last executing test programs: 7.809598319s ago: executing program 1 (id=155): syz_open_dev$I2C(0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x441, 0x104) fallocate(r0, 0x8, 0x4000, 0x6) r1 = syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000880)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x9, 0x70, 0x9, [{{0x9, 0x4, 0x0, 0xd, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x1, 0x6, 0x7}}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x8, 0x0, 0x5}}], {{0x9, 0x5, 0x82, 0x2, 0x1ff, 0x11, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x4, 0xf7, 0x5}}}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x300, 0x85, 0xcf, 0x4d, 0x10, 0x6}, 0x3a, &(0x7f0000000400)={0x5, 0xf, 0x3a, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x2, 0x1, 0x401}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x0, 0x6, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0xda, "312e09731dd254aa83e2cf481e42e13a"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x10, 0xf8, 0xb822}]}, 0x3, [{0x4, &(0x7f0000000440)=@string={0x4, 0x3, 'D&'}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x40e}}, {0x6b, &(0x7f00000004c0)=@string={0x6b, 0x3, "8def7955318c40d94cf2f1f51a159d37350c4e54422da9c25cc211dfb1c65f626b7addea23d80d132985fff46e548512ce3cfb915132a014eda5f87a494c9c2eb08968933133c51ac586162d4022e8185b82fcd10c634445ffe63add189fe3746e770145857520f9da"}}]}) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000680)={0x14, &(0x7f0000000580)={0x20, 0x6, 0x97, {0x97, 0x22, "5ee8730bf71a45a025556e0fd49900e651cf5580dc77c0d8c9a261b3088c519ea8b411318311b32a7883d791e6cdb86486248252d647af24eb87ca48a7ff6862c1072e734846a2d59cabd2f377c30cce03ad7c212692affd3b8085740172d967221ad9382ee5af986c00ed7a254c61b2f44fb2af672aa1f95a1e68c8da83e8f1e32003b0389bc8a6813c5435bc2d8e6f850627d739"}}, &(0x7f0000000640)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000007c0)={0x1c, &(0x7f00000006c0)={0x40, 0xe, 0x4b, "c57dd82bc2e1b5dcef5194425d7376df3e3474ebff2565a9b9a58102c97382a0c31763ce2964a949b054292edbb24dfe28f8274d9cb661cc4b30c8d20886651c96f42d10e341ee7551c7dc"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x1}}) 6.279148114s ago: executing program 1 (id=161): r0 = socket(0x200000100000011, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000100)=0x6, 0x4) (async) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000100)=0x6, 0x4) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="34000000020000010000000000000000d96e6c8d5e85080045f00d80724e11d569116e3a1ce41e2a560254ea0043"], 0x34}, {&(0x7f0000000440)=ANY=[@ANYBLOB="00010600cf"], 0x100}], 0x2}, 0x0) (async) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="34000000020000010000000000000000d96e6c8d5e85080045f00d80724e11d569116e3a1ce41e2a560254ea0043"], 0x34}, {&(0x7f0000000440)=ANY=[@ANYBLOB="00010600cf"], 0x100}], 0x2}, 0x0) 6.125286377s ago: executing program 1 (id=162): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0xd}}) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000009c0), 0x38000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000a00)={0x2, "e0648b935fa1c78f359c9258d05b791cb43bdd67753af9724bd2649b1e5d231f"}) r2 = syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x10, 0x30, 0x8, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x7, 0x1, 0x3, 0x6, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0xb, 0x10, 0x5}}, [{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x2, 0x9, 0x74}}]}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x37, 0x4, 0x80, 0x20, 0xbe}, 0x19, &(0x7f00000000c0)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "bc4011efac99569e21b87e92115bdec6"}]}, 0x8, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0xf4ff}}, {0xa6, &(0x7f0000000140)=ANY=[@ANYBLOB="a60392700a9f1d3728fda241c45a5adb08fc6288bb47fb41128436016a7d1d66ad55171ba2b9723cc9bd3d3e010fa178b4407a1060237956864603c9a1c0faaeeb107c455db1ac350f34288f29b7f8b0e442d2984258db5098d4d4b6c08386ab27ffaa2548854359d82a7d038b74a0872d6ab2ee8dd756378ef47abf6f866943ff10b2825dd4fe4046948dd1d7150ae239e343cfbf2b02818290c055684477ba6c5000000000"]}, {0x4, &(0x7f0000000200)=@lang_id={0x4}}, {0xaa, &(0x7f0000000240)=@string={0xaa, 0x3, "5e04c160a6bdf7b6fd30aaf519ab1ba90084cce3f769be7b6a5f626319b80e4c7f6862316b64f4600146e1e310e01f609c2a68d4a9b2010aa44b27a0ef36d7a139e2ed114fb4c39d29a220a6e4dada4ca55093ab8b2dd5ba987e85c082ed1e8d827e7845ad951b4d0bc662618adb78f626465f4c6815e85932fab0c66a0d0d70d1ae52325584e5a9f799e372180b41fa9524e52c859ab35cca340b97bbad1bf9de3c9e892db66ca5"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x419}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x449}}, {0xa5, &(0x7f0000000380)=@string={0xa5, 0x3, "166255c626a68dd0d68b5d820ac28b90096ec6541aff6c27e0fd8e852226479e16a877cc036dcb5bed0d79e9d14ab2f2543d80f37d9375b12da7d17cbd58883594e78cebe6904bb95c668701b7a43e29e531e0497f24abb13174ce911c1d7824412a16346a7b504b7b226a4964e59d8c4a0758c28d06720fc93573a4e990a364c8f018dee38064afb0434489d46e1e733f9be0fd30222862305b7b9670d75030d2d81e"}}, {0x69, &(0x7f0000000440)=@string={0x69, 0x3, "e8cdda1121f173d347d129ae0a7bef6d220cd2d0511065858387fddb181a1045a599346a8e80da4e54eafcf1d737f2596e27868ac6d4edd12a7d027aa056248308b8db5133459daa18ab0e3a911f7f0d6d64f4697cbc6d1b9dc00cc2acf7e730358a405843ee01"}}]}) syz_usb_control_io$printer(r2, &(0x7f0000000600)={0x14, &(0x7f0000000540)={0x40, 0x2, 0x6f, {0x6f, 0x9, "32c3e1031dd83cab28f09f063963a157fe3921cd534a7194fcae0827d4e2c7f74f05e9b602b1bb05dae49f8160ff2a2077ecc3dc84bb65017adfec3328b64f64716b753a22a9a2ae3da61556bf87cf66b219814ec35ff50fba028bad49749820ea1e069908229344e6ef191d1e"}}, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x409}}}, &(0x7f0000000980)={0x34, &(0x7f0000000680)={0x20, 0x1, 0x84, "4673fa7931438f5f3cf7169448e7cf08c86a1918a392cd5edd04e8dc92c33b89116e95a87c6f8c3b32827bca7ae48943bcfc2af06405365ed3622a8c4f5e8e4719772629300f606877d824a195c7a6a59a473afe5d555e2be5ded1cb7fd2448cc052a26d2cfae672e1c2690236eacbd2250d82c2a82cb187b7905717df4f37580e5d43b7"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x5f}, &(0x7f00000007c0)={0x20, 0x0, 0x102, {0x100, "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"}}, &(0x7f0000000900)={0x20, 0x1, 0x1, 0x7}, &(0x7f0000000940)={0x20, 0x0, 0x1, 0xb3}}) syz_open_dev$char_usb(0xc, 0xb4, 0x2000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x110, 0xffffffffffffffff, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 5.125115703s ago: executing program 2 (id=168): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000002a00)={0x2c, r0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x4}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004000}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="200000005f0001"], 0x20}], 0x1}, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r6, 0xc0145401, &(0x7f0000000200)={0x2, 0x0, 0x0, 0xb7d375beb1f4ba0d}) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x2201) ioctl$DRM_IOCTL_AUTH_MAGIC(r7, 0x40046411, &(0x7f00000002c0)=0x7c) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="c026000041000701000000000700000003", @ANYRESHEX=r7], 0x26c0}, 0x1, 0x0, 0x0, 0x8000}, 0x24004010) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000002a00)={0x2c, r0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x4}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004000}, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) (async) sendmsg$netlink(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="200000005f0001"], 0x20}], 0x1}, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r6, 0xc0145401, &(0x7f0000000200)={0x2, 0x0, 0x0, 0xb7d375beb1f4ba0d}) (async) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x2201) (async) ioctl$DRM_IOCTL_AUTH_MAGIC(r7, 0x40046411, &(0x7f00000002c0)=0x7c) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="c026000041000701000000000700000003", @ANYRESHEX=r7], 0x26c0}, 0x1, 0x0, 0x0, 0x8000}, 0x24004010) (async) 4.901290279s ago: executing program 2 (id=170): syz_open_dev$I2C(0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x441, 0x104) fallocate(r0, 0x8, 0x4000, 0x6) r1 = syz_usb_connect$cdc_ecm(0x2, 0x17c, &(0x7f0000000880)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x16a, 0x1, 0x1, 0x9, 0x70, 0x9, [{{0x9, 0x4, 0x0, 0xd, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x1, 0x6, 0x7}, [@mdlm_detail={0x103, 0x24, 0x13, 0x1f, "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"}, @mdlm={0x15, 0x24, 0x12, 0x1}, @dmm={0x7, 0x24, 0x14, 0x3, 0x9}, @dmm={0x7, 0x24, 0x14, 0xc, 0x7fff}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x8, 0x0, 0x5}}], {{0x9, 0x5, 0x82, 0x2, 0x1ff, 0x11, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x4, 0xf7, 0x5}}}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x300, 0x85, 0xcf, 0x4d, 0x10, 0x6}, 0x3a, &(0x7f0000000400)={0x5, 0xf, 0x3a, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x2, 0x1, 0x401}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x0, 0x6, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0xda, "312e09731dd254aa83e2cf481e42e13a"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x10, 0xf8, 0xb822}]}, 0x3, [{0x4, &(0x7f0000000440)=@string={0x4, 0x3, 'D&'}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x40e}}, {0x6b, &(0x7f00000004c0)=@string={0x6b, 0x3, "8def7955318c40d94cf2f1f51a159d37350c4e54422da9c25cc211dfb1c65f626b7addea23d80d132985fff46e548512ce3cfb915132a014eda5f87a494c9c2eb08968933133c51ac586162d4022e8185b82fcd10c634445ffe63add189fe3746e770145857520f9da"}}]}) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000680)={0x14, &(0x7f0000000580)={0x20, 0x6, 0x97, {0x97, 0x22, "5ee8730bf71a45a025556e0fd49900e651cf5580dc77c0d8c9a261b3088c519ea8b411318311b32a7883d791e6cdb86486248252d647af24eb87ca48a7ff6862c1072e734846a2d59cabd2f377c30cce03ad7c212692affd3b8085740172d967221ad9382ee5af986c00ed7a254c61b2f44fb2af672aa1f95a1e68c8da83e8f1e32003b0389bc8a6813c5435bc2d8e6f850627d739"}}, &(0x7f0000000640)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000007c0)={0x1c, &(0x7f00000006c0)={0x40, 0xe, 0x4b, "c57dd82bc2e1b5dcef5194425d7376df3e3474ebff2565a9b9a58102c97382a0c31763ce2964a949b054292edbb24dfe28f8274d9cb661cc4b30c8d20886651c96f42d10e341ee7551c7dc"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x1}}) 4.413747928s ago: executing program 1 (id=174): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e21000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 4.24180474s ago: executing program 1 (id=175): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'pimreg0\x00', @local}) syz_usb_connect(0x0, 0x24, &(0x7f0000002300)={{0x12, 0x1, 0x310, 0x1a, 0x11, 0x81, 0x8, 0x16c0, 0x5df, 0xc5a8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0x0, 0x10, 0x7, [{{0x9, 0x4, 0x21, 0x6, 0x0, 0x3, 0x0, 0x0, 0x7}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) write$tun(r0, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x300, 0x0, 0x1c, {[@window={0xe, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 3.869642721s ago: executing program 0 (id=177): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r2, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0xa, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r3, &(0x7f0000000400)="83", 0x1, 0x4000, 0x0, 0x0) recvmmsg(r3, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)=""/22, 0x16}], 0x1}, 0xfffffffb}], 0x1, 0x40000142, 0x0) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r4, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000280)='id:\x00\x00\x00\x00') ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) 3.764865261s ago: executing program 0 (id=179): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344", 0x4f}, {0x0}, {&(0x7f00000005c0)}], 0x3}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r2, 0x40204706, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a1", 0xa}], 0x1}, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @ioapic={0x0, 0xfffffff9, 0xd, 0x3, 0x0, [{0x0, 0x2, 0x2f, '\x00', 0x3}, {0xf8, 0xe7, 0xb, '\x00', 0x5}, {0x7, 0x3, 0x2, '\x00', 0x6}, {0xff, 0x9, 0x1, '\x00', 0xa}, {0x3, 0x79, 0x8, '\x00', 0x16}, {0x2, 0x82, 0x3, '\x00', 0x8}, {0x3, 0x4, 0x9}, {0x6, 0xf7, 0x1, '\x00', 0x40}, {0x5, 0x3a, 0x10, '\x00', 0x6}, {0x93, 0x8, 0x4, '\x00', 0x5}, {0x7f, 0x9}, {0x7, 0x1, 0xf, '\x00', 0x2}, {0xe, 0xc, 0x1, '\x00', 0xa}, {0x9, 0x5a, 0x2, '\x00', 0x14}, {0x9, 0x4, 0x5, '\x00', 0x3}, {0x34, 0xda, 0x4, '\x00', 0x8}, {0x0, 0x4a, 0x7, '\x00', 0x1}, {0xc, 0x6, 0xe, '\x00', 0x5}, {0x9, 0x2, 0xb4, '\x00', 0x7}, {0x5, 0x8, 0x0, '\x00', 0x80}, {0x5, 0x7, 0x1, '\x00', 0x5b}, {0xf5, 0x2, 0x2, '\x00', 0x1}, {0xe, 0x1, 0x1, '\x00', 0x33}, {0x6, 0x6, 0x1a, '\x00', 0x7}]}}) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="36c1fefc4a84cb34adfedaf464", 0xd}], 0x1, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"/896], 0x140}}], 0x1, 0x810) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="180000007600"], 0x1c}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x400002d) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0xfffffffffffffc60) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000440)=[{0x0, 0x0, &(0x7f0000000000), 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0xffffffffffffffae}], 0x1, 0x40800) socket$inet_sctp(0x2, 0x1, 0x84) 3.457535665s ago: executing program 0 (id=181): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000005f00)={0x44, r6, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x8, 0x4, "3423d5d2"}]}]}, 0x44}}, 0x4004) getsockopt$IPT_SO_GET_ENTRIES(r4, 0x0, 0x41, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.281820356s ago: executing program 0 (id=182): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001240)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x2c, r0, 0x1, 0x71bd25, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}]}]}, 0x2c}}, 0x0) 3.273444004s ago: executing program 2 (id=183): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffff9]}, 0x0, 0x8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x40804, 0x0, 0x0) r2 = gettid() r3 = gettid() tkill(r2, 0x12) tkill(r3, 0x14) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x35}, {0x6, 0x0, 0x0, 0x7fff0000}]}) setuid(0xee01) ioprio_set$pid(0x2, 0x0, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$netlink(r4, 0x10e, 0x5, &(0x7f00000000c0)=""/72, &(0x7f0000000140)=0x48) prctl$PR_SET_IO_FLUSHER(0x39, 0x5) open_by_handle_at(r0, &(0x7f0000000040)=@fuse={0xc, 0x81, {0xffffff51, 0x7ff, 0x5}}, 0x242880) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000000)=0x201, 0x4) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip6tnl0\x00', 0x0, 0x4, 0x1, 0x4, 0x4, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x1, 0x5, 0x2}}) r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4e20, 0x3, 0x4e24, 0x0, 0x2, 0xa0, 0x0, 0x29, r5}, {0x0, 0x80000000, 0x8, 0x18, 0x0, 0x1002, 0x0, 0x3}, {0x2000000000005, 0x0, 0x9, 0xb}, 0x80000000, 0x6e6bba, 0x3, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x4d4, 0x6c}, 0xa, @in=@multicast2, 0xb505, 0x4, 0x3, 0x7, 0xa6508de, 0x2bd, 0x7}}, 0xe8) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 3.1137722s ago: executing program 2 (id=185): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000406d049cc200000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) r1 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) pwritev(r1, &(0x7f0000000280)=[{&(0x7f0000000000)="2d74115fd9", 0x2}], 0x1, 0x4, 0xa) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="2022ca000000ca10330d44d8f7a9f677339d1fe8e07956cd56546f08f610897d70ac7ad189b8fba9161ca86d0cc55b994ff382ff0d324378f949982aeb917ad168424c668c72ce011fea5e12a49e4bdee85530c9c6922cd0ec97e31b62ee2c448da06dd6a86c73052bef7b9c96a07d280904882540dcdbf58e9ecd47e832d4ade6e8e72d7d1daa7098201b9c28f628145ba56d7e3032ec7aedd1dd842052a891da779f210e63dfef27d62f5ab7409706e9d32e83f7a185a629f79adaab4eb4b14a178e3ac28d57000000000000000000"], 0x0, 0x0, 0x0}, 0x0) 3.113367409s ago: executing program 0 (id=186): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r2, &(0x7f0000000140)="96", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x1, 0x0, @private2}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000180)=0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000280)=0x100000001, 0x4) semget$private(0x0, 0x0, 0x113) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c0100001000130427bd7000fbdbdf25fe800000000000000000000000000000ac1414bb000088000000000000000000000000000000000000000000005a3e00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYBLOB="0258a7b81bfd"], 0x15c}}, 0x4000080) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 2.71883648s ago: executing program 1 (id=188): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) clock_gettime(0x3, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_DELAY(r2, 0x80084121, &(0x7f00000000c0)) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x7, 0x600000) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0x40084146, &(0x7f0000000100)=0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000280001"], 0x50}, 0x1, 0x0, 0x0, 0x4000840}, 0x20004040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r3, &(0x7f0000000080)={0x18, 0x2, {0x0, @broadcast}}, 0x1e) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000040)=0x1) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc73}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x4000) move_pages(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000ffe000/0x2000)=nil], 0x0, 0x0, 0x2) ioctl$KVM_SET_MP_STATE(r7, 0x4004ae99, &(0x7f0000000000)=0x4) ioctl$KVM_GET_MP_STATE(r7, 0x8004ae98, &(0x7f0000000080)) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000010c0)=ANY=[@ANYBLOB="12010000c73d8a0870272091776c0102ef010902120001000000000904"], 0x0) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x40400, 0x0) ioctl$FBIOPUTCMAP(r8, 0x4605, &(0x7f0000000380)={0x4674, 0x1, &(0x7f0000000280)=[0x7], &(0x7f00000002c0)=[0x2, 0x0, 0x80, 0x3ff], &(0x7f0000000300)=[0x7, 0x8001, 0x2, 0x2, 0x101, 0x82e, 0xfffb], &(0x7f0000000340)=[0x0, 0x4, 0x7ff, 0x0]}) 2.218710839s ago: executing program 0 (id=190): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000480)={0x40, 0xb, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000180)={0x40, 0x12, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000440)={0x40, 0x11, 0x1, '$'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000240)=ANY=[@ANYBLOB="0082921f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000064d564b"]) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000dc0)={0x44, &(0x7f0000000b00)={0x40, 0x8, 0x1, "bc"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 1.676983719s ago: executing program 2 (id=191): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x2, 0x4, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x0, @empty}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0x2, 0x20000000}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x70}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dffff000000000000a0c70000000000000000000000000000000008000100544545000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r2 = socket$key(0xf, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2000000, &(0x7f0000000140)=ANY=[@ANYBLOB='mpol=prefer=rela|ive: ']) sendmsg$key(r2, &(0x7f0000001e40)={0x0, 0x0, &(0x7f0000001e00)={&(0x7f0000001c40)={0x2, 0x4, 0x3, 0x2, 0xc, 0x0, 0x70bd2c, 0x25dfdbfd, [@sadb_address={0x3, 0x5, 0x6c, 0x0, 0x0, @in={0x2, 0x4e24, @local}}, @sadb_address={0x5, 0x6, 0x9d, 0x60, 0x0, @in6={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x43}, 0x9}}, @sadb_sa={0x2, 0x1, 0x4d2, 0x7, 0x4, 0x2d, 0x1, 0x40000000}]}, 0x60}}, 0x8040) r3 = syz_usb_connect(0x3, 0x42, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x98, 0x5c, 0x47, 0x40, 0x12d1, 0x6708, 0xb0f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x30, 0x1, 0xa0, 0x1, 0x80, 0xf, [{{0x9, 0x4, 0x4c, 0x4, 0x0, 0xff, 0x3, 0xf, 0x0, [@uac_as={[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xc, 0x4, 0x9, 0x7, "", "83c1"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x18, 0x3, 0xc, 0x37, "a75710dee6"}, @as_header={0x7, 0x24, 0x1, 0x0, 0xe, 0x4}]}]}}]}}]}}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x30, &(0x7f0000000000)=@string={0x30, 0x3, "e1d185c8c82005d3dd091dea387d80b92f220c011625c503d2840a7b9e033dec4e86858596521ab606441c98090b"}}]}) syz_usb_connect$cdc_ecm(0x5, 0x8e, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7c, 0x1, 0x1, 0x2, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0xff, 0x3, 0x2, 0x6, 0x0, 0x7, {{0x8, 0x24, 0x6, 0x0, 0x0, "f0052c"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x2, 0xe182, 0xec0, 0x7}, [@network_terminal={0x7, 0x24, 0xa, 0x9, 0x40, 0x8, 0x12}, @country_functional={0xc, 0x24, 0x7, 0xbf, 0x0, [0x0, 0x2, 0x7f]}, @mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x2, 0x200}, @mbim_extended={0x8, 0x24, 0x1c, 0x3, 0x9, 0x200}, @mdlm={0x15, 0x24, 0x12, 0x1}, @country_functional={0x6, 0x24, 0x7, 0x1a, 0x3}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0xc5, 0xa}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x8, 0x9, 0x95}}}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x110, 0x3, 0x2, 0x2, 0x10, 0x85}, 0x16, &(0x7f0000000200)={0x5, 0xf, 0x16, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x7, 0x0, 0x60}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x4, 0x0, 0x9}]}, 0x2, [{0x5f, &(0x7f0000000240)=@string={0x5f, 0x3, "d21195bda7d58381bab00cdaa0b3e7f6d702158e603f1f41e3ac0252976099f50c0bde5ec1f75ead9e96330738e9663fd794808910e42ac1dd07a9348d9e0131327845a27d3dd2ef31d8a71f8624c46b676966f29d3e287ddde66e29df"}}, {0x2e, &(0x7f00000002c0)=@string={0x2e, 0x3, "c5bae2f22b767e17685602a3791addab3b94096bfec347e8bc847be38edc1f2f07e1aae83c12092304ad91c1"}}]}) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000340)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1477, 0x1006, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x10, 0x3, [{{0x9, 0x4, 0x0, 0xff, 0x1, 0x3, 0x1, 0x0, 0xda, {0x9, 0x21, 0x3b, 0x9, 0x1, {0x22, 0xe95}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xfb, 0x0, 0x5}}}}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x300, 0x9, 0x6, 0x4, 0x10, 0x9}, 0x85, &(0x7f00000003c0)={0x5, 0xf, 0x85, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x9, 0x87, 0x8}, @ssp_cap={0x24, 0x10, 0xa, 0x9, 0x6, 0x4, 0xf00, 0x5c5, [0xf, 0x3f00, 0xffc0, 0xc00f, 0xc0, 0xc030]}, @generic={0x47, 0x10, 0x2, "9d6362cc6e7620c430071542b2932db22fcf438961e89d5ff53560117ee0ca90803230e4501091bca23f2882bb8db30a2e893b1ef62db7652fdb71a6836130f499fa4221"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x8, 0x88, 0x4, 0xfe00, 0x80}]}, 0x6, [{0x5d, &(0x7f0000000480)=@string={0x5d, 0x3, "ff01f4e696e59e42ccd77d9812be21228d6cd7d2ba9625720809b079a6f40699083de993839431b3031374f998d32e7581438630b5d539177becf1298bd50a80f650ff6881fc4411a362dba78fcf1cc6a80bd52c07028075389401"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4}}, {0x95, &(0x7f0000000540)=@string={0x95, 0x3, "ad547b4bec86a190272856a37f8dec101f532493d937925532d1f66d0e7085e6a2344fd557279e19d734d007f6d08b381ce679bb43050d78e068ee56b09c56a1818e23aa761f5451cf0947742ad8cf306ca133ba3a90bde61afacc79e746bd2ebf5aadc1377fbb9b7f71adaf73526eed21b4b19c0d960d67d3548b842f9dc4fd04f80569bac4c1352ec299825229271d2763b6"}}, {0x9b, &(0x7f0000000600)=@string={0x9b, 0x3, "253602f7cd14e8dfd0e401678a98686f88b042a675bed685275dea6cf2fea7581c3e2c6ac27be1b3e378ebd02f20035eda63390d92e41a3d1430adf759ce7b9536fa0366975c0da66d191a9792d1d3a8040621f2888acd57f5b458c95403081b311ed19c39e08bb7792a3537d0625c970d178e58b84eb28a09482d8ea6f5684c852fbf792d9867c64ffde2316683906a6e7a3b801e3357912b"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x1812}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x411}}]}) syz_usb_control_io$uac1(r3, &(0x7f0000000900)={0x14, &(0x7f00000007c0)={0x0, 0xf, 0xe9, {0xe9, 0x9, "5e73ee0ea7e6b10627706ea9d13db105d20eb9f557767a5ba0dcea77f6b83e6184a34d8d0f16526fa751c03a285fd1677b8a7ef5c84a70742caf0558f661b0c59ff2a74c21d937b4e2c25e951a0fb43512f9463aa8980a6bcf597fed5fc145541724572e82cac2c28d9ab715dcf5044af40de96b371b3c875b54042242e1605300344032eb8c6f04883b61d9907cdbef11b92753043b237620f37d70633d93f724a1d29c1ada52415f0911b3454e9e9d3d4180db038b14b19696a2e2361f3bfc31a21aef0020b3a440bdb4c81d9b89155d1d57ac1b4079fb32d11d9bd88d6fb6fb40d2e47e5cd7"}}, &(0x7f00000008c0)={0x0, 0x3, 0x28, @string={0x28, 0x3, "f6dc02665dfc336cce10b10e4d8faeeffb2bc3a8abd5c927fd61f643f7cb8ea442f1f7d9a396"}}}, &(0x7f0000000b80)={0x44, &(0x7f0000000940)={0x40, 0xd, 0x4e, "875df9acd2cc8b47825271682293dc32f9a589b0c56d7705a91f43a862bbb6837cdd9bded0c4d291e59f057f36c598946b0030b08d671ba5b19c297f8c5475bd766d91b4e2ba1946b9df22c76d0f"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000a40)={0x20, 0x81, 0x3, "b419d4"}, &(0x7f0000000a80)={0x20, 0x82, 0x2, "ce1f"}, &(0x7f0000000c00)=ANY=[@ANYBLOB="ca5ada030000001300006d0000002000000000000000a53e0000"], &(0x7f0000000b00)={0x20, 0x84, 0x3, "98b59b"}, &(0x7f0000000b40)={0x20, 0x85, 0x3, "218e67"}}) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x2, 0x4, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x0, @empty}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0x2, 0x20000000}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x70}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dffff000000000000a0c70000000000000000000000000000000008000100544545000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async) socket$key(0xf, 0x3, 0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2000000, &(0x7f0000000140)=ANY=[@ANYBLOB='mpol=prefer=rela|ive: ']) (async) sendmsg$key(r2, &(0x7f0000001e40)={0x0, 0x0, &(0x7f0000001e00)={&(0x7f0000001c40)={0x2, 0x4, 0x3, 0x2, 0xc, 0x0, 0x70bd2c, 0x25dfdbfd, [@sadb_address={0x3, 0x5, 0x6c, 0x0, 0x0, @in={0x2, 0x4e24, @local}}, @sadb_address={0x5, 0x6, 0x9d, 0x60, 0x0, @in6={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x43}, 0x9}}, @sadb_sa={0x2, 0x1, 0x4d2, 0x7, 0x4, 0x2d, 0x1, 0x40000000}]}, 0x60}}, 0x8040) (async) syz_usb_connect(0x3, 0x42, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x98, 0x5c, 0x47, 0x40, 0x12d1, 0x6708, 0xb0f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x30, 0x1, 0xa0, 0x1, 0x80, 0xf, [{{0x9, 0x4, 0x4c, 0x4, 0x0, 0xff, 0x3, 0xf, 0x0, [@uac_as={[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xc, 0x4, 0x9, 0x7, "", "83c1"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x18, 0x3, 0xc, 0x37, "a75710dee6"}, @as_header={0x7, 0x24, 0x1, 0x0, 0xe, 0x4}]}]}}]}}]}}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x30, &(0x7f0000000000)=@string={0x30, 0x3, "e1d185c8c82005d3dd091dea387d80b92f220c011625c503d2840a7b9e033dec4e86858596521ab606441c98090b"}}]}) (async) syz_usb_connect$cdc_ecm(0x5, 0x8e, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7c, 0x1, 0x1, 0x2, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0xff, 0x3, 0x2, 0x6, 0x0, 0x7, {{0x8, 0x24, 0x6, 0x0, 0x0, "f0052c"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x2, 0xe182, 0xec0, 0x7}, [@network_terminal={0x7, 0x24, 0xa, 0x9, 0x40, 0x8, 0x12}, @country_functional={0xc, 0x24, 0x7, 0xbf, 0x0, [0x0, 0x2, 0x7f]}, @mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x2, 0x200}, @mbim_extended={0x8, 0x24, 0x1c, 0x3, 0x9, 0x200}, @mdlm={0x15, 0x24, 0x12, 0x1}, @country_functional={0x6, 0x24, 0x7, 0x1a, 0x3}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0xc5, 0xa}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x8, 0x9, 0x95}}}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x110, 0x3, 0x2, 0x2, 0x10, 0x85}, 0x16, &(0x7f0000000200)={0x5, 0xf, 0x16, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x7, 0x0, 0x60}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x4, 0x0, 0x9}]}, 0x2, [{0x5f, &(0x7f0000000240)=@string={0x5f, 0x3, "d21195bda7d58381bab00cdaa0b3e7f6d702158e603f1f41e3ac0252976099f50c0bde5ec1f75ead9e96330738e9663fd794808910e42ac1dd07a9348d9e0131327845a27d3dd2ef31d8a71f8624c46b676966f29d3e287ddde66e29df"}}, {0x2e, &(0x7f00000002c0)=@string={0x2e, 0x3, "c5bae2f22b767e17685602a3791addab3b94096bfec347e8bc847be38edc1f2f07e1aae83c12092304ad91c1"}}]}) (async) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000340)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1477, 0x1006, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x10, 0x3, [{{0x9, 0x4, 0x0, 0xff, 0x1, 0x3, 0x1, 0x0, 0xda, {0x9, 0x21, 0x3b, 0x9, 0x1, {0x22, 0xe95}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xfb, 0x0, 0x5}}}}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x300, 0x9, 0x6, 0x4, 0x10, 0x9}, 0x85, &(0x7f00000003c0)={0x5, 0xf, 0x85, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x9, 0x87, 0x8}, @ssp_cap={0x24, 0x10, 0xa, 0x9, 0x6, 0x4, 0xf00, 0x5c5, [0xf, 0x3f00, 0xffc0, 0xc00f, 0xc0, 0xc030]}, @generic={0x47, 0x10, 0x2, "9d6362cc6e7620c430071542b2932db22fcf438961e89d5ff53560117ee0ca90803230e4501091bca23f2882bb8db30a2e893b1ef62db7652fdb71a6836130f499fa4221"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x8, 0x88, 0x4, 0xfe00, 0x80}]}, 0x6, [{0x5d, &(0x7f0000000480)=@string={0x5d, 0x3, "ff01f4e696e59e42ccd77d9812be21228d6cd7d2ba9625720809b079a6f40699083de993839431b3031374f998d32e7581438630b5d539177becf1298bd50a80f650ff6881fc4411a362dba78fcf1cc6a80bd52c07028075389401"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4}}, {0x95, &(0x7f0000000540)=@string={0x95, 0x3, "ad547b4bec86a190272856a37f8dec101f532493d937925532d1f66d0e7085e6a2344fd557279e19d734d007f6d08b381ce679bb43050d78e068ee56b09c56a1818e23aa761f5451cf0947742ad8cf306ca133ba3a90bde61afacc79e746bd2ebf5aadc1377fbb9b7f71adaf73526eed21b4b19c0d960d67d3548b842f9dc4fd04f80569bac4c1352ec299825229271d2763b6"}}, {0x9b, &(0x7f0000000600)=@string={0x9b, 0x3, "253602f7cd14e8dfd0e401678a98686f88b042a675bed685275dea6cf2fea7581c3e2c6ac27be1b3e378ebd02f20035eda63390d92e41a3d1430adf759ce7b9536fa0366975c0da66d191a9792d1d3a8040621f2888acd57f5b458c95403081b311ed19c39e08bb7792a3537d0625c970d178e58b84eb28a09482d8ea6f5684c852fbf792d9867c64ffde2316683906a6e7a3b801e3357912b"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x1812}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x411}}]}) (async) syz_usb_control_io$uac1(r3, &(0x7f0000000900)={0x14, &(0x7f00000007c0)={0x0, 0xf, 0xe9, {0xe9, 0x9, "5e73ee0ea7e6b10627706ea9d13db105d20eb9f557767a5ba0dcea77f6b83e6184a34d8d0f16526fa751c03a285fd1677b8a7ef5c84a70742caf0558f661b0c59ff2a74c21d937b4e2c25e951a0fb43512f9463aa8980a6bcf597fed5fc145541724572e82cac2c28d9ab715dcf5044af40de96b371b3c875b54042242e1605300344032eb8c6f04883b61d9907cdbef11b92753043b237620f37d70633d93f724a1d29c1ada52415f0911b3454e9e9d3d4180db038b14b19696a2e2361f3bfc31a21aef0020b3a440bdb4c81d9b89155d1d57ac1b4079fb32d11d9bd88d6fb6fb40d2e47e5cd7"}}, &(0x7f00000008c0)={0x0, 0x3, 0x28, @string={0x28, 0x3, "f6dc02665dfc336cce10b10e4d8faeeffb2bc3a8abd5c927fd61f643f7cb8ea442f1f7d9a396"}}}, &(0x7f0000000b80)={0x44, &(0x7f0000000940)={0x40, 0xd, 0x4e, "875df9acd2cc8b47825271682293dc32f9a589b0c56d7705a91f43a862bbb6837cdd9bded0c4d291e59f057f36c598946b0030b08d671ba5b19c297f8c5475bd766d91b4e2ba1946b9df22c76d0f"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000a40)={0x20, 0x81, 0x3, "b419d4"}, &(0x7f0000000a80)={0x20, 0x82, 0x2, "ce1f"}, &(0x7f0000000c00)=ANY=[@ANYBLOB="ca5ada030000001300006d0000002000000000000000a53e0000"], &(0x7f0000000b00)={0x20, 0x84, 0x3, "98b59b"}, &(0x7f0000000b40)={0x20, 0x85, 0x3, "218e67"}}) (async) 1.214290256s ago: executing program 3 (id=192): syz_open_dev$I2C(0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x441, 0x104) fallocate(r0, 0x8, 0x4000, 0x6) r1 = syz_usb_connect$cdc_ecm(0x2, 0x175, &(0x7f0000000880)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x163, 0x1, 0x1, 0x9, 0x70, 0x9, [{{0x9, 0x4, 0x0, 0xd, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x1, 0x6, 0x7}, [@mdlm_detail={0x103, 0x24, 0x13, 0x1f, "ed78bf495cd546a92006b11a00b51dfc771e598adf1dbe2fbeb98f8b5ac9a2262a3fe3a029ea2085736e4ce3d92e21d15426e8f051a99d5199fbd4cb9adb9b780ffd15f959628356d493cd97f4be17cf01384fe60bff4bc929260f6299adc0cc943332666a94d486485e61460541ec5b5dc648ce4f1416a786380ae2717bdd15d1d85880fa2ffd88ca56f24b70d7b2ac54715446f7febb94cd6f55565e9d90568ac53fd95c839b088bc5fb62740f19bacae23a71cf7b29a90e4aaf0399893fcd660d65f0968bbf4cfbc1815283f6ab2c9363a1e8dffdb0f368c21cb0dfa1f5b592619ac1a7d2e69b61962d77d4118084477b85e0976dd944738e316f925100"}, @mdlm={0x15, 0x24, 0x12, 0x1}, @dmm={0x7, 0x24, 0x14, 0x3, 0x9}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x8, 0x0, 0x5}}], {{0x9, 0x5, 0x82, 0x2, 0x1ff, 0x11, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x4, 0xf7, 0x5}}}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x300, 0x85, 0xcf, 0x4d, 0x10, 0x6}, 0x3a, &(0x7f0000000400)={0x5, 0xf, 0x3a, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x2, 0x1, 0x401}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x0, 0x6, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0xda, "312e09731dd254aa83e2cf481e42e13a"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x10, 0xf8, 0xb822}]}, 0x3, [{0x4, &(0x7f0000000440)=@string={0x4, 0x3, 'D&'}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x40e}}, {0x6b, &(0x7f00000004c0)=@string={0x6b, 0x3, "8def7955318c40d94cf2f1f51a159d37350c4e54422da9c25cc211dfb1c65f626b7addea23d80d132985fff46e548512ce3cfb915132a014eda5f87a494c9c2eb08968933133c51ac586162d4022e8185b82fcd10c634445ffe63add189fe3746e770145857520f9da"}}]}) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000680)={0x14, &(0x7f0000000580)={0x20, 0x6, 0x97, {0x97, 0x22, "5ee8730bf71a45a025556e0fd49900e651cf5580dc77c0d8c9a261b3088c519ea8b411318311b32a7883d791e6cdb86486248252d647af24eb87ca48a7ff6862c1072e734846a2d59cabd2f377c30cce03ad7c212692affd3b8085740172d967221ad9382ee5af986c00ed7a254c61b2f44fb2af672aa1f95a1e68c8da83e8f1e32003b0389bc8a6813c5435bc2d8e6f850627d739"}}, &(0x7f0000000640)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000007c0)={0x1c, &(0x7f00000006c0)={0x40, 0xe, 0x4b, "c57dd82bc2e1b5dcef5194425d7376df3e3474ebff2565a9b9a58102c97382a0c31763ce2964a949b054292edbb24dfe28f8274d9cb661cc4b30c8d20886651c96f42d10e341ee7551c7dc"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x1}}) 680.468956ms ago: executing program 3 (id=193): syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) mount(&(0x7f0000000300)=@nullb, &(0x7f0000000380)='./bus\x00', &(0x7f00000003c0)='jfs\x00', 0x0, &(0x7f0000000440)='usrquota') sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)="d8000000180081064e81f782db4cb9040220081c0bc14b0a26f7aad3724745f5267cfd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000040012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f90000", 0xd8}], 0x1}, 0x884) mount$tmpfs(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="6d706f6c3d62690bbe60"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$unix(0x1, 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x91}, 0x24044884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x9c, r5, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_SEQ={0x8, 0xa, "c673affa"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0xd, 0xa, "f36993faf4cf6c32da"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "4737687c8e87580d6dce9560ba"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4040004}, 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000b00), 0x4000000024882, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x4001100, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) kexec_load(0xff0f, 0x1, &(0x7f0000000480)=[{0x0, 0x0, 0x7ffe0000, 0x3e0000}], 0x0) io_submit(r7, 0xf3, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, r6, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) 675.049618ms ago: executing program 2 (id=194): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0xf875000) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0x10, 0x3, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r3 = socket$inet6(0xa, 0x1, 0x0) sendmsg$inet6(r3, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000010000000c0000002b"], 0x30}, 0x4000010) sendmsg(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f2000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'nicvf0\x00', 0x400}) close(r1) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000100a03"], 0x8c}}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) ioctl$IOMMU_DESTROY$stdev(r7, 0x3b80, &(0x7f0000000340)={0x8}) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/111, 0x6f}], 0x1, 0x4, 0xfffffffe) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000000100)={0xc, 0x200, 0x5, 0x1, r9}, 0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x66, &(0x7f0000000240)={r9, 0x1}, &(0x7f0000000280)=0x8) r10 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 251.123689ms ago: executing program 3 (id=195): arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x407006}, 0x104) 113.752413ms ago: executing program 3 (id=196): r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2, 0x0, 0x48}, 0x0) mount(0x0, 0x0, &(0x7f0000000580)='tracefs\x00', 0x800000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) 82.771704ms ago: executing program 3 (id=197): alarm(0x16e6) 0s ago: executing program 3 (id=198): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) r1 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000280)={'ip6gre0\x00', @ifru_data=&(0x7f0000000580)="77629e9ffe408b0e43366c56b77e81b935d7e1584378dc9ed7c6ed9be933cd1f"}) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r2, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) syz_emit_vhci(&(0x7f0000000880)=@HCI_EVENT_PKT={0x4, @hci_ev_role_change={{0x12, 0x8}, {0x2, @none, 0x3}}}, 0xb) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.20' (ED25519) to the list of known hosts. [ 67.862021][ T5814] cgroup: Unknown subsys name 'net' [ 67.957829][ T5814] cgroup: Unknown subsys name 'cpuset' [ 67.966628][ T5814] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 69.395858][ T5814] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.379925][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.388461][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.396573][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.397658][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.414837][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.424767][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.432543][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.469202][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.489074][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.498236][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.508765][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.518553][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.534843][ T5825] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.542846][ T5825] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.551048][ T5825] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.562404][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.571447][ T5825] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.579354][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.587608][ T5825] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.588125][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.607054][ T5148] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.617160][ T5148] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.965520][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 72.239632][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 72.272160][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.279653][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.287219][ T5823] bridge_slave_0: entered allmulticast mode [ 72.294331][ T5823] bridge_slave_0: entered promiscuous mode [ 72.308076][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.315333][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.322747][ T5823] bridge_slave_1: entered allmulticast mode [ 72.330069][ T5823] bridge_slave_1: entered promiscuous mode [ 72.380895][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 72.445933][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.481815][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.491646][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 72.563538][ T5823] team0: Port device team_slave_0 added [ 72.602181][ T5823] team0: Port device team_slave_1 added [ 72.652173][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.659487][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.667012][ T5834] bridge_slave_0: entered allmulticast mode [ 72.674013][ T5834] bridge_slave_0: entered promiscuous mode [ 72.709683][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.717242][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.724385][ T5834] bridge_slave_1: entered allmulticast mode [ 72.731803][ T5834] bridge_slave_1: entered promiscuous mode [ 72.738852][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.746312][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.753443][ T5827] bridge_slave_0: entered allmulticast mode [ 72.760632][ T5827] bridge_slave_0: entered promiscuous mode [ 72.773482][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.780499][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.806838][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.830689][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.837980][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.845282][ T5827] bridge_slave_1: entered allmulticast mode [ 72.852296][ T5827] bridge_slave_1: entered promiscuous mode [ 72.872026][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.879087][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.905078][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.960242][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.974476][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.994782][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.001969][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.009861][ T5830] bridge_slave_0: entered allmulticast mode [ 73.017019][ T5830] bridge_slave_0: entered promiscuous mode [ 73.046613][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.056414][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.063636][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.070917][ T5830] bridge_slave_1: entered allmulticast mode [ 73.078291][ T5830] bridge_slave_1: entered promiscuous mode [ 73.111193][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.150033][ T5834] team0: Port device team_slave_0 added [ 73.185956][ T5823] hsr_slave_0: entered promiscuous mode [ 73.192416][ T5823] hsr_slave_1: entered promiscuous mode [ 73.201514][ T5834] team0: Port device team_slave_1 added [ 73.222532][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.235536][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.257833][ T5827] team0: Port device team_slave_0 added [ 73.289160][ T5827] team0: Port device team_slave_1 added [ 73.334086][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.341194][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.367229][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.394443][ T5830] team0: Port device team_slave_0 added [ 73.407921][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.415068][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.441016][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.453170][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.460223][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.486223][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.499724][ T5830] team0: Port device team_slave_1 added [ 73.524333][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.525571][ T5148] Bluetooth: hci0: command tx timeout [ 73.531860][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.562946][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.604675][ T5148] Bluetooth: hci1: command tx timeout [ 73.639125][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.646192][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.672150][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.684690][ T5148] Bluetooth: hci3: command tx timeout [ 73.684697][ T52] Bluetooth: hci2: command tx timeout [ 73.722078][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.729227][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.755583][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.783816][ T5834] hsr_slave_0: entered promiscuous mode [ 73.790669][ T5834] hsr_slave_1: entered promiscuous mode [ 73.797166][ T5834] debugfs: 'hsr0' already exists in 'hsr' [ 73.802961][ T5834] Cannot create hsr debugfs directory [ 73.847111][ T5827] hsr_slave_0: entered promiscuous mode [ 73.853399][ T5827] hsr_slave_1: entered promiscuous mode [ 73.860050][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 73.865829][ T5827] Cannot create hsr debugfs directory [ 73.985564][ T5830] hsr_slave_0: entered promiscuous mode [ 73.991935][ T5830] hsr_slave_1: entered promiscuous mode [ 73.998774][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 74.005276][ T5830] Cannot create hsr debugfs directory [ 74.256109][ T5823] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.289735][ T5823] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.317283][ T5823] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.328979][ T5823] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.432918][ T5834] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.450425][ T5834] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.461096][ T5834] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.471623][ T5834] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.569243][ T5827] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.584090][ T5827] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.597473][ T5827] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.608348][ T5827] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.733481][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.761853][ T5830] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.773994][ T5830] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.784316][ T5830] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.796270][ T5830] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.842171][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.870560][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.877773][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.903925][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.911082][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.948691][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.972548][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.027032][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.050511][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.057739][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.079462][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.128229][ T1345] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.135519][ T1345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.156805][ T1345] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.164017][ T1345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.191974][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.199185][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.271150][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.367238][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.408739][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.415997][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.453115][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.460354][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.540598][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.605467][ T5148] Bluetooth: hci0: command tx timeout [ 75.685306][ T5148] Bluetooth: hci1: command tx timeout [ 75.693993][ T5823] veth0_vlan: entered promiscuous mode [ 75.729653][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.747884][ T5823] veth1_vlan: entered promiscuous mode [ 75.767079][ T5148] Bluetooth: hci3: command tx timeout [ 75.768067][ T52] Bluetooth: hci2: command tx timeout [ 75.796746][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.904134][ T5834] veth0_vlan: entered promiscuous mode [ 75.927638][ T5823] veth0_macvtap: entered promiscuous mode [ 75.957523][ T5823] veth1_macvtap: entered promiscuous mode [ 75.965693][ T5834] veth1_vlan: entered promiscuous mode [ 75.990814][ T5827] veth0_vlan: entered promiscuous mode [ 76.013220][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.038313][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.052226][ T5827] veth1_vlan: entered promiscuous mode [ 76.069003][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.096100][ T153] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.105753][ T153] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.118524][ T5834] veth0_macvtap: entered promiscuous mode [ 76.136688][ T153] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.146145][ T153] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.171346][ T5834] veth1_macvtap: entered promiscuous mode [ 76.240311][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.273447][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.288885][ T5827] veth0_macvtap: entered promiscuous mode [ 76.330016][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.339760][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.356454][ T5827] veth1_macvtap: entered promiscuous mode [ 76.363366][ T5830] veth0_vlan: entered promiscuous mode [ 76.371281][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.380253][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.396053][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.404033][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.412243][ T5830] veth1_vlan: entered promiscuous mode [ 76.468285][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.471086][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.493027][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.514160][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.544417][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.571032][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.582677][ T5823] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 76.585200][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.634249][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.708855][ T5830] veth0_macvtap: entered promiscuous mode [ 76.716851][ T5909] Mount JFS Failure: -22 [ 76.727659][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.731634][ T5909] jfs_mount failed w/return code = -22 [ 76.738534][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.766219][ T5909] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1'. [ 76.779451][ T5830] veth1_macvtap: entered promiscuous mode [ 76.812412][ T1345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.830754][ T1345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.862838][ T1345] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.880080][ T1345] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.936946][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.968416][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.988264][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.010510][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.042279][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.073273][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.102632][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.120562][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.308863][ T5917] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 77.405712][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.413583][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.529696][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.549851][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.684890][ T52] Bluetooth: hci0: command tx timeout [ 77.698801][ T5915] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 77.765273][ T52] Bluetooth: hci1: command tx timeout [ 77.845527][ T52] Bluetooth: hci2: command tx timeout [ 77.854846][ T52] Bluetooth: hci3: command tx timeout [ 77.874755][ T5915] usb 2-1: Using ep0 maxpacket: 32 [ 77.882908][ T5915] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 77.891824][ T5915] usb 2-1: config 0 has no interface number 0 [ 77.898746][ T5915] usb 2-1: config 0 interface 12 has no altsetting 0 [ 77.910014][ T5915] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 77.919622][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.927920][ T5915] usb 2-1: Product: syz [ 77.932125][ T5915] usb 2-1: Manufacturer: syz [ 77.937465][ T5915] usb 2-1: SerialNumber: syz [ 77.946935][ T5915] usb 2-1: config 0 descriptor?? [ 77.964726][ T5919] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 77.994658][ T5869] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 78.126555][ T5919] usb 1-1: not running at top speed; connect to a high speed hub [ 78.136256][ T5869] usb 3-1: device descriptor read/64, error -71 [ 78.144293][ T5919] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 78.168832][ T5919] usb 1-1: config 1 interface 0 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 78.188820][ T5919] usb 1-1: config 1 interface 0 has no altsetting 0 [ 78.200984][ T5919] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 78.229516][ T5919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.240032][ T5919] usb 1-1: Product: ī¾å•¹č°±ļ‰Œļ—±į”šćžą°µå‘Žāµ‚ģŠ©ģ‰œģš±ę‰Ÿē©«ī«įŒč”©ļ“æ呮įŠ…ć³Žé‡»ć‰‘į’ ź—­ē«ø䱉āŗœč¦°éØćŒ±į«…č›…ā“–ā‰€į£Ø艛ķ‡¼ęŒŒä•„ī›æ鼘ē“£ē®ä”ē–…ļ¤  [ 78.258886][ T5919] usb 1-1: Manufacturer: ŠŽ [ 78.263424][ T5919] usb 1-1: SerialNumber: syz [ 78.394842][ T5869] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 78.457592][ T5939] tipc: Started in network mode [ 78.462604][ T5939] tipc: Node identity 4, cluster identity 4711 [ 78.469305][ T5939] tipc: Node number set to 4 [ 78.555493][ T5869] usb 3-1: device descriptor read/64, error -71 [ 78.670580][ T5869] usb usb3-port1: attempt power cycle [ 78.679290][ T5919] cdc_ether 1-1:1.0: skipping garbage [ 78.688787][ T5919] cdc_ether 1-1:1.0: skipping garbage [ 78.694210][ T5919] cdc_ether 1-1:1.0: skipping garbage [ 78.702359][ T5919] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 78.716493][ T5919] usb 1-1: USB disconnect, device number 2 [ 79.014693][ T5869] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 79.035164][ T5869] usb 3-1: device descriptor read/8, error -71 [ 79.267428][ T5947] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 79.286803][ T5869] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 79.316651][ T5869] usb 3-1: device descriptor read/8, error -71 [ 79.435636][ T5869] usb usb3-port1: unable to enumerate USB device [ 79.580727][ T5956] Mount JFS Failure: -22 [ 79.585115][ T5956] jfs_mount failed w/return code = -22 [ 79.591954][ T5956] netlink: 188 bytes leftover after parsing attributes in process `syz.3.15'. [ 79.766815][ T52] Bluetooth: hci0: command tx timeout [ 79.845174][ T52] Bluetooth: hci1: command tx timeout [ 79.924845][ T52] Bluetooth: hci3: command tx timeout [ 79.925278][ T5148] Bluetooth: hci2: command tx timeout [ 80.248705][ T5915] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -32 [ 80.258403][ T5915] f81534 2-1:0.12: f81534_find_config_idx: read failed: -32 [ 80.265786][ T5915] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -32 [ 80.273410][ T5915] f81534 2-1:0.12: probe with driver f81534 failed with error -32 [ 80.434744][ T5915] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 80.477307][ T9] usb 2-1: USB disconnect, device number 2 [ 80.534064][ T5972] syz.1.19 uses obsolete (PF_INET,SOCK_PACKET) [ 80.594918][ T5915] usb 4-1: Using ep0 maxpacket: 16 [ 80.603640][ T5915] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 80.613113][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.623248][ T5915] usb 4-1: Product: syz [ 80.627476][ T5915] usb 4-1: Manufacturer: syz [ 80.632309][ T5915] usb 4-1: SerialNumber: syz [ 80.650489][ T5915] usb 4-1: config 0 descriptor?? [ 81.066232][ T5915] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 81.083566][ T5915] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 81.093993][ T5915] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 81.102132][ T5915] usb 4-1: media controller created [ 81.107576][ T855] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 81.123346][ T5915] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 81.184658][ T9] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 81.206354][ T5919] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 81.273288][ T5915] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 81.282834][ T5915] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 81.294242][ T855] usb 2-1: Using ep0 maxpacket: 32 [ 81.304377][ T855] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 81.321436][ T855] usb 2-1: config 0 has no interface number 0 [ 81.329331][ T855] usb 2-1: config 0 interface 12 has no altsetting 0 [ 81.338894][ T855] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 81.348181][ T855] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.357258][ T855] usb 2-1: Product: syz [ 81.361454][ T855] usb 2-1: Manufacturer: syz [ 81.370243][ T855] usb 2-1: SerialNumber: syz [ 81.375932][ T5919] usb 1-1: Using ep0 maxpacket: 16 [ 81.376701][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 81.386651][ T5919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.396912][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.401103][ T5919] usb 1-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 81.410906][ T855] usb 2-1: config 0 descriptor?? [ 81.424325][ T5919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.425618][ T9] usb 3-1: config 1 interface 0 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 81.443636][ T5919] usb 1-1: config 0 descriptor?? [ 81.450984][ T9] usb 3-1: config 1 interface 0 has no altsetting 0 [ 81.461229][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 81.470386][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.479573][ T9] usb 3-1: Product: ī¾å•¹č°±ļ‰Œļ—±į”šćžą°µå‘Žāµ‚ģŠ©ģ‰œģš±ę‰Ÿē©«ī«įŒč”©ļ“æ呮įŠ…ć³Žé‡»ć‰‘į’ ź—­ē«ø䱉āŗœč¦°éØćŒ±į«…č›…ā“–ā‰€į£Ø艛ķ‡¼ęŒŒä•„ī›æ鼘ē“£ē®ä”ē–…ļ¤  [ 81.480182][ T43] usb 4-1: USB disconnect, device number 2 [ 81.504250][ T9] usb 3-1: Manufacturer: ŠŽ [ 81.508898][ T9] usb 3-1: SerialNumber: syz [ 81.554010][ T43] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 81.898170][ T5984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.912067][ T5984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.933962][ T5919] usbhid 1-1:0.0: can't add hid device: -71 [ 81.936041][ T9] cdc_ether 3-1:1.0: skipping garbage [ 81.946732][ T5919] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 81.954661][ T9] cdc_ether 3-1:1.0: skipping garbage [ 81.960096][ T9] cdc_ether 3-1:1.0: skipping garbage [ 81.973086][ T5919] usb 1-1: USB disconnect, device number 3 [ 81.984906][ T9] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 82.010787][ T9] usb 3-1: USB disconnect, device number 6 [ 82.103130][ T5986] fuse: Unknown parameter '½ZJÖ±óz™&īöŁæPĒ;Nś' [ 82.111384][ T5986] tmpfs: Unknown parameter '€r_inodes' [ 82.296379][ T5992] program syz.3.26 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 82.316867][ T5992] input: syz1 as /devices/virtual/input/input5 [ 82.412689][ T5994] Mount JFS Failure: -22 [ 82.417092][ T5994] jfs_mount failed w/return code = -22 [ 82.423738][ T5994] netlink: 188 bytes leftover after parsing attributes in process `syz.3.27'. [ 82.568074][ T5998] FAULT_INJECTION: forcing a failure. [ 82.568074][ T5998] name failslab, interval 1, probability 0, space 0, times 1 [ 82.615457][ T5998] CPU: 0 UID: 0 PID: 5998 Comm: syz.2.28 Not tainted syzkaller #0 PREEMPT(full) [ 82.615486][ T5998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 82.615505][ T5998] Call Trace: [ 82.615516][ T5998] [ 82.615524][ T5998] dump_stack_lvl+0x189/0x250 [ 82.615554][ T5998] ? __pfx____ratelimit+0x10/0x10 [ 82.615578][ T5998] ? __pfx_dump_stack_lvl+0x10/0x10 [ 82.615601][ T5998] ? __pfx__printk+0x10/0x10 [ 82.615627][ T5998] ? __pfx___might_resched+0x10/0x10 [ 82.615648][ T5998] ? fs_reclaim_acquire+0x7d/0x100 [ 82.615677][ T5998] should_fail_ex+0x414/0x560 [ 82.615707][ T5998] should_failslab+0xa8/0x100 [ 82.615736][ T5998] kmem_cache_alloc_node_noprof+0x8c/0x710 [ 82.615761][ T5998] ? __alloc_skb+0x112/0x2d0 [ 82.615782][ T5998] ? netlink_autobind+0xdb/0x300 [ 82.615813][ T5998] __alloc_skb+0x112/0x2d0 [ 82.615840][ T5998] netlink_sendmsg+0x5c6/0xb30 [ 82.615875][ T5998] ? __pfx_netlink_sendmsg+0x10/0x10 [ 82.615904][ T5998] ? aa_sock_msg_perm+0xf1/0x1d0 [ 82.615929][ T5998] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 82.615954][ T5998] ? __pfx_netlink_sendmsg+0x10/0x10 [ 82.615981][ T5998] __sock_sendmsg+0x21c/0x270 [ 82.616004][ T5998] ____sys_sendmsg+0x505/0x830 [ 82.616036][ T5998] ? __pfx_____sys_sendmsg+0x10/0x10 [ 82.616072][ T5998] ? import_iovec+0x74/0xa0 [ 82.616097][ T5998] ___sys_sendmsg+0x21f/0x2a0 [ 82.616125][ T5998] ? __pfx____sys_sendmsg+0x10/0x10 [ 82.616189][ T5998] ? __fget_files+0x2a/0x420 [ 82.616209][ T5998] ? __fget_files+0x3a0/0x420 [ 82.616242][ T5998] __x64_sys_sendmsg+0x19b/0x260 [ 82.616271][ T5998] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 82.616308][ T5998] ? __pfx_ksys_write+0x10/0x10 [ 82.616330][ T5998] ? do_syscall_64+0xbe/0xfa0 [ 82.616365][ T5998] do_syscall_64+0xfa/0xfa0 [ 82.616392][ T5998] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.616412][ T5998] ? clear_bhb_loop+0x60/0xb0 [ 82.616435][ T5998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.616454][ T5998] RIP: 0033:0x7f870878f6c9 [ 82.616476][ T5998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.616492][ T5998] RSP: 002b:00007f87096db038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 82.616513][ T5998] RAX: ffffffffffffffda RBX: 00007f87089e5fa0 RCX: 00007f870878f6c9 [ 82.616528][ T5998] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000005 [ 82.616540][ T5998] RBP: 00007f87096db090 R08: 0000000000000000 R09: 0000000000000000 [ 82.616552][ T5998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.616563][ T5998] R13: 00007f87089e6038 R14: 00007f87089e5fa0 R15: 00007ffec9b13468 [ 82.616596][ T5998] [ 83.264630][ T5919] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 83.416566][ T5919] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 83.426827][ T5919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 83.439281][ T5919] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 83.455493][ T5919] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 83.466599][ T43] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 83.474177][ T5919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.493190][ T5919] usb 3-1: config 0 descriptor?? [ 83.654683][ T43] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 83.667599][ T43] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 83.694382][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.715095][ T5919] ath6kl: Failed to submit usb control message: -71 [ 83.725113][ T43] usb 1-1: Product: syz [ 83.729312][ T43] usb 1-1: Manufacturer: syz [ 83.734610][ T5919] ath6kl: unable to send the bmi data to the device: -71 [ 83.742606][ T43] usb 1-1: SerialNumber: syz [ 83.748015][ T5919] ath6kl: Unable to send get target info: -71 [ 83.758299][ T43] usb 1-1: config 0 descriptor?? [ 83.764018][ T5919] ath6kl: Failed to init ath6kl core: -71 [ 83.776079][ T5919] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 83.793263][ T5919] usb 3-1: USB disconnect, device number 7 [ 83.865120][ T5980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.873820][ T5980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.954623][ T43] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 83.973284][ T6013] process 'syz.0.34' launched '/dev/fd/6' with NULL argv: empty string added [ 83.986198][ T5919] usb 1-1: USB disconnect, device number 4 [ 84.098726][ T5980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.107673][ T5980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.117880][ T43] usb 4-1: not running at top speed; connect to a high speed hub [ 84.129041][ T43] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 84.139369][ T43] usb 4-1: config 1 interface 0 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 84.153778][ T43] usb 4-1: config 1 interface 0 has no altsetting 0 [ 84.163114][ T43] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 84.172331][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.180425][ T43] usb 4-1: Product: ī¾å•¹č°±ļ‰Œļ—±į”šćžą°µå‘Žāµ‚ģŠ©ģ‰œģš±ę‰Ÿē©«ī«įŒč”©ļ“æ呮įŠ…ć³Žé‡»ć‰‘į’ ź—­ē«ø䱉āŗœč¦°éØćŒ±į«…č›…ā“–ā‰€į£Ø艛ķ‡¼ęŒŒä•„ī›æ鼘ē“£ē®ä”ē–…ļ¤  [ 84.197055][ T43] usb 4-1: Manufacturer: ŠŽ [ 84.201582][ T43] usb 4-1: SerialNumber: syz [ 84.329746][ T855] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 84.341914][ T855] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 84.351049][ T855] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 84.361465][ T855] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 84.385218][ T855] usb 2-1: USB disconnect, device number 3 [ 84.614757][ T43] cdc_ether 4-1:1.0: skipping garbage [ 84.639691][ T43] cdc_ether 4-1:1.0: skipping garbage [ 84.646037][ T43] cdc_ether 4-1:1.0: skipping garbage [ 84.652489][ T43] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 84.670400][ T43] usb 4-1: USB disconnect, device number 3 [ 84.865273][ T5869] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 85.016849][ T6032] Mount JFS Failure: -22 [ 85.021163][ T6032] jfs_mount failed w/return code = -22 [ 85.031274][ T5869] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 85.041557][ T6032] netlink: 188 bytes leftover after parsing attributes in process `syz.1.41'. [ 85.051124][ T5869] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 85.066020][ T5869] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 85.088154][ T5869] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 85.111030][ T5869] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 85.128232][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.144632][ T5869] usb 1-1: Product: syz [ 85.154679][ T5869] usb 1-1: Manufacturer: syz [ 85.165139][ T5869] usb 1-1: SerialNumber: syz [ 85.407913][ T5869] usb 1-1: 0:2 : does not exist [ 85.472491][ T5869] usb 1-1: USB disconnect, device number 5 [ 85.607687][ T5981] udevd[5981]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 85.706654][ T6050] syzkaller1: entered promiscuous mode [ 85.712166][ T6050] syzkaller1: entered allmulticast mode [ 86.605667][ T5919] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 86.714734][ T43] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 86.735478][ T798] cfg80211: failed to load regulatory.db [ 86.767593][ T5919] usb 4-1: not running at top speed; connect to a high speed hub [ 86.785653][ T5919] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.796016][ T5919] usb 4-1: config 1 interface 0 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 86.813769][ T5919] usb 4-1: config 1 interface 0 has no altsetting 0 [ 86.826305][ T5919] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 86.836597][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.844664][ T5919] usb 4-1: Product: ī¾å•¹č°±ļ‰Œļ—±į”šćžą°µå‘Žāµ‚ģŠ©ģ‰œģš±ę‰Ÿē©«ī«įŒč”©ļ“æ呮įŠ…ć³Žé‡»ć‰‘į’ ź—­ē«ø䱉āŗœč¦°éØćŒ±į«…č›…ā“–ā‰€į£Ø艛ķ‡¼ęŒŒä•„ī›æ鼘ē“£ē®ä”ē–…ļ¤  [ 86.861227][ T5919] usb 4-1: Manufacturer: ŠŽ [ 86.866236][ T798] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 86.873821][ T43] usb 2-1: device descriptor read/64, error -71 [ 86.880286][ T5919] usb 4-1: SerialNumber: syz [ 87.015380][ T798] usb 3-1: device descriptor read/64, error -71 [ 87.128920][ T43] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 87.254747][ T798] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 87.274673][ T43] usb 2-1: device descriptor read/64, error -71 [ 87.296377][ T5919] cdc_ether 4-1:1.0: skipping garbage [ 87.301794][ T5919] cdc_ether 4-1:1.0: skipping garbage [ 87.311148][ T5919] cdc_ether 4-1:1.0: skipping garbage [ 87.318053][ T5919] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 87.335518][ T5919] usb 4-1: USB disconnect, device number 4 [ 87.386224][ T43] usb usb2-port1: attempt power cycle [ 87.395589][ T798] usb 3-1: device descriptor read/64, error -71 [ 87.519525][ T798] usb usb3-port1: attempt power cycle [ 87.525644][ T6070] Mount JFS Failure: -22 [ 87.531380][ T6070] jfs_mount failed w/return code = -22 [ 87.540280][ T6070] netlink: 188 bytes leftover after parsing attributes in process `syz.0.55'. [ 87.744659][ T43] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 87.765867][ T43] usb 2-1: device descriptor read/8, error -71 [ 87.865172][ T798] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 87.895415][ T798] usb 3-1: device descriptor read/8, error -71 [ 88.016895][ T43] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 88.034828][ T5933] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 88.045262][ T43] usb 2-1: device descriptor read/8, error -71 [ 88.154691][ T798] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 88.162641][ T43] usb usb2-port1: unable to enumerate USB device [ 88.184649][ T5933] usb 1-1: Using ep0 maxpacket: 32 [ 88.190507][ T798] usb 3-1: device descriptor read/8, error -71 [ 88.197024][ T5919] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 88.205690][ T5933] usb 1-1: config 0 has an invalid interface number: 20 but max is 0 [ 88.213764][ T5933] usb 1-1: config 0 has no interface number 0 [ 88.220047][ T5933] usb 1-1: config 0 interface 20 has no altsetting 0 [ 88.228796][ T5933] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 88.237968][ T5933] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.246973][ T5933] usb 1-1: Product: syz [ 88.251195][ T5933] usb 1-1: Manufacturer: syz [ 88.255869][ T5933] usb 1-1: SerialNumber: syz [ 88.262385][ T5933] usb 1-1: config 0 descriptor?? [ 88.314866][ T798] usb usb3-port1: unable to enumerate USB device [ 88.395213][ T5919] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 88.403883][ T5919] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 88.412959][ T5919] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 88.423909][ T5919] usb 4-1: config 0 interface 0 has no altsetting 0 [ 88.431781][ T5919] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 88.440731][ T5919] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 88.452444][ T5919] usb 4-1: config 0 interface 0 has no altsetting 0 [ 88.460101][ T5919] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 88.469164][ T5919] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 88.480162][ T5919] usb 4-1: config 0 interface 0 has no altsetting 0 [ 88.488093][ T5919] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 88.497059][ T5919] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 88.507971][ T5919] usb 4-1: config 0 interface 0 has no altsetting 0 [ 88.515777][ T5919] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 88.524752][ T5919] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 88.535740][ T5919] usb 4-1: config 0 interface 0 has no altsetting 0 [ 88.543420][ T5919] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 88.553324][ T5919] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 88.564278][ T5919] usb 4-1: config 0 interface 0 has no altsetting 0 [ 88.572236][ T5919] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 88.581204][ T5919] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 88.592102][ T5919] usb 4-1: config 0 interface 0 has no altsetting 0 [ 88.600083][ T5919] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 88.609139][ T5919] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 88.620140][ T5919] usb 4-1: config 0 interface 0 has no altsetting 0 [ 88.629264][ T5919] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 88.638408][ T5919] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 88.648704][ T5919] usb 4-1: Product: syz [ 88.653891][ T5919] usb 4-1: Manufacturer: syz [ 88.658632][ T5919] usb 4-1: SerialNumber: syz [ 88.665768][ T5919] usb 4-1: config 0 descriptor?? [ 88.677458][ T5919] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 89.699953][ T5933] f81534 1-1:0.20: f81534_set_register: reg: 1002 data: 2f failed: -71 [ 89.726424][ T5933] f81534 1-1:0.20: f81534_find_config_idx: read failed: -71 [ 89.733827][ T5933] f81534 1-1:0.20: f81534_calc_num_ports: find idx failed: -71 [ 89.765998][ T5933] f81534 1-1:0.20: probe with driver f81534 failed with error -71 [ 89.787304][ T5933] usb 1-1: USB disconnect, device number 6 [ 89.884453][ T6097] Mount JFS Failure: -22 [ 89.888885][ T6097] jfs_mount failed w/return code = -22 [ 89.895987][ T6097] netlink: 188 bytes leftover after parsing attributes in process `syz.1.65'. [ 90.794748][ T798] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 90.928301][ T6119] Mount JFS Failure: -22 [ 90.932796][ T6119] jfs_mount failed w/return code = -22 [ 90.933679][ T6120] netlink: 'syz.2.73': attribute type 11 has an invalid length. [ 90.954444][ T6119] netlink: 188 bytes leftover after parsing attributes in process `syz.0.74'. [ 90.984698][ T798] usb 2-1: Using ep0 maxpacket: 16 [ 90.992925][ T798] usb 2-1: unable to get BOS descriptor or descriptor too short [ 91.006818][ T6120] cgroup: Invalid name [ 91.015036][ T798] usb 2-1: config 106 has an invalid interface number: 15 but max is 0 [ 91.031612][ T798] usb 2-1: config 106 has no interface number 0 [ 91.040387][ T798] usb 2-1: config 106 interface 15 has no altsetting 0 [ 91.051013][ T798] usb 2-1: New USB device found, idVendor=0525, idProduct=2888, bcdDevice=56.45 [ 91.071892][ T5877] usb 4-1: USB disconnect, device number 5 [ 91.083903][ T798] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.110249][ T798] usb 2-1: Product: syz [ 91.136867][ T798] usb 2-1: Manufacturer: syz [ 91.144674][ T798] usb 2-1: SerialNumber: syz [ 91.160714][ T5877] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 91.480536][ T798] cdc_subset 2-1:106.15: probe with driver cdc_subset failed with error -71 [ 91.504952][ T5877] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 91.514891][ T798] usb 2-1: USB disconnect, device number 8 [ 91.553402][ T6134] capability: warning: `syz.0.78' uses deprecated v2 capabilities in a way that may be insecure [ 91.664636][ T5877] usb 4-1: Using ep0 maxpacket: 8 [ 91.675037][ T5877] usb 4-1: unable to get BOS descriptor or descriptor too short [ 91.684358][ T5877] usb 4-1: config 9 has an invalid interface number: 33 but max is 0 [ 91.700415][ T5877] usb 4-1: config 9 has no interface number 0 [ 91.714442][ T855] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 91.730134][ T5877] usb 4-1: config 9 interface 33 has no altsetting 0 [ 91.746395][ T5877] usb 4-1: language id specifier not provided by device, defaulting to English [ 91.760161][ T5877] usb 4-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=c5.a8 [ 91.770890][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.779050][ T5877] usb 4-1: Product: syz [ 91.783271][ T5877] usb 4-1: SerialNumber: syz [ 91.884728][ T855] usb 3-1: Using ep0 maxpacket: 8 [ 91.893328][ T855] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 91.902815][ T855] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.910867][ T855] usb 3-1: Product: syz [ 91.915106][ T855] usb 3-1: Manufacturer: syz [ 91.919702][ T855] usb 3-1: SerialNumber: syz [ 91.931604][ T855] usb 3-1: config 0 descriptor?? [ 92.019265][ T5877] usb 4-1: USB disconnect, device number 6 [ 92.143722][ T855] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 92.256556][ T6147] FAULT_INJECTION: forcing a failure. [ 92.256556][ T6147] name failslab, interval 1, probability 0, space 0, times 0 [ 92.256607][ T6147] CPU: 0 UID: 0 PID: 6147 Comm: syz.1.82 Not tainted syzkaller #0 PREEMPT(full) [ 92.256619][ T6147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 92.256625][ T6147] Call Trace: [ 92.256629][ T6147] [ 92.256634][ T6147] dump_stack_lvl+0x189/0x250 [ 92.256652][ T6147] ? __pfx____ratelimit+0x10/0x10 [ 92.256667][ T6147] ? __pfx_dump_stack_lvl+0x10/0x10 [ 92.256682][ T6147] ? __pfx__printk+0x10/0x10 [ 92.256698][ T6147] ? __pfx___might_resched+0x10/0x10 [ 92.256713][ T6147] should_fail_ex+0x414/0x560 [ 92.256731][ T6147] should_failslab+0xa8/0x100 [ 92.256747][ T6147] __kmalloc_cache_noprof+0x84/0x700 [ 92.256762][ T6147] ? drm_atomic_state_alloc+0xa9/0x100 [ 92.256780][ T6147] drm_atomic_state_alloc+0xa9/0x100 [ 92.256796][ T6147] drm_client_modeset_commit_atomic+0xe2/0x760 [ 92.256813][ T6147] ? trace_contention_end+0x39/0x120 [ 92.256829][ T6147] ? __mutex_lock+0x335/0x1350 [ 92.256844][ T6147] ? trace_contention_end+0x39/0x120 [ 92.256862][ T6147] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 92.256877][ T6147] ? __mutex_lock+0x335/0x1350 [ 92.256910][ T6147] drm_client_modeset_commit_locked+0xcb/0x4d0 [ 92.256929][ T6147] drm_client_modeset_commit+0x4a/0x70 [ 92.256944][ T6147] __drm_fb_helper_restore_fbdev_mode_unlocked+0x9d/0x1b0 [ 92.256960][ T6147] drm_fb_helper_set_par+0xaf/0x100 [ 92.256975][ T6147] fb_set_var+0x82b/0xf50 [ 92.256993][ T6147] ? __pfx_fb_set_var+0x10/0x10 [ 92.257007][ T6147] ? __mutex_lock+0x335/0x1350 [ 92.257022][ T6147] ? do_raw_spin_lock+0x121/0x290 [ 92.257041][ T6147] ? __lock_acquire+0xab9/0xd20 [ 92.257050][ T6147] ? do_fb_ioctl+0x598/0x750 [ 92.257079][ T6147] do_fb_ioctl+0x63b/0x750 [ 92.257093][ T6147] ? __pfx_do_fb_ioctl+0x10/0x10 [ 92.257129][ T6147] ? __fget_files+0x2a/0x420 [ 92.257144][ T6147] ? __fget_files+0x3a0/0x420 [ 92.257154][ T6147] ? __fget_files+0x2a/0x420 [ 92.257167][ T6147] ? bpf_lsm_file_ioctl+0x9/0x20 [ 92.257182][ T6147] ? __pfx_fb_ioctl+0x10/0x10 [ 92.257195][ T6147] __se_sys_ioctl+0xfc/0x170 [ 92.257211][ T6147] do_syscall_64+0xfa/0xfa0 [ 92.257226][ T6147] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.257236][ T6147] ? clear_bhb_loop+0x60/0xb0 [ 92.257249][ T6147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.257258][ T6147] RIP: 0033:0x7f393b18f6c9 [ 92.257268][ T6147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.257276][ T6147] RSP: 002b:00007f393c04f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 92.257287][ T6147] RAX: ffffffffffffffda RBX: 00007f393b3e5fa0 RCX: 00007f393b18f6c9 [ 92.257294][ T6147] RDX: 0000200000000100 RSI: 0000000000004601 RDI: 0000000000000003 [ 92.257301][ T6147] RBP: 00007f393c04f090 R08: 0000000000000000 R09: 0000000000000000 [ 92.257307][ T6147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.257312][ T6147] R13: 00007f393b3e6038 R14: 00007f393b3e5fa0 R15: 00007ffe05e0e4b8 [ 92.257331][ T6147] [ 92.435165][ T6149] netlink: 220 bytes leftover after parsing attributes in process `syz.0.83'. [ 92.436312][ T6149] unsupported nla_type 224 [ 92.439852][ T6149] tipc: Enabling of bearer rejected, failed to enable media [ 92.440746][ T6149] tmpfs: Bad value for 'mpol' [ 92.985917][ T6159] Mount JFS Failure: -22 [ 92.990337][ T6159] jfs_mount failed w/return code = -22 [ 92.996582][ T9] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 93.007189][ T6159] netlink: 188 bytes leftover after parsing attributes in process `syz.3.87'. [ 93.103993][ T6164] netlink: 112 bytes leftover after parsing attributes in process `syz.1.89'. [ 93.180973][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 93.191190][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 93.202336][ T9] usb 1-1: config 5 has an invalid interface number: 110 but max is 0 [ 93.217307][ T9] usb 1-1: config 5 has no interface number 0 [ 93.235829][ T9] usb 1-1: config 5 interface 110 has no altsetting 0 [ 93.246537][ T9] usb 1-1: string descriptor 0 read error: -22 [ 93.252897][ T9] usb 1-1: New USB device found, idVendor=13d3, idProduct=3423, bcdDevice=62.13 [ 93.275053][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.320272][ T6164] syz.1.89 (6164) used greatest stack depth: 17896 bytes left [ 93.362408][ T6132] sit0: entered promiscuous mode [ 93.390411][ T6132] netlink: 'syz.2.77': attribute type 1 has an invalid length. [ 93.424057][ T6132] netlink: 1 bytes leftover after parsing attributes in process `syz.2.77'. [ 93.514899][ T5919] usb 1-1: USB disconnect, device number 7 [ 93.644492][ T6132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.657350][ T6132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.871513][ T855] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 93.889115][ T855] usb 3-1: USB disconnect, device number 12 [ 94.062247][ T6191] Mount JFS Failure: -22 [ 94.066726][ T6191] jfs_mount failed w/return code = -22 [ 94.073849][ T6191] netlink: 188 bytes leftover after parsing attributes in process `syz.3.99'. [ 94.180234][ T6196] Zero length message leads to an empty skb [ 94.404150][ T6205] ======================================================= [ 94.404150][ T6205] WARNING: The mand mount option has been deprecated and [ 94.404150][ T6205] and is ignored by this kernel. Remove the mand [ 94.404150][ T6205] option from the mount to silence this warning. [ 94.404150][ T6205] ======================================================= [ 94.661439][ T6199] could not allocate digest TFM handle hmac(sha1-avx2) [ 94.964639][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 95.024638][ T5919] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 95.114694][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 95.119934][ T5877] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 95.129238][ T9] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 95.137461][ T9] usb 3-1: config 0 has no interface number 0 [ 95.143562][ T9] usb 3-1: config 0 interface 12 has no altsetting 0 [ 95.152877][ T9] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 95.162022][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.170092][ T855] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 95.178145][ T9] usb 3-1: Product: syz [ 95.182301][ T9] usb 3-1: Manufacturer: syz [ 95.187094][ T9] usb 3-1: SerialNumber: syz [ 95.196073][ T9] usb 3-1: config 0 descriptor?? [ 95.197370][ T5919] usb 2-1: not running at top speed; connect to a high speed hub [ 95.212513][ T5919] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.223614][ T5919] usb 2-1: config 1 interface 0 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 95.236757][ T5919] usb 2-1: config 1 interface 0 has no altsetting 0 [ 95.245558][ T5919] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 95.254742][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.262746][ T5919] usb 2-1: Product: ī¾å•¹č°±ļ‰Œļ—±į”šćžą°µå‘Žāµ‚ģŠ©ģ‰œģš±ę‰Ÿē©«ī«įŒč”©ļ“æ呮įŠ…ć³Žé‡»ć‰‘į’ ź—­ē«ø䱉āŗœč¦°éØćŒ±į«…č›…ā“–ā‰€į£Ø艛ķ‡¼ęŒŒä•„ī›æ鼘ē“£ē®ä”ē–…ļ¤  [ 95.277456][ T5877] usb 4-1: config 9 has an invalid interface number: 1 but max is 0 [ 95.279229][ T5919] usb 2-1: Manufacturer: ŠŽ [ 95.288354][ T5877] usb 4-1: config 9 has no interface number 0 [ 95.291685][ T5919] usb 2-1: SerialNumber: syz [ 95.303136][ T5877] usb 4-1: config 9 interface 1 has no altsetting 0 [ 95.315060][ T5877] usb 4-1: string descriptor 0 read error: -22 [ 95.321382][ T5877] usb 4-1: New USB device found, idVendor=2040, idProduct=b140, bcdDevice=75.36 [ 95.331212][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.344678][ T855] usb 1-1: Using ep0 maxpacket: 8 [ 95.353868][ T5877] cx231xx 4-1:9.1: New device @ 1.5 Mbps (2040:b140) with 1 interfaces [ 95.362742][ T5877] cx231xx 4-1:9.1: Not found matching IAD interface [ 95.371577][ T855] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 95.380011][ T855] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.392069][ T855] usb 1-1: config 0 has no interface number 0 [ 95.399353][ T855] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 95.416872][ T6214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.425519][ T855] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 95.426794][ T6214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.438748][ T855] usb 1-1: config 0 interface 52 has no altsetting 0 [ 95.454302][ T855] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 95.463943][ T855] usb 1-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 95.472130][ T855] usb 1-1: Manufacturer: syz [ 95.480358][ T855] usb 1-1: config 0 descriptor?? [ 95.573106][ T5933] usb 4-1: USB disconnect, device number 7 [ 95.705207][ T5919] cdc_ether 2-1:1.0: skipping garbage [ 95.710732][ T5919] cdc_ether 2-1:1.0: skipping garbage [ 95.717025][ T5919] cdc_ether 2-1:1.0: skipping garbage [ 95.724086][ T5919] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 95.742668][ T5919] usb 2-1: USB disconnect, device number 9 [ 95.782596][ T855] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.52/input/input6 [ 96.033849][ T5919] usb 1-1: USB disconnect, device number 8 [ 96.033973][ C0] synaptics_usb 1-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 96.146606][ T6229] Mount JFS Failure: -22 [ 96.150889][ T6229] jfs_mount failed w/return code = -22 [ 96.158436][ T6229] netlink: 188 bytes leftover after parsing attributes in process `syz.3.112'. [ 96.652238][ T6241] netlink: 'syz.3.117': attribute type 2 has an invalid length. [ 96.826859][ T6243] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 96.893999][ T9] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 96.915024][ T9] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 96.933797][ T9] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 96.954452][ T9] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 96.990052][ T9] usb 3-1: USB disconnect, device number 13 [ 97.344877][ T5933] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 97.404680][ T5919] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 97.455882][ T6260] Mount JFS Failure: -22 [ 97.460863][ T6260] jfs_mount failed w/return code = -22 [ 97.470000][ T6260] netlink: 188 bytes leftover after parsing attributes in process `syz.2.124'. [ 97.484775][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 97.508189][ T5933] usb 2-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 97.517550][ T5933] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.525728][ T5933] usb 2-1: Product: syz [ 97.529996][ T5933] usb 2-1: Manufacturer: syz [ 97.534659][ T5933] usb 2-1: SerialNumber: syz [ 97.545094][ T5933] usb 2-1: config 0 descriptor?? [ 97.567042][ T5919] usb 4-1: not running at top speed; connect to a high speed hub [ 97.578276][ T5919] usb 4-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 97.591295][ T5919] usb 4-1: config 1 interface 0 altsetting 13 endpoint 0x82 has invalid maxpacket 511, setting to 64 [ 97.603566][ T5919] usb 4-1: config 1 interface 0 altsetting 13 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 97.618890][ T5919] usb 4-1: config 1 interface 0 has no altsetting 0 [ 97.630902][ T5919] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 97.636386][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 97.640108][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.659688][ T5919] usb 4-1: Product: ī¾å•¹č°±ļ‰Œļ—±į”šćžą°µå‘Žāµ‚ģŠ©ģ‰œģš±ę‰Ÿē©«ī«įŒč”©ļ“æ呮įŠ…ć³Žé‡»ć‰‘į’ ź—­ē«ø䱉āŗœč¦°éØćŒ±į«…č›…ā“–ā‰€į£Ø艛ķ‡¼ęŒŒä•„ī›æ鼘ē“£ē®ä”ē–…ļ¤  [ 97.662306][ T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 97.677754][ T5919] usb 4-1: Manufacturer: ŠŽ [ 97.687492][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 97.699366][ T5919] usb 4-1: SerialNumber: syz [ 97.708201][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 97.721586][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.730340][ T9] usb 1-1: Product: syz [ 97.730340][ T6256] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 97.730360][ T9] usb 1-1: Manufacturer: syz [ 97.735214][ T6256] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 97.742976][ T9] usb 1-1: SerialNumber: syz [ 97.747280][ T6256] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 97.772855][ T6254] netlink: 16 bytes leftover after parsing attributes in process `syz.1.121'. [ 97.783762][ T5933] int51x1 2-1:0.0: probe with driver int51x1 failed with error -22 [ 97.787209][ T9] hub 1-1:1.0: bad descriptor, ignoring hub [ 97.809055][ T9] hub 1-1:1.0: probe with driver hub failed with error -5 [ 97.990017][ T5877] usb 2-1: USB disconnect, device number 10 [ 98.000300][ T9] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 98.155925][ T5933] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 98.221396][ T5919] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 98.235724][ T5919] usb 4-1: USB disconnect, device number 8 [ 98.295736][ T5877] usb 1-1: USB disconnect, device number 9 [ 98.304366][ T5877] usblp0: removed [ 98.314781][ T5933] usb 3-1: Using ep0 maxpacket: 16 [ 98.322459][ T5933] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 98.335672][ T5933] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 98.348785][ T5933] usb 3-1: New USB device found, idVendor=046d, idProduct=c219, bcdDevice= 0.00 [ 98.357863][ T5933] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.367829][ T5933] usb 3-1: config 0 descriptor?? [ 98.774801][ T6271] capability: warning: `syz.1.128' uses 32-bit capabilities (legacy support in use) [ 98.879831][ T5933] logitech 0003:046D:C219.0001: hidraw0: USB HID v0.01 Device [HID 046d:c219] on usb-dummy_hcd.2-1/input0 [ 98.918399][ T5933] logitech 0003:046D:C219.0001: no inputs found [ 99.004352][ T6279] FAULT_INJECTION: forcing a failure. [ 99.004352][ T6279] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 99.037074][ T6279] CPU: 0 UID: 0 PID: 6279 Comm: syz.3.131 Not tainted syzkaller #0 PREEMPT(full) [ 99.037107][ T6279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 99.037118][ T6279] Call Trace: [ 99.037126][ T6279] [ 99.037134][ T6279] dump_stack_lvl+0x189/0x250 [ 99.037164][ T6279] ? __pfx____ratelimit+0x10/0x10 [ 99.037188][ T6279] ? __pfx_dump_stack_lvl+0x10/0x10 [ 99.037212][ T6279] ? __pfx__printk+0x10/0x10 [ 99.037234][ T6279] ? __might_fault+0xb0/0x130 [ 99.037269][ T6279] should_fail_ex+0x414/0x560 [ 99.037302][ T6279] _copy_from_user+0x2d/0xb0 [ 99.037325][ T6279] ___sys_sendmsg+0x158/0x2a0 [ 99.037354][ T6279] ? __pfx____sys_sendmsg+0x10/0x10 [ 99.037418][ T6279] ? __fget_files+0x2a/0x420 [ 99.037439][ T6279] ? __fget_files+0x3a0/0x420 [ 99.037470][ T6279] __sys_sendmmsg+0x227/0x430 [ 99.037503][ T6279] ? __pfx___sys_sendmmsg+0x10/0x10 [ 99.037539][ T6279] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 99.037586][ T6279] ? ksys_write+0x22a/0x250 [ 99.037606][ T6279] ? __pfx_ksys_write+0x10/0x10 [ 99.037628][ T6279] __x64_sys_sendmmsg+0xa0/0xc0 [ 99.037655][ T6279] do_syscall_64+0xfa/0xfa0 [ 99.037680][ T6279] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.037699][ T6279] ? clear_bhb_loop+0x60/0xb0 [ 99.037722][ T6279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.037739][ T6279] RIP: 0033:0x7f0c7318f6c9 [ 99.037756][ T6279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.037771][ T6279] RSP: 002b:00007f0c74008038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 99.037792][ T6279] RAX: ffffffffffffffda RBX: 00007f0c733e5fa0 RCX: 00007f0c7318f6c9 [ 99.037804][ T6279] RDX: 0000000000000001 RSI: 0000200000001040 RDI: 0000000000000004 [ 99.037815][ T6279] RBP: 00007f0c74008090 R08: 0000000000000000 R09: 0000000000000000 [ 99.037826][ T6279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.037836][ T6279] R13: 00007f0c733e6038 R14: 00007f0c733e5fa0 R15: 00007ffcda147108 [ 99.037866][ T6279] [ 99.149384][ T6285] No source specified [ 99.271785][ T6291] Mount JFS Failure: -22 [ 99.271805][ T6291] jfs_mount failed w/return code = -22 [ 99.279285][ T6291] netlink: 188 bytes leftover after parsing attributes in process `syz.1.134'. [ 99.570515][ T5919] usb 3-1: USB disconnect, device number 14 [ 99.964764][ T5919] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 100.128670][ T5919] usb 2-1: not running at top speed; connect to a high speed hub [ 100.138198][ T5919] usb 2-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 100.163286][ T5919] usb 2-1: config 1 interface 0 altsetting 13 endpoint 0x82 has invalid maxpacket 511, setting to 64 [ 100.190679][ T5919] usb 2-1: config 1 interface 0 altsetting 13 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 100.202476][ T5919] usb 2-1: config 1 interface 0 has no altsetting 0 [ 100.211811][ T5919] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 100.222116][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.232176][ T5919] usb 2-1: Product: ī¾å•¹č°±ļ‰Œļ—±į”šćžą°µå‘Žāµ‚ģŠ©ģ‰œģš±ę‰Ÿē©«ī«įŒč”©ļ“æ呮įŠ…ć³Žé‡»ć‰‘į’ ź—­ē«ø䱉āŗœč¦°éØćŒ±į«…č›…ā“–ā‰€į£Ø艛ķ‡¼ęŒŒä•„ī›æ鼘ē“£ē®ä”ē–…ļ¤  [ 100.258800][ T5919] usb 2-1: Manufacturer: ŠŽ [ 100.263398][ T5919] usb 2-1: SerialNumber: syz [ 100.285642][ T6298] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 100.286501][ T6312] binder: 6311:6312 ioctl 4400ae8f 200000000280 returned -22 [ 100.300595][ T6298] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 100.314889][ T6298] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 100.346218][ T798] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 100.460206][ T6318] program syz.2.143 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.464880][ T30] audit: type=1800 audit(1762337397.474:2): pid=6318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.143" name="memory.events" dev="tmpfs" ino=129 res=0 errno=0 [ 100.504642][ T798] usb 1-1: Using ep0 maxpacket: 32 [ 100.515369][ T798] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 100.525651][ T798] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 100.547781][ T798] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 100.575929][ T798] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 100.595419][ T798] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.611459][ T798] usb 1-1: Product: syz [ 100.616229][ T798] usb 1-1: Manufacturer: syz [ 100.620852][ T798] usb 1-1: SerialNumber: syz [ 100.742580][ T5919] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 100.756315][ T5919] usb 2-1: USB disconnect, device number 11 [ 100.843703][ T798] usb 1-1: 0:2 : does not exist [ 100.854723][ T5877] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 100.863947][ T798] usb 1-1: USB disconnect, device number 10 [ 100.888070][ T5981] udevd[5981]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 100.935611][ T43] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 101.016365][ T5877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.027449][ T5877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.037282][ T5877] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 101.051282][ T5877] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 101.060482][ T5877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.071545][ T5877] usb 3-1: config 0 descriptor?? [ 101.104767][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 101.111743][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.122849][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.133399][ T43] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 101.142492][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.154045][ T43] usb 4-1: config 0 descriptor?? [ 101.323891][ T6325] Mount JFS Failure: -22 [ 101.328289][ T6325] jfs_mount failed w/return code = -22 [ 101.335511][ T6325] netlink: 188 bytes leftover after parsing attributes in process `syz.1.146'. [ 101.482897][ T5877] usbhid 3-1:0.0: can't add hid device: -71 [ 101.496582][ T5877] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 101.514757][ T5877] usb 3-1: USB disconnect, device number 15 [ 101.674739][ T798] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 101.841908][ T798] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.854206][ T798] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 101.866787][ T798] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.875105][ T798] usb 1-1: Product: syz [ 101.879294][ T798] usb 1-1: Manufacturer: syz [ 101.883886][ T798] usb 1-1: SerialNumber: syz [ 101.891913][ T798] usb 1-1: config 0 descriptor?? [ 101.899743][ T798] ims_pcu 1-1:0.0: Zero length descriptor [ 101.905590][ T798] ims_pcu 1-1:0.0: probe with driver ims_pcu failed with error -22 [ 101.954968][ T5919] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 102.103512][ T798] usb 1-1: USB disconnect, device number 11 [ 102.109798][ T5919] usb 2-1: Using ep0 maxpacket: 32 [ 102.119175][ T5919] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 102.129543][ T5919] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 102.139743][ T5919] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 102.150524][ T5919] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 102.159688][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.169061][ T5919] usb 2-1: Product: syz [ 102.173971][ T5919] usb 2-1: Manufacturer: syz [ 102.178683][ T5919] usb 2-1: SerialNumber: syz [ 102.264667][ T5877] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 102.397182][ T5919] usb 2-1: 0:2 : does not exist [ 102.432273][ T5919] usb 2-1: USB disconnect, device number 12 [ 102.461699][ T5877] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 102.471088][ T5877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.483058][ T5877] usb 3-1: Product: syz [ 102.492736][ T5877] usb 3-1: Manufacturer: syz [ 102.505474][ T5877] usb 3-1: SerialNumber: syz [ 102.512778][ T5981] udevd[5981]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 102.543509][ T5877] usb 3-1: config 0 descriptor?? [ 102.571702][ T5877] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 102.856042][ T6351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.867573][ T6351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.924663][ T5919] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 103.087670][ T6351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.100339][ T6351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.108146][ T5919] usb 1-1: Using ep0 maxpacket: 8 [ 103.133994][ T5919] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 103.143335][ T5919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.152723][ T5919] usb 1-1: Product: syz [ 103.157058][ T5919] usb 1-1: Manufacturer: syz [ 103.161693][ T5919] usb 1-1: SerialNumber: syz [ 103.172835][ T5919] usb 1-1: config 0 descriptor?? [ 103.380947][ T5919] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 103.414687][ T5933] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 103.568555][ T5933] usb 2-1: not running at top speed; connect to a high speed hub [ 103.577685][ T5933] usb 2-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 103.589032][ T5933] usb 2-1: config 1 interface 0 altsetting 13 endpoint 0x82 has invalid maxpacket 511, setting to 64 [ 103.600049][ T5933] usb 2-1: config 1 interface 0 altsetting 13 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 103.611904][ T5933] usb 2-1: config 1 interface 0 has no altsetting 0 [ 103.621871][ T5933] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 103.631304][ T5933] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.639524][ T5933] usb 2-1: Product: ī¾å•¹č°±ļ‰Œļ—±į”šćžą°µå‘Žāµ‚ģŠ©ģ‰œģš±ę‰Ÿē©«ī«įŒč”©ļ“æ呮įŠ…ć³Žé‡»ć‰‘į’ ź—­ē«ø䱉āŗœč¦°éØćŒ±į«…č›…ā“–ā‰€į£Ø艛ķ‡¼ęŒŒä•„ī›æ鼘ē“£ē®ä”ē–…ļ¤  [ 103.669395][ T5933] usb 2-1: Manufacturer: ŠŽ [ 103.673993][ T5933] usb 2-1: SerialNumber: syz [ 103.689253][ T6358] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 103.697491][ T6358] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 103.704902][ T6358] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 103.860280][ T6363] Mount JFS Failure: -22 [ 103.864620][ T6363] jfs_mount failed w/return code = -22 [ 103.871876][ T6363] netlink: 188 bytes leftover after parsing attributes in process `syz.3.157'. [ 104.121521][ T5933] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 104.137550][ T5933] usb 2-1: USB disconnect, device number 13 [ 104.239180][ T6366] netlink: 'syz.3.158': attribute type 16 has an invalid length. [ 104.248133][ T6366] netlink: 48 bytes leftover after parsing attributes in process `syz.3.158'. [ 104.585682][ T6338] program syz.2.149 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 104.729033][ T5919] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 104.755416][ T5919] usb 1-1: USB disconnect, device number 12 [ 105.075899][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 105.192833][ T6382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.203384][ T5877] gspca_stk1135: reg_w 0x350 err -71 [ 105.204174][ T6382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.211259][ T5877] gspca_stk1135: serial bus timeout: status=0x00 [ 105.223884][ T5877] gspca_stk1135: Sensor write failed [ 105.229799][ T5877] gspca_stk1135: serial bus timeout: status=0x00 [ 105.237479][ T5877] gspca_stk1135: Sensor write failed [ 105.246862][ T5877] gspca_stk1135: serial bus timeout: status=0x00 [ 105.253264][ T5877] gspca_stk1135: Sensor read failed [ 105.259821][ T5877] gspca_stk1135: serial bus timeout: status=0x00 [ 105.266495][ T5877] gspca_stk1135: Sensor read failed [ 105.272254][ T5877] gspca_stk1135: Detected sensor type unknown (0x0) [ 105.279118][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 105.294375][ T5877] gspca_stk1135: serial bus timeout: status=0x00 [ 105.301825][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 105.312107][ T5877] gspca_stk1135: Sensor read failed [ 105.321438][ T5877] gspca_stk1135: serial bus timeout: status=0x00 [ 105.327892][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 105.341655][ T5877] gspca_stk1135: Sensor read failed [ 105.350728][ T5877] gspca_stk1135: serial bus timeout: status=0x00 [ 105.357387][ T5877] gspca_stk1135: Sensor write failed [ 105.363028][ T5877] gspca_stk1135: serial bus timeout: status=0x00 [ 105.371193][ T5877] gspca_stk1135: Sensor write failed [ 105.377531][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 105.387031][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.395206][ T5877] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 105.403258][ T9] usb 2-1: Product: syz [ 105.409988][ T9] usb 2-1: Manufacturer: syz [ 105.415036][ T5877] usb 3-1: USB disconnect, device number 16 [ 105.422747][ T9] usb 2-1: SerialNumber: syz [ 105.440490][ T9] hub 2-1:1.0: bad descriptor, ignoring hub [ 105.456646][ T9] hub 2-1:1.0: probe with driver hub failed with error -5 [ 105.646836][ T9] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 105.820324][ T6389] Mount JFS Failure: -22 [ 105.841007][ T6389] jfs_mount failed w/return code = -22 [ 105.870971][ T6397] netlink: 188 bytes leftover after parsing attributes in process `syz.0.167'. [ 105.882021][ T6378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.886587][ T6393] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 105.895481][ T6378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.897014][ T6393] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 105.918916][ T6393] vhci_hcd vhci_hcd.0: Device attached [ 105.942120][ T6398] vhci_hcd: connection closed [ 105.944059][ T36] vhci_hcd vhci_hcd.3: stop threads [ 105.956327][ T36] vhci_hcd vhci_hcd.3: release socket [ 105.962690][ T36] vhci_hcd vhci_hcd.3: disconnect device [ 105.987888][ T5869] usb 2-1: USB disconnect, device number 14 [ 106.009405][ T5869] usblp0: removed [ 106.355246][ T798] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 106.527204][ T798] usb 3-1: not running at top speed; connect to a high speed hub [ 106.552837][ T798] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 106.583852][ T798] usb 3-1: config 1 interface 0 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 106.608312][ T798] usb 3-1: config 1 interface 0 has no altsetting 0 [ 106.627290][ T798] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 106.644881][ T798] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.673297][ T798] usb 3-1: Product: ī¾å•¹č°±ļ‰Œļ—±į”šćžą°µå‘Žāµ‚ģŠ©ģ‰œģš±ę‰Ÿē©«ī«įŒč”©ļ“æ呮įŠ…ć³Žé‡»ć‰‘į’ ź—­ē«ø䱉āŗœč¦°éØćŒ±į«…č›…ā“–ā‰€į£Ø艛ķ‡¼ęŒŒä•„ī›æ鼘ē“£ē®ä”ē–…ļ¤  [ 106.709686][ T798] usb 3-1: Manufacturer: ŠŽ [ 106.714280][ T798] usb 3-1: SerialNumber: syz [ 106.809041][ T43] usbhid 4-1:0.0: can't add hid device: -32 [ 106.822856][ T43] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 107.044776][ T43] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 107.147983][ T798] cdc_ether 3-1:1.0: skipping garbage [ 107.153421][ T798] cdc_ether 3-1:1.0: skipping garbage [ 107.172989][ T798] cdc_ether 3-1:1.0: skipping garbage [ 107.186081][ T798] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 107.211541][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 107.223996][ T798] usb 3-1: USB disconnect, device number 17 [ 107.249571][ T43] usb 2-1: unable to get BOS descriptor or descriptor too short [ 107.271254][ T43] usb 2-1: config 9 has an invalid interface number: 33 but max is 0 [ 107.281377][ T43] usb 2-1: config 9 has no interface number 0 [ 107.292457][ T43] usb 2-1: config 9 interface 33 has no altsetting 0 [ 107.317251][ T43] usb 2-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=c5.a8 [ 107.327356][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.337077][ T43] usb 2-1: Product: syz [ 107.357534][ T43] usb 2-1: Manufacturer: syz [ 107.362188][ T43] usb 2-1: SerialNumber: syz [ 107.402112][ T6435] Mount JFS Failure: -22 [ 107.407119][ T6435] jfs_mount failed w/return code = -22 [ 107.413921][ T6435] netlink: 188 bytes leftover after parsing attributes in process `syz.3.180'. [ 107.592264][ T43] usbhid 2-1:9.33: couldn't find an input interrupt endpoint [ 107.612586][ T43] usb 2-1: USB disconnect, device number 15 [ 107.868273][ T6450] netlink: 'syz.0.186': attribute type 10 has an invalid length. [ 107.876328][ T6450] netlink: 55 bytes leftover after parsing attributes in process `syz.0.186'. [ 108.084692][ T43] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 108.276619][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.296877][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.320977][ T43] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 108.330849][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.343058][ T43] usb 3-1: config 0 descriptor?? [ 108.760991][ T43] usbhid 3-1:0.0: can't add hid device: -71 [ 108.776097][ T43] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 108.799011][ T43] usb 3-1: USB disconnect, device number 18 [ 109.035320][ T798] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 109.184619][ T798] usb 1-1: Using ep0 maxpacket: 32 [ 109.191290][ T798] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 109.199786][ T798] usb 1-1: config 0 has no interface number 0 [ 109.205942][ T798] usb 1-1: config 0 interface 12 has no altsetting 0 [ 109.214621][ T798] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 109.223682][ T798] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.231714][ T798] usb 1-1: Product: syz [ 109.236772][ T798] usb 1-1: Manufacturer: syz [ 109.241390][ T798] usb 1-1: SerialNumber: syz [ 109.249236][ T798] usb 1-1: config 0 descriptor?? [ 109.310975][ T6472] tmpfs: Bad value for 'mpol' [ 109.554626][ T43] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 109.708126][ T43] usb 3-1: unable to get BOS descriptor or descriptor too short [ 109.717177][ T6474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.727794][ T6474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.728855][ T43] usb 3-1: config 160 has an invalid interface number: 76 but max is 0 [ 109.743916][ T43] usb 3-1: config 160 has no interface number 0 [ 109.751051][ T43] usb 3-1: config 160 interface 76 has no altsetting 0 [ 109.760970][ T43] usb 3-1: New USB device found, idVendor=12d1, idProduct=6708, bcdDevice=b0.f5 [ 109.770774][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.778825][ T43] usb 3-1: Product: syz [ 109.783006][ T43] usb 3-1: Manufacturer: syz [ 109.787651][ T43] usb 3-1: SerialNumber: syz [ 109.997030][ T6472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.006002][ T6472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.016137][ T6472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.026201][ T6472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.036333][ T43] option 3-1:160.76: GSM modem (1-port) converter detected [ 110.261865][ T5869] usb 3-1: USB disconnect, device number 19 [ 110.280488][ T5869] option 3-1:160.76: device disconnected [ 110.366989][ T6480] Mount JFS Failure: -22 [ 110.371337][ T6480] jfs_mount failed w/return code = -22 [ 110.378810][ T6480] netlink: 188 bytes leftover after parsing attributes in process `syz.3.193'. [ 110.828115][ T6492] warning: `syz.3.196' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 110.999944][ T6481] ------------[ cut here ]------------ [ 111.005593][ T6481] WARNING: ./include/linux/ns_common.h:255 at put_pid_ns+0x113/0x150, CPU#1: syz.2.194/6481 [ 111.015847][ T6481] Modules linked in: [ 111.019788][ T6481] CPU: 1 UID: 0 PID: 6481 Comm: syz.2.194 Not tainted syzkaller #0 PREEMPT(full) [ 111.029051][ T6481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 111.039187][ T6481] RIP: 0010:put_pid_ns+0x113/0x150 [ 111.044345][ T6481] Code: d6 cc ff bf 01 00 00 00 89 ee e8 58 b9 03 00 85 ed 7e 1c e8 0f b5 03 00 5b 41 5e 41 5f 5d c3 cc cc cc cc cc e8 fe b4 03 00 90 <0f> 0b 90 eb 95 e8 f3 b4 03 00 4c 89 f7 be 03 00 00 00 5b 41 5e 41 [ 111.064650][ T6481] RSP: 0018:ffffc900038cfa68 EFLAGS: 00010293 [ 111.071058][ T6481] RAX: ffffffff81bdb8c2 RBX: ffff888024fe4810 RCX: ffff88802dba9e80 [ 111.079677][ T6481] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 111.088321][ T6481] RBP: 00000000ffffffff R08: ffff888024fe497b R09: 1ffff110049fc92f [ 111.096380][ T6481] R10: dffffc0000000000 R11: ffffed10049fc930 R12: dffffc0000000000 [ 111.104393][ T6481] R13: 0000000000000000 R14: ffff888024fe4978 R15: dffffc0000000000 [ 111.112443][ T6481] FS: 0000000000000000(0000) GS:ffff888125b8b000(0000) knlGS:0000000000000000 [ 111.121490][ T6481] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 111.128386][ T6481] CR2: 00007f0c7305f4c0 CR3: 000000000e136000 CR4: 00000000003526f0 [ 111.136432][ T6481] Call Trace: [ 111.139750][ T6481] [ 111.142722][ T6481] free_nsproxy+0x13a/0x560 [ 111.147317][ T6481] do_exit+0x6b8/0x2300 [ 111.151529][ T6481] ? do_raw_spin_lock+0x121/0x290 [ 111.156655][ T6481] ? __pfx_do_exit+0x10/0x10 [ 111.161286][ T6481] ? futex_private_hash_put+0x4b/0x280 [ 111.166845][ T6481] do_group_exit+0x21c/0x2d0 [ 111.171514][ T6481] ? lockdep_hardirqs_on+0x9c/0x150 [ 111.176820][ T6481] get_signal+0x1285/0x1340 [ 111.181930][ T6481] arch_do_signal_or_restart+0x9a/0x7a0 [ 111.188040][ T6481] ? _raw_spin_unlock_irq+0x23/0x50 [ 111.193292][ T6481] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 111.199545][ T6481] ? exit_to_user_mode_loop+0x55/0x4f0 [ 111.205154][ T6481] exit_to_user_mode_loop+0x87/0x4f0 [ 111.210482][ T6481] ? rcu_is_watching+0x15/0xb0 [ 111.215330][ T6481] do_syscall_64+0x2e9/0xfa0 [ 111.219970][ T6481] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.226109][ T6481] ? clear_bhb_loop+0x60/0xb0 [ 111.230826][ T6481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.236937][ T6481] RIP: 0033:0x7f870878f6c9 [ 111.241366][ T6481] Code: Unable to access opcode bytes at 0x7f870878f69f. [ 111.248432][ T6481] RSP: 002b:00007f87096db0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 111.256905][ T6481] RAX: fffffffffffffe00 RBX: 00007f87089e5fa8 RCX: 00007f870878f6c9 [ 111.264966][ T6481] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f87089e5fa8 [ 111.272955][ T6481] RBP: 00007f87089e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 111.281010][ T6481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.289610][ T6481] R13: 00007f87089e6038 R14: 00007ffec9b13380 R15: 00007ffec9b13468 [ 111.298175][ T6481] [ 111.301212][ T6481] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 111.308494][ T6481] CPU: 1 UID: 0 PID: 6481 Comm: syz.2.194 Not tainted syzkaller #0 PREEMPT(full) [ 111.317697][ T6481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 111.327754][ T6481] Call Trace: [ 111.331028][ T6481] [ 111.333945][ T6481] dump_stack_lvl+0x99/0x250 [ 111.338535][ T6481] ? __asan_memcpy+0x40/0x70 [ 111.343117][ T6481] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.348309][ T6481] ? __pfx__printk+0x10/0x10 [ 111.352905][ T6481] vpanic+0x237/0x6d0 [ 111.356880][ T6481] ? __pfx_vpanic+0x10/0x10 [ 111.361368][ T6481] ? is_bpf_text_address+0x292/0x2b0 [ 111.366645][ T6481] ? is_bpf_text_address+0x26/0x2b0 [ 111.371841][ T6481] panic+0xb9/0xc0 [ 111.375555][ T6481] ? __pfx_panic+0x10/0x10 [ 111.379970][ T6481] __warn+0x334/0x4c0 [ 111.383935][ T6481] ? put_pid_ns+0x113/0x150 [ 111.388435][ T6481] ? put_pid_ns+0x113/0x150 [ 111.392939][ T6481] report_bug+0x2be/0x4f0 [ 111.397262][ T6481] ? put_pid_ns+0x113/0x150 [ 111.401759][ T6481] ? put_pid_ns+0x113/0x150 [ 111.406254][ T6481] ? put_pid_ns+0x115/0x150 [ 111.410751][ T6481] handle_bug+0x84/0x160 [ 111.414993][ T6481] exc_invalid_op+0x1a/0x50 [ 111.419493][ T6481] asm_exc_invalid_op+0x1a/0x20 [ 111.424328][ T6481] RIP: 0010:put_pid_ns+0x113/0x150 [ 111.429431][ T6481] Code: d6 cc ff bf 01 00 00 00 89 ee e8 58 b9 03 00 85 ed 7e 1c e8 0f b5 03 00 5b 41 5e 41 5f 5d c3 cc cc cc cc cc e8 fe b4 03 00 90 <0f> 0b 90 eb 95 e8 f3 b4 03 00 4c 89 f7 be 03 00 00 00 5b 41 5e 41 [ 111.449024][ T6481] RSP: 0018:ffffc900038cfa68 EFLAGS: 00010293 [ 111.455085][ T6481] RAX: ffffffff81bdb8c2 RBX: ffff888024fe4810 RCX: ffff88802dba9e80 [ 111.463046][ T6481] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 111.471003][ T6481] RBP: 00000000ffffffff R08: ffff888024fe497b R09: 1ffff110049fc92f [ 111.478961][ T6481] R10: dffffc0000000000 R11: ffffed10049fc930 R12: dffffc0000000000 [ 111.486920][ T6481] R13: 0000000000000000 R14: ffff888024fe4978 R15: dffffc0000000000 [ 111.494917][ T6481] ? put_pid_ns+0x112/0x150 [ 111.499427][ T6481] ? put_pid_ns+0x112/0x150 [ 111.503920][ T6481] free_nsproxy+0x13a/0x560 [ 111.508412][ T6481] do_exit+0x6b8/0x2300 [ 111.512567][ T6481] ? do_raw_spin_lock+0x121/0x290 [ 111.517585][ T6481] ? __pfx_do_exit+0x10/0x10 [ 111.522166][ T6481] ? futex_private_hash_put+0x4b/0x280 [ 111.527632][ T6481] do_group_exit+0x21c/0x2d0 [ 111.532217][ T6481] ? lockdep_hardirqs_on+0x9c/0x150 [ 111.537411][ T6481] get_signal+0x1285/0x1340 [ 111.541917][ T6481] arch_do_signal_or_restart+0x9a/0x7a0 [ 111.547458][ T6481] ? _raw_spin_unlock_irq+0x23/0x50 [ 111.552650][ T6481] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 111.558808][ T6481] ? exit_to_user_mode_loop+0x55/0x4f0 [ 111.564263][ T6481] exit_to_user_mode_loop+0x87/0x4f0 [ 111.569534][ T6481] ? rcu_is_watching+0x15/0xb0 [ 111.574293][ T6481] do_syscall_64+0x2e9/0xfa0 [ 111.578880][ T6481] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.584935][ T6481] ? clear_bhb_loop+0x60/0xb0 [ 111.589606][ T6481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.595489][ T6481] RIP: 0033:0x7f870878f6c9 [ 111.599926][ T6481] Code: Unable to access opcode bytes at 0x7f870878f69f. [ 111.606926][ T6481] RSP: 002b:00007f87096db0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 111.615329][ T6481] RAX: fffffffffffffe00 RBX: 00007f87089e5fa8 RCX: 00007f870878f6c9 [ 111.623287][ T6481] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f87089e5fa8 [ 111.631243][ T6481] RBP: 00007f87089e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 111.639201][ T6481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.647160][ T6481] R13: 00007f87089e6038 R14: 00007ffec9b13380 R15: 00007ffec9b13468 [ 111.655138][ T6481] [ 111.658404][ T6481] Kernel Offset: disabled [ 111.662715][ T6481] Rebooting in 86400 seconds..