last executing test programs: 8m27.710079225s ago: executing program 3 (id=2140): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x4, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x14) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x6) splice(r0, &(0x7f0000000140)=0x100000001, r1, &(0x7f0000000180)=0x7, 0x401, 0x1) fcntl$setpipe(r1, 0x407, 0x775ecad0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0x5, 0x80000001}}, './file0\x00'}) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000200)={r0, r2}) tee(r1, r2, 0x8, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) setsockopt$packet_buf(r2, 0x107, 0x1, &(0x7f0000000240)="53248db89377f36320981eb32429ce406f5acd680ff7facff7b6dc6022e1399792e48ac0bd5b6bc4b83f87373590edca6df1bc23c1e9c337374ebf2cc3696ce537cd2aae402e8473b491f8fee17e78512ee0d2c8b1bdb1b8c9a03dc33c358749b6215fb1d80f416d757664779a3676e2da71aa36", 0x74) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f00000002c0)="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") connect$l2tp6(r2, &(0x7f00000003c0)={0xa, 0x0, 0xfffffffc, @mcast1, 0x1, 0x2}, 0x20) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000400)={0xe0, 0x3, '\x00', [@enc_lim={0x4, 0x1, 0x6}, @hao={0xc9, 0x10, @empty}, @jumbo={0xc2, 0x4, 0x7}]}, 0x28) sendmsg$nl_route(r2, &(0x7f00000006c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000480)=@ipv6_getroute={0x1ec, 0x1a, 0x8, 0x70bd2a, 0x25dfdbfe, {0xa, 0x10, 0x10, 0xf6, 0x0, 0x0, 0xc8, 0x6, 0x500}, [@RTA_PRIORITY={0x8, 0x6, 0x667}, @RTA_PRIORITY={0x8, 0x6, 0x2}, @RTA_PRIORITY={0x8, 0x6, 0x5}, @RTA_METRICS={0x100, 0x8, 0x0, 0x1, "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"}, @RTA_METRICS={0xb6, 0x8, 0x0, 0x1, "cdc2c373406f71547e450471a19aebfa32f3ab226851c1df13b23d6ee2525906a162494cbb35853f796d2458723d08a9ab23236d8fff6a9ead6d757437fa2e8a931fc179f382132db21436641263649d8030721e1714cda814309b51af46b017734160d876d08370cab7addea8b21c7d2a44f7d7fceb8d26bbe1b0e336cf8360ce2507aafbf4aba7ef1e1ec8d8bbfde0c0a87032e9dc1cf81c6182894241e676d7e68a73a924744fbc8b678f673a8815b0cb"}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4004081}, 0x844) sendmsg$IPSET_CMD_SWAP(r2, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x44, 0x6, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x44) landlock_restrict_self(r2, 0x3) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)={0x94, 0x2, 0x6, 0x0, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7}]}, @IPSET_ATTR_DATA={0x54, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x16}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1d}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x6}, @IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_PROTO={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}]}, 0x94}, 0x1, 0x0, 0x0, 0x4c804}, 0x8004) ioctl$VIDIOC_ENUMOUTPUT(r2, 0xc0485630, &(0x7f00000009c0)={0xae1c, "cd75360b9dcb685001d531dc2117579b2ec4b3e468b3689d01d12be688b91b2d", 0x3, 0x1, 0x101, 0x80000}) bind$unix(r2, &(0x7f0000000a40)=@abs={0x0, 0x0, 0x4e20}, 0x6e) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) fsopen(&(0x7f0000000ac0)='ntfs\x00', 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000b00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000b80)={0x0, r4}, 0x8) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000bc0)={{0x1, 0x1, 0x18, r5, {0x8}}, './file0/file0\x00'}) r7 = fcntl$dupfd(r6, 0x0, r3) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000001) ioctl$VIDIOC_S_FREQUENCY(r7, 0x402c5639, &(0x7f0000000c00)={0x8, 0x1, 0x8000}) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000c40)={0x0, 0x4, 0x20}, &(0x7f0000000c80)=0xc) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000cc0)={r8, @in6={{0xa, 0x4e22, 0x3, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x4}}}, 0x84) 8m27.367791467s ago: executing program 3 (id=2142): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000940)=""/3, 0x3, 0x3, 0x4, 0x0, 0x0, 0xc08}}, 0x120) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}, {0x0, 0x4}], 0x2) (async, rerun: 32) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0) (rerun: 32) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000000)={&(0x7f00000005c0)=[{0xf, 0xc401, 0x4f, &(0x7f0000000340)="2fa4aaca558cf35a3e86a08ad4b578c54a9ec3d2084a95f036c2dab0a8e13b7f4757b2a22bf27639286b466ddcb6b2cae2a5a1d1fe21e06a25b420583e45f7afa4f265a9d9068b1568dedca7f43f25"}], 0x1}) getdents(r0, &(0x7f0000000240)=""/208, 0xd0) syz_usb_control_io$uac1(r1, 0x0, 0x0) (async) write$UHID_DESTROY(r0, &(0x7f0000000200), 0x4) 8m25.973836088s ago: executing program 3 (id=2152): r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0d000000000002fdbf43eb000300000041010000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000000000000000000000000055aaffffff", "f4bd000000801900", [0x0, 0x8000000000000000]}}) 8m25.612233631s ago: executing program 3 (id=2154): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x20d036, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) pivot_root(&(0x7f0000000040)='./file0/../file0/../file0/../file0/../file0\x00', &(0x7f0000000600)='./file0/../file0/../file0/../file0\x00') r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000034709d405f0530c2acb6010203010902120008000000000904000000f2a7cc00"], 0x0) r3 = fanotify_init(0x200, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r3, 0x455, 0x8000003, r4, 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x1, 0x400) ioctl$VIDIOC_QUERYMENU(r5, 0xc040564a, &(0x7f0000000140)={0x1, 0x0, @value}) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0xa0842, 0x0) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000300), 0x280, 0x0) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40043d14, 0xffffffffffffffff) write$FUSE_BMAP(r6, &(0x7f00000001c0)={0x18, 0x0, 0x0, {0x8}}, 0x18) unshare(0x2a020400) r8 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) socket(0x2b, 0x80801, 0x1) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x14, 0x601, 0x0, 0x0, {0x2b, 0xfa}}, 0x14}}, 0x0) r10 = fsmount(r8, 0x0, 0x8) lseek(r10, 0x80002002, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000240)={0x20, 0xe, 0x1, "c5"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000280)={0x40, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000dc0)={0x2c, &(0x7f0000000ac0)={0x0, 0x9}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000880)={0x44, &(0x7f0000000340)=ANY=[@ANYBLOB="201500000000f136fb53c59ae1ffec3833d08e2dff57271e6803a023eb2dac7eef04cf08d42dbf3df77ecece888c3b67e0369384e8a66aa9f2a7f3c563464461d7d5d96023e54f88a491018a5d99ae14636040e4927b5fade0ad17804a6c4920815d325308cadbae4f478094a56f503c0e6b0955461cfffcc6568943790fc5e2207431f0e390968b17d295ffd17d1f693d5426d02f64c13acb7cc56cacdfef46f7604fb4cd767771ab71ad6340a4d710c26dac20cf633a49aa0b95d9cfc7f09eb202a1b4e498ffb715d38f218fde9d2baf1a5662069ba2b28700b3b83ade02e2e77e3663121fafb771223badaf8baddbe5574ea287"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000440)=""/245) 8m23.309303985s ago: executing program 3 (id=2167): pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000440)=[{0x0}, {&(0x7f0000000080)="6a5b3986af4597e55298f14c7f2017060f16a0ac9bf3a54e624ac84ccc7fc7f393c4ece527a20ab460470ed133df2a0d", 0x30}, {0x0}], 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000009c0), 0x42, 0x0) socket$inet6(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x5, 0x200, 0x6385, 0x1ff, 0x1, "82942b6acc6516cd"}) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r3, @ANYRES16=r1], 0x0) 8m20.785700996s ago: executing program 3 (id=2179): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000085}, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd00000080190000000097ffffffffffffff00001800", [0x0, 0x2000000000001]}}) 8m20.198312259s ago: executing program 32 (id=2179): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000085}, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd00000080190000000097ffffffffffffff00001800", [0x0, 0x2000000000001]}}) 4m51.99805283s ago: executing program 1 (id=2954): syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) kexec_load(0x0, 0x0, 0x0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0xff}, 0x1c) mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1) r3 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x1) fchdir(r4) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r5, 0x100, 0x0) getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0x0, 0xff, 0x1c}, 0xc) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f00000001c0)=0x3b) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x10, r1, 0xb35be000) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r8, 0x4068aea3, &(0x7f0000000000)={0xa3, 0x0, 0xfffffffffffffffe}) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r8, 0xc008aec1, &(0x7f0000000240)={0xa, 0x0, [{0x40000001, 0x2, 0x2, 0x5, 0x400, 0x2, 0x3aa}, {0x2, 0x0, 0x0, 0x82e8, 0x200, 0xffffffff, 0x6}, {0x7, 0x9, 0x5, 0x2, 0x0, 0x3, 0x1}, {0xb, 0x6, 0x0, 0x6, 0x8b9b, 0x7, 0x9c1c}, {0xb, 0x7fffffff, 0x0, 0x4, 0x101, 0x5, 0x10000}, {0xd, 0x80000001, 0x3, 0x8001, 0x101, 0x39e, 0x2}, {0xb, 0x4, 0x1, 0x5, 0x807, 0x2, 0x2}, {0xb, 0x5877c6ba, 0x5, 0x0, 0xf1, 0x0, 0x4}, {0x7, 0x7ff, 0x4, 0x18000000, 0x82e, 0x7, 0xd}, {0x1, 0xfffffff8, 0x1, 0xa, 0x5, 0xd0b, 0xd5}]}) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 4m48.94214269s ago: executing program 1 (id=2966): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x10820, 0x400}}, 0x20}}, 0x4084) 4m48.730643631s ago: executing program 1 (id=2969): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[], 0xa8}}, 0x0) 4m48.539157952s ago: executing program 1 (id=2972): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x44000, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000400)=0x4000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000020180)={0x1, 0x0, [{0x15201279be33ada3, 0xb3, &(0x7f000001fc80)=""/179}]}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af04, &(0x7f0000000200)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000280)=0x1) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) (async) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x44000, 0x0) (async) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000400)=0x4000000) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000020180)={0x1, 0x0, [{0x15201279be33ada3, 0xb3, &(0x7f000001fc80)=""/179}]}) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af04, &(0x7f0000000200)) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000280)=0x1) (async) 4m48.357331073s ago: executing program 1 (id=2975): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x4e23, 0x5, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}, 0xa5}, 0x1c) listen(r4, 0x50) listen(r3, 0x5) syz_emit_ethernet(0x4f, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6c2d01000019840100000000000000000002000000010102fe8000000000000000000000000000aaa5ba94e385673ccfd3fe184ab0643975bcc85fbf438632261b"], 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x101301) ioctl$USBDEVFS_ALLOC_STREAMS(r5, 0x8008551c, &(0x7f0000000580)=ANY=[@ANYRES32=r1, @ANYRES64=r2]) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x33b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x5, [{{0x9, 0x4, 0x0, 0xf7, 0x2, 0x3, 0x1, 0x1, 0x4, {0x9, 0x21, 0x0, 0x57, 0x1, {0x22, 0xb69}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x5, 0xff}}}}}]}}]}}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000100)={0x5, 0x0, 0x5, 0x4000}) socket$inet6_sctp(0xa, 0x1, 0x84) socket$unix(0x1, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) close(0x3) syz_open_dev$radio(&(0x7f00000000c0), 0x3, 0x2) syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) r7 = syz_open_dev$loop(&(0x7f0000000280), 0xc2bd, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) write$FUSE_BMAP(r8, &(0x7f00000000c0)={0x18, 0xfffffffffffffff5, 0x0, {0x8000000000000001}}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r8, 0x0, 0xfffffffffffffffb}, 0x75) write$binfmt_misc(r8, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000002c0)={r8, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bc0007008019000000000000000000000000af1e4ccfb7b3cad80004010400", [0x1, 0x2000000000001]}}) ioctl$int_in(r6, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000540)) 4m48.13841896s ago: executing program 1 (id=2978): socket$kcm(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000280)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) membarrier(0x10, 0x0) 4m47.846552883s ago: executing program 33 (id=2978): socket$kcm(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000280)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) membarrier(0x10, 0x0) 3m32.772438606s ago: executing program 6 (id=3259): r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000000040)={0xa, {"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", 0x1000}}, 0x1006) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) r3 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x1) fchdir(r4) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) r5 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) shutdown(r0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$nl_route(0x10, 0x3, 0x0) accept4$vsock_stream(r5, &(0x7f0000000180)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x800) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r8, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r10, 0x69801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x40040c5) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) clock_adjtime(0xffffffd3, &(0x7f00000001c0)) ioctl$NS_GET_OWNER_UID(r5, 0xb704, &(0x7f00000002c0)) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r11, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendto$packet(r6, &(0x7f00000003c0)="11eb534bfc0baf745837da88245c7f7565ec14571e49bf33cc99dbe5f42bed0338fa00b277ae3df1b4489e3ede8a7ffc81a8aa", 0x33, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, r10, 0x1, 0x4, 0x6, @local}, 0x14) 3m32.344631571s ago: executing program 6 (id=3262): socket(0x40000000015, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc4", 0x94}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000001c0)=""/138, 0x8a}, {&(0x7f0000000600)=""/202, 0xca}], 0x2}, 0xf0ff) 3m31.039395978s ago: executing program 6 (id=3268): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}]}, 0x34}}, 0x0) (async) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) (async) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x8, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x2, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000}, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x38, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r6, 0x0, 0x1114}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, 0x100, 0xac}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) (rerun: 32) syz_io_uring_setup(0xb, 0x0, 0x0, &(0x7f00000000c0)) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000050900010073797a310000000008000540000000020900020073797a310000000008004a40fffffffc0800034000000014400000000c0a010100000000000000000a0000060913020073797a31000000000900010073797a310000000014000380100000800c00018006000100d1030000140000001100010000000000000000000100000a"], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x5) sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) (async) socket$nl_generic(0x10, 0x3, 0x10) 3m30.509627747s ago: executing program 6 (id=3269): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async, rerun: 32) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) (rerun: 32) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='\x00', 0x89901) (async, rerun: 32) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (rerun: 32) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) (async) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x8000000000000001, 0x1c1280) (async, rerun: 64) setsockopt$inet_mreq(r0, 0x0, 0x2403c2405eb5dd84, &(0x7f0000000200)={@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x8) (rerun: 64) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000440)={r2, 0x0, {0x0, 0x0, 0x0, 0x400, 0xfff, 0x0, 0x0, 0x0, 0x1c, "339f021fbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c18e8438ef65000070ac47b21b3aa39500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200000000000000000000000200"}}) (async, rerun: 64) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c000000020601010000000000000000000000000900020073797a3000000000050001000600000005000500000000000500040000000000140007800800114000000000050015007a8537350d000300686173683a6d6163"], 0x5c}, 0x1, 0x0, 0x0, 0x81}, 0x4000) 3m30.198237076s ago: executing program 6 (id=3273): r0 = syz_clone3(&(0x7f00000003c0)={0x200, &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000180), {0x6}, &(0x7f00000001c0)=""/133, 0x85, &(0x7f0000000280)=""/147, &(0x7f0000000380)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0], 0xa}, 0x58) syz_open_procfs$pagemap(r0, &(0x7f0000000440)) socket$kcm(0x2, 0x200000000000001, 0x106) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) openat$sysfs(0xffffffffffffff9c, 0x0, 0x395180, 0x149) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$netlink(0x10, 0x3, 0xf) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) close_range(r2, 0xffffffffffffffff, 0x3f00000000000000) 3m29.894990254s ago: executing program 6 (id=3274): socket(0x27, 0x800, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000180)={r3, 0x1, 0x2}, 0x8) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000000000) ioctl$FS_IOC_GETVERSION(r4, 0x40015b0b, &(0x7f0000000040)) 3m29.189625499s ago: executing program 34 (id=3274): socket(0x27, 0x800, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000180)={r3, 0x1, 0x2}, 0x8) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000000000) ioctl$FS_IOC_GETVERSION(r4, 0x40015b0b, &(0x7f0000000040)) 11.933000336s ago: executing program 2 (id=4098): unshare(0x26020480) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socket$alg(0x26, 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x1e, 0x4, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000240)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x6000}}) write$FUSE_DIRENTPLUS(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000", @ANYRES64=r3], 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r5, 0x0, 0xf3a, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x2710, @local}, 0xffffffffffffff1a) r6 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x1320, 0x2000, 0x5fffffff}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r1, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r6, 0x47f5, 0x0, 0x0, 0x0, 0x0) 11.793364758s ago: executing program 0 (id=4100): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) (async) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d000000000001000000000000000141"], 0x38}}, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d000000000001000000000000000141"], 0x38}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e21, @multicast2}, 0x45) (async) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e21, @multicast2}, 0x45) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setxattr$security_capability(0x0, &(0x7f0000000100), 0x0, 0x0, 0x1) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x3) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000440)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000440)) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="072d155de34e7a000000", @ANYRES16=r9, @ANYRESOCT=0x0, @ANYRES64=r5, @ANYRESDEC=r4], 0x2c}, 0x1, 0x0, 0x0, 0x2000c880}, 0x20064800) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) socket(0x8000000010, 0x2, 0x0) 9.218574339s ago: executing program 0 (id=4104): r0 = semget$private(0x0, 0x1, 0x2) semctl$GETNCNT(r0, 0x1, 0xe, &(0x7f0000000000)=""/116) r1 = semget(0x2, 0x1, 0x102) semctl$GETPID(0x0, 0x3, 0xb, &(0x7f0000000080)=""/107) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f0000000100)=""/4096) r2 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r2, &(0x7f0000001100)={0x2, 0x4e22, @private=0xa010101}, 0x10) semctl$GETVAL(r0, 0x3, 0xc, &(0x7f0000001140)=""/24) r3 = getpid() r4 = syz_open_procfs(r3, &(0x7f0000001180)='net/icmp6\x00') r5 = open_tree(0xffffffffffffff9c, &(0x7f00000011c0)='./file0\x00', 0x19800) ioctl$EXT4_IOC_SETFSUUID(r5, 0x4008662c, &(0x7f0000001200)={0x0, 0x0, "887b82f4463530383b36bfa295608bce"}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x1a, &(0x7f0000001240)=@raw=[@jmp={0x5, 0x0, 0x0, 0xd, 0x8, 0x30, 0xffffffffffffffff}, @generic={0x8, 0x6, 0x1, 0xd3bb, 0x4}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x4}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf274936d}}, @ldst={0x0, 0x2, 0x2, 0x7, 0x3, 0xffffffffffffffe0, 0xfffffffffffffff0}], &(0x7f0000001340)='syzkaller\x00', 0xf04e65ce, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000001380)={0x6, 0x1}, 0x8, 0x10, &(0x7f00000013c0)={0x4, 0xf, 0x2, 0xa648976}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000001400)=[r4], &(0x7f0000001440)=[{0x4, 0x2, 0x9, 0x2}, {0x1, 0x5, 0xe, 0x2}, {0x3, 0x4, 0x9, 0xa}, {0x5, 0x2, 0x7, 0x1}, {0x5, 0x2, 0xf, 0x4}, {0x4, 0x2, 0xa}, {0x8, 0x3, 0x7, 0x2}], 0x10, 0xfffffff8}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001580)={r6, 0x0, 0x25, 0x16, @void}, 0x10) r7 = socket$nl_audit(0x10, 0x3, 0x9) r8 = gettid() sendmsg$AUDIT_SET(r7, &(0x7f0000001680)={&(0x7f00000015c0), 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x3c, 0x3e9, 0x100, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x2, r8, 0x5, 0xffff, 0x9, 0x2, 0x0, 0x1ff, 0x5}, ["", "", "", "", "", ""]}, 0x3c}}, 0x8800) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x4) ptrace$ARCH_SET_GS(0x1e, r3, &(0x7f00000016c0), 0x1001) semctl$IPC_RMID(r1, 0x0, 0x0) r9 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(r9, 0x65, 0x4, &(0x7f0000001700), &(0x7f0000001740)=0x4) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) bind$can_raw(r4, &(0x7f0000001780), 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000001840)={'syztnl0\x00', &(0x7f0000001800)={'gre0\x00', 0x0, 0x20, 0x40, 0x10000, 0x8d0, {{0x7, 0x4, 0x2, 0x4, 0x1c, 0x66, 0x0, 0x5, 0x4, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x1a}, {[@lsrr={0x83, 0x7, 0x5f, [@multicast1]}]}}}}}) sendmsg$nl_route(r10, &(0x7f0000001980)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001940)={&(0x7f0000001880)=@ipv6_getaddrlabel={0x8c, 0x4a, 0x10, 0x70bd2b, 0x25dfdbfc, {0xa, 0x0, 0x1f, 0x0, r11, 0xcad}, [@IFAL_LABEL={0x8, 0x2, 0x2}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}, @IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFAL_ADDRESS={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFAL_LABEL={0x8, 0x2, 0x5}, @IFAL_LABEL={0x8, 0x2, 0x2}, @IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFAL_LABEL={0x8}]}, 0x8c}}, 0x24044000) openat$cgroup_ro(r5, &(0x7f00000019c0)='rdma.current\x00', 0x0, 0x0) semtimedop(r0, &(0x7f0000001a00)=[{0x4, 0xff, 0x1800}], 0x1, &(0x7f0000001a40)={0x77359400}) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f0000001d00)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001b00)={0x194, 0x0, 0x0, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x49}}}}, [@NL80211_ATTR_TESTDATA={0x84, 0x45, "069093094d44810f91a390f172e9aa005089ee6dac2d209bff4268659b5d9a1b05f08ab9bc67d5cd812cbaf2e919630f67af38884ac89a0924a4867feba46c72aafdff8aa05de314fee33b21a6235e2f373f0e1fd802ebd5d141d95a14117e4f2527e278995a7d9b4b5228efb6056aff5360007404280b1c8bd56dd73841f7ab"}, @NL80211_ATTR_TESTDATA={0x4}, @NL80211_ATTR_TESTDATA={0x83, 0x45, "82bfaf6708562b18c73e32c5f697e54ede13a75de0dfe0d7f814035dadbde3198891bbdf184f6da5eb2dd1ae3a0c654b51edbb14d1c288cdf1ff2c693b1efe8f0ed006c4881b5209e4e31ead70405185a83db8c882a333884725692b406c3dfe4d1fc36b8e4bac18670977c554a02d28c345e1e50b0b4bfacef8545a447175"}, @NL80211_ATTR_TESTDATA={0x67, 0x45, "859d9d01cf389b5936d6ae8f62846809d8b9a09207a0f757407506692e1e1a2293cc628868cc5b935b48f490b700ec3aec5241833c1d862bdc1a0deab3cf69d8bc8599c6b51f962ab63cd31328621e65d015a0c685e4773112bde91736c86181a38dfa"}]}, 0x194}, 0x1, 0x0, 0x0, 0x4}, 0x0) 9.072031108s ago: executing program 0 (id=4105): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x58, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0xa2bc, 0x20000000, 0x2, 0xd57, 0x2, {0x2, 0x1, 0x4, 0xd, 0x1000}, {0x0, 0x0, 0x45, 0xcc1, 0xffff, 0x80000000}, 0x100, 0x3, 0x8}}]}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x8848}, 0x80) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005f8bfa4099115268345701020301090212000100000000090499", @ANYRES16, @ANYBLOB="09efbaddab6f7813c1d64eaa4aff6f6a"], 0x0) 8.659868998s ago: executing program 2 (id=4107): r0 = fsopen(&(0x7f0000001e80)='zonefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='source', &(0x7f0000000100)='\\\x8b\x00', 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB="400f5c29f331fc6ad101997b7dce"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) socket$vsock_stream(0x28, 0x1, 0x0) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' 00000000000000000000\nVOLUME\nLINE\nMONITOR\nCD'], 0x86) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r4, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f00000000c0)=0x5) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x8, 0xa2c65) ioctl$SNDCTL_DSP_POST(r6, 0x5008, 0x0) socket$key(0xf, 0x3, 0x2) 8.546854985s ago: executing program 4 (id=4108): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x404, 0x9}, 0x50) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@enum64={0xd, 0x2, 0x0, 0x13, 0x0, 0x8, [{0xf}, {0xb, 0x0, 0x2}]}]}, {0x0, [0x0, 0x30, 0x0, 0x0, 0xe, 0x5f]}}, &(0x7f0000000240)=""/204, 0x44, 0xcc, 0x1, 0xe, 0x10000}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x21, 0x3, 0x4, 0x801, 0x1, r0, 0x15b4}, 0x50) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x119440, 0x0) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000140), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) close(0x3) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r1, &(0x7f0000000900)}, 0x20) 8.358382834s ago: executing program 4 (id=4111): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) 8.288803982s ago: executing program 4 (id=4112): keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0xe1) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000080)=0x0) ptrace(0x4207, r3) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ptrace$setregset(0x4205, r2, 0x1, &(0x7f0000000100)={0x0}) close_range(r1, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="120100003ca12a102c105161e644000000010902120701000000000904"], 0x0) 8.144873589s ago: executing program 0 (id=4113): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x404, 0x9}, 0x50) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x3, 0x4, 0x801, 0x1, r0, 0x15b4}, 0x50) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x119440, 0x0) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000140), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) close(0x3) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r1, &(0x7f0000000900), 0x0, 0x20}, 0x20) 7.981126215s ago: executing program 0 (id=4114): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) socket(0x10, 0x803, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) quotactl$Q_GETFMT(0xffffffff80000401, &(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f00000001c0)) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x9, 0x9, 0x0, 0xb4b, 0x5, 0x8, 0x2, 0x6}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003d) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000140)) unshare(0x2000000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r3, &(0x7f0000000000)="2fc193a4aad3ab7ca088612100", 0xd) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) bind$packet(0xffffffffffffffff, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x25) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r5, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x3, 0x8, 0x7f, 0x1, 0x0, 0x2, 0xfffffffffffff804, 0x0, 0x0, 0x0, 0x2000000000000, 0x7, 0x6, 0x1, 0x4], 0xeeef0000, 0x4fb40}) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0xc002}, 0x81) socket$nl_generic(0x10, 0x3, 0x10) 7.477744648s ago: executing program 4 (id=4116): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffffe) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x0, 0x1}}, 0x20) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000003d80), 0x2, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000400000109022400010000000009040000010300020009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000000)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00!\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000001500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="200103"], 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000002140)=ANY=[@ANYBLOB='@\r\r'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000002100)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000002000)={0x20, 0x1, 0xd, "b68ef1c291785b8e54bef54eed"}, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x1, 0xd, "1b5f16d1fd98e4568487f083be"}, 0x0}) ioctl$VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000040)={0x6, 0x33565348, 0x3, @discrete={0xaed99892, 0x77}}) r4 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r4, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/17, 0x11}, 0x4000007}], 0x1, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x8, 0x0, @void}}}}}}}, 0x0) keyctl$read(0xb, r0, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) 6.422167378s ago: executing program 5 (id=4121): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0xc0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) syz_io_uring_setup(0x893, &(0x7f0000000140)={0x0, 0xaee2, 0x2, 0x2, 0x8000016f}, 0x0, &(0x7f0000000240)) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000"], 0x0) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) openat$cgroup_pressure(r2, &(0x7f0000000140)='memory.pressure\x00', 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x6a040000) mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = gettid() ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r4, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r6], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 5.988692732s ago: executing program 7 (id=4122): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x2000c810}, 0x0) 5.689707411s ago: executing program 7 (id=4123): socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x7fff, 0x20, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x25dfdbff, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@loopback, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000f10000000bfc00000002000000000040"], 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000300)={0x0, 0x0}) ptrace$cont(0x1f, r5, 0x100, 0x4) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018000100feffffff0001000000000000000000000000ffffe0000002fc0100000000000000000000000000010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff000000008000000000"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f0000000740), 0x0, 0x0, 0x0, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000180)="10031400e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r8}, 0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x17, &(0x7f0000000480)=0x1d, 0x4) openat$nci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) sendmsg$nl_route(r9, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) 4.694905958s ago: executing program 0 (id=4124): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="0c0002"], 0x24}}, 0x0) 4.366265621s ago: executing program 2 (id=4126): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) syz_open_dev$dri(0x0, 0x1, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x38, r6, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}]}, 0x38}}, 0x40) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="c40000001300e99926bd700000000000fe8000000000000000000000000000aae000000100000000000000000000000000000000000000010a0000100c000000", @ANYRES32=0x0, @ANYRES32=0xee01], 0xc4}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f62726964676500140001007767320000"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) io_setup(0x1, &(0x7f00000016c0)=0x0) ioctl$SIOCGETSGCNT(r4, 0x89e1, &(0x7f0000000100)={@local, @remote}) io_submit(r9, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x5}]) sendfile(r3, r4, 0x0, 0x20000023896) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x150, 0x1a, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in=@remote, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x543}, {0x20004, 0x7fffffffffffffff, 0x0, 0xfffffffffffffffd}, {}, 0x70bd28, 0x3500, 0xa, 0x4}, [@algo_aead={0x5f, 0x12, {{'rfc4543(morus1280-avx2)\x00'}, 0x98, 0x60, "217d66d38547aa140db8a200000000c538c7cb"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x880}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x1) 4.26523353s ago: executing program 4 (id=4127): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) io_setup(0x222, &(0x7f0000000180)=0x0) r4 = eventfd2(0x1, 0x80800) io_submit(r3, 0x1, &(0x7f00000005c0)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x4000, r2, &(0x7f00000001c0)="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", 0x200, 0x200, 0x0, 0x1, r4}]) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r7, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0xfffffffd, 0x5}, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r8, 0x0, 0x1, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x32c180) socket(0x10, 0x803, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000200)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa, 0x0, 0x6, 0x0, 0x185877a4, 0x10200}) sendmsg$kcm(r9, 0x0, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602240000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000001280)=@mangle={'mangle\x00', 0x2, 0x6, 0x5a0, 0x350, 0x280, 0x1b0, 0x280, 0x560, 0x560, 0x560, 0x560, 0x560, 0x560, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0xf8, 0x120, 0x0, {0x7a00000010000000}, [@common=@inet=@multiport={{0x50}}]}, @HL={0x28}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2a}, @dev, [], [], 'veth1_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x5, 0x0, 0x52}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xf}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'netdevsim0\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback, 0xfc}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x600) r11 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r11, 0xc004500a, &(0x7f0000000000)) ioctl$sock_SIOCGIFCONF(r8, 0x8912, &(0x7f00000000c0)=@buf) 3.361400429s ago: executing program 5 (id=4128): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x261, 0x40000036, r0, 0x0) fanotify_mark(r1, 0x641, 0x8000001, r0, 0x0) syz_usb_connect(0x5, 0x4c, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201100335fe6510ca1a8eb232920102030109023a00010d019002090432a70201039e08090588061000060408082387ac33afe3410725010305f8040905070200020402660725"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) add_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="919b7ac2c4b3c134f5135f80cc73ecd1c1e216d421e52df6e73c8037", 0x1c, 0xfffffffffffffffe) 3.316391986s ago: executing program 7 (id=4129): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000085}, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000000000005245001800", [0x0, 0x2000000000001]}}) 2.833846798s ago: executing program 7 (id=4130): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_xfrm(0x10, 0x3, 0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$IOMMU_DESTROY$ioas(0xffffffffffffffff, 0x3b80, &(0x7f00000006c0)={0x8}) r4 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0xe3aa, 0x400, 0x1, 0x161}, &(0x7f00000001c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x8, 0x0, @fd_index=0x4, 0xffffffffffffffff, 0x0}) io_uring_enter(r4, 0x47ba, 0x3e82, 0x8, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x2d03629c, 0x0, 0x9, 0x40000000000, 0xfffffe0000000001, 0x10000000, 0xffffffff}, 0x0) syz_open_dev$video4linux(0x0, 0x3, 0x3cf281) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) syz_80211_join_ibss(&(0x7f0000000200)='wlan0\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) openat$audio1(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, 0x0) process_vm_writev(0x0, &(0x7f00000008c0), 0x0, &(0x7f0000000d40)=[{&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000940)=""/184, 0xb8}, {&(0x7f0000000700)=""/231, 0xe7}, {&(0x7f0000000b00)=""/12, 0xc}, {&(0x7f0000000500)=""/205, 0xcd}, {&(0x7f0000000300)=""/247, 0xf7}], 0x4, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') fchdir(r7) 1.380218079s ago: executing program 4 (id=4131): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x7, 0xfa0e, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x1ff, @local}, {0xa, 0x0, 0x0, @empty}, 0x5, {[0x0, 0x0, 0x0, 0x0, 0x8000000]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e24, 0x100, @local, 0x4}, {0xa, 0x4e23, 0x7, @empty, 0xd473}, 0x0, {[0x4, 0x7, 0x3, 0x8001, 0xe10, 0xe, 0x3]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x427}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f00000002c0)={r6, @in={{0x2, 0x4e21, @multicast2}}, 0x5, 0x1d43}, &(0x7f0000000140)=0x90) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="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"], 0x1c}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r7 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IMADDTIMER(r7, 0x80044940, &(0x7f0000000080)=0x14) ioctl$IMDELTIMER(r7, 0x80044941, &(0x7f0000000280)=0x1) 1.318321299s ago: executing program 2 (id=4132): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc4}}, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='ns\x00') getdents(r1, &(0x7f0000000000)=""/39, 0x82) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYRESDEC=r1], &(0x7f0000000240)='syzkaller\x00'}, 0x94) (async, rerun: 32) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x10480, 0x0) (rerun: 32) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r1, r2, 0x1a, 0x0, @val=@uprobe_multi={&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)=[0xffffffffffffffff, 0x5, 0xaf3, 0x8], &(0x7f00000002c0)=[0x2, 0x2], 0x4, 0x4, 0x1}}, 0x40) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x1000}) 1.117736887s ago: executing program 2 (id=4133): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x18000000, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x2000c810}, 0x0) 1.070469969s ago: executing program 5 (id=4134): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x0, 0x240087f9, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) bind$inet(r2, &(0x7f0000000300)={0x2, 0x4e20, @loopback}, 0x10) write$UHID_INPUT(r1, &(0x7f00000011c0)={0xfc, {"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", 0x1000}}, 0x1006) ioctl$VT_DISALLOCATE(r0, 0x5608) 684.602154ms ago: executing program 5 (id=4135): prlimit64(0x0, 0x7, &(0x7f00000003c0), 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = socket(0x40000000015, 0x5, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) getsockopt(r0, 0x200000000114, 0x8, &(0x7f0000019580)=""/102400, &(0x7f0000000000)=0x19000) 535.897526ms ago: executing program 7 (id=4136): writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="39e8dcfa461ac09e8a722e34d7e484893ffa560200133b1b00003f210000001770faf047145bc79e0b9971bcbedac0eeaf3300000000000000000000cab0312cf6b68ced50ac2b5546216e3ce964359fa4ea01a34f038f38509172feed11b0fd62fd47a9d236813b4ebda3ebdd33aec5ea71251a0651345627e476fa4b9c478f296d2457c7d362ae632c70c3e21690c445f0be021cfeb01fb01d1067fd8649a829d29876de4ff1a0b79a857865968344af10f218279d2ccacfdb652a0c7b", 0xbe}], 0x1) r0 = syz_open_dev$sg(&(0x7f0000001bc0), 0x208, 0x2c40) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000100)="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") ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r0]) 279.12389ms ago: executing program 2 (id=4137): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x7, 0xfa0e, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@ipv6_delrule={0x2c, 0x21, 0x121, 0x0, 0x1, {0xa, 0x0, 0x0, 0x2}, [@FIB_RULE_POLICY=@FRA_TABLE={0x8}, @FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0xfffffffd}]}, 0x2c}}, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)={0x1c, r4, 0x301, 0x0, 0x0, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x1c}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r6 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IMADDTIMER(r6, 0x80044940, &(0x7f0000000080)=0x14) ioctl$IMDELTIMER(r6, 0x80044941, &(0x7f0000000280)=0x1) 231.990724ms ago: executing program 7 (id=4138): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'macvlan1\x00', 0x0}) syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f0000000100)) (async) r3 = syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0, 0x80002080}) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0, 0x80002080}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab0", 0x19}], 0x1}}], 0x1, 0xc0) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab0", 0x19}], 0x1}}], 0x1, 0xc0) io_uring_enter(r3, 0xd81, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="67e080f97ff6f16d08000a00", @ANYRES32=r2, @ANYBLOB="08000500", @ANYRES32=r2, @ANYBLOB="140012800b0001006d6163736563"], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x40, 0xf1, [{{0x9, 0x4, 0x0, 0x26, 0x2, 0x7, 0x1, 0x2, 0x10, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x4, 0x9e, 0x5}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x75, 0x9}}]}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x8, 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}]}, @IPSET_ATTR_FAMILY={0x3, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4084}, 0xc000) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f00000000c0)={{}, {}, [{}], {0x4, 0x1}, [], {0x10, 0x6}}, 0x2c, 0x0) (async) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f00000000c0)={{}, {}, [{}], {0x4, 0x1}, [], {0x10, 0x6}}, 0x2c, 0x0) getxattr(&(0x7f0000000140)='./bus\x00', &(0x7f00000001c0)=@known='system.posix_acl_access\x00', &(0x7f0000000400)=""/254, 0x145) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='ns\x00') statx(r7, &(0x7f0000000680)='.\x00', 0x0, 0x0, &(0x7f0000000080)) syz_usb_connect$uac1(0x5, 0xd2, &(0x7f0000000700)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc0, 0x3, 0x1, 0x9, 0xd0, 0xb, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x80}, [@processing_unit={0xb, 0x24, 0x7, 0x2, 0x5, 0xde, "3d86b61d"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x86, 0x2, 0x8, 0xf0, "216632aaa0"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0xf, 0x4, 0x8, 0x2d, "9daa4bc91608"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xfd, 0x3, 0x2, 0x2, "05", "1c"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x1, 0x0, 0x7, {0x7, 0x25, 0x1, 0x0, 0x5, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x3, 0x3, 0x42, 0x9, "57db7e", "80506e"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x7, 0x5, 0x2}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x7fff, 0x0, 0x0, "3c0b78ff45"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x6a, 0x3, 0x79, 0x0, ';r1/'}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x3, 0x4, 0xf, {0x7, 0x25, 0x1, 0x81, 0x1, 0x8}}}}}}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x310, 0x6, 0x5, 0x7, 0x8, 0x4}, 0x16, &(0x7f0000000340)={0x5, 0xf, 0x16, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0xe, 0xf, 0x0, 0x81}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x5, 0x4, 0xd6a1}]}, 0x2, [{0xc, &(0x7f00000005c0)=@string={0xc, 0x3, "ab6b43aef78a4bdbba58"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x401}}]}) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000040)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x2, 0x3, 0x34, 0x64, 0x0, 0xf, 0x6, 0x0, @remote, @remote, {[@timestamp_addr={0x44, 0xc, 0xb, 0x1, 0x7, [{@multicast2, 0x2}]}]}}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x2, 0x0, 0xe7}}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000fd9e1a40f30c74933bbc0000000109021b000104000000090400004fd4695e00090532825b"], 0x0) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000fd9e1a40f30c74933bbc0000000109021b000104000000090400004fd4695e00090532825b"], 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x24048011}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYRES64=r6], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x40) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r7, 0xc080661a, &(0x7f0000000000)={@desc={0x1, 0x0, @desc3}}) (async) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r7, 0xc080661a, &(0x7f0000000000)={@desc={0x1, 0x0, @desc3}}) 89.6321ms ago: executing program 5 (id=4139): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000085}, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd00000080190000000000000000004b534452001800", [0x0, 0x2000000000001]}}) 0s ago: executing program 5 (id=4140): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x10820, 0x42a}}, 0x20}}, 0x4084) kernel console output (not intermixed with test programs): amed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 999.396590][T15065] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 999.453816][T15065] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 999.486759][T15065] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -61 [ 1000.060130][T19672] __nla_validate_parse: 58 callbacks suppressed [ 1000.060184][T19672] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3628'. [ 1000.793784][T18491] usb 6-1: USB disconnect, device number 68 [ 1001.455744][T19699] delete_channel: no stack [ 1001.515009][T19699] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3637'. [ 1001.795843][T15065] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1001.969829][T15065] usb 3-1: device descriptor read/64, error -71 [ 1002.224979][T15065] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1002.354894][T15065] usb 3-1: device descriptor read/64, error -71 [ 1002.404894][T15820] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 1002.465423][T15065] usb usb3-port1: attempt power cycle [ 1002.554882][ T5919] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1002.562576][T15820] usb 8-1: Using ep0 maxpacket: 16 [ 1002.570134][T15820] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1002.582022][T15820] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1002.603028][T15820] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1002.612554][T15820] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.648180][T15820] usb 8-1: Product: syz [ 1002.655029][T15820] usb 8-1: Manufacturer: syz [ 1002.659667][T15820] usb 8-1: SerialNumber: syz [ 1002.687295][T15820] usb 8-1: config 0 descriptor?? [ 1002.715763][T15820] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1002.725191][ T5919] usb 5-1: Using ep0 maxpacket: 8 [ 1002.730341][T15820] em28xx 8-1:0.0: Audio interface 0 found (Vendor Class) [ 1002.738989][ T5919] usb 5-1: config 2 has an invalid interface number: 31 but max is 0 [ 1002.753945][ T5919] usb 5-1: config 2 has no interface number 0 [ 1002.764034][ T5919] usb 5-1: config 2 interface 31 has no altsetting 0 [ 1002.786993][ T5919] usb 5-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1002.803419][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.812371][T15065] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1002.820184][ T5919] usb 5-1: Product: syz [ 1002.835077][ T5919] usb 5-1: Manufacturer: syz [ 1002.844489][ T5919] usb 5-1: SerialNumber: syz [ 1002.855783][T15065] usb 3-1: device descriptor read/8, error -71 [ 1002.873886][ T5919] ch9200 5-1:2.31: probe with driver ch9200 failed with error -22 [ 1003.100864][T15065] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1003.135594][T15065] usb 3-1: device descriptor read/8, error -71 [ 1003.245232][T15065] usb usb3-port1: unable to enumerate USB device [ 1003.322960][T15820] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 1003.323586][T15820] em28xx 8-1:0.0: Config register raw data: 0xfffffffb [ 1003.527634][T15820] em28xx 8-1:0.0: AC97 chip type couldn't be determined [ 1003.535281][T15820] em28xx 8-1:0.0: No AC97 audio processor [ 1003.582574][ T980] usb 5-1: USB disconnect, device number 79 [ 1005.717456][T15820] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1005.858104][T18491] usb 8-1: USB disconnect, device number 13 [ 1005.865294][T18491] em28xx 8-1:0.0: Disconnecting em28xx [ 1005.873099][T18491] em28xx 8-1:0.0: Freeing device [ 1005.886245][T15820] usb 6-1: Using ep0 maxpacket: 16 [ 1005.895328][T15820] usb 6-1: config 252 has an invalid interface number: 15 but max is 0 [ 1005.909863][T15820] usb 6-1: config 252 has no interface number 0 [ 1005.922500][T15820] usb 6-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1006.024488][T15820] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 1006.039479][T15820] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1006.061251][T15820] usb 6-1: Product: syz [ 1006.072070][T15820] usb 6-1: Manufacturer: syz [ 1006.081348][T15820] usb 6-1: SerialNumber: syz [ 1006.134488][T15820] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1006.885239][T19785] netlink: 104 bytes leftover after parsing attributes in process `syz.7.3660'. [ 1006.907390][T18491] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1007.064872][T18491] usb 5-1: Using ep0 maxpacket: 16 [ 1007.073000][T18491] usb 5-1: config 0 has an invalid descriptor of length 28, skipping remainder of the config [ 1007.093711][T18491] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1007.103344][T18491] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 1007.163795][T18491] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1007.175290][ T13] usb 6-1: Failed to submit usb control message: -110 [ 1007.183015][ T13] usb 6-1: unable to send the bmi data to the device: -110 [ 1007.381512][T18491] usb 5-1: config 0 descriptor?? [ 1007.437953][ T13] usb 6-1: unable to get target info from device [ 1007.479637][ T13] usb 6-1: could not get target info (-110) [ 1007.499639][ T13] usb 6-1: could not probe fw (-110) [ 1007.713339][T19791] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3663'. [ 1008.568961][T19809] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3667'. [ 1008.625036][ T5919] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1008.749945][T19814] netlink: 584 bytes leftover after parsing attributes in process `syz.0.3668'. [ 1008.857954][ T5919] usb 3-1: config 0 has no interfaces? [ 1008.863773][ T5919] usb 3-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1008.883174][ T5919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1008.920413][ T5919] usb 3-1: config 0 descriptor?? [ 1009.255813][T18491] usb 6-1: USB disconnect, device number 69 [ 1009.566444][ T5919] usb 5-1: USB disconnect, device number 80 [ 1009.825835][T15065] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1009.986382][T15065] usb 8-1: Using ep0 maxpacket: 16 [ 1010.000778][T15065] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1010.017151][T15065] usb 8-1: config 1 has an invalid interface number: 26 but max is 1 [ 1010.034330][T15065] usb 8-1: config 1 has an invalid interface number: 89 but max is 1 [ 1010.042845][ T5919] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1010.053832][T15065] usb 8-1: config 1 has an invalid descriptor of length 11, skipping remainder of the config [ 1010.067493][T15065] usb 8-1: config 1 has no interface number 0 [ 1010.083759][T15065] usb 8-1: config 1 has no interface number 1 [ 1010.093604][T15065] usb 8-1: config 1 interface 26 altsetting 213 bulk endpoint 0xC has invalid maxpacket 1023 [ 1010.104625][T15065] usb 8-1: config 1 interface 26 altsetting 213 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 1010.116453][T15065] usb 8-1: config 1 interface 26 altsetting 213 bulk endpoint 0xD has invalid maxpacket 8 [ 1010.126953][T15065] usb 8-1: config 1 interface 26 altsetting 213 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 1010.141294][T15065] usb 8-1: config 1 interface 26 altsetting 213 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 1010.193664][T15065] usb 8-1: config 1 interface 89 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1010.215257][T15065] usb 8-1: config 1 interface 26 has no altsetting 0 [ 1010.225096][T15065] usb 8-1: config 1 interface 89 has no altsetting 0 [ 1010.233620][ T5919] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1010.248620][T15065] usb 8-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice=29.ec [ 1010.262460][ T5919] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1010.273343][T15065] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1010.285782][ T5919] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 1010.297477][T15065] usb 8-1: Product: syz [ 1010.301820][T15065] usb 8-1: Manufacturer: syz [ 1010.307109][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1010.317365][T15065] usb 8-1: SerialNumber: syz [ 1010.326530][ T5919] usb 5-1: config 0 descriptor?? [ 1010.334404][T19826] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1010.351840][T19826] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1010.571829][T19826] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3672'. [ 1010.631928][T15065] usb 8-1: unknown interface protocol 0x7d, assuming v1 [ 1010.650727][T15065] usb 8-1: 26:2 : does not exist [ 1010.716417][T15065] usb 8-1: unknown interface protocol 0x13, assuming v1 [ 1010.735439][T15065] usb 8-1: 89:2 : does not exist [ 1010.784189][T15065] usb 8-1: USB disconnect, device number 14 [ 1010.827102][T19831] netlink: 56745 bytes leftover after parsing attributes in process `syz.4.3673'. [ 1010.867269][ T5919] lg-g15 0003:046D:C222.0037: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.4-1/input0 [ 1010.985686][ T5852] udevd[5852]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.26/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1011.491984][ T5919] usb 3-1: USB disconnect, device number 75 [ 1011.684875][T15065] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1011.855058][T15065] usb 8-1: device descriptor read/64, error -71 [ 1012.096755][T15065] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 1012.144869][ T980] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1012.244917][T15065] usb 8-1: device descriptor read/64, error -71 [ 1012.294974][ T5823] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1012.305802][ T980] usb 3-1: Using ep0 maxpacket: 8 [ 1012.319865][ T980] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 1012.338363][ T980] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1012.352317][ T980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.363088][ T980] usb 3-1: Product: syz [ 1012.367957][T15065] usb usb8-port1: attempt power cycle [ 1012.374385][ T980] usb 3-1: Manufacturer: syz [ 1012.389824][ T980] usb 3-1: SerialNumber: syz [ 1012.397881][ T980] usb 3-1: config 0 descriptor?? [ 1012.417736][ T980] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1012.426162][ T980] usb 3-1: setting power ON [ 1012.432244][ T980] dvb-usb: bulk message failed: -22 (2/0) [ 1012.444549][ T980] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1012.454962][ T5823] usb 6-1: device descriptor read/64, error -71 [ 1012.457437][ T980] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1012.470785][ T980] usb 3-1: media controller created [ 1012.504017][ T980] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1012.531701][ T980] usb 3-1: selecting invalid altsetting 6 [ 1012.540334][ T980] usb 3-1: digital interface selection failed (-22) [ 1012.547513][ T980] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1012.557848][ T980] usb 3-1: setting power OFF [ 1012.562584][ T980] dvb-usb: bulk message failed: -22 (2/0) [ 1012.568968][ T980] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1012.578865][ T980] (NULL device *): no alternate interface [ 1012.659035][ T980] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1012.688354][ T980] usb 3-1: USB disconnect, device number 76 [ 1012.699424][T15820] usb 5-1: USB disconnect, device number 81 [ 1012.735358][T15065] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 1012.748170][ T5823] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1012.788217][T15065] usb 8-1: device descriptor read/8, error -71 [ 1012.905226][ T5823] usb 6-1: device descriptor read/64, error -71 [ 1013.025877][T15065] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 1013.034182][ T5823] usb usb6-port1: attempt power cycle [ 1013.068665][T15065] usb 8-1: device descriptor read/8, error -71 [ 1013.197531][T15065] usb usb8-port1: unable to enumerate USB device [ 1013.389582][ T5823] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1013.422825][ T5823] usb 6-1: device descriptor read/8, error -71 [ 1013.695068][ T5823] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1013.715998][ T5823] usb 6-1: device descriptor read/8, error -71 [ 1013.914410][ T5823] usb usb6-port1: unable to enumerate USB device [ 1014.660207][T19898] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3693'. [ 1014.680993][T19898] openvswitch: netlink: Flow key attr not present in new flow. [ 1014.770166][T19900] openvswitch: netlink: Message has 4836 unknown bytes. [ 1014.828600][T19900] netlink: 'syz.7.3695': attribute type 21 has an invalid length. [ 1014.877424][T19900] netlink: 128 bytes leftover after parsing attributes in process `syz.7.3695'. [ 1014.914903][T19900] netlink: 3 bytes leftover after parsing attributes in process `syz.7.3695'. [ 1014.957723][T19901] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3695'. [ 1015.401346][T19910] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3698'. [ 1015.694860][ T980] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1015.795207][T18491] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1015.857206][ T980] usb 6-1: config 0 has no interfaces? [ 1015.865915][ T980] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1015.877479][ T980] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.890610][ T980] usb 6-1: Product: syz [ 1015.896852][ T980] usb 6-1: Manufacturer: syz [ 1015.901732][ T980] usb 6-1: SerialNumber: syz [ 1015.910161][ T980] usb 6-1: config 0 descriptor?? [ 1015.967482][T18491] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1015.990144][T18491] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1016.005787][T18491] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1016.017232][T18491] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1016.026099][T18491] usb 3-1: SerialNumber: syz [ 1016.183515][ T980] usb 6-1: USB disconnect, device number 74 [ 1016.243835][T18491] usb 3-1: 0:2 : does not exist [ 1016.256477][T18491] usb 3-1: unit 5: unexpected type 0x09 [ 1016.275425][T18491] usb 3-1: USB disconnect, device number 77 [ 1016.370997][ T5852] udevd[5852]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1018.375554][ T5823] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1018.505041][ T5823] usb 5-1: device descriptor read/64, error -71 [ 1018.512025][ T980] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 1018.649651][ T30] audit: type=1326 audit(1766877459.522:2724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19963 comm="syz.0.3715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8631d8f749 code=0x7ffc0000 [ 1018.672833][T15820] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1018.688877][ T30] audit: type=1326 audit(1766877459.522:2725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19963 comm="syz.0.3715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8631d8f749 code=0x7ffc0000 [ 1018.714488][ T30] audit: type=1326 audit(1766877459.522:2726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19963 comm="syz.0.3715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7f8631d8f749 code=0x7ffc0000 [ 1018.720539][ T980] usb 8-1: Using ep0 maxpacket: 8 [ 1018.740429][ T30] audit: type=1326 audit(1766877459.522:2727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19963 comm="syz.0.3715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8631d8f749 code=0x7ffc0000 [ 1018.766986][ T5823] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1018.776435][ T30] audit: type=1326 audit(1766877459.522:2728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19963 comm="syz.0.3715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8631d8f749 code=0x7ffc0000 [ 1018.788406][ T980] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 1018.808874][ T30] audit: type=1326 audit(1766877459.522:2729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19963 comm="syz.0.3715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8631d8f749 code=0x7ffc0000 [ 1018.834831][ T30] audit: type=1326 audit(1766877459.522:2730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19963 comm="syz.0.3715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8631d8f749 code=0x7ffc0000 [ 1018.862589][T15820] usb 6-1: Using ep0 maxpacket: 16 [ 1018.872598][T15820] usb 6-1: config 0 has no interfaces? [ 1018.880775][T15820] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1018.893419][T15820] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1018.901688][ T980] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 1018.904190][T15820] usb 6-1: Manufacturer: syz [ 1018.918146][ T5823] usb 5-1: device descriptor read/64, error -71 [ 1018.924887][ T30] audit: type=1326 audit(1766877459.522:2731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19963 comm="syz.0.3715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8631d8f749 code=0x7ffc0000 [ 1018.950862][ T30] audit: type=1326 audit(1766877459.522:2732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19963 comm="syz.0.3715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f8631d8f749 code=0x7ffc0000 [ 1018.957361][ T6135] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1018.982328][T15820] usb 6-1: config 0 descriptor?? [ 1018.990596][ T980] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 1019.025208][ T5823] usb usb5-port1: attempt power cycle [ 1019.050552][ T980] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1019.060519][ T30] audit: type=1326 audit(1766877459.522:2733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19963 comm="syz.0.3715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8631d8f749 code=0x7ffc0000 [ 1019.097597][ T980] usb 8-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 1019.108477][ T980] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.156535][ T980] usb 8-1: Product: syz [ 1019.163335][ T980] usb 8-1: Manufacturer: syz [ 1019.172244][ T980] usb 8-1: SerialNumber: syz [ 1019.191914][ T980] usb 8-1: config 0 descriptor?? [ 1019.209336][ T980] powermate 8-1:0.0: probe with driver powermate failed with error -5 [ 1019.264869][ T6135] usb 3-1: Using ep0 maxpacket: 16 [ 1019.277879][ T6135] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1019.297275][ T6135] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1019.312882][ T6135] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1019.323300][ T6135] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1019.337180][ T6135] usb 3-1: config 1 interface 1 has no altsetting 0 [ 1019.358062][T19959] netlink: 11 bytes leftover after parsing attributes in process `syz.5.3713'. [ 1019.374950][ T5823] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1019.501602][T15820] usb 8-1: USB disconnect, device number 19 [ 1019.514142][ T6135] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1019.524709][ T6135] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.535240][ T5823] usb 5-1: device descriptor read/8, error -71 [ 1019.561661][T19972] netlink: 276 bytes leftover after parsing attributes in process `syz.0.3717'. [ 1019.571414][T19972] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3717'. [ 1019.619540][T19972] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3717'. [ 1019.629031][ T6135] usb 3-1: Product: syz [ 1019.638548][ T6135] usb 3-1: Manufacturer: syz [ 1019.650209][ T6135] usb 3-1: SerialNumber: syz [ 1019.804709][ T5823] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1019.865613][ T5823] usb 5-1: device descriptor read/8, error -71 [ 1020.018111][ T5823] usb usb5-port1: unable to enumerate USB device [ 1020.173300][ T6135] usb 3-1: USB disconnect, device number 78 [ 1020.384381][ T5852] udevd[5852]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1022.017659][ T980] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1022.190989][T15065] usb 6-1: USB disconnect, device number 75 [ 1022.225107][ T980] usb 3-1: device descriptor read/64, error -71 [ 1022.475165][ T980] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1022.627210][ T980] usb 3-1: device descriptor read/64, error -71 [ 1022.745622][ T980] usb usb3-port1: attempt power cycle [ 1023.106547][ T980] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1023.138502][ T980] usb 3-1: device descriptor read/8, error -71 [ 1023.262277][T20026] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1023.278565][ T5823] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1023.386297][ T980] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1023.415074][ T5823] usb 6-1: device descriptor read/64, error -71 [ 1023.427725][ T980] usb 3-1: device descriptor read/8, error -71 [ 1023.555450][ T980] usb usb3-port1: unable to enumerate USB device [ 1023.655074][ T5823] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1023.784935][ T5823] usb 6-1: device descriptor read/64, error -71 [ 1023.895505][ T5823] usb usb6-port1: attempt power cycle [ 1023.916312][T20046] bridge_slave_0: left allmulticast mode [ 1023.922005][T20046] bridge_slave_0: left promiscuous mode [ 1023.943546][T20046] bridge0: port 1(bridge_slave_0) entered disabled state [ 1023.960591][T20047] netlink: 'syz.0.3742': attribute type 10 has an invalid length. [ 1023.981388][T20046] bridge_slave_1: left allmulticast mode [ 1024.004899][T20046] bridge_slave_1: left promiscuous mode [ 1024.010801][T20046] bridge0: port 2(bridge_slave_1) entered disabled state [ 1024.050051][T20046] bond0: (slave bond_slave_0): Releasing backup interface [ 1024.060941][T20046] bond0: (slave bond_slave_1): Releasing backup interface [ 1024.072569][T20046] team0: Port device team_slave_0 removed [ 1024.086346][ T980] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 1024.108919][T20046] team0: Port device team_slave_1 removed [ 1024.128461][T20046] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1024.138479][T20046] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1024.147528][T20046] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1024.169759][T20047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1024.181844][T20047] team0: Port device bond0 added [ 1024.245060][ T5823] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1024.255762][ T980] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1024.273295][ T980] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1024.284001][ T980] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1024.284018][ T5823] usb 6-1: device descriptor read/8, error -71 [ 1024.305060][ T980] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1024.315842][ T980] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1024.333515][ T980] usb 8-1: config 0 descriptor?? [ 1024.504861][T15065] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1024.514874][ T5823] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1024.536566][ T5823] usb 6-1: device descriptor read/8, error -71 [ 1024.645818][ T5823] usb usb6-port1: unable to enumerate USB device [ 1024.655230][T15065] usb 5-1: Using ep0 maxpacket: 32 [ 1024.663712][T15065] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 1024.680835][T15065] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1024.700115][T15065] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 125, changing to 10 [ 1024.724855][T15065] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 25403, setting to 1024 [ 1024.737949][T15065] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1024.768623][T15065] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1024.779495][T15065] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1024.793958][T15065] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1024.815627][T15065] usb 5-1: Product: syz [ 1024.820399][T15065] usb 5-1: Manufacturer: syz [ 1024.832429][T15065] usb 5-1: SerialNumber: syz [ 1024.844230][ T980] plantronics 0003:047F:FFFF.0038: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 1024.879198][T15065] usb 5-1: config 0 descriptor?? [ 1024.894456][T15065] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1024.913613][T15065] ldusb 5-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 1026.114913][ T9] usb 8-1: reset high-speed USB device number 20 using dummy_hcd [ 1026.156639][T20084] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3750'. [ 1026.832219][T20094] loop9: detected capacity change from 0 to 7 [ 1026.840538][T20094] Dev loop9: unable to read RDB block 7 [ 1026.846844][T20094] loop9: AHDI p3 p4 [ 1026.858695][T20094] loop9: partition table partially beyond EOD, truncated [ 1026.871829][T20094] loop9: p3 size 4227858431 extends beyond EOD, truncated [ 1027.068219][ T5852] udevd[5852]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 1027.217374][T15065] usb 5-1: USB disconnect, device number 86 [ 1027.235676][T20097] loop9: detected capacity change from 0 to 7 [ 1027.238286][T15065] ldusb 5-1:0.0: LD USB Device #1 now disconnected [ 1027.280511][T20097] Dev loop9: unable to read RDB block 7 [ 1027.306064][T20097] loop9: unable to read partition table [ 1027.343222][T20097] loop9: partition table beyond EOD, truncated [ 1027.367877][T20097] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 1027.511323][T20110] vlan3: entered promiscuous mode [ 1027.527835][T20110] bond0: entered promiscuous mode [ 1027.716069][T20114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1027.728965][T20114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1028.084457][T20127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1028.099279][T20127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1028.309361][T15065] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1028.475654][T15065] usb 6-1: Using ep0 maxpacket: 16 [ 1028.823167][T20140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1028.864473][T20142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1028.877595][T20140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1028.877724][T20142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1028.922929][T20142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1028.940244][T20142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1028.940402][T20140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1028.999318][T20140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1031.122146][T15065] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1031.137907][T15065] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1031.160340][T15065] usb 6-1: can't read configurations, error -71 [ 1031.305233][T15820] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1031.325402][ T9] usb 8-1: device descriptor read/64, error -110 [ 1031.456134][T15820] usb 3-1: Using ep0 maxpacket: 8 [ 1031.463249][T15820] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 1031.486902][T15820] usb 3-1: config 0 has no interface number 0 [ 1031.523971][T15820] usb 3-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=be.68 [ 1031.545514][T15820] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.565054][ T9] usb 8-1: reset high-speed USB device number 20 using dummy_hcd [ 1031.566600][T15820] usb 3-1: Product: syz [ 1031.584905][T15065] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1031.625813][T15820] usb 3-1: Manufacturer: syz [ 1031.630788][T15820] usb 3-1: SerialNumber: syz [ 1031.649641][T15820] usb 3-1: config 0 descriptor?? [ 1031.660185][T15820] redrat3 3-1:0.31: Couldn't find all endpoints [ 1031.715198][ T9] usb 8-1: device descriptor read/64, error -32 [ 1031.800909][T15065] usb 6-1: Using ep0 maxpacket: 16 [ 1031.819889][T15065] usb 6-1: config 0 has an invalid interface number: 107 but max is 0 [ 1031.845210][T15065] usb 6-1: config 0 has no interface number 0 [ 1031.855125][T15065] usb 6-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 55, changing to 9 [ 1031.874854][T15065] usb 6-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 8496, setting to 1024 [ 1031.915327][T15065] usb 6-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 1031.941699][T15065] usb 6-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 1031.964623][T15065] usb 6-1: Product: syz [ 1031.973584][T15065] usb 6-1: Manufacturer: syz [ 1031.976009][ T9] usb 8-1: reset high-speed USB device number 20 using dummy_hcd [ 1032.002763][T15065] usb 6-1: SerialNumber: syz [ 1032.025883][ T9] usb 8-1: device descriptor read/8, error -32 [ 1032.074368][T15065] usb 6-1: config 0 descriptor?? [ 1032.087350][T15065] keyspan 6-1:0.107: Keyspan 4 port adapter converter detected [ 1032.105309][T15065] keyspan 6-1:0.107: found no endpoint descriptor for endpoint 81 [ 1032.132271][T15065] keyspan 6-1:0.107: found no endpoint descriptor for endpoint 1 [ 1032.193611][T15065] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 1032.226852][T15065] keyspan 6-1:0.107: found no endpoint descriptor for endpoint 2 [ 1032.275386][T15065] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 1032.304821][ T9] usb 8-1: reset high-speed USB device number 20 using dummy_hcd [ 1032.336609][T15065] keyspan 6-1:0.107: found no endpoint descriptor for endpoint 4 [ 1032.356253][ T9] usb 8-1: device descriptor read/8, error -32 [ 1032.387970][T15065] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 1032.445738][T15820] usb 3-1: USB disconnect, device number 83 [ 1032.466371][T15065] keyspan 6-1:0.107: found no endpoint descriptor for endpoint 6 [ 1032.489818][ T9] raw-gadget.2 gadget.7: failed to queue suspend event [ 1032.503648][T15065] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 1032.522346][T15065] usb 6-1: USB disconnect, device number 81 [ 1032.535770][ T6135] usb 8-1: USB disconnect, device number 20 [ 1032.655858][T15065] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1032.699546][T15065] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1032.699762][ T6135] raw-gadget.2 gadget.7: failed to queue reset event [ 1032.798435][T15065] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1032.835265][ T6135] raw-gadget.2 gadget.7: failed to queue resume event [ 1032.843072][T15065] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1032.873584][T15065] keyspan 6-1:0.107: device disconnected [ 1032.941174][ T6135] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 1032.975152][ C0] raw-gadget.2 gadget.7: ignoring, device is not running [ 1032.995075][ T6135] raw-gadget.2 gadget.7: failed to queue reset event [ 1033.094948][ T6135] raw-gadget.2 gadget.7: failed to queue resume event [ 1033.115325][T20191] loop9: detected capacity change from 0 to 7 [ 1033.186392][T20191] Dev loop9: unable to read RDB block 7 [ 1033.191509][ T6135] usb 8-1: device descriptor read/64, error -32 [ 1033.192101][T20191] loop9: unable to read partition table [ 1033.240236][T20191] loop9: partition table beyond EOD, truncated [ 1033.274850][T20191] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 1033.362165][ T6135] raw-gadget.2 gadget.7: failed to queue suspend event [ 1033.403141][ T6135] raw-gadget.2 gadget.7: failed to queue reset event [ 1033.506182][ T6135] raw-gadget.2 gadget.7: failed to queue resume event [ 1033.604906][ T6135] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 1033.612766][ C0] raw-gadget.2 gadget.7: ignoring, device is not running [ 1033.633615][ T6135] raw-gadget.2 gadget.7: failed to queue reset event [ 1033.716917][ T6135] raw-gadget.2 gadget.7: failed to queue resume event [ 1033.795215][ T6135] usb 8-1: device descriptor read/64, error -32 [ 1033.810020][T20202] geneve2: entered promiscuous mode [ 1033.861766][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.905558][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.935498][ T6135] raw-gadget.2 gadget.7: failed to queue suspend event [ 1033.937787][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.951324][ T6135] usb usb8-port1: attempt power cycle [ 1033.951575][ T6135] raw-gadget.2 gadget.7: failed to queue disconnect event [ 1033.993304][ T6135] raw-gadget.2 gadget.7: failed to queue reset event [ 1034.020266][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.075311][ T6135] raw-gadget.2 gadget.7: failed to queue resume event [ 1034.082835][ T6135] raw-gadget.2 gadget.7: failed to queue reset event [ 1034.147605][T20209] netlink: 'syz.4.3789': attribute type 11 has an invalid length. [ 1034.261147][T20211] macvlan2: entered allmulticast mode [ 1034.281523][T20216] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3791'. [ 1034.292669][ T6135] raw-gadget.2 gadget.7: failed to queue resume event [ 1034.302013][T20211] veth1_vlan: entered allmulticast mode [ 1034.318187][T20216] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3791'. [ 1034.328651][T20211] veth1_vlan: left allmulticast mode [ 1034.378950][ T6308] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1034.403776][ T6135] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 1034.405496][ T6308] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1034.445496][ C0] raw-gadget.2 gadget.7: ignoring, device is not running [ 1034.453329][ T6135] usb 8-1: device descriptor read/8, error -32 [ 1034.464407][T20220] openvswitch: netlink: Flow key attr not present in new flow. [ 1034.466096][ T6308] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1034.523213][ T6308] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1034.564897][ T6135] raw-gadget.2 gadget.7: failed to queue suspend event [ 1034.572279][ T6135] raw-gadget.2 gadget.7: failed to queue reset event [ 1034.623534][T20225] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3794'. [ 1034.667478][ T6135] raw-gadget.2 gadget.7: failed to queue resume event [ 1034.735183][ T6135] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 1034.765055][ C0] raw-gadget.2 gadget.7: ignoring, device is not running [ 1034.772432][ T6135] usb 8-1: device descriptor read/8, error -32 [ 1034.858271][T20230] loop9: detected capacity change from 0 to 7 [ 1034.869621][ T5852] Dev loop9: unable to read RDB block 7 [ 1034.895272][ T5852] loop9: AHDI p3 p4 [ 1034.899298][ T5852] loop9: partition table partially beyond EOD, truncated [ 1034.906610][ T6135] raw-gadget.2 gadget.7: failed to queue suspend event [ 1034.916089][ T5852] loop9: p3 size 4227858431 extends beyond EOD, truncated [ 1034.925431][ T6135] usb usb8-port1: unable to enumerate USB device [ 1034.953248][T20230] Dev loop9: unable to read RDB block 7 [ 1034.963866][T20230] loop9: AHDI p3 p4 [ 1034.968104][T20230] loop9: partition table partially beyond EOD, truncated [ 1034.976386][T20230] loop9: p3 size 4227858431 extends beyond EOD, truncated [ 1035.094635][ T5852] udevd[5852]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 1035.165806][ T5852] udevd[5852]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 1035.554988][ T9] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1036.063327][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 1036.145824][T13959] Bluetooth: hci0: command 0x0406 tx timeout [ 1036.180787][ T9] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 1036.194921][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1036.225001][ T9] usb 3-1: config 0 descriptor?? [ 1036.233422][ T9] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 1036.436181][T20251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1036.482559][ T9] usb 3-1: Detected FT232A [ 1036.489723][ T9] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1036.594596][T20255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1036.644147][T20255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1036.654265][ T9] usb 3-1: USB disconnect, device number 84 [ 1036.689080][T20251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1036.698645][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1036.864879][ T6135] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1036.927115][ T9] ftdi_sio 3-1:0.0: device disconnected [ 1037.068391][ T6135] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 1037.077068][ T6135] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1037.091123][ T6135] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1037.118609][ T6135] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1037.137691][ T6135] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1037.155562][ T6135] usb 5-1: Product: syz [ 1037.163948][ T6135] usb 5-1: Manufacturer: syz [ 1037.173903][ T6135] usb 5-1: SerialNumber: syz [ 1037.198071][ T6135] usb 5-1: config 0 descriptor?? [ 1037.227570][ T6135] hub 5-1:0.0: bad descriptor, ignoring hub [ 1037.244278][ T6135] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1037.294193][ T6135] usb 5-1: selecting invalid altsetting 0 [ 1038.085664][ T980] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1038.425712][ T980] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1038.464852][ T980] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1038.548330][ T980] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1038.590496][ T980] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1038.613685][ T980] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.633529][ T980] usb 6-1: Product: syz [ 1038.644280][ T980] usb 6-1: Manufacturer: syz [ 1038.660348][ T980] usb 6-1: SerialNumber: syz [ 1038.683670][ T980] usb 6-1: config 0 descriptor?? [ 1038.700694][T20267] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 1038.715522][T20267] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 1038.742920][ T980] usb 6-1: ucan: probing device on interface #0 [ 1039.023133][ T980] usb 6-1: ucan: device protocol version 28675 is not supported [ 1039.023155][ T980] usb 6-1: ucan: probe failed; try to update the device firmware [ 1039.323793][T20278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1039.387579][T20278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1039.585634][T15065] usb 5-1: USB disconnect, device number 87 [ 1039.657033][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 1039.657053][ T30] audit: type=1326 audit(1766877480.532:2754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20287 comm="syz.4.3809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62a558f749 code=0x7ffc0000 [ 1039.705484][T20285] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1039.860557][T20293] fuse: Bad value for 'fd' [ 1039.866822][ T30] audit: type=1326 audit(1766877480.532:2755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20287 comm="syz.4.3809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62a558f749 code=0x7ffc0000 [ 1039.950102][ T30] audit: type=1326 audit(1766877480.572:2756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20287 comm="syz.4.3809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f62a558f749 code=0x7ffc0000 [ 1039.980413][T15065] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1039.990714][T15065] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1040.000345][T15065] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1040.030680][ T30] audit: type=1326 audit(1766877480.592:2757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20287 comm="syz.4.3809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f62a558f783 code=0x7ffc0000 [ 1040.042640][T20297] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3812'. [ 1040.063321][ T6135] IPVS: starting estimator thread 0... [ 1040.066892][T15065] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1040.069424][ T980] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1040.186019][T15065] rtc rtc0: __rtc_set_alarm: err=-22 [ 1040.192915][ T30] audit: type=1326 audit(1766877480.592:2758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20287 comm="syz.4.3809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62a558f749 code=0x7ffc0000 [ 1040.197033][T20298] IPVS: using max 38 ests per chain, 91200 per kthread [ 1040.243285][ T30] audit: type=1326 audit(1766877480.592:2759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20287 comm="syz.4.3809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f62a558f749 code=0x7ffc0000 [ 1040.291074][ T30] audit: type=1326 audit(1766877480.592:2760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20287 comm="syz.4.3809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62a558f749 code=0x7ffc0000 [ 1040.305238][ T980] usb 5-1: device descriptor read/64, error -71 [ 1040.367300][ T30] audit: type=1326 audit(1766877480.602:2761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20287 comm="syz.4.3809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f62a558f749 code=0x7ffc0000 [ 1040.454219][ T30] audit: type=1326 audit(1766877480.602:2762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20287 comm="syz.4.3809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62a558f749 code=0x7ffc0000 [ 1040.567618][ T980] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1040.589286][ T30] audit: type=1326 audit(1766877480.602:2763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20287 comm="syz.4.3809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f62a558f749 code=0x7ffc0000 [ 1040.764975][ T980] usb 5-1: device descriptor read/64, error -71 [ 1040.866975][ T5917] usb 6-1: USB disconnect, device number 82 [ 1040.876841][ T980] usb usb5-port1: attempt power cycle [ 1041.214880][ T5917] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 1041.225110][ T980] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1041.257748][ T980] usb 5-1: device descriptor read/8, error -71 [ 1041.407097][ T5917] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1041.429482][ T5917] usb 6-1: New USB device found, idVendor=04f2, idProduct=1123, bcdDevice= 0.00 [ 1041.455064][ T5917] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1041.474207][T20304] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 1041.482748][T20304] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1041.506437][ T980] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1041.516241][ T5917] usb 6-1: config 0 descriptor?? [ 1041.557738][ T980] usb 5-1: device descriptor read/8, error -71 [ 1041.665853][ T980] usb usb5-port1: unable to enumerate USB device [ 1042.067837][ T5917] usbhid 6-1:0.0: can't add hid device: -71 [ 1042.074286][ T5917] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1042.165906][ T5917] usb 6-1: USB disconnect, device number 83 [ 1042.634899][ T5917] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 1042.838751][ T5917] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1042.871383][ T5917] usb 6-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 1042.915941][ T5917] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1042.965871][ T5917] usb 6-1: config 0 descriptor?? [ 1043.436098][ T5917] hid_mf 0003:0079:1846.0039: unknown main item tag 0x0 [ 1043.455808][ T5917] hid_mf 0003:0079:1846.0039: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.5-1/input0 [ 1043.508478][ T5917] hid_mf 0003:0079:1846.0039: Invalid report, this should never happen! [ 1043.534401][ T5917] hid_mf 0003:0079:1846.0039: Force feedback init failed. [ 1043.649284][ T5917] usb 6-1: USB disconnect, device number 84 [ 1043.697598][T20336] loop2: detected capacity change from 0 to 7 [ 1043.704683][T20336] Dev loop2: unable to read RDB block 7 [ 1043.713593][T20336] loop2: unable to read partition table [ 1043.727734][T20336] loop2: partition table beyond EOD, truncated [ 1043.756400][T20333] fido_id[20333]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1043.775018][T20336] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1043.966914][T20340] sctp: [Deprecated]: syz.4.3825 (pid 20340) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1043.966914][T20340] Use struct sctp_sack_info instead [ 1044.174898][ T5917] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1044.191186][T20348] netlink: 220 bytes leftover after parsing attributes in process `syz.4.3827'. [ 1044.205253][T20348] netlink: 220 bytes leftover after parsing attributes in process `syz.4.3827'. [ 1044.220681][T20348] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3827'. [ 1044.335092][ T5917] usb 3-1: Using ep0 maxpacket: 16 [ 1044.342748][ T5917] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1044.375333][ T5917] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 1044.406768][ T5917] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1044.433706][ T5917] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1044.453712][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1044.493300][ T5917] usb 3-1: SerialNumber: syz [ 1044.508838][T20338] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1044.532295][ T5917] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 1044.734872][ T980] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1044.904849][ T980] usb 5-1: Using ep0 maxpacket: 32 [ 1044.919424][ T980] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1044.941762][ T980] usb 5-1: config 0 interface 0 has no altsetting 1 [ 1044.957995][ T980] usb 5-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 1044.990622][ T980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1045.023323][ T980] usb 5-1: SerialNumber: syz [ 1045.048108][ T980] usb 5-1: config 0 descriptor?? [ 1045.091424][ T980] usb-storage 5-1:0.0: USB Mass Storage device detected [ 1045.129057][ T980] usb-storage 5-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 1045.400162][ T980] usb 5-1: USB disconnect, device number 92 [ 1045.877123][T20385] loop2: detected capacity change from 0 to 7 [ 1045.934987][T20387] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 3, id = 0 [ 1045.935020][T20385] Dev loop2: unable to read RDB block 7 [ 1045.952522][T20385] loop2: unable to read partition table [ 1045.958812][T20385] loop2: partition table beyond EOD, truncated [ 1045.991023][T20385] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1046.516522][ T6135] raw-gadget.2 gadget.7: failed to queue reset event [ 1046.584961][ T6135] raw-gadget.2 gadget.7: failed to queue resume event [ 1046.644839][ T6135] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 1046.656448][ C0] raw-gadget.2 gadget.7: ignoring, device is not running [ 1046.663814][ T6135] raw-gadget.2 gadget.7: failed to queue reset event [ 1046.735450][ T6135] raw-gadget.2 gadget.7: failed to queue resume event [ 1046.815203][ T6135] usb 8-1: device descriptor read/64, error -32 [ 1046.944929][ T6135] raw-gadget.2 gadget.7: failed to queue suspend event [ 1046.964542][ T6135] raw-gadget.2 gadget.7: failed to queue reset event [ 1047.044973][ T5917] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 1047.064932][ T6135] raw-gadget.2 gadget.7: failed to queue resume event [ 1047.104498][ T5917] usb 3-1: USB disconnect, device number 85 [ 1047.175212][ T6135] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 1047.225073][ C0] raw-gadget.2 gadget.7: ignoring, device is not running [ 1047.244969][ T6135] raw-gadget.2 gadget.7: failed to queue reset event [ 1047.366409][ T6135] raw-gadget.2 gadget.7: failed to queue resume event [ 1047.455020][ T6135] usb 8-1: device descriptor read/64, error -32 [ 1047.596666][ T6135] raw-gadget.2 gadget.7: failed to queue suspend event [ 1047.606962][ T6135] usb usb8-port1: attempt power cycle [ 1047.633931][ T6135] raw-gadget.2 gadget.7: failed to queue disconnect event [ 1047.668251][ T6135] raw-gadget.2 gadget.7: failed to queue reset event [ 1047.749559][T20412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1047.765532][ T6135] raw-gadget.2 gadget.7: failed to queue resume event [ 1047.783079][T20412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1047.803316][ T6135] raw-gadget.2 gadget.7: failed to queue reset event [ 1048.034891][ T6135] raw-gadget.2 gadget.7: failed to queue resume event [ 1048.302162][ T6135] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 1048.527627][ C0] raw-gadget.2 gadget.7: ignoring, device is not running [ 1048.555106][ T980] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 1048.562760][ T6135] usb 8-1: device descriptor read/8, error -32 [ 1048.685599][ T6135] raw-gadget.2 gadget.7: failed to queue suspend event [ 1048.702257][ T6135] raw-gadget.2 gadget.7: failed to queue reset event [ 1048.724965][ T980] usb 6-1: Using ep0 maxpacket: 8 [ 1048.762410][ T980] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1048.800399][ T980] usb 6-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1048.823479][ T980] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1048.856160][ T6135] raw-gadget.2 gadget.7: failed to queue resume event [ 1048.895998][ T980] usb 6-1: config 0 descriptor?? [ 1048.945222][ T6135] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 1048.995090][ C0] raw-gadget.2 gadget.7: ignoring, device is not running [ 1049.002421][ T6135] usb 8-1: device descriptor read/8, error -32 [ 1049.125265][ T6135] raw-gadget.2 gadget.7: failed to queue suspend event [ 1049.138819][ T6135] usb usb8-port1: unable to enumerate USB device [ 1049.156251][T20435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1049.164955][T20416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1049.173616][T20416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1049.182810][T20435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1049.542687][ T980] raw-gadget.2 gadget.7: failed to queue reset event [ 1049.624941][ T980] raw-gadget.2 gadget.7: failed to queue resume event [ 1049.671905][T20448] bridge0: left promiscuous mode [ 1049.681640][T20448] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1049.697983][ T980] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 1049.707075][ C0] raw-gadget.2 gadget.7: ignoring, device is not running [ 1049.714370][ T980] raw-gadget.2 gadget.7: failed to queue reset event [ 1049.785707][ T980] raw-gadget.2 gadget.7: failed to queue resume event [ 1049.845284][ T980] usb 8-1: device descriptor read/64, error -32 [ 1050.016569][ T980] raw-gadget.2 gadget.7: failed to queue suspend event [ 1050.029216][ T980] raw-gadget.2 gadget.7: failed to queue reset event [ 1050.104950][ T980] raw-gadget.2 gadget.7: failed to queue resume event [ 1050.173541][ T980] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 1050.200596][ C0] raw-gadget.2 gadget.7: ignoring, device is not running [ 1050.208430][ T980] raw-gadget.2 gadget.7: failed to queue reset event [ 1050.285190][ T980] raw-gadget.2 gadget.7: failed to queue resume event [ 1050.327614][T20466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1050.339365][T20465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3856'. [ 1050.344106][T20466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1050.367034][ T980] usb 8-1: device descriptor read/64, error -32 [ 1050.479570][ T980] raw-gadget.2 gadget.7: failed to queue suspend event [ 1050.486978][ T980] usb usb8-port1: attempt power cycle [ 1050.492491][ T980] raw-gadget.2 gadget.7: failed to queue disconnect event [ 1050.516468][ T980] raw-gadget.2 gadget.7: failed to queue reset event [ 1050.664957][ T980] raw-gadget.2 gadget.7: failed to queue resume event [ 1050.672360][ T980] raw-gadget.2 gadget.7: failed to queue reset event [ 1050.737205][T20473] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3858'. [ 1050.797716][ T5917] usb 6-1: USB disconnect, device number 85 [ 1050.926175][ T980] raw-gadget.2 gadget.7: failed to queue resume event [ 1050.994934][ T980] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 1051.015689][ C0] raw-gadget.2 gadget.7: ignoring, device is not running [ 1051.022972][ T980] usb 8-1: device descriptor read/8, error -32 [ 1051.135862][ T980] raw-gadget.2 gadget.7: failed to queue suspend event [ 1051.164568][ T980] raw-gadget.2 gadget.7: failed to queue reset event [ 1051.272549][ T980] raw-gadget.2 gadget.7: failed to queue resume event [ 1051.294132][ T30] audit: type=1326 audit(1766877492.162:2764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20481 comm="syz.5.3862" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f692e58f749 code=0x0 [ 1051.335019][ T980] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 1051.385639][ C0] raw-gadget.2 gadget.7: ignoring, device is not running [ 1051.392965][ T980] usb 8-1: device descriptor read/8, error -32 [ 1051.504932][ T980] raw-gadget.2 gadget.7: failed to queue suspend event [ 1051.511968][ T980] usb usb8-port1: unable to enumerate USB device [ 1051.652593][T20488] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1051.738743][T20490] loop9: detected capacity change from 0 to 7 [ 1051.763758][T20490] Dev loop9: unable to read RDB block 7 [ 1051.786131][T20490] loop9: AHDI p3 p4 [ 1051.797651][T20490] loop9: partition table partially beyond EOD, truncated [ 1051.825545][T20490] loop9: p3 size 4227858431 extends beyond EOD, truncated [ 1051.872301][T20499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1051.925312][T20499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1052.009011][ T5852] udevd[5852]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 1052.043808][T20501] netlink: 'syz.5.3867': attribute type 4 has an invalid length. [ 1052.064489][T20503] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3866'. [ 1052.153332][T20506] netlink: 'syz.5.3867': attribute type 4 has an invalid length. [ 1052.446277][ T5919] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1052.637014][ T5919] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1052.648422][ T5919] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1052.673099][ T5919] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1052.701692][ T5919] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1052.891406][ T5919] usb 6-1: config 0 descriptor?? [ 1053.189925][T20512] tipc: Enabled bearer , priority 0 [ 1053.209117][T20512] syzkaller0: entered promiscuous mode [ 1053.223225][T20512] syzkaller0: entered allmulticast mode [ 1053.253594][T20512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1053.276575][T20512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1053.343642][T20511] tipc: Resetting bearer [ 1053.387701][T20511] tipc: Disabling bearer [ 1053.517673][T20501] netlink: 'syz.5.3867': attribute type 2 has an invalid length. [ 1053.581882][ T5919] usbhid 6-1:0.0: can't add hid device: -71 [ 1053.588910][ T5919] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1053.613926][ T5919] usb 6-1: USB disconnect, device number 86 [ 1053.954914][ T5919] usb 3-1: new full-speed USB device number 86 using dummy_hcd [ 1054.117019][ T5919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1054.147688][ T5919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1054.170845][ T5919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1054.182405][ T5919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1054.202505][ T5919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1054.215820][ T5919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1054.266428][ T5919] usb 3-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 1054.277166][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1054.329602][ T5919] usb 3-1: Product: syz [ 1054.348871][T20520] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3873'. [ 1054.362530][ T5919] usb 3-1: Manufacturer: syz [ 1054.386778][ T5919] usb 3-1: SerialNumber: syz [ 1054.413563][ T5919] usb 3-1: config 0 descriptor?? [ 1054.445268][ T5919] ti_usb_3410_5052 3-1:0.0: TI USB 5052 2 port adapter converter detected [ 1054.455911][ T5919] ti_usb_3410_5052 3-1:0.0: missing endpoints [ 1054.771019][T20527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1054.806018][T20527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1055.026043][ T5919] usb 3-1: USB disconnect, device number 86 [ 1057.156474][T20563] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1057.613480][T20585] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 1057.774853][ T6135] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 1057.905006][ T6135] usb 6-1: device descriptor read/64, error -71 [ 1058.070408][T20596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1058.132140][T20596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1058.165111][ T6135] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 1058.404861][ T6135] usb 6-1: device descriptor read/64, error -71 [ 1058.534103][ T6135] usb usb6-port1: attempt power cycle [ 1058.674941][T20603] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1058.985028][ T6135] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 1059.028189][T20605] netlink: 408 bytes leftover after parsing attributes in process `syz.0.3900'. [ 1059.063093][ T6135] usb 6-1: device descriptor read/8, error -71 [ 1059.293068][T20609] FAULT_INJECTION: forcing a failure. [ 1059.293068][T20609] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1059.315890][ T6135] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 1059.318227][T20609] CPU: 1 UID: 0 PID: 20609 Comm: syz.2.3902 Tainted: G L syzkaller #0 PREEMPT(full) [ 1059.318328][T20609] Tainted: [L]=SOFTLOCKUP [ 1059.318351][T20609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1059.318392][T20609] Call Trace: [ 1059.318423][T20609] [ 1059.318454][T20609] dump_stack_lvl+0xe8/0x150 [ 1059.318540][T20609] should_fail_ex+0x414/0x560 [ 1059.318640][T20609] _copy_from_user+0x2d/0xb0 [ 1059.318716][T20609] __sys_sendto+0x25c/0x520 [ 1059.318790][T20609] ? __pfx___sys_sendto+0x10/0x10 [ 1059.318872][T20609] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 1059.318988][T20609] ? __fget_files+0x3a0/0x420 [ 1059.319092][T20609] ? ksys_write+0x22a/0x250 [ 1059.319156][T20609] ? __pfx_ksys_write+0x10/0x10 [ 1059.319223][T20609] __x64_sys_sendto+0xde/0x100 [ 1059.319298][T20609] do_syscall_64+0xec/0xf80 [ 1059.319355][T20609] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1059.319416][T20609] ? trace_irq_disable+0x37/0x100 [ 1059.319492][T20609] ? clear_bhb_loop+0x60/0xb0 [ 1059.319564][T20609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1059.319631][T20609] RIP: 0033:0x7ff8a518f749 [ 1059.319685][T20609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1059.319739][T20609] RSP: 002b:00007ff8a60b1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1059.319803][T20609] RAX: ffffffffffffffda RBX: 00007ff8a53e5fa0 RCX: 00007ff8a518f749 [ 1059.319856][T20609] RDX: 000000000000000e RSI: 00002000000005c0 RDI: 0000000000000005 [ 1059.319898][T20609] RBP: 00007ff8a60b1090 R08: 00002000000001c0 R09: 0000000000000014 [ 1059.319942][T20609] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000001 [ 1059.319982][T20609] R13: 00007ff8a53e6038 R14: 00007ff8a53e5fa0 R15: 00007ff8a550fa28 [ 1059.320069][T20609] [ 1059.615690][ T6135] usb 6-1: device descriptor read/8, error -71 [ 1059.664492][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.671281][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1059.728986][ T6135] usb usb6-port1: unable to enumerate USB device [ 1060.136468][T20621] IPv6: addrconf: prefix option has invalid lifetime [ 1060.151210][T20625] loop9: detected capacity change from 0 to 7 [ 1060.166039][T20625] Dev loop9: unable to read RDB block 7 [ 1060.173314][T20625] loop9: AHDI p3 p4 [ 1060.177719][T20625] loop9: partition table partially beyond EOD, truncated [ 1060.193335][T20625] loop9: p3 size 4227858431 extends beyond EOD, truncated [ 1060.319492][ T5852] udevd[5852]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 1060.329885][ T6135] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1060.371931][T20630] ksmbd: Unknown IPC event: 0, ignore. [ 1060.508135][ T6135] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1060.508160][ T6135] usb 3-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 1060.508176][ T6135] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1060.508206][ T6135] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1060.510118][ T6135] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1060.510150][ T6135] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1060.510173][ T6135] usb 3-1: Product: syz [ 1060.510190][ T6135] usb 3-1: Manufacturer: syz [ 1060.515713][T20638] FAULT_INJECTION: forcing a failure. [ 1060.515713][T20638] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1060.515751][T20638] CPU: 1 UID: 0 PID: 20638 Comm: syz.7.3914 Tainted: G L syzkaller #0 PREEMPT(full) [ 1060.515782][T20638] Tainted: [L]=SOFTLOCKUP [ 1060.515799][T20638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1060.515813][T20638] Call Trace: [ 1060.515822][T20638] [ 1060.515831][T20638] dump_stack_lvl+0xe8/0x150 [ 1060.515864][T20638] should_fail_ex+0x414/0x560 [ 1060.515904][T20638] _copy_to_user+0x31/0xb0 [ 1060.515934][T20638] simple_read_from_buffer+0xe1/0x170 [ 1060.515967][T20638] proc_fail_nth_read+0x1b3/0x220 [ 1060.515993][T20638] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1060.516019][T20638] ? rw_verify_area+0x2a6/0x4d0 [ 1060.516051][T20638] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1060.516075][T20638] vfs_read+0x200/0xa30 [ 1060.516093][T20638] ? fdget_pos+0x247/0x320 [ 1060.516125][T20638] ? __pfx___mutex_lock+0x10/0x10 [ 1060.516150][T20638] ? __pfx_vfs_read+0x10/0x10 [ 1060.516172][T20638] ? __fget_files+0x2a/0x420 [ 1060.516204][T20638] ? __fget_files+0x3a0/0x420 [ 1060.516230][T20638] ? __fget_files+0x2a/0x420 [ 1060.516265][T20638] ksys_read+0x145/0x250 [ 1060.516289][T20638] ? __pfx_ksys_read+0x10/0x10 [ 1060.516321][T20638] do_syscall_64+0xec/0xf80 [ 1060.516346][T20638] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1060.516366][T20638] ? trace_irq_disable+0x37/0x100 [ 1060.516395][T20638] ? clear_bhb_loop+0x60/0xb0 [ 1060.516421][T20638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1060.516442][T20638] RIP: 0033:0x7fb83e78e15c [ 1060.516461][T20638] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1060.516479][T20638] RSP: 002b:00007fb83f708030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1060.516502][T20638] RAX: ffffffffffffffda RBX: 00007fb83e9e5fa0 RCX: 00007fb83e78e15c [ 1060.516518][T20638] RDX: 000000000000000f RSI: 00007fb83f7080a0 RDI: 0000000000000006 [ 1060.516532][T20638] RBP: 00007fb83f708090 R08: 0000000000000000 R09: 0000000000000014 [ 1060.516546][T20638] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000001 [ 1060.516560][T20638] R13: 00007fb83e9e6038 R14: 00007fb83e9e5fa0 R15: 00007fb83eb0fa28 [ 1060.516594][T20638] [ 1060.521188][ T6135] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1060.592816][T20639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1060.593075][T20639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1060.919965][T20647] openvswitch: netlink: Missing valid actions attribute. [ 1060.920020][T20647] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1060.923375][T20647] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3907'. [ 1060.945569][T20650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1060.945838][T20650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1061.722901][T20659] loop9: detected capacity change from 0 to 7 [ 1061.735951][ T5852] Dev loop9: unable to read RDB block 7 [ 1061.742455][ T5852] loop9: AHDI p3 p4 [ 1061.781182][ T5852] loop9: partition table partially beyond EOD, truncated [ 1061.794431][ T5852] loop9: p3 size 4227858431 extends beyond EOD, truncated [ 1061.816048][T20659] Dev loop9: unable to read RDB block 7 [ 1061.821847][T20659] loop9: AHDI p3 p4 [ 1061.827488][T20659] loop9: partition table partially beyond EOD, truncated [ 1061.836993][T20659] loop9: p3 size 4227858431 extends beyond EOD, truncated [ 1062.043705][ T5852] udevd[5852]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 1062.210919][ T5852] udevd[5852]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 1063.973840][T20683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1063.983538][T15646] usb 3-1: USB disconnect, device number 87 [ 1064.017287][T20683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1064.177092][T20687] netlink: 'syz.5.3931': attribute type 1 has an invalid length. [ 1064.259090][T20683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1064.279341][T20683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1064.290532][ T6135] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1064.542176][ T6135] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1064.574607][ T6135] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1064.678932][ T6135] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1064.767324][ T6135] usb 5-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 1064.794779][ T6135] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1064.812562][ T6135] usb 5-1: Product: syz [ 1064.843995][ T6135] usb 5-1: Manufacturer: syz [ 1064.907836][ T6135] usb 5-1: SerialNumber: syz [ 1064.932522][ T6135] usb 5-1: config 0 descriptor?? [ 1064.948862][ T6135] uvcvideo 5-1:0.0: Found UVC 34.00 device syz (8086:0b5b) [ 1064.957439][ T6135] uvcvideo 5-1:0.0: No valid video chain found. [ 1065.211307][ T30] audit: type=1326 audit(1766877506.082:2765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20679 comm="syz.4.3928" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f62a558f749 code=0x0 [ 1067.000229][ T6135] usb 5-1: USB disconnect, device number 93 [ 1068.079502][T15820] raw-gadget.2 gadget.7: failed to queue reset event [ 1068.159537][T20733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1068.172825][T20733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1068.268698][T15820] raw-gadget.2 gadget.7: failed to queue resume event [ 1068.345027][T15820] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 1068.402154][ C1] raw-gadget.2 gadget.7: ignoring, device is not running [ 1068.417253][T15820] raw-gadget.2 gadget.7: failed to queue reset event [ 1068.495758][T15820] raw-gadget.2 gadget.7: failed to queue resume event [ 1068.503708][T20732] hfs: unable to load iocharset "io#harset" [ 1068.564944][ T5917] usb 5-1: new low-speed USB device number 94 using dummy_hcd [ 1068.574046][T15820] usb 8-1: device descriptor read/64, error -32 [ 1068.685328][T20741] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3942'. [ 1068.705084][T15820] raw-gadget.2 gadget.7: failed to queue suspend event [ 1068.742681][ T5917] usb 5-1: device descriptor read/64, error -71 [ 1068.749475][T15820] raw-gadget.2 gadget.7: failed to queue reset event [ 1068.868758][T15820] raw-gadget.2 gadget.7: failed to queue resume event [ 1068.936079][T15820] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 1068.956618][ C1] raw-gadget.2 gadget.7: ignoring, device is not running [ 1068.964162][T15820] raw-gadget.2 gadget.7: failed to queue reset event [ 1069.005343][ T5917] usb 5-1: new low-speed USB device number 95 using dummy_hcd [ 1069.036026][T15820] raw-gadget.2 gadget.7: failed to queue resume event [ 1069.116070][T15820] usb 8-1: device descriptor read/64, error -32 [ 1069.128764][T20744] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1069.163817][ T5917] usb 5-1: device descriptor read/64, error -71 [ 1069.265343][T15820] raw-gadget.2 gadget.7: failed to queue suspend event [ 1069.285239][ T5917] usb usb5-port1: attempt power cycle [ 1069.292104][T15820] usb usb8-port1: attempt power cycle [ 1069.320487][T15820] raw-gadget.2 gadget.7: failed to queue disconnect event [ 1069.372249][T15820] raw-gadget.2 gadget.7: failed to queue reset event [ 1069.445837][T15820] raw-gadget.2 gadget.7: failed to queue resume event [ 1069.499202][T15820] raw-gadget.2 gadget.7: failed to queue reset event [ 1069.651298][ T5917] usb 5-1: new low-speed USB device number 96 using dummy_hcd [ 1069.685642][ T5917] usb 5-1: device descriptor read/8, error -71 [ 1069.727898][T15820] raw-gadget.2 gadget.7: failed to queue resume event [ 1069.809913][T15820] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 1069.848950][ C1] raw-gadget.2 gadget.7: ignoring, device is not running [ 1069.860520][T15820] usb 8-1: device descriptor read/8, error -32 [ 1069.934899][ T5917] usb 5-1: new low-speed USB device number 97 using dummy_hcd [ 1069.957883][ T5917] usb 5-1: device descriptor read/8, error -71 [ 1069.973020][T20768] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1069.988511][T15820] raw-gadget.2 gadget.7: failed to queue suspend event [ 1070.000740][T15820] raw-gadget.2 gadget.7: failed to queue reset event [ 1070.065304][ T5917] usb usb5-port1: unable to enumerate USB device [ 1070.135487][T15820] raw-gadget.2 gadget.7: failed to queue resume event [ 1070.220283][T20772] batadv_slave_0: entered promiscuous mode [ 1070.280466][T15820] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 1070.345073][ C1] raw-gadget.2 gadget.7: ignoring, device is not running [ 1070.352689][T15820] usb 8-1: device descriptor read/8, error -32 [ 1070.465267][T15820] raw-gadget.2 gadget.7: failed to queue suspend event [ 1070.472824][T15820] usb usb8-port1: unable to enumerate USB device [ 1071.975270][T15820] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1072.154964][T15820] usb 3-1: Using ep0 maxpacket: 16 [ 1072.161669][T15820] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1072.190192][T15820] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1072.217267][T15820] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1072.226631][T15820] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1072.279973][T15820] usb 3-1: Product: syz [ 1072.344930][T15820] usb 3-1: Manufacturer: syz [ 1072.365739][T15820] usb 3-1: SerialNumber: syz [ 1072.403985][T15820] usb 3-1: config 0 descriptor?? [ 1072.441583][T15820] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1072.483391][T15820] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 1073.045846][T15820] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1073.059396][T15820] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 1073.275401][T15820] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 1073.293488][T15820] em28xx 3-1:0.0: No AC97 audio processor [ 1073.744941][T15820] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1073.919584][T20818] loop9: detected capacity change from 0 to 7 [ 1073.964499][T20818] Dev loop9: unable to read RDB block 7 [ 1073.970456][T20818] loop9: unable to read partition table [ 1074.026531][T20818] loop9: partition table beyond EOD, truncated [ 1074.032899][T20818] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 1074.107858][T15820] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1074.121083][T15820] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1074.139697][T15820] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1074.150016][T15820] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1074.277181][T15820] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1074.295455][T15820] usb 5-1: invalid MIDI out EP 0 [ 1074.417706][T20821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1074.428784][T20815] fuse: Bad value for 'fd' [ 1074.484986][T20821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1074.556241][T20821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1074.581225][T20823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1074.596885][T15820] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1074.606520][T20821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1074.648905][T20823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1074.676874][T20821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1074.693223][T20821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1074.827849][T20825] loop7: detected capacity change from 0 to 7 [ 1074.839668][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1074.849393][ C0] buffer_io_error: 32 callbacks suppressed [ 1074.849413][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1074.874827][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1074.884560][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1074.893337][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1074.903026][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1074.912681][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1074.922346][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1074.931079][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1074.940717][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1074.949055][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1074.958701][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1074.969955][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1074.979611][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1074.996619][T20825] ldm_validate_partition_table(): Disk read failed. [ 1075.005187][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1075.014925][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1075.026374][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1075.036034][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1075.046396][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1075.056069][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1075.064882][T20825] Dev loop7: unable to read RDB block 0 [ 1075.071928][T20825] loop7: unable to read partition table [ 1075.078320][T20825] loop7: partition table beyond EOD, truncated [ 1075.086486][T20827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1075.106109][T20825] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 1075.152123][T20827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1075.186371][T20825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1075.217381][T20825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1075.280226][ T5202] ldm_validate_partition_table(): Disk read failed. [ 1075.306630][ T5202] Dev loop7: unable to read RDB block 0 [ 1075.326268][ T5202] loop7: unable to read partition table [ 1075.332131][ T5202] loop7: partition table beyond EOD, truncated [ 1075.395130][T20825] loop7: detected capacity change from 7 to 8 [ 1075.682495][T15820] usb 3-1: USB disconnect, device number 88 [ 1075.704179][T15820] em28xx 3-1:0.0: Disconnecting em28xx [ 1075.735848][T15820] em28xx 3-1:0.0: Freeing device [ 1075.980137][T20835] netlink: 388 bytes leftover after parsing attributes in process `syz.0.3969'. [ 1076.106535][T15820] usb 3-1: new full-speed USB device number 89 using dummy_hcd [ 1076.265028][T15820] usb 3-1: device descriptor read/64, error -71 [ 1076.406806][T15646] usb 5-1: USB disconnect, device number 98 [ 1076.517204][T15820] usb 3-1: new full-speed USB device number 90 using dummy_hcd [ 1076.670452][T20861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1076.681571][T20861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1076.745333][T15820] usb 3-1: device descriptor read/64, error -71 [ 1076.855183][T15820] usb usb3-port1: attempt power cycle [ 1077.245127][T15820] usb 3-1: new full-speed USB device number 91 using dummy_hcd [ 1077.266428][T15820] usb 3-1: device descriptor read/8, error -71 [ 1077.418877][T20877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1077.430167][T20877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1077.485912][T20877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1077.525360][T15820] usb 3-1: new full-speed USB device number 92 using dummy_hcd [ 1077.543640][T20877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1077.558050][T15820] usb 3-1: device descriptor read/8, error -71 [ 1077.610860][T20877] syzkaller0: entered promiscuous mode [ 1077.616966][T20877] syzkaller0: entered allmulticast mode [ 1077.630363][T20879] loop9: detected capacity change from 0 to 7 [ 1077.658350][T20877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1077.667658][T20877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1077.681964][T15820] usb usb3-port1: unable to enumerate USB device [ 1077.715964][T20879] Dev loop9: unable to read RDB block 7 [ 1077.722388][T20879] loop9: AHDI p3 p4 [ 1077.730378][T20879] loop9: partition table partially beyond EOD, truncated [ 1077.747615][T20879] loop9: p3 size 4227858431 extends beyond EOD, truncated [ 1077.823098][ T5852] udevd[5852]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 1079.001751][T20893] misc userio: No port type given on /dev/userio [ 1079.274930][T15820] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1079.415374][T15820] usb 3-1: device descriptor read/64, error -71 [ 1079.655264][T15820] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1079.835240][T15820] usb 3-1: device descriptor read/64, error -71 [ 1079.946324][T15820] usb usb3-port1: attempt power cycle [ 1080.356668][T15820] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1080.385867][T15820] usb 3-1: device descriptor read/8, error -71 [ 1080.625101][T15820] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1080.657902][T15820] usb 3-1: device descriptor read/8, error -71 [ 1080.771669][T15820] usb usb3-port1: unable to enumerate USB device [ 1081.178898][T20918] loop9: detected capacity change from 0 to 7 [ 1081.218165][T20918] Dev loop9: unable to read RDB block 7 [ 1081.223934][T20918] loop9: AHDI p3 p4 [ 1081.255249][T20918] loop9: partition table partially beyond EOD, truncated [ 1081.275120][T20918] loop9: p3 size 4227858431 extends beyond EOD, truncated [ 1081.370128][ T5852] udevd[5852]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 1081.738652][T20923] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3995'. [ 1082.356335][ T30] audit: type=1326 audit(1766877523.222:2766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20928 comm="syz.7.3997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb83e78f749 code=0x7ffc0000 [ 1082.415259][T15820] usb 3-1: new full-speed USB device number 97 using dummy_hcd [ 1082.423643][ T30] audit: type=1326 audit(1766877523.222:2767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20928 comm="syz.7.3997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb83e78f749 code=0x7ffc0000 [ 1082.476903][ T30] audit: type=1326 audit(1766877523.222:2768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20928 comm="syz.7.3997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb83e78f749 code=0x7ffc0000 [ 1082.505248][ T30] audit: type=1326 audit(1766877523.222:2769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20928 comm="syz.7.3997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb83e78f749 code=0x7ffc0000 [ 1082.553049][ T30] audit: type=1326 audit(1766877523.222:2770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20928 comm="syz.7.3997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb83e78f749 code=0x7ffc0000 [ 1082.586307][ T30] audit: type=1326 audit(1766877523.222:2771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20928 comm="syz.7.3997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fb83e78f749 code=0x7ffc0000 [ 1082.596362][T15820] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1082.644092][T15820] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1082.657289][ T30] audit: type=1326 audit(1766877523.222:2772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20928 comm="syz.7.3997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb83e78f749 code=0x7ffc0000 [ 1082.675683][T15820] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 1082.703990][T15820] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1082.705762][ T30] audit: type=1326 audit(1766877523.222:2773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20928 comm="syz.7.3997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb83e78f749 code=0x7ffc0000 [ 1082.713854][ T30] audit: type=1326 audit(1766877523.222:2774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20928 comm="syz.7.3997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb83e78f749 code=0x7ffc0000 [ 1082.713959][ T30] audit: type=1326 audit(1766877523.222:2775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20928 comm="syz.7.3997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb83e78f749 code=0x7ffc0000 [ 1082.798589][T15820] usb 3-1: config 0 descriptor?? [ 1083.212578][T15820] pantherlord 0003:0E8F:0003.003A: unknown main item tag 0x0 [ 1083.226967][T15820] pantherlord 0003:0E8F:0003.003A: unknown main item tag 0x0 [ 1083.267326][T15820] pantherlord 0003:0E8F:0003.003A: hidraw0: USB HID v0.00 Device [HID 0e8f:0003] on usb-dummy_hcd.2-1/input0 [ 1083.280302][T15820] pantherlord 0003:0E8F:0003.003A: no output reports found [ 1083.470985][T15820] usb 3-1: USB disconnect, device number 97 [ 1084.415155][ T5917] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1084.427807][T20943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1084.456493][T20943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1084.493340][T20943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1084.502791][T20943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1084.595320][ T5917] usb 3-1: Using ep0 maxpacket: 16 [ 1084.611797][ T5917] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1084.665601][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1084.717728][ T5917] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1084.731815][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1084.742646][ T5917] usb 3-1: Product: syz [ 1084.748543][ T5917] usb 3-1: Manufacturer: syz [ 1084.759323][ T5917] usb 3-1: SerialNumber: syz [ 1084.772584][ T5917] usb 3-1: config 0 descriptor?? [ 1084.804388][ T5917] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1084.838807][ T5917] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 1084.878870][T20956] loop9: detected capacity change from 0 to 7 [ 1084.903102][T17407] Dev loop9: unable to read RDB block 7 [ 1084.909880][T17407] loop9: AHDI p3 p4 [ 1084.914211][T17407] loop9: partition table partially beyond EOD, truncated [ 1084.923665][T17407] loop9: p3 size 4227858431 extends beyond EOD, truncated [ 1084.949293][T20956] Dev loop9: unable to read RDB block 7 [ 1084.980213][T20956] loop9: AHDI p3 p4 [ 1084.992064][T20956] loop9: partition table partially beyond EOD, truncated [ 1085.009674][T20956] loop9: p3 size 4227858431 extends beyond EOD, truncated [ 1085.119386][T17407] udevd[17407]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 1085.168174][T20961] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1085.448617][T17407] udevd[17407]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 1085.463446][ T5917] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1085.483419][ T5917] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 1085.608366][T20968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1085.645365][T20968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1085.716938][T20966] loop8: detected capacity change from 0 to 7 [ 1085.732435][ T5917] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 1085.742694][ T5917] em28xx 3-1:0.0: No AC97 audio processor [ 1085.773126][T17410] Dev loop8: unable to read RDB block 7 [ 1085.786727][T17410] loop8: unable to read partition table [ 1085.821745][T17410] loop8: partition table beyond EOD, truncated [ 1085.931256][T20966] Dev loop8: unable to read RDB block 7 [ 1085.960710][T20966] loop8: unable to read partition table [ 1086.050511][T20966] loop8: partition table beyond EOD, truncated [ 1086.058113][T20966] loop_reread_partitions: partition scan of loop8 (被x ) failed (rc=-5) [ 1088.087652][T15646] usb 3-1: USB disconnect, device number 98 [ 1088.095569][T15646] em28xx 3-1:0.0: Disconnecting em28xx [ 1088.105194][ T5917] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1088.124081][T15646] em28xx 3-1:0.0: Freeing device [ 1088.276910][ T5917] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1088.294906][ T5917] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1088.317837][ T5917] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1088.335131][ T5917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1088.350110][ T5917] usb 5-1: SerialNumber: syz [ 1088.627822][T20992] tipc: Started in network mode [ 1088.632831][T20992] tipc: Node identity 0000000000000000000000571e000001, cluster identity 4711 [ 1088.669693][T15820] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 1088.680379][T20992] tipc: Enabling of bearer rejected, failed to enable media [ 1088.736804][T21011] loop9: detected capacity change from 0 to 7 [ 1088.750810][T21011] Dev loop9: unable to read RDB block 7 [ 1088.760056][T21011] loop9: AHDI p3 p4 [ 1088.765933][T21007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4014'. [ 1088.787112][T21011] loop9: partition table partially beyond EOD, truncated [ 1088.795793][T21011] loop9: p3 size 4227858431 extends beyond EOD, truncated [ 1088.918759][T15820] usb 6-1: Using ep0 maxpacket: 32 [ 1088.949239][T15820] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 1088.972368][T15820] usb 6-1: config 0 has no interface number 0 [ 1088.994600][T15820] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1089.052378][ T5917] usb 5-1: 0:2 : does not exist [ 1089.134913][T15820] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.745015][T17407] udevd[17407]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 1089.819194][T15820] usb 6-1: Product: syz [ 1089.823442][T15820] usb 6-1: Manufacturer: syz [ 1089.845067][ T5917] usb 5-1: USB disconnect, device number 99 [ 1089.882343][T15820] usb 6-1: SerialNumber: syz [ 1089.916458][T15820] usb 6-1: config 0 descriptor?? [ 1089.924665][T15820] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1089.973916][ T5852] udevd[5852]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1090.143901][T21017] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4021'. [ 1090.175950][T15820] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1090.201581][T21021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1090.219931][T15820] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1090.242465][T21021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1090.551633][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1090.560291][T15820] usb 6-1: USB disconnect, device number 91 [ 1090.576618][T15820] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1090.606500][T15820] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1090.632947][T15820] quatech2 6-1:0.51: device disconnected [ 1090.737569][T21027] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4023'. [ 1090.749653][T21027] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4023'. [ 1090.868927][T21029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1090.892938][T21029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1091.709739][ T6135] raw-gadget.2 gadget.7: failed to queue reset event [ 1091.772777][T21049] fuse: Unknown parameter 'd' [ 1091.796430][ T6135] raw-gadget.2 gadget.7: failed to queue resume event [ 1091.898987][ T6135] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 1091.934926][T15820] usb 6-1: new low-speed USB device number 92 using dummy_hcd [ 1091.983691][ C0] raw-gadget.2 gadget.7: ignoring, device is not running [ 1092.001396][ T6135] raw-gadget.2 gadget.7: failed to queue reset event [ 1092.067307][T15820] usb 6-1: device descriptor read/64, error -71 [ 1092.166337][ T6135] raw-gadget.2 gadget.7: failed to queue resume event [ 1092.255185][ T6135] usb 8-1: device descriptor read/64, error -32 [ 1092.314942][T15820] usb 6-1: new low-speed USB device number 93 using dummy_hcd [ 1092.364900][ T6135] raw-gadget.2 gadget.7: failed to queue suspend event [ 1092.373522][ T6135] raw-gadget.2 gadget.7: failed to queue reset event [ 1092.444818][T15820] usb 6-1: device descriptor read/64, error -71 [ 1092.464332][ T6135] raw-gadget.2 gadget.7: failed to queue resume event [ 1092.527719][ T6135] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 1092.538957][ C0] raw-gadget.2 gadget.7: ignoring, device is not running [ 1092.555568][T15820] usb usb6-port1: attempt power cycle [ 1092.562700][ T6135] raw-gadget.2 gadget.7: failed to queue reset event [ 1092.609612][T21054] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1092.635195][ T6135] raw-gadget.2 gadget.7: failed to queue resume event [ 1092.708249][ T6135] usb 8-1: device descriptor read/64, error -32 [ 1092.824887][ T6135] raw-gadget.2 gadget.7: failed to queue suspend event [ 1092.832126][ T6135] usb usb8-port1: attempt power cycle [ 1092.838178][ T6135] raw-gadget.2 gadget.7: failed to queue disconnect event [ 1092.870805][ T6135] raw-gadget.2 gadget.7: failed to queue reset event [ 1092.897902][T15820] usb 6-1: new low-speed USB device number 94 using dummy_hcd [ 1092.926009][T15820] usb 6-1: device descriptor read/8, error -71 [ 1092.968144][ T6135] raw-gadget.2 gadget.7: failed to queue resume event [ 1092.982399][ T6135] raw-gadget.2 gadget.7: failed to queue reset event [ 1093.180778][T15820] usb 6-1: new low-speed USB device number 95 using dummy_hcd [ 1093.207197][T15820] usb 6-1: device descriptor read/8, error -71 [ 1093.225895][ T6135] raw-gadget.2 gadget.7: failed to queue resume event [ 1093.305280][ T6135] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 1093.318032][T15820] usb usb6-port1: unable to enumerate USB device [ 1093.336590][ C0] raw-gadget.2 gadget.7: ignoring, device is not running [ 1093.344058][ T6135] usb 8-1: device descriptor read/8, error -32 [ 1093.475236][ T6135] raw-gadget.2 gadget.7: failed to queue suspend event [ 1093.486857][ T6135] raw-gadget.2 gadget.7: failed to queue reset event [ 1093.514888][ T5917] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1093.555336][ T6135] raw-gadget.2 gadget.7: failed to queue resume event [ 1093.615190][ T6135] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 1093.636181][ C0] raw-gadget.2 gadget.7: ignoring, device is not running [ 1093.643535][ T6135] usb 8-1: device descriptor read/8, error -32 [ 1093.646312][ T5917] usb 5-1: device descriptor read/64, error -71 [ 1093.755660][ T6135] raw-gadget.2 gadget.7: failed to queue suspend event [ 1093.762981][ T6135] usb usb8-port1: unable to enumerate USB device [ 1093.770302][T21044] usb usb8: usbfs: process 21044 (syz.7.4028) did not claim interface 0 before use [ 1093.906035][ T5917] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1093.964647][T21065] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1094.045222][ T5917] usb 5-1: device descriptor read/64, error -71 [ 1094.175596][ T5917] usb usb5-port1: attempt power cycle [ 1094.442139][T21073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1094.462564][T21073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1094.504931][T21078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1094.518956][T21078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1094.527786][T21075] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 1094.544829][ T5917] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 1094.565950][ T5917] usb 5-1: device descriptor read/8, error -71 [ 1094.579749][T21075] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4037'. [ 1094.744875][ T6135] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 1094.826149][ T5917] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1094.855700][ T5917] usb 5-1: device descriptor read/8, error -71 [ 1095.005088][ T5917] usb usb5-port1: unable to enumerate USB device [ 1095.012316][ T6135] usb 6-1: Using ep0 maxpacket: 16 [ 1095.029120][ T6135] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1095.072846][ T6135] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1095.112235][ T6135] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1095.121873][ T6135] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.140107][ T6135] usb 6-1: Product: syz [ 1095.149155][ T6135] usb 6-1: Manufacturer: syz [ 1095.402366][ T6135] usb 6-1: SerialNumber: syz [ 1095.549589][T21094] netlink: 'syz.7.4041': attribute type 1 has an invalid length. [ 1095.744247][ T6135] usb 6-1: 0:2 : does not exist [ 1095.776556][ T6135] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1095.846680][ T6135] usb 6-1: USB disconnect, device number 96 [ 1095.919922][ T5852] udevd[5852]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1096.257357][T21109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1096.267906][T21109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1096.388235][T21107] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1097.006007][T21123] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4048'. [ 1097.033979][T21123] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4048'. [ 1097.344909][T15065] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 1097.595674][T15065] usb 5-1: Using ep0 maxpacket: 32 [ 1097.612574][T15065] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1097.652334][T15065] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1097.672875][T15065] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1097.720450][T15065] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1097.822898][T15065] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1097.856685][T15065] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1097.878198][T15065] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1097.895149][T15065] usb 5-1: Product: syz [ 1097.904463][T15065] usb 5-1: Manufacturer: syz [ 1097.921105][T15065] usb 5-1: SerialNumber: syz [ 1097.942502][T15065] usb 5-1: config 0 descriptor?? [ 1098.369172][T15065] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 1098.385085][T15065] input input72: Device does not respond to id packet M [ 1098.422957][T15065] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 1098.440881][T15065] input input72: Device does not respond to id packet P [ 1098.465250][T15065] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 1098.480951][T15065] input input72: Device does not respond to id packet B [ 1098.921573][T21136] bridge0: port 2(bridge_slave_1) entered disabled state [ 1098.928962][T21136] bridge0: port 1(bridge_slave_0) entered disabled state [ 1099.728487][T15065] iforce 5-1:0.0: usb_submit_urb failed: -110 [ 1099.863290][T15065] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 1099.881998][T15065] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 1099.894880][T15065] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 1099.918188][T15065] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input72 [ 1100.007446][T21136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1100.064430][ T9] usb 5-1: USB disconnect, device number 104 [ 1100.374016][ T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1100.386553][ T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1100.425749][ T3567] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1100.460519][ T3567] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1100.608097][T21153] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4058'. [ 1100.782637][T21159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1100.797383][T21159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1100.994861][ T9] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 1101.160810][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1101.200823][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1101.220412][ T9] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1101.230650][ T9] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1101.248605][ T9] usb 6-1: Manufacturer: syz [ 1101.253740][T21173] [U]  [ 1101.257987][T21173] [U] K{ [ 1101.261620][T21173] [U] T 1ŠFFˊ`GJǘGO/MC [ 1101.273823][T21173] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 1101.306827][T21175] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1101.328977][T21173] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 1101.345982][ T9] usb 6-1: config 0 descriptor?? [ 1101.358894][T21173] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 1101.459576][T21173] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 1101.571946][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 1101.588556][T21173] [U] T_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 1101.589515][ T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1101.670617][ T9] usb 6-1: USB disconnect, device number 97 [ 1101.680705][T21173] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 1101.708451][T21178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1101.739895][T21173] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/< [ 1105.574689][T21240] dump_stack_lvl+0xe8/0x150 [ 1105.574722][T21240] should_fail_ex+0x414/0x560 [ 1105.574761][T21240] _copy_to_user+0x31/0xb0 [ 1105.574789][T21240] simple_read_from_buffer+0xe1/0x170 [ 1105.574820][T21240] proc_fail_nth_read+0x1b3/0x220 [ 1105.574847][T21240] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1105.574875][T21240] ? rw_verify_area+0x2a6/0x4d0 [ 1105.574909][T21240] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1105.574934][T21240] vfs_read+0x200/0xa30 [ 1105.574953][T21240] ? fdget_pos+0x247/0x320 [ 1105.574986][T21240] ? __pfx___mutex_lock+0x10/0x10 [ 1105.575011][T21240] ? __pfx_vfs_read+0x10/0x10 [ 1105.575033][T21240] ? __fget_files+0x2a/0x420 [ 1105.575064][T21240] ? __fget_files+0x3a0/0x420 [ 1105.575090][T21240] ? __fget_files+0x2a/0x420 [ 1105.575125][T21240] ksys_read+0x145/0x250 [ 1105.575148][T21240] ? __pfx_ksys_read+0x10/0x10 [ 1105.575180][T21240] do_syscall_64+0xec/0xf80 [ 1105.575202][T21240] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1105.575223][T21240] ? trace_irq_disable+0x37/0x100 [ 1105.575253][T21240] ? clear_bhb_loop+0x60/0xb0 [ 1105.575279][T21240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1105.575300][T21240] RIP: 0033:0x7f8631d8e15c [ 1105.575321][T21240] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1105.575341][T21240] RSP: 002b:00007f8632c7a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1105.575365][T21240] RAX: ffffffffffffffda RBX: 00007f8631fe5fa0 RCX: 00007f8631d8e15c [ 1105.575382][T21240] RDX: 000000000000000f RSI: 00007f8632c7a0a0 RDI: 0000000000000003 [ 1105.575396][T21240] RBP: 00007f8632c7a090 R08: 0000000000000000 R09: 0000000000000000 [ 1105.575410][T21240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1105.575423][T21240] R13: 00007f8631fe6038 R14: 00007f8631fe5fa0 R15: 00007f863210fa28 [ 1105.575458][T21240] [ 1106.020380][T21242] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1106.574810][ T6135] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 1106.698992][T21261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1106.711889][T21261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1106.785210][ T6135] usb 6-1: Using ep0 maxpacket: 8 [ 1106.794345][ T6135] usb 6-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 1106.806006][ T6135] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1106.824364][ T6135] usb 6-1: Product: syz [ 1106.834011][ T6135] usb 6-1: SerialNumber: syz [ 1106.852392][ T6135] usb 6-1: config 0 descriptor?? [ 1106.883286][ T6135] gspca_main: spca501-2.14.0 probing 0000:0000 [ 1107.076692][ T6135] gspca_spca501: reg write: error -71 [ 1107.082277][ T6135] spca501 6-1:0.0: Reg write failed for 0x02,0x0f,0x05 [ 1107.125150][ T6135] spca501 6-1:0.0: probe with driver spca501 failed with error -22 [ 1107.140853][ T6135] usb 6-1: USB disconnect, device number 99 [ 1107.420342][ T5917] usb 5-1: USB disconnect, device number 107 [ 1107.430709][ T5917] em28xx 5-1:0.0: Disconnecting em28xx [ 1107.437688][ T5917] em28xx 5-1:0.0: Freeing device [ 1108.334851][T15820] usb 5-1: new full-speed USB device number 108 using dummy_hcd [ 1108.527230][T15820] usb 5-1: config 1 has an invalid descriptor of length 245, skipping remainder of the config [ 1108.627864][T15820] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1108.721887][T15820] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 1108.814842][T15820] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1108.865479][T15820] usb 5-1: SerialNumber: syz [ 1108.957603][T15820] usb 5-1: 0:2 : does not exist [ 1108.985155][T15820] usb 5-1: unit 12 not found! [ 1109.070263][T21280] IPVS: set_ctl: invalid protocol: 175 10.1.1.1:20001 [ 1109.380180][T21291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1109.455883][T21291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1110.718260][T21304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1110.762898][T21304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1110.794405][ T6135] usb 5-1: USB disconnect, device number 108 [ 1110.936407][T21306] loop2: detected capacity change from 0 to 7 [ 1110.963578][T21306] Dev loop2: unable to read RDB block 7 [ 1110.974664][T21306] loop2: unable to read partition table [ 1110.995041][T21306] loop2: partition table beyond EOD, truncated [ 1111.001311][T21306] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1111.339336][T21314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1111.352561][T21314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1111.405260][ T9] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1111.564969][ T6135] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 1111.575253][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 1111.583139][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1111.596564][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1111.635407][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1111.644542][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1111.657772][ T9] usb 3-1: Product: syz [ 1111.662073][ T9] usb 3-1: Manufacturer: syz [ 1111.668158][ T9] usb 3-1: SerialNumber: syz [ 1111.675766][ T9] usb 3-1: config 0 descriptor?? [ 1111.690125][ T9] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1111.699627][ T980] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 1111.708375][ T9] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 1111.745240][ T6135] usb 6-1: Using ep0 maxpacket: 32 [ 1111.751949][ T6135] usb 6-1: config 0 has an invalid interface number: 77 but max is 0 [ 1111.761502][ T6135] usb 6-1: config 0 has no interface number 0 [ 1111.770169][ T6135] usb 6-1: New USB device found, idVendor=12d1, idProduct=4f5e, bcdDevice=d6.ed [ 1111.779748][ T6135] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1111.788998][ T6135] usb 6-1: Product: syz [ 1111.793619][ T6135] usb 6-1: Manufacturer: syz [ 1111.798356][ T6135] usb 6-1: SerialNumber: syz [ 1111.840907][ T6135] usb 6-1: config 0 descriptor?? [ 1111.864316][ T6135] option 6-1:0.77: GSM modem (1-port) converter detected [ 1111.984029][T21329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1112.006573][T21329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1112.075438][ T6135] usb 6-1: USB disconnect, device number 100 [ 1112.086490][ T6135] option 6-1:0.77: device disconnected [ 1112.317261][ T9] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1112.329850][ T9] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 1112.544950][ T9] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 1112.554863][ T9] em28xx 3-1:0.0: No AC97 audio processor [ 1112.625283][ T980] usb 5-1: device descriptor read/64, error -71 [ 1112.698136][T21340] loop2: detected capacity change from 0 to 7 [ 1112.707474][T21340] Dev loop2: unable to read RDB block 7 [ 1112.713449][T21340] loop2: unable to read partition table [ 1112.728065][T21340] loop2: partition table beyond EOD, truncated [ 1112.741350][T21340] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1112.934870][ T980] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 1113.101220][ T980] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1113.119974][ T980] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1113.151843][ T980] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1113.169153][ T980] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1113.192315][ T980] usb 5-1: Manufacturer: syz [ 1113.214280][ T980] usb 5-1: config 0 descriptor?? [ 1113.605509][ T5917] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 1113.755183][ T5917] usb 6-1: Using ep0 maxpacket: 16 [ 1113.764561][ T5917] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1113.776240][ T5917] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1113.792461][ T5917] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1113.802289][ T5917] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1113.814310][ T5917] usb 6-1: Product: syz [ 1113.819824][ T5917] usb 6-1: SerialNumber: syz [ 1113.829761][ T5917] usb 6-1: config 0 descriptor?? [ 1113.858624][ T980] usbhid 5-1:0.0: can't add hid device: -32 [ 1113.865186][ T980] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 1113.907293][T21353] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1114.268579][T21358] netlink: 64 bytes leftover after parsing attributes in process `syz.7.4123'. [ 1115.087906][ T980] usb 6-1: USB disconnect, device number 101 [ 1115.160959][ T5917] usb 3-1: USB disconnect, device number 103 [ 1115.180870][ T5917] em28xx 3-1:0.0: Disconnecting em28xx [ 1115.207922][ T5917] em28xx 3-1:0.0: Freeing device [ 1115.362057][T15820] usb 5-1: USB disconnect, device number 110 [ 1115.583074][T21375] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4126'. [ 1115.884438][T21379] netlink: 'syz.4.4127': attribute type 10 has an invalid length. [ 1115.982438][T13959] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1116.017913][T13959] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1116.028959][T13959] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1116.051204][T13959] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1116.060773][T13959] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1116.564922][T21385] loop2: detected capacity change from 0 to 7 [ 1116.597905][ T5852] Dev loop2: unable to read RDB block 7 [ 1116.603544][ T5852] loop2: unable to read partition table [ 1116.626058][ T5852] loop2: partition table beyond EOD, truncated [ 1116.648056][T21385] Dev loop2: unable to read RDB block 7 [ 1116.653913][T21385] loop2: unable to read partition table [ 1116.673865][T21385] loop2: partition table beyond EOD, truncated [ 1116.688612][T21385] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1116.884890][ T5917] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 1117.067993][ T5917] usb 6-1: Using ep0 maxpacket: 16 [ 1117.094521][ T5917] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1117.118015][T17919] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1117.161062][ T5917] usb 6-1: config 13 has an invalid interface number: 50 but max is 0 [ 1117.202358][T17919] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1117.219817][ T5917] usb 6-1: config 13 has no interface number 0 [ 1117.290330][ T5917] usb 6-1: config 13 interface 50 altsetting 167 bulk endpoint 0x88 has invalid maxpacket 16 [ 1117.394057][ T5917] usb 6-1: config 13 interface 50 has no altsetting 0 [ 1117.481911][ T5917] usb 6-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 1117.512026][ T5917] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.548879][ T5917] usb 6-1: Product: syz [ 1117.563421][ T5917] usb 6-1: Manufacturer: syz [ 1117.578828][ T5917] usb 6-1: SerialNumber: syz [ 1117.601009][T21386] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1117.623074][T17919] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1117.647530][T17919] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1117.936979][ T5917] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1118.006511][ T5917] usb 6-1: MIDIStreaming interface descriptor not found [ 1118.031772][T17919] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1118.052681][T17919] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1118.095049][ T5917] usb 6-1: USB disconnect, device number 102 [ 1118.136616][T13959] Bluetooth: hci3: command tx timeout [ 1118.309886][ T5834] udevd[5834]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1118.382348][T17919] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1118.425055][T17919] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1118.810560][T21407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1118.822625][T21407] 8021q: adding VLAN 0 to HW filter on device team0 [ 1118.904661][T21407] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1119.149598][T21382] chnl_net:caif_netlink_parms(): no params data found [ 1119.224620][T21416] program syz.7.4136 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1119.617517][T21424] loop2: detected capacity change from 0 to 7 [ 1119.625859][T21424] Dev loop2: unable to read RDB block 7 [ 1119.631495][T21424] loop2: unable to read partition table [ 1119.637981][T21424] loop2: partition table beyond EOD, truncated [ 1119.645780][T21424] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1119.710861][T21422] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4138'. [ 1119.776020][T21426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1119.822654][T21426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1119.866382][T21426] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4138'. [ 1119.916473][T21426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1119.975380][T21426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1119.997228][T21426] ------------[ cut here ]------------ [ 1120.003209][T21426] WARNING: net/ipv4/route.c:1275 at ip_rt_bug+0x2d/0x150, CPU#0: syz.7.4138/21426 [ 1120.012645][T21426] Modules linked in: [ 1120.017154][T21426] CPU: 0 UID: 0 PID: 21426 Comm: syz.7.4138 Tainted: G L syzkaller #0 PREEMPT(full) [ 1120.028250][T21426] Tainted: [L]=SOFTLOCKUP [ 1120.032608][T21426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1120.042708][T21426] RIP: 0010:ip_rt_bug+0x2d/0x150 [ 1120.047715][T21426] Code: fa 55 41 57 41 56 41 55 41 54 53 48 89 d3 e8 9a 0c ff f7 66 90 e8 93 0c ff f7 31 ff 48 89 de ba 02 00 00 00 e8 34 0a 6e ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc f3 [ 1120.067390][T21426] RSP: 0018:ffffc9000493f178 EFLAGS: 00010292 [ 1120.073518][T21426] RAX: bf55c58d7c185400 RBX: ffff88805bfe8280 RCX: 0000000080000401 [ 1120.081538][T21426] RDX: 0000000000000002 RSI: ffffffff8d79201e RDI: ffffffff8bc083e0 [ 1120.089603][T21426] RBP: 0000000000000001 R08: ffffffff8f822277 R09: 1ffffffff1f0444e [ 1120.097633][T21426] R10: dffffc0000000000 R11: fffffbfff1f0444f R12: dffffc0000000000 [ 1120.105704][T21426] R13: dffffc0000000000 R14: ffff88805bfe8280 R15: ffff888021ad1e00 [ 1120.113816][T21426] FS: 00007fb83f6e76c0(0000) GS:ffff888125e1f000(0000) knlGS:0000000000000000 [ 1120.122825][T21426] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1120.129460][T21426] CR2: 0000200000058030 CR3: 00000000761b6000 CR4: 00000000003526f0 [ 1120.137483][T21426] Call Trace: [ 1120.140862][T21426] [ 1120.143813][T21426] ip_push_pending_frames+0xbe/0x150 [ 1120.149150][T21426] __icmp_send+0x101e/0x13c0 [ 1120.153853][T21426] ? __icmp_send+0x1b9/0x13c0 [ 1120.158587][T21426] ? __pfx___icmp_send+0x10/0x10 [ 1120.163571][T21426] ? __pfx_ip_route_input_noref+0x10/0x10 [ 1120.169373][T21426] ? tcp_v4_early_demux+0x4b3/0x9a0 [ 1120.174616][T21426] ip_options_compile+0x80/0xb0 [ 1120.179514][T21426] ip_rcv_finish_core+0xaa2/0x1c00 [ 1120.184733][T21426] ip_rcv_finish+0x14c/0x2f0 [ 1120.189370][T21426] NF_HOOK+0x30c/0x3a0 [ 1120.193454][T21426] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1120.198605][T21426] ? NF_HOOK+0x9a/0x3a0 [ 1120.202772][T21426] ? __pfx_NF_HOOK+0x10/0x10 [ 1120.207399][T21426] ? ip_rcv_core+0x7f7/0xd00 [ 1120.212035][T21426] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1120.217209][T21426] ? __pfx_ip_rcv+0x10/0x10 [ 1120.221728][T21426] __netif_receive_skb+0x143/0x380 [ 1120.226886][T21426] ? netif_receive_skb+0x105/0x750 [ 1120.232110][T21426] netif_receive_skb+0x1bb/0x750 [ 1120.237097][T21426] ? __lock_acquire+0x6b6/0x2cf0 [ 1120.242058][T21426] ? __pfx_netif_receive_skb+0x10/0x10 [ 1120.247566][T21426] ? tun_rx_batched+0x160/0x730 [ 1120.252435][T21426] tun_rx_batched+0x1b9/0x730 [ 1120.257157][T21426] ? __pfx_tun_rx_batched+0x10/0x10 [ 1120.262372][T21426] ? tun_get_user+0x266d/0x3dc0 [ 1120.267270][T21426] ? tun_get_user+0x266d/0x3dc0 [ 1120.272241][T21426] ? tun_get_user+0x2331/0x3dc0 [ 1120.277177][T21426] ? __local_bh_enable_ip+0xd0/0x130 [ 1120.282476][T21426] ? tun_get_user+0x266d/0x3dc0 [ 1120.287372][T21426] tun_get_user+0x2aa3/0x3dc0 [ 1120.292152][T21426] ? tun_get_user+0x6fc/0x3dc0 [ 1120.296972][T21426] ? aa_file_perm+0x44c/0x1530 [ 1120.301751][T21426] ? __pfx_tun_get_user+0x10/0x10 [ 1120.306819][T21426] ? __lock_acquire+0x6b6/0x2cf0 [ 1120.311795][T21426] ? preempt_schedule_thunk+0x16/0x30 [ 1120.317207][T21426] ? preempt_schedule_common+0x83/0xd0 [ 1120.322683][T21426] ? ref_tracker_alloc+0x318/0x460 [ 1120.327831][T21426] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1120.333302][T21426] ? tun_get+0x1c/0x2f0 [ 1120.337503][T21426] ? tun_get+0x1c/0x2f0 [ 1120.341671][T21426] ? tun_get+0x1c/0x2f0 [ 1120.345860][T21426] ? tun_get+0x1c/0x2f0 [ 1120.350030][T21426] tun_chr_write_iter+0x113/0x200 [ 1120.355116][T21426] vfs_write+0x5c9/0xb30 [ 1120.359393][T21426] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1120.365014][T21426] ? __pfx_vfs_write+0x10/0x10 [ 1120.369831][T21426] ? __fget_files+0x2a/0x420 [ 1120.374451][T21426] ksys_write+0x145/0x250 [ 1120.378830][T21426] ? __pfx_ksys_write+0x10/0x10 [ 1120.383710][T21426] do_syscall_64+0xec/0xf80 [ 1120.388262][T21426] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1120.394336][T21426] ? trace_irq_disable+0x37/0x100 [ 1120.399513][T21426] ? clear_bhb_loop+0x60/0xb0 [ 1120.404213][T21426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1120.410149][T21426] RIP: 0033:0x7fb83e78e1ff [ 1120.414641][T21426] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1120.434447][T21426] RSP: 002b:00007fb83f6e7000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1120.442976][T21426] RAX: ffffffffffffffda RBX: 00007fb83e9e6090 RCX: 00007fb83e78e1ff [ 1120.451008][T21426] RDX: 0000000000000042 RSI: 0000200000000040 RDI: 00000000000000c8 [ 1120.459018][T21426] RBP: 00007fb83e813f91 R08: 0000000000000000 R09: 0000000000000000 [ 1120.467033][T21426] R10: 0000000000000042 R11: 0000000000000293 R12: 0000000000000000 [ 1120.475098][T21426] R13: 00007fb83e9e6128 R14: 00007fb83e9e6090 R15: 00007fb83eb0fa28 [ 1120.483120][T21426] [ 1120.486203][T21426] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1120.493498][T21426] CPU: 0 UID: 0 PID: 21426 Comm: syz.7.4138 Tainted: G L syzkaller #0 PREEMPT(full) [ 1120.504463][T21426] Tainted: [L]=SOFTLOCKUP [ 1120.508790][T21426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1120.518859][T21426] Call Trace: [ 1120.522152][T21426] [ 1120.525098][T21426] vpanic+0x1e0/0x670 [ 1120.529112][T21426] panic+0xb9/0xc0 [ 1120.532846][T21426] ? __pfx_panic+0x10/0x10 [ 1120.537284][T21426] __warn+0x317/0x4b0 [ 1120.541275][T21426] ? ip_rt_bug+0x2d/0x150 [ 1120.545623][T21426] ? ip_rt_bug+0x2d/0x150 [ 1120.549978][T21426] __report_bug+0x288/0x500 [ 1120.554487][T21426] ? NF_HOOK+0x30c/0x3a0 [ 1120.558741][T21426] ? __netif_receive_skb+0x143/0x380 [ 1120.564058][T21426] ? netif_receive_skb+0x1bb/0x750 [ 1120.569188][T21426] ? ip_rt_bug+0x2d/0x150 [ 1120.573540][T21426] ? __pfx___report_bug+0x10/0x10 [ 1120.578616][T21426] ? ip_rt_bug+0x2d/0x150 [ 1120.582966][T21426] report_bug+0x16a/0x220 [ 1120.587325][T21426] ? ip_rt_bug+0x2d/0x150 [ 1120.591673][T21426] ? ip_rt_bug+0x2f/0x150 [ 1120.596025][T21426] handle_bug+0x98/0x200 [ 1120.600286][T21426] exc_invalid_op+0x1a/0x50 [ 1120.604820][T21426] asm_exc_invalid_op+0x1a/0x20 [ 1120.609704][T21426] RIP: 0010:ip_rt_bug+0x2d/0x150 [ 1120.614655][T21426] Code: fa 55 41 57 41 56 41 55 41 54 53 48 89 d3 e8 9a 0c ff f7 66 90 e8 93 0c ff f7 31 ff 48 89 de ba 02 00 00 00 e8 34 0a 6e ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc f3 [ 1120.634316][T21426] RSP: 0018:ffffc9000493f178 EFLAGS: 00010292 [ 1120.640402][T21426] RAX: bf55c58d7c185400 RBX: ffff88805bfe8280 RCX: 0000000080000401 [ 1120.648399][T21426] RDX: 0000000000000002 RSI: ffffffff8d79201e RDI: ffffffff8bc083e0 [ 1120.656394][T21426] RBP: 0000000000000001 R08: ffffffff8f822277 R09: 1ffffffff1f0444e [ 1120.664375][T21426] R10: dffffc0000000000 R11: fffffbfff1f0444f R12: dffffc0000000000 [ 1120.672361][T21426] R13: dffffc0000000000 R14: ffff88805bfe8280 R15: ffff888021ad1e00 [ 1120.680370][T21426] ? ip_rt_bug+0x2c/0x150 [ 1120.684735][T21426] ip_push_pending_frames+0xbe/0x150 [ 1120.690053][T21426] __icmp_send+0x101e/0x13c0 [ 1120.694706][T21426] ? __icmp_send+0x1b9/0x13c0 [ 1120.699442][T21426] ? __pfx___icmp_send+0x10/0x10 [ 1120.704412][T21426] ? __pfx_ip_route_input_noref+0x10/0x10 [ 1120.710152][T21426] ? tcp_v4_early_demux+0x4b3/0x9a0 [ 1120.715373][T21426] ip_options_compile+0x80/0xb0 [ 1120.720244][T21426] ip_rcv_finish_core+0xaa2/0x1c00 [ 1120.725392][T21426] ip_rcv_finish+0x14c/0x2f0 [ 1120.730026][T21426] NF_HOOK+0x30c/0x3a0 [ 1120.734131][T21426] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1120.739253][T21426] ? NF_HOOK+0x9a/0x3a0 [ 1120.743424][T21426] ? __pfx_NF_HOOK+0x10/0x10 [ 1120.748023][T21426] ? ip_rcv_core+0x7f7/0xd00 [ 1120.752629][T21426] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1120.757774][T21426] ? __pfx_ip_rcv+0x10/0x10 [ 1120.762295][T21426] __netif_receive_skb+0x143/0x380 [ 1120.767420][T21426] ? netif_receive_skb+0x105/0x750 [ 1120.772567][T21426] netif_receive_skb+0x1bb/0x750 [ 1120.777539][T21426] ? __lock_acquire+0x6b6/0x2cf0 [ 1120.782508][T21426] ? __pfx_netif_receive_skb+0x10/0x10 [ 1120.788000][T21426] ? tun_rx_batched+0x160/0x730 [ 1120.792873][T21426] tun_rx_batched+0x1b9/0x730 [ 1120.797570][T21426] ? __pfx_tun_rx_batched+0x10/0x10 [ 1120.802783][T21426] ? tun_get_user+0x266d/0x3dc0 [ 1120.807647][T21426] ? tun_get_user+0x266d/0x3dc0 [ 1120.812521][T21426] ? tun_get_user+0x2331/0x3dc0 [ 1120.817387][T21426] ? __local_bh_enable_ip+0xd0/0x130 [ 1120.822682][T21426] ? tun_get_user+0x266d/0x3dc0 [ 1120.827547][T21426] tun_get_user+0x2aa3/0x3dc0 [ 1120.832239][T21426] ? tun_get_user+0x6fc/0x3dc0 [ 1120.837018][T21426] ? aa_file_perm+0x44c/0x1530 [ 1120.841794][T21426] ? __pfx_tun_get_user+0x10/0x10 [ 1120.846828][T21426] ? __lock_acquire+0x6b6/0x2cf0 [ 1120.851775][T21426] ? preempt_schedule_thunk+0x16/0x30 [ 1120.857155][T21426] ? preempt_schedule_common+0x83/0xd0 [ 1120.862621][T21426] ? ref_tracker_alloc+0x318/0x460 [ 1120.867787][T21426] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1120.873267][T21426] ? tun_get+0x1c/0x2f0 [ 1120.877569][T21426] ? tun_get+0x1c/0x2f0 [ 1120.881757][T21426] ? tun_get+0x1c/0x2f0 [ 1120.885938][T21426] ? tun_get+0x1c/0x2f0 [ 1120.890117][T21426] tun_chr_write_iter+0x113/0x200 [ 1120.895164][T21426] vfs_write+0x5c9/0xb30 [ 1120.899418][T21426] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1120.904988][T21426] ? __pfx_vfs_write+0x10/0x10 [ 1120.909815][T21426] ? __fget_files+0x2a/0x420 [ 1120.914422][T21426] ksys_write+0x145/0x250 [ 1120.918761][T21426] ? __pfx_ksys_write+0x10/0x10 [ 1120.923626][T21426] do_syscall_64+0xec/0xf80 [ 1120.928141][T21426] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1120.934215][T21426] ? trace_irq_disable+0x37/0x100 [ 1120.939253][T21426] ? clear_bhb_loop+0x60/0xb0 [ 1120.943944][T21426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1120.949848][T21426] RIP: 0033:0x7fb83e78e1ff [ 1120.954313][T21426] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1120.973941][T21426] RSP: 002b:00007fb83f6e7000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1120.982468][T21426] RAX: ffffffffffffffda RBX: 00007fb83e9e6090 RCX: 00007fb83e78e1ff [ 1120.990459][T21426] RDX: 0000000000000042 RSI: 0000200000000040 RDI: 00000000000000c8 [ 1120.998442][T21426] RBP: 00007fb83e813f91 R08: 0000000000000000 R09: 0000000000000000 [ 1121.006425][T21426] R10: 0000000000000042 R11: 0000000000000293 R12: 0000000000000000 [ 1121.014406][T21426] R13: 00007fb83e9e6128 R14: 00007fb83e9e6090 R15: 00007fb83eb0fa28 [ 1121.022403][T21426] [ 1121.026057][T21426] Kernel Offset: disabled [ 1121.030493][T21426] Rebooting in 86400 seconds..