last executing test programs: 11.560855026s ago: executing program 3 (id=5213): r0 = eventfd2(0x43, 0x1) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000500)=' ,1\t#|^q', 0x8}], 0x1) 11.558098485s ago: executing program 3 (id=5214): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000480)=[@nested_amd_vmload={0x182, 0x18, 0x3}, @uexit={0x0, 0x18, 0x8001}, @wr_drn={0x68, 0x20, {0x3, 0xc4}}, @nested_amd_invlpga={0x17d, 0x20, {0x0, 0xdaae}}, @out_dx={0x6a, 0x28, {0x1581, 0x0, 0x1}}, @code={0xa, 0x56, {"f20f108100680000470f0966b808018ed80f2043410f01d166ba400066ed66baa100b000eec744240051000000c74424020d000000ff1c242ef30fc7b680ffffff410f01f8"}}, @nested_create_vm={0x12d, 0x18, 0x8}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @save_area=0x457, 0x10, 0xffff, 0x2}}, @uexit={0x0, 0x18, 0x2}, @enable_nested={0x12c, 0x18}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0x56, 0x2, 0x4, 0x2}}], 0x1a6}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x8}, @exit], &(0x7f00000000c0)='GPL\x00', 0x9}, 0x94) r3 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r5 = fcntl$dupfd(r4, 0x0, r4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$USBDEVFS_REAPURB(r5, 0x4008550c, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800007, 0x11, r3, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socket(0x10, 0x803, 0x0) unshare(0x62040200) syz_usb_connect(0x2, 0x56, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000084a48e08d112f74247aa000000010902"], 0x0) 8.90979943s ago: executing program 1 (id=5229): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c"], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, r3, 0x20000, 0x380}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0xf}]}}}]}, 0x3c}}, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x11, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00946460"]}, 0x108) r6 = socket(0x1d, 0x2, 0x6) recvmmsg(r1, &(0x7f00000049c0)=[{{&(0x7f0000000540)=@can, 0x80, &(0x7f0000000e40)=[{&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000740)=""/27, 0x1b}, {&(0x7f0000000780)=""/10, 0xa}, {&(0x7f0000000840)=""/222, 0xde}, {&(0x7f0000000940)=""/239, 0xef}, {&(0x7f0000000a40)=""/229, 0xe5}, {&(0x7f0000000b40)=""/167, 0xa7}, {&(0x7f0000000c00)=""/165, 0xa5}, {&(0x7f0000000cc0)=""/247, 0xf7}], 0x9}, 0x8}, {{&(0x7f0000000f00)=@hci, 0x80, &(0x7f0000001100)=[{&(0x7f0000000dc0)=""/8, 0x8}, {&(0x7f0000000f80)=""/103, 0x67}, {&(0x7f0000001000)=""/198, 0xc6}], 0x3}, 0x1}, {{&(0x7f0000001140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000001380)=[{&(0x7f0000001280)=""/27, 0x1b}, {&(0x7f00000012c0)=""/182, 0xb6}], 0x2, &(0x7f00000013c0)=""/127, 0x7f}, 0xff}, {{&(0x7f0000001440)=@l2tp6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/96, 0x60}, {&(0x7f0000001540)=""/69, 0x45}, {&(0x7f00000015c0)=""/81, 0x51}, {&(0x7f0000001640)=""/43, 0x2b}], 0x4}, 0x4}, {{&(0x7f00000016c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000001740)=""/243, 0xf3}, {&(0x7f0000001840)=""/227, 0xe3}, {&(0x7f0000001940)=""/38, 0x26}, {&(0x7f0000001980)=""/207, 0xcf}, {&(0x7f0000001a80)=""/210, 0xd2}, {&(0x7f0000001b80)=""/10, 0xa}, {&(0x7f0000001bc0)=""/169, 0xa9}, {&(0x7f0000001c80)=""/40, 0x28}], 0x8, &(0x7f0000002e00)=""/4096, 0x1000}, 0x263}, {{&(0x7f0000003e00)=@alg, 0x80, &(0x7f0000004200)=[{&(0x7f0000001d40)=""/30, 0x1e}, {&(0x7f0000003e80)=""/80, 0x50}, {&(0x7f0000003f00)=""/223, 0xdf}, {&(0x7f0000004000)=""/15, 0xf}, {&(0x7f0000004040)=""/237, 0xed}, {&(0x7f0000004140)=""/183, 0xb7}], 0x6, &(0x7f0000004280)=""/209, 0xd1}, 0x6}, {{&(0x7f0000004400)=@ethernet={0x0, @remote}, 0x80, &(0x7f00000048c0)=[{&(0x7f0000004380)=""/53, 0x35}, {&(0x7f0000004480)=""/87, 0x57}, {&(0x7f0000004500)=""/74, 0x4a}, {&(0x7f0000004580)=""/73, 0x49}, {&(0x7f0000004600)=""/40, 0x28}, {&(0x7f0000004640)=""/214, 0xd6}, {&(0x7f0000004740)=""/28, 0x1c}, {&(0x7f0000004780)=""/42, 0x2a}, {&(0x7f00000047c0)=""/248, 0xf8}], 0x9, &(0x7f0000004980)=""/45, 0x2d}, 0x8}], 0x7, 0x40000000, &(0x7f0000004b80)) bind$inet(r6, &(0x7f00000000c0)={0x1d, 0x4e20, @remote}, 0x10) sendmmsg(r4, &(0x7f00000094c0)=[{{&(0x7f00000007c0)=@nl=@kern={0x10, 0x0, 0x0, 0x10000}, 0x80, &(0x7f0000000e00)=[{&(0x7f00000001c0)="f3", 0x1}], 0x1}}, {{&(0x7f00000011c0)=@nl=@kern={0x10, 0x0, 0x0, 0x10000}, 0x80, &(0x7f00000043c0)=[{&(0x7f0000001240)="1f3e", 0x2}], 0x1, &(0x7f0000000640)=[{0xd8, 0x1, 0x5, "cc7b9d439af1d025ffc3f1690d936a12d75eef4a329126811beffd8550a33819168f9e91bcf3c795aec6b9c1ca6d73460c71e9240d30effa88c80d7c2378261ea7177e0dc574a01d0a21d6222d0b883fe9feda750354aa0489623ecbd2bcc91ec82ec222a134fad453638422df5b86548ead6c49f2aa97d2b1b6bfd998331f060a1f4d329e7cb066d9dffc0621497913fb051aceda0627b24b0d1551d3a8f32235be077f3c0b2239a97dcccca3415f3ed4b869c0770d8a6c3ea991e71a9f0e0e94cfd0a0eba35e"}], 0xd8}}], 0x2, 0x10) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000140)={0x0, 0x1, 0x4, 0x8000000000000}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000180)={0x0, 0x2, 0x132ad5bf, 0x1}) unshare(0x22020600) preadv(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000005c0)={0x20, 0xe, 0x41, "1ec8646db9d3cb75dd3f7289950500007c18a2fa8a942a19d72511c82c986dc8ac69ff12abe737e1f80b97323f828735329ccea4dd7a00"/65}, 0x0, &(0x7f0000000240)={0x0, 0x8, 0x1, 0xf9}, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, &(0x7f0000000180)={0x14, &(0x7f0000000280)={0x20, 0xa, 0xdf, {0xdf, 0x21, "fb04f57f2062b816adf0e089573635ee2a3b12d158f249d046da80c02c5670a3baef884fe21de20d6157096bb8d9ba94e23c642c034a612f6aaced76f68414594ec4736e008065f9d23427c06975e5a89c109b65551729baf07656b46342abc7428a23e69d0d546831c497a33becc9382ed94f1e5ed53c69cfffad8ec878282f3fb9b5d0ae063dc79a44fbcb081eda1f11dc8761d079a22cbdc215cb7b0378271db8919796fab5f0ecf40e16ed3c6f1009f9bbfcb44ff359dcbf3abe39ca885bda47ab6b3ad23a77210437e308e967126197cd14efaf2a02b0adc48565"}}, &(0x7f0000000100)={0x0, 0x3, 0x59, @string={0x59, 0x3, "fcda2714009f5d8b8aa45769ad9e321bf61a531f3c71f1b4e80b9e4a8d7a499533974f587549f8de84a8c75bebb34027f4078569f607f650f07fa4bc6af6c907ae346343f27e811b7360d1e72c1284321e7b7d5b604438"}}}, &(0x7f0000000500)={0x2c, &(0x7f0000000400)={0x0, 0x16, 0x6a, "f2724afba3dba47b72129d099710c63640ff1a5c43d4d8dfc60f09d5e7852d1bb9c19d07d987aa8213a4dacb953d4f831f7ebe76708ff39b80674db24d99446c862fb59ee18a327b5e42e58a6b5e7fe521811fe4d0dbbb3eadf83bfe549847b2656e0ff7e8840cce41d6"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x40}, 0x0, &(0x7f0000000480), &(0x7f00000004c0)}) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r4, 0x80089419, &(0x7f0000000380)) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000040)=""/5, 0xfffffffffffffd34) 8.480113153s ago: executing program 3 (id=5233): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff038}, {0x20, 0x0, 0x2, 0x3b63}, {0x6, 0x0, 0xfe}]}, 0x10) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r5, 0x0, 0xf, 0x0, 0x0) sendmmsg(r3, 0x0, 0x0, 0x0) fcntl$getown(r3, 0x9) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x20100, 0x0) ioctl$RTC_WKALM_SET(r6, 0x4028700f, &(0x7f0000001400)={0x0, 0x1, {0xb3, 0x2b, 0x40080010, 0x15, 0x2, 0xb30, 0x1, 0x168, 0x1}}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="4000000010003b15fdffffffffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000000150010018001280080090818ac170000c0002800808000a00", @ANYRES32=r8, @ANYBLOB], 0x40}}, 0x2400c080) sendmsg$nl_route(r2, 0x0, 0x4000000) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$IP_VS_SO_GET_SERVICES(r9, 0x0, 0x482, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f72"], 0x60}}, 0x0) 8.478469643s ago: executing program 4 (id=5234): r0 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x13100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') preadv(r4, &(0x7f00000026c0)=[{&(0x7f0000000240)=""/4088, 0xff8}], 0x1, 0x15f, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f00000001c0)={0x2}) syz_usb_disconnect(r3) r5 = syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010580416500000"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r7 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_mr_cache\x00') read$FUSE(r7, &(0x7f0000002a80)={0x2020}, 0x2020) preadv(r7, &(0x7f0000000300)=[{&(0x7f0000000600)=""/194, 0xc2}], 0x1, 0x43, 0x5) r8 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r8, r6, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r8, r10, 0x19) r11 = timerfd_create(0x1, 0x0) timerfd_settime(r11, 0x3, &(0x7f0000000100)={{}, {0x0, 0x3938700}}, 0x0) timerfd_gettime(r11, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r8, r9, 0xffffffffffffffff) io_uring_enter(r0, 0x4fd6, 0x3, 0x1d, &(0x7f0000000180), 0x8) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) ioctl$KVM_SET_PIT(r13, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x2, 0xfe, 0x0, 0x0, 0x88, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfd, 0x0, 0x2, 0x20, 0x0, 0x1000000}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r13, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r14, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r14, 0xae80, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x5, &(0x7f0000000200)={0x77359400}, 0x1, 0x4}) 7.220865639s ago: executing program 2 (id=5236): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000011540)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004070000000800000500000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142fa9ea4318123f602000000000080de89e661168c1886d0d4dd4f204e345c65c26e278ef5b915395b19284a1a4bc72fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd255985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340bdc8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d6acabd38a817bcd222614d1f62734d679039a97d2b74f9e8e997ccd314000f7477137f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69c584146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8c7049f798abe646f738bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736c819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480efd8329d9a733d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c50008a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69239500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047acd083d3cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed1823cb7dde8212a8531bd9691dd4cc6a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a903375dfb663a8d8ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181070000005e235cd302f3b4071ee5237ada986b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8504000000000000004fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8fabea9930952f5da9b909c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3d99e3568c51cd1eab8a26b232ac46bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d89f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39389f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290c7536fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c3e1f5a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba334c83e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86d856b3cf79a3f7306436762dd1a08ce873e07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9030f840f1ba4664f35547cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac361f71ac279a688f10a1cc4df1112105edebc5e3bbc394c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460fcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef0a96e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c26dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f23d9eea2459f7844606e1202768d83c24cc791bde44a448022bbfa571fe029a7b2d5152639ee283894ab6168992ff0acc01b39a078f285ce615351f262019586eb9447bb3eaffd7b53d8f37ca6c5f1027dd5b7592996c8a7789ba108979cc9ad07ed86682843e2eaa855dd01443ee6ffde1811f10039d5d14458177096e15cc4d8f2582a1bea5cc98d992f3de7d1cdfb24384b9f10f615c87c441dc970ec896a5af6bf69b50a244bc138a1cae9868c3079bafe69769000000000000000000e99b63029d219cd3545a8426b56554a9f265d3557eefb3602894507c256cb8ee9ebadfecb6afeb84ba757bfa8d00a5af0dd6aa1e8144ef8ef04410d52204c335408941b8eccc5c734cc6a05247142ed647f89bcb5c043acfb382b9cc918bc3cdc368983157851cdf678800aa7eb2a6cbc12c7ae23bc88b8f10223ab2a093429f3f6965bc5af0114cf6f246bae0b04bec8e30b6772b8950f32e87beda060f9af2a0ccd4a8eab8e395ee3628eb976b7fff835e6c1bdc4a6e00acd0fe63ba8425b21845db903b38c80148e6aa497dbf0e2baf938d3ecbd433527602d89f10aca419ff54e47354194f75e343d4c75227448530b0d8d59b9f94a3fa0ca9210177926c58ef46dcd09e79c343d35aa954d12f89410c47ac29c881f8a6bda8dd40df0d1e5881338d2c5a01bf1ee6b28169fef18df13c759e767d3442ae6598106496f42b73074bb804e8763915c3e04400ad44e9f3130e904062d204d385c026722a094255db1572d66e7a4917bba2a0f6a1a57482cdb4070de8dd60fd65dacb9ec5003fb1cca05ce1c9f924cc2ec45e8d5adf7c89e3b0b8da35c1aa7fbbee6f839a8f05294a6c02281afb7601252611583408f1"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r4, 0x4) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="25b096f681cd731c3f3a9badc4e3cf5edeae1f3b5082d7ab3a97c053df68744e7c7e24d0b59997bab4bccff8363b275de3510b0ebe4275d8d2f153395668e3d608e358fc2294263c03f8dc4f8bf194e4fde4600a2dec2f483a914e2fde0cbc344a2b9fc18dd198966045a6d4d4eb8571e8bb69e6724e37fcbaa6e4c64050b47256b9bb17f5c0aa5101e015ecdcb62fec46fc020551", 0x95}, {&(0x7f0000000280)="d3a88bea5916e313729a3989393caca70c74cd74e62e524bdd37be131ad827f911027e70ccf679d8e7c0cd3333095f83d6d473db345ded2ac8acaa87503de74c82431758e8e11e3ecb7bce02d6cd65f4eb88cc49ceb9e39f7117eb0f62323dc9b80dea447b0c96a383f14281bb87b09de0a6153ceeaae2b50a2b0f0f41810f379f9c3a1f3938461829d716a4bda86ab11b41f754bc15d71b", 0x98}], 0x2}, 0x0) madvise(&(0x7f00006d3000/0x4000)=nil, 0x4000, 0x66) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r5, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000000001010200000000141a0000020000002400018014000180080003000000000000000200640101000c00028005000100000000005d3f23a7199bbe425f67a802e6bb1a52fa5e44d53901bf905fcfa58c42c58c31cce7118cbc1e3dd676d2263c4d22843fb6dc789887c70eee697fdfba6a3cb12762e762e0448327b9ef0e4e58e2f7527c970d05930b3f10614c4bb32d84f75493b133d6064386a50b48d1c439b0bde4592b"], 0x38}}, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r5, 0xc0045009, &(0x7f0000000040)=0x2fff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_usb_connect(0x2, 0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_open_procfs(0x0, 0x0) preadv(r8, &(0x7f00000001c0), 0x0, 0x185, 0x0) timerfd_gettime(r8, &(0x7f0000000100)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010027bd7000fedbdf2500000000", @ANYRES32=r9, @ANYBLOB="1e5600000000000044459d51404c7a26e265c64cdb3b7f5e301fe7a0b50a30f1f54b"], 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x80) 5.823493347s ago: executing program 1 (id=5237): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r0, 0x1, 0x52, &(0x7f0000000040)=0x92c, 0x4) recvmmsg(r0, &(0x7f0000007f40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x10002, 0x0) 4.959350475s ago: executing program 4 (id=5240): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {&(0x7f0000001980)="7d586d16", 0x4}], 0x2}, 0x24000008) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(0x0, r3) sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)={0x18, r4, 0x341, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000814}, 0x14) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x7d1203, 0x0) sendfile(r8, r8, 0x0, 0x40008) r9 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x109202) ioctl$USBDEVFS_SETINTERFACE(r9, 0x80085504, &(0x7f0000000180)) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r11, 0x701, 0x0, 0xffffffff, {0x41}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 4.9441473s ago: executing program 1 (id=5242): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x10100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x11}, {0xffe6, 0xb}, {0xfff2, 0xc}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x7, 0x1, 0x7}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x4000804) close(r4) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4.610022768s ago: executing program 1 (id=5244): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000480)=[@nested_amd_vmload={0x182, 0x18, 0x3}, @uexit={0x0, 0x18, 0x8001}, @wr_drn={0x68, 0x20, {0x3, 0xc4}}, @nested_amd_invlpga={0x17d, 0x20, {0x0, 0xdaae}}, @out_dx={0x6a, 0x28, {0x1581, 0x0, 0x1}}, @code={0xa, 0x56, {"f20f108100680000470f0966b808018ed80f2043410f01d166ba400066ed66baa100b000eec744240051000000c74424020d000000ff1c242ef30fc7b680ffffff410f01f8"}}, @nested_create_vm={0x12d, 0x18, 0x8}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @save_area=0x457, 0x10, 0xffff, 0x2}}, @uexit={0x0, 0x18, 0x2}, @enable_nested={0x12c, 0x18}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0x56, 0x2, 0x4, 0x2}}], 0x1a6}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x8}, @exit], &(0x7f00000000c0)='GPL\x00', 0x9}, 0x94) r3 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r5 = fcntl$dupfd(r4, 0x0, r4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$USBDEVFS_REAPURB(r5, 0x4008550c, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800007, 0x11, r3, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socket(0x10, 0x803, 0x0) unshare(0x62040200) syz_usb_connect(0x2, 0x56, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000084a48e08d112f74247aa000000010902"], 0x0) 4.346844622s ago: executing program 3 (id=5245): ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SYNPROXY={0x4}, @CTA_PROTOINFO={0x8, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x4}}]}, 0x70}}, 0x0) madvise(&(0x7f00004e8000/0x4000)=nil, 0x4000, 0x17) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r3, 0x29, 0x7, 0x0, &(0x7f0000000100)) r4 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r4, 0xc0205649, &(0x7f0000000180)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x980913, 0x1, '\x00', @p_u32=0x0}}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_buf(r5, 0x1, 0x1a, &(0x7f0000001340)=""/4096, &(0x7f0000000340)=0x1000) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000040)=""/185) 4.160746152s ago: executing program 2 (id=5246): socket$inet_sctp(0x2, 0x5, 0x84) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x2, 0x110, 0xffffffffffffffff, 0x87f64000) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xfe3f) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @host, 0x0, 0x1000000, 0x5e, 0x200000000000, 0x100000000000006}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtaction={0xfe8, 0x1c, 0x1, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x1300}, [{0x4}, {0xfd0, 0x1, [@m_pedit={0xfcc, 0x4, 0x0, 0x0, {{0xa}, {0xf84, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4c, 0x5, 0x0, 0x1, [{0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_KEYS_EX={0x84, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}]}, @TCA_PEDIT_PARMS_EX={0xeb0, 0x4, {{{0x4, 0x2, 0x0, 0x0, 0x9}, 0x6, 0x9, [{0x7, 0xff, 0x2, 0x80000000, 0x1, 0x6}, {0x6, 0x2b, 0xa, 0x7, 0x1, 0x4}, {0x6, 0xfcf1, 0x4, 0x4, 0x8, 0x1}, {0x7, 0x200, 0x2, 0xfffff801, 0xd44, 0x5}, {0x7, 0xb35d, 0xe0, 0x1ff, 0x0, 0x5}, {0x9, 0x0, 0x9, 0x10000, 0x0, 0x7}]}, [{0x6, 0x401, 0x8001, 0x2, 0x9, 0x8}, {0x5, 0xffff, 0x1, 0x6, 0x0, 0x1ff}, {0x1, 0x7, 0x4, 0x822, 0x9, 0x5}, {0xa, 0x16, 0x5, 0x8, 0x81, 0x9}, {0x1, 0x3f, 0x3, 0x0, 0x7f, 0x8d}, {0x8, 0x3d, 0xabb7, 0x7f, 0x29c3, 0x7ff}, {0x3, 0xae4, 0xac, 0x3ff, 0x5, 0x2}, {0x2, 0x5, 0x0, 0x2, 0x3, 0x9}, {0x7, 0xffffffcf, 0x0, 0x8, 0x7, 0xfffffffc}, {0x0, 0x7, 0xff, 0x8, 0xd, 0x9}, {0xfffffffe, 0x7f, 0x9, 0x0, 0x3, 0xdc}, {0x401, 0x3, 0x78d, 0x3ff, 0xda5a, 0x4}, {0x1, 0x10001, 0xf, 0x0, 0x67, 0x4}, {0x83, 0xc, 0x7, 0x6, 0x47, 0xfffffff7}, {0x4, 0x2, 0x7fffffff, 0x8001, 0x8001, 0xe}, {0x6, 0x6, 0x81, 0x1ff, 0x400000, 0x100000}, {0x81, 0x2, 0x9, 0x5, 0x8, 0x100}, {0x3, 0x8, 0x4, 0x2, 0x3, 0x9}, {0x80000000, 0x9, 0x3, 0x8, 0x33d3, 0x1}, {0x6, 0x7, 0x7, 0x73ad08b1, 0xfffffff1, 0x5}, {0x1000, 0x9c1b, 0x0, 0x2b, 0x1, 0x8}, {0x1000, 0x1ff, 0x8, 0x100, 0x81, 0x3}, {0xf, 0x6, 0xffff, 0x4, 0x2, 0x288}, {0x1, 0x4, 0x6, 0x7, 0x0, 0x3}, {0x9, 0x5, 0x1, 0x5, 0x8, 0xcd58}, {0x2, 0x1f2, 0x35b61559, 0x42f, 0x653, 0x1000}, {0xd, 0x8, 0xffff, 0x2, 0x10001, 0x2}, {0xf37, 0x1, 0x7, 0x5, 0x3ff, 0x6}, {0x2, 0x0, 0x2, 0xfffffe01, 0x100, 0x4}, {0x6, 0xc, 0x9, 0x2, 0x4, 0x9}, {0x3, 0x4, 0x4, 0x7, 0x3ff000, 0xffffff7f}, {0x0, 0x7fffffff, 0x0, 0x0, 0xd7, 0xf}, {0x7, 0x1fffc000, 0x7, 0x3ff, 0x7, 0x9}, {0x6, 0x0, 0x1, 0x463e9ebf, 0x10001, 0x4}, {0x725e, 0x4, 0x4, 0x1000, 0x3}, {0x96, 0x10000, 0x2, 0x7, 0xc, 0xc}, {0x8, 0x792e, 0xff, 0x8, 0x27, 0x4}, {0x87, 0x8, 0xa735, 0x0, 0x80000001, 0x1000}, {0xfffffff9, 0x4, 0x2, 0x2, 0x1, 0x245}, {0x5, 0x8, 0xfffff0d9, 0x8, 0x5, 0x10000}, {0x9, 0xfffffffe, 0x1, 0x1, 0x4, 0x6}, {0x2, 0x7, 0xc, 0x4, 0x22c, 0xffff}, {0x2, 0xb8e2, 0x7, 0x0, 0xd52, 0x3ff}, {0xa3, 0x9, 0xe, 0x6, 0x3, 0x8}, {0x39, 0x7b7f600, 0xf2b, 0x2, 0x7, 0x6}, {0x3, 0x5, 0x4, 0xd, 0xc, 0x6}, {0x8, 0x6, 0x6, 0x9, 0x6bf5, 0x101}, {0x4, 0x7, 0x5, 0x5, 0x2}, {0x192, 0xffffff80, 0x1, 0x7, 0x7, 0xfffffff8}, {0x5, 0x2, 0x3, 0x5, 0xfffffff3, 0x6}, {0x5, 0xc0200, 0x8000, 0x8a, 0x3, 0x2}, {0xffffffff, 0x100, 0x8, 0x9, 0x3, 0x7}, {0xca35, 0xffffff7f, 0x8, 0x80, 0xd}, {0x3, 0x101, 0xe, 0x2, 0x8, 0x10000}, {0x2, 0x1, 0x3, 0x9, 0x8, 0x5}, {0x0, 0x4, 0x6, 0x100, 0x9c7c, 0x1}, {0x4, 0x2, 0x7, 0x8, 0x3, 0x7dc5}, {0x800, 0x10000, 0x5, 0x3, 0x9, 0xb30}, {0x9, 0xfb8, 0x0, 0x2, 0x5, 0x200}, {0x3ff, 0x5f57, 0x0, 0x9, 0x3}, {0x3, 0x9, 0x3, 0x5, 0x40, 0x2}, {0x10000, 0x7, 0x7, 0xfffffffd, 0x4, 0x3c}, {0x4, 0x8, 0xbb3, 0x800, 0x5}, {0x7, 0x2, 0x6, 0x5, 0x6, 0xf2}, {0xa7, 0x10, 0x0, 0x2, 0x8000, 0x6}, {0x6, 0x3, 0xf, 0x7fff, 0x9775, 0x8000}, {0x2, 0x9, 0xee, 0xeeb1, 0x57a, 0xdbbb}, {0x0, 0x1, 0x6, 0xe, 0x8b64879, 0x7}, {0x7, 0xd, 0x14, 0x400, 0x28, 0x1}, {0x10001, 0x9, 0x9, 0xffff, 0x1ff, 0x4}, {0x9, 0x3, 0x5, 0x3, 0x4, 0x4}, {0x7, 0x5, 0x7, 0x2, 0x1, 0x3ff}, {0x27, 0x8, 0x2, 0x7, 0x182, 0x8000}, {0x5, 0x3, 0x8, 0x4, 0x5, 0xca}, {0x4, 0x10000, 0x9, 0x400, 0x45, 0xbf6c}, {0x1, 0xfffffff9, 0x12, 0x4, 0x3, 0xfffffffc}, {0x5, 0x7, 0x1, 0xfffffffc, 0x0, 0x7fff}, {0x1, 0x0, 0x9, 0x10000, 0x1a8f, 0xe}, {0x4, 0x2dc3, 0x3, 0x7587, 0x8, 0x10001}, {0x0, 0x2, 0xfb, 0x0, 0x11, 0x4}, {0x7fff, 0x2, 0x755e, 0x4, 0xb1b, 0xc3ad}, {0x0, 0x7, 0x58b3, 0x7, 0x2, 0x2}, {0x5, 0x90, 0x1, 0x0, 0x2, 0x7}, {0x64d0d02a, 0x200, 0xe, 0x6, 0xd, 0x9}, {0x0, 0x0, 0x3, 0x7, 0x7f, 0xffffffff}, {0x23, 0x6, 0x28000000, 0x400, 0x1, 0x1000}, {0x8, 0xff, 0x1803b68d, 0x0, 0x38, 0x5}, {0x7ff, 0x2, 0x2, 0x5, 0x0, 0x81}, {0x9f1c, 0x5, 0x8, 0xf9b064c9, 0xbb, 0x9}, {0xe43, 0x50, 0x1, 0xd, 0xfffffffb, 0x6}, {0x6, 0x3, 0x7, 0x1, 0xfffffff8, 0x1}, {0x7fffffff, 0x7, 0x5, 0x4, 0x8, 0x2}, {0x9, 0x6, 0x9, 0x2, 0x8, 0x6}, {0xff, 0x8, 0x2, 0x4b41, 0xffff}, {0x4, 0x4, 0x1f, 0x7, 0x1, 0x6}, {0x800, 0xffffffff, 0x9, 0x928, 0x3}, {0x8, 0x5, 0x8b, 0x7, 0xd70e, 0x48}, {0x80000000, 0x7, 0x2, 0x2, 0x4, 0xf752}, {0xfffffffb, 0x1, 0xef, 0x8, 0x2, 0x8000}, {0x5, 0x85, 0x5, 0x25, 0xa6, 0x85}, {0x0, 0x8001, 0xbe, 0x4, 0x5, 0x80000000}, {0xfff, 0x8, 0x1, 0xe0, 0x1ff, 0x3}, {0x3, 0x10, 0x8, 0x7fffffff, 0x4000000, 0x7}, {0xa, 0x0, 0x6, 0x34165f26, 0x7fff, 0xb}, {0x100, 0x7, 0xc8, 0x7, 0x9, 0x7b}, {0xfffffff7, 0x3, 0x2, 0x7, 0xa3, 0xae52}, {0x9, 0xb, 0x77f, 0x8, 0x1, 0x8}, {0x5635, 0xff, 0x7, 0x9, 0xc7a, 0x2}, {0xc764, 0x1ff, 0xb, 0x2, 0x8}, {0xffffffff, 0x30d000, 0x6, 0x7, 0x5, 0xcc7}, {0x2, 0x10, 0x1ff, 0x8fdc, 0xfffff627, 0x5}, {0x81, 0xff, 0x400, 0x2, 0x69b7, 0x1}, {0x7fff, 0x7b2f, 0x200, 0x2, 0x5}, {0x2, 0x74a, 0x6, 0x8, 0x9, 0x3}, {0xe, 0x7f, 0xc5b, 0x200, 0x9, 0x3}, {0x0, 0x2, 0xfff, 0x5, 0xae, 0x81}, {0xdc09, 0x8001, 0x0, 0x6, 0x5}, {0x9e, 0x1, 0x9, 0x6, 0x2, 0x1}, {0x7, 0x6, 0x3, 0x0, 0x0, 0x81}, {0xe5, 0x200, 0xfffff2e0, 0x3, 0x6, 0x1}, {0x5, 0x1, 0x5, 0x0, 0x7dd, 0xffffffff}, {0x1800, 0x6, 0x4, 0x101, 0x6, 0xb5e}, {0xd6d, 0x4, 0x3, 0x9, 0x5, 0x9591}, {0x3ff, 0x4, 0x7f, 0x91dc, 0x8, 0x1}, {0x1, 0x1, 0x10000, 0xd8, 0x5, 0x10001}, {0x10001, 0xfffffff9, 0x4e, 0xf0, 0x9, 0x6}, {0x0, 0x2, 0x0, 0x5, 0x2, 0xff}, {0x1, 0x2, 0x0, 0x4, 0xfffffff9, 0x1}], [{0x3}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x6, 0x1}, {0x2}, {0x1, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x5}, {0x1}, {0x5}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x4}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x2}, {0x5, 0xd1c7214e817f4613}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x4}, {}, {0x4, 0x2}, {0x2, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x1}, {}, {0x5, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {}, {0x5, 0x1}, {0x3, 0x2}, {0x5}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {0x3}, {0x2}, {}, {}, {0x2, 0x1}, {0x1}, {}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x7}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x7}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x2, 0x1}, {0x4}, {0x3}, {0x5}, {0x1, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0xa86d57efdf4b1688}, {0x5}, {0x0, 0x1}, {0x5}, {0x2}, {0x0, 0x1}, {0x2}]}}]}, {0x20, 0x6, "4838bddf2652654924ea5317aadd08c327dcc5b063ea1ca43315e6cf"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0xfe8}, 0x1, 0x0, 0x0, 0x2400c845}, 0x4048800) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) sendfile(r2, r2, 0x0, 0x40008) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x80020) dup(r3) syz_io_uring_setup(0x1191, &(0x7f00000000c0)={0x0, 0xbc08, 0x0, 0xffffffff, 0x25e}, &(0x7f00000003c0), &(0x7f00000001c0)) r4 = syz_usb_connect(0x5, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x103a, 0x1000, 0x103a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000240)="cc3a4ac0d0bb", 0x6}], 0x1) 3.801454074s ago: executing program 0 (id=5247): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x4000, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002040)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000a00)=""/178, 0xb2}], 0x1}, 0x2}], 0x1, 0x40000022, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4089, 0xff9}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {0x0}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 3.675907156s ago: executing program 0 (id=5248): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x1, r2}, 0x10) 3.47911353s ago: executing program 0 (id=5249): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6}]}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000280)=ANY=[@ANYBLOB="0380c2000002bbbbbbbbbbbb88a8080081000a000800450000300000000000019078ac1e0001ac1414aa030490781200183f2500000000680000000100007f000001640101e1e245e020ead587b8b800000000000000"], 0x0) 3.311560516s ago: executing program 0 (id=5250): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000080), 0x4a) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000000c0)=0x9, 0x4) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r2) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) rmdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x0, 0x804) r4 = syz_open_procfs(0x0, &(0x7f0000000480)='net/ip6_mr_vif\x00') read$rfkill(r4, &(0x7f0000000040), 0x8) preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000340)=""/187, 0xbb}], 0x1, 0x33, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) close(0xffffffffffffffff) syz_80211_join_ibss(0x0, 0x0, 0x0, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, 0x0, 0x20000000) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 3.140267714s ago: executing program 4 (id=5251): listen(0xffffffffffffffff, 0x90004) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0x78) accept4$tipc(r0, &(0x7f0000000080), 0x0, 0x180000) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB], 0x16) 2.919048736s ago: executing program 4 (id=5252): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f00000000c0)=0xfffffff7, 0x4) sendmmsg$inet6(r0, &(0x7f0000001700)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0xff11, @local, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast1={0xff, 0x11}}}}], 0x28, 0x7ffffff7}}], 0x1, 0x4040) 2.763958306s ago: executing program 4 (id=5253): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x2}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, 0x0, &(0x7f0000000480)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4001}, 0x24040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=@newqdisc={0x64, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0xffff}, {0xffff, 0xfff2}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x34, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xbc}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xc000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x81}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x4}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) write$vga_arbiter(r4, &(0x7f0000000100)=@other={'lock', ' ', 'mem'}, 0x9) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x5}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r10 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r10, 0x40046109, &(0x7f0000000040)=0x12) r11 = syz_open_dev$cec(&(0x7f0000000200), 0x0, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r11, 0xc05c6104, &(0x7f0000000040)={'\x00', 0xfffd, 0x5, 0x2, 0x0, 0x9, "00000000020000000000002100", "00004702", "0300", "97ad3700", ["fdff02d5c0380900", "b0af22b85f6c12180bff00", "0000efffffffffffbfff00"]}) setsockopt$inet_mreq(r9, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @dev={0xac, 0x14, 0x14, 0x24}}, 0x8) close_range(r8, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) r12 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r12, &(0x7f0000000140), 0x4924b68, 0x0) socket$netlink(0x10, 0x3, 0x7) r13 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r13, r13, 0x0, 0x200000) 2.54853164s ago: executing program 0 (id=5254): r0 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000480)={0x5, {{0xa, 0x4e23, 0x3, @mcast1, 0x10000000}}}, 0x88) r1 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f0000000040)={0x8098f905, 0x0, "6005588a3f9f90ac060100050000009a9f7e1db9c90600008040f722e62200", 0x1, 0xfff}) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000003c0)={0x7, {{0xa, 0x0, 0x1, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x4, {{0xa, 0x4e24, 0x3, @mcast1, 0x5}}, {{0xa, 0x4e21, 0x8b5f, @private1={0xfc, 0x1, '\x00', 0x1}, 0xe57}}}, 0x108) getsockopt$inet6_buf(r0, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="05000000", @ANYBLOB="3d000e0080000000ffffffffffff080211000000ffffffffffff0000feffffffffffffff070001000406f0027f0006a7000c"], 0x70}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001080)=ANY=[@ANYBLOB="1c0400001a00110100000000fddbdf2564010100000000000000000000000000e0000002000000000000000000000000ffff0000000000000a00800002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000000000000000000000000000000000000000000000000000000008002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004e09000000000000070000000000000000000000000000000000040001000000e80a000000000000000000000a000200700000000000000008001f00040000002400090001000000000000000400000000000000fbffffffffffffff09540000000000006d0001"], 0x41c}}, 0x4000084) r3 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9", 0x5, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = dup(r5) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x3, @empty, 0x3}], 0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0xdb, @empty}}, 0xffb, 0x203, 0xffff18b6, 0x6, 0x330, 0x80000001, 0xdb}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x6, 0x6}, 0x90) sendmsg$inet6(r6, &(0x7f0000000540)={&(0x7f0000000000)={0xa, 0x4e24, 0x8004, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7fff}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000040)="f0", 0x1}], 0x1}, 0x40054) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e24, @loopback}}, 0xabb8, 0x67, 0xa4f, 0xc4, 0x4e, 0xffffff85, 0xa9}, 0x9c) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20042, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = dup(r8) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x2, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) r11 = getpid() syz_pidfd_open(r11, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) 2.528504179s ago: executing program 4 (id=5255): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000100)={'veth1_to_team\x00', 0x9452}) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) r1 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980)="475a251bdb1e4c", 0x7, 0xfffffffffffffffb) keyctl$update(0x2, r1, &(0x7f0000000000)="11868a0fceae284c0000000100000010", 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000014000200776730000000000000000000000000004c0008804800008008000300020000001400040002404e24ac1414aa00000000000000000400098024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b"], 0x74}, 0x1, 0x0, 0x0, 0x24000855}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000080e372208c106801b284010203110902240001000010000904020002f8fd00000905060200020d0006090582020002"], 0x0) syz_usb_control_io$cdc_ncm(r4, &(0x7f0000002640)={0x14, 0x0, &(0x7f0000002600)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f0000000140)="6d527cd53870164a3a0d4b64fb0d7bebad2dce076e7768215970e33adf15173c9e665cff10727f6273ef2aace367c13b8e834788d7da2d60077ebc24a796b221a2f39fd294dc01861206b499138d02ebf3cfc3b11f0e18858568476bac483df9c4d0a61da2d2f9b7c4cb601c0141f209fc9e06d9457920a9a749a23ccd52eb91db50189627774719cf91bd6e63a2b8a3b657c0e438ffc3e275b03ef0f384a0c1f20143b7b87f2e34729b000000805e0ad338423d4200f349c545516c46bb9f104a3816b12950faa20fab5827bc62a8d4cc12c4c8954308a933d63a", 0xdb) sendmsg$nl_route(r6, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=@getrule={0x14, 0x22, 0x400, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x4048094) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) unshare(0x26020480) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 2.247183939s ago: executing program 0 (id=5256): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000480)=[@nested_amd_vmload={0x182, 0x18, 0x3}, @uexit={0x0, 0x18, 0x8001}, @wr_drn={0x68, 0x20, {0x3, 0xc4}}, @nested_amd_invlpga={0x17d, 0x20, {0x0, 0xdaae}}, @out_dx={0x6a, 0x28, {0x1581, 0x0, 0x1}}, @code={0xa, 0x56, {"f20f108100680000470f0966b808018ed80f2043410f01d166ba400066ed66baa100b000eec744240051000000c74424020d000000ff1c242ef30fc7b680ffffff410f01f8"}}, @nested_create_vm={0x12d, 0x18, 0x8}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @save_area=0x457, 0x10, 0xffff, 0x2}}, @uexit={0x0, 0x18, 0x2}, @enable_nested={0x12c, 0x18}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0x56, 0x2, 0x4, 0x2}}], 0x1a6}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x8}, @exit], &(0x7f00000000c0)='GPL\x00', 0x9}, 0x94) r3 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800007, 0x11, r3, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x803, 0x0) unshare(0x62040200) syz_usb_connect(0x2, 0x56, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000084a48e08d112f74247aa000000010902"], 0x0) socket$inet(0xa, 0x801, 0x84) 1.989723644s ago: executing program 2 (id=5257): syz_open_dev$sndpcmc(&(0x7f0000000200), 0x3, 0x90000) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket(0x1e, 0x3, 0x2) r2 = socket$packet(0x11, 0x2, 0x300) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x21) (async) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x21) eventfd(0x5ef) ioctl$KVM_IOEVENTFD(r4, 0x40a0ae49, &(0x7f0000000080)={0x3, 0x4000}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r4, 0x4020aed2, &(0x7f00000000c0)={0xffff1000, 0x301000, 0x8}) (async) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r4, 0x4020aed2, &(0x7f00000000c0)={0xffff1000, 0x301000, 0x8}) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r4, 0x4020aed2, &(0x7f0000000140)={0xffff0000, 0x106000}) (async) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r4, 0x4020aed2, &(0x7f0000000140)={0xffff0000, 0x106000}) socket$key(0xf, 0x3, 0x2) (async) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, 0x0, 0x0) (async) sendmsg$key(r5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x60842, 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x60842, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000100)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b87a000f00d80f300f300fc79d53bf0000c4b9e16dc30101220f01c3", 0x64}], 0x1, 0x14, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000100)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b87a000f00d80f300f300fc79d53bf0000c4b9e16dc30101220f01c3", 0x64}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_GET_LAPIC(r8, 0x8400ae8e, &(0x7f0000000400)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) (async) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=0000000000000000004000', @ANYRESDEC=0x0, @ANYBLOB="2c4c80d00d84b50767726f75705f69643d", @ANYRESDEC=0x0, @ANYBLOB]) 1.55233155s ago: executing program 3 (id=5258): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c000180060200a9903900001000"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0xc000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff0000000002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f0000001d40)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0x1ff, @private2={0xfc, 0x2, '\x00', 0x8}, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000240)="00998fefaa22bcee45b81887b66f53f61bbf4031f41a092eac9dcfaf3556b77c7384d70e5c606a4bb1ecc60ad3d23bd3d331c4131084ffe5c968f3f01d94c75dc87f36cb571079a3ee7da13d00f248cc995a9a3d030ce8905d40e7c57d87031bebbd7a1e8e54fc66fc05713fd9ad9e459638404bc189c1659528e1f2ec686810a2a23f74947a54f876b662360e573b5b476dc329f8bf038e2769a5e1882e262a3f56ae4ef60828316e52f4", 0xab}], 0x1}}, {{&(0x7f0000000540)={0xa, 0x4e29, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}, 0x1c, &(0x7f0000001640)}}, {{&(0x7f0000000200)={0xa, 0x4e22, 0x0, @private2, 0x4}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000580)="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", 0x1000}, {&(0x7f00000003c0)="f1c3efde7bb4dcf301807863431fc5e891214644ccf53d725fadd2f74b68c5508d6203f5f7eec134fa1c55bd9f7106fb6274967069e51f3aceb71f9c9bbc6f67e18a02e078d6335e9231e94db73f584ee428fd349c5e9d5873c387b357c8410bfa7e36d79ca1bee77548dd5d6c80267d36", 0x71}, {&(0x7f0000000340)="fe37de2100ab946124512fe02bbb1b13f0cfeb0794c98936c47d36ddd60cc1216984", 0x22}, {&(0x7f0000000440)="5bcd669682ab871f3662f593defd0fc0f096e489f1d5212287040b2418b51dde8fd2dd2ea8769ce85e0713ace7f09a481f3004", 0x33}], 0x4, &(0x7f0000001580)=[@hopopts={{0x120, 0x29, 0x36, {0x87, 0x20, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x30, {0x1, 0xa, 0x82, 0x8, [0x80000001, 0x2, 0x5, 0x4, 0x3]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x81, 0xae, "ed6e5e6d679daa82e5ad531f06266928c816b6c626ea18c40c224f7f7d3c17758ad5f75c6b1288c2202a6fc2c1a68284ea54e04ad849cb771ab0be21bfdce81fdbf16ba0b8664193638fb2914ca16fafb82cdbdd95a7bc0bd8fb2146e7d2fa7df83bc7d0c74f8a82df81a5c187908b479a135764aaeea52000479e21182ed6198e080396a82c83d646e64bd527254cb35eb15a53283c7272c6ef81e3898f66ad6f57e09baed29ddf78ab7f1c3bf9"}, @jumbo={0xc2, 0x4, 0x9}, @calipso={0x7, 0x10, {0x2, 0x2, 0x35, 0x6, [0xffff]}}]}}}, @hopopts={{0x30, 0x29, 0x36, {0x84, 0x2, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x2}}, @hopopts_2292={{0x168, 0x29, 0x36, {0x3b, 0x29, '\x00', [@jumbo={0xc2, 0x4, 0xa}, @calipso={0x7, 0x40, {0x1, 0xe, 0x3, 0x7, [0x9, 0x100000000, 0x3e, 0x2, 0xfffffffffffffffa, 0xffffffffffffff81, 0x1]}}, @generic={0x0, 0xf6, "2a3f21cacc6da9b6691398760b4ce5271fff64ef71f2783944f988f9491dac911cea60807bff527392c6c30464a2681f59119fe1491b6d423595e40716d56c675840d9731faa8ae52e6b85cd199150974b0b5b3ebdc8b510bf7dfbd66260f99787a90ea9c7cd8f0edfefb8673abcd59e3dfb190be30f7e5fe26977cf988d677e9b9786af8eef86dacae58976353b52d172a8ee8eb7384f908554c188dd88bc1fe1fae748265c5a01a6720ac7a66840ac48661ac63f8a0b86b407e15e30ba39e8882a0368f5784fc37c569f6798083b76ee016a2b61e2d972f54d8aa7250a94c914af122c498fb2514b6ba687d457289e91af07c16178"}, @pad1, @pad1, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @dstopts_2292={{0x110, 0x29, 0x4, {0x84, 0x1f, '\x00', [@pad1, @generic={0xff, 0xc3, "545c2d00d3f99ccd4b2162c21dda62a7716e283489b90d708b56f6ac52d84cef28c7123ddbb5c721f879cedc9aea45fed7ef0506160cc86f0c48e6c6ef28e3e9030d3c3e942f6ef6a09a09c24ff151ba054b56a8c6222102b7aacf517830eaedbd9808e27d82db8a59821199062990adda2617a5f4792f66bac34a5012c3711c091c3afc1636c873634535ab92b2c607cf5e0735cfc9ad70bf5507c3d26f06f982106e1403baf4524bf315017b02ed102ce0d53e5a3b5169b16e6b0ee1cc9a52b78556"}, @hao={0xc9, 0x10, @mcast1}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @loopback}}, @pad1, @ra={0x5, 0x2, 0xfffa}]}}}, @rthdr={{0x98, 0x29, 0x39, {0x32, 0x10, 0x1, 0x0, 0x0, [@dev={0xfe, 0x80, '\x00', 0x3e}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, @empty, @dev={0xfe, 0x80, '\x00', 0x24}, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x10001}}], 0x490}}, {{&(0x7f00000004c0)={0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, &(0x7f0000000500), 0x0, &(0x7f0000001c00)=[@hopopts_2292={{0x38, 0x29, 0x36, {0x73, 0x3, '\x00', [@hao={0xc9, 0x10, @local}, @jumbo={0xc2, 0x4, 0x7}, @enc_lim={0x4, 0x1, 0x5}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x87, 0x8, 0x1, 0x3, 0x0, [@mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00']}}}, @flowinfo={{0x14, 0x29, 0xb, 0x8}}, @dontfrag={{0x14, 0x29, 0x3e, 0xa00000}}, @dstopts={{0x20, 0x29, 0x37, {0xbb, 0x0, '\x00', [@ra={0x5, 0x2, 0x4ed7}]}}}, @dstopts={{0x28, 0x29, 0x37, {0x32, 0x1, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x9}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x101}}], 0x120}}], 0x4, 0x4040010) shutdown(r2, 0x1) 1.284563058s ago: executing program 3 (id=5259): socket$inet_sctp(0x2, 0x5, 0x84) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x2, 0x110, 0xffffffffffffffff, 0x87f64000) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xfe3f) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @host, 0x0, 0x1000000, 0x5e, 0x200000000000, 0x100000000000006}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtaction={0xfe8, 0x1c, 0x1, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x1300}, [{0x4}, {0xfd0, 0x1, [@m_pedit={0xfcc, 0x4, 0x0, 0x0, {{0xa}, {0xf84, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4c, 0x5, 0x0, 0x1, [{0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_KEYS_EX={0x84, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}]}, @TCA_PEDIT_PARMS_EX={0xeb0, 0x4, {{{0x4, 0x2, 0x0, 0x0, 0x9}, 0x6, 0x9, [{0x7, 0xff, 0x2, 0x80000000, 0x1, 0x6}, {0x6, 0x2b, 0xa, 0x7, 0x1, 0x4}, {0x6, 0xfcf1, 0x4, 0x4, 0x8, 0x1}, {0x7, 0x200, 0x2, 0xfffff801, 0xd44, 0x5}, {0x7, 0xb35d, 0xe0, 0x1ff, 0x0, 0x5}, {0x9, 0x0, 0x9, 0x10000, 0x0, 0x7}]}, [{0x6, 0x401, 0x8001, 0x2, 0x9, 0x8}, {0x5, 0xffff, 0x1, 0x6, 0x0, 0x1ff}, {0x1, 0x7, 0x4, 0x822, 0x9, 0x5}, {0xa, 0x16, 0x5, 0x8, 0x81, 0x9}, {0x1, 0x3f, 0x3, 0x0, 0x7f, 0x8d}, {0x8, 0x3d, 0xabb7, 0x7f, 0x29c3, 0x7ff}, {0x3, 0xae4, 0xac, 0x3ff, 0x5, 0x2}, {0x2, 0x5, 0x0, 0x2, 0x3, 0x9}, {0x7, 0xffffffcf, 0x0, 0x8, 0x7, 0xfffffffc}, {0x0, 0x7, 0xff, 0x8, 0xd, 0x9}, {0xfffffffe, 0x7f, 0x9, 0x0, 0x3, 0xdc}, {0x401, 0x3, 0x78d, 0x3ff, 0xda5a, 0x4}, {0x1, 0x10001, 0xf, 0x0, 0x67, 0x4}, {0x83, 0xc, 0x7, 0x6, 0x47, 0xfffffff7}, {0x4, 0x2, 0x7fffffff, 0x8001, 0x8001, 0xe}, {0x6, 0x6, 0x81, 0x1ff, 0x400000, 0x100000}, {0x81, 0x2, 0x9, 0x5, 0x8, 0x100}, {0x3, 0x8, 0x4, 0x2, 0x3, 0x9}, {0x80000000, 0x9, 0x3, 0x8, 0x33d3, 0x1}, {0x6, 0x7, 0x7, 0x73ad08b1, 0xfffffff1, 0x5}, {0x1000, 0x9c1b, 0x0, 0x2b, 0x1, 0x8}, {0x1000, 0x1ff, 0x8, 0x100, 0x81, 0x3}, {0xf, 0x6, 0xffff, 0x4, 0x2, 0x288}, {0x1, 0x4, 0x6, 0x7, 0x0, 0x3}, {0x9, 0x5, 0x1, 0x5, 0x8, 0xcd58}, {0x2, 0x1f2, 0x35b61559, 0x42f, 0x653, 0x1000}, {0xd, 0x8, 0xffff, 0x2, 0x10001, 0x2}, {0xf37, 0x1, 0x7, 0x5, 0x3ff, 0x6}, {0x2, 0x0, 0x2, 0xfffffe01, 0x100, 0x4}, {0x6, 0xc, 0x9, 0x2, 0x4, 0x9}, {0x3, 0x4, 0x4, 0x7, 0x3ff000, 0xffffff7f}, {0x0, 0x7fffffff, 0x0, 0x0, 0xd7, 0xf}, {0x7, 0x1fffc000, 0x7, 0x3ff, 0x7, 0x9}, {0x6, 0x0, 0x1, 0x463e9ebf, 0x10001, 0x4}, {0x725e, 0x4, 0x4, 0x1000, 0x3}, {0x96, 0x10000, 0x2, 0x7, 0xc, 0xc}, {0x8, 0x792e, 0xff, 0x8, 0x27, 0x4}, {0x87, 0x8, 0xa735, 0x0, 0x80000001, 0x1000}, {0xfffffff9, 0x4, 0x2, 0x2, 0x1, 0x245}, {0x5, 0x8, 0xfffff0d9, 0x8, 0x5, 0x10000}, {0x9, 0xfffffffe, 0x1, 0x1, 0x4, 0x6}, {0x2, 0x7, 0xc, 0x4, 0x22c, 0xffff}, {0x2, 0xb8e2, 0x7, 0x0, 0xd52, 0x3ff}, {0xa3, 0x9, 0xe, 0x6, 0x3, 0x8}, {0x39, 0x7b7f600, 0xf2b, 0x2, 0x7, 0x6}, {0x3, 0x5, 0x4, 0xd, 0xc, 0x6}, {0x8, 0x6, 0x6, 0x9, 0x6bf5, 0x101}, {0x4, 0x7, 0x5, 0x5, 0x2}, {0x192, 0xffffff80, 0x1, 0x7, 0x7, 0xfffffff8}, {0x5, 0x2, 0x3, 0x5, 0xfffffff3, 0x6}, {0x5, 0xc0200, 0x8000, 0x8a, 0x3, 0x2}, {0xffffffff, 0x100, 0x8, 0x9, 0x3, 0x7}, {0xca35, 0xffffff7f, 0x8, 0x80, 0xd}, {0x3, 0x101, 0xe, 0x2, 0x8, 0x10000}, {0x2, 0x1, 0x3, 0x9, 0x8, 0x5}, {0x0, 0x4, 0x6, 0x100, 0x9c7c, 0x1}, {0x4, 0x2, 0x7, 0x8, 0x3, 0x7dc5}, {0x800, 0x10000, 0x5, 0x3, 0x9, 0xb30}, {0x9, 0xfb8, 0x0, 0x2, 0x5, 0x200}, {0x3ff, 0x5f57, 0x0, 0x9, 0x3}, {0x3, 0x9, 0x3, 0x5, 0x40, 0x2}, {0x10000, 0x7, 0x7, 0xfffffffd, 0x4, 0x3c}, {0x4, 0x8, 0xbb3, 0x800, 0x5}, {0x7, 0x2, 0x6, 0x5, 0x6, 0xf2}, {0xa7, 0x10, 0x0, 0x2, 0x8000, 0x6}, {0x6, 0x3, 0xf, 0x7fff, 0x9775, 0x8000}, {0x2, 0x9, 0xee, 0xeeb1, 0x57a, 0xdbbb}, {0x0, 0x1, 0x6, 0xe, 0x8b64879, 0x7}, {0x7, 0xd, 0x14, 0x400, 0x28, 0x1}, {0x10001, 0x9, 0x9, 0xffff, 0x1ff, 0x4}, {0x9, 0x3, 0x5, 0x3, 0x4, 0x4}, {0x7, 0x5, 0x7, 0x2, 0x1, 0x3ff}, {0x27, 0x8, 0x2, 0x7, 0x182, 0x8000}, {0x5, 0x3, 0x8, 0x4, 0x5, 0xca}, {0x4, 0x10000, 0x9, 0x400, 0x45, 0xbf6c}, {0x1, 0xfffffff9, 0x12, 0x4, 0x3, 0xfffffffc}, {0x5, 0x7, 0x1, 0xfffffffc, 0x0, 0x7fff}, {0x1, 0x0, 0x9, 0x10000, 0x1a8f, 0xe}, {0x4, 0x2dc3, 0x3, 0x7587, 0x8, 0x10001}, {0x0, 0x2, 0xfb, 0x0, 0x11, 0x4}, {0x7fff, 0x2, 0x755e, 0x4, 0xb1b, 0xc3ad}, {0x0, 0x7, 0x58b3, 0x7, 0x2, 0x2}, {0x5, 0x90, 0x1, 0x0, 0x2, 0x7}, {0x64d0d02a, 0x200, 0xe, 0x6, 0xd, 0x9}, {0x0, 0x0, 0x3, 0x7, 0x7f, 0xffffffff}, {0x23, 0x6, 0x28000000, 0x400, 0x1, 0x1000}, {0x8, 0xff, 0x1803b68d, 0x0, 0x38, 0x5}, {0x7ff, 0x2, 0x2, 0x5, 0x0, 0x81}, {0x9f1c, 0x5, 0x8, 0xf9b064c9, 0xbb, 0x9}, {0xe43, 0x50, 0x1, 0xd, 0xfffffffb, 0x6}, {0x6, 0x3, 0x7, 0x1, 0xfffffff8, 0x1}, {0x7fffffff, 0x7, 0x5, 0x4, 0x8, 0x2}, {0x9, 0x6, 0x9, 0x2, 0x8, 0x6}, {0xff, 0x8, 0x2, 0x4b41, 0xffff}, {0x4, 0x4, 0x1f, 0x7, 0x1, 0x6}, {0x800, 0xffffffff, 0x9, 0x928, 0x3}, {0x8, 0x5, 0x8b, 0x7, 0xd70e, 0x48}, {0x80000000, 0x7, 0x2, 0x2, 0x4, 0xf752}, {0xfffffffb, 0x1, 0xef, 0x8, 0x2, 0x8000}, {0x5, 0x85, 0x5, 0x25, 0xa6, 0x85}, {0x0, 0x8001, 0xbe, 0x4, 0x5, 0x80000000}, {0xfff, 0x8, 0x1, 0xe0, 0x1ff, 0x3}, {0x3, 0x10, 0x8, 0x7fffffff, 0x4000000, 0x7}, {0xa, 0x0, 0x6, 0x34165f26, 0x7fff, 0xb}, {0x100, 0x7, 0xc8, 0x7, 0x9, 0x7b}, {0xfffffff7, 0x3, 0x2, 0x7, 0xa3, 0xae52}, {0x9, 0xb, 0x77f, 0x8, 0x1, 0x8}, {0x5635, 0xff, 0x7, 0x9, 0xc7a, 0x2}, {0xc764, 0x1ff, 0xb, 0x2, 0x8}, {0xffffffff, 0x30d000, 0x6, 0x7, 0x5, 0xcc7}, {0x2, 0x10, 0x1ff, 0x8fdc, 0xfffff627, 0x5}, {0x81, 0xff, 0x400, 0x2, 0x69b7, 0x1}, {0x7fff, 0x7b2f, 0x200, 0x2, 0x5}, {0x2, 0x74a, 0x6, 0x8, 0x9, 0x3}, {0xe, 0x7f, 0xc5b, 0x200, 0x9, 0x3}, {0x0, 0x2, 0xfff, 0x5, 0xae, 0x81}, {0xdc09, 0x8001, 0x0, 0x6, 0x5}, {0x9e, 0x1, 0x9, 0x6, 0x2, 0x1}, {0x7, 0x6, 0x3, 0x0, 0x0, 0x81}, {0xe5, 0x200, 0xfffff2e0, 0x3, 0x6, 0x1}, {0x5, 0x1, 0x5, 0x0, 0x7dd, 0xffffffff}, {0x1800, 0x6, 0x4, 0x101, 0x6, 0xb5e}, {0xd6d, 0x4, 0x3, 0x9, 0x5, 0x9591}, {0x3ff, 0x4, 0x7f, 0x91dc, 0x8, 0x1}, {0x1, 0x1, 0x10000, 0xd8, 0x5, 0x10001}, {0x10001, 0xfffffff9, 0x4e, 0xf0, 0x9, 0x6}, {0x0, 0x2, 0x0, 0x5, 0x2, 0xff}, {0x1, 0x2, 0x0, 0x4, 0xfffffff9, 0x1}], [{0x3}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x6, 0x1}, {0x2}, {0x1, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x5}, {0x1}, {0x5}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x4}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x2}, {0x5, 0xd1c7214e817f4613}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x4}, {}, {0x4, 0x2}, {0x2, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x1}, {}, {0x5, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {}, {0x5, 0x1}, {0x3, 0x2}, {0x5}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {0x3}, {0x2}, {}, {}, {0x2, 0x1}, {0x1}, {}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x7}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x7}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x2, 0x1}, {0x4}, {0x3}, {0x5}, {0x1, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0xa86d57efdf4b1688}, {0x5}, {0x0, 0x1}, {0x5}, {0x2}, {0x0, 0x1}, {0x2}]}}]}, {0x20, 0x6, "4838bddf2652654924ea5317aadd08c327dcc5b063ea1ca43315e6cf"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0xfe8}, 0x1, 0x0, 0x0, 0x2400c845}, 0x4048800) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) sendfile(r2, r2, 0x0, 0x40008) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x80020) dup(r3) syz_io_uring_setup(0x1191, &(0x7f00000000c0)={0x0, 0xbc08, 0x0, 0xffffffff, 0x25e}, &(0x7f00000003c0), &(0x7f00000001c0)) r4 = syz_usb_connect(0x5, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x103a, 0x1000, 0x103a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000240)="cc3a4ac0d0bb", 0x6}], 0x1) 944.032766ms ago: executing program 1 (id=5260): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6}]}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000280)=ANY=[@ANYBLOB="0380c2000002bbbbbbbbbbbb88a8080081000a000800450000300000000000019078ac1e0001ac1414aa030490781200183f2500000000680000000100007f000001640101e1e245e020ead587b8b800000000000000"], 0x0) 837.740357ms ago: executing program 1 (id=5261): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001bc0)=@filter={'filter\x00', 0xe, 0x4, 0x2e0, 0xffffffff, 0x0, 0x98, 0x1b0, 0xffffffff, 0xffffffff, 0x248, 0x248, 0x248, 0xffffffff, 0x4, &(0x7f00000004c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0x1c}, @local, 0x0, 0xffffff00, 'veth0_to_hsr\x00', 'pimreg0\x00', {0xff}, {}, 0x2, 0x2, 0x8}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0xb8, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@icmp={{0x28}, {0xc, "a935"}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x7ff, [0x0, 0x1, 0x2, 0x2, 0x6], 0x1, 0x6}, {0x3, [0x6, 0x1, 0x1, 0x4, 0x4, 0x3], 0x2, 0xf}}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x340) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x122, 0x0) shutdown(0xffffffffffffffff, 0x2) madvise(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x65) add_key$user(&(0x7f0000000000), 0x0, &(0x7f0000000480), 0x0, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000640)=0x8000) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) read(r5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) splice(r3, 0x0, r6, 0x0, 0x8001, 0xd) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f00000001c0)={"b016b8d7", 0x8, 0x1, 0x3, 0x40, 0x9, "aaaf73bed57d496d26c8e922dd9bcd", "ec9efe72", "aabfb18c", "422c2bbc", ["0a7dba05857427b3b7fd3738", "28453758cac6cb4cc99af02a", "db1447a4195af812803678b1", "07c7ded9ddfe1f94a0644946"]}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4048587b, &(0x7f0000001b40)={{r4, &(0x7f0000000040)=')S\x00', 0x121000, &(0x7f0000000100)={@align=0x1, {0x81, 0xd517, 0x2, 0x1}}, 0xffffffff, &(0x7f0000000400)={@_ha_fsid}, &(0x7f0000000440)=0x8000}, 0x8, &(0x7f0000001a40)=[{0x2, 0xc54, &(0x7f0000000480)='/dev/adsp1\x00', &(0x7f00000004c0), 0x0, 0x8}, {0x2, 0x8cc5, &(0x7f0000000500)='+-\x00', &(0x7f0000000540)="be646b93c2d26d3d075b712a4d72368c856e65f9001cf96007d98dc8a3eed96ea5f76b081a44a55c0b322af5d62ec7c9ee56122495", 0x35, 0x8}, {0x3, 0xde, &(0x7f0000000580)=':\x00', &(0x7f0000000680)="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", 0x1000, 0xa}, {0x1, 0x40, &(0x7f00000005c0)='syz_tun\x00', &(0x7f0000000600)="42f7fcceaadbdba654435d9bae7c9554df77300108d4ff4ee8b6ccd88f481984b41dc03155173fe0114520a9f42da10a6757af52725ecb50cfcdad68", 0x3c, 0x8}, {0x2, 0x90fb, &(0x7f0000001680)='\x00', &(0x7f00000016c0)="301d39bea7058159186823d13fe29e184d9f9b015a1f88e59c35f74c7e5c62bef8eb1d17d0ed571d61f70e696f6786ed6d046d7806847e8bac2891d20f4b803ded5dd3fc235c3ecd907d3159af87c2e6b5c2cf5c4f50450d20c3b615a26abf55b04df623be223c18ec321196b7a9a217a957dd478f9dc963353bcb9e60cbc5d94074c419308cea142d8706123384a16053af06860712d0e195e21ff1", 0x9c, 0x10}, {0x1, 0x80000000, &(0x7f0000001780)='0*@\x00', &(0x7f00000017c0)="8bedfc3601e050dcce69ddb3cf95283780ef55d3e1b9c0f3f7124166f5457a9907da15bc9a873195640a863c2abb790b27734d728265e55894d5980ae13b542102e222759cd80935d64cf4b62bf99cadd372435d1ada16d4954de7f2dce6ed38c536a6531cd912b7933cd6c1c9b7f65bf0aa4f1af0424dd16f09c9c1f2e540b86bf646fad30f6af04469bf8195c6e9052cde500f50268b16636102ef02d6035e4ec5772d0bc84f4e5e0fb7039b40ce9ba987a3128403668bef2290394e97b2446fd25bf5fce2da685839ef330c25453a30a1c00b67b18a1f290b8b11d3015376ca530dab7379eb94b00da1da8a9869c93c880ec7fa4f34ec91", 0xf9, 0x20}, {0x3, 0xe14b, &(0x7f00000018c0)='syz_tun\x00', &(0x7f0000001900)="56447a3b92e9a58c632c42552f65420e9c4deb96fa07ae2c05e729eda588aa953ce80c3daa11d39e70b17a0bc4c5cbfeda0f4276f9ddaf87c14f48851d7d4c1ed18dfd51422c4d9372fb714b80d914ddd47a185d69c2cca06edc300b609b0bf9f78cbe92fcea57d83c310363d31f4d0a431cade540111b7ed7b8d95413e3619f1629c251c83bd56a6e47c2895f1ad2917a7b812d8ae4321ce5bb1b5825a74241ecddc5cda7caa96ee7f55338928d4df70b469cfea1", 0xb5, 0x2a}, {0x1, 0x7e, &(0x7f00000019c0)='%-%+\\\x00', &(0x7f0000001a00)="e4f51ac29e40ad0c33fbdebe15f172f20fcef42e1944af44194cdb484c72ff27a9f98d649b24c8d0e17a2f84ee00ab1a32777759ca5c4198c7b0", 0x3a, 0x20}]}) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) 602.919358ms ago: executing program 2 (id=5262): listen(0xffffffffffffffff, 0x90004) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0x78) accept4$tipc(r0, &(0x7f0000000080), 0x0, 0x180000) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB], 0x16) 504.682109ms ago: executing program 2 (id=5263): r0 = socket(0x11, 0xa, 0x5) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @multicast2}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendto$inet(r0, 0x0, 0x5ee, 0x800, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10) (fail_nth: 2) 0s ago: executing program 2 (id=5264): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x34, 0x65, 0x0, 0x2, 0x6, 0x0, @private=0xa010101, @local, {[@timestamp={0x44, 0xc, 0x5, 0x0, 0xf, [0x0, 0x5]}, @ssrr={0x89, 0xb, 0xfd, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x4, 0xf5, 0x3, 0x7}]}}, {{0x2, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000240)=0x2, 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x6, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) io_uring_setup(0x4d42, &(0x7f0000000240)={0x0, 0xca6a, 0x40, 0x0, 0x3}) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x304}, "32f058ec27d46898", "d48286fd02541c95afec379bdb3cc0d5646e20970600000418fe7474dc4c3d7b", '\"\vEX'}, 0x38) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000ac0)=@nat={'nat\x00', 0x62, 0x5, 0x3f0, 0x248, 0xa8, 0xffffffff, 0x248, 0x150, 0x358, 0x358, 0xffffffff, 0x358, 0x358, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8, 0x0, {0x22e}}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x1, @local, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x8, @multicast1, @rand_addr=0x64010101, @gre_key, @icmp_id}}}}, {{@ip={@multicast2, @loopback, 0xffffffff, 0xffffffff, 'veth1_to_bridge\x00', 'veth0_to_bond\x00', {}, {0xff}, 0x6c, 0x2}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x8, 0x1}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x14, @rand_addr=0x64010100, @loopback, @gre_key=0x2, @gre_key=0x7}}}}, {{@ip={@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffffff, 0xffffff00, 'lo\x00', 'wg1\x00', {0xff}, {}, 0xaa, 0x2, 0x169ed6ff8f602177}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@ttl={{0x28}}, @common=@inet=@l2tp={{0x30}, {0x3, 0x2, 0x2, 0x1, 0x1}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x1, @ipv4=@rand_addr=0x64010101, @ipv4=@loopback, @icmp_id=0x65, @gre_key=0x9}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x8) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x38, &(0x7f0000000c00)=[{&(0x7f00000002c0)={0x18, 0x2c, 0x1, 0x0, 0x25dfdbfd, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}, 0x18}], 0x1, 0x0, 0x0, 0xc014}, 0xcc000) kernel console output (not intermixed with test programs): 1-1: Using ep0 maxpacket: 8 [ 1439.914474][ T9] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1439.935245][T19352] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 1439.959567][T19352] usb 1-1: config 0 has no interface number 0 [ 1439.975141][T19352] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1439.998119][T19352] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1440.017652][T19352] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1440.029591][T19352] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1440.313179][T25152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1440.322417][T19352] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1440.365075][T25152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1440.394750][T25152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1440.436740][T19352] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1440.453786][T25152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1440.483277][T19352] usb 1-1: config 0 descriptor?? [ 1440.520420][T19352] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1440.730070][T25142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1440.739115][T25142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1440.945438][ T5867] usb 1-1: USB disconnect, device number 7 [ 1440.957480][ T5867] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 1441.540024][ T9] usb 4-1: Service connection timeout for: 256 [ 1441.546449][ T9] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1441.569299][T25157] xt_socket: unknown flags 0x50 [ 1441.575499][ T9] ath9k_htc: Failed to initialize the device [ 1441.587659][ T9] usb 4-1: ath9k_htc: USB layer deinitialized [ 1441.965765][T25166] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 1442.137885][ T5867] usb 4-1: USB disconnect, device number 5 [ 1442.194138][T25170] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1442.226254][T25170] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 1442.226459][T25175] FAULT_INJECTION: forcing a failure. [ 1442.226459][T25175] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1442.248843][T25175] CPU: 1 UID: 0 PID: 25175 Comm: syz.3.5016 Tainted: G L syzkaller #0 PREEMPT(full) [ 1442.248869][T25175] Tainted: [L]=SOFTLOCKUP [ 1442.248874][T25175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1442.248883][T25175] Call Trace: [ 1442.248890][T25175] [ 1442.248897][T25175] dump_stack_lvl+0xe8/0x150 [ 1442.248923][T25175] should_fail_ex+0x412/0x560 [ 1442.248946][T25175] _copy_from_user+0x2d/0xb0 [ 1442.248963][T25175] memdup_user+0x5e/0xd0 [ 1442.248977][T25175] strndup_user+0x68/0xd0 [ 1442.248991][T25175] keyctl_keyring_search+0x13d/0x390 [ 1442.249012][T25175] ? __pfx_keyctl_keyring_search+0x10/0x10 [ 1442.249042][T25175] __se_sys_keyctl+0x5de/0x9e0 [ 1442.249063][T25175] ? __pfx___se_sys_keyctl+0x10/0x10 [ 1442.249082][T25175] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1442.249109][T25175] ? __fget_files+0x3a0/0x420 [ 1442.249129][T25175] ? fput+0xa0/0xd0 [ 1442.249146][T25175] ? ksys_write+0x242/0x270 [ 1442.249167][T25175] ? __pfx_ksys_write+0x10/0x10 [ 1442.249189][T25175] ? __x64_sys_keyctl+0x20/0xc0 [ 1442.249208][T25175] do_syscall_64+0x14d/0xf80 [ 1442.249226][T25175] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1442.249239][T25175] ? trace_irq_disable+0x37/0x100 [ 1442.249257][T25175] ? clear_bhb_loop+0x40/0x90 [ 1442.249275][T25175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1442.249289][T25175] RIP: 0033:0x7f1b50b9bf79 [ 1442.249306][T25175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1442.249319][T25175] RSP: 002b:00007f1b51a68028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1442.249336][T25175] RAX: ffffffffffffffda RBX: 00007f1b50e15fa0 RCX: 00007f1b50b9bf79 [ 1442.249347][T25175] RDX: 0000200000000300 RSI: 000000000aefaba0 RDI: 000000000000000a [ 1442.249358][T25175] RBP: 00007f1b51a68090 R08: 0000000000000000 R09: 0000000000000000 [ 1442.249368][T25175] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000001 [ 1442.249380][T25175] R13: 00007f1b50e16038 R14: 00007f1b50e15fa0 R15: 00007f1b50f3fa48 [ 1442.249404][T25175] [ 1442.609357][T25180] input: syz0 as /devices/virtual/input/input146 [ 1443.127144][ T29] audit: type=1326 audit(1770925623.316:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25189 comm="syz.4.5021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f14d9bf79 code=0x7ffc0000 [ 1443.180952][ T29] audit: type=1326 audit(1770925623.316:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25189 comm="syz.4.5021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f2f14d9bf79 code=0x7ffc0000 [ 1443.258135][ T29] audit: type=1326 audit(1770925623.316:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25189 comm="syz.4.5021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f14d9bf79 code=0x7ffc0000 [ 1443.307963][ T29] audit: type=1326 audit(1770925623.316:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25189 comm="syz.4.5021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f14d9bf79 code=0x7ffc0000 [ 1443.735483][T25204] FAULT_INJECTION: forcing a failure. [ 1443.735483][T25204] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1443.840945][T25204] CPU: 1 UID: 0 PID: 25204 Comm: syz.0.5024 Tainted: G L syzkaller #0 PREEMPT(full) [ 1443.840966][T25204] Tainted: [L]=SOFTLOCKUP [ 1443.840970][T25204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1443.840977][T25204] Call Trace: [ 1443.840982][T25204] [ 1443.840987][T25204] dump_stack_lvl+0xe8/0x150 [ 1443.841006][T25204] should_fail_ex+0x412/0x560 [ 1443.841024][T25204] _copy_from_user+0x2d/0xb0 [ 1443.841036][T25204] kstrtouint_from_user+0xd6/0x180 [ 1443.841052][T25204] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1443.841074][T25204] proc_fail_nth_write+0x8e/0x210 [ 1443.841088][T25204] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1443.841104][T25204] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1443.841118][T25204] vfs_write+0x29a/0xb90 [ 1443.841135][T25204] ? __pfx_vfs_write+0x10/0x10 [ 1443.841147][T25204] ? __fget_files+0x2a/0x420 [ 1443.841160][T25204] ? __fget_files+0x3a0/0x420 [ 1443.841168][T25204] ? __fget_files+0x2a/0x420 [ 1443.841182][T25204] ksys_write+0x150/0x270 [ 1443.841196][T25204] ? __pfx_ksys_write+0x10/0x10 [ 1443.841213][T25204] do_syscall_64+0x14d/0xf80 [ 1443.841226][T25204] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1443.841236][T25204] ? trace_irq_disable+0x37/0x100 [ 1443.841248][T25204] ? clear_bhb_loop+0x40/0x90 [ 1443.841260][T25204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1443.841269][T25204] RIP: 0033:0x7f48fdb5c84e [ 1443.841279][T25204] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1443.841293][T25204] RSP: 002b:00007f48feab0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1443.841305][T25204] RAX: ffffffffffffffda RBX: 00007f48feab16c0 RCX: 00007f48fdb5c84e [ 1443.841312][T25204] RDX: 0000000000000001 RSI: 00007f48feab10a0 RDI: 0000000000000004 [ 1443.841319][T25204] RBP: 00007f48feab1090 R08: 0000000000000000 R09: 0000000000000000 [ 1443.841325][T25204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1443.841331][T25204] R13: 00007f48fde16038 R14: 00007f48fde15fa0 R15: 00007f48fdf3fa48 [ 1443.841346][T25204] [ 1444.580218][T19352] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1444.752179][T19352] usb 5-1: Using ep0 maxpacket: 32 [ 1444.760706][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1444.773208][T19352] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1444.781414][T19352] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1444.827920][T19352] usb 5-1: config 0 has no interface number 0 [ 1444.847190][T19352] usb 5-1: config 0 interface 1 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1444.891144][T19352] usb 5-1: config 0 interface 1 has no altsetting 0 [ 1444.981111][T19352] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1445.060062][ T9] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 1445.074853][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1445.095587][ T9] usb 1-1: config 0 has no interface number 0 [ 1445.180480][ T9] usb 1-1: config 0 interface 50 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1445.222062][ T9] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1445.239987][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1445.248207][T19352] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1445.252232][ T9] usb 1-1: Product: syz [ 1445.266611][ T9] usb 1-1: Manufacturer: syz [ 1445.266674][T19352] usb 5-1: Product: syz [ 1445.273150][ T9] usb 1-1: SerialNumber: syz [ 1445.312506][T19352] usb 5-1: Manufacturer: syz [ 1445.317253][ T9] usb 1-1: config 0 descriptor?? [ 1445.325051][T19352] usb 5-1: SerialNumber: syz [ 1445.361200][ T9] yurex 1-1:0.50: Could not find endpoints [ 1445.406325][T19352] usb 5-1: config 0 descriptor?? [ 1445.447967][T19352] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1445.474590][T19352] cx231xx 5-1:0.1: Not found matching IAD interface [ 1445.632426][T25214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1445.668199][T19352] usb 5-1: USB disconnect, device number 20 [ 1445.776066][T25214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1445.796617][T25214] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5026'. [ 1446.119959][ T5867] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1446.210107][ T9] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1446.255723][ T5867] usb 4-1: device descriptor read/64, error -71 [ 1446.469969][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1446.479599][ T9] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1446.487949][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1446.498684][ T9] usb 5-1: config 0 has no interface number 0 [ 1446.511490][ T9] usb 5-1: config 0 interface 1 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1446.538563][ T9] usb 5-1: config 0 interface 1 has no altsetting 0 [ 1446.557268][ T9] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1446.575995][ T5867] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1446.626673][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1446.639588][ T9] usb 5-1: Product: syz [ 1446.649788][ T9] usb 5-1: Manufacturer: syz [ 1446.732680][ T9] usb 5-1: SerialNumber: syz [ 1446.775881][ T5867] usb 4-1: device descriptor read/64, error -71 [ 1446.826209][ T9] usb 5-1: config 0 descriptor?? [ 1446.846496][ T9] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1446.867295][ T9] cx231xx 5-1:0.1: Not found matching IAD interface [ 1446.890417][ T5867] usb usb4-port1: attempt power cycle [ 1447.021191][T25235] vlan0: entered promiscuous mode [ 1447.230037][ T5867] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1447.250400][ T5867] usb 4-1: device descriptor read/8, error -71 [ 1447.499971][ T5867] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1447.520765][ T5867] usb 4-1: device descriptor read/8, error -71 [ 1447.630350][ T5867] usb usb4-port1: unable to enumerate USB device [ 1447.938962][ T29] audit: type=1326 audit(1770925628.126:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25243 comm="syz.1.5037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f343e79bf79 code=0x7ffc0000 [ 1447.980172][ T29] audit: type=1326 audit(1770925628.126:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25243 comm="syz.1.5037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f343e79bf79 code=0x7ffc0000 [ 1448.009551][ T29] audit: type=1326 audit(1770925628.126:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25243 comm="syz.1.5037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f343e79bf79 code=0x7ffc0000 [ 1448.085308][ T5895] usb 5-1: USB disconnect, device number 21 [ 1448.110331][ T5867] usb 1-1: USB disconnect, device number 8 [ 1448.146863][ T29] audit: type=1326 audit(1770925628.126:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25243 comm="syz.1.5037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f343e79bf79 code=0x7ffc0000 [ 1448.243440][T25253] FAULT_INJECTION: forcing a failure. [ 1448.243440][T25253] name failslab, interval 1, probability 0, space 0, times 0 [ 1448.257498][T25253] CPU: 0 UID: 0 PID: 25253 Comm: syz.0.5038 Tainted: G L syzkaller #0 PREEMPT(full) [ 1448.257528][T25253] Tainted: [L]=SOFTLOCKUP [ 1448.257535][T25253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1448.257546][T25253] Call Trace: [ 1448.257557][T25253] [ 1448.257565][T25253] dump_stack_lvl+0xe8/0x150 [ 1448.257594][T25253] should_fail_ex+0x412/0x560 [ 1448.257623][T25253] should_failslab+0xa8/0x100 [ 1448.257648][T25253] __kmalloc_cache_noprof+0x88/0x660 [ 1448.257671][T25253] ? sctp_auth_set_key+0x1bd/0x930 [ 1448.257696][T25253] sctp_auth_set_key+0x1bd/0x930 [ 1448.257715][T25253] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1448.257747][T25253] sctp_setsockopt_auth_key+0x399/0x640 [ 1448.257776][T25253] sctp_setsockopt+0x52d/0x12c0 [ 1448.257796][T25253] ? sock_common_setsockopt+0x36/0xc0 [ 1448.257815][T25253] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1448.257835][T25253] do_sock_setsockopt+0x17c/0x1b0 [ 1448.257859][T25253] __x64_sys_setsockopt+0x13d/0x1b0 [ 1448.257885][T25253] do_syscall_64+0x14d/0xf80 [ 1448.257906][T25253] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1448.257923][T25253] ? trace_irq_disable+0x37/0x100 [ 1448.257943][T25253] ? clear_bhb_loop+0x40/0x90 [ 1448.257963][T25253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1448.257980][T25253] RIP: 0033:0x7f48fdb9bf79 [ 1448.257996][T25253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1448.258010][T25253] RSP: 002b:00007f48fea90028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1448.258030][T25253] RAX: ffffffffffffffda RBX: 00007f48fde16090 RCX: 00007f48fdb9bf79 [ 1448.258043][T25253] RDX: 0000000000000017 RSI: 0000000000000084 RDI: 0000000000000003 [ 1448.258054][T25253] RBP: 00007f48fea90090 R08: 0000000000000009 R09: 0000000000000000 [ 1448.258066][T25253] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 1448.258077][T25253] R13: 00007f48fde16128 R14: 00007f48fde16090 R15: 00007f48fdf3fa48 [ 1448.258106][T25253] [ 1449.140103][ T5895] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1449.211013][T24585] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 1449.305674][ T5895] usb 3-1: Using ep0 maxpacket: 8 [ 1449.324198][ T5895] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 1449.350355][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1449.358373][ T5895] usb 3-1: Product: syz [ 1449.401674][ T5895] usb 3-1: Manufacturer: syz [ 1449.406306][ T5895] usb 3-1: SerialNumber: syz [ 1449.423101][T24585] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1449.435175][ T5895] usb 3-1: config 0 descriptor?? [ 1449.452443][T24585] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1449.478801][T24585] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1449.520018][T24585] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1449.543823][T24585] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1449.685887][T25273] usb usb8: usbfs: process 25273 (syz.1.5044) did not claim interface 0 before use [ 1449.698946][ T5895] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 1449.768373][T24585] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1449.778075][T24585] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1449.838616][T24585] usb 4-1: Product: syz [ 1449.843818][T24585] usb 4-1: Manufacturer: syz [ 1449.848632][T24585] usb 4-1: SerialNumber: syz [ 1449.878227][T24585] usb 4-1: config 0 descriptor?? [ 1450.123506][T25264] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1450.259287][ T5895] gspca_sunplus: reg_w_riv err -71 [ 1450.264634][ T5895] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 1450.275269][T24585] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1450.288034][T24585] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1450.300892][ T5895] usb 3-1: USB disconnect, device number 7 [ 1450.460300][T24585] radio-si470x 4-1:0.0: software version 0, hardware version 0 [ 1450.472657][T24585] radio-si470x 4-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 1450.487414][T24585] radio-si470x 4-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1450.680359][T24585] radio-si470x 4-1:0.0: submitting int urb failed (-90) [ 1451.080989][T25259] lo: Caught tx_queue_len zero misconfig [ 1451.094180][T25259] bond0: Caught tx_queue_len zero misconfig [ 1451.108907][T24585] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 1451.121674][T24585] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -22 [ 1451.163295][T24585] usb 4-1: USB disconnect, device number 10 [ 1451.182566][T25290] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5048'. [ 1451.299080][T25294] netlink: 'syz.1.5050': attribute type 39 has an invalid length. [ 1451.344951][T25296] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5051'. [ 1451.643059][ T29] audit: type=1326 audit(1770925631.836:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25302 comm="syz.1.5054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f343e79bf79 code=0x7ffc0000 [ 1451.643098][ T5895] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1451.737849][T24585] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1451.745610][ T29] audit: type=1326 audit(1770925631.836:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25302 comm="syz.1.5054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f343e79bf79 code=0x7ffc0000 [ 1451.878767][ T29] audit: type=1326 audit(1770925631.836:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25302 comm="syz.1.5054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f343e79bf79 code=0x7ffc0000 [ 1451.903027][ T29] audit: type=1326 audit(1770925631.836:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25302 comm="syz.1.5054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f343e79bf79 code=0x7ffc0000 [ 1451.980041][ T5895] usb 5-1: Using ep0 maxpacket: 32 [ 1451.987052][T24585] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1452.426333][ T5895] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 1452.434643][T24585] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1452.465961][ T5895] usb 5-1: config 0 has no interface number 0 [ 1452.474065][T24585] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1452.485324][ T5895] usb 5-1: config 0 interface 12 has no altsetting 0 [ 1452.495181][T24585] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1452.519004][ T5895] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1452.545959][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1452.556271][T24585] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1452.567333][ T5895] usb 5-1: Product: syz [ 1452.572869][ T5895] usb 5-1: Manufacturer: syz [ 1452.578036][ T5895] usb 5-1: SerialNumber: syz [ 1452.583596][T24585] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1452.593022][T24585] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1452.602305][T24585] usb 3-1: Product: syz [ 1452.608030][ T5895] usb 5-1: config 0 descriptor?? [ 1452.613877][T24585] usb 3-1: Manufacturer: syz [ 1452.643607][T24585] cdc_wdm 3-1:1.0: skipping garbage [ 1452.653476][T24585] cdc_wdm 3-1:1.0: skipping garbage [ 1452.696709][T24585] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1452.704160][T24585] cdc_wdm 3-1:1.0: Unknown control protocol [ 1452.800453][T25316] netlink: 'syz.0.5058': attribute type 4 has an invalid length. [ 1452.846407][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1452.853211][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1452.859471][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1452.866063][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1452.872308][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1452.878909][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1452.885226][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1452.891834][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1452.898162][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1452.904769][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1452.910999][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1452.917582][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1452.923815][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1452.930394][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1452.936795][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1452.943377][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1452.949699][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1452.956479][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1452.962761][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1452.969373][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1453.140281][ T5867] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1453.518148][ T5867] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1453.547973][ T5867] usb 1-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1453.578866][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1453.638487][ T5867] usb 1-1: Product: syz [ 1453.696362][ T5867] usb 1-1: Manufacturer: syz [ 1453.758261][ T5867] usb 1-1: SerialNumber: syz [ 1453.792511][ T5867] usb 1-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1454.155792][ T5895] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1454.165311][ T5895] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 1454.179422][ T5895] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1454.191418][ T5895] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 1454.270203][ T5867] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1454.277837][ T5895] usb 5-1: USB disconnect, device number 22 [ 1454.313796][T25342] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5063'. [ 1454.330745][ T5867] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 1454.353802][ T5867] usb 1-1: media controller created [ 1454.476583][ T5867] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1454.603970][T19352] usb 3-1: USB disconnect, device number 8 [ 1454.753248][ T5895] usb 1-1: USB disconnect, device number 9 [ 1455.060182][ T5895] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1455.185399][T11254] Bluetooth: hci2: unexpected event for opcode 0x0c2d [ 1455.213691][ T5895] usb 5-1: Using ep0 maxpacket: 8 [ 1455.233119][ T5895] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 1455.241579][ T5895] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1455.251791][ T5895] usb 5-1: config 0 has no interface number 0 [ 1455.257968][ T5895] usb 5-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1455.270796][ T5895] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1455.282621][ T5895] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1455.293927][ T5895] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1455.307850][ T5895] usb 5-1: config 0 interface 52 has no altsetting 0 [ 1455.314763][ T5895] usb 5-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 1455.323891][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1455.353537][ T5895] usb 5-1: config 0 descriptor?? [ 1455.430018][T19352] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 1455.567103][ T5895] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.52/input/input147 [ 1455.604218][T19352] usb 3-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 1455.628057][T19352] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 1455.640833][T19352] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 255, setting to 8 [ 1455.651878][T24585] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1455.659856][T19352] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 1455.669601][T19352] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1455.683346][T25352] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1455.830067][T24585] usb 1-1: Using ep0 maxpacket: 32 [ 1455.837881][T24585] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1455.846135][T24585] usb 1-1: config 0 has no interface number 0 [ 1455.852346][T24585] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1455.863686][T24585] usb 1-1: config 0 interface 1 has no altsetting 0 [ 1455.872636][T24585] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1455.881938][T24585] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1455.890090][T24585] usb 1-1: Product: syz [ 1455.894398][T24585] usb 1-1: Manufacturer: syz [ 1455.902469][T19352] usb 3-1: string descriptor 0 read error: -71 [ 1455.909606][T24585] usb 1-1: SerialNumber: syz [ 1455.925885][T24585] usb 1-1: config 0 descriptor?? [ 1455.993998][T19352] usb 3-1: USB disconnect, device number 9 [ 1456.051094][ T5867] usb 2-1: new full-speed USB device number 114 using dummy_hcd [ 1456.164076][T24585] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1456.179999][T24585] cx231xx 1-1:0.1: Not found matching IAD interface [ 1456.197469][T24585] usb 1-1: USB disconnect, device number 10 [ 1456.213082][ T5867] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1456.226212][ T5867] usb 2-1: config 0 has no interface number 0 [ 1456.233511][ T5867] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1456.243263][ T5867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1456.258060][ T5867] usb 2-1: config 0 descriptor?? [ 1456.266285][T11254] Bluetooth: hci5: Invalid handle: 0x3165 > 0x0eff [ 1456.269006][ T5867] usb 2-1: selecting invalid altsetting 1 [ 1456.290170][ T5867] dvb_ttusb_budget: ttusb_init_controller: error [ 1456.296530][ T5867] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1456.337252][T25366] FAULT_INJECTION: forcing a failure. [ 1456.337252][T25366] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1456.353493][T25366] CPU: 0 UID: 0 PID: 25366 Comm: syz.3.5072 Tainted: G L syzkaller #0 PREEMPT(full) [ 1456.353523][T25366] Tainted: [L]=SOFTLOCKUP [ 1456.353530][T25366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1456.353541][T25366] Call Trace: [ 1456.353549][T25366] [ 1456.353557][T25366] dump_stack_lvl+0xe8/0x150 [ 1456.353582][T25366] should_fail_ex+0x412/0x560 [ 1456.353608][T25366] _copy_from_user+0x2d/0xb0 [ 1456.353628][T25366] proc_submiturb+0xdb/0x1a0 [ 1456.353653][T25366] ? __pfx_proc_submiturb+0x10/0x10 [ 1456.353694][T25366] usbdev_ioctl+0x10b9/0x2120 [ 1456.353722][T25366] ? __pfx_usbdev_ioctl+0x10/0x10 [ 1456.353740][T25366] ? __fget_files+0x2a/0x420 [ 1456.353757][T25366] ? __fget_files+0x3a0/0x420 [ 1456.353774][T25366] ? __fget_files+0x2a/0x420 [ 1456.353794][T25366] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1456.353810][T25366] ? __pfx_usbdev_ioctl+0x10/0x10 [ 1456.353830][T25366] __se_sys_ioctl+0xfc/0x170 [ 1456.353853][T25366] do_syscall_64+0x14d/0xf80 [ 1456.353873][T25366] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1456.353889][T25366] ? trace_irq_disable+0x37/0x100 [ 1456.353908][T25366] ? clear_bhb_loop+0x40/0x90 [ 1456.353929][T25366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1456.353946][T25366] RIP: 0033:0x7f1b50b9bf79 [ 1456.353963][T25366] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1456.353977][T25366] RSP: 002b:00007f1b51a68028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1456.353996][T25366] RAX: ffffffffffffffda RBX: 00007f1b50e15fa0 RCX: 00007f1b50b9bf79 [ 1456.354007][T25366] RDX: 00002000000000c0 RSI: 000000008038550a RDI: 0000000000000004 [ 1456.354017][T25366] RBP: 00007f1b51a68090 R08: 0000000000000000 R09: 0000000000000000 [ 1456.354027][T25366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1456.354037][T25366] R13: 00007f1b50e16038 R14: 00007f1b50e15fa0 R15: 00007f1b50f3fa48 [ 1456.354063][T25366] [ 1456.587877][ T5867] DVB: Unable to find symbol cx22700_attach() [ 1456.611879][T25358] netlink: 'syz.1.5069': attribute type 1 has an invalid length. [ 1456.619698][T25358] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5069'. [ 1456.629641][T25358] trusted_key: encrypted_key: master key parameter '<!òŠÌ„¤½ýVï$SøTž™XzQùq^éõ-87êÚW— ¼Tÿ­‚mî5œ+BÆH·ÁÄïŸ' is invalid [ 1456.678520][ T5867] DVB: Unable to find symbol tda10046_attach() [ 1456.686395][ T5867] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1456.715589][ T5867] usb 2-1: USB disconnect, device number 114 [ 1457.340298][T25392] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5080'. [ 1457.409713][T25395] FAULT_INJECTION: forcing a failure. [ 1457.409713][T25395] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1457.441214][T25395] CPU: 1 UID: 0 PID: 25395 Comm: syz.0.5081 Tainted: G L syzkaller #0 PREEMPT(full) [ 1457.441243][T25395] Tainted: [L]=SOFTLOCKUP [ 1457.441251][T25395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1457.441261][T25395] Call Trace: [ 1457.441268][T25395] [ 1457.441276][T25395] dump_stack_lvl+0xe8/0x150 [ 1457.441304][T25395] should_fail_ex+0x412/0x560 [ 1457.441332][T25395] _copy_from_user+0x2d/0xb0 [ 1457.441352][T25395] do_sock_getsockopt+0x165/0x3f0 [ 1457.441376][T25395] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1457.441396][T25395] ? __fget_files+0x3a0/0x420 [ 1457.441413][T25395] ? __fget_files+0x2a/0x420 [ 1457.441435][T25395] __x64_sys_getsockopt+0x1a4/0x240 [ 1457.441464][T25395] do_syscall_64+0x14d/0xf80 [ 1457.441484][T25395] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1457.441508][T25395] ? clear_bhb_loop+0x40/0x90 [ 1457.441529][T25395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1457.441546][T25395] RIP: 0033:0x7f48fdb9bf79 [ 1457.441562][T25395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1457.441577][T25395] RSP: 002b:00007f48feab1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1457.441596][T25395] RAX: ffffffffffffffda RBX: 00007f48fde15fa0 RCX: 00007f48fdb9bf79 [ 1457.441609][T25395] RDX: 0000000000000031 RSI: 0000000000000029 RDI: 0000000000000003 [ 1457.441620][T25395] RBP: 00007f48feab1090 R08: 0000200000000080 R09: 0000000000000000 [ 1457.441632][T25395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1457.441643][T25395] R13: 00007f48fde16038 R14: 00007f48fde15fa0 R15: 00007f48fdf3fa48 [ 1457.441671][T25395] [ 1457.711468][ T10] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 1457.810325][T19352] usb 5-1: USB disconnect, device number 23 [ 1457.905024][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 1457.946978][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1458.163277][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 1458.217812][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 1458.348589][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 1458.399294][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1458.421844][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1458.430997][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1458.440025][ T10] usb 2-1: Product: syz [ 1458.444235][ T10] usb 2-1: Manufacturer: syz [ 1458.448814][ T10] usb 2-1: SerialNumber: syz [ 1458.455153][ T10] usb 2-1: config 0 descriptor?? [ 1458.845560][T19352] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 1458.916298][ T10] appledisplay 2-1:0.0: Error while getting initial brightness: -110 [ 1458.941557][ T10] appledisplay 2-1:0.0: probe with driver appledisplay failed with error -110 [ 1459.180018][ T10] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 1459.252157][T19352] usb 3-1: config 0 has no interfaces? [ 1459.257916][T19352] usb 3-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 1459.268268][T19352] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1459.422676][T19352] usb 3-1: config 0 descriptor?? [ 1459.508489][ T10] usb 1-1: config 0 has no interfaces? [ 1459.514423][ T10] usb 1-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 1459.555028][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1459.592793][ T10] usb 1-1: config 0 descriptor?? [ 1459.775539][T25435] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5092'. [ 1460.431791][T25442] binder: 25441:25442 ioctl 9361 b07 returned -22 [ 1460.594405][T24585] usb 2-1: USB disconnect, device number 115 [ 1460.901083][T25452] FAULT_INJECTION: forcing a failure. [ 1460.901083][T25452] name failslab, interval 1, probability 0, space 0, times 0 [ 1460.916377][T25452] CPU: 1 UID: 0 PID: 25452 Comm: syz.4.5096 Tainted: G L syzkaller #0 PREEMPT(full) [ 1460.916396][T25452] Tainted: [L]=SOFTLOCKUP [ 1460.916399][T25452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1460.916406][T25452] Call Trace: [ 1460.916411][T25452] [ 1460.916416][T25452] dump_stack_lvl+0xe8/0x150 [ 1460.916435][T25452] should_fail_ex+0x412/0x560 [ 1460.916452][T25452] should_failslab+0xa8/0x100 [ 1460.916469][T25452] __kmalloc_node_track_caller_noprof+0xeb/0x7b0 [ 1460.916484][T25452] ? dh_data_from_key+0x15e/0x280 [ 1460.916496][T25452] kmemdup_noprof+0x2b/0x70 [ 1460.916506][T25452] dh_data_from_key+0x15e/0x280 [ 1460.916517][T25452] __keyctl_dh_compute+0x37a/0xd10 [ 1460.916528][T25452] ? __lock_acquire+0x6b5/0x2cf0 [ 1460.916542][T25452] ? __pfx___keyctl_dh_compute+0x10/0x10 [ 1460.916565][T25452] ? get_pid_task+0x20/0x1f0 [ 1460.916580][T25452] ? get_pid_task+0x20/0x1f0 [ 1460.916593][T25452] keyctl_dh_compute+0x124/0x180 [ 1460.916604][T25452] ? __pfx_keyctl_dh_compute+0x10/0x10 [ 1460.916621][T25452] __se_sys_keyctl+0x44c/0x9e0 [ 1460.916635][T25452] ? __pfx___se_sys_keyctl+0x10/0x10 [ 1460.916648][T25452] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1460.916664][T25452] ? __fget_files+0x3a0/0x420 [ 1460.916678][T25452] ? fput+0xa0/0xd0 [ 1460.916688][T25452] ? ksys_write+0x242/0x270 [ 1460.916702][T25452] ? __pfx_ksys_write+0x10/0x10 [ 1460.916716][T25452] ? __x64_sys_keyctl+0x20/0xc0 [ 1460.916729][T25452] do_syscall_64+0x14d/0xf80 [ 1460.916742][T25452] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1460.916752][T25452] ? trace_irq_disable+0x37/0x100 [ 1460.916764][T25452] ? clear_bhb_loop+0x40/0x90 [ 1460.916776][T25452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1460.916785][T25452] RIP: 0033:0x7f2f14d9bf79 [ 1460.916795][T25452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1460.916803][T25452] RSP: 002b:00007f2f15c9b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1460.916815][T25452] RAX: ffffffffffffffda RBX: 00007f2f15015fa0 RCX: 00007f2f14d9bf79 [ 1460.916822][T25452] RDX: 00002000000000c0 RSI: 0000200000000140 RDI: 0000000000000017 [ 1460.916829][T25452] RBP: 00007f2f15c9b090 R08: 0000000000000000 R09: 0000000000000000 [ 1460.916836][T25452] R10: fffffffffffffe4f R11: 0000000000000246 R12: 0000000000000001 [ 1460.916842][T25452] R13: 00007f2f15016038 R14: 00007f2f15015fa0 R15: 00007f2f1513fa48 [ 1460.916857][T25452] [ 1461.171319][T19352] usb 3-1: USB disconnect, device number 10 [ 1461.416849][T24585] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1461.600084][T24585] usb 2-1: Using ep0 maxpacket: 8 [ 1461.717235][T24585] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1461.728566][T24585] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1461.760020][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1461.760095][T24585] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1461.779666][T24585] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1461.793158][T24585] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1461.814141][T24585] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1461.832121][T24585] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1461.930235][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 1461.944094][ T9] usb 3-1: config 0 has an invalid interface number: 177 but max is 0 [ 1461.952495][ T9] usb 3-1: config 0 has no interface number 0 [ 1461.967810][ T9] usb 3-1: config 0 interface 177 has no altsetting 0 [ 1461.986337][ T9] usb 3-1: config 0 has an invalid interface number: 177 but max is 0 [ 1462.006840][ T9] usb 3-1: config 0 has no interface number 0 [ 1462.022919][ T9] usb 3-1: config 0 interface 177 has no altsetting 0 [ 1462.047065][ T9] usb 3-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=b4.65 [ 1462.068743][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1462.072518][T24585] usb 2-1: usb_control_msg returned -32 [ 1462.088705][T24585] usbtmc 2-1:16.0: can't read capabilities [ 1462.088723][ T9] usb 3-1: Product: syz [ 1462.088751][ T9] usb 3-1: Manufacturer: syz [ 1462.135483][ T9] usb 3-1: config 0 descriptor?? [ 1462.766997][ T9] usb 3-1: USB disconnect, device number 11 [ 1462.831168][T25477] usbtmc 2-1:16.0: control status returned 0 [ 1463.030768][T19355] usb 1-1: USB disconnect, device number 11 [ 1463.256354][T25484] FAULT_INJECTION: forcing a failure. [ 1463.256354][T25484] name failslab, interval 1, probability 0, space 0, times 0 [ 1463.302654][T25484] CPU: 1 UID: 0 PID: 25484 Comm: syz.3.5106 Tainted: G L syzkaller #0 PREEMPT(full) [ 1463.302685][T25484] Tainted: [L]=SOFTLOCKUP [ 1463.302705][T25484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1463.302716][T25484] Call Trace: [ 1463.302725][T25484] [ 1463.302733][T25484] dump_stack_lvl+0xe8/0x150 [ 1463.302760][T25484] should_fail_ex+0x412/0x560 [ 1463.302788][T25484] should_failslab+0xa8/0x100 [ 1463.302811][T25484] ? do_getname+0x2e/0x250 [ 1463.302834][T25484] kmem_cache_alloc_noprof+0x87/0x650 [ 1463.302861][T25484] do_getname+0x2e/0x250 [ 1463.302885][T25484] __se_sys_renameat2+0x43/0x2c0 [ 1463.302903][T25484] do_syscall_64+0x14d/0xf80 [ 1463.302923][T25484] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1463.302938][T25484] ? trace_irq_disable+0x37/0x100 [ 1463.302956][T25484] ? clear_bhb_loop+0x40/0x90 [ 1463.302977][T25484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1463.302995][T25484] RIP: 0033:0x7f1b50b9bf79 [ 1463.303011][T25484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1463.303027][T25484] RSP: 002b:00007f1b51a68028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 1463.303046][T25484] RAX: ffffffffffffffda RBX: 00007f1b50e15fa0 RCX: 00007f1b50b9bf79 [ 1463.303059][T25484] RDX: ffffffffffffff9c RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1463.303072][T25484] RBP: 00007f1b51a68090 R08: 0000000000000002 R09: 0000000000000000 [ 1463.303083][T25484] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000001 [ 1463.303095][T25484] R13: 00007f1b50e16038 R14: 00007f1b50e15fa0 R15: 00007f1b50f3fa48 [ 1463.303123][T25484] [ 1463.847487][T25493] program syz.2.5107 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1464.071612][ T9] usb 2-1: USB disconnect, device number 116 [ 1464.663959][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1464.850070][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 1464.878755][ T9] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1464.886809][ T9] usb 1-1: can't read configurations, error -61 [ 1465.060170][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1465.210045][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 1465.223882][ T9] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1465.236470][ T9] usb 1-1: can't read configurations, error -61 [ 1465.252473][ T9] usb usb1-port1: attempt power cycle [ 1465.600055][ T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1465.621170][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 1465.638830][ T9] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1465.646754][ T9] usb 1-1: can't read configurations, error -61 [ 1465.770104][T24585] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1465.780589][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1465.822055][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 1465.870817][ T9] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1465.917923][ T9] usb 1-1: can't read configurations, error -61 [ 1465.925000][ T9] usb usb1-port1: unable to enumerate USB device [ 1465.989981][T19352] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 1465.997607][T19355] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1466.005201][T24585] usb 5-1: Using ep0 maxpacket: 16 [ 1466.012459][T24585] usb 5-1: config 252 has an invalid interface number: 213 but max is 0 [ 1466.021498][T24585] usb 5-1: config 252 has no interface number 0 [ 1466.027769][T24585] usb 5-1: config 252 interface 213 has no altsetting 0 [ 1466.068213][T24585] usb 5-1: New USB device found, idVendor=0458, idProduct=7005, bcdDevice=6d.16 [ 1466.108562][T24585] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1466.129531][T24585] usb 5-1: Product: syz [ 1466.138913][T24585] usb 5-1: Manufacturer: syz [ 1466.153815][T24585] usb 5-1: SerialNumber: syz [ 1466.161603][T19352] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1466.173294][T19355] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 1466.191692][T24585] gspca_main: sn9c2028-2.14.0 probing 0458:7005 [ 1466.199744][T19352] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1466.211008][T19355] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1466.234962][T19355] usb 4-1: config 0 has no interface number 0 [ 1466.241497][T19352] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1466.272306][T19355] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1466.289641][T19352] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1466.301979][T19355] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1466.314185][T19352] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1466.329972][T19355] usb 4-1: Product: syz [ 1466.334196][T19355] usb 4-1: Manufacturer: syz [ 1466.360303][T19352] usb 3-1: Product: syz [ 1466.366894][T19355] usb 4-1: SerialNumber: syz [ 1466.382098][T19352] usb 3-1: Manufacturer: syz [ 1466.387385][T19352] usb 3-1: SerialNumber: syz [ 1466.394806][T19355] usb 4-1: config 0 descriptor?? [ 1466.428031][T25523] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1466.470103][T25525] FAULT_INJECTION: forcing a failure. [ 1466.470103][T25525] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1466.487789][T25525] CPU: 1 UID: 0 PID: 25525 Comm: syz.0.5118 Tainted: G L syzkaller #0 PREEMPT(full) [ 1466.487818][T25525] Tainted: [L]=SOFTLOCKUP [ 1466.487824][T25525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1466.487834][T25525] Call Trace: [ 1466.487841][T25525] [ 1466.487849][T25525] dump_stack_lvl+0xe8/0x150 [ 1466.487882][T25525] should_fail_ex+0x412/0x560 [ 1466.487905][T25525] _copy_from_user+0x2d/0xb0 [ 1466.487920][T25525] kstrtouint_from_user+0xd6/0x180 [ 1466.487940][T25525] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1466.487968][T25525] proc_fail_nth_write+0x8e/0x210 [ 1466.487985][T25525] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1466.488005][T25525] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1466.488022][T25525] vfs_write+0x29a/0xb90 [ 1466.488045][T25525] ? __pfx_vfs_write+0x10/0x10 [ 1466.488061][T25525] ? __fget_files+0x2a/0x420 [ 1466.488079][T25525] ? __fget_files+0x3a0/0x420 [ 1466.488095][T25525] ? __fget_files+0x2a/0x420 [ 1466.488116][T25525] ksys_write+0x150/0x270 [ 1466.488136][T25525] ? __pfx_ksys_write+0x10/0x10 [ 1466.488162][T25525] do_syscall_64+0x14d/0xf80 [ 1466.488182][T25525] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1466.488197][T25525] ? clear_bhb_loop+0x40/0x90 [ 1466.488214][T25525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1466.488230][T25525] RIP: 0033:0x7f48fdb5c84e [ 1466.488246][T25525] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1466.488260][T25525] RSP: 002b:00007f48feab0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1466.488278][T25525] RAX: ffffffffffffffda RBX: 00007f48feab16c0 RCX: 00007f48fdb5c84e [ 1466.488291][T25525] RDX: 0000000000000001 RSI: 00007f48feab10a0 RDI: 0000000000000004 [ 1466.488300][T25525] RBP: 00007f48feab1090 R08: 0000000000000000 R09: 0000000000000000 [ 1466.488311][T25525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1466.488321][T25525] R13: 00007f48fde16038 R14: 00007f48fde15fa0 R15: 00007f48fdf3fa48 [ 1466.488346][T25525] [ 1466.734970][T25523] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1466.742369][T25523] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1466.816244][T24585] gspca_sn9c2028: read1 error -71 [ 1466.822358][T24585] gspca_sn9c2028: read1 error -71 [ 1466.827482][T24585] sn9c2028 5-1:252.213: probe with driver sn9c2028 failed with error -71 [ 1466.838703][T24585] usb 5-1: USB disconnect, device number 24 [ 1466.925106][T25531] binder: 25526:25531 ioctl c0306201 200000000540 returned -14 [ 1466.942295][T19355] uvcvideo 4-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 1466.950252][T19355] uvcvideo 4-1:0.64: No valid video chain found. [ 1467.089986][ T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1467.163851][T24585] usb 4-1: USB disconnect, device number 11 [ 1467.242441][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 1467.249719][ T9] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 1467.258155][ T9] usb 1-1: config 0 has no interface number 0 [ 1467.265549][ T9] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1467.283462][ T9] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1467.302741][ T9] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1467.357624][T25538] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5121'. [ 1467.382759][T25523] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1467.400220][T25523] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1467.490956][ T9] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1467.597512][ T9] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1467.732821][T19352] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1467.780333][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1467.788444][T19352] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1467.797986][T19352] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 1467.840078][T24585] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 1467.878007][ T9] usb 1-1: config 0 descriptor?? [ 1467.926234][ T9] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1468.022489][T24585] usb 4-1: device descriptor read/64, error -71 [ 1468.109666][T19352] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1468.126037][T25529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1468.140414][T25529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1468.154145][T19352] usb 3-1: USB disconnect, device number 12 [ 1468.246473][T19352] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 1468.290649][T24585] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 1468.490078][T24585] usb 4-1: device descriptor read/64, error -71 [ 1468.519968][ T10] usb 1-1: USB disconnect, device number 16 [ 1468.559318][ T10] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 1468.621018][T24585] usb usb4-port1: attempt power cycle [ 1468.970010][T19352] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1468.977687][T24585] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 1469.001150][T24585] usb 4-1: device descriptor read/8, error -71 [ 1469.100030][ T9] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1469.129937][T19352] usb 3-1: Using ep0 maxpacket: 32 [ 1469.165716][T19352] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1469.206314][T19352] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1469.240045][T19352] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1469.249174][T19352] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1469.251933][ T9] usb 2-1: device descriptor read/64, error -71 [ 1469.258079][T24585] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 1469.300561][T19352] usb 3-1: config 0 descriptor?? [ 1469.314810][T19352] hub 3-1:0.0: USB hub found [ 1469.330761][T24585] usb 4-1: device descriptor read/8, error -71 [ 1469.486762][T24585] usb usb4-port1: unable to enumerate USB device [ 1469.515869][T19352] hub 3-1:0.0: 1 port detected [ 1469.520029][ T10] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1469.528390][ T9] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1469.660073][ T9] usb 2-1: device descriptor read/64, error -71 [ 1469.679978][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 1469.686971][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1469.705316][ T10] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1469.722798][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1469.740500][ T10] usb 5-1: config 0 descriptor?? [ 1469.770465][ T9] usb usb2-port1: attempt power cycle [ 1470.110085][ T9] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1470.132865][T19352] hub 3-1:0.0: activate --> -90 [ 1470.140855][ T9] usb 2-1: device descriptor read/8, error -71 [ 1470.163437][ T10] mcp2221 0003:04D8:00DD.004C: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 1470.380237][ T9] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1470.393891][T25570] netlink: 'syz.0.5131': attribute type 8 has an invalid length. [ 1470.410891][ T9] usb 2-1: device descriptor read/8, error -71 [ 1470.531789][ T9] usb usb2-port1: unable to enumerate USB device [ 1470.540891][T24585] usb 3-1: USB disconnect, device number 13 [ 1470.567196][T19352] usb 5-1: USB disconnect, device number 25 [ 1470.831245][T19355] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1470.980087][T19352] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 1470.999984][T19355] usb 4-1: Using ep0 maxpacket: 8 [ 1471.006857][T19355] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 1471.019678][T19355] usb 4-1: config 0 has no interface number 0 [ 1471.030425][T19355] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1471.048587][T19355] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1471.072392][T19355] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1471.091643][T19355] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1471.104704][T19355] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1471.113977][T19355] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1471.130724][T19355] usb 4-1: config 0 descriptor?? [ 1471.151260][T19352] usb 1-1: config 0 has no interfaces? [ 1471.156744][T19352] usb 1-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 1471.176087][T19355] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1471.210161][T19352] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1471.256549][T19352] usb 1-1: config 0 descriptor?? [ 1471.291722][T25585] netlink: 'syz.2.5135': attribute type 1 has an invalid length. [ 1471.328654][T25585] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1471.339390][T25585] bond2: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 1471.367685][T25572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1471.406905][T25572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1471.424091][T25585] bond2: (slave vxcan3): making interface the new active one [ 1471.457001][T25585] bond2: (slave vxcan3): Enslaving as an active interface with an up link [ 1471.542185][T25585] bond2: (slave vxcan5): The slave device specified does not support setting the MAC address [ 1471.557096][T25585] bond2: (slave vxcan5): Enslaving as a backup interface with an up link [ 1471.706052][T25595] FAULT_INJECTION: forcing a failure. [ 1471.706052][T25595] name failslab, interval 1, probability 0, space 0, times 0 [ 1471.748219][T25595] CPU: 0 UID: 0 PID: 25595 Comm: syz.2.5137 Tainted: G L syzkaller #0 PREEMPT(full) [ 1471.748249][T25595] Tainted: [L]=SOFTLOCKUP [ 1471.748255][T25595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1471.748266][T25595] Call Trace: [ 1471.748274][T25595] [ 1471.748282][T25595] dump_stack_lvl+0xe8/0x150 [ 1471.748307][T25595] should_fail_ex+0x412/0x560 [ 1471.748334][T25595] should_failslab+0xa8/0x100 [ 1471.748359][T25595] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1471.748380][T25595] ? __alloc_skb+0x186/0x7d0 [ 1471.748398][T25595] ? __alloc_skb+0x1d0/0x7d0 [ 1471.748414][T25595] ? __local_bh_enable_ip+0xd0/0x130 [ 1471.748438][T25595] __alloc_skb+0x1d0/0x7d0 [ 1471.748461][T25595] alloc_skb_with_frags+0xca/0x890 [ 1471.748480][T25595] ? __might_fault+0xaf/0x130 [ 1471.748510][T25595] sock_alloc_send_pskb+0x878/0x990 [ 1471.748537][T25595] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1471.748568][T25595] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1471.748600][T25595] ? dev_get_by_index+0x22/0x2e0 [ 1471.748622][T25595] ? dev_get_by_index+0x22/0x2e0 [ 1471.748649][T25595] packet_sendmsg+0x33e5/0x50f0 [ 1471.748675][T25595] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1471.748696][T25595] ? rwsem_del_wake_waiter+0xd0/0x260 [ 1471.748746][T25595] ? aa_sk_perm+0x15a/0x960 [ 1471.748768][T25595] ? aa_sk_perm+0x82d/0x960 [ 1471.748787][T25595] ? __pfx_packet_sendmsg+0x10/0x10 [ 1471.748814][T25595] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1471.748843][T25595] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1471.748867][T25595] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1471.748892][T25595] __sys_sendto+0x709/0x7a0 [ 1471.748913][T25595] ? __pfx___sys_sendto+0x10/0x10 [ 1471.748930][T25595] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1471.748964][T25595] ? __fget_files+0x3a0/0x420 [ 1471.748991][T25595] ? ksys_write+0x242/0x270 [ 1471.749011][T25595] ? __pfx_ksys_write+0x10/0x10 [ 1471.749032][T25595] __x64_sys_sendto+0xde/0x100 [ 1471.749053][T25595] do_syscall_64+0x14d/0xf80 [ 1471.749073][T25595] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1471.749088][T25595] ? clear_bhb_loop+0x40/0x90 [ 1471.749107][T25595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1471.749121][T25595] RIP: 0033:0x7fded5d9bf79 [ 1471.749137][T25595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1471.749151][T25595] RSP: 002b:00007fded6c97028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1471.749170][T25595] RAX: ffffffffffffffda RBX: 00007fded6015fa0 RCX: 00007fded5d9bf79 [ 1471.749181][T25595] RDX: 000000000000002c RSI: 00002000000000c0 RDI: 0000000000000003 [ 1471.749189][T25595] RBP: 00007fded6c97090 R08: 0000200000000540 R09: 0000000000000014 [ 1471.749196][T25595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1471.749202][T25595] R13: 00007fded6016038 R14: 00007fded6015fa0 R15: 00007fded613fa48 [ 1471.749217][T25595] [ 1472.046373][ T9] usb 4-1: USB disconnect, device number 16 [ 1472.055301][ T9] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 1472.390013][ T10] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1472.550088][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 1472.558171][ T10] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 1472.575174][ T10] usb 5-1: config 0 has no interface number 0 [ 1472.582203][ T10] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1472.594304][ T10] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1472.607107][ T10] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1472.618871][ T10] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1472.632760][ T10] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1472.642835][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1472.671738][ T10] usb 5-1: config 0 descriptor?? [ 1472.697816][ T10] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1472.825415][T25611] netlink: 'syz.3.5142': attribute type 3 has an invalid length. [ 1472.833262][T25611] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5142'. [ 1472.900742][T25601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1472.914742][T25601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1473.059559][T19355] usb 5-1: USB disconnect, device number 26 [ 1473.071604][T19355] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 1473.572693][ T9] usb 1-1: USB disconnect, device number 17 [ 1473.892141][ T10] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1473.956900][T25629] FAULT_INJECTION: forcing a failure. [ 1473.956900][T25629] name failslab, interval 1, probability 0, space 0, times 0 [ 1473.975709][T25629] CPU: 0 UID: 0 PID: 25629 Comm: syz.0.5147 Tainted: G L syzkaller #0 PREEMPT(full) [ 1473.975738][T25629] Tainted: [L]=SOFTLOCKUP [ 1473.975744][T25629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1473.975753][T25629] Call Trace: [ 1473.975761][T25629] [ 1473.975768][T25629] dump_stack_lvl+0xe8/0x150 [ 1473.975795][T25629] should_fail_ex+0x412/0x560 [ 1473.975821][T25629] should_failslab+0xa8/0x100 [ 1473.975844][T25629] __kmalloc_cache_noprof+0x88/0x660 [ 1473.975864][T25629] ? vhost_iotlb_alloc+0x54/0x180 [ 1473.975885][T25629] vhost_iotlb_alloc+0x54/0x180 [ 1473.975904][T25629] vhost_net_ioctl+0x59e/0x17c0 [ 1473.975931][T25629] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 1473.975954][T25629] ? __fget_files+0x2a/0x420 [ 1473.975974][T25629] ? __fget_files+0x2a/0x420 [ 1473.975990][T25629] ? __fget_files+0x3a0/0x420 [ 1473.976006][T25629] ? __fget_files+0x2a/0x420 [ 1473.976026][T25629] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1473.976042][T25629] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 1473.976060][T25629] __se_sys_ioctl+0xfc/0x170 [ 1473.976089][T25629] do_syscall_64+0x14d/0xf80 [ 1473.976110][T25629] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1473.976135][T25629] ? trace_irq_disable+0x37/0x100 [ 1473.976154][T25629] ? clear_bhb_loop+0x40/0x90 [ 1473.976172][T25629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1473.976190][T25629] RIP: 0033:0x7f48fdb9bf79 [ 1473.976207][T25629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1473.976222][T25629] RSP: 002b:00007f48feab1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1473.976242][T25629] RAX: ffffffffffffffda RBX: 00007f48fde15fa0 RCX: 00007f48fdb9bf79 [ 1473.976255][T25629] RDX: 0000000000000000 RSI: 000000000000af02 RDI: 0000000000000003 [ 1473.976266][T25629] RBP: 00007f48feab1090 R08: 0000000000000000 R09: 0000000000000000 [ 1473.976277][T25629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1473.976287][T25629] R13: 00007f48fde16038 R14: 00007f48fde15fa0 R15: 00007f48fdf3fa48 [ 1473.976317][T25629] [ 1474.261951][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 1474.267621][ T10] usb 2-1: too many configurations: 17, using maximum allowed: 8 [ 1474.276564][ T10] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1474.284724][ T10] usb 2-1: config 0 has no interface number 0 [ 1474.305408][ T10] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1474.313474][ T10] usb 2-1: config 0 has no interface number 0 [ 1474.327057][T19355] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 1474.336893][ T10] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1474.345003][ T10] usb 2-1: config 0 has no interface number 0 [ 1474.356128][ T10] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1474.364247][ T10] usb 2-1: config 0 has no interface number 0 [ 1474.374261][ T10] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1474.385583][ T10] usb 2-1: config 0 has no interface number 0 [ 1474.421526][ T10] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1474.429553][ T10] usb 2-1: config 0 has no interface number 0 [ 1474.442103][ T10] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1474.460135][ T10] usb 2-1: config 0 has no interface number 0 [ 1474.476809][T25639] netlink: 'syz.0.5150': attribute type 39 has an invalid length. [ 1474.495200][T25639] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1474.495819][ T10] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1474.519697][T25639] netlink: 'syz.0.5150': attribute type 39 has an invalid length. [ 1474.527831][T25639] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1474.543178][ T10] usb 2-1: config 0 has no interface number 0 [ 1474.545329][ T10] usb 2-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 1474.571041][T19355] usb 3-1: config 0 has no interfaces? [ 1474.576535][T19355] usb 3-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 1474.598406][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1474.640082][T19355] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1474.649973][ T9] IPVS: starting estimator thread 0... [ 1474.659136][T19355] usb 3-1: config 0 descriptor?? [ 1474.674380][ T10] usb 2-1: Product: syz [ 1474.710136][ T10] usb 2-1: Manufacturer: syz [ 1474.714757][ T10] usb 2-1: SerialNumber: syz [ 1474.745198][T25643] IPVS: using max 57 ests per chain, 136800 per kthread [ 1474.820744][ T10] usb 2-1: config 0 descriptor?? [ 1474.850660][T25642] input: syz1 as /devices/virtual/input/input148 [ 1474.850960][ T10] etas_es58x 2-1:0.2: Starting syz syz (Serial Number syz) [ 1475.044137][ T10] etas_es58x 2-1:0.2: could not parse product info: '424242424242' [ 1475.590214][ T10] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1475.740910][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 1475.753328][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1475.764656][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 1475.782986][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 1475.803511][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 1475.826273][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1475.854233][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1475.873830][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1475.899990][ T10] usb 4-1: Product: syz [ 1475.911755][ T10] usb 4-1: Manufacturer: syz [ 1475.945618][ T10] usb 4-1: SerialNumber: syz [ 1476.024173][ T10] usb 4-1: config 0 descriptor?? [ 1476.255149][ T10] appledisplay: Apple Cinema Display connected [ 1476.312075][ T5481] etas_es58x 2-1:0.2 can0: bit-timing not yet defined [ 1476.372382][ C0] etas_es58x 2-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 1476.372932][T19355] usb 2-1: USB disconnect, device number 121 [ 1476.381714][ C0] etas_es58x 2-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 1476.381801][ C0] etas_es58x 2-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 1476.381874][ C0] etas_es58x 2-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 1476.381944][ C0] etas_es58x 2-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 1476.382015][ C0] etas_es58x 2-1:0.2 can0: es58x_write_bulk_callback: error -EPROTO [ 1476.407111][T19355] etas_es58x 2-1:0.2: Disconnecting syz syz [ 1476.471916][ T5481] etas_es58x 2-1:0.2 can0: es58x_open: Could not open the network device: -EINVAL [ 1476.500221][T24585] usb 4-1: USB disconnect, device number 17 [ 1476.500299][ C0] usb 4-1: appledisplay_complete - usb_submit_urb failed with result -19 [ 1476.520988][T24585] appledisplay: Apple Cinema Display disconnected [ 1476.622069][ T10] usb 3-1: USB disconnect, device number 14 [ 1476.784042][T25683] FAULT_INJECTION: forcing a failure. [ 1476.784042][T25683] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1476.798079][T25685] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5161'. [ 1476.808036][T25683] CPU: 1 UID: 0 PID: 25683 Comm: syz.2.5160 Tainted: G L syzkaller #0 PREEMPT(full) [ 1476.808065][T25683] Tainted: [L]=SOFTLOCKUP [ 1476.808072][T25683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1476.808083][T25683] Call Trace: [ 1476.808090][T25683] [ 1476.808098][T25683] dump_stack_lvl+0xe8/0x150 [ 1476.808125][T25683] should_fail_ex+0x412/0x560 [ 1476.808154][T25683] _copy_from_user+0x2d/0xb0 [ 1476.808173][T25683] msr_io+0xab/0x8b0 [ 1476.808195][T25683] ? kvm_arch_vcpu_ioctl+0x12f3/0x2c70 [ 1476.808215][T25683] ? __pfx_do_get_msr+0x10/0x10 [ 1476.808234][T25683] ? kvm_arch_vcpu_ioctl+0x12f3/0x2c70 [ 1476.808254][T25683] ? __pfx_msr_io+0x10/0x10 [ 1476.808276][T25683] ? __srcu_check_read_flavor+0x106/0x250 [ 1476.808297][T25683] kvm_arch_vcpu_ioctl+0x1330/0x2c70 [ 1476.808320][T25683] ? kvm_arch_vcpu_ioctl+0x12f3/0x2c70 [ 1476.808340][T25683] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 1476.808362][T25683] ? unwind_next_frame+0xa5/0x23c0 [ 1476.808384][T25683] ? is_bpf_text_address+0x26/0x2b0 [ 1476.808415][T25683] ? is_bpf_text_address+0x26/0x2b0 [ 1476.808439][T25683] ? is_bpf_text_address+0x292/0x2b0 [ 1476.808457][T25683] ? is_bpf_text_address+0x26/0x2b0 [ 1476.808478][T25683] ? kernel_text_address+0xa5/0xe0 [ 1476.808500][T25683] ? __kernel_text_address+0xd/0x30 [ 1476.808519][T25683] ? unwind_get_return_address+0x4d/0x90 [ 1476.808538][T25683] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1476.808557][T25683] ? arch_stack_walk+0xfb/0x150 [ 1476.808586][T25683] ? stack_trace_save+0xa9/0x100 [ 1476.808606][T25683] ? __pfx_stack_trace_save+0x10/0x10 [ 1476.808626][T25683] ? kasan_save_free_info+0x46/0x50 [ 1476.808650][T25683] ? __lock_acquire+0x6b5/0x2cf0 [ 1476.808669][T25683] ? kasan_save_track+0x4f/0x80 [ 1476.808686][T25683] ? kasan_save_track+0x3e/0x80 [ 1476.808702][T25683] ? kasan_save_free_info+0x46/0x50 [ 1476.808717][T25683] ? __kasan_slab_free+0x5c/0x80 [ 1476.808736][T25683] ? kfree+0x1c1/0x610 [ 1476.808752][T25683] ? tomoyo_path_number_perm+0x501/0x630 [ 1476.808771][T25683] ? security_file_ioctl+0xc3/0x2a0 [ 1476.808789][T25683] ? __se_sys_ioctl+0x47/0x170 [ 1476.808808][T25683] ? do_syscall_64+0x14d/0xf80 [ 1476.808827][T25683] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1476.808859][T25683] ? __mutex_trylock_common+0x158/0x260 [ 1476.808883][T25683] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1476.808907][T25683] ? rcu_is_watching+0x15/0xb0 [ 1476.808926][T25683] ? trace_contention_end+0x39/0x100 [ 1476.808947][T25683] ? __mutex_lock+0x319/0x1300 [ 1476.808983][T25683] ? kasan_quarantine_put+0xbb/0x1f0 [ 1476.809005][T25683] ? kvm_vcpu_ioctl+0x280/0xfd0 [ 1476.809027][T25683] ? __pfx___mutex_lock+0x10/0x10 [ 1476.809049][T25683] ? tomoyo_path_number_perm+0x219/0x630 [ 1476.809073][T25683] ? do_vfs_ioctl+0x1166/0x1530 [ 1476.809095][T25683] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1476.809118][T25683] kvm_vcpu_ioctl+0x7e4/0xfd0 [ 1476.809140][T25683] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1476.809152][T25683] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1476.809192][T25683] ? __fget_files+0x2a/0x420 [ 1476.809210][T25683] ? __fget_files+0x2a/0x420 [ 1476.809224][T25683] ? __fget_files+0x3a0/0x420 [ 1476.809239][T25683] ? __fget_files+0x2a/0x420 [ 1476.809256][T25683] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1476.809270][T25683] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1476.809286][T25683] __se_sys_ioctl+0xfc/0x170 [ 1476.809308][T25683] do_syscall_64+0x14d/0xf80 [ 1476.809326][T25683] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1476.809342][T25683] ? trace_irq_disable+0x37/0x100 [ 1476.809357][T25683] ? clear_bhb_loop+0x40/0x90 [ 1476.809377][T25683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1476.809392][T25683] RIP: 0033:0x7fded5d9bf79 [ 1476.809408][T25683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1476.809420][T25683] RSP: 002b:00007fded6c97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1476.809438][T25683] RAX: ffffffffffffffda RBX: 00007fded6015fa0 RCX: 00007fded5d9bf79 [ 1476.809450][T25683] RDX: 0000200000000040 RSI: 00000000c008ae88 RDI: 0000000000000005 [ 1476.809462][T25683] RBP: 00007fded6c97090 R08: 0000000000000000 R09: 0000000000000000 [ 1476.809474][T25683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1476.809485][T25683] R13: 00007fded6016038 R14: 00007fded6015fa0 R15: 00007fded613fa48 [ 1476.809512][T25683] [ 1477.387905][T25691] FAULT_INJECTION: forcing a failure. [ 1477.387905][T25691] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1477.438594][T25691] CPU: 0 UID: 0 PID: 25691 Comm: syz.4.5162 Tainted: G L syzkaller #0 PREEMPT(full) [ 1477.438614][T25691] Tainted: [L]=SOFTLOCKUP [ 1477.438618][T25691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1477.438624][T25691] Call Trace: [ 1477.438629][T25691] [ 1477.438634][T25691] dump_stack_lvl+0xe8/0x150 [ 1477.438652][T25691] should_fail_ex+0x412/0x560 [ 1477.438670][T25691] core_sys_select+0x8dd/0xc30 [ 1477.438694][T25691] ? __pfx_core_sys_select+0x10/0x10 [ 1477.438719][T25691] ? __pfx_set_user_sigmask+0x10/0x10 [ 1477.438730][T25691] ? kmem_cache_free+0x180/0x610 [ 1477.438742][T25691] ? fd_install+0x94/0x3d0 [ 1477.438755][T25691] __se_sys_pselect6+0x267/0x320 [ 1477.438773][T25691] ? __pfx___se_sys_pselect6+0x10/0x10 [ 1477.438787][T25691] ? __pfx_ksys_write+0x10/0x10 [ 1477.438802][T25691] ? __x64_sys_pselect6+0x21/0xf0 [ 1477.438820][T25691] do_syscall_64+0x14d/0xf80 [ 1477.438835][T25691] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1477.438844][T25691] ? trace_irq_disable+0x37/0x100 [ 1477.438856][T25691] ? clear_bhb_loop+0x40/0x90 [ 1477.438868][T25691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1477.438877][T25691] RIP: 0033:0x7f2f14d9bf79 [ 1477.438886][T25691] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1477.438895][T25691] RSP: 002b:00007f2f15c9b028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 1477.438906][T25691] RAX: ffffffffffffffda RBX: 00007f2f15015fa0 RCX: 00007f2f14d9bf79 [ 1477.438914][T25691] RDX: 0000200000000ac0 RSI: 0000200000000a80 RDI: 0000000000000040 [ 1477.438921][T25691] RBP: 00007f2f15c9b090 R08: 0000000000000000 R09: 0000000000000000 [ 1477.438927][T25691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1477.438933][T25691] R13: 00007f2f15016038 R14: 00007f2f15015fa0 R15: 00007f2f1513fa48 [ 1477.438948][T25691] [ 1477.673278][T25696] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1477.761496][T25696] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 1478.005405][T19355] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1478.179989][T19355] usb 2-1: Using ep0 maxpacket: 8 [ 1478.196042][T19355] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 1478.233405][T19355] usb 2-1: config 0 has no interface number 0 [ 1478.246202][T19355] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1478.275469][T19355] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1478.280501][ T10] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1478.317582][T19355] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1478.330424][T19355] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1478.343529][T19355] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1478.352722][T19355] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1478.732070][T19355] usb 2-1: config 0 descriptor?? [ 1478.760062][T19355] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1478.930042][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 1478.952460][ T10] usb 5-1: config 1 has an invalid interface number: 19 but max is 0 [ 1478.968329][T25680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1478.970062][ T10] usb 5-1: config 1 has no interface number 0 [ 1478.979682][T25680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1479.012230][ T10] usb 5-1: config 1 interface 19 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1479.053093][ T10] usb 5-1: config 1 interface 19 has no altsetting 0 [ 1479.068966][ T10] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 7.c9 [ 1479.088057][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1479.104536][ T10] usb 5-1: Product: syz [ 1479.131368][ T10] usb 5-1: Manufacturer: syz [ 1479.155932][ T10] usb 5-1: SerialNumber: syz [ 1479.238071][T19355] usb 2-1: USB disconnect, device number 122 [ 1479.251975][T19355] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 1479.283542][ T10] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1479.476554][T16240] usb 5-1: Failed to submit usb control message: -71 [ 1479.476821][ T10] usb 5-1: USB disconnect, device number 27 [ 1479.483872][T16240] usb 5-1: unable to send the bmi data to the device: -71 [ 1479.483907][T16240] usb 5-1: unable to get target info from device [ 1479.483922][T16240] usb 5-1: could not get target info (-71) [ 1479.483949][T16240] usb 5-1: could not probe fw (-71) [ 1480.906393][T25769] FAULT_INJECTION: forcing a failure. [ 1480.906393][T25769] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1481.006125][T25769] CPU: 1 UID: 0 PID: 25769 Comm: syz.4.5174 Tainted: G L syzkaller #0 PREEMPT(full) [ 1481.006154][T25769] Tainted: [L]=SOFTLOCKUP [ 1481.006161][T25769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1481.006172][T25769] Call Trace: [ 1481.006180][T25769] [ 1481.006188][T25769] dump_stack_lvl+0xe8/0x150 [ 1481.006213][T25769] should_fail_ex+0x412/0x560 [ 1481.006231][T25769] _copy_from_iter+0x1d3/0x1670 [ 1481.006250][T25769] ? rcu_is_watching+0x15/0xb0 [ 1481.006262][T25769] ? __pfx__copy_from_iter+0x10/0x10 [ 1481.006281][T25769] ? netlink_sendmsg+0x650/0xb40 [ 1481.006291][T25769] ? skb_put+0x11b/0x210 [ 1481.006304][T25769] netlink_sendmsg+0x6c0/0xb40 [ 1481.006318][T25769] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1481.006330][T25769] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1481.006345][T25769] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1481.006360][T25769] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1481.006370][T25769] ____sys_sendmsg+0xa68/0xad0 [ 1481.006383][T25769] ? __might_fault+0xaf/0x130 [ 1481.006398][T25769] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1481.006415][T25769] ? import_iovec+0x73/0xa0 [ 1481.006426][T25769] ___sys_sendmsg+0x2a5/0x360 [ 1481.006438][T25769] ? __lock_acquire+0x6b5/0x2cf0 [ 1481.006451][T25769] ? __pfx____sys_sendmsg+0x10/0x10 [ 1481.006479][T25769] ? __fget_files+0x2a/0x420 [ 1481.006489][T25769] ? __fget_files+0x3a0/0x420 [ 1481.006503][T25769] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1481.006517][T25769] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1481.006533][T25769] ? __pfx_ksys_write+0x10/0x10 [ 1481.006551][T25769] do_syscall_64+0x14d/0xf80 [ 1481.006564][T25769] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1481.006573][T25769] ? trace_irq_disable+0x37/0x100 [ 1481.006585][T25769] ? clear_bhb_loop+0x40/0x90 [ 1481.006597][T25769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1481.006606][T25769] RIP: 0033:0x7f2f14d9bf79 [ 1481.006623][T25769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1481.006632][T25769] RSP: 002b:00007f2f15c59028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1481.006644][T25769] RAX: ffffffffffffffda RBX: 00007f2f15016180 RCX: 00007f2f14d9bf79 [ 1481.006651][T25769] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 1481.006657][T25769] RBP: 00007f2f15c59090 R08: 0000000000000000 R09: 0000000000000000 [ 1481.006664][T25769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1481.006670][T25769] R13: 00007f2f15016218 R14: 00007f2f15016180 R15: 00007f2f1513fa48 [ 1481.006684][T25769] [ 1481.589946][T19355] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1481.600000][ T24] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 1481.732604][ T24] usb 3-1: device descriptor read/64, error -71 [ 1481.851484][T19355] usb 2-1: Using ep0 maxpacket: 16 [ 1481.858789][T19355] usb 2-1: config 0 has no interfaces? [ 1481.865947][T19355] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1481.951913][T19355] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1481.965935][T19355] usb 2-1: Manufacturer: syz [ 1481.976381][T19355] usb 2-1: config 0 descriptor?? [ 1482.070096][ T24] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 1482.090717][T24585] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1482.098489][T19352] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1482.210004][ T24] usb 3-1: device descriptor read/64, error -71 [ 1482.226935][T25761] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1482.259981][T24585] usb 5-1: Using ep0 maxpacket: 32 [ 1482.265286][T19352] usb 4-1: Using ep0 maxpacket: 32 [ 1482.273766][T19352] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1482.282122][T24585] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1482.303702][T19352] usb 4-1: config 0 has no interface number 0 [ 1482.304322][ T10] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1482.310572][T19352] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1482.328452][ T24] usb usb3-port1: attempt power cycle [ 1482.338698][T24585] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1482.349472][T24585] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1482.479667][T24585] usb 5-1: Product: syz [ 1482.485725][T19352] usb 4-1: config 0 interface 1 has no altsetting 0 [ 1482.489978][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 1482.497527][T24585] usb 5-1: Manufacturer: syz [ 1482.502735][T24585] usb 5-1: SerialNumber: syz [ 1482.510097][ T10] usb 1-1: config 6 has an invalid interface number: 51 but max is 1 [ 1482.518467][ T10] usb 1-1: config 6 has no interface number 1 [ 1482.532156][ T10] usb 1-1: config 6 interface 0 has no altsetting 0 [ 1482.538552][T24585] usb 5-1: config 0 descriptor?? [ 1482.549140][T19352] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1482.564805][T19352] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1482.589240][T19352] usb 4-1: Product: syz [ 1482.599380][T19352] usb 4-1: Manufacturer: syz [ 1482.606369][T19352] usb 4-1: SerialNumber: syz [ 1482.622601][ T10] usb 1-1: config 6 interface 51 has no altsetting 0 [ 1482.629509][T19352] usb 4-1: config 0 descriptor?? [ 1482.649944][ T10] usb 1-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice=30.ad [ 1482.663474][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1482.685963][ T10] usb 1-1: Product: syz [ 1482.690487][ T24] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 1482.692632][ T10] usb 1-1: Manufacturer: syz [ 1482.707118][ T10] usb 1-1: SerialNumber: syz [ 1482.721956][ T24] usb 3-1: device descriptor read/8, error -71 [ 1482.798664][T25778] netlink: 'syz.4.5178': attribute type 13 has an invalid length. [ 1482.872552][T19352] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1482.897920][T19352] cx231xx 4-1:0.1: Not found matching IAD interface [ 1482.926565][T19352] usb 4-1: USB disconnect, device number 18 [ 1482.970146][ T24] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 1483.003107][ T24] usb 3-1: device descriptor read/8, error -71 [ 1483.111206][ T24] usb usb3-port1: unable to enumerate USB device [ 1483.272022][ T9] usb 5-1: USB disconnect, device number 28 [ 1483.401277][T19352] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1483.538721][ T24] usb 2-1: USB disconnect, device number 123 [ 1483.570733][T19352] usb 4-1: Using ep0 maxpacket: 32 [ 1483.577694][T19352] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1483.587360][T19352] usb 4-1: config 0 has no interface number 0 [ 1483.610844][T19352] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1483.633693][T19352] usb 4-1: config 0 interface 1 has no altsetting 0 [ 1483.649259][T19352] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1483.659657][T19352] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1483.668394][T19352] usb 4-1: Product: syz [ 1483.674085][T19352] usb 4-1: Manufacturer: syz [ 1483.678786][T19352] usb 4-1: SerialNumber: syz [ 1483.703635][T19352] usb 4-1: config 0 descriptor?? [ 1483.893066][ T24] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1483.919338][T19352] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1483.939191][T19352] cx231xx 4-1:0.1: Not found matching IAD interface [ 1483.959484][T19352] usb 4-1: USB disconnect, device number 19 [ 1484.017190][T25808] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5182'. [ 1484.059963][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 1484.067833][ T24] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 1484.079191][ T24] usb 2-1: config 0 has no interface number 0 [ 1484.085405][ T24] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1484.091841][ T29] audit: type=1326 audit(1770925664.286:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25807 comm="syz.4.5182" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2f14d9bf79 code=0x0 [ 1484.096336][ T24] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1484.148911][ T24] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1484.153329][ T29] audit: type=1326 audit(1770925664.336:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25807 comm="syz.4.5182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f14d9bf79 code=0x7ffc0000 [ 1484.184470][ T24] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1484.187142][ T29] audit: type=1326 audit(1770925664.346:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25807 comm="syz.4.5182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f14d9bf79 code=0x7ffc0000 [ 1484.198701][ T24] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1484.221224][ T29] audit: type=1326 audit(1770925664.346:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25807 comm="syz.4.5182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2f14d5c84e code=0x7ffc0000 [ 1484.230411][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1484.253221][ T29] audit: type=1326 audit(1770925664.346:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25807 comm="syz.4.5182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f14d9bf79 code=0x7ffc0000 [ 1484.316103][ T24] usb 2-1: config 0 descriptor?? [ 1484.320159][ T29] audit: type=1326 audit(1770925664.346:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25807 comm="syz.4.5182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f14d9bf79 code=0x7ffc0000 [ 1484.347197][T25812] usb usb8: usbfs: process 25812 (syz.2.5181) did not claim interface 0 before use [ 1484.354558][ T29] audit: type=1326 audit(1770925664.346:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25807 comm="syz.4.5182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f2f14d9bf79 code=0x7ffc0000 [ 1484.398471][ T29] audit: type=1326 audit(1770925664.346:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25807 comm="syz.4.5182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f14d9bf79 code=0x7ffc0000 [ 1484.421392][ T24] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1484.452828][ T29] audit: type=1326 audit(1770925664.346:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25807 comm="syz.4.5182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2f14d9bf79 code=0x7ffc0000 [ 1484.505851][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.513495][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.550471][ T29] audit: type=1326 audit(1770925664.346:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25807 comm="syz.4.5182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f14d9bf79 code=0x7ffc0000 [ 1484.665723][T25804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1484.676827][T25804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1484.981081][ T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1485.069368][ T10] xr_serial 1-1:6.51: xr_serial converter detected [ 1485.091366][ T10] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 1485.119360][ T10] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1485.150124][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 1485.166215][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1485.197489][ T10] usb 1-1: USB disconnect, device number 18 [ 1485.212582][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1485.327172][ T10] xr_serial 1-1:6.0: device disconnected [ 1485.334524][T19338] usb 2-1: USB disconnect, device number 124 [ 1485.354320][T19338] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 1485.370555][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1485.406816][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1485.429655][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1485.442899][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1485.733916][T25834] FAULT_INJECTION: forcing a failure. [ 1485.733916][T25834] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1485.750047][ T24] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1485.770040][ T9] usb 4-1: usb_control_msg returned -32 [ 1485.779344][ T9] usbtmc 4-1:16.0: can't read capabilities [ 1485.790760][T25834] CPU: 1 UID: 0 PID: 25834 Comm: syz.2.5188 Tainted: G L syzkaller #0 PREEMPT(full) [ 1485.790779][T25834] Tainted: [L]=SOFTLOCKUP [ 1485.790783][T25834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1485.790789][T25834] Call Trace: [ 1485.790794][T25834] [ 1485.790799][T25834] dump_stack_lvl+0xe8/0x150 [ 1485.790817][T25834] should_fail_ex+0x412/0x560 [ 1485.790836][T25834] _copy_from_user+0x2d/0xb0 [ 1485.790847][T25834] kstrtouint_from_user+0xd6/0x180 [ 1485.790863][T25834] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1485.790884][T25834] proc_fail_nth_write+0x8e/0x210 [ 1485.790899][T25834] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1485.790915][T25834] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1485.790929][T25834] vfs_write+0x29a/0xb90 [ 1485.790945][T25834] ? __pfx_vfs_write+0x10/0x10 [ 1485.790957][T25834] ? __fget_files+0x2a/0x420 [ 1485.790970][T25834] ? __fget_files+0x3a0/0x420 [ 1485.790978][T25834] ? __fget_files+0x2a/0x420 [ 1485.790992][T25834] ksys_write+0x150/0x270 [ 1485.791005][T25834] ? __pfx_ksys_write+0x10/0x10 [ 1485.791020][T25834] ? __secure_computing+0xe1/0x2a0 [ 1485.791036][T25834] do_syscall_64+0x14d/0xf80 [ 1485.791050][T25834] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1485.791059][T25834] ? clear_bhb_loop+0x40/0x90 [ 1485.791071][T25834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1485.791081][T25834] RIP: 0033:0x7fded5d5c84e [ 1485.791091][T25834] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1485.791100][T25834] RSP: 002b:00007fded6c75fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1485.791111][T25834] RAX: ffffffffffffffda RBX: 00007fded6c766c0 RCX: 00007fded5d5c84e [ 1485.791118][T25834] RDX: 0000000000000001 RSI: 00007fded6c760a0 RDI: 000000000000000b [ 1485.791125][T25834] RBP: 00007fded6c76090 R08: 0000000000000000 R09: 0000000000000000 [ 1485.791131][T25834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1485.791137][T25834] R13: 00007fded6016128 R14: 00007fded6016090 R15: 00007fded613fa48 [ 1485.791153][T25834] [ 1486.162085][T19355] usb 4-1: USB disconnect, device number 20 [ 1486.195203][ T24] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1486.208347][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1486.218192][ T24] usb 5-1: Product: syz [ 1486.222673][ T24] usb 5-1: Manufacturer: syz [ 1486.227316][ T24] usb 5-1: SerialNumber: syz [ 1486.233555][T25842] ip6t_rpfilter: unknown options [ 1486.246871][ T24] usb 5-1: config 0 descriptor?? [ 1486.384654][T25843] block device autoloading is deprecated and will be removed. [ 1486.459089][T25849] program syz.2.5193 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1486.542381][ T24] usb 5-1: USB disconnect, device number 29 [ 1486.659985][ T10] usb 2-1: new full-speed USB device number 125 using dummy_hcd [ 1486.931688][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1486.941497][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1487.022486][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1487.032413][ T9] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 1487.040267][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1487.120608][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1487.136313][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1487.240224][ T9] usb 4-1: config 0 has no interfaces? [ 1487.247370][ T9] usb 4-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 1487.257363][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1487.271829][ T9] usb 4-1: config 0 descriptor?? [ 1487.280580][ T10] usb 2-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 1487.290095][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1487.427850][ T10] usb 2-1: Product: syz [ 1487.432309][ T10] usb 2-1: Manufacturer: syz [ 1487.437138][ T10] usb 2-1: SerialNumber: syz [ 1487.459993][ T5867] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1487.498362][ T10] usb 2-1: config 0 descriptor?? [ 1487.506495][ T10] ti_usb_3410_5052 2-1:0.0: TI USB 5052 2 port adapter converter detected [ 1487.516355][ T10] ti_usb_3410_5052 2-1:0.0: missing endpoints [ 1487.622097][ T5867] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1487.633208][ T5867] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1487.644899][ T5867] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1487.654696][ T5867] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1487.665405][ T5867] usb 1-1: Manufacturer: syz [ 1487.680039][ T5867] usb 1-1: config 0 descriptor?? [ 1487.731664][ T10] usb 2-1: USB disconnect, device number 125 [ 1488.409704][ C0] raw-gadget.2 gadget.0: ignoring, device is not running [ 1488.417726][ T5867] uclogic 0003:256C:006D.004D: failed retrieving Huion firmware version: -71 [ 1488.426942][ T5867] uclogic 0003:256C:006D.004D: failed probing parameters: -71 [ 1488.434807][ T5867] uclogic 0003:256C:006D.004D: probe with driver uclogic failed with error -71 [ 1488.448839][ T5867] usb 1-1: USB disconnect, device number 19 [ 1488.610048][ T10] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 1488.759973][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 1488.766708][ T10] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 1488.775136][ T10] usb 2-1: config 0 has no interface number 0 [ 1488.781498][ T10] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1488.793593][ T10] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1488.805426][ T10] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1488.816507][ T10] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1488.829655][ T10] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1488.839124][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1488.849754][ T10] usb 2-1: config 0 descriptor?? [ 1488.861796][ T10] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1489.060924][T25874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1489.069685][T25874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1489.822511][T19355] usb 4-1: USB disconnect, device number 21 [ 1490.197209][ T5867] usb 2-1: USB disconnect, device number 126 [ 1490.227650][ T5867] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 1491.019985][ T24] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1491.090483][T19355] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1491.165715][ T24] usb 2-1: device descriptor read/64, error -71 [ 1491.384400][T19355] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1491.398861][T19355] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1491.429523][T19355] usb 1-1: Product: syz [ 1491.436799][T19355] usb 1-1: Manufacturer: syz [ 1491.456767][T19355] usb 1-1: SerialNumber: syz [ 1491.471976][T19355] usb 1-1: config 0 descriptor?? [ 1491.511876][ T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1491.691289][T19355] usb 1-1: USB disconnect, device number 20 [ 1491.703807][ T24] usb 2-1: device descriptor read/64, error -71 [ 1491.744821][T17394] udevd[17394]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1491.842258][ T24] usb usb2-port1: attempt power cycle [ 1492.170049][T19355] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1492.179977][ T24] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1492.200563][ T24] usb 2-1: device descriptor read/8, error -71 [ 1492.219977][T19352] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1492.329961][T19355] usb 3-1: Using ep0 maxpacket: 8 [ 1492.337262][T19355] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1492.346726][T19355] usb 3-1: config 4 interface 0 has no altsetting 0 [ 1492.356433][T19355] usb 3-1: string descriptor 0 read error: -22 [ 1492.363020][T19355] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1492.372178][T19352] usb 4-1: Using ep0 maxpacket: 16 [ 1492.377673][T19355] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1492.386936][T19352] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1492.397918][T19352] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1492.416243][T19355] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1492.427319][T19352] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1492.443967][T19352] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1492.454541][T19355] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1492.470120][T24585] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1492.479057][ T24] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1492.487298][T19355] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1492.495400][T19352] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1492.508981][T19355] usb 3-1: media controller created [ 1492.519600][T19352] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1492.532696][T19355] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1492.541331][T19352] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1492.541468][ T24] usb 2-1: device descriptor read/8, error -71 [ 1492.555813][T19352] usb 4-1: Manufacturer: syz [ 1492.577769][T19352] usb 4-1: config 0 descriptor?? [ 1492.643372][T24585] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1492.654604][T24585] usb 1-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 1492.663802][T24585] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1492.673065][ T24] usb usb2-port1: unable to enumerate USB device [ 1492.681271][T24585] usb 1-1: config 0 descriptor?? [ 1492.860035][T19352] rc_core: IR keymap rc-hauppauge not found [ 1492.867896][T19352] Registered IR keymap rc-empty [ 1492.873669][T19352] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1492.901467][T19352] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1492.941160][T19352] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1492.956719][T19352] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input149 [ 1492.978117][T19352] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1493.000508][T19352] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1493.020070][T19352] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1493.051204][T19352] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1493.080407][T19352] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1493.115629][T24585] logitech 0003:046D:C626.004E: unbalanced delimiter at end of report description [ 1493.125085][T19352] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1493.139294][T24585] logitech 0003:046D:C626.004E: parse failed [ 1493.148574][T24585] logitech 0003:046D:C626.004E: probe with driver logitech failed with error -22 [ 1493.158828][T19352] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1493.236899][T19352] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1493.292995][T19352] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1493.360060][T19352] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1493.371768][T19338] usb 1-1: USB disconnect, device number 21 [ 1493.385657][T19352] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1493.429402][T19352] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1493.447916][T19352] usb 4-1: USB disconnect, device number 22 [ 1493.628173][T19355] zl10353_read_register: readreg error (reg=127, ret==0) [ 1493.636597][T25914] usb 3-1: dvb_usb_au6610: wlen=0, aborting [ 1493.701345][T19355] usb 3-1: USB disconnect, device number 19 [ 1494.459191][T25961] usb usb8: usbfs: process 25961 (syz.4.5218) did not claim interface 0 before use [ 1494.490061][ T5867] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1494.499985][T19352] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1494.649947][T19352] usb 3-1: Using ep0 maxpacket: 32 [ 1494.657113][T19352] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1494.665885][T19352] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1494.686782][T19352] usb 3-1: config 0 has no interface number 0 [ 1494.693935][ T5867] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1494.704319][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1494.704337][T19352] usb 3-1: config 0 interface 1 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1494.730122][T19352] usb 3-1: config 0 interface 1 has no altsetting 0 [ 1494.739678][T19352] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1494.749750][T19352] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1494.757849][T19352] usb 3-1: Product: syz [ 1494.762358][T19352] usb 3-1: Manufacturer: syz [ 1494.763446][ T5867] usb 1-1: Product: syz [ 1494.766970][T19352] usb 3-1: SerialNumber: syz [ 1494.797836][ T5867] usb 1-1: Manufacturer: syz [ 1494.811402][ T5867] usb 1-1: SerialNumber: syz [ 1494.817624][T19352] usb 3-1: config 0 descriptor?? [ 1494.846600][ T5867] usb 1-1: config 0 descriptor?? [ 1495.039476][T19352] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1495.069218][T24585] usb 1-1: USB disconnect, device number 22 [ 1495.101387][T19352] cx231xx 3-1:0.1: Not found matching IAD interface [ 1495.130316][T19352] usb 3-1: USB disconnect, device number 20 [ 1495.150552][T17394] udevd[17394]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1495.505173][T25972] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5227'. [ 1495.600420][T19352] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1495.641341][T25982] FAULT_INJECTION: forcing a failure. [ 1495.641341][T25982] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1495.655522][T25982] CPU: 1 UID: 0 PID: 25982 Comm: syz.0.5231 Tainted: G L syzkaller #0 PREEMPT(full) [ 1495.655548][T25982] Tainted: [L]=SOFTLOCKUP [ 1495.655554][T25982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1495.655564][T25982] Call Trace: [ 1495.655571][T25982] [ 1495.655578][T25982] dump_stack_lvl+0xe8/0x150 [ 1495.655604][T25982] should_fail_ex+0x412/0x560 [ 1495.655630][T25982] _copy_from_iter+0x1d3/0x1670 [ 1495.655660][T25982] ? rcu_is_watching+0x15/0xb0 [ 1495.655681][T25982] ? __pfx__copy_from_iter+0x10/0x10 [ 1495.655711][T25982] ? netlink_sendmsg+0x650/0xb40 [ 1495.655727][T25982] ? skb_put+0x11b/0x210 [ 1495.655747][T25982] netlink_sendmsg+0x6c0/0xb40 [ 1495.655780][T25982] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1495.655798][T25982] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1495.655820][T25982] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1495.655843][T25982] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1495.655860][T25982] ____sys_sendmsg+0xa68/0xad0 [ 1495.655881][T25982] ? __might_fault+0xaf/0x130 [ 1495.655906][T25982] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1495.655934][T25982] ? import_iovec+0x73/0xa0 [ 1495.655954][T25982] ___sys_sendmsg+0x2a5/0x360 [ 1495.655973][T25982] ? __lock_acquire+0x6b5/0x2cf0 [ 1495.655995][T25982] ? __pfx____sys_sendmsg+0x10/0x10 [ 1495.656041][T25982] ? __fget_files+0x2a/0x420 [ 1495.656056][T25982] ? __fget_files+0x3a0/0x420 [ 1495.656081][T25982] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1495.656104][T25982] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1495.656133][T25982] ? __pfx_ksys_write+0x10/0x10 [ 1495.656164][T25982] do_syscall_64+0x14d/0xf80 [ 1495.656186][T25982] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1495.656202][T25982] ? trace_irq_disable+0x37/0x100 [ 1495.656219][T25982] ? clear_bhb_loop+0x40/0x90 [ 1495.656238][T25982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1495.656255][T25982] RIP: 0033:0x7f48fdb9bf79 [ 1495.656272][T25982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1495.656286][T25982] RSP: 002b:00007f48feab1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1495.656305][T25982] RAX: ffffffffffffffda RBX: 00007f48fde15fa0 RCX: 00007f48fdb9bf79 [ 1495.656319][T25982] RDX: 0000000020050800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1495.656330][T25982] RBP: 00007f48feab1090 R08: 0000000000000000 R09: 0000000000000000 [ 1495.656342][T25982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1495.656352][T25982] R13: 00007f48fde16038 R14: 00007f48fde15fa0 R15: 00007f48fdf3fa48 [ 1495.656378][T25982] [ 1495.910555][ T5867] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1496.050349][T19352] usb 3-1: Using ep0 maxpacket: 32 [ 1496.058844][T19352] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1496.066112][ T5867] usb 2-1: Using ep0 maxpacket: 8 [ 1496.067465][T19352] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1496.081333][ T5867] usb 2-1: no configurations [ 1496.082620][T19352] usb 3-1: config 0 has no interface number 0 [ 1496.086842][ T5867] usb 2-1: can't read configurations, error -22 [ 1496.093370][T19352] usb 3-1: config 0 interface 1 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1496.150065][T19352] usb 3-1: config 0 interface 1 has no altsetting 0 [ 1496.178383][T19352] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1496.187616][T19352] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1496.195853][T19352] usb 3-1: Product: syz [ 1496.200084][T19352] usb 3-1: Manufacturer: syz [ 1496.204922][T19352] usb 3-1: SerialNumber: syz [ 1496.212837][T19352] usb 3-1: config 0 descriptor?? [ 1496.261153][T25996] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5233'. [ 1496.270114][T19338] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1496.360083][ T5867] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1496.512996][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 1496.524315][T19352] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1496.530127][ T5867] usb 2-1: Using ep0 maxpacket: 8 [ 1496.534288][T19352] cx231xx 3-1:0.1: Not found matching IAD interface [ 1496.550322][ T5867] usb 2-1: no configurations [ 1496.560492][T19338] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1496.571893][T19352] usb 3-1: USB disconnect, device number 21 [ 1496.581637][ T5867] usb 2-1: can't read configurations, error -22 [ 1496.589942][T24585] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1496.639426][ T5867] usb usb2-port1: attempt power cycle [ 1496.653395][T19338] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1496.768263][T24585] usb 1-1: Using ep0 maxpacket: 16 [ 1496.778305][T24585] usb 1-1: config 0 has no interfaces? [ 1496.798955][T24585] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1496.808611][T24585] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1496.816644][T24585] usb 1-1: Manufacturer: syz [ 1496.837728][T19338] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1496.847901][T24585] usb 1-1: config 0 descriptor?? [ 1496.890399][T19338] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1496.922055][T19338] usb 5-1: config 0 descriptor?? [ 1497.020046][ T5867] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1497.041005][ T5867] usb 2-1: Using ep0 maxpacket: 8 [ 1497.046745][ T5867] usb 2-1: no configurations [ 1497.052388][ T5867] usb 2-1: can't read configurations, error -22 [ 1497.179818][T19338] usbhid 5-1:0.0: can't add hid device: -71 [ 1497.195874][T19338] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1497.204105][ T5867] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1497.232477][ T5867] usb 2-1: Using ep0 maxpacket: 8 [ 1497.251452][ T5867] usb 2-1: no configurations [ 1497.258326][ T5867] usb 2-1: can't read configurations, error -22 [ 1497.266628][T19338] usb 5-1: USB disconnect, device number 30 [ 1497.276722][ T5867] usb usb2-port1: unable to enumerate USB device [ 1497.979996][T19338] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1498.139923][T19338] usb 5-1: Using ep0 maxpacket: 16 [ 1498.146818][T19338] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1498.158171][T19338] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1498.175013][T19338] usb 5-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 1498.199581][T19338] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1498.223133][T19338] usb 5-1: config 0 descriptor?? [ 1498.904169][T19338] usbhid 5-1:0.0: can't add hid device: -71 [ 1498.914610][T19338] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1498.926119][T19338] usb 5-1: USB disconnect, device number 31 [ 1499.197284][T19352] usb 1-1: USB disconnect, device number 23 [ 1499.531219][T26019] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5241'. [ 1499.554493][T26022] syzkaller0: entered promiscuous mode [ 1499.563671][T26022] syzkaller0: entered allmulticast mode [ 1499.576447][T26022] tipc: Enabled bearer , priority 0 [ 1499.625450][T26022] tipc: Resetting bearer [ 1499.638828][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1499.647366][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1499.657322][T26020] tipc: Resetting bearer [ 1499.688714][T26020] tipc: Disabling bearer [ 1499.712686][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 1499.712702][ T29] audit: type=1326 audit(1770925679.906:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26025 comm="syz.0.5243" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f48fdb9bf79 code=0x0 [ 1499.764143][ T29] audit: type=1326 audit(1770925679.956:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26025 comm="syz.0.5243" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f48fdb9bf79 code=0x0 [ 1499.816037][T26028] netlink: 7 bytes leftover after parsing attributes in process `syz.0.5243'. [ 1499.935650][ T29] audit: type=1326 audit(1770925680.126:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26025 comm="syz.0.5243" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f48fdb9bf79 code=0x0 [ 1500.039804][T26037] usb usb8: usbfs: process 26037 (syz.4.5240) did not claim interface 0 before use [ 1500.382252][T26043] netlink: 'syz.2.5246': attribute type 4 has an invalid length. [ 1500.411525][T19338] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1500.581994][T19338] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 1500.590903][T19338] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1500.620274][T19338] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1500.641515][T19338] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1500.649659][T19338] usb 4-1: Manufacturer: syz [ 1500.666735][T19338] usb 4-1: config 0 descriptor?? [ 1500.700043][ T9] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1500.851418][ T9] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1500.868541][ T9] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1500.900144][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1500.930006][T19338] rc_core: IR keymap rc-hauppauge not found [ 1500.937906][ T9] usb 3-1: Product: syz [ 1500.945147][T19338] Registered IR keymap rc-empty [ 1500.950262][ T9] usb 3-1: Manufacturer: syz [ 1500.960800][T19338] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1500.973844][ T9] usb 3-1: SerialNumber: syz [ 1500.987851][ T9] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1501.006200][T19338] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input150 [ 1501.038077][ C0] igorplugusb 4-1:0.0: Error: urb status = -32 [ 1501.403291][ T9] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1501.415158][ T9] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 1501.424130][ T9] usb 3-1: media controller created [ 1501.534122][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1501.842331][T26066] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5253'. [ 1501.883449][T19352] usb 4-1: USB disconnect, device number 23 [ 1501.946026][T26071] netlink: 656 bytes leftover after parsing attributes in process `syz.0.5254'. [ 1502.027704][ T9] usb 3-1: USB disconnect, device number 22 [ 1502.320048][T19352] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1502.569933][T19352] usb 5-1: Using ep0 maxpacket: 32 [ 1502.575939][T19352] usb 5-1: too many configurations: 17, using maximum allowed: 8 [ 1502.588365][T19352] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 1502.749966][T19352] usb 5-1: config 0 has no interface number 0 [ 1502.759822][T19352] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 1502.767923][T19352] usb 5-1: config 0 has no interface number 0 [ 1502.775061][T19352] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 1502.783135][T19352] usb 5-1: config 0 has no interface number 0 [ 1502.790533][T19352] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 1502.798664][T19352] usb 5-1: config 0 has no interface number 0 [ 1502.807301][T19352] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 1502.816683][T19352] usb 5-1: config 0 has no interface number 0 [ 1502.824174][T19352] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 1502.832471][T19352] usb 5-1: config 0 has no interface number 0 [ 1502.855461][T19352] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 1502.863733][T19352] usb 5-1: config 0 has no interface number 0 [ 1502.881694][T19352] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 1502.890479][T19352] usb 5-1: config 0 has no interface number 0 [ 1502.940896][T19352] usb 5-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 1502.962466][T19352] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1502.990148][T19352] usb 5-1: Product: syz [ 1502.994361][T19352] usb 5-1: Manufacturer: syz [ 1502.998971][T19352] usb 5-1: SerialNumber: syz [ 1503.015924][T26087] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5258'. [ 1503.048206][T19352] usb 5-1: config 0 descriptor?? [ 1503.064987][T19352] etas_es58x 5-1:0.2: Starting syz syz (Serial Number syz) [ 1503.241938][T26091] netlink: 'syz.3.5259': attribute type 4 has an invalid length. [ 1503.262456][T19352] etas_es58x 5-1:0.2: could not parse product info: '424242424242' [ 1503.570564][ T9] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1503.732762][ T9] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1503.763542][ T9] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1503.785231][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1503.813840][ T9] usb 4-1: Product: syz [ 1503.826929][ T9] usb 4-1: Manufacturer: syz [ 1503.836244][ T9] usb 4-1: SerialNumber: syz [ 1503.857496][ T9] usb 4-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1504.000970][T19352] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 1504.046782][T26108] FAULT_INJECTION: forcing a failure. [ 1504.046782][T26108] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1504.093230][T26108] CPU: 1 UID: 0 PID: 26108 Comm: syz.2.5263 Tainted: G L syzkaller #0 PREEMPT(full) [ 1504.093259][T26108] Tainted: [L]=SOFTLOCKUP [ 1504.093266][T26108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1504.093277][T26108] Call Trace: [ 1504.093284][T26108] [ 1504.093293][T26108] dump_stack_lvl+0xe8/0x150 [ 1504.093315][T26108] should_fail_ex+0x412/0x560 [ 1504.093333][T26108] _copy_to_user+0x31/0xb0 [ 1504.093345][T26108] simple_read_from_buffer+0xe1/0x170 [ 1504.093364][T26108] proc_fail_nth_read+0x1bb/0x230 [ 1504.093388][T26108] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1504.093413][T26108] ? rw_verify_area+0x2a6/0x4d0 [ 1504.093432][T26108] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1504.093454][T26108] vfs_read+0x20c/0xa70 [ 1504.093466][T26108] ? fdget_pos+0x246/0x320 [ 1504.093479][T26108] ? __pfx___mutex_lock+0x10/0x10 [ 1504.093495][T26108] ? __pfx_vfs_read+0x10/0x10 [ 1504.093507][T26108] ? __fget_files+0x2a/0x420 [ 1504.093522][T26108] ? __fget_files+0x3a0/0x420 [ 1504.093538][T26108] ? __fget_files+0x2a/0x420 [ 1504.093563][T26108] ksys_read+0x150/0x270 [ 1504.093585][T26108] ? __pfx_ksys_read+0x10/0x10 [ 1504.093609][T26108] do_syscall_64+0x14d/0xf80 [ 1504.093622][T26108] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1504.093632][T26108] ? trace_irq_disable+0x37/0x100 [ 1504.093644][T26108] ? clear_bhb_loop+0x40/0x90 [ 1504.093656][T26108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1504.093667][T26108] RIP: 0033:0x7fded5d5c84e [ 1504.093683][T26108] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1504.093699][T26108] RSP: 002b:00007fded6c96fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1504.093718][T26108] RAX: ffffffffffffffda RBX: 00007fded6c976c0 RCX: 00007fded5d5c84e [ 1504.093732][T26108] RDX: 000000000000000f RSI: 00007fded6c970a0 RDI: 0000000000000004 [ 1504.093743][T26108] RBP: 00007fded6c97090 R08: 0000000000000000 R09: 0000000000000000 [ 1504.093754][T26108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1504.093760][T26108] R13: 00007fded6016038 R14: 00007fded6015fa0 R15: 00007fded613fa48 [ 1504.093776][T26108] [ 1504.317394][ T9] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1504.345537][T19352] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1504.355677][T19352] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1504.364619][T19352] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1504.373725][T19352] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1504.376888][ T9] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 1504.443895][T19352] usb 2-1: config 0 descriptor?? [ 1504.454545][T19352] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1504.458967][ T9] usb 4-1: media controller created [ 1504.466656][T19352] dvb-usb: bulk message failed: -22 (3/0) [ 1504.481980][T19352] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1504.494414][T19352] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1504.502244][T19352] usb 2-1: media controller created [ 1504.509065][T19352] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1504.550327][T19352] dvb-usb: bulk message failed: -22 (6/0) [ 1504.561607][T19352] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1504.566115][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1504.587636][T19352] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input151 [ 1504.605231][T19352] dvb-usb: schedule remote query interval to 150 msecs. [ 1504.644771][T19352] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1504.655109][T26102] ------------[ cut here ]------------ [ 1504.661042][T26102] usb 4-1: BOGUS control dir, pipe 80001880 doesn't match bRequestType c0 [ 1504.669577][T26102] WARNING: drivers/usb/core/urb.c:414 at usb_submit_urb+0x1052/0x18b0, CPU#0: syz.1.5261/26102 [ 1504.680068][T26102] Modules linked in: [ 1504.684446][T26102] CPU: 0 UID: 0 PID: 26102 Comm: syz.1.5261 Tainted: G L syzkaller #0 PREEMPT(full) [ 1504.695447][T26102] Tainted: [L]=SOFTLOCKUP [ 1504.699801][T26102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1504.709989][T26102] RIP: 0010:usb_submit_urb+0x1114/0x18b0 [ 1504.715674][T26102] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c2 f2 ff ff 89 e9 [ 1504.735641][T26102] RSP: 0018:ffffc90004a1f708 EFLAGS: 00010246 [ 1504.741733][T26102] RAX: 0000000000000000 RBX: ffff88803161e800 RCX: 0000000080001880 [ 1504.749713][T26102] RDX: ffff8880216da7c0 RSI: ffffffff8c7e9180 RDI: ffffffff901dbae0 [ 1504.757823][T26102] RBP: 1ffff11011df9fa4 R08: 00000000000000c0 R09: 0000000000000000 [ 1504.765919][T26102] R10: ffffc90004a1f800 R11: fffff52000943f0c R12: ffff888044d27100 [ 1504.773948][T26102] R13: ffff88808efcfd20 R14: 0000000080001880 R15: ffff8880216da7c0 [ 1504.781983][T26102] FS: 00007f343c9d56c0(0000) GS:ffff8881254b0000(0000) knlGS:0000000000000000 [ 1504.791087][T26102] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1504.797686][T26102] CR2: 000000110c422353 CR3: 000000004ae34000 CR4: 00000000003526f0 [ 1504.805695][T26102] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1504.813717][T26102] DR3: 00000000c08e0002 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1504.821818][T19355] dvb-usb: bulk message failed: -22 (1/0) [ 1504.821851][T19355] dvb-usb: error while querying for an remote control event. [ 1504.835639][T26102] Call Trace: [ 1504.838931][T26102] [ 1504.841959][T26102] ? __init_swait_queue_head+0xa9/0x150 [ 1504.847558][T26102] usb_start_wait_urb+0x12b/0x510 [ 1504.852675][T26102] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1504.858267][T26102] usb_control_msg+0x232/0x3e0 [ 1504.863141][T26102] gl861_ctrl_msg+0x207/0x420 [ 1504.867878][T26102] ? __pfx_gl861_ctrl_msg+0x10/0x10 [ 1504.873165][T26102] ? apparmor_task_kill+0x1b0/0x4c0 [ 1504.878480][T26102] gl861_i2c_master_xfer+0x439/0x6a0 [ 1504.883877][T26102] __i2c_transfer+0x79a/0x1ee0 [ 1504.888669][T26102] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1504.894683][T26102] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1504.900710][T26102] ? i2c_transfer+0xc8/0x2d0 [ 1504.905322][T26102] i2c_transfer+0x1cc/0x2d0 [ 1504.909822][T26102] i2c_transfer_buffer_flags+0x10d/0x1a0 [ 1504.915589][T26102] ? __lock_acquire+0x6b5/0x2cf0 [ 1504.920593][T26102] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 1504.926758][T26102] ? i2cdev_read+0xe8/0x250 [ 1504.931336][T26102] i2cdev_read+0x10d/0x250 [ 1504.935782][T26102] ? __pfx_i2cdev_read+0x10/0x10 [ 1504.940784][T26102] vfs_read+0x20c/0xa70 [ 1504.944950][T26102] ? __pfx_vfs_read+0x10/0x10 [ 1504.949648][T26102] ? __fget_files+0x2a/0x420 [ 1504.954317][T26102] ? __fget_files+0x2a/0x420 [ 1504.958916][T26102] ? __fget_files+0x3a0/0x420 [ 1504.963650][T26102] ? __fget_files+0x2a/0x420 [ 1504.968271][T26102] ksys_read+0x150/0x270 [ 1504.972586][T26102] ? __pfx_ksys_read+0x10/0x10 [ 1504.977544][T26102] do_syscall_64+0x14d/0xf80 [ 1504.983003][T26102] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1504.989073][T26102] ? trace_irq_disable+0x37/0x100 [ 1504.990607][T19355] dvb-usb: bulk message failed: -22 (1/0) [ 1504.994455][T26102] ? clear_bhb_loop+0x40/0x90 [ 1505.004599][T26102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1505.010557][T26102] RIP: 0033:0x7f343e79bf79 [ 1505.015014][T26102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1505.034802][T26102] RSP: 002b:00007f343c9d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1505.035500][T19355] dvb-usb: error while querying for an remote control event. [ 1505.043241][T26102] RAX: ffffffffffffffda RBX: 00007f343ea16090 RCX: 00007f343e79bf79 [ 1505.043259][T26102] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000009 [ 1505.043273][T26102] RBP: 00007f343e8327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1505.043285][T26102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1505.043298][T26102] R13: 00007f343ea16128 R14: 00007f343ea16090 R15: 00007f343eb3fa48 [ 1505.043331][T26102] [ 1505.043356][T26102] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1505.043374][T26102] CPU: 0 UID: 0 PID: 26102 Comm: syz.1.5261 Tainted: G L syzkaller #0 PREEMPT(full) [ 1505.043401][T26102] Tainted: [L]=SOFTLOCKUP [ 1505.043409][T26102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1505.043419][T26102] Call Trace: [ 1505.043427][T26102] [ 1505.043436][T26102] vpanic+0x1e0/0x670 [ 1505.043469][T26102] panic+0xc5/0xd0 [ 1505.043493][T26102] ? __pfx_panic+0x10/0x10 [ 1505.043531][T26102] __warn+0x315/0x4a0 [ 1505.043555][T26102] ? usb_submit_urb+0x1052/0x18b0 [ 1505.043584][T26102] ? usb_submit_urb+0x1052/0x18b0 [ 1505.043611][T26102] __report_bug+0x29a/0x540 [ 1505.043641][T26102] ? usb_submit_urb+0x1052/0x18b0 [ 1505.043668][T26102] ? __pfx___report_bug+0x10/0x10 [ 1505.043697][T26102] ? lockdep_hardirqs_on+0x7a/0x110 [ 1505.043722][T26102] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1505.043754][T26102] report_bug_entry+0x19a/0x290 [ 1505.043778][T26102] ? usb_submit_urb+0x1114/0x18b0 [ 1505.043802][T26102] ? usb_submit_urb+0x1119/0x18b0 [ 1505.043826][T26102] handle_bug+0xca/0x200 [ 1505.043854][T26102] exc_invalid_op+0x1a/0x50 [ 1505.043881][T26102] asm_exc_invalid_op+0x1a/0x20 [ 1505.043922][T26102] RIP: 0010:usb_submit_urb+0x1114/0x18b0 [ 1505.043949][T26102] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c2 f2 ff ff 89 e9 [ 1505.043967][T26102] RSP: 0018:ffffc90004a1f708 EFLAGS: 00010246 [ 1505.043986][T26102] RAX: 0000000000000000 RBX: ffff88803161e800 RCX: 0000000080001880 [ 1505.044000][T26102] RDX: ffff8880216da7c0 RSI: ffffffff8c7e9180 RDI: ffffffff901dbae0 [ 1505.044015][T26102] RBP: 1ffff11011df9fa4 R08: 00000000000000c0 R09: 0000000000000000 [ 1505.044029][T26102] R10: ffffc90004a1f800 R11: fffff52000943f0c R12: ffff888044d27100 [ 1505.044044][T26102] R13: ffff88808efcfd20 R14: 0000000080001880 R15: ffff8880216da7c0 [ 1505.044075][T26102] ? usb_submit_urb+0x10a3/0x18b0 [ 1505.044106][T26102] ? __init_swait_queue_head+0xa9/0x150 [ 1505.044136][T26102] usb_start_wait_urb+0x12b/0x510 [ 1505.044169][T26102] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1505.044215][T26102] usb_control_msg+0x232/0x3e0 [ 1505.044248][T26102] gl861_ctrl_msg+0x207/0x420 [ 1505.044277][T26102] ? __pfx_gl861_ctrl_msg+0x10/0x10 [ 1505.044299][T26102] ? apparmor_task_kill+0x1b0/0x4c0 [ 1505.044333][T26102] gl861_i2c_master_xfer+0x439/0x6a0 [ 1505.044359][T26102] __i2c_transfer+0x79a/0x1ee0 [ 1505.044385][T26102] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1505.044411][T26102] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1505.044435][T26102] ? i2c_transfer+0xc8/0x2d0 [ 1505.044461][T26102] i2c_transfer+0x1cc/0x2d0 [ 1505.044487][T26102] i2c_transfer_buffer_flags+0x10d/0x1a0 [ 1505.044511][T26102] ? __lock_acquire+0x6b5/0x2cf0 [ 1505.044534][T26102] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 1505.044561][T26102] ? i2cdev_read+0xe8/0x250 [ 1505.044588][T26102] i2cdev_read+0x10d/0x250 [ 1505.044611][T26102] ? __pfx_i2cdev_read+0x10/0x10 [ 1505.044635][T26102] vfs_read+0x20c/0xa70 [ 1505.044667][T26102] ? __pfx_vfs_read+0x10/0x10 [ 1505.044691][T26102] ? __fget_files+0x2a/0x420 [ 1505.044714][T26102] ? __fget_files+0x2a/0x420 [ 1505.044732][T26102] ? __fget_files+0x3a0/0x420 [ 1505.044750][T26102] ? __fget_files+0x2a/0x420 [ 1505.044777][T26102] ksys_read+0x150/0x270 [ 1505.044802][T26102] ? __pfx_ksys_read+0x10/0x10 [ 1505.044835][T26102] do_syscall_64+0x14d/0xf80 [ 1505.044860][T26102] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1505.044878][T26102] ? trace_irq_disable+0x37/0x100 [ 1505.044927][T26102] ? clear_bhb_loop+0x40/0x90 [ 1505.044951][T26102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1505.044971][T26102] RIP: 0033:0x7f343e79bf79 [ 1505.044989][T26102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1505.045006][T26102] RSP: 002b:00007f343c9d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1505.045026][T26102] RAX: ffffffffffffffda RBX: 00007f343ea16090 RCX: 00007f343e79bf79 [ 1505.045041][T26102] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000009 [ 1505.045054][T26102] RBP: 00007f343e8327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1505.045067][T26102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1505.045080][T26102] R13: 00007f343ea16128 R14: 00007f343ea16090 R15: 00007f343eb3fa48 [ 1505.045111][T26102] [ 1505.051217][T26102] Kernel Offset: disabled