __x64_sys_sendmsg+0x1bd/0x2a0 [ 547.444212][T12628] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 547.444230][T12628] ? __pfx_ksys_write+0x10/0x10 [ 547.444248][T12628] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.444259][T12628] do_syscall_64+0x15f/0xf80 [ 547.444273][T12628] ? trace_irq_disable+0x3b/0x140 [ 547.444288][T12628] ? clear_bhb_loop+0x40/0x90 [ 547.444300][T12628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.444310][T12628] RIP: 0033:0x7fa7bed9ce59 [ 547.444321][T12628] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 547.444330][T12628] RSP: 002b:00007fa7bfc10028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 547.444342][T12628] RAX: ffffffffffffffda RBX: 00007fa7bf015fa0 RCX: 00007fa7bed9ce59 [ 547.444349][T12628] RDX: 0000000040000050 RSI: 00002000000001c0 RDI: 0000000000000003 [ 547.444356][T12628] RBP: 00007fa7bfc10090 R08: 0000000000000000 R09: 0000000000000000 [ 547.444362][T12628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 547.444368][T12628] R13: 00007fa7bf016038 R14: 00007fa7bf015fa0 R15: 00007fa7bf13fa48 [ 547.444383][T12628] [ 547.920484][ T5699] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 548.093007][ T5699] usb 2-1: config 5 has an invalid interface number: 123 but max is 0 [ 548.102859][T10243] usb 3-1: new full-speed USB device number 115 using dummy_hcd [ 548.121570][ T5699] usb 2-1: config 5 has no interface number 0 [ 548.141832][ T5699] usb 2-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 548.180692][ T5699] usb 2-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 548.248275][ T5699] usb 2-1: config 5 interface 123 has no altsetting 0 [ 548.268504][T10243] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 548.298870][T10243] usb 3-1: config 0 has no interfaces? [ 548.314269][ T5699] usb 2-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 548.334759][ T5699] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.337064][T10243] usb 3-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 548.383093][T10243] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.384110][ T5699] usb 2-1: Product: syz [ 548.413964][T10243] usb 3-1: Product: syz [ 548.426376][ T5699] usb 2-1: Manufacturer: syz [ 548.431661][T10243] usb 3-1: Manufacturer: syz [ 548.445252][T10243] usb 3-1: SerialNumber: syz [ 548.457321][ T5699] usb 2-1: SerialNumber: syz [ 548.473199][T10243] usb 3-1: config 0 descriptor?? [ 549.308393][ T5721] usb 1-1: USB disconnect, device number 107 [ 549.994301][T12667] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2256'. [ 550.045657][T12668] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2256'. [ 550.318653][T10243] usb 3-1: USB disconnect, device number 115 [ 550.381237][T12670] tipc: Enabled bearer , priority 6 [ 550.611386][ T5699] ni6501 2-1:5.123: driver 'ni6501' failed to auto-configure device. [ 550.686470][ T5699] usb 2-1: USB disconnect, device number 10 [ 551.478856][ T5699] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 551.511885][ T9] tipc: Node number set to 2319950503 [ 551.638993][ T5699] usb 2-1: Using ep0 maxpacket: 8 [ 551.653563][ T5699] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 551.672162][ T5699] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 551.692675][ T5699] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 551.720984][ T5699] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 3 [ 551.743773][ T5699] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 551.753502][ T5699] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.773268][T12704] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2269'. [ 551.787519][ T5699] usb 2-1: config 0 descriptor?? [ 551.798406][T12704] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2269'. [ 551.798613][T12705] FAULT_INJECTION: forcing a failure. [ 551.798613][T12705] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 551.799662][T12690] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 551.847739][T12705] CPU: 1 UID: 0 PID: 12705 Comm: syz.3.2268 Not tainted syzkaller #0 PREEMPT(full) [ 551.847765][T12705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 551.847776][T12705] Call Trace: [ 551.847784][T12705] [ 551.847791][T12705] dump_stack_lvl+0xe8/0x150 [ 551.847816][T12705] should_fail_ex+0x412/0x560 [ 551.847844][T12705] _copy_from_user+0x2d/0xb0 [ 551.847869][T12705] ___sys_sendmsg+0x1c6/0x360 [ 551.847892][T12705] ? __lock_acquire+0x6b5/0x2cf0 [ 551.847915][T12705] ? __pfx____sys_sendmsg+0x10/0x10 [ 551.847975][T12705] ? __fget_files+0x2a/0x420 [ 551.847994][T12705] ? __fget_files+0x3a0/0x420 [ 551.848021][T12705] __x64_sys_sendmsg+0x1bd/0x2a0 [ 551.848048][T12705] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 551.848079][T12705] ? __pfx_ksys_write+0x10/0x10 [ 551.848110][T12705] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.848129][T12705] do_syscall_64+0x15f/0xf80 [ 551.848152][T12705] ? trace_irq_disable+0x3b/0x140 [ 551.848176][T12705] ? clear_bhb_loop+0x40/0x90 [ 551.848198][T12705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.848215][T12705] RIP: 0033:0x7fa7bed9ce59 [ 551.848231][T12705] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 551.848244][T12705] RSP: 002b:00007fa7bfbef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 551.848263][T12705] RAX: ffffffffffffffda RBX: 00007fa7bf016090 RCX: 00007fa7bed9ce59 [ 551.848276][T12705] RDX: 0000000000000800 RSI: 0000200000000200 RDI: 0000000000000007 [ 551.848287][T12705] RBP: 00007fa7bfbef090 R08: 0000000000000000 R09: 0000000000000000 [ 551.848298][T12705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 551.848307][T12705] R13: 00007fa7bf016128 R14: 00007fa7bf016090 R15: 00007fa7bf13fa48 [ 551.848335][T12705] [ 552.566711][ T5631] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 552.572683][T10243] usb 2-1: USB disconnect, device number 11 [ 552.589206][ T5699] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 552.750033][ T5699] usb 1-1: Using ep0 maxpacket: 16 [ 552.760204][ T5699] usb 1-1: unable to get BOS descriptor or descriptor too short [ 552.778152][ T5699] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 552.790124][ T5699] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 552.804396][ T5699] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 552.814682][ T5699] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.824580][ T5699] usb 1-1: Product: syz [ 552.829686][ T5699] usb 1-1: Manufacturer: syz [ 552.835208][ T5699] usb 1-1: SerialNumber: syz [ 553.094463][ T5706] hid_parser_main: 26 callbacks suppressed [ 553.094480][ T5706] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 553.139600][ T9] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 553.150650][ T5706] hid-generic 0000:0000:0000.0044: hidraw0: HID v0.00 Device [syz1] on syz0 [ 553.326809][ T9] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 553.351853][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.412105][ T9] usb 4-1: config 0 descriptor?? [ 553.441560][ T9] cp210x 4-1:0.0: cp210x converter detected [ 553.659643][ T5699] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 553.670392][ T5699] cdc_ncm 1-1:1.0: bind() failure [ 553.708914][ T5721] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 553.847355][ T9] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 553.859777][ T5699] usb 1-1: USB disconnect, device number 108 [ 553.871066][ T5721] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 553.899659][ T9] usb 4-1: cp210x converter now attached to ttyUSB0 [ 553.913785][ T5721] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 553.967053][ T5721] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 553.997520][ T5721] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 554.029253][ T5721] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 554.051828][ T5721] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.076388][ T9] usb 4-1: USB disconnect, device number 118 [ 554.106772][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 554.128478][ T5721] usb 2-1: config 0 descriptor?? [ 554.167151][ T9] cp210x 4-1:0.0: device disconnected [ 554.223872][T12735] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2280'. [ 554.254142][T12735] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2280'. [ 554.563074][ T5721] plantronics 0003:047F:FFFF.0045: ignoring exceeding usage max [ 554.600671][ T5721] plantronics 0003:047F:FFFF.0045: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 554.970812][ T5721] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 555.028933][ T5744] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 555.089032][ T5699] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 555.130898][ T5721] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 555.141975][ T5721] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 555.158297][ T5721] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 555.171087][ T5721] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.179212][ T5721] usb 3-1: Product: syz [ 555.184914][ T5721] usb 3-1: Manufacturer: syz [ 555.192638][ T5744] usb 4-1: Using ep0 maxpacket: 8 [ 555.197745][ T5721] usb 3-1: SerialNumber: syz [ 555.209412][ T5744] usb 4-1: config 7 has an invalid interface number: 4 but max is 2 [ 555.228881][ T5744] usb 4-1: config 7 has an invalid interface number: 107 but max is 2 [ 555.238553][ T5744] usb 4-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 555.247733][ T5744] usb 4-1: config 7 has an invalid interface number: 55 but max is 2 [ 555.255968][ T5744] usb 4-1: config 7 has an invalid interface number: 225 but max is 2 [ 555.259550][ T5699] usb 1-1: Using ep0 maxpacket: 16 [ 555.269997][ T5744] usb 4-1: config 7 has 4 interfaces, different from the descriptor's value: 3 [ 555.280762][ T5744] usb 4-1: config 7 has no interface number 0 [ 555.283715][ T5699] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 555.286906][ T5744] usb 4-1: config 7 has no interface number 1 [ 555.306967][ T5744] usb 4-1: config 7 has no interface number 2 [ 555.313731][ T5699] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 555.328109][ T5699] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 555.328905][ T5744] usb 4-1: config 7 has no interface number 3 [ 555.337826][ T5699] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.352058][ T5699] usb 1-1: Product: syz [ 555.354727][ T5744] usb 4-1: config 7 interface 107 altsetting 3 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 555.363980][ T5699] usb 1-1: Manufacturer: syz [ 555.368099][ T5744] usb 4-1: config 7 interface 107 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 555.383707][ T5744] usb 4-1: config 7 interface 107 altsetting 3 has an endpoint descriptor with address 0x16, changing to 0x6 [ 555.383908][ T5699] usb 1-1: SerialNumber: syz [ 555.403822][ T5744] usb 4-1: config 7 interface 107 altsetting 3 bulk endpoint 0x4 has invalid maxpacket 32 [ 555.416605][ T5744] usb 4-1: config 7 interface 107 altsetting 3 has an endpoint descriptor with address 0xB4, changing to 0x84 [ 555.420280][ T5699] usb 1-1: config 0 descriptor?? [ 555.433809][ T5744] usb 4-1: config 7 interface 107 altsetting 3 endpoint 0x84 has an invalid bInterval 202, changing to 11 [ 555.445670][ T5744] usb 4-1: config 7 interface 107 altsetting 3 endpoint 0x84 has invalid maxpacket 41186, setting to 1024 [ 555.457528][ T5744] usb 4-1: config 7 interface 107 altsetting 3 has 6 endpoint descriptors, different from the interface descriptor's value: 9 [ 555.474885][ T5744] usb 4-1: too many endpoints for config 7 interface 55 altsetting 200: 169, using maximum allowed: 30 [ 555.478191][ T5699] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 555.487089][ T5744] usb 4-1: config 7 interface 55 altsetting 200 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 555.508222][ T5744] usb 4-1: config 7 interface 55 altsetting 200 has a duplicate endpoint with address 0x8, skipping [ 555.516234][ T5699] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 555.552335][ T5744] usb 4-1: config 7 interface 55 altsetting 200 has a duplicate endpoint with address 0x3, skipping [ 555.578013][ T5744] usb 4-1: config 7 interface 55 altsetting 200 has 4 endpoint descriptors, different from the interface descriptor's value: 169 [ 555.592348][ T5744] usb 4-1: config 7 interface 225 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 555.613363][ T5744] usb 4-1: config 7 interface 4 has no altsetting 0 [ 555.620568][ T5744] usb 4-1: config 7 interface 107 has no altsetting 0 [ 555.627466][ T5744] usb 4-1: config 7 interface 55 has no altsetting 0 [ 555.646615][ T5744] usb 4-1: New USB device found, idVendor=1508, idProduct=1001, bcdDevice=6d.28 [ 555.658061][ T5744] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.664616][T12759] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2289'. [ 555.677019][ T5744] usb 4-1: Product: 斨摰쪷鴈ଛ㧯ᤠﰃ磫ቐ䋱ꉺ갗琕巔ල㠰髼䈏꼜⽿蹄ᓸ哮릒㩞彘嘗᪙⬠瀅戸꿗⨉嚽뗐⇇燘⤒꘧໮ꈴ帐ꡡ억⩶ሤ핗뭘밢辧枋釱중፱闟簇알㯈 [ 555.727248][ T5744] usb 4-1: Manufacturer: 独齆쌸瞑哆෇៬丆켆섑ȵ췒븞텿汇파礳裖᭖饰ℭ幡⵺梽↎蕋࣐绲䭉䵴楴৞旪᜙莨䝆茎麕瘕ᭊꚮ覓븦捀圠⋣읂椤螴 [ 555.769996][ T5744] usb 4-1: SerialNumber: а [ 556.089229][ T5699] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 556.101564][ T5699] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 556.267531][ T5744] option 4-1:7.107: GSM modem (1-port) converter detected [ 556.277904][ T5721] cdc_ncm 3-1:1.0: bind() failure [ 556.306728][ T5721] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 556.326149][ T5699] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 556.336959][ T5699] em28xx 1-1:0.0: No AC97 audio processor [ 556.354462][ T5721] cdc_ncm 3-1:1.1: bind() failure [ 556.367290][ T5744] option 4-1:7.55: GSM modem (1-port) converter detected [ 556.383399][ T5699] usb 1-1: USB disconnect, device number 109 [ 556.406766][ T5721] usb 3-1: USB disconnect, device number 116 [ 556.433470][ T5744] option 4-1:7.225: GSM modem (1-port) converter detected [ 556.460522][ T5699] em28xx 1-1:0.0: Disconnecting em28xx [ 556.474196][ T5744] usb 4-1: USB disconnect, device number 119 [ 556.536284][T12772] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2291'. [ 556.568338][ T5699] em28xx 1-1:0.0: Freeing device [ 556.571542][ T5744] option 4-1:7.107: device disconnected [ 556.609349][T12773] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2291'. [ 556.630102][ T5744] option 4-1:7.55: device disconnected [ 556.684849][ T5744] option 4-1:7.225: device disconnected [ 556.720186][ T9] usb 2-1: USB disconnect, device number 12 [ 557.068895][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 557.250115][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 557.271310][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 557.287161][T12791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2297'. [ 557.303924][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 557.331423][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 557.369491][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 557.397074][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.437365][ T9] usb 2-1: Product: syz [ 557.457253][ T9] usb 2-1: Manufacturer: syz [ 557.475661][ T9] usb 2-1: SerialNumber: syz [ 557.725478][ T5699] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 557.761976][ T5699] hid-generic 0000:0000:0000.0046: hidraw0: HID v0.00 Device [syz1] on syz0 [ 558.018964][ T5744] usb 1-1: new full-speed USB device number 110 using dummy_hcd [ 558.193866][ T5744] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 558.215013][ T5744] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.226178][ T5744] usb 1-1: Product: syz [ 558.232729][ T5744] usb 1-1: Manufacturer: syz [ 558.243207][ T5744] usb 1-1: SerialNumber: syz [ 558.288950][ T5744] usb 1-1: config 0 descriptor?? [ 558.318587][ T5744] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 558.532800][T12801] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2301'. [ 558.780580][ T9] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 558.798862][ T9] cdc_ncm 2-1:1.0: bind() failure [ 558.804327][T12812] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2303'. [ 558.824472][T12812] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2303'. [ 558.978275][ T9] usb 2-1: USB disconnect, device number 13 [ 560.128988][ T43] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 560.288917][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 560.306209][ T43] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 560.326912][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.348184][ T43] usb 5-1: Product: syz [ 560.361802][ T43] usb 5-1: Manufacturer: syz [ 560.374409][ T43] usb 5-1: SerialNumber: syz [ 560.394690][ T43] usb 5-1: config 0 descriptor?? [ 560.415998][ T43] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 560.853824][T12856] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2316'. [ 560.882944][T12856] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2316'. [ 561.298984][ T5721] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 561.395071][ T5744] gspca_stk1135: reg_w 0x352 err -71 [ 561.406544][ T5744] gspca_stk1135: serial bus timeout: status=0x00 [ 561.422459][ T5744] gspca_stk1135: Sensor write failed [ 561.440624][ T5744] gspca_stk1135: serial bus timeout: status=0x00 [ 561.457858][ T5744] gspca_stk1135: Sensor write failed [ 561.467870][ T5744] gspca_stk1135: serial bus timeout: status=0x00 [ 561.479522][ T5721] usb 2-1: unable to get BOS descriptor or descriptor too short [ 561.488826][ T5744] gspca_stk1135: Sensor read failed [ 561.495736][ T5744] gspca_stk1135: serial bus timeout: status=0x00 [ 561.505831][ T5721] usb 2-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice= 0.40 [ 561.516009][ T5744] gspca_stk1135: Sensor read failed [ 561.522327][ T5721] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.530659][ T5744] gspca_stk1135: Detected sensor type unknown (0x0) [ 561.537784][ T5721] usb 2-1: Product: syz [ 561.543902][ T5744] gspca_stk1135: serial bus timeout: status=0x00 [ 561.550365][ T5721] usb 2-1: Manufacturer: syz [ 561.565374][ T5721] usb 2-1: SerialNumber: syz [ 561.571696][ T5744] gspca_stk1135: Sensor read failed [ 561.578349][ T5744] gspca_stk1135: serial bus timeout: status=0x00 [ 561.586246][ T5744] gspca_stk1135: Sensor read failed [ 561.593322][ T5744] gspca_stk1135: serial bus timeout: status=0x00 [ 561.605282][ T5744] gspca_stk1135: Sensor write failed [ 561.611935][ T5744] gspca_stk1135: serial bus timeout: status=0x00 [ 561.622081][ T5744] gspca_stk1135: Sensor write failed [ 561.631652][ T5744] stk1135 1-1:0.0: probe with driver stk1135 failed with error -71 [ 561.648045][ T5744] usb 1-1: USB disconnect, device number 110 [ 561.758872][ T9] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 561.796943][ T5631] Bluetooth: hci4: unexpected event for opcode 0x2024 [ 561.812929][ T5721] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 561.822610][ T5721] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 561.836382][ T5721] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 561.859461][ T5721] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 561.879613][ T5721] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 561.890940][ T5721] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 561.914233][ T5721] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 561.928853][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 561.939880][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 561.951624][ T5721] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 561.964186][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 561.994820][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 562.038447][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 562.056052][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.079929][ T9] usb 4-1: Product: syz [ 562.088039][ T9] usb 4-1: Manufacturer: syz [ 562.097502][ T9] usb 4-1: SerialNumber: syz [ 562.107661][ T5721] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 562.162791][ T5721] usb 2-1: USB disconnect, device number 14 [ 562.226055][ T5635] udevd[5635]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 562.252747][T12874] FAULT_INJECTION: forcing a failure. [ 562.252747][T12874] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 562.287870][T12874] CPU: 0 UID: 0 PID: 12874 Comm: syz.0.2323 Not tainted syzkaller #0 PREEMPT(full) [ 562.287897][T12874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 562.287907][T12874] Call Trace: [ 562.287914][T12874] [ 562.287922][T12874] dump_stack_lvl+0xe8/0x150 [ 562.287948][T12874] should_fail_ex+0x412/0x560 [ 562.287975][T12874] _copy_from_user+0x2d/0xb0 [ 562.288001][T12874] ___sys_sendmsg+0x1c6/0x360 [ 562.288023][T12874] ? __lock_acquire+0x6b5/0x2cf0 [ 562.288050][T12874] ? __pfx____sys_sendmsg+0x10/0x10 [ 562.288081][T12874] ? kstrtouint+0x6e/0xe0 [ 562.288123][T12874] ? __fget_files+0x2a/0x420 [ 562.288143][T12874] ? __fget_files+0x3a0/0x420 [ 562.288171][T12874] __sys_sendmmsg+0x27c/0x4e0 [ 562.288199][T12874] ? __pfx___sys_sendmmsg+0x10/0x10 [ 562.288218][T12874] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 562.288261][T12874] ? ksys_write+0x242/0x270 [ 562.288287][T12874] ? __pfx_ksys_write+0x10/0x10 [ 562.288316][T12874] __x64_sys_sendmmsg+0xa0/0xc0 [ 562.288339][T12874] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.288356][T12874] do_syscall_64+0x15f/0xf80 [ 562.288379][T12874] ? trace_irq_disable+0x3b/0x140 [ 562.288402][T12874] ? clear_bhb_loop+0x40/0x90 [ 562.288423][T12874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.288441][T12874] RIP: 0033:0x7fe7a239ce59 [ 562.288458][T12874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 562.288471][T12874] RSP: 002b:00007fe7a332f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 562.288488][T12874] RAX: ffffffffffffffda RBX: 00007fe7a2615fa0 RCX: 00007fe7a239ce59 [ 562.288509][T12874] RDX: 0000000000000002 RSI: 0000200000000580 RDI: 0000000000000003 [ 562.288520][T12874] RBP: 00007fe7a332f090 R08: 0000000000000000 R09: 0000000000000000 [ 562.288530][T12874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 562.288539][T12874] R13: 00007fe7a2616038 R14: 00007fe7a2615fa0 R15: 00007fe7a273fa48 [ 562.288566][T12874] [ 562.721772][ T43] gspca_sonixj: reg_r err -110 [ 562.771759][ T5744] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 562.794171][ T5744] hid-generic 0000:0000:0000.0047: hidraw0: HID v0.00 Device [syz1] on syz0 [ 562.804488][ T43] sonixj 5-1:0.0: probe with driver sonixj failed with error -110 [ 562.994617][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.001793][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.421541][ T9] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 563.437438][ T9] cdc_ncm 4-1:1.0: bind() failure [ 563.625703][ T5744] usb 4-1: USB disconnect, device number 120 [ 563.768890][ T9] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 563.869246][ T5744] usb 5-1: USB disconnect, device number 9 [ 563.965815][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 563.978294][ T29] audit: type=1326 audit(1779112803.744:3223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12894 comm="syz.4.2328" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f1c59ce59 code=0x7ffc0000 [ 564.003772][T12896] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2327'. [ 564.020008][ T9] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 564.029544][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.044384][ T9] usb 3-1: Product: syz [ 564.050452][T12898] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2327'. [ 564.061351][ T29] audit: type=1326 audit(1779112803.744:3224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12894 comm="syz.4.2328" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f1c59ce59 code=0x7ffc0000 [ 564.087366][ T9] usb 3-1: Manufacturer: syz [ 564.096153][ T9] usb 3-1: SerialNumber: syz [ 564.107007][ T9] usb 3-1: config 0 descriptor?? [ 564.120027][ T9] gspca_main: 2770:9120 too many config [ 564.138139][ T29] audit: type=1326 audit(1779112803.794:3225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12894 comm="syz.4.2328" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f3f1c59ce59 code=0x7ffc0000 [ 564.175655][T12900] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 564.219031][ T29] audit: type=1326 audit(1779112803.794:3226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12894 comm="syz.4.2328" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f1c59ce59 code=0x7ffc0000 [ 564.275973][ T29] audit: type=1326 audit(1779112803.794:3227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12894 comm="syz.4.2328" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3f1c59ce59 code=0x7ffc0000 [ 564.331953][ T29] audit: type=1326 audit(1779112803.794:3228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12894 comm="syz.4.2328" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f1c59ce59 code=0x7ffc0000 [ 564.399103][ T29] audit: type=1326 audit(1779112803.794:3229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12894 comm="syz.4.2328" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f3f1c59ce59 code=0x7ffc0000 [ 564.489072][ T29] audit: type=1326 audit(1779112803.794:3230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12894 comm="syz.4.2328" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f1c59ce59 code=0x7ffc0000 [ 564.493404][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806a852400: rx timeout, send abort [ 564.526178][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88806a852400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 564.570331][ T29] audit: type=1326 audit(1779112803.794:3231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12894 comm="syz.4.2328" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3f1c59ce59 code=0x7ffc0000 [ 564.636938][ T29] audit: type=1326 audit(1779112803.794:3232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12894 comm="syz.4.2328" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f1c59ce59 code=0x7ffc0000 [ 564.770332][T12902] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2329'. [ 564.835500][T12903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2329'. [ 565.209643][ T9] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 565.378858][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 565.386062][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 565.399196][ T43] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 565.409903][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 565.427669][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.440019][ T9] usb 4-1: Product: syz [ 565.447689][ T9] usb 4-1: Manufacturer: syz [ 565.457048][ T9] usb 4-1: SerialNumber: syz [ 565.471111][ T9] usb 4-1: config 0 descriptor?? [ 565.486996][ T9] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 565.500829][ T5706] usb 1-1: new full-speed USB device number 111 using dummy_hcd [ 565.516578][ T9] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 565.582937][ T43] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 565.605641][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.624547][ T43] usb 2-1: Product: syz [ 565.634360][ T43] usb 2-1: Manufacturer: syz [ 565.644150][ T43] usb 2-1: SerialNumber: syz [ 565.658491][ T43] usb 2-1: config 0 descriptor?? [ 565.673187][ T5706] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 565.685239][ T5706] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 565.699686][ T5706] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 565.709305][ T5706] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 565.709981][ T43] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 565.729457][ T5706] usb 1-1: Product: syz [ 565.734096][ T5706] usb 1-1: Manufacturer: syz [ 565.756132][ T5706] hub 1-1:4.0: USB hub found [ 565.891652][T12909] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2332'. [ 565.957809][ T5706] hub 1-1:4.0: 2 ports detected [ 566.123513][ T9] em28xx 4-1:0.0: unknown em28xx chip ID (254) [ 566.342527][ T5744] usb 3-1: USB disconnect, device number 117 [ 566.423827][ T5706] hub 1-1:4.0: set hub depth failed [ 566.447692][ T5706] usb 1-1: USB disconnect, device number 111 [ 567.124190][ T5631] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 567.148931][ T9] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 567.159037][ T9] em28xx 4-1:0.0: board has no eeprom [ 567.230676][ T9] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 567.248921][ T9] em28xx 4-1:0.0: dvb set to bulk mode. [ 567.258683][ T5699] em28xx 4-1:0.0: Binding DVB extension [ 567.283981][ T9] usb 4-1: USB disconnect, device number 121 [ 567.296042][T12927] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 567.320195][ T9] em28xx 4-1:0.0: Disconnecting em28xx [ 567.374942][T12927] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 567.430376][ T5699] em28xx 4-1:0.0: Registering input extension [ 567.455950][ T9] em28xx 4-1:0.0: Closing input extension [ 567.538929][ T9] em28xx 4-1:0.0: Freeing device [ 567.622916][T12931] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2339'. [ 567.676822][T12931] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2339'. [ 568.079286][ T5721] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 568.088995][ T9] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 568.089105][T12938] input: syz1 as /devices/virtual/input/input44 [ 568.249064][ T5721] usb 3-1: Using ep0 maxpacket: 16 [ 568.264749][ T5721] usb 3-1: config 253 has an invalid interface number: 184 but max is 0 [ 568.274778][ T5721] usb 3-1: config 253 has no interface number 0 [ 568.283990][ T5721] usb 3-1: config 253 interface 184 has no altsetting 0 [ 568.288820][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 568.308497][ T5721] usb 3-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.00 [ 568.318167][ T5721] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.321142][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 568.326996][ T5721] usb 3-1: Product: syz [ 568.344064][ T5721] usb 3-1: Manufacturer: syz [ 568.349479][ T5721] usb 3-1: SerialNumber: syz [ 568.369778][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 568.390404][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 568.402896][ T5721] go7007 3-1:253.184: probe with driver go7007 failed with error -12 [ 568.420019][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 568.434338][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.452035][ T9] usb 4-1: Product: syz [ 568.463371][ T9] usb 4-1: Manufacturer: syz [ 568.476392][ T9] usb 4-1: SerialNumber: syz [ 568.485946][T12944] input: syz0 as /devices/virtual/input/input45 [ 568.720006][ T5721] hid-generic 0000:0000:0000.0048: unknown main item tag 0x0 [ 568.752776][ T5721] hid-generic 0000:0000:0000.0048: hidraw0: HID v0.00 Device [syz1] on syz0 [ 568.764198][ T43] gspca_stk1135: reg_w 0x352 err -71 [ 568.768856][ T5699] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 568.790845][ T43] gspca_stk1135: serial bus timeout: status=0x00 [ 568.804558][ T43] gspca_stk1135: Sensor write failed [ 568.824237][ T43] gspca_stk1135: serial bus timeout: status=0x00 [ 568.833605][ T43] gspca_stk1135: Sensor write failed [ 568.843449][ T43] gspca_stk1135: serial bus timeout: status=0x00 [ 568.856368][ T43] gspca_stk1135: Sensor read failed [ 568.869461][ T43] gspca_stk1135: serial bus timeout: status=0x00 [ 568.888463][ T43] gspca_stk1135: Sensor read failed [ 568.911214][ T43] gspca_stk1135: Detected sensor type unknown (0x0) [ 568.940881][ T5699] usb 5-1: device descriptor read/64, error -71 [ 568.947396][ T43] gspca_stk1135: serial bus timeout: status=0x00 [ 568.971503][ T43] gspca_stk1135: Sensor read failed [ 568.998039][ T43] gspca_stk1135: serial bus timeout: status=0x00 [ 569.027179][ T43] gspca_stk1135: Sensor read failed [ 569.049442][ T43] gspca_stk1135: serial bus timeout: status=0x00 [ 569.068329][ T43] gspca_stk1135: Sensor write failed [ 569.086957][ T43] gspca_stk1135: serial bus timeout: status=0x00 [ 569.106779][ T43] gspca_stk1135: Sensor write failed [ 569.124793][ T43] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71 [ 569.167415][ T43] usb 2-1: USB disconnect, device number 15 [ 569.240553][ T5699] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 569.390416][ T5699] usb 5-1: device descriptor read/64, error -71 [ 569.496662][ T9] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 569.508978][ T9] cdc_ncm 4-1:1.0: bind() failure [ 569.531496][ T5699] usb usb5-port1: attempt power cycle [ 569.635827][T12959] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 569.717829][ T9] usb 4-1: USB disconnect, device number 122 [ 569.901257][ T5699] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 569.947876][ T5699] usb 5-1: device descriptor read/8, error -71 [ 570.165660][ T9] usb 3-1: USB disconnect, device number 118 [ 570.250246][ T5699] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 570.310452][ T5699] usb 5-1: device descriptor read/8, error -71 [ 570.449593][ T5699] usb usb5-port1: unable to enumerate USB device [ 570.535213][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 570.535225][ T29] audit: type=1326 audit(1779112810.304:3236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12963 comm="syz.2.2347" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f797739ce59 code=0x7ffc0000 [ 570.622582][ T29] audit: type=1326 audit(1779112810.304:3237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12963 comm="syz.2.2347" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f797739ce59 code=0x7ffc0000 [ 570.668809][ T29] audit: type=1326 audit(1779112810.304:3238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12963 comm="syz.2.2347" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f797739ce59 code=0x7ffc0000 [ 570.715563][T12968] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 570.748621][ T29] audit: type=1326 audit(1779112810.304:3239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12963 comm="syz.2.2347" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f797739ce59 code=0x7ffc0000 [ 570.859415][ T29] audit: type=1326 audit(1779112810.304:3240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12963 comm="syz.2.2347" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f797739ce59 code=0x7ffc0000 [ 570.891391][ T29] audit: type=1326 audit(1779112810.304:3241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12963 comm="syz.2.2347" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f797739ce59 code=0x7ffc0000 [ 570.917593][ T29] audit: type=1326 audit(1779112810.304:3242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12963 comm="syz.2.2347" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f797739ce59 code=0x7ffc0000 [ 570.951412][ T29] audit: type=1326 audit(1779112810.334:3243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12963 comm="syz.2.2347" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f797739ce59 code=0x7ffc0000 [ 571.012201][ T29] audit: type=1326 audit(1779112810.334:3244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12963 comm="syz.2.2347" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f797739ce59 code=0x7ffc0000 [ 571.055177][ T29] audit: type=1326 audit(1779112810.334:3245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12963 comm="syz.2.2347" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f797739ce59 code=0x7ffc0000 [ 571.196725][T12974] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2351'. [ 571.209493][T12974] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2351'. [ 571.288894][ T5699] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 571.459756][ T5699] usb 2-1: Using ep0 maxpacket: 16 [ 571.486123][ T5699] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 571.511336][ T5699] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 571.531262][ T5699] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.554936][ T5699] usb 2-1: Product: syz [ 571.559329][ T5768] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 571.577875][ T5699] usb 2-1: Manufacturer: syz [ 571.602141][ T5699] usb 2-1: SerialNumber: syz [ 571.622241][ T5699] usb 2-1: config 0 descriptor?? [ 571.637031][ T5699] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 571.654814][ T5699] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 571.719358][ T5768] usb 4-1: Using ep0 maxpacket: 8 [ 571.733077][ T5768] usb 4-1: unable to get BOS descriptor or descriptor too short [ 571.788024][T12988] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 571.803983][ T5768] usb 4-1: config 140 has an invalid descriptor of length 0, skipping remainder of the config [ 571.815408][ T5768] usb 4-1: config 140 has 1 interface, different from the descriptor's value: 2 [ 571.847369][ T5768] usb 4-1: New USB device found, idVendor=1039, idProduct=2101, bcdDevice=25.81 [ 571.868618][ T5768] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.889242][ T5768] usb 4-1: Product: syz [ 571.899555][ T5768] usb 4-1: Manufacturer: syz [ 571.911849][ T5768] usb 4-1: SerialNumber: syz [ 572.151505][ T5768] usb 4-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2101) Rev (0X2581): Eagle I [ 572.250264][ T5699] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 572.860792][ T5768] usb 4-1: reset high-speed USB device number 123 using dummy_hcd [ 572.913800][ T5699] em28xx 2-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 572.923278][ T5699] em28xx 2-1:0.0: board has no eeprom [ 573.010296][ T5699] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 573.018362][ T5699] em28xx 2-1:0.0: dvb set to bulk mode. [ 573.026068][ T9] em28xx 2-1:0.0: Binding DVB extension [ 573.039782][ T5699] usb 2-1: USB disconnect, device number 16 [ 573.056023][ T5699] em28xx 2-1:0.0: Disconnecting em28xx [ 573.107216][ T9] em28xx 2-1:0.0: Registering input extension [ 573.116396][ T5699] em28xx 2-1:0.0: Closing input extension [ 573.152665][ T5699] em28xx 2-1:0.0: Freeing device [ 573.239942][ T5721] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 573.407923][ T5721] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 573.418979][ T5721] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.427220][ T5721] usb 5-1: Product: syz [ 573.432212][ T5721] usb 5-1: Manufacturer: syz [ 573.436999][ T5721] usb 5-1: SerialNumber: syz [ 573.838911][ T43] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 573.861432][ T5721] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 573.873994][ T5721] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 573.969522][ T9] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 573.988864][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 573.996587][ T43] usb 2-1: unable to get BOS descriptor or descriptor too short [ 574.006096][ T43] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 574.016951][ T43] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 574.032300][ T43] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 574.041715][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.050999][ T43] usb 2-1: Product: syz [ 574.055267][ T43] usb 2-1: Manufacturer: syz [ 574.061710][ T43] usb 2-1: SerialNumber: syz [ 574.091298][ T5721] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 574.108404][ T5721] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 574.118903][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 574.128238][ T5721] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 574.128714][ T9] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 574.147009][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.149703][ T5721] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 574.171208][ T9] usb 3-1: config 0 descriptor?? [ 574.185504][ T9] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 574.192816][ T5721] usb 5-1: USB disconnect, device number 14 [ 574.283960][ T5699] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 574.304668][ T5699] hid-generic 0000:0000:0000.0049: hidraw0: HID v0.00 Device [syz1] on syz0 [ 574.377107][ T5768] usb 4-1: unable to get BOS descriptor or descriptor too short [ 574.422133][ T5768] usb 4-1: device firmware changed [ 574.465556][ T5768] usb 4-1: [ueagle-atm] pre-firmware device, uploading firmware [ 574.485312][ T5768] usb 4-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 574.495475][ T5699] usb 4-1: Direct firmware load for ueagle-atm/eagleI.fw failed with error -2 [ 574.517673][ T5768] usb 4-1: USB disconnect, device number 123 [ 574.524007][ T5699] usb 4-1: Falling back to sysfs fallback for: ueagle-atm/eagleI.fw [ 574.578445][ T5699] ------------[ cut here ]------------ [ 574.584361][ T5699] !atomic_read(&kn->count) [ 574.584383][ T5699] WARNING: fs/kernfs/dir.c:560 at kernfs_get+0x72/0x90, CPU#0: kworker/0:5/5699 [ 574.597948][ T5699] Modules linked in: [ 574.602416][ T5699] CPU: 0 UID: 0 PID: 5699 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT(full) [ 574.611921][ T5699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 574.622184][ T5699] Workqueue: events request_firmware_work_func [ 574.628353][ T5699] RIP: 0010:kernfs_get+0x72/0x90 [ 574.633389][ T5699] Code: e8 13 c3 55 ff 48 89 df be 04 00 00 00 e8 76 03 c1 ff f0 ff 03 eb 05 e8 fc c2 55 ff 5b 5d e9 05 f7 3b 09 cc e8 ef c2 55 ff 90 <0f> 0b 90 eb d6 89 d9 80 e1 07 80 c1 03 38 c1 7c b6 48 89 df e8 75 [ 574.654140][ T5699] RSP: 0018:ffffc9000439f660 EFLAGS: 00010293 [ 574.661007][ T5699] RAX: ffffffff827001a1 RBX: ffff888057cc3f00 RCX: ffff8880264c0000 [ 574.669660][ T5699] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 574.678060][ T5699] RBP: 0000000000000000 R08: ffff888057cc3f03 R09: 1ffff1100af987e0 [ 574.686402][ T5699] R10: dffffc0000000000 R11: ffffed100af987e1 R12: ffff888078f04ea8 [ 574.694872][ T5699] R13: 1ffff1100f1e09d6 R14: ffff888078f04eb0 R15: ffff888078f04e98 [ 574.703242][ T5699] FS: 0000000000000000(0000) GS:ffff88812528a000(0000) knlGS:0000000000000000 [ 574.712257][ T5699] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 574.718953][ T5699] CR2: 000055a35e9e84f0 CR3: 000000007f03c000 CR4: 00000000003526f0 [ 574.728431][ T5699] Call Trace: [ 574.731764][ T5699] [ 574.734695][ T5699] kobject_add_internal+0x6be/0xd00 [ 574.739948][ T5699] kobject_add+0x163/0x240 [ 574.744366][ T5699] ? rcu_is_watching+0x15/0xb0 [ 574.749197][ T5699] ? __pfx_kobject_add+0x10/0x10 [ 574.754120][ T5699] ? __kasan_kmalloc+0x93/0xb0 [ 574.758915][ T5699] ? kobject_init+0x83/0x1e0 [ 574.763507][ T5699] get_device_parent+0x316/0x3a0 [ 574.768431][ T5699] device_add+0x2e1/0xbb0 [ 574.772776][ T5699] firmware_fallback_sysfs+0x2e4/0xa30 [ 574.778230][ T5699] ? kfree+0x1c5/0x640 [ 574.778797][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 574.783747][ T5699] _request_firmware+0x1052/0x1780 [ 574.795622][ T5699] ? __pfx__request_firmware+0x10/0x10 [ 574.801135][ T5699] ? process_scheduled_works+0xa70/0x1860 [ 574.806858][ T5699] ? process_scheduled_works+0xa70/0x1860 [ 574.812691][ T5699] request_firmware_work_func+0xaf/0x1c0 [ 574.818356][ T5699] ? process_scheduled_works+0xa70/0x1860 [ 574.824235][ T5699] process_scheduled_works+0xb5d/0x1860 [ 574.828782][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 574.829892][ T5699] ? __pfx_process_scheduled_works+0x10/0x10 [ 574.843978][ T5699] ? assign_work+0x3d5/0x5e0 [ 574.848578][ T5699] worker_thread+0xa53/0xfc0 [ 574.853223][ T5699] kthread+0x389/0x470 [ 574.857288][ T5699] ? __pfx_worker_thread+0x10/0x10 [ 574.862424][ T5699] ? __pfx_kthread+0x10/0x10 [ 574.867027][ T5699] ret_from_fork+0x514/0xb70 [ 574.871730][ T5699] ? __pfx_ret_from_fork+0x10/0x10 [ 574.876871][ T5699] ? __switch_to+0xc79/0x1410 [ 574.881595][ T5699] ? __pfx_kthread+0x10/0x10 [ 574.886189][ T5699] ret_from_fork_asm+0x1a/0x30 [ 574.890997][ T5699] [ 574.894051][ T5699] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 574.901337][ T5699] CPU: 0 UID: 0 PID: 5699 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT(full) [ 574.910716][ T5699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 574.920775][ T5699] Workqueue: events request_firmware_work_func [ 574.926940][ T5699] Call Trace: [ 574.930225][ T5699] [ 574.933166][ T5699] vpanic+0x56c/0xa60 [ 574.937157][ T5699] ? __pfx__printk+0x10/0x10 [ 574.941746][ T5699] ? __pfx_vpanic+0x10/0x10 [ 574.946329][ T5699] ? is_bpf_text_address+0x292/0x2b0 [ 574.951866][ T5699] ? is_bpf_text_address+0x26/0x2b0 [ 574.957080][ T5699] panic+0xc5/0xd0 [ 574.960799][ T5699] ? __pfx_panic+0x10/0x10 [ 574.965216][ T5699] ? ret_from_fork_asm+0x1a/0x30 [ 574.970152][ T5699] __warn+0x315/0x4c0 [ 574.974125][ T5699] ? kernfs_get+0x72/0x90 [ 574.978450][ T5699] ? kernfs_get+0x72/0x90 [ 574.982860][ T5699] __report_bug+0x29a/0x540 [ 574.987364][ T5699] ? kernfs_get+0x72/0x90 [ 574.991697][ T5699] ? __pfx___report_bug+0x10/0x10 [ 574.996721][ T5699] ? kernfs_add_one+0x477/0x5c0 [ 575.001576][ T5699] ? up_write+0x1ab/0x410 [ 575.005903][ T5699] ? kernfs_get+0x72/0x90 [ 575.010223][ T5699] report_bug+0x16a/0x220 [ 575.014550][ T5699] ? kernfs_get+0x72/0x90 [ 575.018884][ T5699] ? kernfs_get+0x74/0x90 [ 575.023210][ T5699] handle_bug+0x9c/0x200 [ 575.027452][ T5699] exc_invalid_op+0x1a/0x50 [ 575.031945][ T5699] asm_exc_invalid_op+0x1a/0x20 [ 575.036791][ T5699] RIP: 0010:kernfs_get+0x72/0x90 [ 575.041731][ T5699] Code: e8 13 c3 55 ff 48 89 df be 04 00 00 00 e8 76 03 c1 ff f0 ff 03 eb 05 e8 fc c2 55 ff 5b 5d e9 05 f7 3b 09 cc e8 ef c2 55 ff 90 <0f> 0b 90 eb d6 89 d9 80 e1 07 80 c1 03 38 c1 7c b6 48 89 df e8 75 [ 575.061332][ T5699] RSP: 0018:ffffc9000439f660 EFLAGS: 00010293 [ 575.067409][ T5699] RAX: ffffffff827001a1 RBX: ffff888057cc3f00 RCX: ffff8880264c0000 [ 575.075381][ T5699] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 575.083343][ T5699] RBP: 0000000000000000 R08: ffff888057cc3f03 R09: 1ffff1100af987e0 [ 575.091308][ T5699] R10: dffffc0000000000 R11: ffffed100af987e1 R12: ffff888078f04ea8 [ 575.099270][ T5699] R13: 1ffff1100f1e09d6 R14: ffff888078f04eb0 R15: ffff888078f04e98 [ 575.107256][ T5699] ? kernfs_get+0x71/0x90 [ 575.111586][ T5699] kobject_add_internal+0x6be/0xd00 [ 575.116789][ T5699] kobject_add+0x163/0x240 [ 575.121199][ T5699] ? rcu_is_watching+0x15/0xb0 [ 575.125957][ T5699] ? __pfx_kobject_add+0x10/0x10 [ 575.130879][ T5699] ? __kasan_kmalloc+0x93/0xb0 [ 575.135645][ T5699] ? kobject_init+0x83/0x1e0 [ 575.140231][ T5699] get_device_parent+0x316/0x3a0 [ 575.145166][ T5699] device_add+0x2e1/0xbb0 [ 575.149492][ T5699] firmware_fallback_sysfs+0x2e4/0xa30 [ 575.154963][ T5699] ? kfree+0x1c5/0x640 [ 575.159034][ T5699] _request_firmware+0x1052/0x1780 [ 575.164162][ T5699] ? __pfx__request_firmware+0x10/0x10 [ 575.169707][ T5699] ? process_scheduled_works+0xa70/0x1860 [ 575.175504][ T5699] ? process_scheduled_works+0xa70/0x1860 [ 575.181247][ T5699] request_firmware_work_func+0xaf/0x1c0 [ 575.186996][ T5699] ? process_scheduled_works+0xa70/0x1860 [ 575.192725][ T5699] process_scheduled_works+0xb5d/0x1860 [ 575.198300][ T5699] ? __pfx_process_scheduled_works+0x10/0x10 [ 575.204322][ T5699] ? assign_work+0x3d5/0x5e0 [ 575.208910][ T5699] worker_thread+0xa53/0xfc0 [ 575.213790][ T5699] kthread+0x389/0x470 [ 575.217853][ T5699] ? __pfx_worker_thread+0x10/0x10 [ 575.222957][ T5699] ? __pfx_kthread+0x10/0x10 [ 575.227546][ T5699] ret_from_fork+0x514/0xb70 [ 575.232126][ T5699] ? __pfx_ret_from_fork+0x10/0x10 [ 575.237225][ T5699] ? __switch_to+0xc79/0x1410 [ 575.241896][ T5699] ? __pfx_kthread+0x10/0x10 [ 575.246478][ T5699] ret_from_fork_asm+0x1a/0x30 [ 575.251248][ T5699] [ 575.254907][ T5699] Kernel Offset: disabled [ 575.259227][ T5699] Rebooting in 86400 seconds..