last executing test programs: 10.562461481s ago: executing program 0 (id=968): r0 = syz_open_dev$vbi(&(0x7f0000000100), 0x3, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000000)={0x8, [0x204, 0x2, 0x3, 0x0, 0xfff, 0x8000, 0x5, 0xc7, 0x3, 0x1, 0x4, 0xd20, 0x7, 0xfff8, 0x4, 0x8, 0x7867, 0x7e27, 0xac, 0x0, 0x4, 0x5109, 0x81, 0x7, 0x0, 0xfff, 0x6, 0x2, 0x400, 0xcad, 0x6, 0x9, 0x7ff, 0x0, 0x1, 0x12, 0x7, 0x63, 0x7, 0xb5, 0x5, 0xd, 0x1000, 0x9, 0x3ff, 0x0, 0x4, 0xc8], 0x2}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = io_uring_setup(0x63cb, &(0x7f0000000080)={0x0, 0xc997, 0x40, 0x3, 0x26a}) r4 = fsopen(&(0x7f0000000100)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0xf) fsconfig$FSCONFIG_SET_FLAG(r4, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r3, 0x12, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_X86_SET_MCE(r5, 0x4040ae9e, &(0x7f00000002c0)={0x9a00000000000000, 0x5000, 0x5, 0x4, 0x2}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="680000001000010400000000030000ffdd000000", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a34001280110001006272696467655f736c617665000000001c000580050019000300000006000200010000000500010003000000140003006272696467655f736c6176655f300000"], 0x68}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) ioctl$KVM_X86_SET_MCE(r5, 0x4040ae9e, &(0x7f0000000140)={0x4000000000000000, 0xf000, 0xffffffffffffffff, 0x2, 0x2}) 9.511360165s ago: executing program 0 (id=971): r0 = socket(0x2, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x2688, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/packet\x00') connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close(0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000880)={{0x12, 0x1, 0x300, 0xe1, 0x5d, 0x84, 0x10, 0x644, 0x800f, 0xd2f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x81, 0x9, 0x30, 0x0, [{{0x9, 0x4, 0x91, 0xfa, 0x0, 0xc7, 0xc7, 0xcd, 0x2}}]}}]}}, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0}) r5 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x7168, 0x3010, 0x2, 0x41}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 9.304101813s ago: executing program 2 (id=972): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000000000040f30455079048000000010902240001000040b109040000010300010009210101000122050009058103ff030c0000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 32) r4 = socket$unix(0x1, 0x2, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, 0x2180}, [@IFLA_TXQLEN={0x8, 0xd, 0x80000}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x20, 0xa, 0x7, {0x7, 0xf, "00f4000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) ioctl$HIDIOCGRDESC(r6, 0x90044802, &(0x7f0000000380)={0xff0f}) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x5, &(0x7f0000000000)=[{0x7, 0xfb, 0x3, 0xf0}, {0xf4, 0xaf, 0x7, 0x9}, {0x7, 0xe, 0x3, 0x4eb189b6}, {0x0, 0x11, 0x7, 0x4ac}, {0x6, 0x43, 0x81, 0x7}]}, 0x10) ioctl$EXT4_IOC_CHECKPOINT(r6, 0x4004662b, &(0x7f00000000c0)=0x3) 7.221806093s ago: executing program 4 (id=980): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io(r0, 0x0, 0x0) (rerun: 32) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) (async) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0x94, 0x4) (async, rerun: 64) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) (async, rerun: 64) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000000)=0xf3f, 0x4) (async, rerun: 32) recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2, 0x0) (async, rerun: 32) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) syz_usb_control_io(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io(r0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$uac1(r0, 0x0, 0x0) (rerun: 64) syz_usb_control_io(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async, rerun: 64) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYRES32], 0x6c}, 0x1, 0x0, 0x0, 0x4404c810}, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) (async, rerun: 32) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 6.075954775s ago: executing program 2 (id=984): fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x28, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYBLOB="1000000000000000280012800b000100"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$6lowpan_enable(r3, &(0x7f0000000200)='0', 0x1) (async, rerun: 32) socket$netlink(0x10, 0x3, 0x10) (async, rerun: 32) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000840)={{0x0, 0x2, 0xfffffffe, 0x3, 'syz1\x00', 0x2}, 0x3, 0x3, 0x55, 0x0, 0x2, 0x65a2, 'syz0\x00', &(0x7f0000000800)=['%\x00', '1![\xb0\xfd\x00'], 0x8}) semget(0x1, 0x4, 0x10) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r5, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x0, 0x0, 0x0, 'syz1\x00', 0x2}, 0x0, [0x0, 0x2, 0x200040000000000, 0xfffffffffffffffe, 0xffffffefffffffff, 0x0, 0x4, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0xfffffeffbfffffff, 0x0, 0x0, 0x0, 0x46f, 0x80000000, 0x3, 0x0, 0x0, 0x4000004, 0x0, 0x6, 0x0, 0x40, 0x0, 0xfffffffffffffffd, 0x100200000, 0xe, 0x6, 0x0, 0xfffffffffffffffe, 0x0, 0x9, 0x6, 0x10000, 0xfff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x7, 0x10000, 0x7785, 0x0, 0x4, 0x4, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x0, 0x80000002000, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xb, 0x4, 0x80000000000000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10000000000, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x100, 0x81, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x2, 0x100000000000, 0xffffffffffffffff, 0x3, 0x7, 0x0, 0x7, 0xc0c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0xffffffffffeffffc, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x80]}) readahead(0xffffffffffffffff, 0x100, 0x96) (async, rerun: 32) socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r6, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 5.880957169s ago: executing program 2 (id=986): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x5, 0xa, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, 0x0, 0x0) listen(r2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820f", 0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x1ff) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x40}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 5.490673569s ago: executing program 0 (id=987): r0 = userfaultfd(0x80001) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a00000924030101010505"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000000000000046}) syz_usb_control_io(r4, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000380)={0x20, 0xe, 0x1, '6'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000240)={0x0, 0xe, 0x2, "c5d0"}, 0x0, 0x0}) syz_usb_control_io$sierra_net(r4, 0x0, &(0x7f0000000080)={0x1c, &(0x7f00000006c0)={0x40, 0x12, 0x2, "0600"}, 0x0, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x2, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x6, 0x7, 0x1, 0x4, 0x2, 0x1, 0x1, 0xff, 0x5, 0x0, 0x0, 0x9, 0xa, 0x2, 0xd, 0x5}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x6, 0xa, 0x5, 0x17e, 0x0, 0x0, 0xf1, 0x0, 0x8, 0x5, 0x7, 0x8, 0x0, 0x0, 0x0, 0xbd5], 0x2, 0x3c4212}) unshare(0x2040400) r5 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsmount(r5, 0x1, 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) getsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x146}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x300000c, 0x6bf83a23aba4c338, 0xffffffffffffffff, 0x0) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x4010, 0xffffffffffffffff, 0x10000000) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x20, 0x0, @fd=r1, 0x6, {0x0, r2}, 0xfff, 0x6, 0x0, {0x0, r8, r1}}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(0xffffffffffffffff, 0x3b87, &(0x7f0000000600)={0x18, 0x1, 0x545b907b253e3de2, 0x0, 0x0, 0x4}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) socket$netlink(0x10, 0x3, 0x0) preadv(r9, &(0x7f0000000340)=[{&(0x7f0000000280)=""/162}, {&(0x7f0000000000)=""/33}, {&(0x7f0000000140)=""/44, 0x4}], 0x4e, 0x300, 0x8000) 4.694505359s ago: executing program 2 (id=988): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000200)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = syz_io_uring_setup(0x497, &(0x7f0000002180)={0x0, 0x787f, 0x100, 0x4, 0x1b0}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x1f, 0x3}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x2, r2, 0x0, 0x0, 0x0, 0x200, 0x1, {0x1}}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) io_uring_setup(0x21dd, &(0x7f00000001c0)={0x0, 0x1fffff, 0x0, 0x2, 0xd5}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374000000006c000280080001400000000508000140000000090c0002"], 0x140}, 0x1, 0x0, 0x0, 0x4040}, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x14, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 4.104282092s ago: executing program 4 (id=990): mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000005, 0x2010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r2, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newlink={0x60, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x37c13, 0x71e12}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0x100000000000000, 0xfffffffffffffffe}}, @IFLA_GRE_LOCAL={0x14, 0x6, @loopback}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @private, @multicast2}, &(0x7f0000000300)=0xc) sendmsg$nl_route_sched(r3, &(0x7f0000000480)={&(0x7f0000000200), 0xc, &(0x7f0000000440)={&(0x7f0000000380)=@newtclass={0x24, 0x28, 0xcbad876656d74f99, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x9, 0xfff2}, {0x1, 0xfff2}, {0xfff3, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000855}, 0x48000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'macvlan1\x00', 0x0}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000080)={@remote, r6}, 0x14) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r8, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x2, 0xffffffff, 0x3, 0x22}, 0x7}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) modify_ldt$write(0x1, &(0x7f0000000340)={0x8, 0x20000000}, 0x10) r9 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) close(r9) socket(0x840000000002, 0x3, 0xff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000002600010316bd7000fcffbfff01"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x800) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x88}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 3.700043754s ago: executing program 1 (id=992): madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) personality(0xb) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r3, 0xc008551a, &(0x7f0000005480)=ANY=[@ANYBLOB]) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x4890}, 0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b19, &(0x7f0000000040)={'wlan1\x00', @random="0100"}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000040)='`M', 0x2}, {&(0x7f0000001480)="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", 0xff}], 0x3) ioctl$SCSI_IOCTL_GET_PCI(r6, 0x5393, &(0x7f0000000000)) openat$dma_heap(0xffffffffffffff9c, &(0x7f00000001c0), 0x5212c2, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) connect$inet(r7, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x6b) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0xffffffff}) 3.141538398s ago: executing program 1 (id=995): r0 = inotify_init() r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x5, @loopback, 0x3}], 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f0000000080), 0x4a) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f00000000c0)=0x2009, 0x4) sendmmsg$inet(r5, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r7 = socket$inet(0x2, 0x2, 0x73) setsockopt$inet_opts(r7, 0x0, 0x4, 0x0, 0x0) sendto$inet(r7, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r8 = dup(r1) sendmmsg$inet(r2, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)="93", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000004080)=[{&(0x7f0000001380)='R', 0x1}], 0x1}}], 0x2, 0x4) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) set_mempolicy(0x2, &(0x7f0000000000)=0x9, 0x6) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r7, 0x8002f515, &(0x7f0000000340)) sendmsg$nl_route_sched(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800) name_to_handle_at(r2, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{}, 0xd8eb, 0x2}}, &(0x7f0000000300), 0x400) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x1b}, 0x9c) close_range(r0, 0xffffffffffffffff, 0x0) 3.067971412s ago: executing program 2 (id=996): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/36, 0x24}], 0x1, 0x4, 0x2) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) bpf$BPF_LINK_CREATE(0x8, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x5, 0x0, @val=@tracing={0x0, 0xbe3}}, 0x20) r4 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x3, 0x84}}}, 0xa0}, 0x1, 0x0, 0x0, 0xc800}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0xa}}, 0x20) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0xc0884113, &(0x7f0000000240)={0x1, 0x0, 0x200, 0x10001, 0xffffffffffffffff, 0x8, 0x2, 0x200, 0x4, 0x2c, 0x80000005, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ptrace(0x10, r6) r7 = syz_open_dev$dri(&(0x7f0000000300), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r7, 0xc06864a2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x7fff, 0xb, 0xa, 0xfffffff6, {0x403, 0x1, 0x3, 0x8, 0x20, 0x7, 0x5, 0x6, 0x22, 0x5, 0x7f, 0x9c14, 0x20000a, 0x8d12074f, "0010b45adb3bdf6bbf43f7e7bdcf42a72e6ca213e20b354ba4e274f7720904f6"}}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r4, 0xc0984124, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) syz_open_dev$dri(&(0x7f00000003c0), 0x5, 0x200000) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r10, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r11], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r10, {0xffe0}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4040940}, 0x0) 2.555608356s ago: executing program 3 (id=998): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-des3_ede-asm\x00'}, 0x58) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) r1 = semget$private(0x0, 0x6, 0x0) semop(r1, &(0x7f00000000c0)=[{}], 0x1) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/78, 0x4e}], 0x1}, 0x40000002) 2.42050513s ago: executing program 0 (id=999): socketpair$unix(0x1, 0x3, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x7, 0x0, &(0x7f0000000080)={r2, r3+60000000}, &(0x7f0000001b40)) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1, 0xa031, 0xffffffffffffffff, 0x180000000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000200)={0x3, 0x1, 0x3, 0x4000, 0xffffffffffffffff}) fcntl$setlease(r4, 0x400, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x10b841, 0x0) pwritev2(r5, &(0x7f0000000600)=[{&(0x7f0000000000)="c2", 0x1}], 0x1, 0x1, 0xfffffff8, 0x1a) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r5, {0x0, 0xffffffffffffffff}}, './file0\x00'}) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r6, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x3, 0x2, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x240480d0}, 0x10) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000180)={'veth1_to_team\x00', &(0x7f0000001c40)=@ethtool_gstrings={0x1b, 0x4}}) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000d40)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0x0, 0xf0, 0xffffffff, 0x0, 0x310, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100190fea810b4040210eb83070000000000f00001fc0080193e05be97d9ea1f28e52bb304e70000ec6c5f01"], 0x0) 2.260284583s ago: executing program 3 (id=1000): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000600)={0x0, @bt={0x8001, 0x3, 0x1, 0x1, 0x31a9, 0xe63, 0x1, 0x80000000, 0x3, 0x9, 0x7, 0xbde, 0x9, 0x2, 0x8, 0x32, {0xfffffffa, 0x4}, 0x5, 0x3}}) 2.064129777s ago: executing program 2 (id=1001): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x100, 0x0, 0x1d2}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r6, 0x0, 0x0, 0x0, 0x262, 0x1, {0x1}}) io_uring_enter(r3, 0x3516, 0xf400, 0x0, 0x0, 0xf4) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000b40)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000b00)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r7}}, 0x20) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="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", 0xff}, {&(0x7f0000001480)="d1ffacd516de50ac9d15bc75316da4defa1e72f65a65cdd26dcc389aacf7856da9aecf3765d4c032e1960faf25bad906b7d3440b6e71a82f1d8f8b8db35b6091f3af94c6b46b9ab10fe3923f268771078d2668be7bd3eb941d4bb5baa8547e36283a065ce5766cbff3a8fc37fc4507643d3786bbf231d3ed88cb8b01eab14e4372cf4f89bd1b853caa5d9f07f523b9dfa8cc09053ff36fde08e96fb6b3acc196b1bd1e2d3a6c65f585df7e2b8b17439a7ab29a7dfe642c2f0ac7a81eca8073b559663f2daf7a0832b2b09557794a21bf114831f8e6db3922d0cd169e5a8b4adc95d7322ee75944de15f57780b88fef7f3d9b256705ccfa2125b43ce8e3aacaead963cdd7f792f14c9b24493f9f830f6de8da93bbd4357095631adec14224dd9bb049e826f3a49624393e6a031103faff0902ba88ae30af4a61caa77ff956214196fcf3c5536d823284306f367afcb46fb43231911cc53091671e7d853ebf015241b18e9fb6ac6d9a7a1b05dfd6d9e56a51567cd8837dd045abf6b85550f0dd8dded43147ab9bfadc18b9984699d5d875cb21a95a7f584d8c466d033df75193f9ae58b85cfacc54f6c6e12a0debe40ee361a839563bc2cb64271672a55370c2b035b482074ce2487ef8a3bc1c68856e6e09539276d961a0c647f1ee3237496fc99623e8fd33faf7797d86a88dcee152d15e10739bcbbd6077b76867e291f350d999024c12faf81f83792f48f7f6dd66aa6854e460ef7f8c755f3a6dd76509ea0d2db39057a5129185b2fb11546cd5d6cc59f640e9028ae6c7075fba5e5b5593d7f79ec387833f465d09bde464112821eaec5e6e8f2aee8d7358f9c14afe2018856f610848706c71cda62493aef2e39efb71b4a8e804847eda66b2b5b1d75b478f19208ee1ac43afb2dbbba5dd0f29f6946022e09fb853cb176ca3474ba2fa67cb245fe85ec61a095d6fd9ac2ac5685920201617342fe56072427b9bd3626a1a371e67041fcda781be0c234d6feb5ad500e8bc7074381fd0d04983a4a6cdb6c8e03d59dc50925e9e4b24e6f8e455f02818959f2927f0a2d9ff62ec3c5c399077048f7d3dad0830b2e6563693f2f9d48eca8c34804a7626282a4a214d13786993c011a88194dbf7b23e25f592e62186c9fb565fac7632de356153c89a6be0b6b26ba48c2427424769fcbd7ee072ed4bd4d0731d06c8537d616b1145a6c70edb13fb4dba3565221b3a2897a23861cd0e8e0060021cdd7de002d5e785e5d6d3d07f4e445ada9c8d9ba8b819d0b5c7b5d15a5192d3a83c125c8e117c823a9e33316b8c9154e7330d3a865048dbd9c14757691bfe56f10423f6ab717bec5eebeac6ba9ad1aeb6cde09d7fda8e475a71ac48d46b8d9a40879c9dec2db5c4799e5fc8e8b3d419031c1033fce88ae2c93d7ca62c9302e6b45ca8dfebe5b92724f035e8e9d7704efb23f445999fe08cfa28404874d8acc8d37870d394d9fcc8dbe763bc85c37f0f3bcc2cbea420cd073db598e7d89c14a31e5bf57cbefa301427c93091505f1f3e5cdf712958b2e8fc56684d3388107c1728f0e5a3be2164246071653e256ed3bf3000c17301da9a5a3d9ca475867c4f311a24e5ae909a62047a9e6bb71cbcb4f159c2ef0f66b4d0f9da51aba99cd9448443dd277362af18d32f111c48a952ef555b2c7c58b997ce61e74cc7551b57eaffe411219baddf490926d8e260dcd87c069e617195c352950f9b51ce88c12c4f7997ba515f77e68d44f831cdf4d7ee8b1b7cedcb4c4fc7e85ba288c8555d49d5b4b9bb70dc4b688bd12e6b38e37150f3ea457a76b23d5abe6551ea598e090aed87822b0954b8db1a7c605c925b7f9240b0e7a020f292a1fd4a37c74139bc6e7ff08373ebfc8feea371ae0b6c61c715f6f1f4b0b994c7e2e129f87db959aae6ff48664d824b29ba9f255890f9c537178db9c5302097891557f8175a46f308b1a2530aa726ea9d4cfce76db50637369724d0c5f51c97edb58ff5eb9b2434b3721b61688ba12471b97c6a65ba085e15406568ac852590701f2ef8451c5cf1191d70f51eaea9ddc4cbdd7428f627db5069111f65062d5cc34581826af3e670613dda99e31c42736aabd87be56e214ed606862a152455f91891b7430bae03284569c234588f495a5ecc4a23fad6ba34e2ee9ebde8c7f5f62c9344659375c2a1fe6fa6e4ef68712223b9471c513bb11429dbb8a45463c8882f462275ee0da567c60c2d8038843e0c20486676e9978f2aec9187820c94a6e7e519d06daf2ab198f5cafcab4d9c90a479800906192d66a3301a34fa6c5a931cea0a479a4d98d86d9de3e061323504b57186dd33df7a16ccb688c0de203666cb0a6b543a9d069dded44a3b432cbb71da921dcab6be1c2d7494d3b07841d9b4f9d659b5d3d3b2ed916f91588d589128e4b2d4448e6aab5a8160eddca0f6e022abb85e251a11cd6bae57a09b2c434ab5bdf6264afb20d5ab022d152e345bd32ba9283aa5b3cd9118bd271a8ac9083c98b8a83064e65428f7ad7b35bf1d60d4e703f22d2d316fc12bd68bcced82cf0962a3d5769c6a3d75d59f7a7b76454661fd3574b8c8e26d20c372407854505ea6c2406fbd8a1ba7bb017c565228aa6d03d18ed309a308ffb1ecec73c246413e7c70f25070eafed9e70d22e9e8b44125c44eceff37e65bf073bc6fad1ea2b72675af4bf70586a8f7e0f35700de94c802522897576ed115fa21b3d23a367844520b33f5b9aedc0245096765f4cb3b2ff4e54f39bd7346c2347875d75a931b17c6c424ddb4767e0e63cc7725a8fc4b1dbe7929b2f909cc5be8b09e63330341e6471dcac0f8b44693d01805a1467b71612260e2a273861b3697440a5f75497796bffcf79d62a4a50a6ed5ef2efe8c83374f2ecd08d8d628aa03b01a11caeb2bdecc0ab2abcecfa15627979d7c3f9dec5389fc6625e957f8075e23e636dd5514596189d568e14d33ae518e6e9978c6a36a74b49fdbd1260095c9abe447e618878039b75e305b1d2c9ddeb9e5cedb11802e0833739d8595d57d749c890c9290cca4aa96e6718747543796a187e54a66c2f71beefddf911a7a74b59c48ba642d5ecd4d415f48dfbde5baac8a4ba063c1b985d9f9f3180e8a1c8b2cf6a25c2ff17688cc858ac8b9c67960f09a1ca5f28f8e877159e00fe7fb10cca73b391508895e7e52c22f9b38d73dabd6ff7c55ebf4e1611daee8d52b4ceee49a6df7daeb81bf9d1c943a74c03d3dda52c5b99f3225c1b87074f5cef6187878bc5b665ec0561adcc9781280dd1c6592555d327afea78b21beeeb66a0af3eab3249245f41cdbca309d3fba5d4b345319dd0a26134c0c896f2c8d32fda28600013f6a4c95b4038faba70d6c480b360c55bdc0595f7ca636e85521ba505d894f9c5f0a90719bc9944f386ad7491422ff12f34a3c048708d51305a8cc5b2a502ac1575a14c75e9fb7219ede2f6d9c1b362230b6189e0d8cd8ccd11fd0325182c6e46c9977bf63aa02f7024aeb4389f989f5733a198b45e4329c4c1a538a009f216ad3ac09cac39547b4fd21a5d7146ea307ad9b9339f39d5161d17b59860a0aed38cd89d1b68c6438346d51a3a283074e34ee01d2eca527b1b3836ccdf7e807007152c79d14324e3d887c9551a9447527db4434810f5b0b73d855f32a0c89aa784e43f4c1657d408dd33f88aeae1e5186bbcc2a348b708e3cec9080e12ee3676beb5ee86a9b5cc4a3496c242b95a248906ed62f984b22373bdfd97515441f34e01006d8d1244aa88403f207cd8820ffe07634fc86d00f871c1e4c9e8fc1a00d295e36d98119599b62379cda10ada85efe7b50c5f38d8d010a2cd53db900939db1ffce14feffb7940d12842f4f2b507e1fa49e526752d1e3d80a0c2a75e870d85f77fd91fc46ac1b1288dd33338cdad154d6b80b5a925431868d62a3fb0036f28fe259a3f555f767526a9ea230c33843efc49ac3182a357845ea122d606ab22c9f937b2b905e02dd1cb07d380e3486be6167f00b6e6d90a3c1d6aee15da439a55542ce177e498998ba8ac69a848e63e4c7564e4dc04aad595fa1ab81275edafa0d352029c304200d2f2c5881cbf5a26b2141bdb117879cc11e7c13bd62f221ae1ac04dca3d8d58a13c130557ecf5f36184c7366d3852d0cbd6ca42f2a971d87c0bb204097af1a3abdab7b95d07fcdbf5f42607695dedcd26e30b8fc5cfd7b333a95f3ee69d5ba7911dadb1394285c437a0f26fc027737ba5ee7d63333f80acb59f1a7faf2ec3031c6533107502bffc92d8726a48ce00cdb5f1258d85ff8eb72bfb162e122022f1f3e8a72b41d2689d5228b1130fbc94638440", 0xc01}], 0x3) r8 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x458, 0x4018, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x1f0, 0x10, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xffff, 0x2, 0x1, {0x22, 0x85}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io(r8, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x40, 0x1, 0x88, {0x88, 0x3, "08bc9b910b863a7ec3e1f3cd37f7cf38df43089b21b5a50c5064ab0219ba4827c223a182e1f6ee65e932d3f2690f257be5c208b84f1be1d9bb0a24676a19b17519db093c3257e225d9ddbf4056d7286ca66fb092c403be79cf5108a8e261aa1e8644ec9d7cf300ef6ef8529f477e70d99419fb3cf56e973bbb59dff9773046c7b67ed77f7330"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.971838023s ago: executing program 3 (id=1002): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="bc0100001900010000000000fdd6df25e0000001000000000000000000000000ac1414bb000000000000000000000000001f000bfeff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="81000000000000000000000000000000000000000000000000000000000000000000000000000032fcffffffffffffff000000000000000000000000000000000100000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000401050000000000000000000000000000000001000000003c0000000a000000fe8000000000000000000000000000000200000002000000000800000008000000000000fc0200000000000000000000000000010000000032"], 0x1bc}}, 0x0) 1.940828929s ago: executing program 4 (id=1003): pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000001400)=ANY=[], 0x152) ioctl$FIBMAP(r0, 0x1, &(0x7f00000001c0)=0x9) socket$kcm(0x10, 0x2, 0x0) (async) r4 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x2, 0x40, 0x40, 0x0, 0x1}, 0x48) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x2, 0x40, 0x40, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x1, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x2, 0x0, 0x0, 0xe}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}]}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x5c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x1, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x2, 0x0, 0x0, 0xe}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}]}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x5c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0xfffffffffffffd8f, &(0x7f00000000c0)=[{&(0x7f0000000100)="5c00000015006b05c84e21000af32c6e021875f802000000050003800000d34460bc04eab556a71525346182949a36c23d3b48dfd810000000003fce86b6345b05ca97fe4d5670a568fe43", 0x7c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x19c5498e, 0x103902) close_range(r6, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000640)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)={0x50, r8, 0x1, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x3c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbc4a}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008800}, 0x28008000) (async) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000640)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)={0x50, r8, 0x1, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x3c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbc4a}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008800}, 0x28008000) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) r9 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r9, 0xc004562f, &(0x7f0000000000)=0x1) (async) ioctl$VIDIOC_S_OUTPUT(r9, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r9, 0xc0845657, &(0x7f0000000900)={0x0, @bt={0x2d0, 0x190, 0x1, 0x2, 0xdd9f83, 0x1, 0x9, 0x1, 0x2, 0x5, 0x722, 0x13, 0x7, 0x7f, 0x1048a4b19fe9db8a, 0xb763599953cb0936, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) (async) ioctl$VIDIOC_S_DV_TIMINGS(r9, 0xc0845657, &(0x7f0000000900)={0x0, @bt={0x2d0, 0x190, 0x1, 0x2, 0xdd9f83, 0x1, 0x9, 0x1, 0x2, 0x5, 0x722, 0x13, 0x7, 0x7f, 0x1048a4b19fe9db8a, 0xb763599953cb0936, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) r10 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f00000021c0)='b', 0x1, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040), &(0x7f0000002340)={'syz', 0x2}, &(0x7f00000009c0)="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", 0x194, 0x0) (async) r11 = add_key$user(&(0x7f0000000040), &(0x7f0000002340)={'syz', 0x2}, &(0x7f00000009c0)="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", 0x194, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000400)={r10, r11, r10}, &(0x7f0000000280)=""/174, 0xae, &(0x7f00000003c0)={&(0x7f0000000340)={'xxhash64-generic\x00'}, &(0x7f0000000380)="708803449262ddb5bda92158536f78c390609a10de442b2c85a693afd7d8e5ffc37e1b3aebbdae8dc970f20781e971fc777714aa", 0x34}) (async) keyctl$dh_compute(0x17, &(0x7f0000000400)={r10, r11, r10}, &(0x7f0000000280)=""/174, 0xae, &(0x7f00000003c0)={&(0x7f0000000340)={'xxhash64-generic\x00'}, &(0x7f0000000380)="708803449262ddb5bda92158536f78c390609a10de442b2c85a693afd7d8e5ffc37e1b3aebbdae8dc970f20781e971fc777714aa", 0x34}) keyctl$get_keyring_id(0x0, r10, 0xff91) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) unshare(0x2040400) fcntl$notify(r13, 0x402, 0x26) fcntl$notify(r13, 0x402, 0x0) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000003e00040028bd7000fedbdf250a0000005f56c9a798b1b387e2136f2b45e3ea30406bb122723f1552d626045b7f80653f29342dce12c1bc313edcb1621191b2d0b6f151c7f5c625e3584d36e277b3004f011ccba0200ed1058946c6f0d7bc822f28c71322cb818f50b20e7059d3e0f9792cf11a22229449e0fc4515d519583fea416ed8c0bc34331b14a1c2223b4111fd1510fa86301ec8864215effc339446e270badca6b376765da8393e407f84"], 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x240088c0) 1.736179723s ago: executing program 3 (id=1004): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) fcntl$getflags(r1, 0x401) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x0, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0011000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000004560100008e0100006f776e657200000000000000000000000000000000000000db21b519bf83d1fb180000000000", @ANYRES32=r0, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"]}, 0x296) recvmsg(r0, &(0x7f0000001540)={&(0x7f0000000000)=@qipcrtr, 0x80, &(0x7f00000013c0)=[{&(0x7f0000000080)=""/76, 0x4c}, {&(0x7f0000000100)=""/10, 0xa}, {&(0x7f0000000140)=""/232, 0xe8}, {&(0x7f0000000240)=""/220, 0xdc}, {&(0x7f0000000340)=""/19, 0x13}, {&(0x7f0000000380)=""/4089, 0xff9}, {&(0x7f0000001380)=""/12, 0xc}], 0x7, &(0x7f0000001440)=""/197, 0xc5}, 0x40000163) 1.635779907s ago: executing program 3 (id=1005): madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) personality(0xb) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r3, 0xc008551a, &(0x7f0000005480)=ANY=[@ANYBLOB]) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x4890}, 0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b19, &(0x7f0000000040)={'wlan1\x00', @random="0100"}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000040)='`M', 0x2}, {&(0x7f0000001480)="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", 0xff}], 0x3) ioctl$SCSI_IOCTL_GET_PCI(r6, 0x5393, &(0x7f0000000000)) openat$dma_heap(0xffffffffffffff9c, &(0x7f00000001c0), 0x5212c2, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) connect$inet(r7, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x6b) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0xffffffff}) 1.606522655s ago: executing program 4 (id=1006): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/bus/input/devices\x00', 0x0, 0x0) r1 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000840)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x10, 0x6, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, 0x1, 0x0, 0x1, 0xfffdfffd, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0xe, 0x80, 0xabf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7, 0x0, 0x0, 0x3, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x2, 0x7ffc, 0x0, 0x10, 0x2, 0x4000000, 0x2, 0x0, 0xfffffffd, 0x0, 0x10, 0x0, 0x0, 0x1b], [0xffffffff, 0x1, 0x2000, 0x0, 0x4, 0x20, 0x40000, 0x0, 0x2, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x80001004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x71, 0xfffffffe, 0x0, 0x800, 0x0, 0x0, 0x3, 0x6, 0x5, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x3, 0x1, 0x4, 0x0, 0xffeffffe, 0x0, 0x800005], [0x0, 0x2, 0x0, 0x7fffffff, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8000, 0x1, 0x0, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xdb2bb47c, 0x9, 0xc, 0xffffffff, 0x0, 0x0, 0x20, 0x20], [0x0, 0x0, 0x0, 0x0, 0x0, 0x705, 0x2, 0x0, 0x0, 0x403, 0x0, 0xcc5, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x9, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9, 0x5, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x200001, 0x0, 0x320146f1, 0x4, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x17) 1.533923907s ago: executing program 1 (id=1007): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x18281, 0x0) fcntl$setstatus(r0, 0x4, 0x0) (async) fcntl$setstatus(r0, 0x4, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) syz_emit_ethernet(0x3a, &(0x7f0000000040)=ANY=[], 0x0) 1.424312009s ago: executing program 1 (id=1008): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) recvfrom$inet(r0, &(0x7f00000002c0)=""/84, 0x54, 0x10007, &(0x7f0000000200)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) 1.423733491s ago: executing program 4 (id=1009): ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f0000000000)={0x5, 0xac808000}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x141b41, 0x191) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001140)=ANY=[@ANYBLOB="240000004000070126bd700000000000047c00000c00c28008000900", @ANYRES32=0x0, @ANYBLOB="04610b80"], 0x24}, 0x1, 0x0, 0x0, 0x4048081}, 0xc000) fallocate(r0, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x2000000) memfd_create(0x0, 0x18) creat(&(0x7f00000000c0)='./file0\x00', 0x50) 1.335484205s ago: executing program 1 (id=1010): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) (async) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x39, 0x1a, r0, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) r3 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_buf(r3, 0x1, 0x29, 0x0, &(0x7f0000000000)) 1.187534085s ago: executing program 1 (id=1011): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f00000001c0)=0x1000, 0x4) syz_usb_connect(0x2, 0x440, &(0x7f0000000000)=ANY=[], 0x0) 1.032278682s ago: executing program 4 (id=1012): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x805, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x29, 0x0, 0xff, 0x0, 0x2, @local, @loopback={0x300, 0xffff888101827518}, 0x8, 0x700}}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000000c0)=0x3) r4 = syz_open_dev$media(0x0, 0x4007, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_DELTABLE={0xac, 0x2, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_TABLE_USERDATA={0x8a, 0x6, "2d0ee1785d1dd0d0b83ff39d711636fad1af5559005e97471e7c88c5e96cd90ee0eeb834bd5e2cbc25e71e3ac3a2deebb5c4581784a0c86e1d76f4bce61186bb8508fdc14cd79493e198835c4407c775af18dc32f517dba0f1656baf9a3627e6128b59c13d86ab1a0d14b9d0270da22cf33167e46537ba7f7e3cd2d6274a45eed23c0f6fefa7"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x114}, 0x1, 0x0, 0x0, 0x1}, 0x0) mknod$loop(&(0x7f00000190c0)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000019100)='./file0\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002f00)='fdinfo\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fd\x00') r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r7 = accept$alg(r6, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000000340)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000007900)="60c82576efc9d0a70afe7d1f701514e8ddaf2ce931aaab50d884297e2a3f44c247d6955258350f25aa7129f8ed1faf90124306079032721b34a53b5e905aedad57b2dd637d53541f7bda2490cd12ec78d7afbe09b867d7d94432b44dbb1368245b34b1a03b7bf7c9ec3fbea5984d19cdb2fc0b6af18c1676b3d07a67cf126657954501dd8f2822a377dd8409bd93a0588e55e4b87b363f162267690da18125520a7c781af27966a7fec54d00f9e06182040e84804ab24482107e5a292a6b7f129a6797938859d859d8ddba9b9c5c5baf375bd34831bd25b9660995e5f7ca0d8959fc23160d09287522000aa5670a78061870b8748f296bb43fe182754e5eb50b28e88103a93d709205931334aedee0746f3947fb2167a443b23d69b4e542c4f00ea288dfabbe879241b2617d5373470a99ebc10bb1ce8b6b0c4283c164d7b28ec1ff1e213a6bcb6524cefd85b0482383b08c4be43bc7c7948e07e555f24c4fade8177a8f13753ab388a4ffc12d3356bd1a7a9ba64bea748974cde0876afdd3155a4e353e306926f1617284579236e5294142f94258f6f7d3b85b0d99ba05842fe199895d15ad0bb994f49de1030c53007b395edd4f5bf170826243b35fdb41f1d09179beb94cf987831a16e57745f6f4199ae57c20367eacbc6b2499192ddc9a47b3d4d6fd40c0b82318fc824fbf179ac1229bac375a4656e27775c82c5975633dd6b8d770e3574ae418332cee033eab656160c112d50e14f72f7f1e5ff8caac5ccde17528290d2dfc06928dd02239f1b2ee528cbd0cd1f67547e51ffc6da7bd8b7360469b9260aacae8520214b78f6081e5c66e495764f8d5c7e404863441834cd6023bae0c6fd2930b26556b06352c5c1400ab39bfc61237b123290171f69e94b0ccf3dc5a0f1ffb9dc6cea71a8de6586156c571a3845a969cd015b17fe43cdc1ea67695ac1673addcecdbaca67e5cde9fa241c4ed874fec484259f46b31ae342dd99a584624deaf4008dc0079a9f3eddbfb6a4bcfc3ad57fe82e6f8de9d8c391a7774a542d9f58a4175e22db9866bf02c6b4f0c3c56e31f8c259e0475112117393d8d269e01441b30776fa98edc7972c257038ab46668c93e425d976d15d913fcf4e81aeb2ee6f1b1ca1c7abaa802072f1512324de2743791ec8a58ddac92eed5055f95e682f4f67fed4d2a7474bf2e44e8ef700747a08b4d5ea060c9c3b74903e870acb9e96a8be9fb92e266a9b1bd93d224a3534f210ffcc00c9830f643cfe5f3ac6ac15108c5982e769d487b8f8955bb7dc168c61c617e5e2aa559a84ee5768390313c09a8299421805dd50394c92803e13e5d41a57a9232de28fb546673592fb5b7fea00ff3eb0a6f8c4b294b28d0d42585cdd098ab90c872d9d48e0342231a2cd371c1241fdc55141ddd08decf335dcf6a9d15915198da2fe8b2e96704798981fd17f6ebd8bd6e29aa57768d5b76178ce8170f83a75fe3d64aea80ac0beb81104f843bea82e024baa38d622e73f879141e9998eb51164be3495755efb5db051253f306068c34143c496f786db589813db9dc3c656b6c481aa7a0d8b296e61c58d3c7522bb9be794ca39f752818a9c4fb46bacee0990a075b8bad12057e9e08fa4db1814c28a28a912ed121a9322171b1b83cb7c650aab82be444060703e99c570f22129105b38073e234ba2a33ace4cce89534de700d98a8b59f594f6bcc63b1eead2fd4b1a1e89de55d28b17b730569757e11d7c116150be182e9bdfcf5c3b08094eccb36715e6f8d67bae66599e98bcf58cc57c1f0f10794011ae4fd75a9f37c8111c36e3e7386d6660ec707a6bb4d6f8467e2341a166295db06aaba341070d30cf6bec4af3be44ff3de6e880656cce0123293e904c61c99411a9b49eb6c1f56f88f222dc7f9789dcfc3451c212b124fa9d62693b2d218b15a918fa7f216a7dbbb215795e2dbf1a8831a4a75ede9a60c3a2f1b6afb1c11b9b87988250c92dfe775a0bf926426821533af193594b03a483025b8dd142ce26eda63107f378107973b30ae463df7e29f5904344becd90c5e57c29dde6354e13ca6eb032e1c1d9086d1ffc0c86ba07a0e5f5016e23df007043dce3fd171ad80cddca0f7966f1f6f2ac687d66fef8db2545c127313b872851846b14e4a959c03c835b6a05ce82a1ac7d801f5ece2714fdc9796e40c0057e751bd268b55a01d9c822bcd8221365c734c0f945bce3e89a3adbe272f7a8e5a953da3a5a14e8c2114b8ddf72191a233293ea137526f3e19e4faa11fe9cea7bad7bd6c89e1bb07f6e12b8736c7bfa5a3292a4595aee301dc7d6f27e8ec05be7fffbfea3fc8b678b926dc292f2536f6fe392b4725b2fc8eb6c09f1be7ec809f21b1797f61f2d6dd4870d96a2365f53ba6042d4e36b2ecf2507552e648189901743be3d4a09c1a8f589e83780b9a1b6744add4b0827b5c58aff880b2cf04adf218634b55b299cacfc72b272065ceb4ea373db88589f6e15c02db51ef85d3190720d8ace28dd781281b72f75a64165daf0f82a82bd8b602cb087e388260e94d41b512b0fcb77103858a27ef35e601b070b245948092d72c3e3e02f9aadc48f5269fd2f25ee75572e34a6b25977c23243e3fda2a2a6fdb12adfcae7c73c45cba7a2e03820af9f8426146ade515851c5e789a3658ce2ff81f2f8ecd48394e3e6e7bf312ae9128c9c9fa63715875d2a221162f520cb5a90377f25d0919ba97b82c8cc3de4b5ddb0eb6c3ab4f01b9b731d7edbe78a908a28eb9d056e53f9db03f87214df6ae0474c965be0a02d0e376ef0bb0a950f6042c367ef68001229dc28187040e51e804ccec77796969b1f93af41040d2ffd9eb1444fdf151dc5ed73a9b6265257f6dde3e670b0e3e71b6b5ff050a9a0eb814dd91d315790bbacbfb8faf0237bc6ed96ac8b61a56ac452523868e066ad23be4b0bc7fdda3ff9987404cc93fa177b68363c06448dabe0cde9aa173b81596ca9879345745ff969fc7380a90db97c45821db78ba70afb0c4e432142144e595f6dc8300e6dbb4b122447bf9921db55febf47f5985993dcb10f815bb7074cbee3f2242ecf608529d113080a44d317bab6df6b157f890990715e611db285a5fb6018083af4b4dcfa7a5f120a286d892c57be433e95d96afb2816d766470e42a4a783b43b358ca413b7929b8cf7cae8aaf683b35cce3ae381c5c2a52c3f977853d3a990db6c97a2d3a088498e6bb9432f24c7e3adeeb2245622b47813d2fd6096953cea4902a595b849058fece99067fd6f28db479ac626e188e32d795aa1747e4901f5ce6250ec94e2df7f42734811fce1d909749874fa4ce27baed0f00b377df2f3c0c59a2c04bb610fb646dbb7bd9ed42ac2651b67f60728dfa2c4f673feb196d83f9917a85782de947441c6162f9f845f293f5036b66dca1582b7daa02cffaf46c875686c3d73fc5bad55eb196149de09d09985eda53bdc3a8ada4c88c7156d597658d6aa58c488389ab6d96a38962390b7a7bf2ac937d8cbb763d01fe73c81e4a142c098d257dfabbbcb4d3ebd73cf809640c7c522db394effc5bf192dddcbc1ee43944d50b413617c10aef863a648998741b6d8c267d3bc13bcabea953aa9c5420c997bc792ba2c8f8c0c45124ff1758426df6e9645d5574cfedd949afcfccf6b9eaf8a2e36f3a2cf5581daf2699cd94ec485d9f7833ff2732e93874531ea709a5dc4779a0812dfff4887166d9f74c0d7a7465b0ffbd6cc6fb6978558a91021f3ef9662f8a1b3e8989dc529efc59f3d74cb0abd132bd520ccdd222cb3535ddf5ae13d2a76bff63e1a4f4bd4b79857e572ceb9f6182e41e5f5c4817c62cde365ad261dd5e70f285fbb33d806051c977b11020fd1956502cb59dccb27b387f3ebc0b6156a65eb5c108b4095ab65e5fbd9da399c54658357510772c299ed9175e3bf65b15cfef3fe41593498d6c3d4ad26d75dcc9dddc212847f2ea654f3d3ce50c47bf683d33cb6e5c64c2a3506fcf8fd03e7e5f476efb98182d68a5ee9b9c3b5b0b9a373725dd870e434b9c64f9180a02c39c9930be40998cefefd0a2ec6132da4bb5c38bd980b7980eee7d6b679f9de2e791ff8ddbccc8af3c245e7bcf2dc5f09ea4cec03590156a949470f72c7c1fb698ea5cd447194d151e34f499838c784fbd72bf751f5fb547340154419952c6743f3562767693b950f0a5a8342aa9c28ab1ceaceb1792df83cd17c3f0b46e8b5cab88e03ed1feecb24b1b7d6b79be4c71428aa576473f9871d1ff2eab737e71d2b10fcdbd83000eed865e0b29b152cb44f32a5d9d861df04a6f28c23d3cbab468d35535688db2e891b95cd6fec313e238fadf8155255fabd3b5898eeeb1764760883a6cfcbac086e59966c016198d19a4fc470b84c469b654cd00537c2b94a6a06888ec65ebbacd846934dd7940b536ef3b0872a571f5585b96df750b0676f9a7f6b841e9091542f363cc97d01503f4bdac7f4d78b87d94c06f0075837be785085e948e321e8a04e4586ede1fc7f873d8a1908c40448145436e3ce31a33502164971b1137a81f87e7306d76a860415c6c5086ae03f8a392aed9620b822b77b73cff167faba88358dbed456d4d82b68ec95612b76b590f87768e9dba79c56c969921ee5bd734994c6644f4ca63e1507320e584b638bce6e1b3e143aa85af2faaf830938be081a57d4c9286efef1c721487", 0xd05}], 0x1, &(0x7f0000001380)=[@assoc={0x18, 0x117, 0x4, 0xcf5}], 0x18}], 0x1, 0x0) recvmmsg(r7, &(0x7f0000006400)=[{{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000004d80)=""/4102, 0x1006}], 0x1}}], 0x1, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x7c81, 0x0) socket$kcm(0x2, 0x5, 0x84) 941.507288ms ago: executing program 0 (id=1013): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) clock_adjtime(0x0, 0x0) (async) clock_adjtime(0x0, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x3c, r1, 0x1, 0x0, 0x0, {0x2a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x238002) 478.685659ms ago: executing program 0 (id=1014): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x20800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x10, 0x8, &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f0000005680)=[{{&(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000001580)=[{&(0x7f00000001c0)=""/68, 0x44}, {&(0x7f0000000240)=""/199, 0xc7}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/209, 0xd1}, {&(0x7f0000001440)=""/254, 0xfe}, {&(0x7f0000001540)=""/2, 0x2}], 0x6, &(0x7f0000001600)=""/132, 0x84}, 0x3f}, {{&(0x7f00000016c0)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000002b00)=[{&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000002740)=""/40, 0x28}, {&(0x7f0000002780)=""/178, 0xb2}, {&(0x7f0000002840)=""/41, 0x29}, {&(0x7f0000002880)=""/223, 0xdf}, {&(0x7f0000002980)=""/191, 0xbf}, {&(0x7f0000002a40)=""/152, 0x98}], 0x7, &(0x7f0000002b80)=""/6, 0x6}, 0x7}, {{0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f0000002bc0)=""/49, 0x31}, {&(0x7f0000002c00)=""/129, 0x81}, {&(0x7f0000002cc0)=""/101, 0x65}, {&(0x7f0000002d40)=""/70, 0x46}, {&(0x7f0000002dc0)=""/187, 0xbb}], 0x5, &(0x7f0000002f00)=""/107, 0x6b}, 0x9}, {{&(0x7f0000002f80)=@can, 0x80, &(0x7f00000040c0)=[{&(0x7f0000003000)=""/157, 0x9d}, {&(0x7f00000030c0)=""/4096, 0x1000}], 0x2, &(0x7f0000006800)=""/4108, 0x100c}}, {{0x0, 0x0, &(0x7f00000052c0)=[{&(0x7f0000005100)=""/118, 0x76}, {&(0x7f00000051c0)=""/221, 0xdd}], 0x2, &(0x7f0000005300)=""/60, 0x3c}, 0x8}, {{&(0x7f0000005340)=@hci, 0x80, &(0x7f0000005540)=[{&(0x7f00000053c0)=""/49, 0x31}, {&(0x7f0000005400)=""/163, 0xa3}, {&(0x7f00000054c0)=""/21, 0x15}, {&(0x7f0000005500)=""/19, 0x13}], 0x4, &(0x7f0000005580)=""/228, 0xe4}, 0x1000}], 0x6, 0x2, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000040)={0x1, 0x0, [{0x7ff, 0x1, 0x1, 0x0, @irqchip={0x8, 0x3}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r4 = mq_open(&(0x7f0000000380)='&\x00w\xb4N6Bf\xa9\xc2\xd0\b\x06L\xbbQ\xd6T\xe3+SD\xa8\x0f\xefwHw\xdab\xc4\x1a\xe55@hA5\xd6\xec.)\x8f}\xc5#L\x99\"\x84;{\xfa\x04~\xf1\x17\x1d\x90\x83\xfc\x1e\xae\xb0/(\xbb\xd3\xb7\xca\x13j\xab\xfa\xc5Mq\xb7ks\xe0 \x9d\xf8\x7f\x84b\xa4h\xeekc\xffZ\x9fg\x84lm\xd7F\x97\xdcX\xe3\x87\x18\x90\x03\x12^\xf2{\xf1\xbe\x12[~\xe7\xca\xe4\x13\xd6k\xa6\xf3v5F\xc9.\xce\x87z\xd4<\xa8\xba\xd0\x9c\ff\xe1\xe2\xf9\x18\xc0\xd0\xa1\x02K\xdd0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0xa042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000380)={0x1, 0x0, [{0x40000098, 0x0, 0x4}]}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="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", @ANYRES64=r1], 0x0) syz_usb_control_io$hid(r5, &(0x7f00000001c0)={0x24, &(0x7f0000001180)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) (async) syz_usb_control_io$hid(r5, 0x0, 0x0) (async) syz_usb_control_io(r5, 0x0, 0x0) (async) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r5, 0x0, 0x0) kernel console output (not intermixed with test programs): loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 227.321130][ C1] buffer_io_error: 377 callbacks suppressed [ 227.321149][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 227.336389][ T5905] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 227.336636][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 227.353181][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 227.365624][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 227.374829][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 227.383089][ T5919] usb 2-1: config 7 has no interface number 0 [ 227.394251][ T5919] usb 2-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=dd.6d [ 227.404191][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 227.413360][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 227.431775][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.441192][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 227.450390][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 227.458548][ T5919] usb 2-1: Product: syz [ 227.459598][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 227.464302][ T5919] usb 2-1: Manufacturer: syz [ 227.471897][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 227.496351][ T5919] usb 2-1: SerialNumber: syz [ 227.496720][ T5920] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 227.513326][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 227.522498][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 227.530615][ T8314] ldm_validate_partition_table(): Disk read failed. [ 227.566450][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 227.575689][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 227.621343][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 227.630557][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 227.643788][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 227.652992][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 227.656434][ T5905] usb 3-1: Using ep0 maxpacket: 8 [ 227.668106][ T8314] Dev loop5: unable to read RDB block 0 [ 227.674634][ T8314] loop5: unable to read partition table [ 227.687430][ T8314] loop5: partition table beyond EOD, truncated [ 227.699368][ T8316] netlink: 8 bytes leftover after parsing attributes in process `syz.0.617'. [ 227.711462][ T8318] netlink: 8 bytes leftover after parsing attributes in process `syz.0.617'. [ 227.749236][ T5905] usb 3-1: unable to get BOS descriptor or descriptor too short [ 227.758923][ T5920] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 227.801103][ T5920] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 227.802690][ T8314] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 227.834027][ T8293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.852030][ T8293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.902781][ T5920] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 228.001097][ T5905] usb 3-1: config 7 has an invalid interface number: 142 but max is 0 [ 228.021492][ T5920] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 228.039765][ T5905] usb 3-1: config 7 has no interface number 0 [ 228.079672][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.105639][ T5905] usb 3-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=dd.6d [ 228.172226][ T5920] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 228.190677][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.235670][ T5905] usb 3-1: Product: syz [ 228.293378][ T5905] usb 3-1: Manufacturer: syz [ 228.321368][ T5905] usb 3-1: SerialNumber: syz [ 228.392747][ T5920] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 228.493903][ T5920] usb 5-1: USB disconnect, device number 28 [ 228.543741][ T5832] udevd[5832]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 228.693605][ T8303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.743617][ T8303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.678395][ T8337] netlink: 88 bytes leftover after parsing attributes in process `syz.0.624'. [ 229.700055][ T8335] netlink: 68 bytes leftover after parsing attributes in process `syz.4.622'. [ 229.906773][ T5919] usb 2-1: USB disconnect, device number 27 [ 230.016843][ T8327] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 230.261480][ T8327] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 230.357581][ T8327] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 230.422423][ T5905] usb 3-1: USB disconnect, device number 38 [ 230.432135][ T8327] usb 4-1: config 0 interface 0 has no altsetting 0 [ 230.464103][ T8327] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 230.476777][ T8327] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 230.519806][ T8327] usb 4-1: Product: syz [ 230.528111][ T8327] usb 4-1: Manufacturer: syz [ 230.544058][ T8327] usb 4-1: SerialNumber: syz [ 230.562020][ T8327] usb 4-1: config 0 descriptor?? [ 230.582357][ T8327] usb 4-1: selecting invalid altsetting 0 [ 230.749982][ T8351] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.783963][ T8327] usb 4-1: USB disconnect, device number 30 [ 230.836407][ T5905] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 231.031416][ T5905] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 231.041173][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.052347][ T5905] usb 3-1: Product: syz [ 231.059517][ T5905] usb 3-1: Manufacturer: syz [ 231.064479][ T5905] usb 3-1: SerialNumber: syz [ 231.100622][ T5905] usb 3-1: config 0 descriptor?? [ 231.210776][ T8368] netlink: 'syz.0.635': attribute type 20 has an invalid length. [ 231.218764][ T8368] netlink: 4 bytes leftover after parsing attributes in process `syz.0.635'. [ 231.243618][ T7214] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.243759][ T8368] netlink: 'syz.0.635': attribute type 20 has an invalid length. [ 231.257740][ T7214] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.266435][ T5920] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 231.278438][ T7214] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.280814][ T8368] netlink: 4 bytes leftover after parsing attributes in process `syz.0.635'. [ 231.317040][ T8370] netlink: 'syz.0.635': attribute type 1 has an invalid length. [ 231.317256][ T7214] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.345259][ T5905] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 231.438519][ T5920] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 231.470316][ T5920] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 231.484928][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.517110][ T48] usb 2-1: new low-speed USB device number 28 using dummy_hcd [ 231.534880][ T5920] usb 5-1: config 0 descriptor?? [ 231.571902][ T8361] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 231.681241][ T48] usb 2-1: No LPM exit latency info found, disabling LPM. [ 231.701211][ T48] usb 2-1: config 118 has too many interfaces: 214, using maximum allowed: 32 [ 231.711925][ T48] usb 2-1: config 118 has 1 interface, different from the descriptor's value: 214 [ 231.722524][ T48] usb 2-1: config 118 has no interface number 0 [ 231.732355][ T48] usb 2-1: string descriptor 0 read error: -22 [ 231.756130][ T48] usb 2-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 231.768215][ T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.786429][ T8327] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 231.851213][ T8385] fuse: Unknown parameter 'roOtmode' [ 231.966436][ T8327] usb 4-1: Using ep0 maxpacket: 8 [ 231.988169][ T48] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 232.019055][ T8327] usb 4-1: unable to get BOS descriptor or descriptor too short [ 232.041045][ T48] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 232.061408][ T48] dib0700: firmware download failed at 7 with -22 [ 232.068776][ T5920] elan 0003:04F3:0755.0010: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 232.092063][ T8327] usb 4-1: config 7 has an invalid interface number: 142 but max is 0 [ 232.099161][ T48] usb 2-1: USB disconnect, device number 28 [ 232.106358][ T8327] usb 4-1: config 7 has no interface number 0 [ 232.141479][ T8327] usb 4-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=dd.6d [ 232.177443][ T8327] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.222599][ T8327] usb 4-1: Product: syz [ 232.249120][ T8327] usb 4-1: Manufacturer: syz [ 232.267148][ T8327] usb 4-1: SerialNumber: syz [ 232.280147][ T8361] netlink: 'syz.4.632': attribute type 16 has an invalid length. [ 232.293807][ T8361] netlink: 'syz.4.632': attribute type 17 has an invalid length. [ 232.454504][ T6159] usb 5-1: USB disconnect, device number 29 [ 232.535201][ T8378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.544439][ T8378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.633437][ T8397] netlink: 'syz.1.642': attribute type 12 has an invalid length. [ 232.793334][ T6159] IPVS: starting estimator thread 0... [ 232.886887][ T5920] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 232.897182][ T8399] IPVS: using max 41 ests per chain, 98400 per kthread [ 233.055251][ T5920] usb 1-1: Using ep0 maxpacket: 16 [ 233.342451][ T5920] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 233.362003][ T5920] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 233.412635][ T5920] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 233.421960][ T5886] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 233.438774][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.474133][ T5920] usb 1-1: Product: syz [ 233.478629][ T5920] usb 1-1: Manufacturer: syz [ 233.483290][ T5920] usb 1-1: SerialNumber: syz [ 233.599805][ T5886] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 233.612878][ T5886] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 233.667850][ T5886] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 233.701831][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.762201][ T8398] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 233.805169][ T8408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.825914][ T8408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.859469][ T5905] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 233.981012][ T8398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.030853][ T8398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.152925][ T5920] usb 1-1: 0:2 : does not exist [ 234.225875][ T5886] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 234.234721][ T5920] usb 1-1: USB disconnect, device number 35 [ 234.526028][ T8327] usb 4-1: USB disconnect, device number 31 [ 234.550166][ T8412] netlink: 'syz.4.646': attribute type 29 has an invalid length. [ 234.574156][ T8412] netlink: 'syz.4.646': attribute type 29 has an invalid length. [ 234.585589][ T8412] netlink: 500 bytes leftover after parsing attributes in process `syz.4.646'. [ 234.809172][ T8419] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.834613][ T8419] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.956786][ T5886] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 235.014201][ T6159] usb 3-1: USB disconnect, device number 39 [ 235.118670][ T5886] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 235.118700][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.121403][ T5886] usb 5-1: config 0 descriptor?? [ 235.137288][ T8430] netlink: 4 bytes leftover after parsing attributes in process `syz.2.653'. [ 235.159663][ T8430] ip6gretap0: entered promiscuous mode [ 235.206546][ T8430] macvtap1: entered promiscuous mode [ 235.206927][ T8430] macvtap1: entered allmulticast mode [ 235.206945][ T8430] ip6gretap0: entered allmulticast mode [ 235.209407][ T8432] ip6gretap0: left allmulticast mode [ 235.209645][ T8432] ip6gretap0: left promiscuous mode [ 235.326568][ T8416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.326940][ T8416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.368907][ T8436] fuse: Bad value for 'user_id' [ 235.379347][ T8436] fuse: Bad value for 'user_id' [ 235.603393][ T8444] netlink: 'syz.3.658': attribute type 29 has an invalid length. [ 235.659750][ T8444] netlink: 'syz.3.658': attribute type 29 has an invalid length. [ 235.706698][ T7557] usb 2-1: USB disconnect, device number 29 [ 235.761708][ T8444] netlink: 500 bytes leftover after parsing attributes in process `syz.3.658'. [ 235.922067][ T8453] netlink: 24 bytes leftover after parsing attributes in process `syz.1.659'. [ 235.936567][ T5920] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 236.196371][ T5920] usb 1-1: Using ep0 maxpacket: 8 [ 236.210963][ T5920] usb 1-1: unable to get BOS descriptor or descriptor too short [ 236.235598][ T5920] usb 1-1: config 7 has an invalid interface number: 142 but max is 0 [ 236.254839][ T5920] usb 1-1: config 7 has no interface number 0 [ 236.285830][ T5920] usb 1-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=dd.6d [ 236.297353][ T7557] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 236.382892][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.415193][ T5920] usb 1-1: Product: syz [ 236.421089][ T5920] usb 1-1: Manufacturer: syz [ 236.425861][ T5920] usb 1-1: SerialNumber: syz [ 236.460905][ T7557] usb 2-1: config index 0 descriptor too short (expected 1051, got 27) [ 236.480596][ T7557] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 236.527909][ T7557] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 236.584320][ T30] audit: type=1326 audit(1764763455.481:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8461 comm="syz.2.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4e78f749 code=0x7ffc0000 [ 236.609028][ T7557] usb 2-1: config 0 interface 0 altsetting 12 bulk endpoint 0x87 has invalid maxpacket 149 [ 236.676765][ T7557] usb 2-1: config 0 interface 0 has no altsetting 0 [ 236.693242][ T8447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.704407][ T8447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.741785][ T30] audit: type=1326 audit(1764763455.481:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8461 comm="syz.2.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4e78f749 code=0x7ffc0000 [ 236.806895][ T30] audit: type=1326 audit(1764763455.481:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8461 comm="syz.2.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f8e4e78f749 code=0x7ffc0000 [ 236.832969][ T7557] usb 2-1: New USB device found, idVendor=06cd, idProduct=010a, bcdDevice=d9.c3 [ 236.843908][ T7557] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.854222][ T7557] usb 2-1: Product: syz [ 236.860648][ T7557] usb 2-1: Manufacturer: syz [ 236.870957][ T7557] usb 2-1: SerialNumber: syz [ 236.879166][ T30] audit: type=1326 audit(1764763455.481:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8461 comm="syz.2.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4e78f749 code=0x7ffc0000 [ 236.912315][ T5905] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 236.912749][ T7557] usb 2-1: config 0 descriptor?? [ 236.942761][ T8453] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 236.951414][ T30] audit: type=1326 audit(1764763455.481:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8461 comm="syz.2.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f8e4e78f749 code=0x7ffc0000 [ 237.011515][ T30] audit: type=1326 audit(1764763455.481:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8461 comm="syz.2.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4e78f749 code=0x7ffc0000 [ 237.076581][ T5905] usb 4-1: Using ep0 maxpacket: 8 [ 237.098366][ T5905] usb 4-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 237.124285][ T5905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.169172][ T5905] usb 4-1: Product: syz [ 237.182084][ T30] audit: type=1326 audit(1764763455.481:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8461 comm="syz.2.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4e78f749 code=0x7ffc0000 [ 237.211540][ T5905] usb 4-1: Manufacturer: syz [ 237.243747][ T5905] usb 4-1: SerialNumber: syz [ 237.281803][ T5905] usb 4-1: config 0 descriptor?? [ 237.299404][ T30] audit: type=1326 audit(1764763455.481:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8461 comm="syz.2.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f8e4e78f749 code=0x7ffc0000 [ 237.378760][ T30] audit: type=1326 audit(1764763455.481:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8461 comm="syz.2.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4e78f749 code=0x7ffc0000 [ 237.423117][ T30] audit: type=1326 audit(1764763455.481:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8461 comm="syz.2.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4e78f749 code=0x7ffc0000 [ 237.716957][ T982] usb 5-1: USB disconnect, device number 30 [ 237.811978][ T8470] sctp: [Deprecated]: syz.3.664 (pid 8470) Use of struct sctp_assoc_value in delayed_ack socket option. [ 237.811978][ T8470] Use struct sctp_sack_info instead [ 238.021392][ T8474] netlink: 4 bytes leftover after parsing attributes in process `syz.4.665'. [ 238.044669][ T8474] ip6gretap0: entered promiscuous mode [ 238.051581][ T8474] macvtap3: entered promiscuous mode [ 238.057546][ T8474] macvtap3: entered allmulticast mode [ 238.063462][ T8474] ip6gretap0: entered allmulticast mode [ 238.090343][ T8476] ip6gretap0: left allmulticast mode [ 238.147053][ T8476] ip6gretap0: left promiscuous mode [ 238.598343][ T5956] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 238.633500][ T5920] usb 1-1: USB disconnect, device number 36 [ 238.776904][ T5956] usb 5-1: Using ep0 maxpacket: 8 [ 238.804982][ T5956] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 238.862266][ T5956] usb 5-1: config 179 has no interface number 0 [ 238.892004][ T5956] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 238.903424][ T5956] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 238.988253][ T5956] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 239.073178][ T5956] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 239.114545][ T5956] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 239.164363][ T5956] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 239.180102][ T8490] netlink: 'syz.0.670': attribute type 29 has an invalid length. [ 239.199941][ T8490] netlink: 'syz.0.670': attribute type 29 has an invalid length. [ 239.218451][ T5956] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.249869][ T8490] netlink: 500 bytes leftover after parsing attributes in process `syz.0.670'. [ 239.261394][ T8478] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 239.345596][ T7557] keyspan 2-1:0.0: Keyspan 4 port adapter converter detected [ 239.354397][ T7557] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 7 [ 239.402650][ T7557] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 239.424531][ T7557] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 239.462569][ T7557] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 239.475774][ T5956] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input24 [ 239.553494][ T7557] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 82 [ 239.603588][ T7557] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 239.674016][ T7557] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 239.810261][ T8498] macvlan2: entered promiscuous mode [ 239.818210][ T8498] batman_adv: batadv0: Adding interface: macvlan2 [ 239.825091][ T8498] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 239.949772][ T8498] batman_adv: batadv0: Not using interface macvlan2 (retrying later): interface not active [ 240.095804][ T5905] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 240.098293][ T7557] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 83 [ 240.119038][ T8478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.186426][ T5956] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 240.264158][ T5905] gspca_sunplus: reg_w_riv err -71 [ 240.267670][ T7557] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 3 [ 240.278715][ T8478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.289863][ T5905] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 240.349830][ T5905] usb 4-1: USB disconnect, device number 32 [ 240.368331][ T7557] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 240.432529][ T7557] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 84 [ 240.461529][ T5956] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.476476][ T7557] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 4 [ 240.501388][ T5956] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.541203][ T7557] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 240.545835][ T5956] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 240.593273][ T48] usb 5-1: USB disconnect, device number 31 [ 240.593294][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 240.607824][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 240.655067][ T7557] usb 2-1: USB disconnect, device number 30 [ 240.685305][ T7557] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 240.706514][ T5956] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 240.757900][ T5956] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.790235][ T7557] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 240.790687][ T5956] usb 1-1: config 0 descriptor?? [ 240.826748][ T7557] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 240.897489][ T7557] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 240.954623][ T7557] keyspan 2-1:0.0: device disconnected [ 241.386886][ T7557] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 241.526384][ T5905] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 241.535402][ T5956] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 241.560239][ T7557] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 241.576744][ T7557] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.631226][ T7557] usb 2-1: config 0 descriptor?? [ 241.850093][ T5905] usb 5-1: Using ep0 maxpacket: 8 [ 241.869205][ T8497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.905717][ T8497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.932558][ T5905] usb 5-1: unable to get BOS descriptor or descriptor too short [ 241.963253][ T5905] usb 5-1: config 7 has an invalid interface number: 142 but max is 0 [ 241.974571][ T8509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.989799][ T5905] usb 5-1: config 7 has no interface number 0 [ 241.990521][ T8509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.030305][ T5905] usb 5-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=dd.6d [ 242.058334][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.098894][ T5905] usb 5-1: Product: syz [ 242.100575][ T5905] usb 5-1: Manufacturer: syz [ 242.100593][ T5905] usb 5-1: SerialNumber: syz [ 242.336772][ T8524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.347016][ T8524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.956421][ T7557] usb 1-1: reset high-speed USB device number 37 using dummy_hcd [ 243.444102][ T8533] netlink: 'syz.0.682': attribute type 29 has an invalid length. [ 243.455435][ T8533] netlink: 'syz.0.682': attribute type 29 has an invalid length. [ 243.469246][ T8533] netlink: 500 bytes leftover after parsing attributes in process `syz.0.682'. [ 243.495400][ T5880] usb 2-1: USB disconnect, device number 31 [ 243.978367][ T8544] netlink: 140 bytes leftover after parsing attributes in process `syz.0.688'. [ 244.003694][ T8544] netlink: 8 bytes leftover after parsing attributes in process `syz.0.688'. [ 244.128089][ T5919] usb 1-1: USB disconnect, device number 37 [ 244.308086][ T8560] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.692'. [ 244.406159][ T8562] syzkaller0: entered promiscuous mode [ 244.412213][ T8562] syzkaller0: entered allmulticast mode [ 244.566620][ T5956] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 244.586806][ T5919] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 244.733709][ T5956] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 244.736550][ T5919] usb 1-1: device descriptor read/64, error -71 [ 244.754328][ T5956] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.775193][ T5956] usb 2-1: config 0 descriptor?? [ 244.996168][ T5905] usb 5-1: USB disconnect, device number 32 [ 245.016396][ T5919] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 245.060568][ T8558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.073945][ T8558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.177633][ T5919] usb 1-1: device descriptor read/64, error -71 [ 245.287052][ T5919] usb usb1-port1: attempt power cycle [ 245.322258][ T8594] loop5: detected capacity change from 0 to 7 [ 245.338534][ C1] blk_print_req_error: 182 callbacks suppressed [ 245.338546][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 245.354704][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 245.363907][ C0] buffer_io_error: 182 callbacks suppressed [ 245.363922][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 245.396419][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 245.405604][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 245.424085][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 245.433455][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 245.444035][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 245.453199][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 245.465207][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 245.474392][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 245.485425][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 245.494593][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 245.508023][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 245.517189][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 245.526698][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 245.535869][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 245.544259][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 245.553521][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 245.565214][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 245.634869][ T8594] ldm_validate_partition_table(): Disk read failed. [ 245.646846][ T5919] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 245.650307][ T8594] Dev loop5: unable to read RDB block 0 [ 245.666233][ T8594] loop5: unable to read partition table [ 245.672150][ T8594] loop5: partition table beyond EOD, truncated [ 245.679300][ T8594] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 245.686990][ T5919] usb 1-1: device descriptor read/8, error -71 [ 245.936458][ T5919] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 245.953084][ T8606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.707'. [ 245.983148][ T5919] usb 1-1: device descriptor read/8, error -71 [ 246.114128][ T5919] usb usb1-port1: unable to enumerate USB device [ 246.354271][ T8609] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0xaa [ 247.124281][ T8630] netlink: 4 bytes leftover after parsing attributes in process `syz.4.715'. [ 247.166949][ T8630] ip6gretap0: entered promiscuous mode [ 247.172979][ T8630] macvtap4: entered promiscuous mode [ 247.178623][ T8630] macvtap4: entered allmulticast mode [ 247.186346][ T48] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 247.226577][ T8630] ip6gretap0: entered allmulticast mode [ 247.289744][ T8632] ip6gretap0: left allmulticast mode [ 247.295360][ T8632] ip6gretap0: left promiscuous mode [ 247.318443][ T5919] usb 2-1: USB disconnect, device number 32 [ 247.426721][ T48] usb 4-1: Using ep0 maxpacket: 8 [ 247.435452][ T48] usb 4-1: unable to get BOS descriptor or descriptor too short [ 247.445736][ T48] usb 4-1: config 7 has an invalid interface number: 142 but max is 0 [ 247.454839][ T48] usb 4-1: config 7 has no interface number 0 [ 247.465391][ T48] usb 4-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=dd.6d [ 247.477785][ T48] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.487359][ T48] usb 4-1: Product: syz [ 247.494116][ T48] usb 4-1: Manufacturer: syz [ 247.501284][ T48] usb 4-1: SerialNumber: syz [ 247.526159][ T8640] netlink: 8 bytes leftover after parsing attributes in process `syz.4.718'. [ 247.536789][ T8640] netlink: 24 bytes leftover after parsing attributes in process `syz.4.718'. [ 247.606374][ T5921] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 247.725281][ T8627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.737396][ T8627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.766383][ T5921] usb 1-1: Using ep0 maxpacket: 16 [ 247.770577][ T8643] loop5: detected capacity change from 0 to 7 [ 247.787081][ T8643] ldm_validate_partition_table(): Disk read failed. [ 247.799473][ T5921] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.810482][ T7557] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 247.822898][ T5921] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 247.823612][ T8643] Dev loop5: unable to read RDB block 0 [ 247.838925][ T5919] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 247.857285][ T5921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.871937][ T8643] loop5: unable to read partition table [ 247.872974][ T5921] usb 1-1: config 0 descriptor?? [ 247.886100][ T8643] loop5: partition table beyond EOD, truncated [ 247.909755][ T8643] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 247.976363][ T7557] usb 5-1: Using ep0 maxpacket: 16 [ 247.983460][ T7557] usb 5-1: config index 0 descriptor too short (expected 62713, got 86) [ 247.993117][ T7557] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 248.022503][ T5919] usb 2-1: Using ep0 maxpacket: 8 [ 248.032853][ T7557] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 248.043579][ T5919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 248.060884][ T5919] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 248.082404][ T7557] usb 5-1: config 0 has no interface number 0 [ 248.096015][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.116997][ T7557] usb 5-1: too many endpoints for config 0 interface 251 altsetting 93: 101, using maximum allowed: 30 [ 248.140821][ T5919] usb 2-1: config 0 descriptor?? [ 248.162403][ T7557] usb 5-1: config 0 interface 251 altsetting 93 has 0 endpoint descriptors, different from the interface descriptor's value: 101 [ 248.209872][ T7557] usb 5-1: config 0 interface 251 has no altsetting 0 [ 248.226550][ T7557] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 248.242067][ T7557] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.262178][ T7557] usb 5-1: Product: syz [ 248.270459][ T7557] usb 5-1: Manufacturer: syz [ 248.279114][ T7557] usb 5-1: SerialNumber: syz [ 248.305636][ T7557] usb 5-1: config 0 descriptor?? [ 248.310444][ T8635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.317418][ T5921] mcp2221 0003:04D8:00DD.0012: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 248.320738][ T8635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.362185][ T5919] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 248.400938][ T5205] ldm_validate_partition_table(): Disk read failed. [ 248.441390][ T5205] Dev loop5: unable to read RDB block 0 [ 248.468142][ T5205] loop5: unable to read partition table [ 248.480678][ T5921] usb 1-1: USB disconnect, device number 42 [ 248.487199][ T5205] loop5: partition table beyond EOD, truncated [ 248.670962][ T8659] netlink: 4 bytes leftover after parsing attributes in process `syz.2.721'. [ 248.717752][ T8659] bond_slave_0: entered promiscuous mode [ 248.723650][ T8659] bond_slave_1: entered promiscuous mode [ 248.741935][ T8659] macvlan2: entered promiscuous mode [ 248.750509][ T8659] bond0: entered promiscuous mode [ 248.756231][ T8659] bridge0: entered promiscuous mode [ 248.771991][ T8659] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 248.836608][ T5921] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 249.040985][ T5921] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 249.058936][ T5921] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 249.072430][ T5921] usb 1-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 249.084011][ T5921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.096104][ T5921] usb 1-1: config 0 descriptor?? [ 249.102120][ T8656] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 249.544105][ T5921] hid_parser_main: 1227 callbacks suppressed [ 249.544126][ T5921] logitech 0003:046D:CA04.0013: unknown main item tag 0x0 [ 249.559818][ T5921] logitech 0003:046D:CA04.0013: unknown main item tag 0x0 [ 249.567578][ T5921] logitech 0003:046D:CA04.0013: unknown main item tag 0x0 [ 249.575038][ T5921] logitech 0003:046D:CA04.0013: unknown main item tag 0x0 [ 249.583582][ T5921] logitech 0003:046D:CA04.0013: unknown main item tag 0x0 [ 249.591771][ T5921] logitech 0003:046D:CA04.0013: unknown main item tag 0x0 [ 249.599895][ T5921] logitech 0003:046D:CA04.0013: unknown main item tag 0x0 [ 249.617540][ T5921] logitech 0003:046D:CA04.0013: hidraw0: USB HID vff.fa Device [HID 046d:ca04] on usb-dummy_hcd.0-1/input0 [ 249.647066][ T5921] logitech 0003:046D:CA04.0013: no inputs found [ 249.767275][ T5905] usb 1-1: USB disconnect, device number 43 [ 249.933902][ T8669] fuse: Bad value for 'fd' [ 249.961762][ T48] usb 4-1: USB disconnect, device number 33 [ 250.131810][ T8673] ip6erspan0: entered allmulticast mode [ 250.426461][ T5905] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 250.477666][ T7557] asix 5-1:0.251: probe with driver asix failed with error -22 [ 250.504015][ T7557] usb 5-1: USB disconnect, device number 33 [ 250.515776][ T5956] usb 2-1: USB disconnect, device number 33 [ 250.718697][ T5905] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 250.729479][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.754596][ T8688] netlink: 'syz.4.730': attribute type 1 has an invalid length. [ 250.771653][ T5905] usb 3-1: config 0 descriptor?? [ 250.884674][ T8688] netlink: 4 bytes leftover after parsing attributes in process `syz.4.730'. [ 250.932503][ T8696] loop5: detected capacity change from 0 to 7 [ 250.941180][ C1] blk_print_req_error: 651 callbacks suppressed [ 250.941198][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 250.956756][ C1] buffer_io_error: 650 callbacks suppressed [ 250.956768][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 250.974335][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 250.983520][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 251.028158][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 251.037409][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 251.046809][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 251.056108][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 251.080901][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 251.090112][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 251.099556][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 251.108794][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 251.119588][ T8680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.136327][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 251.145560][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 251.157255][ T8680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.165055][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 251.174298][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 251.245828][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 251.245860][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 251.246084][ T8696] ldm_validate_partition_table(): Disk read failed. [ 251.248299][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 251.248326][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 251.249192][ T8696] Dev loop5: unable to read RDB block 0 [ 251.250147][ T8696] loop5: unable to read partition table [ 251.250294][ T8696] loop5: partition table beyond EOD, truncated [ 251.263648][ T8696] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 251.661732][ T7557] usb 3-1: USB disconnect, device number 40 [ 251.668712][ T5919] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 251.847318][ T8710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.734'. [ 251.856363][ T5919] usb 5-1: Using ep0 maxpacket: 8 [ 251.876752][ T8710] ip6gretap0: entered promiscuous mode [ 251.893443][ T8710] macvtap3: entered promiscuous mode [ 251.907784][ T8710] macvtap3: entered allmulticast mode [ 251.914807][ T8710] ip6gretap0: entered allmulticast mode [ 251.924694][ T5919] usb 5-1: unable to get BOS descriptor or descriptor too short [ 251.979152][ T8712] ip6gretap0: left allmulticast mode [ 251.984957][ T8712] ip6gretap0: left promiscuous mode [ 251.992606][ T5919] usb 5-1: config 7 has an invalid interface number: 142 but max is 0 [ 252.019336][ T5919] usb 5-1: config 7 has no interface number 0 [ 252.067723][ T5919] usb 5-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=dd.6d [ 252.111728][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.150226][ T5919] usb 5-1: Product: syz [ 252.154433][ T5919] usb 5-1: Manufacturer: syz [ 252.258286][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 252.258298][ T30] audit: type=1326 audit(1764763471.171:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8718 comm="syz.3.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc9358f749 code=0x7ffc0000 [ 252.389446][ T5919] usb 5-1: SerialNumber: syz [ 252.389459][ T30] audit: type=1326 audit(1764763471.201:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8718 comm="syz.3.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7fbc9358f749 code=0x7ffc0000 [ 252.552123][ T30] audit: type=1326 audit(1764763471.201:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8718 comm="syz.3.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc9358f749 code=0x7ffc0000 [ 252.574307][ C0] vkms_vblank_simulate: vblank timer overrun [ 252.580961][ T5886] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 252.660384][ T8707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.672316][ T8707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.681204][ T30] audit: type=1326 audit(1764763471.201:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8718 comm="syz.3.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbc9358f749 code=0x7ffc0000 [ 252.731579][ T30] audit: type=1326 audit(1764763471.201:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8718 comm="syz.3.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc9358f749 code=0x7ffc0000 [ 252.753923][ C0] vkms_vblank_simulate: vblank timer overrun [ 252.762443][ T5956] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 252.776372][ T5886] usb 4-1: device descriptor read/64, error -71 [ 252.804668][ T30] audit: type=1326 audit(1764763471.201:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8718 comm="syz.3.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbc9358f749 code=0x7ffc0000 [ 252.842910][ T30] audit: type=1326 audit(1764763471.201:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8718 comm="syz.3.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc9358f749 code=0x7ffc0000 [ 252.959847][ T5956] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 252.971487][ T5956] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.993510][ T30] audit: type=1326 audit(1764763471.201:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8718 comm="syz.3.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbc9358df90 code=0x7ffc0000 [ 253.083969][ T5956] usb 2-1: config 0 descriptor?? [ 253.089216][ T5886] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 253.101030][ T5956] cp210x 2-1:0.0: cp210x converter detected [ 253.109578][ T30] audit: type=1326 audit(1764763471.201:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8718 comm="syz.3.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbc9358f34b code=0x7ffc0000 [ 253.137197][ T30] audit: type=1326 audit(1764763471.201:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8718 comm="syz.3.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbc9358f34b code=0x7ffc0000 [ 253.236420][ T5886] usb 4-1: device descriptor read/64, error -71 [ 253.346707][ T5886] usb usb4-port1: attempt power cycle [ 253.520039][ T5956] usb 2-1: cp210x converter now attached to ttyUSB0 [ 253.706660][ T5886] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 253.741333][ T5956] usb 2-1: USB disconnect, device number 34 [ 253.750962][ T5886] usb 4-1: device descriptor read/8, error -71 [ 253.758058][ T5956] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 253.797960][ T5956] cp210x 2-1:0.0: device disconnected [ 254.027136][ T5886] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 254.134483][ T5886] usb 4-1: device descriptor read/8, error -71 [ 254.146709][ T5919] usb 5-1: USB disconnect, device number 34 [ 254.317712][ T5886] usb usb4-port1: unable to enumerate USB device [ 254.462951][ T8746] loop5: detected capacity change from 0 to 7 [ 254.542074][ T8746] ldm_validate_partition_table(): Disk read failed. [ 254.571521][ T8746] Dev loop5: unable to read RDB block 0 [ 254.586472][ T5919] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 254.643386][ T8746] loop5: unable to read partition table [ 254.649718][ T8746] loop5: partition table beyond EOD, truncated [ 254.655988][ T8746] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 254.744489][ T5919] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 254.764591][ T5919] usb 5-1: config 0 has no interface number 0 [ 254.795420][ T5919] usb 5-1: config 0 interface 41 has no altsetting 0 [ 254.802687][ T48] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 254.823101][ T5919] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 254.842903][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.861317][ T5919] usb 5-1: Product: syz [ 254.870851][ T5919] usb 5-1: Manufacturer: syz [ 254.878822][ T5919] usb 5-1: SerialNumber: syz [ 254.898786][ T5919] usb 5-1: config 0 descriptor?? [ 254.969630][ T48] usb 3-1: Using ep0 maxpacket: 32 [ 255.038207][ T48] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 255.098714][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 255.148327][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 255.198030][ T48] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 255.244786][ T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.391264][ T48] usb 3-1: config 0 descriptor?? [ 255.427661][ T48] hub 3-1:0.0: USB hub found [ 255.534971][ T5919] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -32 [ 255.570313][ T5919] usb 5-1: USB disconnect, device number 35 [ 255.773252][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.774335][ T48] hub 3-1:0.0: config failed, hub has too many ports! (err -19) [ 255.779746][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.981103][ T48] usbhid 3-1:0.0: can't add hid device: -71 [ 255.995253][ T48] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 256.062656][ T48] usb 3-1: USB disconnect, device number 41 [ 256.546349][ T48] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 256.696390][ T48] usb 5-1: Using ep0 maxpacket: 8 [ 256.704220][ T48] usb 5-1: unable to get BOS descriptor or descriptor too short [ 256.713513][ T48] usb 5-1: config 7 has an invalid interface number: 142 but max is 0 [ 256.766357][ T48] usb 5-1: config 7 has no interface number 0 [ 256.833382][ T48] usb 5-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=dd.6d [ 256.851474][ T48] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.873760][ T48] usb 5-1: Product: syz [ 256.878637][ T48] usb 5-1: Manufacturer: syz [ 256.883476][ T48] usb 5-1: SerialNumber: syz [ 256.939318][ T8789] netlink: 8 bytes leftover after parsing attributes in process `syz.1.755'. [ 257.067961][ T8795] netlink: 4 bytes leftover after parsing attributes in process `syz.2.757'. [ 257.120941][ T8778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.206850][ T8778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.235911][ T8797] netlink: 'syz.0.756': attribute type 39 has an invalid length. [ 258.433271][ T8809] netlink: 24 bytes leftover after parsing attributes in process `syz.0.761'. [ 258.436919][ T8810] netlink: 24 bytes leftover after parsing attributes in process `syz.0.761'. [ 258.606915][ T8812] netlink: 3 bytes leftover after parsing attributes in process `syz.3.762'. [ 258.699716][ T8813] netlink: 4 bytes leftover after parsing attributes in process `syz.0.761'. [ 258.713481][ T8810] netlink: 4 bytes leftover after parsing attributes in process `syz.0.761'. [ 258.831631][ T8810] bond1: Invalid ad_actor_system MAC address. [ 258.849430][ T8810] bond1: option ad_actor_system: invalid value (4294967295) [ 258.869769][ T8810] bond1 (unregistering): Released all slaves [ 258.980277][ T8813] bond1: Invalid ad_actor_system MAC address. [ 258.993903][ T8813] bond1: option ad_actor_system: invalid value (4294967295) [ 259.032936][ T8813] bond1 (unregistering): Released all slaves [ 259.207489][ T48] usb 5-1: USB disconnect, device number 36 [ 260.061092][ T5886] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 260.216392][ T5886] usb 4-1: Using ep0 maxpacket: 32 [ 260.223771][ T5886] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.244889][ T5886] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.269964][ T5886] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 260.294778][ T5886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.322190][ T5886] usb 4-1: config 0 descriptor?? [ 260.364199][ T5886] hub 4-1:0.0: USB hub found [ 260.416367][ T48] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 260.438587][ T8843] netlink: 'syz.1.770': attribute type 3 has an invalid length. [ 260.578152][ T48] usb 1-1: config 0 has no interfaces? [ 260.586059][ T48] usb 1-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=3e.a5 [ 260.598416][ T5886] hub 4-1:0.0: 1 port detected [ 260.619340][ T48] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.668495][ T48] usb 1-1: Product: syz [ 260.690635][ T48] usb 1-1: Manufacturer: syz [ 260.720716][ T48] usb 1-1: SerialNumber: syz [ 260.747493][ T48] usb 1-1: config 0 descriptor?? [ 260.829225][ T8835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.839317][ T8835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.856392][ T5956] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 261.093632][ T5956] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.113998][ T5956] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 261.146459][ T5956] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 261.208101][ T5956] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.239888][ T5956] usb 2-1: config 0 descriptor?? [ 261.265040][ T5956] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 261.290584][ T5956] dvb-usb: bulk message failed: -22 (3/0) [ 261.313634][ T5956] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 261.350098][ T5956] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 261.363755][ T5956] usb 2-1: media controller created [ 261.367310][ T48] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 261.374537][ T5956] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 261.387955][ T5886] hub 4-1:0.0: activate --> -90 [ 261.430036][ T5956] dvb-usb: bulk message failed: -22 (6/0) [ 261.461892][ T8842] dvb-usb: bulk message failed: -22 (2/0) [ 261.468532][ T5956] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 261.523189][ T5956] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input26 [ 261.539920][ T5956] dvb-usb: schedule remote query interval to 150 msecs. [ 261.547202][ T5956] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 261.552985][ T48] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 261.592890][ T48] usb 3-1: config 1 has no interface number 0 [ 261.599858][ T5886] hub 4-1:0.0: hub_ext_port_status failed (err = 0) [ 261.609753][ T48] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1024 [ 261.652610][ T48] usb 3-1: config 1 interface 7 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 261.703393][ T48] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 261.720052][ T5956] dvb-usb: bulk message failed: -22 (1/0) [ 261.733039][ T5956] dvb-usb: error while querying for an remote control event. [ 261.746162][ T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.826389][ T48] usb 3-1: Product: syz [ 261.850909][ T48] usb 3-1: Manufacturer: syz [ 261.866633][ T48] usb 3-1: SerialNumber: syz [ 261.895406][ T8853] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 261.902788][ T5956] dvb-usb: bulk message failed: -22 (1/0) [ 261.911284][ T5956] dvb-usb: error while querying for an remote control event. [ 261.919232][ T5886] usb 4-1: USB disconnect, device number 38 [ 261.953766][ T8853] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 262.002355][ T48] usb 3-1: Expected 3 endpoints, found: 2 [ 262.041497][ T8855] syzkaller1: entered promiscuous mode [ 262.047493][ T8855] syzkaller1: entered allmulticast mode [ 262.116799][ T5956] dvb-usb: bulk message failed: -22 (1/0) [ 262.122633][ T5956] dvb-usb: error while querying for an remote control event. [ 262.297659][ T5956] dvb-usb: bulk message failed: -22 (1/0) [ 262.309770][ T5956] dvb-usb: error while querying for an remote control event. [ 262.536715][ T5956] dvb-usb: bulk message failed: -22 (1/0) [ 262.542479][ T5956] dvb-usb: error while querying for an remote control event. [ 262.577749][ T8865] syzkaller0: entered promiscuous mode [ 262.585660][ T8865] syzkaller0: entered allmulticast mode [ 262.716934][ T5905] dvb-usb: bulk message failed: -22 (1/0) [ 262.723941][ T5905] dvb-usb: error while querying for an remote control event. [ 262.851244][ T5905] usb 1-1: USB disconnect, device number 44 [ 262.898831][ T5956] dvb-usb: bulk message failed: -22 (1/0) [ 262.915444][ T5956] dvb-usb: error while querying for an remote control event. [ 263.091500][ T5905] dvb-usb: bulk message failed: -22 (1/0) [ 263.100754][ T5905] dvb-usb: error while querying for an remote control event. [ 263.266476][ T5905] dvb-usb: bulk message failed: -22 (1/0) [ 263.273832][ T5905] dvb-usb: error while querying for an remote control event. [ 263.313100][ T5880] usb 2-1: USB disconnect, device number 35 [ 263.387658][ T5880] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 263.904025][ T5956] usb 3-1: USB disconnect, device number 42 [ 264.937948][ T5905] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 265.079911][ T8889] FAULT_INJECTION: forcing a failure. [ 265.079911][ T8889] name failslab, interval 1, probability 0, space 0, times 1 [ 265.099826][ T5905] usb 3-1: Using ep0 maxpacket: 16 [ 265.118786][ T5905] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 265.140259][ T5905] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 265.155892][ T5905] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 265.199802][ T8889] CPU: 1 UID: 0 PID: 8889 Comm: syz.1.784 Not tainted syzkaller #0 PREEMPT(full) [ 265.199832][ T8889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 265.199850][ T8889] Call Trace: [ 265.199860][ T8889] [ 265.199868][ T8889] dump_stack_lvl+0x189/0x250 [ 265.199899][ T8889] ? __pfx____ratelimit+0x10/0x10 [ 265.199918][ T8889] ? __pfx_dump_stack_lvl+0x10/0x10 [ 265.199936][ T8889] ? __pfx__printk+0x10/0x10 [ 265.199962][ T8889] ? __pfx___might_resched+0x10/0x10 [ 265.199979][ T8889] ? fs_reclaim_acquire+0x7d/0x100 [ 265.200003][ T8889] should_fail_ex+0x414/0x560 [ 265.200032][ T8889] should_failslab+0xa8/0x100 [ 265.200054][ T8889] __kmalloc_node_track_caller_noprof+0xcd/0x7f0 [ 265.200072][ T8889] ? __kernfs_new_node+0x9c/0x7e0 [ 265.200096][ T8889] kstrdup+0x42/0x100 [ 265.200119][ T8889] __kernfs_new_node+0x9c/0x7e0 [ 265.200140][ T8889] ? __lock_acquire+0x6b6/0x2cf0 [ 265.200160][ T8889] ? __pfx___kernfs_new_node+0x10/0x10 [ 265.200180][ T8889] ? kernfs_root+0x1c/0x230 [ 265.200204][ T8889] ? kernfs_root+0x1c/0x230 [ 265.200220][ T8889] ? kernfs_root+0x1c/0x230 [ 265.200235][ T8889] ? kernfs_root+0x1c/0x230 [ 265.200257][ T8889] kernfs_new_node+0x102/0x210 [ 265.200281][ T8889] kernfs_create_dir_ns+0x44/0x130 [ 265.200303][ T8889] sysfs_create_dir_ns+0x123/0x280 [ 265.200324][ T8889] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 265.200344][ T8889] ? do_raw_spin_unlock+0x122/0x240 [ 265.200369][ T8889] kobject_add_internal+0x6a8/0xca0 [ 265.200398][ T8889] kobject_add+0x155/0x220 [ 265.200425][ T8889] ? __pfx_kobject_add+0x10/0x10 [ 265.200446][ T8889] ? do_raw_spin_unlock+0x122/0x240 [ 265.200471][ T8889] ? get_device_parent+0x366/0x3a0 [ 265.200495][ T8889] device_add+0x408/0xb50 [ 265.200519][ T8889] input_register_device+0x9d3/0x1140 [ 265.200547][ T8889] uinput_create_device+0x422/0x670 [ 265.200580][ T8889] uinput_ioctl_handler+0x3f0/0x1570 [ 265.200607][ T8889] ? __pfx_uinput_ioctl_handler+0x10/0x10 [ 265.200646][ T8889] ? __fget_files+0x2a/0x420 [ 265.200671][ T8889] ? bpf_lsm_file_ioctl+0x9/0x20 [ 265.200692][ T8889] ? __pfx_uinput_ioctl+0x10/0x10 [ 265.200715][ T8889] __se_sys_ioctl+0xfc/0x170 [ 265.200734][ T8889] do_syscall_64+0xfa/0xf80 [ 265.200755][ T8889] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.200775][ T8889] ? clear_bhb_loop+0x60/0xb0 [ 265.200794][ T8889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.200809][ T8889] RIP: 0033:0x7efdf1d8f749 [ 265.200832][ T8889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.200847][ T8889] RSP: 002b:00007efdf2d0c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 265.200866][ T8889] RAX: ffffffffffffffda RBX: 00007efdf1fe5fa0 RCX: 00007efdf1d8f749 [ 265.200878][ T8889] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005 [ 265.200889][ T8889] RBP: 00007efdf2d0c090 R08: 0000000000000000 R09: 0000000000000000 [ 265.200900][ T8889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.200910][ T8889] R13: 00007efdf1fe6038 R14: 00007efdf1fe5fa0 R15: 00007efdf210fa28 [ 265.200939][ T8889] [ 265.201009][ T8889] kobject: kobject_add_internal failed for input27 (error: -12 parent: input) [ 265.540684][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.573985][ T5905] usb 3-1: Product: syz [ 265.586741][ T5905] usb 3-1: Manufacturer: syz [ 265.598148][ T5905] usb 3-1: SerialNumber: syz [ 265.614200][ T8893] netlink: 4 bytes leftover after parsing attributes in process `syz.4.785'. [ 265.702989][ T8893] ip6gretap0: entered promiscuous mode [ 265.723209][ T8893] macvtap5: entered promiscuous mode [ 265.736716][ T8893] macvtap5: entered allmulticast mode [ 265.758644][ T8893] ip6gretap0: entered allmulticast mode [ 265.789450][ T8896] ip6gretap0: left allmulticast mode [ 265.802068][ T8896] ip6gretap0: left promiscuous mode [ 265.936509][ T5886] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 266.074858][ T8905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.077281][ T8905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.089763][ T5886] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 266.089798][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.092941][ T5886] usb 2-1: config 0 descriptor?? [ 266.105689][ T8905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.122304][ T8905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.409173][ T8911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.409416][ T8911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.131238][ T5905] usb 3-1: 0:192 : does not exist [ 267.201444][ T5905] usb 3-1: USB disconnect, device number 43 [ 267.228295][ T5842] udevd[5842]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 267.656129][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 267.656212][ T30] audit: type=1326 audit(1764763486.561:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8925 comm="syz.0.793" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f714f98f749 code=0x0 [ 267.661170][ T30] audit: type=1326 audit(1764763486.571:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8925 comm="syz.0.793" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f714f98f749 code=0x0 [ 267.789192][ C1] vkms_vblank_simulate: vblank timer overrun [ 268.133588][ T8941] FAULT_INJECTION: forcing a failure. [ 268.133588][ T8941] name failslab, interval 1, probability 0, space 0, times 0 [ 268.153704][ T8941] CPU: 1 UID: 0 PID: 8941 Comm: syz.4.797 Not tainted syzkaller #0 PREEMPT(full) [ 268.153727][ T8941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 268.153737][ T8941] Call Trace: [ 268.153744][ T8941] [ 268.153752][ T8941] dump_stack_lvl+0x189/0x250 [ 268.153775][ T8941] ? __pfx____ratelimit+0x10/0x10 [ 268.153803][ T8941] ? __pfx_dump_stack_lvl+0x10/0x10 [ 268.153821][ T8941] ? __pfx__printk+0x10/0x10 [ 268.153845][ T8941] ? __pfx___might_resched+0x10/0x10 [ 268.153861][ T8941] ? fs_reclaim_acquire+0x7d/0x100 [ 268.153883][ T8941] should_fail_ex+0x414/0x560 [ 268.153909][ T8941] should_failslab+0xa8/0x100 [ 268.153932][ T8941] kmem_cache_alloc_noprof+0x74/0x6e0 [ 268.153954][ T8941] ? __asan_memcpy+0x40/0x70 [ 268.153965][ T8941] ? __kernfs_new_node+0xd7/0x7e0 [ 268.153983][ T8941] __kernfs_new_node+0xd7/0x7e0 [ 268.154000][ T8941] ? __lock_acquire+0x6b6/0x2cf0 [ 268.154015][ T8941] ? __pfx___kernfs_new_node+0x10/0x10 [ 268.154030][ T8941] ? kernfs_root+0x1c/0x230 [ 268.154048][ T8941] ? kernfs_root+0x1c/0x230 [ 268.154060][ T8941] ? kernfs_root+0x1c/0x230 [ 268.154071][ T8941] ? kernfs_root+0x1c/0x230 [ 268.154087][ T8941] kernfs_new_node+0x102/0x210 [ 268.154105][ T8941] kernfs_create_dir_ns+0x44/0x130 [ 268.154123][ T8941] sysfs_create_dir_ns+0x123/0x280 [ 268.154139][ T8941] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 268.154154][ T8941] ? do_raw_spin_unlock+0x122/0x240 [ 268.154173][ T8941] kobject_add_internal+0x6a8/0xca0 [ 268.154196][ T8941] kobject_add+0x155/0x220 [ 268.154216][ T8941] ? __pfx_kobject_add+0x10/0x10 [ 268.154232][ T8941] ? do_raw_spin_unlock+0x122/0x240 [ 268.154250][ T8941] ? get_device_parent+0x366/0x3a0 [ 268.154268][ T8941] device_add+0x408/0xb50 [ 268.154286][ T8941] input_register_device+0x9d3/0x1140 [ 268.154308][ T8941] uinput_create_device+0x422/0x670 [ 268.154333][ T8941] uinput_ioctl_handler+0x3f0/0x1570 [ 268.154353][ T8941] ? __pfx_uinput_ioctl_handler+0x10/0x10 [ 268.154383][ T8941] ? __fget_files+0x2a/0x420 [ 268.154401][ T8941] ? bpf_lsm_file_ioctl+0x9/0x20 [ 268.154418][ T8941] ? __pfx_uinput_ioctl+0x10/0x10 [ 268.154435][ T8941] __se_sys_ioctl+0xfc/0x170 [ 268.154450][ T8941] do_syscall_64+0xfa/0xf80 [ 268.154466][ T8941] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.154478][ T8941] ? clear_bhb_loop+0x60/0xb0 [ 268.154494][ T8941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.154506][ T8941] RIP: 0033:0x7f0abe98f749 [ 268.154518][ T8941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.154530][ T8941] RSP: 002b:00007f0abf900038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 268.154545][ T8941] RAX: ffffffffffffffda RBX: 00007f0abebe5fa0 RCX: 00007f0abe98f749 [ 268.154555][ T8941] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005 [ 268.154563][ T8941] RBP: 00007f0abf900090 R08: 0000000000000000 R09: 0000000000000000 [ 268.154571][ T8941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.154579][ T8941] R13: 00007f0abebe6038 R14: 00007f0abebe5fa0 R15: 00007f0abed0fa28 [ 268.154610][ T8941] [ 268.154728][ T8941] kobject: kobject_add_internal failed for input28 (error: -12 parent: input) [ 268.835733][ T5956] usb 2-1: USB disconnect, device number 36 [ 269.038148][ T8954] netlink: 36 bytes leftover after parsing attributes in process `syz.2.799'. [ 269.596366][ T5956] usb 2-1: new low-speed USB device number 37 using dummy_hcd [ 269.736981][ T5956] usb 2-1: device descriptor read/64, error -71 [ 269.880117][ T8944] netlink: 8 bytes leftover after parsing attributes in process `syz.0.798'. [ 269.957440][ T8944] netlink: 'syz.0.798': attribute type 5 has an invalid length. [ 269.966415][ T8944] netlink: 28 bytes leftover after parsing attributes in process `syz.0.798'. [ 270.006563][ T5956] usb 2-1: new low-speed USB device number 38 using dummy_hcd [ 270.036725][ T8944] geneve0: entered promiscuous mode [ 270.054213][ T8944] geneve0: entered allmulticast mode [ 270.146417][ T5956] usb 2-1: device descriptor read/64, error -71 [ 270.257254][ T5956] usb usb2-port1: attempt power cycle [ 270.626741][ T5956] usb 2-1: new low-speed USB device number 39 using dummy_hcd [ 270.679878][ T5956] usb 2-1: device descriptor read/8, error -71 [ 270.738772][ T8982] tipc: Started in network mode [ 270.743936][ T8982] tipc: Node identity 8664d2a4919d, cluster identity 4711 [ 270.751609][ T8982] tipc: Enabled bearer , priority 10 [ 270.817046][ T5905] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 270.946790][ T5956] usb 2-1: new low-speed USB device number 40 using dummy_hcd [ 270.966556][ T5905] usb 3-1: Using ep0 maxpacket: 32 [ 270.972426][ T5956] usb 2-1: device descriptor read/8, error -71 [ 270.981176][ T5905] usb 3-1: config 2 has an invalid interface number: 88 but max is 0 [ 270.995361][ T5905] usb 3-1: config 2 has no interface number 0 [ 271.010727][ T5905] usb 3-1: config 2 interface 88 has no altsetting 0 [ 271.030042][ T5905] usb 3-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 271.050411][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.118142][ T5956] usb usb2-port1: unable to enumerate USB device [ 271.731377][ T5905] usb 3-1: Product: syz [ 271.735598][ T5905] usb 3-1: Manufacturer: syz [ 271.806900][ T5905] usb 3-1: SerialNumber: syz [ 271.868200][ T10] tipc: Node number set to 402248356 [ 272.519958][ T5905] asix 3-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 272.553321][ T5905] asix 3-1:2.88: probe with driver asix failed with error -71 [ 272.561055][ T5886] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 272.579622][ T5905] usb 3-1: USB disconnect, device number 44 [ 272.856740][ T5886] usb 2-1: Using ep0 maxpacket: 8 [ 272.866124][ T5886] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 272.875623][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.884101][ T5886] usb 2-1: Product: syz [ 272.889750][ T5886] usb 2-1: Manufacturer: syz [ 272.894368][ T5886] usb 2-1: SerialNumber: syz [ 272.902328][ T5886] usb 2-1: config 0 descriptor?? [ 272.931358][ T5886] gspca_main: sq930x-2.14.0 probing 2770:930c [ 273.085922][ T9013] tipc: Enabled bearer , priority 0 [ 273.109660][ T9011] syzkaller0: entered promiscuous mode [ 273.156405][ T9011] syzkaller0: entered allmulticast mode [ 273.159929][ T8995] usb usb7: usbfs: process 8995 (syz.1.811) did not claim interface 0 before use [ 273.449963][ T5886] gspca_sq930x: reg_r 001f failed -110 [ 273.455740][ T5886] sq930x 2-1:0.0: probe with driver sq930x failed with error -110 [ 273.596486][ T5886] usb 2-1: USB disconnect, device number 41 [ 273.827425][ T9027] kvm: pic: single mode not supported [ 273.827689][ T9027] kvm: pic: level sensitive irq not supported [ 273.872058][ T9027] kvm: pic: non byte read [ 273.872273][ T9027] kvm: pic: non byte read [ 273.872404][ T9027] kvm: pic: single mode not supported [ 273.872439][ T9027] kvm: pic: non byte read [ 273.872595][ T9027] kvm: pic: non byte read [ 273.872705][ T9027] kvm: pic: single mode not supported [ 273.872739][ T9027] kvm: pic: non byte read [ 273.872877][ T9027] kvm: pic: non byte read [ 273.872988][ T9027] kvm: pic: single mode not supported [ 273.873026][ T9027] kvm: pic: non byte read [ 273.873164][ T9027] kvm: pic: non byte read [ 273.873274][ T9027] kvm: pic: single mode not supported [ 273.873308][ T9027] kvm: pic: non byte read [ 273.873450][ T9027] kvm: pic: non byte read [ 273.873561][ T9027] kvm: pic: single mode not supported [ 273.873831][ T9027] kvm: pic: single mode not supported [ 273.874103][ T9027] kvm: pic: single mode not supported [ 273.874372][ T9027] kvm: pic: single mode not supported [ 273.874640][ T9027] kvm: pic: single mode not supported [ 273.892383][ T9010] tipc: Resetting bearer [ 274.054384][ T9010] tipc: Disabling bearer [ 274.116798][ T9035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.117167][ T9035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.132909][ T9036] netlink: 'syz.4.819': attribute type 16 has an invalid length. [ 274.132927][ T9036] netlink: 'syz.4.819': attribute type 17 has an invalid length. [ 274.306919][ T5886] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 274.457222][ T5886] usb 2-1: Using ep0 maxpacket: 16 [ 274.465635][ T5886] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 274.465664][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 274.465684][ T5886] usb 2-1: Product: syz [ 274.465698][ T5886] usb 2-1: Manufacturer: syz [ 274.465712][ T5886] usb 2-1: SerialNumber: syz [ 274.469394][ T5886] usb 2-1: config 0 descriptor?? [ 274.533925][ T10] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 274.568487][ T9036] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.587774][ T9036] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.674395][ T5886] usb 2-1: USB disconnect, device number 42 [ 274.677224][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 274.680144][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 274.680188][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 274.686098][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 274.686143][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 274.688871][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 274.688923][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 274.701556][ T10] usb 4-1: New USB device found, idVendor=04e7, idProduct=6651, bcdDevice=ba.8a [ 274.701583][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.701602][ T10] usb 4-1: Product: syz [ 274.701616][ T10] usb 4-1: Manufacturer: syz [ 274.701630][ T10] usb 4-1: SerialNumber: syz [ 274.705034][ T10] usb 4-1: config 0 descriptor?? [ 274.712149][ T10] usb 4-1: bad CDC descriptors [ 274.712756][ T10] cdc_acm 4-1:0.0: Zero length descriptor references [ 274.712779][ T10] cdc_acm 4-1:0.0: probe with driver cdc_acm failed with error -22 [ 274.921806][ T9042] SET target dimension over the limit! [ 275.009508][ T5886] usb 4-1: USB disconnect, device number 39 [ 275.077704][ T9036] sit1: left allmulticast mode [ 275.094187][ T9036] macvtap1: left promiscuous mode [ 275.094204][ T9036] macvtap1: left allmulticast mode [ 275.094303][ T9036] macvtap2: left promiscuous mode [ 275.094311][ T9036] macvtap2: left allmulticast mode [ 275.094691][ T9036] macvtap3: left promiscuous mode [ 275.094699][ T9036] macvtap3: left allmulticast mode [ 275.094791][ T9036] macvlan2: left promiscuous mode [ 275.094902][ T9036] macvtap4: left promiscuous mode [ 275.094910][ T9036] macvtap4: left allmulticast mode [ 275.095107][ T9036] macvtap5: left promiscuous mode [ 275.095118][ T9036] macvtap5: left allmulticast mode [ 275.098509][ T1009] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.098571][ T1009] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.098601][ T1009] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.339940][ T9053] syz_tun: entered allmulticast mode [ 275.518762][ T30] audit: type=1326 audit(1764763494.431:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9056 comm="syz.1.825" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efdf1d8f749 code=0x0 [ 275.825917][ T9064] netlink: 'syz.3.827': attribute type 1 has an invalid length. [ 276.020042][ T9067] bond0: entered promiscuous mode [ 276.054600][ T9067] bond_slave_0: entered promiscuous mode [ 276.237512][ T9067] bond_slave_1: entered promiscuous mode [ 276.259991][ T9067] dummy0: entered promiscuous mode [ 276.282197][ T9067] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 276.416593][ T9067] hsr1: Slave B (dummy0) is not up; please bring it up to get a fully working HSR network [ 276.747007][ T9067] hsr1: entered promiscuous mode [ 276.769989][ T9067] hsr1: entered allmulticast mode [ 276.792695][ T9067] bond0: entered allmulticast mode [ 276.906371][ T9067] bond_slave_0: entered allmulticast mode [ 276.922417][ T9067] bond_slave_1: entered allmulticast mode [ 276.932513][ T9067] dummy0: entered allmulticast mode [ 278.077174][ T9091] binder: 9089:9091 ioctl c018620c 200000000000 returned -22 [ 278.718206][ T48] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 278.728779][ T9117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.837'. [ 278.752655][ T9117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.837'. [ 278.982174][ T48] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 279.016175][ T9120] block device autoloading is deprecated and will be removed. [ 279.040420][ T48] usb 1-1: config 0 has no interface number 0 [ 279.179668][ T48] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 279.187921][ T48] usb 1-1: config 0 has no interface number 0 [ 279.194201][ T48] usb 1-1: New USB device found, idVendor=7d48, idProduct=1005, bcdDevice=8c.1e [ 279.203420][ T48] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.295022][ T9124] netlink: 12 bytes leftover after parsing attributes in process `syz.3.840'. [ 279.313543][ T48] usb 1-1: config 0 descriptor?? [ 279.624319][ T5905] usb 1-1: USB disconnect, device number 45 [ 280.421157][ T9150] bond1: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 280.494210][ T9150] bond1 (unregistering): Released all slaves [ 280.795382][ T9162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.831545][ T9162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.026464][ T5905] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 281.216425][ T5905] usb 1-1: Using ep0 maxpacket: 8 [ 281.245938][ T5905] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 281.266900][ T5905] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 281.276044][ T5905] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.295363][ T5905] usb 1-1: Product: syz [ 281.307553][ T5905] usb 1-1: Manufacturer: syz [ 281.364634][ T5905] usb 1-1: SerialNumber: syz [ 281.413779][ T5905] usb 1-1: config 0 descriptor?? [ 281.449963][ T5905] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 281.479488][ T5905] usb 1-1: setting power ON [ 281.502467][ T5905] dvb-usb: bulk message failed: -22 (2/0) [ 281.560138][ T5905] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 281.595245][ T5905] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 281.650601][ T5905] usb 1-1: media controller created [ 281.751494][ T5905] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 281.827754][ T5905] usb 1-1: selecting invalid altsetting 6 [ 281.847692][ T5905] usb 1-1: digital interface selection failed (-22) [ 281.874900][ T5905] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 281.904633][ T5905] usb 1-1: setting power OFF [ 281.913598][ T5905] dvb-usb: bulk message failed: -22 (2/0) [ 281.936770][ T5905] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 281.959410][ T5905] (NULL device *): no alternate interface [ 282.055649][ T5905] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 282.121669][ T5905] usb 1-1: USB disconnect, device number 46 [ 282.536339][ T5905] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 282.714080][ T5905] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.729710][ T5905] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.757782][ T5905] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 282.788007][ T5905] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 282.799733][ T5905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.811885][ T5905] usb 4-1: config 0 descriptor?? [ 282.817190][ T7557] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 283.006528][ T7557] usb 1-1: Using ep0 maxpacket: 8 [ 283.066832][ T7557] usb 1-1: unable to get BOS descriptor or descriptor too short [ 283.158236][ T7557] usb 1-1: config 7 has an invalid interface number: 142 but max is 0 [ 283.195996][ T9205] fuse: Unknown parameter 'rootmâeðqù¾ü' [ 283.218270][ T7557] usb 1-1: config 7 has no interface number 0 [ 283.275108][ T7557] usb 1-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=dd.6d [ 283.280032][ T5905] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 283.344455][ T7557] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.404771][ T7557] usb 1-1: Product: syz [ 283.422885][ T7557] usb 1-1: Manufacturer: syz [ 283.440774][ T7557] usb 1-1: SerialNumber: syz [ 283.635776][ T9181] usb 4-1: string descriptor 0 read error: -71 [ 283.636578][ T48] usb 4-1: USB disconnect, device number 40 [ 283.648734][ T9213] plantronics 0003:047F:FFFF.0014: usb_submit_urb(ctrl) failed: -19 [ 283.725315][ T9190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.736340][ T9190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.875097][ T9211] fido_id[9211]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 284.532740][ T9226] binder: 9224:9226 ioctl c0145608 2000000001c0 returned -22 [ 285.510683][ T7557] usb 1-1: USB disconnect, device number 47 [ 285.583580][ T9244] syzkaller0: entered promiscuous mode [ 285.589986][ T9244] syzkaller0: entered allmulticast mode [ 285.606721][ T10] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 285.666578][ T5880] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 285.766511][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 285.773267][ T10] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 285.829470][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 285.840189][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 285.850596][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 285.866428][ T5880] usb 5-1: Using ep0 maxpacket: 8 [ 285.866438][ T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 285.884742][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 285.898064][ T5880] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 285.929093][ T5880] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 285.952433][ T5880] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 285.958930][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.971311][ T5880] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 286.003121][ T5880] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 286.012558][ T5880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.263950][ T5880] usb 5-1: GET_CAPABILITIES returned 0 [ 286.271393][ T5880] usbtmc 5-1:16.0: can't read capabilities [ 286.344693][ T10] usb 4-1: usb_control_msg returned -32 [ 286.356648][ T10] usbtmc 4-1:16.0: can't read capabilities [ 286.667972][ T5880] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 286.782803][ T9251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.795239][ T9251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.849089][ T5880] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 286.866101][ T5880] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 286.878555][ T5880] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 286.896764][ T5880] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 255, setting to 64 [ 286.907987][ T5880] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 286.924339][ T5880] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 286.933895][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.942386][ T5880] usb 2-1: Product: syz [ 286.946663][ T5880] usb 2-1: Manufacturer: syz [ 286.951605][ T5880] usb 2-1: SerialNumber: syz [ 286.979793][ T5880] usb 2-1: config 0 descriptor?? [ 286.985972][ T9247] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 287.029618][ T5880] input: KB Gear Tablet as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input30 [ 287.259200][ T9247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.259936][ T9247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.268889][ T9257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.269255][ T9257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.383063][ T7557] usb 2-1: USB disconnect, device number 43 [ 288.365005][ T9270] kvm: kvm [9269]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010000) = 0xbf [ 288.585141][ T9275] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20001 [ 288.696398][ T5880] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 288.876403][ T5880] usb 2-1: Using ep0 maxpacket: 32 [ 288.885409][ T5880] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 288.903956][ T5880] usb 2-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.40 [ 288.914906][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.932789][ T5880] usb 2-1: Product: syz [ 288.937506][ T5880] usb 2-1: Manufacturer: syz [ 288.945580][ T5880] usb 2-1: SerialNumber: syz [ 288.966111][ T5880] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input31 [ 289.046808][ T10] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 289.162072][ T9270] netlink: 'syz.1.881': attribute type 16 has an invalid length. [ 289.170674][ T9270] netlink: 'syz.1.881': attribute type 17 has an invalid length. [ 289.197362][ T5190] bcm5974 2-1:1.0: could not read from device [ 289.209849][ T5190] bcm5974 2-1:1.0: could not read from device [ 289.220661][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 289.226154][ T5880] usb 2-1: USB disconnect, device number 44 [ 289.238916][ T5190] bcm5974 2-1:1.0: could not read from device [ 289.246685][ T10] usb 3-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config [ 289.262822][ T10] usb 3-1: New USB device found, idVendor=9e88, idProduct=9e8f, bcdDevice=9b.e4 [ 289.273954][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.291521][ T10] usb 3-1: Product: syz [ 289.301920][ T10] usb 3-1: Manufacturer: syz [ 289.316773][ T10] usb 3-1: SerialNumber: syz [ 289.564718][ T10] ftdi_sio 3-1:64.0: Ignoring interface reserved for JTAG [ 289.595335][ T10] usb 3-1: USB disconnect, device number 45 [ 289.922298][ T9293] tipc: Resetting bearer [ 290.773052][ T9305] input: syz1 as /devices/virtual/input/input32 [ 291.367892][ T9318] syzkaller0: entered promiscuous mode [ 291.373790][ T9318] syzkaller0: entered allmulticast mode [ 291.513575][ T9321] Invalid logical block size (-4) [ 291.768452][ T9249] usbtmc 5-1:16.0: usb_control_msg returned -110 [ 291.788552][ T5880] usb 5-1: USB disconnect, device number 37 [ 291.828335][ T7557] usb 4-1: USB disconnect, device number 41 [ 292.576419][ T10] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 292.971094][ T9349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.026391][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 293.035217][ T9349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.063883][ T10] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 293.098772][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.240269][ T10] usb 5-1: config 0 descriptor?? [ 293.256468][ T5886] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 293.350303][ T10] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 293.381175][ T9356] input: syz1 as /devices/virtual/input/input33 [ 293.436386][ T5886] usb 1-1: device descriptor read/64, error -71 [ 293.650539][ T10] gspca_sonixj: reg_r err -71 [ 293.696367][ T10] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 293.837749][ T5886] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 294.265924][ T10] usb 5-1: USB disconnect, device number 38 [ 294.396367][ T5886] usb 1-1: device descriptor read/64, error -71 [ 294.510903][ T5886] usb usb1-port1: attempt power cycle [ 294.537176][ T9341] syz.3.899 (9341): drop_caches: 2 [ 295.306328][ T5886] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 295.336758][ T5886] usb 1-1: device descriptor read/8, error -71 [ 295.502860][ T10] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 295.657446][ T5886] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 295.707138][ T5886] usb 1-1: device descriptor read/8, error -71 [ 295.766499][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 295.777471][ T10] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 295.808235][ T10] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 295.820845][ T10] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 295.835400][ T5886] usb usb1-port1: unable to enumerate USB device [ 295.855506][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 295.867250][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.883687][ T10] usb 3-1: Product: syz [ 295.893918][ T10] usb 3-1: Manufacturer: syz [ 295.904222][ T10] usb 3-1: SerialNumber: syz [ 296.372384][ T10] usb 3-1: USB disconnect, device number 46 [ 296.501926][ T9388] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 297.333532][ T5842] udevd[5842]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 297.596380][ T5919] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 297.788746][ T9401] netlink: 64 bytes leftover after parsing attributes in process `syz.2.916'. [ 297.848469][ T5919] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 297.857656][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.884219][ T9403] netlink: 28 bytes leftover after parsing attributes in process `syz.2.916'. [ 297.942856][ T5919] usb 5-1: config 0 descriptor?? [ 297.953807][ T5919] cp210x 5-1:0.0: cp210x converter detected [ 297.969127][ T9403] vim2m vim2m.0: vidioc_s_fmt queue busy [ 298.735822][ T5919] usb 5-1: cp210x converter now attached to ttyUSB0 [ 298.834753][ T5919] usb 5-1: USB disconnect, device number 39 [ 298.842914][ T5919] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 298.855974][ T5919] cp210x 5-1:0.0: device disconnected [ 298.989717][ T48] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 299.178302][ T48] usb 4-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 299.189990][ T48] usb 4-1: config 0 has an invalid interface number: 2 but max is -1 [ 299.203442][ T48] usb 4-1: config 0 has an invalid interface number: 2 but max is -1 [ 299.217149][ T48] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 299.246355][ T48] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 299.280740][ T9419] tipc: Enabling of bearer rejected, failed to enable media [ 299.305261][ T48] usb 4-1: config 0 has no interface number 0 [ 299.322318][ T48] usb 4-1: config 0 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 299.339406][ T48] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 299.359462][ T48] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.368281][ T48] usb 4-1: Product: syz [ 299.372794][ T9423] netlink: 'syz.2.920': attribute type 11 has an invalid length. [ 299.387783][ T48] usb 4-1: Manufacturer: syz [ 299.400030][ T48] usb 4-1: SerialNumber: syz [ 299.407266][ T5919] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 299.431029][ T48] usb 4-1: config 0 descriptor?? [ 299.546388][ T5921] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 299.586446][ T5919] usb 1-1: Using ep0 maxpacket: 16 [ 299.593118][ T5919] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 299.603913][ T5919] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.615228][ T5919] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.626955][ T5919] usb 1-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 299.640473][ T5919] usb 1-1: config 7 interface 0 has no altsetting 0 [ 299.647454][ T5919] usb 1-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 299.665420][ T48] usb 4-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 299.673432][ T5919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.681574][ T48] usb 4-1: MIDIStreaming interface descriptor not found [ 299.718480][ T5921] usb 5-1: config 0 has no interfaces? [ 299.724060][ T5921] usb 5-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 299.735728][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.758459][ T48] usb 4-1: USB disconnect, device number 42 [ 299.778177][ T5921] usb 5-1: config 0 descriptor?? [ 299.819335][ T10] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 299.981450][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 299.990737][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 299.994340][ T9422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.005502][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 300.022633][ T9422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.034580][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.043700][ T5886] usb 5-1: USB disconnect, device number 40 [ 300.051047][ T10] usb 2-1: Product: syz [ 300.064954][ T10] usb 2-1: Manufacturer: syz [ 300.070060][ T10] usb 2-1: SerialNumber: syz [ 300.078001][ T9426] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 300.235945][ T5919] usbhid 1-1:7.0: can't add hid device: -71 [ 300.251044][ T5919] usbhid 1-1:7.0: probe with driver usbhid failed with error -71 [ 300.280758][ T5919] usb 1-1: USB disconnect, device number 52 [ 300.286959][ T8327] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 300.296114][ T10] cdc_ncm 2-1:1.0: bind() failure [ 300.308797][ T10] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 300.308843][ T10] cdc_ncm 2-1:1.1: bind() failure [ 300.330176][ T10] usb 2-1: USB disconnect, device number 45 [ 300.456376][ T8327] usb 3-1: Using ep0 maxpacket: 16 [ 300.463328][ T8327] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 300.475226][ T8327] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 300.484502][ T5886] usb 4-1: new low-speed USB device number 43 using dummy_hcd [ 300.494726][ T8327] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 300.503927][ T8327] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.513031][ T8327] usb 3-1: Product: syz [ 300.517744][ T8327] usb 3-1: Manufacturer: syz [ 300.522352][ T8327] usb 3-1: SerialNumber: syz [ 300.566721][ T5956] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 300.636377][ T5886] usb 4-1: device descriptor read/64, error -71 [ 300.726499][ T5956] usb 5-1: Using ep0 maxpacket: 8 [ 300.733698][ T5956] usb 5-1: config index 0 descriptor too short (expected 72, got 36) [ 300.733749][ T5956] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 300.759578][ T5956] usb 5-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice= 1.08 [ 300.759613][ T5956] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.759631][ T5956] usb 5-1: Product: syz [ 300.759645][ T5956] usb 5-1: Manufacturer: syz [ 300.759658][ T5956] usb 5-1: SerialNumber: syz [ 300.815953][ T9435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.816770][ T9435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.880470][ T5886] usb 4-1: new low-speed USB device number 44 using dummy_hcd [ 301.009288][ T5886] usb 4-1: device descriptor read/64, error -71 [ 301.020029][ T8327] usb 3-1: 0:2 : does not exist [ 301.033827][ T8327] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 301.055238][ T8327] usb 3-1: USB disconnect, device number 47 [ 301.073511][ T5956] usb 5-1: USB disconnect, device number 41 [ 301.106090][ T6446] udevd[6446]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 301.132636][ T5919] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 301.136830][ T5886] usb usb4-port1: attempt power cycle [ 301.146824][ T48] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 301.316398][ T5919] usb 1-1: Using ep0 maxpacket: 16 [ 301.323850][ T5919] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 301.334190][ T48] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 301.343496][ T48] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.351578][ T5919] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 301.363711][ T48] usb 2-1: config 0 descriptor?? [ 301.371828][ T5919] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 301.381202][ T5919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.389380][ T5919] usb 1-1: Product: syz [ 301.393622][ T5919] usb 1-1: Manufacturer: syz [ 301.399110][ T5919] usb 1-1: SerialNumber: syz [ 301.486495][ T5886] usb 4-1: new low-speed USB device number 45 using dummy_hcd [ 301.514794][ T5886] usb 4-1: device descriptor read/8, error -71 [ 301.671109][ T9445] netlink: 4 bytes leftover after parsing attributes in process `syz.2.928'. [ 301.678040][ T9445] ip6gretap0: entered promiscuous mode [ 301.678222][ T9445] macvtap2: entered promiscuous mode [ 301.678357][ T9445] macvtap2: entered allmulticast mode [ 301.678371][ T9445] ip6gretap0: entered allmulticast mode [ 301.712876][ T9445] ip6gretap0: left allmulticast mode [ 301.731538][ T9445] ip6gretap0: left promiscuous mode [ 301.768553][ T5886] usb 4-1: new low-speed USB device number 46 using dummy_hcd [ 301.799153][ T5886] usb 4-1: device descriptor read/8, error -71 [ 301.880573][ T5919] usb 1-1: 0:192 : does not exist [ 301.908219][ T5886] usb usb4-port1: unable to enumerate USB device [ 301.926850][ T5919] usb 1-1: USB disconnect, device number 53 [ 301.934674][ T9451] loop6: detected capacity change from 0 to 524287487 [ 301.942073][ T9451] buffer_io_error: 252 callbacks suppressed [ 301.942084][ T9451] Buffer I/O error on dev loop6, logical block 0, async page read [ 301.958287][ T9451] Buffer I/O error on dev loop6, logical block 0, async page read [ 301.991936][ T9451] Buffer I/O error on dev loop6, logical block 0, async page read [ 302.004658][ T5842] udevd[5842]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 302.022643][ T9451] Buffer I/O error on dev loop6, logical block 0, async page read [ 302.035143][ T9451] Buffer I/O error on dev loop6, logical block 0, async page read [ 302.046856][ T9451] Buffer I/O error on dev loop6, logical block 0, async page read [ 302.066718][ T9451] Buffer I/O error on dev loop6, logical block 0, async page read [ 302.076500][ T9451] Buffer I/O error on dev loop6, logical block 0, async page read [ 302.093345][ T9451] ldm_validate_partition_table(): Disk read failed. [ 302.113513][ T9451] Buffer I/O error on dev loop6, logical block 0, async page read [ 302.126651][ T9451] Buffer I/O error on dev loop6, logical block 0, async page read [ 302.139722][ T9451] Dev loop6: unable to read RDB block 0 [ 302.149062][ T9451] loop6: unable to read partition table [ 302.155013][ T9451] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 302.567845][ T9464] netlink: 132 bytes leftover after parsing attributes in process `syz.0.933'. [ 302.640300][ T48] usb 2-1: Cannot set autoneg [ 302.654258][ T48] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 302.695644][ T48] usb 2-1: USB disconnect, device number 46 [ 302.797150][ T9468] netlink: 'syz.0.935': attribute type 1 has an invalid length. [ 302.919982][ T9468] 8021q: adding VLAN 0 to HW filter on device bond1 [ 303.032229][ T9472] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 303.047259][ T9477] netlink: 8 bytes leftover after parsing attributes in process `syz.4.937'. [ 303.048137][ T9472] bond1: (slave batadv1): making interface the new active one [ 303.096112][ T9472] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 303.250327][ T9473] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 303.271515][ T9473] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 303.287761][ T9473] tipc: Resetting bearer [ 303.323086][ T9482] Invalid logical block size (8188) [ 303.528450][ T9479] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 303.544841][ T9479] team0: Port device batadv1 added [ 303.556724][ T3493] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.604934][ T3493] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.627293][ T9485] xt_hashlimit: max too large, truncated to 1048576 [ 303.668366][ T3493] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.703652][ T3493] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.752428][ T3493] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.960277][ T8327] usb 1-1: new low-speed USB device number 54 using dummy_hcd [ 303.975022][ T3493] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.994545][ T3493] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.025973][ T3493] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.146509][ T8327] usb 1-1: Invalid ep0 maxpacket: 64 [ 304.292133][ T9508] netlink: 4 bytes leftover after parsing attributes in process `syz.2.943'. [ 304.306391][ T8327] usb 1-1: new low-speed USB device number 55 using dummy_hcd [ 304.327941][ T9508] syz_tun: left allmulticast mode [ 304.419306][ T9514] netlink: 14 bytes leftover after parsing attributes in process `syz.1.947'. [ 304.448510][ T9508] syz_tun: left promiscuous mode [ 304.453755][ T9508] bridge0: port 3(syz_tun) entered disabled state [ 304.496719][ T8327] usb 1-1: Invalid ep0 maxpacket: 64 [ 304.503964][ T8327] usb usb1-port1: attempt power cycle [ 304.505447][ T9508] bridge_slave_1: left allmulticast mode [ 304.613845][ T9508] bridge_slave_1: left promiscuous mode [ 304.620311][ T9508] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.703613][ T9508] bridge_slave_0: left allmulticast mode [ 304.709789][ T9508] bridge_slave_0: left promiscuous mode [ 304.716291][ T9508] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.742689][ T9508] bond0: (slave bridge0): Releasing backup interface [ 304.752617][ T9508] bridge0 (unregistering): left promiscuous mode [ 304.786511][ T10] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 304.863364][ T9512] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 304.874701][ T9512] team0: Port device batadv1 added [ 304.880742][ T8327] usb 1-1: new low-speed USB device number 56 using dummy_hcd [ 304.922662][ T8327] usb 1-1: Invalid ep0 maxpacket: 64 [ 304.966869][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 304.983540][ T10] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 305.004975][ T10] usb 2-1: config 0 has no interface number 0 [ 305.027668][ T10] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 305.040207][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.057219][ T8327] usb 1-1: new low-speed USB device number 57 using dummy_hcd [ 305.075278][ T10] usb 2-1: Product: syz [ 305.083135][ T10] usb 2-1: Manufacturer: syz [ 305.088310][ T8327] usb 1-1: Invalid ep0 maxpacket: 64 [ 305.094088][ T8327] usb usb1-port1: unable to enumerate USB device [ 305.103912][ T10] usb 2-1: SerialNumber: syz [ 305.159243][ T10] usb 2-1: config 0 descriptor?? [ 305.187870][ T10] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 305.196927][ T10] usb 2-1: selecting invalid altsetting 1 [ 305.202691][ T10] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 305.234291][ T10] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 305.274427][ T10] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 305.312700][ T10] usb 2-1: media controller created [ 305.324345][ T9514] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 305.431795][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 305.476459][ T9514] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 305.561403][ T9514] bond0 (unregistering): Released all slaves [ 305.645068][ T10] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 305.675806][ T10] zl10353_read_register: readreg error (reg=127, ret==-71) [ 305.701819][ T10] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 305.831869][ T10] usb 2-1: USB disconnect, device number 47 [ 306.291428][ T9536] loop5: detected capacity change from 0 to 7 [ 306.403450][ T9536] Dev loop5: unable to read RDB block 7 [ 306.412363][ T9536] loop5: unable to read partition table [ 306.418413][ T9536] loop5: partition table beyond EOD, truncated [ 306.445081][ T9536] loop_reread_partitions: partition scan of loop5 (úù) failed (rc=-5) [ 306.472754][ T9539] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 306.479451][ T9539] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 306.558091][ T30] audit: type=1326 audit(1764763525.461:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9535 comm="syz.3.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc9358f749 code=0x7ffc0000 [ 306.580274][ C1] vkms_vblank_simulate: vblank timer overrun [ 306.635195][ T9539] vhci_hcd vhci_hcd.0: Device attached [ 306.680106][ T9545] vhci_hcd: connection closed [ 306.688055][ T8273] vhci_hcd: stop threads [ 306.702435][ T8273] vhci_hcd: release socket [ 306.705158][ T30] audit: type=1326 audit(1764763525.461:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9535 comm="syz.3.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc9358f749 code=0x7ffc0000 [ 306.729368][ C1] vkms_vblank_simulate: vblank timer overrun [ 306.733502][ T8273] vhci_hcd: disconnect device [ 306.749301][ T30] audit: type=1326 audit(1764763525.461:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9535 comm="syz.3.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fbc9358f749 code=0x7ffc0000 [ 306.778756][ T30] audit: type=1326 audit(1764763525.461:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9535 comm="syz.3.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc9358f749 code=0x7ffc0000 [ 306.813094][ T30] audit: type=1326 audit(1764763525.461:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9535 comm="syz.3.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc9358f749 code=0x7ffc0000 [ 306.838936][ T30] audit: type=1326 audit(1764763525.461:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9535 comm="syz.3.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fbc9358f749 code=0x7ffc0000 [ 306.861212][ C1] vkms_vblank_simulate: vblank timer overrun [ 306.869454][ T30] audit: type=1326 audit(1764763525.461:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9535 comm="syz.3.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc9358f749 code=0x7ffc0000 [ 306.996777][ T30] audit: type=1326 audit(1764763525.461:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9535 comm="syz.3.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc9358f749 code=0x7ffc0000 [ 307.023313][ T30] audit: type=1326 audit(1764763525.461:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9535 comm="syz.3.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fbc9358f749 code=0x7ffc0000 [ 307.062052][ T9555] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 307.304439][ T30] audit: type=1326 audit(1764763525.461:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9535 comm="syz.3.950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc9358f749 code=0x7ffc0000 [ 307.670881][ T9568] netlink: 184 bytes leftover after parsing attributes in process `syz.2.958'. [ 307.686787][ T8327] usb 1-1: new full-speed USB device number 58 using dummy_hcd [ 307.857958][ T8327] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 307.879192][ T8327] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.915549][ T8327] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 307.956154][ T8327] usb 1-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 307.995780][ T8327] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.042516][ T8327] usb 1-1: config 0 descriptor?? [ 308.104114][ T9572] syzkaller0: entered promiscuous mode [ 308.116729][ T9572] syzkaller0: entered allmulticast mode [ 308.347903][ T9581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.369495][ T9581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.427949][ T9594] input: syz0 as /devices/virtual/input/input34 [ 310.671307][ T9566] netlink: 'syz.0.957': attribute type 14 has an invalid length. [ 310.773874][ T8327] usbhid 1-1:0.0: can't add hid device: -71 [ 310.795062][ T8327] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 310.836579][ T8327] usb 1-1: USB disconnect, device number 58 [ 312.226457][ T8327] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 312.346489][ T5886] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 312.387879][ T8327] usb 4-1: config 1 has an invalid interface number: 128 but max is 1 [ 312.396493][ T8327] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 312.406828][ T10] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 312.436711][ T8327] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 312.456012][ T8327] usb 4-1: config 1 has no interface number 0 [ 312.465490][ T8327] usb 4-1: config 1 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 312.484549][ T8327] usb 4-1: config 1 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.607012][ T5886] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 312.618301][ T5886] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice=48.90 [ 312.627582][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.675261][ T5886] usb 3-1: config 0 descriptor?? [ 312.691028][ T8327] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 312.700195][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 312.705979][ T8327] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.716626][ T9620] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 312.717808][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 312.754303][ T8327] usb 4-1: Product: syz [ 312.824283][ T10] usb 1-1: config 129 has an invalid interface number: 145 but max is 0 [ 312.836586][ T8327] usb 4-1: Manufacturer: syz [ 312.843007][ T8327] usb 4-1: SerialNumber: syz [ 312.850227][ T10] usb 1-1: config 129 has no interface number 0 [ 312.869969][ T10] usb 1-1: config 129 interface 145 has no altsetting 0 [ 312.878114][ T8327] cdc_wdm 4-1:1.128: skipping garbage [ 312.893472][ T8327] cdc_wdm 4-1:1.128: cdc-wdm0: USB WDM device [ 312.928201][ T8327] cdc_wdm 4-1:1.128: Unknown control protocol [ 312.939272][ T10] usb 1-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= d.2f [ 312.948752][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.962612][ T10] usb 1-1: Product: syz [ 312.969858][ T10] usb 1-1: Manufacturer: syz [ 312.991184][ T10] usb 1-1: SerialNumber: syz [ 313.016726][ T9624] syzkaller0: entered promiscuous mode [ 313.081054][ T48] usb 4-1: USB disconnect, device number 47 [ 313.096607][ T5886] elan 0003:04F3:0755.0015: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 313.481788][ T9630] pim6reg: entered allmulticast mode [ 313.489733][ T9630] netlink: 'syz.4.974': attribute type 10 has an invalid length. [ 313.941750][ T9639] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 314.296403][ T5886] usb 3-1: reset full-speed USB device number 48 using dummy_hcd [ 314.446381][ T5886] usb 3-1: device descriptor read/64, error -32 [ 314.487877][ T48] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 314.546376][ T5921] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 314.626393][ T48] usb 5-1: device descriptor read/64, error -71 [ 314.694839][ T5886] usb 3-1: reset full-speed USB device number 48 using dummy_hcd [ 314.694864][ T5921] usb 2-1: device descriptor read/64, error -71 [ 314.836685][ T5886] usb 3-1: device descriptor read/64, error -32 [ 314.876338][ T48] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 314.956500][ T5921] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 315.026395][ T48] usb 5-1: device descriptor read/64, error -71 [ 315.076407][ T5886] usb 3-1: reset full-speed USB device number 48 using dummy_hcd [ 315.100023][ T5886] usb 3-1: device descriptor read/8, error -32 [ 315.107496][ T5921] usb 2-1: device descriptor read/64, error -71 [ 315.139351][ T48] usb usb5-port1: attempt power cycle [ 315.246817][ T5921] usb usb2-port1: attempt power cycle [ 315.356791][ T9657] netlink: 28 bytes leftover after parsing attributes in process `syz.2.984'. [ 315.496383][ T48] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 315.537847][ T48] usb 5-1: device descriptor read/8, error -71 [ 315.606383][ T5921] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 315.776083][ T5921] usb 2-1: device descriptor read/8, error -71 [ 315.846624][ T48] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 315.901937][ T10] usb 1-1: disable ehci-hcd to run US-144 [ 315.906526][ T48] usb 5-1: device descriptor read/8, error -71 [ 315.925322][ T10] usb 1-1: USB disconnect, device number 59 [ 316.016613][ T5921] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 316.024979][ T48] usb usb5-port1: unable to enumerate USB device [ 316.030509][ T8327] usb 3-1: USB disconnect, device number 48 [ 316.058486][ T5921] usb 2-1: device descriptor read/8, error -71 [ 316.177750][ T5921] usb usb2-port1: unable to enumerate USB device [ 316.356655][ T10] usb 1-1: new full-speed USB device number 60 using dummy_hcd [ 316.661783][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 316.672715][ T10] usb 1-1: not running at top speed; connect to a high speed hub [ 316.687374][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 316.697708][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 316.719172][ T10] usb 1-1: string descriptor 0 read error: -22 [ 316.725478][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 316.736363][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.791092][ T10] usb 1-1: 0:2 : does not exist [ 316.928341][ T9680] netlink: 76 bytes leftover after parsing attributes in process `syz.2.988'. [ 317.011767][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 317.011783][ T30] audit: type=1326 audit(1764763535.921:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9677 comm="syz.3.989" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbc9358f749 code=0x0 [ 317.132509][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.138931][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.392939][ T30] audit: type=1800 audit(1764763536.301:188): pid=9685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.991" name="cgroup.events" dev="tmpfs" ino=1052 res=0 errno=0 [ 317.759434][ T9692] FAULT_INJECTION: forcing a failure. [ 317.759434][ T9692] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 317.774861][ T9692] CPU: 1 UID: 0 PID: 9692 Comm: syz.3.993 Not tainted syzkaller #0 PREEMPT(full) [ 317.774884][ T9692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 317.774895][ T9692] Call Trace: [ 317.774902][ T9692] [ 317.774910][ T9692] dump_stack_lvl+0x189/0x250 [ 317.774932][ T9692] ? __pfx____ratelimit+0x10/0x10 [ 317.774952][ T9692] ? __pfx_dump_stack_lvl+0x10/0x10 [ 317.774968][ T9692] ? __pfx__printk+0x10/0x10 [ 317.774989][ T9692] ? __might_fault+0xb0/0x130 [ 317.775016][ T9692] should_fail_ex+0x414/0x560 [ 317.775045][ T9692] _copy_to_iter+0x1de/0x1790 [ 317.775065][ T9692] ? process_measurement+0x1640/0x1a40 [ 317.775091][ T9692] ? __pfx__copy_to_iter+0x10/0x10 [ 317.775111][ T9692] ? __pfx_process_measurement+0x10/0x10 [ 317.775143][ T9692] ? __lock_acquire+0x6b6/0x2cf0 [ 317.775160][ T9692] tcp_recvmsg_locked+0x3032/0x3670 [ 317.775182][ T9692] ? __lock_acquire+0x6b6/0x2cf0 [ 317.775224][ T9692] ? __lock_acquire+0x6b6/0x2cf0 [ 317.775239][ T9692] ? __pfx_tcp_recvmsg_locked+0x10/0x10 [ 317.775276][ T9692] ? __local_bh_enable_ip+0x12d/0x1c0 [ 317.775291][ T9692] ? lockdep_hardirqs_on+0x98/0x140 [ 317.775310][ T9692] ? __local_bh_enable_ip+0x12d/0x1c0 [ 317.775338][ T9692] tcp_recvmsg+0x210/0x810 [ 317.775362][ T9692] ? __pfx_tcp_recvmsg+0x10/0x10 [ 317.775386][ T9692] ? aa_sk_perm+0x7f0/0x920 [ 317.775407][ T9692] ? sock_rps_record_flow+0x19/0x410 [ 317.775428][ T9692] inet_recvmsg+0x147/0x250 [ 317.775449][ T9692] ? __pfx_inet_recvmsg+0x10/0x10 [ 317.775470][ T9692] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 317.775486][ T9692] ? security_socket_recvmsg+0x7e/0x2e0 [ 317.775505][ T9692] sock_recvmsg+0x1a8/0x270 [ 317.775533][ T9692] __sys_recvfrom+0x1f6/0x340 [ 317.775553][ T9692] ? __pfx___sys_recvfrom+0x10/0x10 [ 317.775567][ T9692] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 317.775597][ T9692] ? __fget_files+0x3a0/0x420 [ 317.775627][ T9692] ? ksys_write+0x22a/0x250 [ 317.775645][ T9692] ? __pfx_ksys_write+0x10/0x10 [ 317.775664][ T9692] __x64_sys_recvfrom+0xde/0x100 [ 317.775684][ T9692] do_syscall_64+0xfa/0xf80 [ 317.775703][ T9692] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.775726][ T9692] ? clear_bhb_loop+0x60/0xb0 [ 317.775745][ T9692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.775761][ T9692] RIP: 0033:0x7fbc9358f749 [ 317.775774][ T9692] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 317.775788][ T9692] RSP: 002b:00007fbc943fa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 317.775806][ T9692] RAX: ffffffffffffffda RBX: 00007fbc937e5fa0 RCX: 00007fbc9358f749 [ 317.775818][ T9692] RDX: 0000000000000054 RSI: 00002000000002c0 RDI: 0000000000000003 [ 317.775826][ T9692] RBP: 00007fbc943fa090 R08: 0000200000000200 R09: 0000000000000010 [ 317.775837][ T9692] R10: 0000000000010007 R11: 0000000000000246 R12: 0000000000000001 [ 317.775847][ T9692] R13: 00007fbc937e6038 R14: 00007fbc937e5fa0 R15: 00007fbc9390fa28 [ 317.775876][ T9692] [ 318.805063][ T9699] netlink: 4 bytes leftover after parsing attributes in process `syz.2.996'. [ 318.855414][ T10] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 318.869450][ T10] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 318.889698][ T9699] ip6gretap0: entered promiscuous mode [ 318.895272][ T9699] macvtap3: entered promiscuous mode [ 318.970977][ T10] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 318.973649][ T9699] macvtap3: entered allmulticast mode [ 319.022591][ T9699] ip6gretap0: entered allmulticast mode [ 319.034619][ T10] usb 1-1: USB disconnect, device number 60 [ 319.137907][ T9702] ip6gretap0: left allmulticast mode [ 319.143419][ T9702] ip6gretap0: left promiscuous mode [ 319.569145][ T9721] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1003'. [ 319.828452][ T10] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 319.851574][ T9729] input: syz1 as /devices/virtual/input/input35 [ 320.016346][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 320.024786][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.051553][ T10] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 320.063107][ T9738] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1009'. [ 320.096515][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 320.118992][ T10] usb 3-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 320.137941][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.159622][ T30] audit: type=1800 audit(1764763539.071:189): pid=9738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1009" name="file0" dev="tmpfs" ino=969 res=0 errno=0 [ 320.182026][ T10] usb 3-1: config 0 descriptor?? [ 320.628930][ T30] audit: type=1326 audit(1764763539.531:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9749 comm="syz.0.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714f98f749 code=0x7ffc0000 [ 320.687345][ T10] kye 0003:0458:4018.0016: unknown main item tag 0x0 [ 320.696598][ T5886] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 320.704326][ T10] kye 0003:0458:4018.0016: reserved main item tag 0xe [ 320.711329][ T10] kye 0003:0458:4018.0016: item fetching failed at offset 15/133 [ 320.719859][ T30] audit: type=1326 audit(1764763539.541:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9749 comm="syz.0.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714f98f749 code=0x7ffc0000 [ 320.751392][ T10] kye 0003:0458:4018.0016: parse failed [ 320.757102][ T10] kye 0003:0458:4018.0016: probe with driver kye failed with error -22 [ 320.778363][ T30] audit: type=1326 audit(1764763539.541:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9749 comm="syz.0.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f714f98f749 code=0x7ffc0000 [ 320.807680][ T30] audit: type=1326 audit(1764763539.541:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9749 comm="syz.0.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714f98f749 code=0x7ffc0000 [ 320.876609][ T5886] usb 2-1: device descriptor read/64, error -71 [ 320.935387][ T30] audit: type=1326 audit(1764763539.541:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9749 comm="syz.0.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714f98f749 code=0x7ffc0000 [ 321.004736][ T30] audit: type=1326 audit(1764763539.541:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9749 comm="syz.0.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f714f98df90 code=0x7ffc0000 [ 321.170217][ T5886] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 321.222253][ T30] audit: type=1326 audit(1764763539.541:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9749 comm="syz.0.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714f98f749 code=0x7ffc0000 [ 321.306402][ T5886] usb 2-1: device descriptor read/64, error -71 [ 321.407707][ T9758] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000008: 0000 [#1] SMP KASAN PTI [ 321.419643][ T9758] KASAN: null-ptr-deref in range [0x0000000000000040-0x0000000000000047] [ 321.428061][ T9758] CPU: 0 UID: 0 PID: 9758 Comm: syz.0.1014 Not tainted syzkaller #0 PREEMPT(full) [ 321.437357][ T9758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 321.447418][ T9758] RIP: 0010:fd_install+0x57/0x3d0 [ 321.452454][ T9758] Code: 48 81 c3 48 09 00 00 48 89 d8 48 c1 e8 03 80 3c 28 00 74 08 48 89 df e8 67 4f e6 ff 4c 8b 3b 49 8d 5e 40 48 89 d8 48 c1 e8 03 <0f> b6 04 28 84 c0 0f 85 29 03 00 00 8b 1b 89 de 81 e6 00 00 00 01 [ 321.472054][ T9758] RSP: 0018:ffffc9000e907ca0 EFLAGS: 00010202 [ 321.478117][ T9758] RAX: 0000000000000008 RBX: 0000000000000041 RCX: 0000000000080000 [ 321.486070][ T9758] RDX: ffffc9000fe94000 RSI: 00000000000000df RDI: 00000000000000e0 [ 321.494028][ T9758] RBP: dffffc0000000000 R08: ffff88807695a233 R09: 1ffff1100ed2b446 [ 321.501983][ T9758] R10: dffffc0000000000 R11: ffffed100ed2b447 R12: 0000000000000009 [ 321.509945][ T9758] R13: 0000000000000009 R14: 0000000000000001 R15: ffff88807ddc52c0 [ 321.517902][ T9758] FS: 00007f715075f6c0(0000) GS:ffff8881260c0000(0000) knlGS:0000000000000000 [ 321.526817][ T9758] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 321.533395][ T9758] CR2: 000000110c2ce565 CR3: 0000000033ee6000 CR4: 00000000003526f0 [ 321.541354][ T9758] Call Trace: [ 321.544640][ T9758] [ 321.547561][ T9758] ? do_mq_open+0x595/0x770 [ 321.552057][ T9758] do_mq_open+0x5a0/0x770 [ 321.556375][ T9758] ? __pfx_do_mq_open+0x10/0x10 [ 321.561208][ T9758] ? __pfx_do_futex+0x10/0x10 [ 321.565877][ T9758] __x64_sys_mq_open+0x16a/0x1c0 [ 321.570798][ T9758] ? fd_install+0x95/0x3d0 [ 321.575208][ T9758] ? __pfx___x64_sys_mq_open+0x10/0x10 [ 321.580654][ T9758] ? syscall_user_dispatch+0x4f/0x90 [ 321.585926][ T9758] do_syscall_64+0xfa/0xf80 [ 321.590421][ T9758] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.596473][ T9758] ? clear_bhb_loop+0x60/0xb0 [ 321.601137][ T9758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.607016][ T9758] RIP: 0033:0x7f714f98f749 [ 321.611419][ T9758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 321.631023][ T9758] RSP: 002b:00007f715075f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 321.639431][ T9758] RAX: ffffffffffffffda RBX: 00007f714fbe6180 RCX: 00007f714f98f749 [ 321.647387][ T9758] RDX: 00000000000001a2 RSI: 0000000000000040 RDI: 0000200000000380 [ 321.655341][ T9758] RBP: 00007f714fa13f91 R08: 0000000000000000 R09: 0000000000000000 [ 321.663298][ T9758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 321.671253][ T9758] R13: 00007f714fbe6218 R14: 00007f714fbe6180 R15: 00007f714fd0fa28 [ 321.679219][ T9758] [ 321.682223][ T9758] Modules linked in: [ 321.687015][ T9758] ---[ end trace 0000000000000000 ]--- [ 321.693515][ T5886] usb usb2-port1: attempt power cycle [ 321.715524][ T9758] RIP: 0010:fd_install+0x57/0x3d0 [ 321.734263][ T9758] Code: 48 81 c3 48 09 00 00 48 89 d8 48 c1 e8 03 80 3c 28 00 74 08 48 89 df e8 67 4f e6 ff 4c 8b 3b 49 8d 5e 40 48 89 d8 48 c1 e8 03 <0f> b6 04 28 84 c0 0f 85 29 03 00 00 8b 1b 89 de 81 e6 00 00 00 01 [ 321.734603][ T9760] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000008: 0000 [#2] SMP KASAN PTI [ 321.765838][ T9760] KASAN: null-ptr-deref in range [0x0000000000000040-0x0000000000000047] [ 321.774326][ T9760] CPU: 0 UID: 0 PID: 9760 Comm: syz.0.1014 Tainted: G D syzkaller #0 PREEMPT(full) [ 321.785158][ T9760] Tainted: [D]=DIE [ 321.788861][ T9760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 321.798909][ T9760] RIP: 0010:fd_install+0x57/0x3d0 [ 321.803927][ T9760] Code: 48 81 c3 48 09 00 00 48 89 d8 48 c1 e8 03 80 3c 28 00 74 08 48 89 df e8 67 4f e6 ff 4c 8b 3b 49 8d 5e 40 48 89 d8 48 c1 e8 03 <0f> b6 04 28 84 c0 0f 85 29 03 00 00 8b 1b 89 de 81 e6 00 00 00 01 [ 321.823518][ T9760] RSP: 0018:ffffc9000e97fca0 EFLAGS: 00010202 [ 321.829578][ T9760] RAX: 0000000000000008 RBX: 0000000000000041 RCX: 0000000000080000 [ 321.837538][ T9760] RDX: ffffc90010e98000 RSI: 00000000000000c1 RDI: 00000000000000c2 [ 321.845504][ T9760] RBP: dffffc0000000000 R08: ffff88807695a233 R09: 1ffff1100ed2b446 [ 321.853464][ T9760] R10: dffffc0000000000 R11: ffffed100ed2b447 R12: 000000000000000a [ 321.861420][ T9760] R13: 000000000000000a R14: 0000000000000001 R15: ffff88807ddc52c0 [ 321.869377][ T9760] FS: 00007f715073e6c0(0000) GS:ffff8881260c0000(0000) knlGS:0000000000000000 [ 321.878288][ T9760] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 321.884855][ T9760] CR2: 00007f715073df98 CR3: 0000000033ee6000 CR4: 00000000003526f0 [ 321.892812][ T9760] Call Trace: [ 321.896077][ T9760] [ 321.898991][ T9760] ? do_mq_open+0x595/0x770 [ 321.903481][ T9760] do_mq_open+0x5a0/0x770 [ 321.907797][ T9760] ? __pfx_do_mq_open+0x10/0x10 [ 321.912634][ T9760] ? __pfx_do_futex+0x10/0x10 [ 321.917302][ T9760] __x64_sys_mq_open+0x16a/0x1c0 [ 321.922244][ T9760] ? __pfx___x64_sys_mq_open+0x10/0x10 [ 321.927695][ T9760] ? rcu_is_watching+0x15/0xb0 [ 321.932449][ T9760] do_syscall_64+0xfa/0xf80 [ 321.936938][ T9760] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.942984][ T9760] ? clear_bhb_loop+0x60/0xb0 [ 321.947646][ T9760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.953519][ T9760] RIP: 0033:0x7f714f98f749 [ 321.957916][ T9760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 321.977619][ T9760] RSP: 002b:00007f715073e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 321.986037][ T9760] RAX: ffffffffffffffda RBX: 00007f714fbe6270 RCX: 00007f714f98f749 [ 321.994005][ T9760] RDX: 0000000000000100 RSI: 0000000000000040 RDI: 0000200000000100 [ 322.001967][ T9760] RBP: 00007f714fa13f91 R08: 0000000000000000 R09: 0000000000000000 [ 322.009923][ T9760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 322.017874][ T9760] R13: 00007f714fbe6308 R14: 00007f714fbe6270 R15: 00007f714fd0fa28 [ 322.025835][ T9760] [ 322.028840][ T9760] Modules linked in: [ 322.033520][ T9760] ---[ end trace 0000000000000000 ]--- [ 322.058990][ T9758] RSP: 0018:ffffc9000e907ca0 EFLAGS: 00010202 [ 322.073402][ T9758] RAX: 0000000000000008 RBX: 0000000000000041 RCX: 0000000000080000 [ 322.095702][ T9758] RDX: ffffc9000fe94000 RSI: 00000000000000df RDI: 00000000000000e0 [ 322.108063][ T9760] RIP: 0010:fd_install+0x57/0x3d0 [ 322.113739][ T9760] Code: 48 81 c3 48 09 00 00 48 89 d8 48 c1 e8 03 80 3c 28 00 74 08 48 89 df e8 67 4f e6 ff 4c 8b 3b 49 8d 5e 40 48 89 d8 48 c1 e8 03 <0f> b6 04 28 84 c0 0f 85 29 03 00 00 8b 1b 89 de 81 e6 00 00 00 01 [ 322.146482][ T9760] RSP: 0018:ffffc9000e907ca0 EFLAGS: 00010202 [ 322.152670][ T9758] RBP: dffffc0000000000 R08: ffff88807695a233 R09: 1ffff1100ed2b446 [ 322.160952][ T5921] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 322.169514][ T9760] RAX: 0000000000000008 RBX: 0000000000000041 RCX: 0000000000080000 [ 322.178793][ T9758] R10: dffffc0000000000 R11: ffffed100ed2b447 R12: 0000000000000009 [ 322.187075][ T9760] RDX: ffffc9000fe94000 RSI: 00000000000000df RDI: 00000000000000e0 [ 322.195276][ T9758] R13: 0000000000000009 R14: 0000000000000001 R15: ffff88807ddc52c0 [ 322.203553][ T9760] RBP: dffffc0000000000 R08: ffff88807695a233 R09: 1ffff1100ed2b446 [ 322.211883][ T9758] FS: 00007f715075f6c0(0000) GS:ffff8881261c0000(0000) knlGS:0000000000000000 [ 322.221094][ T9760] R10: dffffc0000000000 R11: ffffed100ed2b447 R12: 0000000000000009 [ 322.231657][ T9758] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 322.238578][ T9760] R13: 0000000000000009 R14: 0000000000000001 R15: ffff88807ddc52c0 [ 322.250834][ T9758] CR2: 00007f0abebb42f8 CR3: 0000000033ee6000 CR4: 00000000003526f0 [ 322.259127][ T9760] FS: 00007f715073e6c0(0000) GS:ffff8881261c0000(0000) knlGS:0000000000000000 [ 322.271046][ T9760] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 322.277670][ T9758] Kernel panic - not syncing: Fatal exception [ 322.278042][ T9758] Kernel Offset: disabled