last executing test programs: 3m28.644092526s ago: executing program 3 (id=1372): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi2\x00', 0x408280, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl726\x00', [0x8, 0x401, 0x2, 0x401, 0x1, 0xcc7, 0xfff, 0x5c952399, 0x5, 0x3ff, 0x802, 0x1600, 0x1, 0x1, 0x9, 0xe1cb, 0x6, 0x4, 0x0, 0x395, 0x80001089, 0xfffffffd, 0x0, 0xfffffff5, 0xffffeadb, 0x3, 0x40003e, 0x8, 0x4, 0x8000000, 0x100]}) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r2 = landlock_create_ruleset(&(0x7f0000000240)={0x8400}, 0x18, 0x1) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_connect$cdc_ecm(0x5, 0x9b, &(0x7f0000000bc0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x89, 0x1, 0x1, 0x2, 0x80, 0xc, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x7, 0x24, 0x6, 0x0, 0x0, "ddea"}, {0x5, 0x24, 0x0, 0x6bf8}, {0xd, 0x24, 0xf, 0x1, 0x45efcfb0, 0x5, 0xe8ef, 0x1}, [@dmm={0x7, 0x24, 0x14, 0x1, 0x2}, @mbim={0xc, 0x24, 0x1b, 0x200, 0x2, 0x3, 0x0, 0x0, 0x6}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x9}, @ncm={0x6, 0x24, 0x1a, 0x5, 0x5}, @mdlm={0x15, 0x24, 0x12, 0xa4}, @country_functional={0x10, 0x24, 0x7, 0xe4, 0x4, [0x7ff, 0x1, 0x6, 0x8, 0x9]}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0x3, 0x77, 0x7f}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xff, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x1, 0x6}}}}}]}}]}}, &(0x7f0000001100)={0xa, &(0x7f0000000980)={0xa, 0x6, 0x300, 0x40, 0x4, 0xdd, 0x40, 0xf4}, 0xe8, &(0x7f0000000c80)={0x5, 0xf, 0xe8, 0x4, [@generic={0xca, 0x10, 0xb, "a50510b18b89a7b3c355fa3ff10f556b84ea2e4663ce0f086f4774d96d184fb97b2fa40992c7da9c6a4b869cd03ff8b688c2d9b01278780b1b812fc675d92281bacbf889460cc5bc4112fb946a3d9065c73e80aba37aa49fdb5282e45a3fb3ad5a3df4145a0dea84807f7bcea8c2604fffa1c058017620c8532cd218979e711497b3c4218ef0f2e6c6b69520850d2b167cf7cc23dfda22825dea61b6cf7061b18ed93fc1664291d7fd62364c91731b4f5973ab4f408d4279c30b973fb78c821a4745257e2e8d65"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x10, 0x9, 0x892, 0x9}, @wireless={0xb, 0x10, 0x1, 0xc, 0x40, 0xe, 0x7, 0xc400, 0x10}, @ptm_cap={0x3}]}, 0x7, [{0x15, &(0x7f0000000d80)=@string={0x15, 0x3, "e16d23e5f52a2a51f14554c2e78f96c36d935b"}}, {0x6c, &(0x7f0000000dc0)=@string={0x6c, 0x3, "f8194c6682e9f63be3ccb142a78e57218580e2844ca3295ba267bed69e4542d2f3507775af4cb29e67302f419d195c04f651bd858e11aed6fa038821f3f8f742947d70fce42bce0b182273b89b7be3cf208ae2f3876c041c990b87107d084d834bcf8055d2fe62284ab8"}}, {0xd6, &(0x7f0000000e40)=@string={0xd6, 0x3, "96ca4542a574691b2cc69c499ee911f0965b153b442f52861702d8bd044780812b1b2bd14090e74213c14fdf5d7911b95d0b89c5c592ccec2058fc00713b6f6b6c71b3d60deb30c3d83ffda2df161680c3c2b489ef1264b193426e679da9905e5f9d40491f1e3abaebe9b616a0e7a7a7ce1b0267b0bf2e082ed3f79e53fd901bf50ca0d7ee1c221e4acc2c7aff970830ed6edd72926c48bd5489f22f24efabe68e647e53f9a16b28e82afaa91cc702d32062e681d0c6d3908b61113e58019ae5cc8a5bf71c7bc0fe3e280ee4f39797584d134bbd"}}, {0x4, &(0x7f0000000f40)=@lang_id={0x4, 0x3, 0x82c}}, {0xd0, &(0x7f0000000f80)=@string={0xd0, 0x3, "d1645be336ec2c893561d2f3bedd042218b40f18416bb5601d16951216a392accec25c6d513b21cb88a9350f74b615ca0554d45baa0ae3f414bea66b3c25f06bf54ad50fc395822466e125ec5c3d83c34e2aee7b7ad0e2513f448ae21733894b2951fc7c9e5d7856ee7a114be2c627d18ff1799dc95304b753a2b2627f00ca78cd5034246618c9522617d5d3466400e0ddefd3b990a393ca89fa792b30d9ac7fe65f5a9e1caff6e5ac37bc38f7663a1a3c871cc1395a1c0bc0788dc1f9e2a1421e273f5ff65998109f1760b8461b"}}, {0x4, &(0x7f0000001080)=@lang_id={0x4, 0x3, 0x459}}, {0x38, &(0x7f0000001180)=ANY=[@ANYBLOB="38034ba83a15f71a6aa1e9bb6704de946ae768020b7eff6ff7c767fa8ddef52aad6be0ac4bf4da1dc1e94a93680da4d1067fc5a5008c5af3b9d523c4182d8436666c5b439d34f19c8d0fdfbcc07e54e8b5e8d47fc213d4e30088d46af0d9655111d071cefba591e0381b92ca0fc12e8d301de7ae89c8460ca8c151307f0398a5f8b967936eb4d16f013de76ed94f12f2953cd7cf74217dd2705bda7f3832864eb03811685a36bc433dbc20e31a3ffc016911ba0e29666f68956b4f6a28f092d78ee4810cf81ba4fa218ad6de4b4add"]}]}) syz_usb_control_io$uac1(r3, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) syz_usb_connect$uac1(0x4, 0xde, &(0x7f0000000600)={{0x12, 0x1, 0x3c1, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcc, 0x3, 0x1, 0x98, 0x10, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x58}, [@feature_unit={0xd, 0x24, 0x6, 0x6, 0x6, 0x3, [0x5, 0x9, 0x0]}, @mixer_unit={0x7, 0x24, 0x4, 0x6, 0x3, 'gC'}, @processing_unit={0xb, 0x24, 0x7, 0x1, 0x3, 0x10, "9e69e67d"}, @feature_unit={0x9, 0x24, 0x6, 0x2, 0x2, 0x1, [0x5], 0x3}, @extension_unit={0xb, 0x24, 0x8, 0x2, 0x81, 0x0, "aa9eadeb"}, @feature_unit={0xd, 0x24, 0x6, 0x4, 0x6, 0x3, [0x4, 0xb, 0x1], 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0xd081, 0xf136, 0x27, "152c1e76c93fc22b07"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x3, 0x57e6, 0x0, "94b5e6"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x5, 0xfb5d, 0x0, "daa2ae5bdb3e"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x15, 0xc4, 0xff, {0x7, 0x25, 0x1, 0x40, 0x8, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x0, 0x2, 0x8, {0x7, 0x25, 0x1, 0x1, 0x5, 0xffff}}}}}}}]}}, &(0x7f0000000b00)={0xa, &(0x7f0000000700)={0xa, 0x6, 0x0, 0x5, 0x0, 0x5, 0x0, 0xff}, 0x1b, &(0x7f0000000740)={0x5, 0xf, 0x1b, 0x2, [@wireless={0xb, 0x10, 0x1, 0x4, 0x1, 0x6b, 0x9, 0x2, 0xb5}, @wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0xdf, 0x2, 0x7, 0x7}]}, 0x4, [{0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x44a}}, {0xd7, &(0x7f00000007c0)=@string={0xd7, 0x3, "a138399237208e2a4744b6e6c0b238e0afa62925901e2f2a1c877564e5b9ff6bbb537bde4f1949f579af440f83b7ab3490e0f47b73afcea47ecf253bcf42369fb41b312404f658480657520283cce6dd75d70341fcb30fde694e0a3f7c093e188c438ef9d05889a730be76138e2084e62e737efa86b6051c9e55722d896cd192fbb729cdace02b122826fa3141a9173567ff72491ae132fbe6c4d83c490b0d772be570665b0646c3e8df8784d9d4529428573615c8531a1ea8cca82acdc4e1f6f4e70c068555a42c104aeec2578855ace3ae886fc8"}}, {0x81, &(0x7f00000008c0)=@string={0x81, 0x3, "fbe6e4746f293233120593e48834b03e049e7fcea7ec851b2b4273d09eeec638d8f73ee42312315e6b3bfa145d53e5678e7a231fd02b593da4801b4f20bea677514bb5f2d1fa837c8054cd6a77c8143acb07b1e11fa5e2c9c99fda1967a706f38403f505fdf378c1a760ca1fbdc858a0954be66d3701b0d6d3037d6fa16beb"}}, {0xea, &(0x7f0000000a00)=@string={0xea, 0x3, "43af1c38020a9179115428ee48d8e73a2296a79d91be0013e8373ce5a592c422be7f1a01e16cd61b30540a0d678f5a7650ac35aa12050b0b4b89cd90b5a17c7fcb320eaeb90111d2c9ead8a4425e704c9ce6f5181853aa597900be66cfcc9e797549f081e0fd001707f058b5f457db4544bb52a5c3a2f3e1a77363f3ffe3b7330a0fdfd0e56c7bcae50d61052d7a9983aee802a6e0a03d8bdc6727d478d94355784a29d4815bc4f903f08fd32cb9c9f9f62c4e68cf4f78e3180586f821bcdb028ee4cd200370921f43d0d1c4bd5cd5618ceb15a4fdea7cca30e1a44b1a56682b9b30e1993e4167d4"}}]}) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000001c0)={0x1ff, 0x2, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f000052a000/0x2000)=nil) mlockall(0x7) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r8) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) syz_usb_connect(0x5, 0x4ee, &(0x7f00000016c0)={{0x12, 0x1, 0x0, 0xfe, 0x67, 0x5e, 0x8, 0xac8, 0x321, 0x88df, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4dc, 0x1, 0x0, 0x0, 0x60, 0x0, [{{0x9, 0x4, 0x71, 0xc, 0xd, 0xf1, 0xd7, 0x9b, 0x7f, [], [{{0x9, 0x5, 0x86, 0x0, 0x8, 0x1, 0x7, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x80, 0x6}]}}, {{0x9, 0x5, 0x3, 0x20, 0x3ff, 0x6, 0x7, 0x7}}, {{0x9, 0x5, 0x5, 0x4, 0x8, 0x5, 0xfc, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x6}]}}, {{0x9, 0x5, 0xe, 0x10, 0x400, 0x1, 0xf, 0xd}}, {{0x9, 0x5, 0x2, 0x0, 0x400, 0x42, 0x5, 0x7}}, {{0x9, 0x5, 0x6, 0x0, 0x400, 0x7, 0x2, 0xd7}}, {{0x9, 0x5, 0xa, 0x10, 0x400, 0x6, 0x1, 0x15, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x8001}, @uac_iso={0x7, 0x25, 0x1, 0x183, 0xa6, 0x79}]}}, {{0x9, 0x5, 0xf, 0x10, 0x40, 0x7, 0x80, 0xc, [@generic={0xd2, 0x23, "c9995dbdc98c7c43143fb3234d9da578535e06051bff4910fbcaf4c17355ade25d67aefe0b1b9c2f328f960208cb74a13773167014b1038dfe97dd2828222f53391d7b9331726b27eb6705d83538a056581b2025e61b69018a26fc2dbaa32e46209cc163daf72e1000a5c89fd4730c90d94db6e3fe72d481189ba114ea00e885813f68bd9367792a1b040f6c5d8247f25e9b1edbc095bf251e6e5392ade6cc8100fe92feed5661426ed394a21793f24b5c3d08ca46bd60ee3e0e82274ff2a3cf3bd0222aec345fbf4f7063c0dbe08e25"}, @generic={0xde, 0x18, "3c6233584870b84d76d9476d0b4682944c68c7d40354e0a8e69da6ff8fbb395c1400f41171113c3c95d24c0b643374bf87ea5b985c24cfc605278ead80f31d851bc37473d0724aa4e5bf24784f4e524f33dd437b7ee9190a16f64195efaf187c33b2278b5d88d434d88759bc4aa0b97bc228cdd68a4fd0d7ceba58d437dd7ba8eb634c2576d87ea0174f266074fde69b8c8644abe88ae0be5669103c7e45f35a0fbdfa91048e44cc712b1d1057a8d36657b98d62ab3549bf64f770eef0891ed942eb40c388f2ff1dae5f76b20c73cc26e1d74886dc5d559b4d8104de"}]}}, {{0x9, 0x5, 0xe, 0x2, 0x200, 0xf, 0x55}}, {{0x9, 0x5, 0xc, 0xc, 0x40, 0x3, 0x8, 0x8, [@generic={0xda, 0x11, "6af7cf14f0afd50bb3f6dc7ec0994290be4ff1ae30d3417469848a7f5ded1046cff01f5515790434acc3d995cb5a44ff6234b93779f07d3f4e7e522a4215e27abc2b15543c0d12c8e6b6ae354759baccb0ffeac4612afcfa8b3631d681ea4b5a40d86a53d980f25952ce64108af208f679b031d9aff07f4c6f86d34894d8c27b0e565b4e498b91604818bd70545872dbb1207d677180d2ab94918ddba999533f3faae1f0e2ebebffcdd321b0c53d2ca88e47e239fa68d15c2c8a7d251adc1a19e1529469e745b13fb4ec5efb63ed5578eaded8f7c6638d54"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x3}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0x9, 0x4, 0x9, [@generic={0xe7, 0x9, "35869c3508bfb2505bbbb6530d1dbbf5926ba234eb01e7e935338e8ac1d05bc075d429d3fbe31ec8f1d5f462c4439cce4ea7d6f24242fca50b5b8cbdf59aac49c5af07ccc9048982eec03fbf61bd03e2161dc75f95d2ee584a88ea5bffc4563b6e0bc872c7a9cef6b08eb498f13e34194e7e22946a3819a088ea96354c9d24644fbeb92ab907b95112ca60a68e2b8d070f496122d36696ed628bc99cb019980b2f3468c6666203569de0f926a418afc1764f9eaaef6b1d1164860af0cd9c478e4734aa2a9475413c8e17c8ee21f02cf09aca95abb464742ad4bede38e7b5c0f492e3e44be2"}]}}, {{0x9, 0x5, 0xa, 0x1, 0x20, 0x81, 0x0, 0x5a, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x22, 0x6}, @generic={0x44, 0x2d, "b1668eb33ba159e83c993f66dc9cb0d018fa70eb9d78d1a38ce432dc02cc52ede59053b010930e960cfa451f2e157f179979988cd305cba5f29647d0b4b914c5a0ad"}]}}, {{0x9, 0x5, 0xf, 0x4, 0x40, 0xfe, 0x40, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x5}, @generic={0x6f, 0x9, "9766653f4850ae5d96764b4c00250b091444b3af35e274148a14b7e4a0bd1c93fdcd08f3bf6d38bd4ae5721637ac818d38b28705000dd74fdcf43b45a967876b892470bff47c0a0014f16f8481199bfbf01d815ace4c75d8414b1ace11cae8541b4a62a17896da4d9ba648b7bb"}]}}]}}]}}]}}, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000001280)=ANY=[@ANYBLOB="0100000000000000004d564b000000000100000000000000b5c263619f6b1ed1bdade950cea0091d0bf05ec1871292ffbe58e8a928bfe14762d450f573a36f19cd26f698ef4c096dff323931f7b20273c2"]) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000b80)={0x34, &(0x7f00000009c0)={0x40, 0x11, 0x1, '$'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000280)={0x24, &(0x7f00000001c0)={0x20, 0x22, 0x42, {0x42, 0x23, "881856304106e3a20f9a005c98d32ef645bcf0f339dab94fa37d2cac1ae9d5329cf1359010d6bd3c8e6abc0427886af1a1311f9e655eea63e3fec2e418defd75"}}, &(0x7f0000000340)={0x0, 0x3, 0x31, @string={0x31, 0x3, "843dc8cb01bedbfd9fc139bceb2318c40c9c99bb60a05e7c908aedd407d17bfa1748f8370d264a8be24eaf572806fa"}}, &(0x7f00000010c0)={0x0, 0x22, 0x14, {[@main=@item_4={0x3, 0x0, 0x9, "95523754"}, @main=@item_4={0x3, 0x0, 0x8, "7db016a5"}, @main=@item_4={0x3, 0x0, 0xc, "30a00ff9"}, @local=@item_012={0x0, 0x2, 0x8}, @local=@item_012={0x1, 0x2, 0x3, "e1"}, @main=@item_012={0x1, 0x0, 0x8, "d2"}]}}, &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0xf2, 0x1, {0x22, 0xe}}}}, &(0x7f00000005c0)={0x2c, &(0x7f00000003c0)=ANY=[@ANYBLOB="4017d20000007e9229502ea06e6fdd543839fd230463a026bf954d7a16e320faa51b68ecf9e2a01af3c290ec45f1cc3a978a35208591e50d8c26b988327e0e228f201f039236e2fcb16cf87f61744e6bd5eb90e3d4ae03c3cb047fa5fac74b5050fbab308dedb0ba00a14a9ddad4cc25ec903da297ada6939f9cca1fceffc41e46e167f3d71239453e28c464799bfe63ffdfef4d85a695ea00d0935bda939653e67e7dbc3966ac3e36655dc9835b40f687da7aab8405b519f525edde943db6179f8e760e94b384c231836555972b5fca79dbafe3a115fef4"], &(0x7f0000000300)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0xe}, &(0x7f0000000540)={0x20, 0x1, 0x1b, "ab963f6601a2fe73fb4f2dfe2348cf0ce2f6d180d8bedfba52ea28"}, &(0x7f0000000580)={0x20, 0x3, 0x1, 0x4e}}) landlock_restrict_self(r2, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) syz_usb_connect(0x2, 0x3d, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000a6ff0540cdabeecdb9050000000109022b000100000000090400000201035100090583130000000000072501"], 0x0) syz_usb_connect$cdc_ecm(0x5, 0x84, &(0x7f0000001300)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x1, 0x1, 0xe, 0x20, 0xb8, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x47, {{0xb, 0x24, 0x6, 0x0, 0x0, "74dc72ca1b68"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xfff8, 0x4, 0x3}, [@ncm={0x6, 0x24, 0x1a, 0x7, 0x1}, @dmm={0x7, 0x24, 0x14, 0xe1c, 0x1}, @mbim={0xc, 0x24, 0x1b, 0x8, 0x7, 0x10, 0x6, 0xe, 0xf9}, @acm={0x4, 0x24, 0x2, 0x4}, @acm={0x4, 0x24, 0x2, 0x2}, @dmm={0x7, 0x24, 0x14, 0x9, 0x4}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x5c, 0x0, 0x4}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x7, 0x2, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x4, 0x0, 0xac}}}}}]}}]}}, &(0x7f0000001680)={0xa, &(0x7f00000013c0)={0xa, 0x6, 0x200, 0xac, 0x5, 0x6, 0x8}, 0xd5, &(0x7f0000001400)={0x5, 0xf, 0xd5, 0x5, [@wireless={0xb, 0x10, 0x1, 0x4, 0xda, 0xe7, 0x5, 0xc, 0x4}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x98, "e497b2c3e0a46a7b20f6c8e9c389d856"}, @generic={0xa7, 0x10, 0x6, "bff9c293635f422595efd9a96dd74e67c50c520b8c5b12d8dd82cf1770c8da52ec59829a80db83ee597809b4beb74df0afbe07139d8adc3f1e794dfd6565b777ead737b59915020ed4e252b804271dde2d6d2c8418ef9d4f5ce3c64676b29e6192d34b7305256e7da1c6155a254ca0f36704680e87cc4da7ceec3d6c12f71763046574e5287e7bc458ea9c5a44cff534b37ef01e96222df4d7bf029952a4dc0668e523b7"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0xf, 0x7, 0x800}]}, 0x3, [{0x4, &(0x7f0000001500)=@lang_id={0x4, 0x3, 0x3001}}, {0x61, &(0x7f0000001540)=@string={0x61, 0x3, "962a806fa2e70e555c6cf96ddf09442e268dffcd5d7e04beefedc5f79e635e5cdf8828560809fa0cc1e48fd131a538d384f06b4a0f3534bd3a39ea37da0440f94aa976ae83b472d4d248803eb556344a2b7a2803af5992209855219fdce8ad"}}, {0x94, &(0x7f00000015c0)=@string={0x94, 0x3, "8c4d3aa46d5587e32792cf98a633e791329abdb74dc70f1c976f8e42d71ec45144384196fa813a2de6049dc9800ee7949b1c820240a621f9b16fc02703cf596d95f1c0ac99d4ca7d0b8da2f49e36221e2c33f559c7bcf7bf16206319b9d9827e98aafdef258a5e7aee144c7d3a47a0babad85981da6f40ef0f21df53a4714d70b3776de3501c0e4c87e4109c4db80f7b99ad"}}]}) 3m26.514816396s ago: executing program 3 (id=1381): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x8044) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0xffffffffffffffff) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x3ec0) close(0x3) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) timer_create(0x2, &(0x7f0000000000)={0x0, 0x8, 0x2, @tid=0xffffffffffffffff}, &(0x7f00000001c0)=0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r7, 0x5421, &(0x7f00000002c0)=0x1000) connect$unix(r7, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e21}, 0x6e) timer_settime(r4, 0x0, &(0x7f0000000300)={{0x77359400}, {r5, r6+10000000}}, &(0x7f0000000340)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000040)=[{}], 0xb3c, 0xe4, 0x0, 0x0, 0x0, 0x2}) read$FUSE(0xffffffffffffffff, &(0x7f0000002180)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r9 = openat$cuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) read$FUSE(r9, &(0x7f0000000400)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r9, &(0x7f0000002f80)={0xa0, 0x0, r10, {{0x2, 0x2, 0x6, 0x4, 0x7, 0x7, {0x1, 0xe, 0x100, 0x7b, 0xf, 0x400, 0x3, 0x6, 0x8, 0x8000, 0x10001, r11, r12, 0x9, 0x8}}, {0x0, 0x1d}}}, 0xa0) fchown(r3, r8, r12) r13 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="000086dd0203030009000a004000623d885d009c11fffc000000000000000000000000000000ff0200000000000000000000000000014e224e21009c90"], 0xd2) 3m26.362594625s ago: executing program 3 (id=1382): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x20, 0x1402, 0x1, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000050}, 0x80d0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) timer_create(0x3, 0x0, &(0x7f00000001c0)) madvise(&(0x7f0000245000/0x4000)=nil, 0x4000, 0x13) utimes(&(0x7f0000000400)='./file0\x00', 0x0) statx(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x0, 0x200, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_xen(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240), 0x2800020, &(0x7f0000000440)={'trans=xen,', {[{@dfltgid={'dfltgid', 0x3d, r1}}, {@cache_mmap}], [{@smackfsfloor={'smackfsfloor', 0x3d, '-[,'}}]}}) 3m26.268398266s ago: executing program 3 (id=1383): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xffffffffffffffff, 0x0) msgsnd(0xffffffffffffffff, &(0x7f0000000000)={0x2}, 0x8, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f040000ff170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x1, 0x0, 0x0, {0x2}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffaf}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r3, 0xc1004110, &(0x7f0000000140)={0x0, [0x3, 0x7, 0x5], [{0x1, 0xffffffff, 0x0, 0x1}, {0x3ff, 0x0, 0x0, 0x1}, {0x0, 0x200}], 0x10}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0xf, @loopback, 0x6}, {0xa, 0x4e20, 0x80, @empty, 0x4}, r5, 0x8}}, 0x48) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000700)={{0x12, 0x1, 0x310, 0x0, 0x28, 0x50, 0x10, 0x50d, 0x121, 0x939b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0x1, 0x20, 0xf8, [{{0x9, 0x4, 0x85, 0x75, 0x0, 0x2, 0x49, 0xd2, 0xc1}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x3, 0x3, 0xd, 0x8, 0xb9}, 0x31, &(0x7f00000001c0)={0x5, 0xf, 0x31, 0x3, [@ssp_cap={0xc, 0x10, 0xa, 0x40, 0x0, 0x9, 0xff0f, 0x9}, @ssp_cap={0xc, 0x10, 0xa, 0x4b, 0x0, 0x998, 0xf11, 0xf8}, @ss_container_id={0x14, 0x10, 0x4, 0xa, "a00c3947686ac35670be8708fb4eb5f3"}]}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$cgroup2(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800010, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00') creat(0x0, 0x71) syz_open_dev$sndctrl(&(0x7f0000000000), 0xffffffffffffffff, 0x0) (async) msgsnd(0xffffffffffffffff, &(0x7f0000000000)={0x2}, 0x8, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$netlink(0x10, 0x3, 0x0) (async) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f040000ff170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) (async) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x1, 0x0, 0x0, {0x2}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffaf}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0) (async) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r3, 0xc1004110, &(0x7f0000000140)={0x0, [0x3, 0x7, 0x5], [{0x1, 0xffffffff, 0x0, 0x1}, {0x3ff, 0x0, 0x0, 0x1}, {0x0, 0x200}], 0x10}) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040), 0x2}}, 0x20) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0xf, @loopback, 0x6}, {0xa, 0x4e20, 0x80, @empty, 0x4}, r5, 0x8}}, 0x48) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, 0x0) (async) syz_usb_connect(0x2, 0x24, &(0x7f0000000700)={{0x12, 0x1, 0x310, 0x0, 0x28, 0x50, 0x10, 0x50d, 0x121, 0x939b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0x1, 0x20, 0xf8, [{{0x9, 0x4, 0x85, 0x75, 0x0, 0x2, 0x49, 0xd2, 0xc1}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x3, 0x3, 0xd, 0x8, 0xb9}, 0x31, &(0x7f00000001c0)={0x5, 0xf, 0x31, 0x3, [@ssp_cap={0xc, 0x10, 0xa, 0x40, 0x0, 0x9, 0xff0f, 0x9}, @ssp_cap={0xc, 0x10, 0xa, 0x4b, 0x0, 0x998, 0xf11, 0xf8}, @ss_container_id={0x14, 0x10, 0x4, 0xa, "a00c3947686ac35670be8708fb4eb5f3"}]}}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mount$cgroup2(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800010, 0x0) (async) chroot(&(0x7f0000000100)='./file0\x00') (async) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) (async) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00') (async) creat(0x0, 0x71) (async) 3m25.329357366s ago: executing program 3 (id=1391): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/image_size', 0x12140, 0x80) sendmsg$AUDIT_SET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40040000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x3e9, 0x10, 0x70bd28, 0x25dfdbfb, {0x15, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x7, 0xff, 0x8c, 0x0, 0x0, 0x80000000}, ["", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c000}, 0x80) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r2, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x6c}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004084}, 0x41) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wg1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'xfrm0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c841}, 0x4008015) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r4) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r4, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r5, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4000090) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x20, r5, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000640), r4) sendmsg$NLBL_UNLABEL_C_STATICLIST(r1, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000110}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xac, r6, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0xd5}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x23}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0xac}, 0x1, 0x0, 0x0, 0x4}, 0x40000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000840)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r7, &(0x7f0000000980)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)={0x84, r8, 0x8, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_USE_MFP={0x8, 0x42, 0x2}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FILS_KEK={0x28, 0xf2, "3bd4839afd5c9f05d03c47ba9f36f8db3a4986f4b2030add9ce75bfb90da8832ee6b4176"}, @NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0x5, 0x5e64, 0x2, 0x7f, 0x8, 0x80, 0x480, 0x404d, 0x0, 0x7, 0x54dc, 0x2, 0xf31, 0x4, 0xef57, 0x79e3]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r10 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r10, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x20, 0x3f7, 0x20, 0x80000001, 0x25dfdbfe, {0x7, 0x0, './file0'}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x44}, 0x40050) r11 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000ac0), 0x440002, 0x0) getsockname$inet6(r11, &(0x7f0000000b00)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000b40)=0x1c) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r11, &(0x7f0000000d40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c00)={0xf8, r12, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5f30}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa83c}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9ebd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x400}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x15}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x46}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x1}, 0x0) close(r10) write$cgroup_int(r0, &(0x7f0000000d80)=0x3, 0x12) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000e00), r0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r11, &(0x7f0000000f80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e40)={0xfc, r13, 0x100, 0x70bd27, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x51}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6, 0x11, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xb17}, {0x6, 0x11, 0xdb}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008004}, 0x8000) openat$null(0xffffffffffffff9c, &(0x7f0000000fc0), 0x40000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r11, 0xc0502100, &(0x7f0000001000)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000010c0)={r14, 0x2, 0xffffffffffffffff, 0xff, 0x80000}) 3m25.013737341s ago: executing program 3 (id=1392): r0 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f906, 0x0, '\x00', @p_u32=0x0}}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="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", 0x2aa}, {&(0x7f0000000140)="f610e61ac81cc3edc86f0500194d27a5a443f10dfd1ecda0fd0ed9a444b7fb76afe3a0002f0a5eafcd3555a6cad574af080de74a37f54ee5f10fe3f42b445293ca980200000000000000ecfd6cc1b3a9a9263506e88c5557069d0ca055991454ec1307b7411892a1beaef9ae54833107eb88b0411b1bc0ba9bc28d0eb6a73ad76be9facd1d9d82b6a3cc2040e84b398d279e50535b6557df8a633cfc7615fca9879b11834eb07eeb4278cab057f89b7464048cf573c21df5", 0xb8}], 0x2, 0x0, 0x0, 0x900}}], 0x1, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @local}, 0x10) sendto$inet(r2, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000200)=0x40) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/92, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r3 = socket(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="44ddffffeb01e10400000010000000000a00000030"], 0x44}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000840) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001900010000000000fbdbdf251d01"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000300)={0x1, 'netpci0\x00'}, 0x18) 3m24.851537777s ago: executing program 32 (id=1392): r0 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f906, 0x0, '\x00', @p_u32=0x0}}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="21ae1baf930b4569b9ddef9797ffd935c7d80e6466b3e4e62dc9603583f5d4b61fbc65b6ac744d7319535e75bf552062e4cfde1ba7ce29263322e18ea9740aa82ca692f123993e57cda00d2b1f4e799bd41e3f76258180fa91a42aaa8b1ebc4e0ea8fb12f2c71e6e5bc57a8e91f254005514721d93c13c5606ae1fea7f31f558d562bd5a8dfb0b9fed873efa221fccffa847cd374c92e6cbb03e6a9de890ce323f000000abcc6c01326d588495b7c1a7db31ec4129e6336f26bb9e0b7552af3cd2d5dda1632799bbc98425c433384d8a8e4071ff39a36dfdfdf05af35a4ddd340cfecd7ec935f4ce7d3e851583ba1cf53a90a7f7bce5703de57ce93ddef7849b30a01de0637e6d5e507b801d32e582e0c2d564539ebfc84c098a23e765552767b122885fb1629e9c180be47da7931bd125b80de15aab0c56a2edf2e0483b87f5ab299dc046076203dea10ccbfc631d5bf4a87ce67004519f248f086346ce6a8a9d181789a59f81d9b7f6781daac3e229914b8b8998c15c3b6302a519331cb05995bc60b7cb872dd3b5b43331c77c5d72e21f7bd2b1a915ff3204e3f20d3a20b22d6a58155b5a4ebf6d1d1cd90c656ecada531c07ff91deb3efa91762cdecfbcc43553750f22ac5c18cc5e8b6f790c2f4e6373af9f98d10e6df49ff8e5cbcbd68e11ed0b967add11410dc2e34f08dbfaf8eb95d4d1153b4c6093192a340eb30fcc71619888c6486746a049585d249efb96b9cace83320b8f96b40ebe3a9a788d05a053380d1026b9434df87a3a387549bcabe88684c4dbf0da9a5212f3dbc8d1dff240856691243b203d7edd4d3cc89a38a6c80fdb1229a01044af7aaecb20d5570ebf24b30bbc6dfc3f70d85cd9f0d60ebd8fedd161d199d9997a0e2d18d1c99bc7158564e0ddb4673055de196535d706d142e1dc7d404583923cb1b286cfc5418884ac7e605d93652dc", 0x2aa}, {&(0x7f0000000140)="f610e61ac81cc3edc86f0500194d27a5a443f10dfd1ecda0fd0ed9a444b7fb76afe3a0002f0a5eafcd3555a6cad574af080de74a37f54ee5f10fe3f42b445293ca980200000000000000ecfd6cc1b3a9a9263506e88c5557069d0ca055991454ec1307b7411892a1beaef9ae54833107eb88b0411b1bc0ba9bc28d0eb6a73ad76be9facd1d9d82b6a3cc2040e84b398d279e50535b6557df8a633cfc7615fca9879b11834eb07eeb4278cab057f89b7464048cf573c21df5", 0xb8}], 0x2, 0x0, 0x0, 0x900}}], 0x1, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @local}, 0x10) sendto$inet(r2, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000200)=0x40) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/92, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r3 = socket(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="44ddffffeb01e10400000010000000000a00000030"], 0x44}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000840) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001900010000000000fbdbdf251d01"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000300)={0x1, 'netpci0\x00'}, 0x18) 1m49.58060908s ago: executing program 4 (id=2096): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="000086dd0203030009000a004000623d885d009c2bfffc000000000000000000000000000000ff0200000000000000000000000000014e224e"], 0xd2) 1m49.331545442s ago: executing program 4 (id=2099): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xffffffffffffffff) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = socket(0x28, 0x5, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x0, 0x5}, 0x8) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000043000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000280)="653665660ffed2ba2100ec660f3066660f3a1771000c66b9630001c00f32f30f7fadd43b0f208466b9850200000f320f3565d6", 0x33}], 0x1, 0x49, &(0x7f00000000c0)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x400011200088}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r5, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x3, 0x1, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x24000001}, 0x1004) r6 = socket$kcm(0x29, 0x2, 0x0) r7 = socket(0xa, 0x3, 0x20) capset(&(0x7f00000002c0), &(0x7f0000000080)={0x0, 0x1, 0x41, 0x7}) chroot(&(0x7f0000000000)='./cgroup\x00') seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000340)={0x2, &(0x7f0000000140)=[{0x30, 0x0, 0x1, 0xa}, {0x6, 0x0, 0x0, 0xffff0001}]}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000340)={0x2, &(0x7f0000000280)=[{0x84, 0x8, 0x40, 0x800}, {0x6, 0x0, 0x0, 0xffff0001}]}) setitimer(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_ringparam={0x33, 0x7f, 0x20000a2e, 0x0, 0x0, 0x3, 0x2000000, 0x0, 0x3000000}}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYRESHEX]) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r10, 0x1, 0x14, &(0x7f0000000040), 0x50) r11 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r11, 0xc0884123, &(0x7f0000000000)) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000000)={0x5, 0x4, 0x0, 0x2}, 0x10) write(r7, &(0x7f0000000080)="2000000300000000000000000000000000acb475cf8a5f860677af2e04c0357d344fd0ad90ff69314de65fe5d9a1740dfc3631550a9d85af911991a94fe3c2f01268f7e7b4b5b9bf487292253ea6dc67291b81756deff62a8a8d5e5bf4deda33f8efcf8abc36dc89933be416164eb55285c115c94782d24cb2bfedf64c9b1b374fee83febd915b7a644a6182440c", 0x8e) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$sock_kcm_SIOCKCMCLONE(r12, 0x89e2, &(0x7f0000000000)={r3}) 1m48.056663498s ago: executing program 4 (id=2107): socket$can_bcm(0x1d, 0x2, 0x2) socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="080086dd0001110004600000a60c6eec00be00443cfffe8000000000000000000000000000aaff020000000000000800000000000001", @ANYRES32=r1], 0xfdef) 1m47.530760573s ago: executing program 4 (id=2109): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x28a02, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x19) ioctl$TIOCGLCKTRMIOS(r2, 0x40085500, &(0x7f0000000100)={0x46, 0x200, 0xee1, 0x3781, 0xa, "a14c0c4837b25ba1055c8b3a9bc480a9edfb67"}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000005c0)=@nl=@kern={0x10, 0x0, 0x0, 0x40}, 0x80, 0x0}, 0x14) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000002c0)=0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b90402", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000580)=ANY=[], 0xfe33) 1m47.388652606s ago: executing program 4 (id=2110): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="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", 0x277}, {0x0}], 0x2, 0x0, 0x0, 0x900}}], 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/92, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1m47.044402112s ago: executing program 4 (id=2114): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}}], 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/92, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1m46.826009872s ago: executing program 33 (id=2114): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}}], 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/92, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 8.508863463s ago: executing program 2 (id=2785): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x8044) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000086dd0203030009000a004000623d885d009c11fffc000000000007000000000000000000ff0200000000000000000000000000014e224e21009c90"], 0xd2) 8.328638795s ago: executing program 2 (id=2786): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = mq_open(&(0x7f00000000c0)='${ \x00', 0x840, 0x8, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 5.593419741s ago: executing program 5 (id=2809): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x8044) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000086dd0203030009000a004000623d885d009c88fffc0000000000000000"], 0xd2) 5.360523435s ago: executing program 5 (id=2811): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x10, 0x100000000002, 0x4) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f00000004c0)) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x8044) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_SUBMITURB(r5, 0xc0105500, &(0x7f00000001c0)=@urb_type_control={0xa1, {}, 0x696, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000002c0)={0xa, @sliced={0x2, [0x800, 0x3, 0x7, 0xfffe, 0x7, 0x9e, 0xffff, 0x4, 0x8, 0xb, 0x0, 0x40, 0x1, 0x90, 0xfffa, 0x8000, 0x80, 0x1, 0x9, 0x7, 0x1, 0x200, 0xff00, 0x8, 0x0, 0xfffd, 0x800, 0x8, 0x5, 0xfffd, 0x5, 0xae, 0x10, 0x7f, 0x5, 0xc, 0x4, 0x5, 0x8, 0x40, 0xaec, 0x6, 0xd, 0x4, 0x1ff, 0xa6, 0x1, 0x7], 0x5}}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r7, 0x84, 0x8, &(0x7f0000000100)=0x5, 0x4) sendto$inet6(r7, &(0x7f0000000500)="95884c37afef", 0x6, 0x4, &(0x7f0000000600)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r10, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0x40000023, 0x0, 0x1800000000000000}]}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'xfrm0\x00', @random="799b63db8a2a"}) write$tun(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="000086dd0203030009000a004000623d885d009c3afffc000000000000000000000000000000ff020000000000000000000000000001"], 0xd2) 5.293675684s ago: executing program 2 (id=2812): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="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", 0x2a1}, {&(0x7f0000000140)="f610e61ac81cc3edc86f0500194d27a5a443f10dfd1ecda0fd0ed9a444b7fb76afe3a0002f0a5eafcd3555a6cad574af080de74a37f54ee5f10fe3f42b445293ca980200000000000000ecfd6cc1b3a9a9263506e88c5557069d0ca055991454ec1307b7411892a1beaef9ae54833107eb88b0411b1bc0ba9bc28d0eb6a73ad76be9facd1d9d82b6a3cc2040e84b398d279e50535b6557df8a633cfc7615fca9879b11834eb07eeb4278cab057f89b7464048cf573", 0xb5}], 0x2, 0x0, 0x0, 0x900}}], 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/92, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x2000000, &(0x7f0000003700)={0x77359400}) 5.203121267s ago: executing program 2 (id=2813): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0x40046210, &(0x7f0000004c00)) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r2, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r1, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, r3, 0x0, 0x1004000, 0x1000, &(0x7f0000ffc000)}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000880)={0x48, 0x2, r2, 0x0, 0x0, 0x0}) ioctl$IOMMU_DESTROY$hwpt(r1, 0x3b80, &(0x7f0000000000)={0x8, r4}) syz_usb_connect(0x2, 0x24, &(0x7f0000000940)=ANY=[@ANYBLOB="120100c15d228cead083ecc72b9006b702a6aaa2403a090126d42c010203010902120001"], &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x9, [{0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x180a}}, {0x4f, &(0x7f0000000040)=@string={0x56, 0x3, "449ae7f5f12a96aeddb162b05fafb03f8b3b29795659521eca2f1378064b51b74dfdc5140c3e5b91859f8fa4901326bc705e61ee29551d5cf5e470bca6a2df472124e5116d46901a018e082c5a"}}, {0xa0, &(0x7f00000000c0)=@string={0xa0, 0x3, "84f0187bc1d8715190392f906587497991b9ebe7caa17d61404a79dc4bb5c218720f1acf37272256bab797dceae3c8bcce23d43753896df3c1971e9f975b462fdd8f4edd00e63d5f0a73b64f1dfd0b4df2e501bc3604297dc40a18bda8977af62e079f42b9c485c008fa8092c9c7a4e1cde46f19d33b52e6b8a21e9c7cf4a2c504a0ddc8bbe7af83213b23f10d1c3234cd230e4867395d36c719769e5e01"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x40e}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x1809}}, {0xda, &(0x7f0000000240)=@string={0xda, 0x3, "0513e368e6e7ad477c9ddee45a68f236176533490355053993e98d178d47050f17ca147175ddc2f16e661239aece0809e543ef96bffbc4058e245988ad1d53d1b4b4d9de24d61f8ed07e097d9155c9b4f3f89a75e664bd837d2f00cf9086e1f42c7f198f9cd45b07a0ace09c598604335ad41196a7eddd31a43b04871f6b6df58beb90e5aa48b1b3f991c0bffef934a6d908fedb100ecc93bc88b7d2934146be64c6fe0285f97432880f27908e84c72f9905be4ddbf75058e45738a14112dc8d4d5e45bf5c2301fbfd7cb48a5ab67de382e3706e5f913ed8"}}, {0xee, &(0x7f0000000340)=@string={0xee, 0x3, "1d89607fefedc79a13b0fe31a2c6cfea7305d7ec03b57f8cd692e19d501ea3903dc46b2f9e73b024c3d6ed3e93b48981896a9f547959a927f2d7c21fc3dd308dfb77ce173d5471a5969a874a8be49bbb287cfa28c3200b9ca8be619e36286f5b3ab9d88cd10a1a27c5b3af4d37acda2146a6f5197b06d7de42d207e64364d74f8b9a649be9eac40b95426ee62d8faf7fcf121d1da6d673e1ba9e8b1a18b32bed10d302f96ee14ff139737dc149cc18addcdbcc567a14e603063d9524b537639e461b598cea75456b2a105a9ce9e2a5b5178ead4355de7ac45e6ac6c2c13fb8f615cd41c152f0a5177c75b199"}}, {0xd2, &(0x7f0000000440)=@string={0xd2, 0x3, "d5f4ff5d7815f7844557b6b51491753d7e3ab2a6b7a7c1e9fe329acc447b2e3764b93d0f3dcac880501009a55815ece87f53c9d10472b691ff10a5a768dc4c27b8ba9a373eb56ae84896f538134652492d4c6d38e8727d6344bd7ac2e27aac819e3cd2b71a1c2d8c461da986aed5a8d75ab1c84bd16972d506f528b7acc7ce5db153effe59e0815ca80310dba770449fe2ac08fce3ecbe8b8a4ea5c527bf4041c1b2c9ce32ed1911ced65773451cf784df29e832174b51a4ac0df12d5261faf51ab946e805a04bb63e01a21bd1793501"}}, {0x101, &(0x7f0000000540)=@string={0x101, 0x3, "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"}}]}) 4.30058138s ago: executing program 5 (id=2819): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x8044) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000086dd0203030009000a004000623d885d009c88fffc0000000000000000"], 0xd2) 4.16022538s ago: executing program 5 (id=2821): r0 = socket$alg(0x26, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') read$FUSE(r1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) socket$xdp(0x2c, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r2, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) read(r2, &(0x7f00000005c0)=""/134, 0x86) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000540)={0x0, 0x800c, 0x100, 0x84, 0x0}, &(0x7f0000000580)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000680)={r4, @in6={{0xa, 0x4e23, 0x10001, @mcast1, 0xd7}}, 0x7, 0x7, 0x4000003, 0x9, 0xc7, 0x3, 0xb}, 0x9c) r5 = syz_pidfd_open(r3, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) setns(r5, 0x10000000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad73364256408b0011021f", 0xb) r6 = accept4(r0, 0x0, 0x0, 0x80800) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000780)={0x8, &(0x7f0000000740)=[{0xf2, 0xe, 0x6, 0x6}, {0x3, 0x5, 0x5, 0x7}, {0x3, 0x53, 0x6, 0x6}, {0xffff, 0x0, 0xf7, 0x3}, {0x2, 0x9, 0x5a, 0x100}, {0x0, 0xb, 0x2, 0x4161e217}, {0x1ff, 0x0, 0x40, 0xfffffc01}, {0x9, 0x75, 0x3, 0xf0}]}) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000640)={0x0, 0x8, 0x4, "0e1d3fdd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_usb_connect$uac1(0x2, 0xec, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xda, 0x3, 0x1, 0x7, 0x90, 0xe, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x3}, [@output_terminal={0x9, 0x24, 0x3, 0x5, 0x100, 0x2, 0x1, 0x1a}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x9f, 0x2, 0x7, 0xe3, "cc1020", "82"}, @as_header={0x7, 0x24, 0x1, 0xeb, 0x8, 0x5}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x80, 0x5, 0x3, "3ed05f37"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x0, 0x2, 0x8, 0x7}, @as_header={0x7, 0x24, 0x1, 0x6, 0x89, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x7f, 0x0, 0x52, {0x7, 0x25, 0x1, 0x81, 0xfe, 0x80}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x3, 0x9, 0x1}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x9, 0x1, 0x2c, 0x73, "a44e4ead"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xf, 0x3, 0x6, 0xe0, "fa98db", "e3"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x9, 0x2, 0x6, 0x7, "cf75", "5364a5"}, @as_header={0x7, 0x24, 0x1, 0x1, 0x9, 0x1}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x80, 0x2, 0x3, "87218f0cd672ab"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0xff, 0xb9, 0xad, {0x7, 0x25, 0x1, 0x81, 0x9}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x59, 0xa0, 0x0, 0x40, 0x5}, 0x4d, &(0x7f0000000180)={0x5, 0xf, 0x4d, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0xd, 0x6, 0x1, 0xdb1}, @ssp_cap={0x20, 0x10, 0xa, 0x2, 0x5, 0x8, 0xf00f, 0x1ff, [0xff0000, 0xc0ff, 0x3f00, 0x4309b3c2603945e2, 0xf0]}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x7, 0x9, 0xb}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x4, 0x8, 0x8001}, @ssp_cap={0x10, 0x10, 0xa, 0x7, 0x1, 0x6, 0x0, 0x3, [0xc00f]}]}, 0x7, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x404b}}, {0x2f, &(0x7f0000000240)=@string={0x2f, 0x3, "f1e19b788b52b4da0600000000000000511b114acaccab34fe5f27ca5887f6c5817d2691ea07d0b5e1637b556d"}}, {0x4, &(0x7f0000000280)=@lang_id={0xffffffffffffff12, 0x3, 0x380a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x100a}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x437}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x827}}, {0x24, &(0x7f0000000380)=@string={0x24, 0x3, "0a389609162c7243184c785e63fcb76aa920ada3ed8b635bf6540a7368796613de23"}}]}) syz_usb_ep_write(r8, 0x2, 0xce, &(0x7f0000000440)="13cd941ee110754c5c056aadb5dd77976af97dc38f4ab5fde506a8001cf4c652f2a98bf90291dc7857f5ad5f72a30a2581c42eeadc1b551be9fa2bfefa77a225c38a6fbb04d6e9d428e62262820c61908a945528172b730199f8991c0c5e61d12a3567ba447880e413be63e58f10e08e97285b594308505765ab5cdf06284e24b75d374ea652a8328ef0a66daa207bd385c29b09ba2f6653f3ff7249e5971f1371a74ffdfd75bf16e0b44ec471ac26914e835ce62c4320d6e99d15479a8af52f8b5ad937f130872811b27f4804ab") 2.096355567s ago: executing program 2 (id=2841): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x14, r1, 0x28543634fae43ad, 0x0, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000054}, 0x0) (fail_nth: 87) 2.071083967s ago: executing program 2 (id=2843): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x190, 0x78, 0x0, 0x0, 0x20000000, 0x11, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000380)={0x14, &(0x7f0000000140)={0x0, 0x31, 0xe6, {0xe6, 0xe, "bfc9ae8e92c4851bc37bf247d0f050b85e7e8c9cdebbf2230c42afcab8381582021317a68d9f4932ac7973c122b3c364f5d7098d21550ddface62e827b2fa4d5196ed9a80e599c2a3f907e4ac1007d5dee1e8f65fd203b50f0747b8f3221685b016d94daadbd3248ed71bd08ae91ab14ed3ec298a547afd88a8c517ee54cd6bf7744d2b08731a8d7e786beb354b2158a491dd93c32472855de358abed436c7ad58e8c4484bff7e487efb14c551f0d6760ca5eea31939f09ccd3970878feed04deb9e657778975fa52ba137d90d512977ea638e90e6605f4b7b6f5d66bab9c8b7da379e77"}}, &(0x7f0000000240)={0x0, 0x3, 0xfe, @string={0xfe, 0x3, "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"}}}, &(0x7f00000005c0)={0x34, &(0x7f00000003c0)={0x40, 0xa, 0xac, "902832ec8243241a42c7ea8beb665dd6277726c6062c1cf066abafb3cb9fb360a8463245fa80ec1a5cc6d37c8089894cc699afd59e5d9846f6c2d423913f951191f7284af5704043811aece3afdde10c263a36c94d67f8fd167825e3205d6ea9ee108b1c47835be0a26b3bf77c94adc6a75106cef86603b3c7b5dd3dad4b94cc93b425da58b14003873963062684b2cda47255b3d9412631c80ec24c562cfa43ed01805288b833ec07c28b99"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000500)={0xc0, 0xa1, 0x4, 0x4}, &(0x7f0000000540)={0x40, 0xa0, 0x4, 0x7}, &(0x7f0000000580)={0xc0, 0xa2, 0x2f, "d31dcb59037a1cff1b33d0863c2181ce3adb6d22323429a90631dc5968fde163b4318cfa9026850b63e545ca6246bf"}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000880)={0x44, &(0x7f0000000640)={0x20, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.965977706s ago: executing program 0 (id=2845): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x8044) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000086dd0203030009000a004000623d885d009c84fffc000000000000000000000000000000ff0200"/51], 0xd2) 1.854349699s ago: executing program 0 (id=2846): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="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", 0x277}, {&(0x7f0000000140)="f610e61ac81cc3edc86f0500194d27a5a443f10dfd1ecda0fd0ed9a444b7fb76afe3a0002f0a5eafcd3555a6cad574af080de74a37f54ee5f10fe3f42b445293ca980200000000000000ecfd6cc1b3a9a9263506e88c5557069d0ca055991454ec1307b7411892a1beaef9ae54833107eb88b0411b1bc0ba9bc28d0eb6a73ad76be9facd1d9d82b6a3cc2040e84b398d279e50535b6557df8a633cfc7615fca9879b11834eb07eeb4278ca", 0xab}], 0x2, 0x0, 0x0, 0x900}}], 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000", 0xe, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/92, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1.780737575s ago: executing program 0 (id=2847): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x8044) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="000086dd0203030009000a004000623d885d009c88fffc0000000000000000"], 0xd2) 1.711878082s ago: executing program 0 (id=2848): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0], [], [0x0, 0x0, 0x0, 0xffffffff]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000180)={r4, 0x80000}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000280)={r3, 0x0, 0x0, 0x0, 0x0, [0x0], [0x0, 0xd2a6], [0xfd, 0x0, 0x401], [0x0, 0x3, 0x400000006, 0x2]}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.state\x00', 0x26e1, 0x0) close(r6) ioctl$SIOCSIFHWADDR(r6, 0x8b26, &(0x7f0000000200)={'sit0\x00'}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000080)={r5}) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010026bd70000400000005000000080009000200000008000c000300000008000b00000000000600010007"], 0x40}}, 0x20) r11 = socket$pppl2tp(0x18, 0x1, 0x1) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = socket$netlink(0x10, 0x3, 0xc) getsockopt$netlink(r13, 0x10e, 0x2, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000044e22008d31324320dcb010203140902120001040020000904e700002001d600"], 0x0) r14 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x30, r14, 0x801, 0x70bd29, 0x0, {0x7}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_IFNAME={0x14}]}, 0x30}}, 0x0) connect$pppl2tp(r11, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) writev(r11, &(0x7f00000000c0)=[{&(0x7f0000000180)="9f", 0x1}], 0x1) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000000a03000000000000000000070000000900010073797a300000000098000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000002e5400128028000180090001006c617374000000001800028008000140ffff00000c000240ffffffffecffffff140001800c000100636f756e7465720004000280140001800c0001006e6f747261636b000400028008000340000001"], 0xe0}, 0x1, 0x0, 0x0, 0x40000c0}, 0x20050800) 1.030973789s ago: executing program 1 (id=2849): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x8044) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'dvmrp1\x00', 0x8000}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000086dd0203030009000a004000623d885d009c3afffc000000000000000000000000000000ff020000000000000000000000000001"], 0xd2) fsync(r1) 972.752513ms ago: executing program 5 (id=2850): socket$can_bcm(0x1d, 0x2, 0x2) socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="080086dd0001110004600000a60c6eec00be00443cfffe8000000000000000000000000000aaff020000000000000000000000000301", @ANYRES32=r1], 0xfdef) 720.907991ms ago: executing program 5 (id=2851): openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6161, 0x4d15, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect$cdc_ncm(0x5, 0x96, &(0x7f0000000140)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x84, 0x2, 0x1, 0x2, 0x50, 0xf7, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "4b02"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x80000001, 0x8001, 0xf, 0x2}, {0x6, 0x24, 0x1a, 0x7, 0x2}, [@dmm={0x7, 0x24, 0x14, 0xfff8, 0x81}, @mdlm={0x15, 0x24, 0x12, 0x5}, @obex={0x5, 0x24, 0x15, 0x2}, @obex={0x5, 0x24, 0x15, 0x6}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0xd, 0x4, 0xfe}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x220, 0x0, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xd3, 0x2b, 0xff}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x74, 0x7, 0x0, 0x40, 0x2}, 0x40, &(0x7f0000000300)={0x5, 0xf, 0x40, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x0, 0xe, 0x7}, @ssp_cap={0x18, 0x10, 0xa, 0x7f, 0x3, 0x0, 0x1e, 0x0, [0x3f00, 0xc0f0, 0xffff0f]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x2c, 0xa5, 0x9a, 0x9cb, 0xb2}, @wireless={0xb, 0x10, 0x1, 0x4, 0x2d, 0x0, 0xe, 0x800, 0x5a}, @ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x861}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x801}}, {0xa4, &(0x7f0000000440)=@string={0xa4, 0x3, "a2e12730e37e534eb7ebe2fb0345293c92d2408f655eedfa8e108328fdfb0017206fd4c309e41f5400b88a18402173f4f59bc609551bd4163f465cb7ab66608fe51593a79405d322cde9f28d916a415fbd32baccf45f21187de48597e5d5d318a36de4b648a36f388121c2d07ddc91125597e55076a441f9d0a36c5b5553b9376ec5a6b1e14b35500b2d76a55c7bc27f0d0215e69d2ba1a4c67daf57dfa1fefa9550"}}]}) syz_usb_disconnect(r1) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$bind(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x20, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x2) close(0x3) clock_adjtime(0x0, &(0x7f0000000500)={0x7df, 0x6b, 0x0, 0x1000, 0x1, 0x9, 0x7, 0x6, 0x9, 0x0, 0x0, 0x7fff, 0x81, 0xfffffffffffffff9, 0x3, 0x6, 0x8000000000000001, 0x4, 0x58fd, 0x3, 0x9, 0x2, 0x6, 0x6, 0xab, 0x5}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000003a40), 0x41, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000540)='/sys/kernel/cpu_byteorder', 0x408100, 0x91) ioctl$SNAPSHOT_SET_SWAP_AREA(r3, 0x400c330d, &(0x7f0000000000)={0x9, 0x6b2a}) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x4c, @string={0x4c, 0x3, "8613e8434cff47ed1950fcd742e6482a9df451127286f1fc7057d5947127468aa250631084bcbf1ed4ec462c1c38e9dfd8f2f964d3437e1cfbfb7feec5abdf64383b10591f0dd21c0841"}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003040001bb0403010c"], 0x0, 0x0, 0x0}, 0x0) 667.609195ms ago: executing program 1 (id=2852): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="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", 0x277}, {&(0x7f0000000140)="f610e61ac81cc3edc86f0500194d27a5a443f10dfd1ecda0fd0ed9a444b7fb76afe3a0002f0a5eafcd3555a6cad574af080de74a37f54ee5f10fe3f42b445293ca980200000000000000ecfd6cc1b3a9a9263506e88c5557069d0ca055991454ec1307b7411892a1beaef9ae54833107eb88b0411b1bc0ba9bc28d0eb6a73ad76be9facd1d9d82b6a3cc2040e84b398d279e50535b6557df8a633cfc7615fca9879b11834eb07eeb4278cab057f89b746404", 0xb2}], 0x2, 0x0, 0x0, 0x900}}], 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x66}, {&(0x7f0000000280)=""/76, 0x4c}, {&(0x7f0000000400)=""/92, 0x5c}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 571.459057ms ago: executing program 1 (id=2853): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="21ae1baf930b4569b9ddef9797ffd935c7d80e6466b3e4e62dc9603583f5d4b61fbc65b6ac744d7319535e75bf552062e4cfde1ba7ce29263322e18ea9740aa82ca692f123993e57cda00d2b1f4e799bd41e3f76258180fa91a42aaa8b1ebc4e0ea8fb12f2c71e6e5bc57a8e91f254005514721d93c13c5606ae1fea7f31f558d562bd5a8dfb0b9fed873efa221fccffa847cd374c92e6cbb03e6a9de890ce323f000000abcc6c01326d588495b7c1a7db31ec4129e6336f26bb9e0b7552af3cd2d5dda1632799bbc98425c433384d8a8e4071ff39a36dfdfdf05af35a4ddd340cfecd7ec935f4ce7d3e851583ba1cf53a90a7f7bce5703de57ce93ddef7849b30a01de0637e6d5e507b801d32e582e0c2d564539ebfc84c098a23e765552767b122885fb1629e9c180be47da7931bd125b80de15aab0c56a2edf2e0", 0x13c}, {&(0x7f0000000140)="f610e61ac81cc3edc86f0500194d27a5a443f10dfd1ecda0fd0ed9a444b7fb76afe3a0002f0a5eafcd3555a6cad574af080de74a37f54ee5f10fe3f42b445293ca980200000000000000ecfd6cc1b3a9a9263506e88c5557069d0ca055991454ec1307b7411892a1beaef9ae54833107eb88b0411b1bc0ba9bc28d0eb6a73ad76be9facd1d9d82b6a3cc2040e84b398d279e50535b65", 0x96}], 0x2, 0x0, 0x0, 0x900}}], 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/92, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 403.472614ms ago: executing program 1 (id=2854): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="21ae1baf930b4569b9ddef9797ffd935c7d80e6466b3e4e62dc9603583f5d4b61fbc65b6ac744d7319535e75bf552062e4cfde1ba7ce29263322e18ea9740aa82ca692f123993e57cda00d2b1f4e799bd41e3f76258180fa91a42aaa8b1ebc4e0ea8fb12f2c71e6e5bc57a8e91f254005514721d93c13c5606ae1fea7f31f558d562bd5a8dfb0b9fed873efa221fccffa847cd374c92e6cbb03e6a9de890ce323f000000abcc6c01326d588495b7c1a7db31ec4129e6336f26bb9e0b7552af3cd2d5dda1632799bbc98425c433384d8a8e4071ff39a36dfdfdf05af35a4ddd340cfecd7ec935f4ce7d3e851583ba1cf53a90a7f7bce5703de57ce93ddef7849b30a01de0637e6d5e507b801d32e582e0c2d564539ebfc84c098a23e765552767b122885fb1629e9c180be47da7931bd125b80de15aab0c56a2edf2e0483b87f5ab299dc046076203dea10ccbfc631d5bf4a87ce67004519f248f086346ce6a8a9d181789a59f81d9b7f6781daac3e229914b8b8998c15c3b6302a519331cb05995bc60b7cb872dd3b5b43331c77c5d72e21f7bd2b1a915ff3204e3f20d3a20b22d6a58155b5a4ebf6d1d1cd90c656ecada531c07ff91deb3efa91762cdecfbcc43553750f22ac5c18cc5e8b6f790c2f4e6373af9f98d10e6df49ff8e5cbcbd68e11ed0b967add11410dc2e34f08dbfaf8eb95d4d1153b4c6093192a340eb30fcc71619888c6486746a049585d249efb96b9cace83320b8f96b40ebe3a9a788d05a053380d1026b9434df87a3a387549bcabe88684c4dbf0da9a5212f3dbc8d1dff240856691243b203d7edd4d3cc89a38a6c80fdb1229a01044af7aaecb20d5570ebf24b30bbc6dfc3f70d85cd9f0d60ebd8fedd161d199d9997a0e2d18d1c99bc7158564e0ddb4673055de196535d706d142e1dc7d404583923cb1b286cfc5418", 0x2a1}, {&(0x7f0000000140)="f610e61ac81cc3edc86f0500194d27a5a443f10dfd1ecda0fd0ed9a444b7fb76afe3a0002f0a5eafcd3555a6cad574af080de74a37f54ee5f10fe3f42b445293ca980200000000000000ecfd6cc1b3a9a9263506e88c5557069d0ca055991454ec1307b7411892a1beaef9ae54833107eb88b0411b1bc0ba9bc28d0eb6a73ad76be9facd1d9d82b6a3cc2040e84b398d279e50535b6557df8a633cfc7615fca9879b11834eb07eeb4278cab057f89b7464048cf573", 0xb5}], 0x2, 0x0, 0x0, 0x900}}], 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/92, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x9000000, &(0x7f0000003700)={0x77359400}) 240.698512ms ago: executing program 1 (id=2855): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x8044) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="000086dd0203030009000a004000623d885d009c84fffc000000000000000000000000000000ff0200"/51], 0xd2) 140.801519ms ago: executing program 0 (id=2856): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="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", 0x277}, {&(0x7f0000000140)="f610e61ac81cc3edc86f0500194d27a5a443f10dfd1ecda0fd0ed9a444b7fb76afe3a0002f0a5eafcd3555a6cad574af080de74a37f54ee5f10fe3f42b445293ca980200000000000000ecfd6cc1b3a9a9263506e88c5557069d0ca055991454ec1307b7411892a1beaef9ae54833107eb88b0411b1bc0ba9bc28d0eb6a73ad76be9facd1d9d82b6a3cc2040e84b398d279e50535b6557df8a633cfc7615fca9879b11834eb07eeb4278ca", 0xab}], 0x2, 0x0, 0x0, 0x900}}], 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000", 0xe, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/92, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 84.743521ms ago: executing program 0 (id=2857): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fc"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = mq_open(&(0x7f00000000c0)='${ \x00', 0x840, 0x8, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=2858): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfffffffffffffd22, 0x2004050, &(0x7f000005ffe4)={0xa, 0x4e23, 0x3, @loopback, 0xffffffdf}, 0xff9b) syz_usb_control_io$printer(r0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x40, 0xd, 0x1c, {0x1c, 0x23, "15806997a7b250d6caee032e6de53580995b9375cdf4aeeec4ca"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41d}}}, &(0x7f0000000400)={0x34, &(0x7f0000000240)={0x0, 0x10, 0x57, "601654e6c3dfc684f66d1c69dcb57086dad6e8331dd9e342bd6c63b51152ac1c9b1db89ea261c609baac8279386b47ca16548aef8466ed6c6bf449ac753fe101ab61668cebc816e889e9b3db18afabd4b3dd1039ad3ec7"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x7f}, &(0x7f00000004c0)={0x20, 0x0, 0xaf, {0xad, "0b09aa87e6d4275fabb1aad835c20afb8f75978b9cea25182ff1eebfbc51aa0d5619d1a828a6d1a4c8f7f45914d2ba71e0d8cae43d0a893694ecd09551ccd88265ebec387705b941678208a9a394e9732073f611dcb5cd897231278221da9f8160abd168a5e44f98c9401ec63c0f9bac26c0b2e622771a9bee98915e92b3ba22bba5a27428c893c202530c95263774c60a8183a39fafcace5e1ee36e8b58305f2abfcc6a4d6fc13fe942e12032"}}, &(0x7f0000000300)={0x20, 0x1, 0x1, 0x2f}, &(0x7f0000000340)={0x20, 0x0, 0x1, 0x6}}) syz_usb_control_io$sierra_net(r0, &(0x7f0000000440)={0x14, &(0x7f0000000580)={0x40, 0x2, 0x65, {0x65, 0x7, "dba20c8ec48df491140b45683b034febd4e38ca7f98ab9b157386cef3ece37a1a82d53c46a0d4cda890c12efc5f6d111874d9f5802c44fc309d12f51f98619e1127a672c79366efcea0a8ae4209d94a7a398cd58afbd3c168ebd95d855bae73e17a8f2"}}, &(0x7f0000000600)={0x0, 0x3, 0xc1, @string={0xc1, 0x3, "f0809645d625cb0ae0ecd8459108f8298406e928e420e95c3b83731a197bd9073c7c6fd2b2ad0327cc56ba7fa7d515ae8fd96217d56603c57c14d09445d159947d23cfb40d489b02eb74b7805ec867a7d41a4c00fe3d33be2ce5c7f39eb149fa79bc0b99dc938208b9597a61eb448ce6e7516cb94e5dbf7336b337295990bf54ec3034a276f11a8c677b2faf642088a28c0bbce57b29e910b9be330ba160c05af5c2f8b6e0353c957839b75486a166a6f910522ec8525835afb4aa119d66a7"}}}, &(0x7f0000000bc0)={0x1c, &(0x7f0000000700)={0x0, 0x10, 0x5, "82d77102ec"}, &(0x7f0000000740)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000b80)}) kernel console output (not intermixed with test programs): 461.637094][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 461.644024][ C0] yealink 2-1:36.0: urb_irq_callback - urb status -71 [ 461.644054][ C0] yealink 2-1:36.0: unexpected response 0 [ 461.649987][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 461.656863][ C0] yealink 2-1:36.0: urb_irq_callback - urb status -71 [ 461.656893][ C0] yealink 2-1:36.0: unexpected response 0 [ 461.663833][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 461.669666][ C0] yealink 2-1:36.0: urb_irq_callback - urb status -71 [ 461.669698][ C0] yealink 2-1:36.0: unexpected response 0 [ 461.676615][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 461.683813][ C0] yealink 2-1:36.0: urb_irq_callback - urb status -71 [ 461.683841][ C0] yealink 2-1:36.0: unexpected response 0 [ 461.691050][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 461.705087][ C0] yealink 2-1:36.0: urb_irq_callback - urb status -71 [ 461.705115][ C0] yealink 2-1:36.0: unexpected response 0 [ 461.711003][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 461.717908][ C0] yealink 2-1:36.0: urb_irq_callback - urb status -71 [ 461.717933][ C0] yealink 2-1:36.0: unexpected response 0 [ 461.724849][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 461.730704][ C0] yealink 2-1:36.0: urb_irq_callback - urb status -71 [ 461.730733][ C0] yealink 2-1:36.0: unexpected response 0 [ 461.737711][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 461.744941][ C0] yealink 2-1:36.0: urb_irq_callback - urb status -71 [ 461.744975][ C0] yealink 2-1:36.0: unexpected response 0 [ 461.757688][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 461.764644][ C0] yealink 2-1:36.0: urb_irq_callback - urb status -71 [ 461.764677][ C0] yealink 2-1:36.0: unexpected response 0 [ 461.770610][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 461.777496][ C0] yealink 2-1:36.0: urb_irq_callback - urb status -71 [ 461.777528][ C0] yealink 2-1:36.0: unexpected response 0 [ 461.784414][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 461.791235][ C0] yealink 2-1:36.0: urb_irq_callback - urb status -71 [ 461.791265][ C0] yealink 2-1:36.0: unexpected response 0 [ 461.798141][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 461.805511][ C0] yealink 2-1:36.0: urb_irq_callback - urb status -71 [ 461.805543][ C0] yealink 2-1:36.0: unexpected response 0 [ 461.811939][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 461.818908][ C0] yealink 2-1:36.0: urb_irq_callback - urb status -71 [ 461.818935][ C0] yealink 2-1:36.0: unexpected response 0 [ 461.825867][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 461.831746][ C0] yealink 2-1:36.0: urb_irq_callback - urb status -71 [ 461.831775][ C0] yealink 2-1:36.0: unexpected response 0 [ 461.838654][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 461.845548][ C0] yealink 2-1:36.0: urb_irq_callback - urb status -71 [ 461.845575][ C0] yealink 2-1:36.0: unexpected response 0 [ 461.852263][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 461.866086][ C0] yealink 2-1:36.0: urb_irq_callback - urb status -71 [ 461.866114][ C0] yealink 2-1:36.0: unexpected response 0 [ 461.871991][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 461.878891][ C0] yealink 2-1:36.0: urb_irq_callback - urb status -71 [ 461.878923][ C0] yealink 2-1:36.0: unexpected response 0 [ 461.885844][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 461.891698][ C0] yealink 2-1:36.0: urb_irq_callback - urb status -71 [ 461.891725][ C0] yealink 2-1:36.0: unexpected response 0 [ 461.899534][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 461.906460][ C0] yealink 2-1:36.0: urb_irq_callback - urb status -71 [ 461.906483][ C0] yealink 2-1:36.0: unexpected response 0 [ 461.912339][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 461.919227][ C0] yealink 2-1:36.0: urb_irq_callback - urb status -71 [ 461.919255][ C0] yealink 2-1:36.0: unexpected response 0 [ 461.924694][T12842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.926427][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 461.963698][T12842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.965959][ C0] yealink 2-1:36.0: urb_irq_callback - urb status -71 [ 462.329756][ C0] yealink 2-1:36.0: unexpected response 0 [ 462.339410][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 462.346711][ C0] yealink 2-1:36.0: urb_irq_callback - urb status -71 [ 462.353512][ C0] yealink 2-1:36.0: unexpected response 0 [ 462.359598][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 462.366725][ C0] yealink 2-1:36.0: urb_irq_callback - urb status -71 [ 462.373523][ C0] yealink 2-1:36.0: unexpected response 0 [ 462.379460][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 462.386440][ C0] yealink 2-1:36.0: urb_irq_callback - urb status -71 [ 462.393225][ C0] yealink 2-1:36.0: unexpected response 0 [ 462.399667][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 462.409144][ C0] yealink 2-1:36.0: urb_irq_callback - urb status -71 [ 462.416035][ C0] yealink 2-1:36.0: unexpected response 0 [ 462.422006][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 462.429438][ C0] yealink 2-1:36.0: urb_irq_callback - urb status -71 [ 462.436329][ C0] yealink 2-1:36.0: unexpected response 0 [ 462.442298][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 462.449645][ C0] yealink 2-1:36.0: urb_irq_callback - urb status -71 [ 462.456434][ C0] yealink 2-1:36.0: unexpected response 0 [ 462.462051][T12845] usb usb8: usbfs: process 12845 (syz.0.2403) did not claim interface 0 before use [ 462.462607][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 462.478639][ C0] yealink 2-1:36.0: urb_irq_callback - urb status -71 [ 462.485444][ C0] yealink 2-1:36.0: unexpected response 0 [ 462.492640][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 462.505752][ C0] yealink 2-1:36.0: urb_irq_callback - urb status -71 [ 462.512576][ C0] yealink 2-1:36.0: unexpected response 0 [ 462.519265][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 462.526285][ C0] yealink 2-1:36.0: urb_irq_callback - urb status -71 [ 462.533074][ C0] yealink 2-1:36.0: unexpected response 0 [ 462.539041][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 462.546093][ C0] yealink 2-1:36.0: urb_irq_callback - urb status -71 [ 462.552886][ C0] yealink 2-1:36.0: unexpected response 0 [ 462.559197][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 462.568263][ C0] yealink 2-1:36.0: urb_irq_callback - urb status -71 [ 462.575066][ C0] yealink 2-1:36.0: unexpected response 0 [ 462.581144][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 462.588124][ C0] yealink 2-1:36.0: urb_irq_callback - urb status -71 [ 462.594914][ C0] yealink 2-1:36.0: unexpected response 0 [ 462.600938][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 462.608650][ C0] yealink 2-1:36.0: urb_irq_callback - urb status -71 [ 462.615450][ C0] yealink 2-1:36.0: unexpected response 0 [ 462.621878][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 462.628881][ C0] yealink 2-1:36.0: urb_irq_callback - urb status -71 [ 462.635664][ C0] yealink 2-1:36.0: unexpected response 0 [ 462.641776][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 462.648766][ C0] yealink 2-1:36.0: urb_irq_callback - urb status -71 [ 462.655572][ C0] yealink 2-1:36.0: unexpected response 0 [ 462.663384][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 462.670552][ C0] yealink 2-1:36.0: urb_irq_callback - urb status -71 [ 462.677469][ C0] yealink 2-1:36.0: unexpected response 0 [ 462.683483][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 462.690465][ C0] yealink 2-1:36.0: urb_irq_callback - urb status -71 [ 462.697253][ C0] yealink 2-1:36.0: unexpected response 0 [ 462.701351][T12847] FAULT_INJECTION: forcing a failure. [ 462.701351][T12847] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 462.703184][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 462.724372][ C0] yealink 2-1:36.0: urb_irq_callback - urb status -71 [ 462.731314][ C0] yealink 2-1:36.0: unexpected response 0 [ 462.737258][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 462.744315][ C0] yealink 2-1:36.0: urb_irq_callback - urb status -71 [ 462.751116][ C0] yealink 2-1:36.0: unexpected response 0 [ 462.757020][T12847] CPU: 1 UID: 0 PID: 12847 Comm: syz.5.2404 Not tainted syzkaller #0 PREEMPT(full) [ 462.757047][T12847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 462.757059][T12847] Call Trace: [ 462.757067][T12847] [ 462.757076][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 462.757075][T12847] dump_stack_lvl+0x189/0x250 [ 462.757100][T12847] ? __pfx____ratelimit+0x10/0x10 [ 462.757126][T12847] ? __pfx_dump_stack_lvl+0x10/0x10 [ 462.757144][T12847] ? __pfx__printk+0x10/0x10 [ 462.757173][T12847] ? fs_reclaim_acquire+0x7d/0x100 [ 462.757205][T12847] should_fail_ex+0x414/0x560 [ 462.757234][T12847] prepare_alloc_pages+0x213/0x610 [ 462.757264][T12847] __alloc_frozen_pages_noprof+0x123/0x370 [ 462.757289][T12847] ? __lock_acquire+0xab9/0xd20 [ 462.757313][T12847] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 462.757352][T12847] ? policy_nodemask+0x27c/0x720 [ 462.757372][T12847] ? __lock_acquire+0xab9/0xd20 [ 462.757397][T12847] alloc_pages_mpol+0x232/0x4a0 [ 462.757426][T12847] vma_alloc_folio_noprof+0xe4/0x200 [ 462.757453][T12847] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 462.757489][T12847] folio_prealloc+0x30/0x180 [ 462.757514][T12847] __handle_mm_fault+0x2a8b/0x5400 [ 462.757551][T12847] ? __pfx___handle_mm_fault+0x10/0x10 [ 462.757599][T12847] ? find_vma+0xe7/0x160 [ 462.757617][T12847] ? __pfx_find_vma+0x10/0x10 [ 462.757638][T12847] handle_mm_fault+0x40a/0x8e0 [ 462.757669][T12847] do_user_addr_fault+0x764/0x1390 [ 462.757708][T12847] exc_page_fault+0x82/0x100 [ 462.757738][T12847] asm_exc_page_fault+0x26/0x30 [ 462.757757][T12847] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 462.757780][T12847] Code: 27 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 462.757798][T12847] RSP: 0018:ffffc9001a2774d8 EFLAGS: 00050202 [ 462.757816][T12847] RAX: ffff88805d22c001 RBX: ffff88805d22c4b1 RCX: 0000000000000157 [ 462.757831][T12847] RDX: 0000000000000000 RSI: ffff88805d22c4f1 RDI: 0000200000001000 [ 462.757845][T12847] RBP: ffffc9001a277650 R08: ffff88805d22c647 R09: 1ffff1100ba458c8 [ 462.757860][T12847] R10: dffffc0000000000 R11: ffffed100ba458c9 R12: dffffc0000000000 [ 462.757875][T12847] R13: 0000000000000197 R14: 00007ffffffff000 R15: 0000200000001157 [ 462.757906][T12847] _copy_to_iter+0x60a/0x1790 [ 462.757950][T12847] ? __pfx__copy_to_iter+0x10/0x10 [ 462.757975][T12847] ? __skb_try_recv_from_queue+0x2b2/0x730 [ 462.758005][T12847] ? __skb_try_recv_datagram+0x3da/0x4e0 [ 462.758034][T12847] __skb_datagram_iter+0xf8/0x990 [ 462.758058][T12847] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 462.758091][T12847] skb_copy_datagram_iter+0xc5/0x230 [ 462.758118][T12847] netlink_recvmsg+0x2ab/0xa30 [ 462.758147][T12847] ? __pfx_netlink_recvmsg+0x10/0x10 [ 462.758171][T12847] ? aa_sock_msg_perm+0xf1/0x1d0 [ 462.758201][T12847] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 462.758226][T12847] ? security_socket_recvmsg+0x7e/0x2e0 [ 462.758247][T12847] ? __pfx_netlink_recvmsg+0x10/0x10 [ 462.758266][T12847] sock_recvmsg+0x229/0x270 [ 462.758296][T12847] ____sys_recvmsg+0x1c9/0x460 [ 462.758327][T12847] ? __pfx_____sys_recvmsg+0x10/0x10 [ 462.758359][T12847] ? import_iovec+0x74/0xa0 [ 462.758381][T12847] ___sys_recvmsg+0x1b5/0x510 [ 462.758409][T12847] ? __pfx____sys_recvmsg+0x10/0x10 [ 462.758456][T12847] ? __fget_files+0x3a0/0x420 [ 462.758492][T12847] do_recvmmsg+0x307/0x770 [ 462.758523][T12847] ? __pfx_do_recvmmsg+0x10/0x10 [ 462.758558][T12847] ? _copy_from_user+0x94/0xb0 [ 462.758598][T12847] __x64_sys_recvmmsg+0x1af/0x240 [ 462.758623][T12847] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 462.758649][T12847] ? do_syscall_64+0xbe/0xfa0 [ 462.758682][T12847] do_syscall_64+0xfa/0xfa0 [ 462.758708][T12847] ? lockdep_hardirqs_on+0x9c/0x150 [ 462.758736][T12847] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.758755][T12847] ? clear_bhb_loop+0x60/0xb0 [ 462.758779][T12847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.758797][T12847] RIP: 0033:0x7f950118eba9 [ 462.758813][T12847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 462.758830][T12847] RSP: 002b:00007f950208f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 462.758848][T12847] RAX: ffffffffffffffda RBX: 00007f95013d5fa0 RCX: 00007f950118eba9 [ 462.758863][T12847] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 462.758877][T12847] RBP: 00007f950208f090 R08: 0000200000003700 R09: 0000000000000000 [ 462.758890][T12847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 462.758902][T12847] R13: 00007f95013d6038 R14: 00007f95013d5fa0 R15: 00007ffe5c3b7328 [ 462.758935][T12847] [ 463.217393][ C0] yealink 2-1:36.0: urb_irq_callback - urb status -71 [ 463.224216][ C0] yealink 2-1:36.0: unexpected response 0 [ 463.231133][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 463.238409][ C0] yealink 2-1:36.0: urb_irq_callback - urb status -71 [ 463.245310][ C0] yealink 2-1:36.0: unexpected response 0 [ 463.251261][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 463.258304][ C0] yealink 2-1:36.0: urb_irq_callback - urb status -71 [ 463.265089][ C0] yealink 2-1:36.0: unexpected response 0 [ 463.270967][T11766] usb 2-1: USB disconnect, device number 75 [ 463.271051][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 463.283718][ C0] yealink 2-1:36.0: urb_ctl_callback - usb_submit_urb failed -19 [ 463.503481][ T5945] usb 1-1: device not accepting address 80, error -71 [ 463.659949][T11766] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 463.758885][T12867] netlink: 'syz.2.2413': attribute type 21 has an invalid length. [ 463.780266][T12867] netlink: 'syz.2.2413': attribute type 6 has an invalid length. [ 463.788110][T12867] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2413'. [ 463.824254][T11766] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 463.837696][T11766] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 463.841967][T12872] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2415'. [ 463.854223][T11766] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.869997][T12872] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2415'. [ 463.876860][T11766] usb 2-1: config 0 descriptor?? [ 463.892690][T11766] pwc: Askey VC010 type 2 USB webcam detected. [ 464.322927][T11766] pwc: recv_control_msg error -32 req 02 val 2b00 [ 464.348094][T11766] pwc: recv_control_msg error -32 req 02 val 2700 [ 464.366253][T11766] pwc: recv_control_msg error -32 req 02 val 2c00 [ 464.376328][T11766] pwc: recv_control_msg error -32 req 04 val 1000 [ 464.392956][T11766] pwc: recv_control_msg error -32 req 04 val 1300 [ 464.400249][T12883] netlink: 168 bytes leftover after parsing attributes in process `syz.5.2419'. [ 464.411763][T11766] pwc: recv_control_msg error -32 req 04 val 1400 [ 464.432892][T11766] pwc: recv_control_msg error -32 req 02 val 2000 [ 464.454750][T11766] pwc: recv_control_msg error -32 req 02 val 2100 [ 464.464149][T12838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.481949][T12838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.508195][T11766] pwc: recv_control_msg error -32 req 04 val 1500 [ 464.518327][T12887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.543966][T11766] pwc: recv_control_msg error -32 req 02 val 2500 [ 464.552016][T12887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.576281][T11766] pwc: recv_control_msg error -32 req 02 val 2400 [ 464.592902][T11766] pwc: recv_control_msg error -32 req 02 val 2600 [ 464.600267][T12887] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2420'. [ 464.621529][T11766] pwc: recv_control_msg error -32 req 02 val 2900 [ 464.642593][T12893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.660170][T11766] pwc: recv_control_msg error -32 req 02 val 2800 [ 464.679598][T12893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.931147][T11766] pwc: recv_control_msg error -71 req 04 val 1200 [ 464.951579][T11766] videodev: could not get a free minor [ 464.957135][T11766] pwc: Failed to register as video device (-23). [ 464.981487][T11766] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -23 [ 465.019458][T11766] usb 2-1: USB disconnect, device number 76 [ 465.173157][T12915] blk_print_req_error: 25 callbacks suppressed [ 465.173179][T12915] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 465.193083][T12915] buffer_io_error: 25 callbacks suppressed [ 465.193103][T12915] Buffer I/O error on dev nbd0, logical block 0, async page read [ 465.208925][T12915] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 465.219080][T12915] Buffer I/O error on dev nbd0, logical block 1, async page read [ 465.227835][T12915] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 465.236951][T12915] Buffer I/O error on dev nbd0, logical block 2, async page read [ 465.245433][T12915] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 465.254794][T12915] Buffer I/O error on dev nbd0, logical block 3, async page read [ 465.262933][T12915] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 465.273333][T12915] Buffer I/O error on dev nbd0, logical block 0, async page read [ 465.281441][T12915] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 465.290958][T12915] Buffer I/O error on dev nbd0, logical block 1, async page read [ 465.298830][T12915] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 465.308041][T12915] Buffer I/O error on dev nbd0, logical block 2, async page read [ 465.316737][T12915] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 465.326335][T12915] Buffer I/O error on dev nbd0, logical block 3, async page read [ 465.335358][T12915] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 465.344835][T12915] Buffer I/O error on dev nbd0, logical block 0, async page read [ 465.353678][T12915] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 465.369930][T12915] Buffer I/O error on dev nbd0, logical block 1, async page read [ 465.379917][ T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 465.403138][T12915] ldm_validate_partition_table(): Disk read failed. [ 465.415118][T12919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.417591][T12915] Dev nbd0: unable to read RDB block 0 [ 465.427295][T12919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.436734][T12915] nbd0: unable to read partition table [ 465.539963][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 465.551535][ T10] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 465.560798][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.577213][ T10] usb 6-1: config 0 descriptor?? [ 465.730022][T11766] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 465.785896][ T10] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 465.797371][ T10] usb 6-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 465.806943][ T10] usb 6-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 465.891629][T11766] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 465.902235][T11766] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 465.911348][T11766] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.922649][T11766] usb 2-1: config 0 descriptor?? [ 465.932726][T11766] pwc: Askey VC010 type 2 USB webcam detected. [ 466.340440][T12935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.351974][T11766] pwc: recv_control_msg error -32 req 02 val 2b00 [ 466.370653][T12935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.378631][T11766] pwc: recv_control_msg error -32 req 02 val 2700 [ 466.393899][T11766] pwc: recv_control_msg error -32 req 02 val 2c00 [ 466.414638][T11766] pwc: recv_control_msg error -32 req 04 val 1000 [ 466.430834][T11766] pwc: recv_control_msg error -32 req 04 val 1300 [ 466.450026][T11766] pwc: recv_control_msg error -32 req 04 val 1400 [ 466.457105][T11766] pwc: recv_control_msg error -32 req 02 val 2000 [ 466.498294][T11766] pwc: recv_control_msg error -32 req 02 val 2100 [ 466.543874][T11920] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 466.553812][T11920] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 466.564981][T11920] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 466.575041][T11920] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 466.596184][T11920] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 466.709146][T11766] pwc: recv_control_msg error -32 req 02 val 2500 [ 466.735167][T11766] pwc: recv_control_msg error -32 req 02 val 2400 [ 466.762211][T11766] pwc: recv_control_msg error -32 req 02 val 2600 [ 466.770031][T12936] lo speed is unknown, defaulting to 1000 [ 466.781140][T11766] pwc: recv_control_msg error -32 req 02 val 2900 [ 466.793449][ T5908] usb 3-1: USB disconnect, device number 22 [ 466.819999][T11766] pwc: recv_control_msg error -32 req 02 val 2800 [ 466.893408][ T60] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.003149][ T60] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.040330][T11766] pwc: recv_control_msg error -71 req 04 val 1200 [ 467.048791][T11766] pwc: Registered as video103. [ 467.057343][T11766] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input98 [ 467.110130][T11766] usb 2-1: USB disconnect, device number 77 [ 467.258912][ T60] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.356073][ T60] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.385381][T12936] chnl_net:caif_netlink_parms(): no params data found [ 467.558020][T12936] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.575473][T12936] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.584852][T12936] bridge_slave_0: entered allmulticast mode [ 467.594783][T12936] bridge_slave_0: entered promiscuous mode [ 467.664214][T12936] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.672124][T12936] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.679495][T12936] bridge_slave_1: entered allmulticast mode [ 467.688714][T12936] bridge_slave_1: entered promiscuous mode [ 468.170097][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 468.211091][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 468.226727][ T60] bond0 (unregistering): Released all slaves [ 468.247642][T12936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 468.264193][T12936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 468.542079][T12936] team0: Port device team_slave_0 added [ 468.636018][T12936] team0: Port device team_slave_1 added [ 468.651175][ T5870] Bluetooth: hci0: command tx timeout [ 468.757234][T12936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 468.766252][T12936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 468.792214][ C1] vkms_vblank_simulate: vblank timer overrun [ 468.829849][T12936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 468.882796][T12936] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 468.897632][T12936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 468.923667][ C1] vkms_vblank_simulate: vblank timer overrun [ 468.940013][T12936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 469.189253][T12936] hsr_slave_0: entered promiscuous mode [ 469.190158][ T5908] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 469.196454][T12936] hsr_slave_1: entered promiscuous mode [ 469.216309][T12936] debugfs: 'hsr0' already exists in 'hsr' [ 469.224971][T12936] Cannot create hsr debugfs directory [ 469.274503][ T60] hsr_slave_0: left promiscuous mode [ 469.283408][ T60] hsr_slave_1: left promiscuous mode [ 469.289578][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 469.330107][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 469.355292][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 469.364065][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 469.369953][T11766] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 469.379173][ T5908] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 469.409891][ T5908] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 469.416741][ T60] veth1_macvtap: left promiscuous mode [ 469.427540][ T60] veth0_macvtap: left promiscuous mode [ 469.429957][ T5908] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 469.447176][ T60] veth1_vlan: left promiscuous mode [ 469.461604][ T60] veth0_vlan: left promiscuous mode [ 469.462452][ T5908] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 469.482722][ T5908] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.495143][T12990] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 469.573698][T11766] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 469.602921][T11766] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 469.626713][T11766] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.658998][T11766] usb 2-1: config 0 descriptor?? [ 469.688292][T11766] pwc: Askey VC010 type 2 USB webcam detected. [ 470.094440][T11766] pwc: recv_control_msg error -32 req 02 val 2b00 [ 470.106197][T11766] pwc: recv_control_msg error -32 req 02 val 2700 [ 470.117364][T11766] pwc: recv_control_msg error -32 req 02 val 2c00 [ 470.135275][T11766] pwc: recv_control_msg error -32 req 04 val 1000 [ 470.143359][T11766] pwc: recv_control_msg error -32 req 04 val 1300 [ 470.151679][T11766] pwc: recv_control_msg error -32 req 04 val 1400 [ 470.165942][T11766] pwc: recv_control_msg error -32 req 02 val 2000 [ 470.182614][T12996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.196888][T11766] pwc: recv_control_msg error -32 req 02 val 2100 [ 470.206046][T12996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.228676][T11766] pwc: recv_control_msg error -32 req 04 val 1500 [ 470.238020][T11766] pwc: recv_control_msg error -32 req 02 val 2500 [ 470.249404][T11766] pwc: recv_control_msg error -32 req 02 val 2400 [ 470.268804][T11766] pwc: recv_control_msg error -32 req 02 val 2600 [ 470.287486][ T60] team0 (unregistering): Port device team_slave_1 removed [ 470.338961][ T60] team0 (unregistering): Port device team_slave_0 removed [ 470.478558][T11766] pwc: recv_control_msg error -32 req 02 val 2800 [ 470.732874][ T5870] Bluetooth: hci0: command tx timeout [ 470.764827][T11766] pwc: recv_control_msg error -71 req 04 val 1200 [ 470.777991][T11766] pwc: Registered as video103. [ 470.794575][T11766] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input100 [ 470.846332][T11766] usb 2-1: USB disconnect, device number 78 [ 471.254994][ T5908] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 471.282138][ T5908] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input99 [ 471.322140][ T5908] usb 1-1: USB disconnect, device number 82 [ 471.328128][ C0] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 471.545230][ T60] IPVS: stop unused estimator thread 0... [ 472.090102][ T5927] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 472.235321][T13047] FAULT_INJECTION: forcing a failure. [ 472.235321][T13047] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 472.267526][ T5927] usb 2-1: Using ep0 maxpacket: 32 [ 472.276194][T12936] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 472.284699][T13047] CPU: 1 UID: 0 PID: 13047 Comm: syz.5.2463 Not tainted syzkaller #0 PREEMPT(full) [ 472.284730][T13047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 472.284744][T13047] Call Trace: [ 472.284752][T13047] [ 472.284761][T13047] dump_stack_lvl+0x189/0x250 [ 472.284785][T13047] ? __pfx____ratelimit+0x10/0x10 [ 472.284815][T13047] ? __pfx_dump_stack_lvl+0x10/0x10 [ 472.284834][T13047] ? __pfx__printk+0x10/0x10 [ 472.284869][T13047] ? __might_fault+0xb0/0x130 [ 472.284902][T13047] should_fail_ex+0x414/0x560 [ 472.284931][T13047] _copy_from_user+0x2d/0xb0 [ 472.284951][T13047] ___sys_recvmsg+0x12e/0x510 [ 472.284980][T13047] ? __pfx____sys_recvmsg+0x10/0x10 [ 472.285029][T13047] ? __pfx_set_normalized_timespec64+0x10/0x10 [ 472.285062][T13047] do_recvmmsg+0x307/0x770 [ 472.285093][T13047] ? __pfx_do_recvmmsg+0x10/0x10 [ 472.285129][T13047] ? _copy_from_user+0x94/0xb0 [ 472.285163][T13047] __x64_sys_recvmmsg+0x1af/0x240 [ 472.285188][T13047] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 472.285216][T13047] ? do_syscall_64+0xbe/0xfa0 [ 472.285248][T13047] do_syscall_64+0xfa/0xfa0 [ 472.285276][T13047] ? lockdep_hardirqs_on+0x9c/0x150 [ 472.285304][T13047] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.285324][T13047] ? clear_bhb_loop+0x60/0xb0 [ 472.285348][T13047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.285368][T13047] RIP: 0033:0x7f950118eba9 [ 472.285383][T13047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 472.285398][T13047] RSP: 002b:00007f950208f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 472.285417][T13047] RAX: ffffffffffffffda RBX: 00007f95013d5fa0 RCX: 00007f950118eba9 [ 472.285431][T13047] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 472.285445][T13047] RBP: 00007f950208f090 R08: 0000200000003700 R09: 0000000000000000 [ 472.285456][T13047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 472.285466][T13047] R13: 00007f95013d6038 R14: 00007f95013d5fa0 R15: 00007ffe5c3b7328 [ 472.285495][T13047] [ 472.495734][ C1] vkms_vblank_simulate: vblank timer overrun [ 472.525172][T12936] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 472.554535][T12936] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 472.558634][ T5927] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 472.572471][ T5927] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 472.576353][T12936] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 472.582278][ T5927] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 472.582304][ T5927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.619149][ T5927] usb 2-1: config 0 descriptor?? [ 472.810010][ T5870] Bluetooth: hci0: command tx timeout [ 473.027927][T12936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 473.186906][T12936] 8021q: adding VLAN 0 to HW filter on device team0 [ 473.246290][ T2981] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.252130][ T5927] usbhid 2-1:0.0: can't add hid device: -71 [ 473.253522][ T2981] bridge0: port 1(bridge_slave_0) entered forwarding state [ 473.275230][ T5927] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 473.294530][ T3027] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.301769][ T3027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 473.313473][ T5927] usb 2-1: USB disconnect, device number 79 [ 473.320737][ T5950] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 473.507559][ T5950] usb 1-1: config index 0 descriptor too short (expected 64844, got 124) [ 473.535191][ T5950] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 473.573084][ T5950] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 473.596670][ T5950] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.628230][ T5950] usb 1-1: Product: syz [ 473.636643][ T5950] usb 1-1: Manufacturer: syz [ 473.646755][ T5950] usb 1-1: SerialNumber: syz [ 473.671248][ T5950] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 473.696333][ T43] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 473.904892][T12936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 474.016453][T12936] veth0_vlan: entered promiscuous mode [ 474.050994][T12936] veth1_vlan: entered promiscuous mode [ 474.180591][T12936] veth0_macvtap: entered promiscuous mode [ 474.245084][T12936] veth1_macvtap: entered promiscuous mode [ 474.304930][T12936] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 474.346741][T12936] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 474.369623][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.403338][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.423640][ T1107] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.440960][ T1107] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.586019][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.617180][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.717130][ T2981] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.754819][ T2981] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.827702][T13120] IPVS: set_ctl: invalid protocol: 29 10.1.1.2:20001 [ 474.900309][ T5870] Bluetooth: hci0: command tx timeout [ 474.970337][ T43] usb 1-1: Service connection timeout for: 256 [ 474.982943][ T43] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 475.027246][ T43] ath9k_htc: Failed to initialize the device [ 475.058206][ T43] usb 1-1: ath9k_htc: USB layer deinitialized [ 475.418808][ T43] usb 1-1: USB disconnect, device number 83 [ 475.708681][T11920] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 475.726355][T11920] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 475.736431][T11920] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 475.744772][T11920] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 475.755319][T11920] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 475.806889][ T2981] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.840894][T13136] lo speed is unknown, defaulting to 1000 [ 475.897089][ T2981] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.993375][ T2981] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.098505][ T2981] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.301557][T13136] chnl_net:caif_netlink_parms(): no params data found [ 476.476212][ T2981] bridge_slave_1: left allmulticast mode [ 476.485567][ T2981] bridge_slave_1: left promiscuous mode [ 476.505210][ T2981] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.552276][ T2981] bridge_slave_0: left promiscuous mode [ 476.558174][ T2981] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.074634][ T2981] tipc: Left network mode [ 477.076333][T13136] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.076481][T13136] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.076651][T13136] bridge_slave_0: entered allmulticast mode [ 477.077765][T13136] bridge_slave_0: entered promiscuous mode [ 477.086302][T13136] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.086418][T13136] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.086621][T13136] bridge_slave_1: entered allmulticast mode [ 477.088351][T13136] bridge_slave_1: entered promiscuous mode [ 477.237063][T13136] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 477.284024][T13136] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 477.411501][T13136] team0: Port device team_slave_0 added [ 477.463263][T13136] team0: Port device team_slave_1 added [ 477.691816][T13136] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 477.698910][T13136] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 477.738630][T13136] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 477.762661][T13136] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 477.774250][T13136] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 477.800231][ C1] vkms_vblank_simulate: vblank timer overrun [ 477.808025][T13136] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 477.834944][ T2981] hsr_slave_0: left promiscuous mode [ 477.851877][ T2981] hsr_slave_1: left promiscuous mode [ 477.852823][ T5870] Bluetooth: hci2: command tx timeout [ 477.858493][ T2981] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 477.889901][ T2981] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 477.908274][ T2981] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 477.922767][ T2981] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 477.970314][T11766] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 477.998572][ T2981] veth1_macvtap: left promiscuous mode [ 478.028346][ T2981] veth0_macvtap: left promiscuous mode [ 478.036966][ T2981] veth1_vlan: left allmulticast mode [ 478.046610][ T2981] veth1_vlan: left promiscuous mode [ 478.055424][ T2981] veth0_vlan: left promiscuous mode [ 478.146031][T11766] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 478.159900][T11766] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 478.183899][T11766] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.211374][T11766] usb 3-1: config 0 descriptor?? [ 478.231687][T11766] pwc: Askey VC010 type 2 USB webcam detected. [ 478.366418][ T2981] team0 (unregistering): Port device macvlan1 removed [ 478.628298][T11766] pwc: recv_control_msg error -32 req 02 val 2b00 [ 478.639229][T11766] pwc: recv_control_msg error -32 req 02 val 2700 [ 478.654032][T11766] pwc: recv_control_msg error -32 req 02 val 2c00 [ 478.664556][T11766] pwc: recv_control_msg error -32 req 04 val 1000 [ 478.674023][T11766] pwc: recv_control_msg error -32 req 04 val 1300 [ 478.684592][T11766] pwc: recv_control_msg error -32 req 04 val 1400 [ 478.692878][T11766] pwc: recv_control_msg error -32 req 02 val 2000 [ 478.702968][T11766] pwc: recv_control_msg error -32 req 02 val 2100 [ 478.712760][T11766] pwc: recv_control_msg error -32 req 04 val 1500 [ 478.721328][ T2981] team0 (unregistering): Port device team_slave_1 removed [ 478.722715][T11766] pwc: recv_control_msg error -32 req 02 val 2500 [ 478.739235][T11766] pwc: recv_control_msg error -32 req 02 val 2400 [ 478.746873][T11766] pwc: recv_control_msg error -32 req 02 val 2600 [ 478.754548][T11766] pwc: recv_control_msg error -32 req 02 val 2900 [ 478.763405][T11766] pwc: recv_control_msg error -32 req 02 val 2800 [ 478.769209][T13190] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2494'. [ 478.802832][ T2981] team0 (unregistering): Port device team_slave_0 removed [ 479.001304][T11766] pwc: recv_control_msg error -71 req 04 val 1200 [ 479.014438][T11766] pwc: Registered as video103. [ 479.036110][T11766] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input101 [ 479.062843][T11766] usb 3-1: USB disconnect, device number 23 [ 479.472711][T13136] hsr_slave_0: entered promiscuous mode [ 479.479028][T13136] hsr_slave_1: entered promiscuous mode [ 479.485304][T13136] debugfs: 'hsr0' already exists in 'hsr' [ 479.491105][T13136] Cannot create hsr debugfs directory [ 479.690018][ T887] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 479.877585][ T887] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 479.914858][ T887] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 479.930777][ T5870] Bluetooth: hci2: command tx timeout [ 479.947508][ T2981] IPVS: stop unused estimator thread 0... [ 479.961272][ T887] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 479.980722][ T887] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 479.994687][ T887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.044538][T13207] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 480.805158][T13136] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 480.833740][T13136] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 480.863237][T13136] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 480.881384][T13136] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 481.287583][T13136] 8021q: adding VLAN 0 to HW filter on device bond0 [ 481.358292][T13136] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.395218][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.402447][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 481.424214][T13162] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.431440][T13162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 481.713451][ T887] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 481.722309][ T5927] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 481.756104][ T887] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input102 [ 481.900641][ T5927] usb 3-1: device descriptor read/64, error -71 [ 481.961965][ T887] usb 1-1: USB disconnect, device number 84 [ 481.962024][ C1] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 482.009999][ T5870] Bluetooth: hci2: command tx timeout [ 482.125879][T13136] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 482.175867][ T5927] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 482.304890][T13136] veth0_vlan: entered promiscuous mode [ 482.319914][ T5927] usb 3-1: device descriptor read/64, error -71 [ 482.357979][T13136] veth1_vlan: entered promiscuous mode [ 482.454199][T13136] veth0_macvtap: entered promiscuous mode [ 482.460179][ T5927] usb usb3-port1: attempt power cycle [ 482.485038][T13136] veth1_macvtap: entered promiscuous mode [ 482.535409][T13136] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 482.554608][T13136] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 482.590020][T11766] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 482.602301][ T9916] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.630644][ T9916] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.651991][ T9916] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.697441][ T9916] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.770383][T11766] usb 1-1: Using ep0 maxpacket: 8 [ 482.791051][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.820081][ T5927] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 482.827670][T11766] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 482.827861][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.851454][T11766] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.859643][T11766] usb 1-1: Product: syz [ 482.866014][T11766] usb 1-1: Manufacturer: syz [ 482.872638][T11766] usb 1-1: SerialNumber: syz [ 482.884789][ T5927] usb 3-1: device descriptor read/8, error -71 [ 482.906449][T11766] usb 1-1: config 0 descriptor?? [ 482.938992][ T1107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.955089][ T1107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.139553][T11766] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 483.159970][ T5927] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 483.191801][ T5927] usb 3-1: device descriptor read/8, error -71 [ 483.305698][ T5927] usb usb3-port1: unable to enumerate USB device [ 483.555208][T11766] usb write operation failed. (-71) [ 483.572828][T11766] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 483.611868][T11766] dvbdev: DVB: registering new adapter (Terratec H7) [ 483.625711][T11766] usb 1-1: media controller created [ 483.640862][T11766] usb read operation failed. (-71) [ 483.646441][T11766] usb write operation failed. (-71) [ 483.665416][T11766] dvb_usb_az6007 1-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 483.699757][T11766] usb 1-1: USB disconnect, device number 85 [ 483.949976][ T24] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 484.089990][ T5870] Bluetooth: hci2: command tx timeout [ 484.103833][ T24] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 484.116662][ T24] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 484.129993][ T24] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 484.142242][ T24] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 484.151694][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.170297][T13338] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 484.485197][ T5927] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 484.652233][ T5927] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 484.663727][ T5927] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 484.672962][ T5927] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.690931][ T5927] usb 1-1: config 0 descriptor?? [ 484.700919][ T5927] pwc: Askey VC010 type 2 USB webcam detected. [ 484.757144][T13352] syzkaller1: entered promiscuous mode [ 484.763415][T13352] syzkaller1: entered allmulticast mode [ 485.009949][T11766] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 485.102607][ T5927] pwc: recv_control_msg error -32 req 02 val 2b00 [ 485.109906][ T5927] pwc: recv_control_msg error -32 req 02 val 2700 [ 485.117172][ T5927] pwc: recv_control_msg error -32 req 02 val 2c00 [ 485.124781][ T5927] pwc: recv_control_msg error -32 req 04 val 1000 [ 485.134437][ T5927] pwc: recv_control_msg error -32 req 04 val 1300 [ 485.144466][ T5927] pwc: recv_control_msg error -32 req 04 val 1400 [ 485.152172][ T5927] pwc: recv_control_msg error -32 req 02 val 2000 [ 485.159124][ T5927] pwc: recv_control_msg error -32 req 02 val 2100 [ 485.166234][ T5927] pwc: recv_control_msg error -32 req 04 val 1500 [ 485.170035][T11766] usb 3-1: Using ep0 maxpacket: 32 [ 485.179061][ T5927] pwc: recv_control_msg error -32 req 02 val 2500 [ 485.181421][T11766] usb 3-1: config 0 has an invalid interface number: 29 but max is 0 [ 485.186741][ T5927] pwc: recv_control_msg error -32 req 02 val 2400 [ 485.193834][T11766] usb 3-1: config 0 has no interface number 0 [ 485.196130][T11766] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=e9.e9 [ 485.206152][ T5927] pwc: recv_control_msg error -32 req 02 val 2600 [ 485.206582][T11766] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.217025][ T5927] pwc: recv_control_msg error -32 req 02 val 2900 [ 485.222843][T11766] usb 3-1: Product: syz [ 485.232221][T13346] blk_print_req_error: 54 callbacks suppressed [ 485.232240][T13346] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 485.238450][T11766] usb 3-1: Manufacturer: syz [ 485.249201][T13346] buffer_io_error: 54 callbacks suppressed [ 485.249217][T13346] Buffer I/O error on dev nbd0, logical block 0, async page read [ 485.259631][T11766] usb 3-1: SerialNumber: syz [ 485.263749][T13346] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 485.290843][T13346] Buffer I/O error on dev nbd0, logical block 1, async page read [ 485.298846][T13346] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 485.299592][T11766] usb 3-1: config 0 descriptor?? [ 485.310079][ T5927] pwc: recv_control_msg error -32 req 02 val 2800 [ 485.321091][T13346] Buffer I/O error on dev nbd0, logical block 2, async page read [ 485.329654][T13346] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 485.335732][T11766] mcba_usb 3-1:0.29: Can't find endpoints [ 485.340726][T13346] Buffer I/O error on dev nbd0, logical block 3, async page read [ 485.354821][T13346] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 485.364395][T13346] Buffer I/O error on dev nbd0, logical block 0, async page read [ 485.377780][T13346] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 485.387534][T13346] Buffer I/O error on dev nbd0, logical block 1, async page read [ 485.396312][T13346] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 485.405587][T13346] Buffer I/O error on dev nbd0, logical block 2, async page read [ 485.415925][T13346] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 485.425639][T13346] Buffer I/O error on dev nbd0, logical block 3, async page read [ 485.434093][T13346] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 485.445264][T13346] Buffer I/O error on dev nbd0, logical block 0, async page read [ 485.454725][T13346] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 485.464849][T13346] Buffer I/O error on dev nbd0, logical block 1, async page read [ 485.475748][T13346] ldm_validate_partition_table(): Disk read failed. [ 485.484182][T13346] Dev nbd0: unable to read RDB block 0 [ 485.493420][T13346] nbd0: unable to read partition table [ 485.525873][ T5927] pwc: recv_control_msg error -71 req 04 val 1200 [ 485.530831][ T5232] ldm_validate_partition_table(): Disk read failed. [ 485.546715][ T5232] Dev nbd0: unable to read RDB block 0 [ 485.548326][ T5927] pwc: Registered as video103. [ 485.561031][ T5232] nbd0: unable to read partition table [ 485.568858][ T5927] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input104 [ 485.589526][ T5232] ldm_validate_partition_table(): Disk read failed. [ 485.591731][ T5927] usb 1-1: USB disconnect, device number 86 [ 485.598882][ T5232] Dev nbd0: unable to read RDB block 0 [ 485.611509][ T5232] nbd0: unable to read partition table [ 485.652822][ T5864] ldm_validate_partition_table(): Disk read failed. [ 485.668150][ T5864] Dev nbd0: unable to read RDB block 0 [ 485.682533][ T5864] nbd0: unable to read partition table [ 485.718662][ T5864] ldm_validate_partition_table(): Disk read failed. [ 485.732156][ T5864] Dev nbd0: unable to read RDB block 0 [ 485.741492][ T5864] nbd0: unable to read partition table [ 485.804028][ T24] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 485.815473][ T24] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input103 [ 485.866117][ T24] usb 2-1: USB disconnect, device number 80 [ 485.872244][ C1] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 486.082126][ T24] usb 3-1: USB disconnect, device number 28 [ 486.980309][T13396] netlink: 'syz.2.2539': attribute type 4 has an invalid length. [ 486.996456][T13396] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2539'. [ 487.011337][T13396] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 487.027561][T11766] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 487.125040][T13398] tmpfs: Bad value for 'mpol' [ 487.200066][T11766] usb 2-1: Using ep0 maxpacket: 16 [ 487.294092][T11766] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 487.322123][T11766] usb 2-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 487.339864][T11766] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.347921][T11766] usb 2-1: Product: syz [ 487.352167][T11766] usb 2-1: Manufacturer: syz [ 487.356775][T11766] usb 2-1: SerialNumber: syz [ 487.371140][T11766] usb 2-1: config 0 descriptor?? [ 487.391311][T11766] cypress_m8 2-1:0.0: Nokia CA-42 V2 Adapter converter detected [ 487.411293][T11766] nokiaca42v2 ttyUSB0: required endpoint is missing [ 487.439986][ T5870] Bluetooth: hci4: Malformed Event: 0x2f [ 487.533729][T13402] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2543'. [ 487.667070][T11766] usb 2-1: USB disconnect, device number 81 [ 487.684583][T11766] cypress_m8 2-1:0.0: device disconnected [ 488.103890][ T5979] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 488.259902][ T5979] usb 3-1: Using ep0 maxpacket: 8 [ 488.281250][ T5979] usb 3-1: config 1 interface 0 altsetting 105 endpoint 0x1 has invalid wMaxPacketSize 0 [ 488.298242][ T5979] usb 3-1: config 1 interface 0 altsetting 105 bulk endpoint 0x1 has invalid maxpacket 0 [ 488.314190][ T5979] usb 3-1: config 1 interface 0 altsetting 105 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 488.333587][ T5979] usb 3-1: config 1 interface 0 has no altsetting 0 [ 488.354958][ T5979] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 488.369369][ T5979] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.383050][ T5979] usb 3-1: Manufacturer: জ擅弊봚뜮Ⲝ躉胒擓籌葒辻騨橹敬↾ᕤ㡃ꖤ퇪ï¤ë¸—첋푴ព팺鸠䂷챊镛Ḳ笑㟪ꎛ⻵â¶ä¨€áŸë½—뭢ꦬ䜉櫼ê¼á’ˆá´«ì²•ì³¯å©ã¤ží™å€¯â“¦ï‹â£—厂 [ 488.410622][ T5979] usb 3-1: SerialNumber: 㿘Ᾱ쟩﬊䫜녖ãŒë¢®ï–n헙ᦶХ籃ï¨ì‘¼îƒ¥á¡¢êŽæ¼¡çšâ›ŠÑ³î¤ä—‰è›»é¢„쾩è¡ç¦³å‹¬ëƒæ€„æ‘䓼䚀袅䢕ãƒï…ƒç’½íœ¢ã¦“ï›è“€î¸ ç»¥à¨¦æ¹¸í—鰄諭 [ 488.541123][T13421] tipc: Enabling of bearer rejected, failed to enable media [ 488.662032][ T5979] usb 3-1: USB disconnect, device number 29 [ 488.790123][ T5927] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 488.960047][ T5927] usb 1-1: Using ep0 maxpacket: 32 [ 488.977971][ T5927] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 488.996249][ T5927] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 489.009410][ T5927] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 489.025421][ T5927] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 489.036436][ T5927] usb 1-1: Product: syz [ 489.060061][ T5927] usb 1-1: Manufacturer: syz [ 489.084475][ T5927] hub 1-1:4.0: USB hub found [ 489.272727][ T5927] hub 1-1:4.0: 2 ports detected [ 489.605741][T13463] FAULT_INJECTION: forcing a failure. [ 489.605741][T13463] name failslab, interval 1, probability 0, space 0, times 0 [ 489.623971][T13463] CPU: 0 UID: 0 PID: 13463 Comm: syz.1.2561 Not tainted syzkaller #0 PREEMPT(full) [ 489.624000][T13463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 489.624013][T13463] Call Trace: [ 489.624023][T13463] [ 489.624032][T13463] dump_stack_lvl+0x189/0x250 [ 489.624057][T13463] ? __pfx____ratelimit+0x10/0x10 [ 489.624085][T13463] ? __pfx_dump_stack_lvl+0x10/0x10 [ 489.624104][T13463] ? __pfx__printk+0x10/0x10 [ 489.624133][T13463] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 489.624166][T13463] should_fail_ex+0x414/0x560 [ 489.624195][T13463] should_failslab+0xa8/0x100 [ 489.624222][T13463] kmem_cache_alloc_noprof+0x74/0x6e0 [ 489.624244][T13463] ? skb_clone+0x212/0x3a0 [ 489.624273][T13463] skb_clone+0x212/0x3a0 [ 489.624299][T13463] __netlink_deliver_tap+0x404/0x850 [ 489.624343][T13463] ? netlink_deliver_tap+0x2e/0x1b0 [ 489.624375][T13463] netlink_deliver_tap+0x19c/0x1b0 [ 489.624407][T13463] netlink_dump+0x92b/0xe90 [ 489.624450][T13463] ? __pfx_netlink_dump+0x10/0x10 [ 489.624496][T13463] ? netlink_recvmsg+0x5b2/0xa30 [ 489.624513][T13463] ? kmem_cache_free+0x19a/0x690 [ 489.624543][T13463] netlink_recvmsg+0x676/0xa30 [ 489.624573][T13463] ? __pfx_netlink_recvmsg+0x10/0x10 [ 489.624590][T13463] ? do_syscall_64+0xfa/0xfa0 [ 489.624618][T13463] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.624652][T13463] ? __pfx_netlink_recvmsg+0x10/0x10 [ 489.624673][T13463] sock_recvmsg_nosec+0x186/0x1c0 [ 489.624702][T13463] ____sys_recvmsg+0x3aa/0x460 [ 489.624735][T13463] ? __pfx_____sys_recvmsg+0x10/0x10 [ 489.624776][T13463] ? import_iovec+0x74/0xa0 [ 489.624800][T13463] ___sys_recvmsg+0x1b5/0x510 [ 489.624823][T13463] ? __pfx____sys_recvmsg+0x10/0x10 [ 489.624878][T13463] ? __pfx_set_normalized_timespec64+0x10/0x10 [ 489.624907][T13463] do_recvmmsg+0x307/0x770 [ 489.624940][T13463] ? __pfx_do_recvmmsg+0x10/0x10 [ 489.624976][T13463] ? _copy_from_user+0x94/0xb0 [ 489.625014][T13463] __x64_sys_recvmmsg+0x1af/0x240 [ 489.625042][T13463] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 489.625070][T13463] ? do_syscall_64+0xbe/0xfa0 [ 489.625103][T13463] do_syscall_64+0xfa/0xfa0 [ 489.625130][T13463] ? lockdep_hardirqs_on+0x9c/0x150 [ 489.625159][T13463] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.625179][T13463] ? clear_bhb_loop+0x60/0xb0 [ 489.625204][T13463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.625224][T13463] RIP: 0033:0x7fd19578eba9 [ 489.625242][T13463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 489.625261][T13463] RSP: 002b:00007fd1966ed038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 489.625283][T13463] RAX: ffffffffffffffda RBX: 00007fd1959d5fa0 RCX: 00007fd19578eba9 [ 489.625299][T13463] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 489.625313][T13463] RBP: 00007fd1966ed090 R08: 0000200000003700 R09: 0000000000000000 [ 489.625327][T13463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 489.625340][T13463] R13: 00007fd1959d6038 R14: 00007fd1959d5fa0 R15: 00007ffe6be7f448 [ 489.625376][T13463] [ 489.979919][ T43] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 490.143683][ T43] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 490.174463][ T43] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 490.184222][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.207458][ T43] usb 3-1: config 0 descriptor?? [ 490.218455][ T43] pwc: Askey VC010 type 2 USB webcam detected. [ 490.296403][ T5927] usb 1-1: USB disconnect, device number 87 [ 490.622705][ T43] pwc: recv_control_msg error -32 req 02 val 2b00 [ 490.630798][ T43] pwc: recv_control_msg error -32 req 02 val 2700 [ 490.637992][ T43] pwc: recv_control_msg error -32 req 02 val 2c00 [ 490.646920][ T43] pwc: recv_control_msg error -32 req 04 val 1000 [ 490.656710][ T43] pwc: recv_control_msg error -32 req 04 val 1300 [ 490.667176][ T43] pwc: recv_control_msg error -32 req 04 val 1400 [ 490.674692][ T43] pwc: recv_control_msg error -32 req 02 val 2000 [ 490.691908][T13460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.700972][T13460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.708821][ T43] pwc: recv_control_msg error -32 req 02 val 2100 [ 490.724704][ T43] pwc: recv_control_msg error -32 req 04 val 1500 [ 490.732139][ T43] pwc: recv_control_msg error -32 req 02 val 2500 [ 490.739416][ T43] pwc: recv_control_msg error -32 req 02 val 2400 [ 490.747432][ T43] pwc: recv_control_msg error -32 req 02 val 2600 [ 490.955248][ T43] pwc: recv_control_msg error -32 req 02 val 2800 [ 491.110095][ T24] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 491.221360][ T43] pwc: recv_control_msg error -71 req 04 val 1200 [ 491.239068][ T43] pwc: Registered as video103. [ 491.258392][ T43] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input105 [ 491.282021][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 491.307753][ T43] usb 3-1: USB disconnect, device number 30 [ 491.320214][ T24] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 491.338528][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.363341][ T24] usb 1-1: config 0 descriptor?? [ 491.392695][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 491.798805][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 491.824723][ T24] pwc: recv_control_msg error -32 req 02 val 2700 [ 491.833947][ T24] pwc: recv_control_msg error -32 req 02 val 2c00 [ 491.854819][ T24] pwc: recv_control_msg error -32 req 04 val 1000 [ 491.862647][ T24] pwc: recv_control_msg error -32 req 04 val 1300 [ 491.870639][ T24] pwc: recv_control_msg error -32 req 04 val 1400 [ 491.888167][ T24] pwc: recv_control_msg error -32 req 02 val 2000 [ 491.899137][ T24] pwc: recv_control_msg error -32 req 02 val 2100 [ 491.906715][ T24] pwc: recv_control_msg error -32 req 04 val 1500 [ 491.914762][ T24] pwc: recv_control_msg error -32 req 02 val 2500 [ 491.924845][ T24] pwc: recv_control_msg error -32 req 02 val 2400 [ 492.050632][T11766] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 492.136949][ T24] pwc: recv_control_msg error -32 req 02 val 2900 [ 492.152480][ T24] pwc: recv_control_msg error -32 req 02 val 2800 [ 492.160428][ T24] pwc: recv_control_msg error -32 req 04 val 1100 [ 492.224018][T11766] usb 3-1: Using ep0 maxpacket: 32 [ 492.240886][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 492.246019][T11766] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 492.256169][ T24] pwc: Registered as video103. [ 492.256277][T11766] usb 3-1: config 0 has no interface number 0 [ 492.273118][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input106 [ 492.282841][T11766] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 492.308035][T11766] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.310829][ T24] usb 1-1: USB disconnect, device number 88 [ 492.330065][T11766] usb 3-1: Product: syz [ 492.334333][T11766] usb 3-1: Manufacturer: syz [ 492.349871][T11766] usb 3-1: SerialNumber: syz [ 492.367698][T11766] usb 3-1: config 0 descriptor?? [ 492.399735][T11766] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 492.412688][T11766] usb 3-1: selecting invalid altsetting 1 [ 492.418454][T11766] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 492.440053][T11766] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 492.450681][T11766] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 492.458994][T11766] usb 3-1: media controller created [ 492.486689][T11766] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 492.616072][T13485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.626053][T13485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.636292][T11766] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 492.644626][T11766] zl10353_read_register: readreg error (reg=127, ret==-71) [ 492.667398][T11766] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 492.734953][T11766] usb 3-1: USB disconnect, device number 31 [ 493.139876][ T5979] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 493.293464][ T5870] Bluetooth: hci1: Malformed Event: 0x2f [ 493.331661][ T5979] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 493.344996][ T5979] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 493.356492][ T5979] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 493.370973][ T5979] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 493.380463][ T5979] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.407603][T13488] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 493.458478][T13496] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2575'. [ 493.790046][ T24] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 493.941798][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 493.953335][ T24] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 493.962495][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.974207][ T24] usb 2-1: config 0 descriptor?? [ 493.984054][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 494.389211][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 494.413916][ T24] pwc: recv_control_msg error -32 req 02 val 2700 [ 494.435903][ T24] pwc: recv_control_msg error -32 req 02 val 2c00 [ 494.455153][ T24] pwc: recv_control_msg error -32 req 04 val 1000 [ 494.470954][ T24] pwc: recv_control_msg error -32 req 04 val 1300 [ 494.481038][ T24] pwc: recv_control_msg error -32 req 04 val 1400 [ 494.499200][ T24] pwc: recv_control_msg error -32 req 02 val 2000 [ 494.512989][ T24] pwc: recv_control_msg error -32 req 02 val 2100 [ 494.527634][ T24] pwc: recv_control_msg error -32 req 04 val 1500 [ 494.538224][ T24] pwc: recv_control_msg error -32 req 02 val 2500 [ 494.547868][ T24] pwc: recv_control_msg error -32 req 02 val 2400 [ 494.781950][ T24] pwc: recv_control_msg error -32 req 02 val 2900 [ 494.798462][ T24] pwc: recv_control_msg error -32 req 02 val 2800 [ 494.826752][ T24] pwc: recv_control_msg error -32 req 04 val 1100 [ 494.884180][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 494.893530][ T24] pwc: Registered as video103. [ 494.904662][ T5870] Bluetooth: hci0: Malformed Event: 0x2f [ 494.923805][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input108 [ 494.973584][ T24] usb 2-1: USB disconnect, device number 82 [ 495.015857][ T5979] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 495.036991][ T5868] udevd[5868]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 495.041657][ T5979] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input107 [ 495.057599][ T5870] Bluetooth: hci2: command 0x0406 tx timeout [ 495.086926][T13532] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2589'. [ 495.150254][ C0] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 495.158737][ T5979] usb 1-1: USB disconnect, device number 89 [ 495.586769][T13542] binder: 13541:13542 unknown command 0 [ 495.594199][T13542] binder: 13541:13542 ioctl c0306201 200000000080 returned -22 [ 496.380029][ T5979] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 496.437464][ T1107] team0: left allmulticast mode [ 496.450463][ T1107] C: left allmulticast mode [ 496.455101][ T1107] team_slave_1: left allmulticast mode [ 496.461685][ T1107] geneve0: left allmulticast mode [ 496.467198][ T1107] bridge0: port 3(team0) entered disabled state [ 496.482398][ T1107] bridge_slave_1: left allmulticast mode [ 496.490111][ T1107] bridge_slave_1: left promiscuous mode [ 496.496075][ T1107] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.512735][ T1107] bridge_slave_0: left promiscuous mode [ 496.522315][ T1107] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.560867][ T5979] usb 1-1: Using ep0 maxpacket: 32 [ 496.567840][ T5979] usb 1-1: config 0 has an invalid interface number: 172 but max is 0 [ 496.590009][ T5979] usb 1-1: config 0 has no interface number 0 [ 496.596155][ T5979] usb 1-1: config 0 interface 172 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 496.632561][ T5979] usb 1-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 496.640140][ T5927] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 496.652142][ T5979] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.669809][ T5979] usb 1-1: Product: syz [ 496.674184][ T5979] usb 1-1: Manufacturer: syz [ 496.679226][ T5979] usb 1-1: SerialNumber: syz [ 496.705274][ T5979] usb 1-1: config 0 descriptor?? [ 496.729485][ T5979] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 496.800027][ T24] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 496.817121][ T5927] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 496.836673][ T5927] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 496.847002][ T5927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.867234][ T5927] usb 3-1: config 0 descriptor?? [ 496.904390][ T5927] pwc: Askey VC010 type 2 USB webcam detected. [ 496.981436][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 496.997810][ T24] usb 2-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 497.024264][ T24] usb 2-1: config 6 interface 0 altsetting 0 has an endpoint descriptor with address 0xEC, changing to 0x8C [ 497.036436][ T24] usb 2-1: config 6 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 497.065432][ T24] usb 2-1: config 6 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 497.083490][ T24] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 497.105302][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.114353][ T24] usb 2-1: Product: syz [ 497.118829][ T24] usb 2-1: Manufacturer: syz [ 497.144577][ T24] usb 2-1: SerialNumber: syz [ 497.168827][ T24] hso 2-1:6.0: Can't find BULK OUT endpoint [ 497.204322][ T1107] geneve0 (unregistering): left promiscuous mode [ 497.223452][ T1107] team0: Port device geneve0 removed [ 497.363806][ T5927] pwc: recv_control_msg error -32 req 02 val 2b00 [ 497.390651][T13303] usb 2-1: USB disconnect, device number 83 [ 497.397760][ T5927] pwc: recv_control_msg error -32 req 02 val 2700 [ 497.424787][ T5927] pwc: recv_control_msg error -32 req 02 val 2c00 [ 497.455332][ T5927] pwc: recv_control_msg error -32 req 04 val 1000 [ 497.467931][ T5927] pwc: recv_control_msg error -32 req 04 val 1300 [ 497.491287][ T5927] pwc: recv_control_msg error -32 req 04 val 1400 [ 497.503971][ T5927] pwc: recv_control_msg error -32 req 02 val 2000 [ 497.512640][ T5927] pwc: recv_control_msg error -32 req 02 val 2100 [ 497.527178][ T5927] pwc: recv_control_msg error -32 req 04 val 1500 [ 497.538116][ T5927] pwc: recv_control_msg error -32 req 02 val 2500 [ 497.550436][ T5927] pwc: recv_control_msg error -32 req 02 val 2400 [ 497.627404][ T1107] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 497.640802][ T5979] input: gspca_pac7302 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input109 [ 497.650646][ T1107] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 497.684819][ T1107] bond0 (unregistering): Released all slaves [ 497.758846][ T5927] pwc: recv_control_msg error -32 req 02 val 2900 [ 497.774252][ T5927] pwc: recv_control_msg error -32 req 02 val 2800 [ 497.787465][ T5927] pwc: recv_control_msg error -32 req 04 val 1100 [ 497.840053][T13561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.869470][T13561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 497.934385][ T5927] pwc: recv_control_msg error -71 req 04 val 1200 [ 497.950032][ T5927] videodev: could not get a free minor [ 497.955528][ T5927] pwc: Failed to register as video device (-23). [ 497.971297][ T5927] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -23 [ 497.988342][ T43] usb 1-1: USB disconnect, device number 90 [ 498.055555][ T5927] usb 3-1: USB disconnect, device number 32 [ 498.600247][T11766] usb 2-1: new full-speed USB device number 84 using dummy_hcd [ 498.782343][T11766] usb 2-1: unable to get BOS descriptor or descriptor too short [ 498.817234][T11766] usb 2-1: not running at top speed; connect to a high speed hub [ 498.836471][T11766] usb 2-1: config 106 has an invalid interface number: 8 but max is 0 [ 498.847382][T11766] usb 2-1: config 106 has no interface number 0 [ 498.861880][T11766] usb 2-1: config 106 interface 8 has no altsetting 0 [ 498.875275][T11766] usb 2-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=93.dd [ 498.888263][T11766] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.917853][T11766] usb 2-1: Product: syz [ 498.924935][T11766] usb 2-1: Manufacturer: syz [ 498.929566][T11766] usb 2-1: SerialNumber: syz [ 499.151448][T11766] kalmia 2-1:106.8 (unnamed net_device) (uninitialized): Error sending init packet. Status -22 [ 499.164401][T11766] kalmia 2-1:106.8: probe with driver kalmia failed with error -22 [ 499.181220][T11766] usb 2-1: USB disconnect, device number 84 [ 499.300465][ T5927] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 499.416509][ T1107] hsr_slave_0: left promiscuous mode [ 499.423823][ T1107] hsr_slave_1: left promiscuous mode [ 499.429680][ T1107] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 499.438065][ T1107] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 499.447297][ T1107] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 499.452861][ T5927] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 499.455408][ T1107] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 499.475074][ T5927] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 499.486721][ T5927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.497741][ T1107] veth0_macvtap: left promiscuous mode [ 499.504033][ T1107] veth1_vlan: left promiscuous mode [ 499.508694][ T5927] usb 3-1: config 0 descriptor?? [ 499.509505][ T1107] veth0_vlan: left promiscuous mode [ 499.519544][ T5927] pwc: Askey VC010 type 2 USB webcam detected. [ 499.616268][ T1107] pim6reg (unregistering): left allmulticast mode [ 499.888714][T13639] binder: 13636:13639 ioctl 40046210 0 returned -14 [ 499.937621][ T5927] pwc: recv_control_msg error -32 req 02 val 2b00 [ 499.946086][ T5927] pwc: recv_control_msg error -32 req 02 val 2700 [ 499.953635][ T5927] pwc: recv_control_msg error -32 req 02 val 2c00 [ 499.962561][ T5927] pwc: recv_control_msg error -32 req 04 val 1000 [ 499.970564][ T5927] pwc: recv_control_msg error -32 req 04 val 1300 [ 499.977969][ T5927] pwc: recv_control_msg error -32 req 04 val 1400 [ 499.989903][ T5927] pwc: recv_control_msg error -32 req 02 val 2000 [ 500.009746][ T5927] pwc: recv_control_msg error -32 req 02 val 2100 [ 500.018760][T13627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.028151][T13627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.045112][ T5927] pwc: recv_control_msg error -32 req 04 val 1500 [ 500.053888][ T5927] pwc: recv_control_msg error -32 req 02 val 2500 [ 500.066771][ T5927] pwc: recv_control_msg error -32 req 02 val 2400 [ 500.084242][ T5927] pwc: recv_control_msg error -32 req 02 val 2600 [ 500.223867][ T1107] team_slave_1 (unregistering): left promiscuous mode [ 500.235219][ T1107] team0 (unregistering): Port device team_slave_1 removed [ 500.294137][ T5927] pwc: recv_control_msg error -32 req 02 val 2800 [ 500.313592][ T1107] C (unregistering): left promiscuous mode [ 500.325073][ T1107] team0 (unregistering): Port device C removed [ 500.555663][ T5927] pwc: recv_control_msg error -71 req 04 val 1200 [ 500.568949][ T5927] pwc: Registered as video103. [ 500.597210][ T5927] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input110 [ 500.644331][ T5927] usb 3-1: USB disconnect, device number 33 [ 501.051295][T13649] Invalid ELF header len 16 [ 501.110011][T13652] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2627'. [ 501.130380][T13652] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2627'. [ 501.547982][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.554463][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.731031][ T43] usb 1-1: new full-speed USB device number 91 using dummy_hcd [ 501.740217][ T5927] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 501.893244][ T5927] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 501.905496][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 501.916846][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 501.930516][ T5927] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 501.942487][ T43] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 501.956676][ T5927] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 501.971463][ T5927] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 501.981043][ T43] usb 1-1: New USB device found, idVendor=045e, idProduct=0095, bcdDevice= 0.00 [ 501.991377][ T5927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.001055][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.015102][ T43] usb 1-1: config 0 descriptor?? [ 502.020653][T13669] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 502.442734][T13667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.456491][T13667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.466384][ T43] hid-generic 0003:045E:0095.001B: unbalanced collection at end of report description [ 502.476653][ T43] hid-generic 0003:045E:0095.001B: probe with driver hid-generic failed with error -22 [ 502.486534][ T887] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 502.652192][ T887] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 502.662716][ T887] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 502.666042][T11766] usb 1-1: USB disconnect, device number 91 [ 502.678487][ T887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.693756][ T887] usb 2-1: config 0 descriptor?? [ 502.703262][ T887] pwc: Askey VC010 type 2 USB webcam detected. [ 503.105963][ T887] pwc: recv_control_msg error -32 req 02 val 2b00 [ 503.113217][ T887] pwc: recv_control_msg error -32 req 02 val 2700 [ 503.120639][ T887] pwc: recv_control_msg error -32 req 02 val 2c00 [ 503.127628][ T887] pwc: recv_control_msg error -32 req 04 val 1000 [ 503.134951][ T887] pwc: recv_control_msg error -32 req 04 val 1300 [ 503.141962][ T887] pwc: recv_control_msg error -32 req 04 val 1400 [ 503.148894][ T887] pwc: recv_control_msg error -32 req 02 val 2000 [ 503.157897][ T887] pwc: recv_control_msg error -32 req 02 val 2100 [ 503.165729][ T887] pwc: recv_control_msg error -32 req 04 val 1500 [ 503.179967][ T887] pwc: recv_control_msg error -32 req 02 val 2500 [ 503.187228][ T887] pwc: recv_control_msg error -32 req 02 val 2400 [ 503.259035][T13694] comedi comedi0: Minor 47 could not be opened [ 503.395634][ T887] pwc: recv_control_msg error -32 req 02 val 2900 [ 503.408999][ T887] pwc: recv_control_msg error -32 req 02 val 2800 [ 503.420919][ T887] pwc: recv_control_msg error -32 req 04 val 1100 [ 503.432039][ T887] pwc: recv_control_msg error -71 req 04 val 1200 [ 503.446155][ T887] pwc: Registered as video103. [ 503.473003][ T887] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input112 [ 503.522596][ T887] usb 2-1: USB disconnect, device number 85 [ 503.625069][ T5927] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 503.650943][ T5927] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input111 [ 503.700284][ T5927] usb 3-1: USB disconnect, device number 34 [ 503.706570][ C1] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 504.219929][ T5927] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 504.299492][T13724] loop8: detected capacity change from 0 to 8 [ 504.303070][T13723] netlink: 'syz.2.2658': attribute type 1 has an invalid length. [ 504.316217][ T5868] Dev loop8: unable to read RDB block 8 [ 504.317123][T13723] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2658'. [ 504.323451][ T5868] loop8: unable to read partition table [ 504.337218][ T5868] loop8: partition table beyond EOD, truncated [ 504.346834][T13724] Dev loop8: unable to read RDB block 8 [ 504.359033][T13724] loop8: unable to read partition table [ 504.366330][T13724] loop8: partition table beyond EOD, truncated [ 504.373020][T13724] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 504.390177][ T5927] usb 1-1: Using ep0 maxpacket: 8 [ 504.399104][T13721] netlink: 'syz.2.2658': attribute type 1 has an invalid length. [ 504.407275][T13721] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2658'. [ 504.409665][ T5927] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 504.417270][T13721] workqueue: Failed to create a rescuer kthread for wq "phy4": -EINTR [ 504.451356][ T5927] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 504.472508][ T5927] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 504.482056][ T5927] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.336813][ T30] audit: type=1326 audit(1757516583.546:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13756 comm="syz.2.2671" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f241c98eba9 code=0x0 [ 505.428375][T11920] Bluetooth: hci1: Malformed Event: 0x2f [ 505.485459][T13764] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2673'. [ 505.599932][T11766] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 505.761351][T11766] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 505.772164][T11766] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 505.781456][T11766] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.792487][T11766] usb 2-1: config 0 descriptor?? [ 505.802404][T11766] pwc: Askey VC010 type 2 USB webcam detected. [ 506.205302][T11766] pwc: recv_control_msg error -32 req 02 val 2b00 [ 506.219902][T11766] pwc: recv_control_msg error -32 req 02 val 2700 [ 506.229703][T11766] pwc: recv_control_msg error -32 req 02 val 2c00 [ 506.237065][T11766] pwc: recv_control_msg error -32 req 04 val 1000 [ 506.250593][T11766] pwc: recv_control_msg error -32 req 04 val 1300 [ 506.259508][T11766] pwc: recv_control_msg error -32 req 04 val 1400 [ 506.273475][T11766] pwc: recv_control_msg error -32 req 02 val 2000 [ 506.292136][T11766] pwc: recv_control_msg error -32 req 02 val 2100 [ 506.312934][T13760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.335331][T13760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.348260][T11766] pwc: recv_control_msg error -32 req 04 val 1500 [ 506.359117][T11766] pwc: recv_control_msg error -32 req 02 val 2500 [ 506.366728][T11766] pwc: recv_control_msg error -32 req 02 val 2400 [ 506.375159][T11766] pwc: recv_control_msg error -32 req 02 val 2600 [ 506.595311][T11766] pwc: recv_control_msg error -32 req 02 val 2800 [ 506.862243][T11766] pwc: recv_control_msg error -71 req 04 val 1200 [ 506.873270][T11766] pwc: Registered as video103. [ 506.882035][T11766] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input113 [ 506.910216][T11766] usb 2-1: USB disconnect, device number 86 [ 506.975769][T13303] usb 1-1: USB disconnect, device number 92 [ 507.358498][T11920] Bluetooth: hci4: Malformed Event: 0x2f [ 507.416775][T13789] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2682'. [ 507.952106][T11766] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 508.109897][T11766] usb 2-1: Using ep0 maxpacket: 8 [ 508.116796][T11766] usb 2-1: unable to get BOS descriptor or descriptor too short [ 508.126340][T11766] usb 2-1: config 17 has an invalid interface number: 8 but max is -1 [ 508.134569][T11766] usb 2-1: config 17 has 1 interface, different from the descriptor's value: 0 [ 508.143581][T11766] usb 2-1: config 17 has no interface number 0 [ 508.149928][T11766] usb 2-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid maxpacket 95, setting to 64 [ 508.160676][T11766] usb 2-1: config 17 interface 8 has no altsetting 0 [ 508.170181][T11766] usb 2-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 508.181511][T11766] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.189611][T11766] usb 2-1: Product: syz [ 508.194116][T11766] usb 2-1: Manufacturer: syz [ 508.198822][T11766] usb 2-1: SerialNumber: syz [ 508.599054][T11766] usb 2-1: selecting invalid altsetting 0 [ 508.623769][T11766] usb 2-1: USB disconnect, device number 87 [ 508.655171][ T5868] udevd[5868]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.8/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 508.689924][ T887] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 508.820387][ T5908] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 508.840014][ T887] usb 1-1: Using ep0 maxpacket: 8 [ 508.846552][ T887] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 508.855001][ T887] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 508.865422][ T887] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 508.874567][ T887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.980043][ T5908] usb 3-1: Using ep0 maxpacket: 8 [ 508.994970][ T5908] usb 3-1: config 162 has an invalid interface number: 84 but max is 2 [ 509.006390][ T5908] usb 3-1: config 162 has an invalid interface number: 3 but max is 2 [ 509.016760][ T5908] usb 3-1: config 162 has no interface number 0 [ 509.025784][ T5908] usb 3-1: config 162 has no interface number 1 [ 509.034132][ T5908] usb 3-1: config 162 interface 84 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 509.050616][ T5908] usb 3-1: config 162 interface 2 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 509.061897][ T5908] usb 3-1: config 162 interface 2 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 509.074076][ T5908] usb 3-1: config 162 interface 2 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 509.094466][ T5908] usb 3-1: config 162 interface 2 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 509.109395][ T5908] usb 3-1: config 162 interface 2 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 509.123195][ T5908] usb 3-1: config 162 interface 84 has no altsetting 0 [ 509.130669][ T5908] usb 3-1: config 162 interface 2 has no altsetting 0 [ 509.137676][ T5908] usb 3-1: config 162 interface 3 has no altsetting 0 [ 509.147597][ T5908] usb 3-1: New USB device found, idVendor=0e8d, idProduct=763f, bcdDevice=9b.23 [ 509.157166][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.166670][ T5908] usb 3-1: Product: syz [ 509.171301][ T5908] usb 3-1: Manufacturer: syz [ 509.175933][ T5908] usb 3-1: SerialNumber: syz [ 509.478263][T11920] Bluetooth: hci3: Opcode 0x0c03 failed: -71 [ 509.495374][ T5908] usb 3-1: USB disconnect, device number 35 [ 510.309876][ T5927] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 510.496409][ T5927] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 510.506675][ T5927] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 510.516343][ T5927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.528182][ T5927] usb 2-1: config 0 descriptor?? [ 510.540617][ T5927] pwc: Askey VC010 type 2 USB webcam detected. [ 510.580821][ T24] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 510.759966][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 510.769449][ T24] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 510.781270][ T24] usb 3-1: config 0 has no interface number 0 [ 510.787437][ T24] usb 3-1: config 0 interface 41 has no altsetting 0 [ 510.797977][ T24] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 510.807802][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.825874][ T24] usb 3-1: Product: syz [ 510.830414][ T24] usb 3-1: Manufacturer: syz [ 510.836305][ T24] usb 3-1: SerialNumber: syz [ 510.845432][ T24] usb 3-1: config 0 descriptor?? [ 510.853265][ T24] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -22 [ 510.942210][ T5927] pwc: recv_control_msg error -32 req 02 val 2b00 [ 510.950135][ T5927] pwc: recv_control_msg error -32 req 02 val 2700 [ 510.957628][ T5927] pwc: recv_control_msg error -32 req 02 val 2c00 [ 510.965477][ T5927] pwc: recv_control_msg error -32 req 04 val 1000 [ 510.973284][ T5927] pwc: recv_control_msg error -32 req 04 val 1300 [ 510.990530][ T5927] pwc: recv_control_msg error -32 req 04 val 1400 [ 511.008361][ T5927] pwc: recv_control_msg error -32 req 02 val 2000 [ 511.015996][ T5927] pwc: recv_control_msg error -32 req 02 val 2100 [ 511.024841][ T5927] pwc: recv_control_msg error -32 req 04 val 1500 [ 511.036882][ T5927] pwc: recv_control_msg error -32 req 02 val 2500 [ 511.046525][ T5927] pwc: recv_control_msg error -32 req 02 val 2400 [ 511.064730][T13837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2704'. [ 511.077983][T13837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.087068][T13837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.275774][ T5927] pwc: recv_control_msg error -32 req 02 val 2900 [ 511.283132][ T5927] pwc: recv_control_msg error -32 req 02 val 2800 [ 511.294712][ T5927] pwc: recv_control_msg error -71 req 04 val 1100 [ 511.301672][ T5927] pwc: recv_control_msg error -71 req 04 val 1200 [ 511.309232][ T5927] pwc: Registered as video103. [ 511.317757][ T5927] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input114 [ 511.341822][ T5927] usb 2-1: USB disconnect, device number 88 [ 511.442545][T11766] usb 1-1: USB disconnect, device number 93 [ 511.633063][T11766] usb 3-1: USB disconnect, device number 36 [ 512.301505][ T5979] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 512.304244][T13876] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2723'. [ 512.442699][T13881] netlink: 'syz.2.2725': attribute type 10 has an invalid length. [ 512.461303][ T5979] usb 1-1: Using ep0 maxpacket: 8 [ 512.462290][T13881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 512.470424][ T5979] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 512.480963][T13881] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 512.487458][ T5979] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 512.502756][ T5979] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 512.512309][ T5979] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.530948][T13881] netlink: 'syz.2.2725': attribute type 10 has an invalid length. [ 512.538808][T13881] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2725'. [ 512.548700][T13881] batadv0: entered promiscuous mode [ 512.554239][T13881] batadv0: entered allmulticast mode [ 512.562080][T13881] bond0: (slave batadv0): Releasing backup interface [ 512.572855][T13881] bridge0: port 3(batadv0) entered blocking state [ 512.580870][T13881] bridge0: port 3(batadv0) entered disabled state [ 512.641183][ T1107] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 512.651801][ T1107] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 513.204589][T13906] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 513.212521][T13906] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 513.219059][T13906] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 513.225804][T13906] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 513.233941][T13906] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 513.240476][T13906] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 513.247142][T13906] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 513.253924][T13906] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 513.260649][T13906] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 513.267131][T13906] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 513.290351][ T5979] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 513.469966][ T5979] usb 2-1: Using ep0 maxpacket: 32 [ 513.483895][ T5979] usb 2-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=20.b0 [ 513.493277][ T5979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.506694][ T5979] usb 2-1: Product: syz [ 513.511404][ T5979] usb 2-1: Manufacturer: syz [ 513.522193][ T5979] usb 2-1: SerialNumber: syz [ 513.538829][ T5979] usb 2-1: config 0 descriptor?? [ 513.553343][ T5979] usb 2-1: ucan: probing device on interface #0 [ 513.561938][ T5979] usb 2-1: ucan: invalid endpoint configuration [ 513.568196][ T5979] usb 2-1: ucan: probe failed; try to update the device firmware [ 513.779900][ T5950] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 513.932445][ T5950] usb 3-1: config 0 has an invalid interface number: 3 but max is 0 [ 513.940747][ T5950] usb 3-1: config 0 has no interface number 0 [ 513.948926][ T5950] usb 3-1: New USB device found, idVendor=1660, idProduct=1921, bcdDevice=1f.84 [ 513.958955][ T5950] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.967033][ T5950] usb 3-1: Product: syz [ 513.971324][ T5950] usb 3-1: Manufacturer: syz [ 513.975929][ T5950] usb 3-1: SerialNumber: syz [ 513.983517][ T5950] usb 3-1: config 0 descriptor?? [ 514.196352][ T5950] dvb-usb: found a 'Medion CTX1921 DVB-T USB' in cold state, will try to load a firmware [ 514.253020][ T5950] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 514.265748][ T5950] dib0700: firmware download failed at 7 with -22 [ 514.281561][ T5950] usb 3-1: USB disconnect, device number 37 [ 515.009990][ T5950] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 515.050417][T11766] usb 1-1: USB disconnect, device number 94 [ 515.161994][ T5950] usb 3-1: Using ep0 maxpacket: 32 [ 515.168787][ T5950] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 515.178420][ T5950] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.196182][ T5950] usb 3-1: config 0 descriptor?? [ 515.215108][ T5950] as10x_usb: device has been detected [ 515.231144][ T5950] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 515.264052][ T5950] usb 3-1: DVB: registering adapter 2 frontend 0 (nBox DVB-T Dongle)... [ 515.290160][ T5950] as10x_usb: error during firmware upload part1 [ 515.297299][ T5950] Registered device nBox DVB-T Dongle [ 515.406261][T11766] usb 3-1: USB disconnect, device number 38 [ 515.446377][T11766] Unregistered device nBox DVB-T Dongle [ 515.453421][T11766] as10x_usb: device has been disconnected [ 515.628482][T13927] block device autoloading is deprecated and will be removed. [ 515.939732][T13303] usb 2-1: USB disconnect, device number 89 [ 515.990034][T11766] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 516.152129][T11766] usb 1-1: Using ep0 maxpacket: 8 [ 516.166570][T11766] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 516.178593][T11766] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 516.190123][T11766] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 516.204590][T11766] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 516.214933][T11766] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.236343][T11766] usbtmc 1-1:16.0: bulk endpoints not found [ 516.388943][T13965] new mount options do not match the existing superblock, will be ignored [ 516.616007][T13973] FAULT_INJECTION: forcing a failure. [ 516.616007][T13973] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 516.629181][T13973] CPU: 0 UID: 0 PID: 13973 Comm: syz.1.2765 Not tainted syzkaller #0 PREEMPT(full) [ 516.629220][T13973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 516.629233][T13973] Call Trace: [ 516.629241][T13973] [ 516.629247][T13973] dump_stack_lvl+0x189/0x250 [ 516.629263][T13973] ? __pfx____ratelimit+0x10/0x10 [ 516.629280][T13973] ? __pfx_dump_stack_lvl+0x10/0x10 [ 516.629290][T13973] ? __pfx__printk+0x10/0x10 [ 516.629305][T13973] ? __might_fault+0xb0/0x130 [ 516.629321][T13973] should_fail_ex+0x414/0x560 [ 516.629337][T13973] _copy_from_iter+0x1de/0x1790 [ 516.629354][T13973] ? __lock_acquire+0xab9/0xd20 [ 516.629370][T13973] ? __pfx__copy_from_iter+0x10/0x10 [ 516.629393][T13973] tun_get_user+0x219/0x3e20 [ 516.629419][T13973] ? aa_file_perm+0x44d/0x1550 [ 516.629429][T13973] ? __pfx_tun_get_user+0x10/0x10 [ 516.629443][T13973] ? _parse_integer_limit+0x1ae/0x1f0 [ 516.629466][T13973] ? __lock_acquire+0xab9/0xd20 [ 516.629486][T13973] ? ref_tracker_alloc+0x318/0x460 [ 516.629498][T13973] ? __lock_acquire+0xab9/0xd20 [ 516.629509][T13973] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 516.629525][T13973] ? tun_get+0x1c/0x2f0 [ 516.629542][T13973] ? tun_get+0x1c/0x2f0 [ 516.629556][T13973] ? tun_get+0x1c/0x2f0 [ 516.629572][T13973] tun_chr_write_iter+0x113/0x200 [ 516.629588][T13973] vfs_write+0x5c6/0xb30 [ 516.629604][T13973] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 516.629618][T13973] ? __pfx_vfs_write+0x10/0x10 [ 516.629636][T13973] ? __fget_files+0x2a/0x420 [ 516.629654][T13973] ksys_write+0x145/0x250 [ 516.629668][T13973] ? __pfx_ksys_write+0x10/0x10 [ 516.629682][T13973] ? do_syscall_64+0xbe/0xfa0 [ 516.629699][T13973] do_syscall_64+0xfa/0xfa0 [ 516.629714][T13973] ? lockdep_hardirqs_on+0x9c/0x150 [ 516.629737][T13973] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.629755][T13973] ? clear_bhb_loop+0x60/0xb0 [ 516.629776][T13973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.629793][T13973] RIP: 0033:0x7fd19578eba9 [ 516.629812][T13973] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 516.629828][T13973] RSP: 002b:00007fd1966ed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 516.629846][T13973] RAX: ffffffffffffffda RBX: 00007fd1959d5fa0 RCX: 00007fd19578eba9 [ 516.629862][T13973] RDX: 00000000000000d2 RSI: 0000200000000480 RDI: 0000000000000004 [ 516.629874][T13973] RBP: 00007fd1966ed090 R08: 0000000000000000 R09: 0000000000000000 [ 516.629884][T13973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 516.629895][T13973] R13: 00007fd1959d6038 R14: 00007fd1959d5fa0 R15: 00007ffe6be7f448 [ 516.629927][T13973] [ 516.669897][ T24] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 517.052515][ T24] usb 3-1: config 0 has an invalid interface number: 111 but max is 0 [ 517.060934][ T24] usb 3-1: config 0 has no interface number 0 [ 517.067054][ T24] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 517.076733][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.093312][ T24] usb 3-1: config 0 descriptor?? [ 517.103308][ T24] cp210x 3-1:0.111: cp210x converter detected [ 517.507448][ T24] cp210x 3-1:0.111: failed to get vendor val 0x000e size 3: -32 [ 517.516306][ T24] cp210x 3-1:0.111: failed to get vendor val 0x3711 size 2: -121 [ 517.524351][ T24] cp210x 3-1:0.111: GPIO initialisation failed: -121 [ 517.535787][ T24] usb 3-1: cp210x converter now attached to ttyUSB0 [ 518.072239][T13965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 518.100699][T13965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 518.285387][T13998] FAULT_INJECTION: forcing a failure. [ 518.285387][T13998] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 518.298537][T13998] CPU: 0 UID: 0 PID: 13998 Comm: syz.1.2776 Not tainted syzkaller #0 PREEMPT(full) [ 518.298560][T13998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 518.298568][T13998] Call Trace: [ 518.298574][T13998] [ 518.298579][T13998] dump_stack_lvl+0x189/0x250 [ 518.298595][T13998] ? __pfx____ratelimit+0x10/0x10 [ 518.298611][T13998] ? __pfx_dump_stack_lvl+0x10/0x10 [ 518.298621][T13998] ? __pfx__printk+0x10/0x10 [ 518.298636][T13998] ? __might_fault+0xb0/0x130 [ 518.298653][T13998] should_fail_ex+0x414/0x560 [ 518.298669][T13998] _copy_from_iter+0x1de/0x1790 [ 518.298686][T13998] ? __lock_acquire+0xab9/0xd20 [ 518.298703][T13998] ? __pfx__copy_from_iter+0x10/0x10 [ 518.298726][T13998] tun_get_user+0x488/0x3e20 [ 518.298751][T13998] ? aa_file_perm+0x44d/0x1550 [ 518.298761][T13998] ? __pfx_tun_get_user+0x10/0x10 [ 518.298776][T13998] ? _parse_integer_limit+0x1ae/0x1f0 [ 518.298794][T13998] ? __lock_acquire+0xab9/0xd20 [ 518.298808][T13998] ? ref_tracker_alloc+0x318/0x460 [ 518.298828][T13998] ? __lock_acquire+0xab9/0xd20 [ 518.298849][T13998] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 518.298883][T13998] ? tun_get+0x1c/0x2f0 [ 518.298905][T13998] ? tun_get+0x1c/0x2f0 [ 518.298919][T13998] ? tun_get+0x1c/0x2f0 [ 518.298935][T13998] tun_chr_write_iter+0x113/0x200 [ 518.298951][T13998] vfs_write+0x5c6/0xb30 [ 518.298966][T13998] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 518.298981][T13998] ? __pfx_vfs_write+0x10/0x10 [ 518.298998][T13998] ? __fget_files+0x2a/0x420 [ 518.299016][T13998] ksys_write+0x145/0x250 [ 518.299030][T13998] ? __pfx_ksys_write+0x10/0x10 [ 518.299043][T13998] ? do_syscall_64+0xbe/0xfa0 [ 518.299061][T13998] do_syscall_64+0xfa/0xfa0 [ 518.299076][T13998] ? lockdep_hardirqs_on+0x9c/0x150 [ 518.299092][T13998] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.299103][T13998] ? clear_bhb_loop+0x60/0xb0 [ 518.299125][T13998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.299144][T13998] RIP: 0033:0x7fd19578eba9 [ 518.299161][T13998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 518.299178][T13998] RSP: 002b:00007fd1966ed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 518.299200][T13998] RAX: ffffffffffffffda RBX: 00007fd1959d5fa0 RCX: 00007fd19578eba9 [ 518.299214][T13998] RDX: 00000000000000d2 RSI: 0000200000000480 RDI: 0000000000000004 [ 518.299227][T13998] RBP: 00007fd1966ed090 R08: 0000000000000000 R09: 0000000000000000 [ 518.299234][T13998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 518.299240][T13998] R13: 00007fd1959d6038 R14: 00007fd1959d5fa0 R15: 00007ffe6be7f448 [ 518.299258][T13998] [ 518.742720][ T24] usb 1-1: USB disconnect, device number 95 [ 519.221293][ T24] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 519.338417][ T5950] usb 3-1: USB disconnect, device number 39 [ 519.354617][ T5950] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 519.372376][ T5950] cp210x 3-1:0.111: device disconnected [ 519.385972][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 519.402587][ T24] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 519.419896][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.440617][ T24] usb 1-1: config 0 descriptor?? [ 519.454144][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 519.856299][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 519.866649][ T24] pwc: recv_control_msg error -32 req 02 val 2700 [ 519.874103][ T24] pwc: recv_control_msg error -32 req 02 val 2c00 [ 519.881728][ T24] pwc: recv_control_msg error -32 req 04 val 1000 [ 519.888944][ T24] pwc: recv_control_msg error -32 req 04 val 1300 [ 519.896601][ T24] pwc: recv_control_msg error -32 req 04 val 1400 [ 519.904483][ T24] pwc: recv_control_msg error -32 req 02 val 2000 [ 519.913578][ T24] pwc: recv_control_msg error -32 req 02 val 2100 [ 519.922991][T14009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.935690][T14009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.944464][ T24] pwc: recv_control_msg error -32 req 04 val 1500 [ 519.954251][ T24] pwc: recv_control_msg error -32 req 02 val 2500 [ 519.961938][ T24] pwc: recv_control_msg error -32 req 02 val 2400 [ 519.969030][ T24] pwc: recv_control_msg error -32 req 02 val 2600 [ 519.976462][ T24] pwc: recv_control_msg error -32 req 02 val 2900 [ 520.079901][ T5908] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 520.184366][ T24] pwc: recv_control_msg error -32 req 04 val 1100 [ 520.192665][ T24] pwc: Registered as video103. [ 520.199582][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input115 [ 520.230080][ T5908] usb 3-1: Using ep0 maxpacket: 8 [ 520.256378][ T5908] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 520.279853][ T5908] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 520.290378][ T5908] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 520.303481][ T5908] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 520.312575][ T5908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.326855][ T5908] usbtmc 3-1:16.0: bulk endpoints not found [ 520.436528][ T24] usb 1-1: USB disconnect, device number 96 [ 520.730028][T11920] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 520.736995][ T5870] Bluetooth: hci3: command 0x1003 tx timeout [ 520.974590][T14027] FAULT_INJECTION: forcing a failure. [ 520.974590][T14027] name failslab, interval 1, probability 0, space 0, times 0 [ 520.988910][T14027] CPU: 0 UID: 0 PID: 14027 Comm: syz.1.2789 Not tainted syzkaller #0 PREEMPT(full) [ 520.988938][T14027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 520.988951][T14027] Call Trace: [ 520.988960][T14027] [ 520.988969][T14027] dump_stack_lvl+0x189/0x250 [ 520.988993][T14027] ? __pfx____ratelimit+0x10/0x10 [ 520.989022][T14027] ? __pfx_dump_stack_lvl+0x10/0x10 [ 520.989042][T14027] ? __pfx__printk+0x10/0x10 [ 520.989085][T14027] ? __pfx___might_resched+0x10/0x10 [ 520.989107][T14027] ? fs_reclaim_acquire+0x7d/0x100 [ 520.989136][T14027] should_fail_ex+0x414/0x560 [ 520.989165][T14027] should_failslab+0xa8/0x100 [ 520.989191][T14027] kmem_cache_alloc_node_noprof+0x77/0x710 [ 520.989213][T14027] ? __alloc_skb+0x112/0x2d0 [ 520.989249][T14027] __alloc_skb+0x112/0x2d0 [ 520.989283][T14027] alloc_skb_with_frags+0xca/0x890 [ 520.989319][T14027] sock_alloc_send_pskb+0x857/0x990 [ 520.989362][T14027] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 520.989397][T14027] ? iov_iter_advance+0x8b/0x1c0 [ 520.989429][T14027] tun_get_user+0xa43/0x3e20 [ 520.989477][T14027] ? aa_file_perm+0x44d/0x1550 [ 520.989497][T14027] ? __pfx_tun_get_user+0x10/0x10 [ 520.989523][T14027] ? _parse_integer_limit+0x1ae/0x1f0 [ 520.989557][T14027] ? __lock_acquire+0xab9/0xd20 [ 520.989584][T14027] ? ref_tracker_alloc+0x318/0x460 [ 520.989607][T14027] ? __lock_acquire+0xab9/0xd20 [ 520.989629][T14027] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 520.989661][T14027] ? tun_get+0x1c/0x2f0 [ 520.989694][T14027] ? tun_get+0x1c/0x2f0 [ 520.989720][T14027] ? tun_get+0x1c/0x2f0 [ 520.989754][T14027] tun_chr_write_iter+0x113/0x200 [ 520.989780][T14027] vfs_write+0x5c6/0xb30 [ 520.989806][T14027] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 520.989832][T14027] ? __pfx_vfs_write+0x10/0x10 [ 520.989864][T14027] ? __fget_files+0x2a/0x420 [ 520.989899][T14027] ksys_write+0x145/0x250 [ 520.989925][T14027] ? __pfx_ksys_write+0x10/0x10 [ 520.989949][T14027] ? do_syscall_64+0xbe/0xfa0 [ 520.989980][T14027] do_syscall_64+0xfa/0xfa0 [ 520.990005][T14027] ? lockdep_hardirqs_on+0x9c/0x150 [ 520.990033][T14027] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.990060][T14027] ? clear_bhb_loop+0x60/0xb0 [ 520.990085][T14027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.990105][T14027] RIP: 0033:0x7fd19578eba9 [ 520.990126][T14027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 520.990144][T14027] RSP: 002b:00007fd1966ed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 520.990165][T14027] RAX: ffffffffffffffda RBX: 00007fd1959d5fa0 RCX: 00007fd19578eba9 [ 520.990181][T14027] RDX: 00000000000000d2 RSI: 0000200000000480 RDI: 0000000000000004 [ 520.990195][T14027] RBP: 00007fd1966ed090 R08: 0000000000000000 R09: 0000000000000000 [ 520.990208][T14027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 520.990221][T14027] R13: 00007fd1959d6038 R14: 00007fd1959d5fa0 R15: 00007ffe6be7f448 [ 520.990256][T14027] [ 521.317161][T14029] usb usb8: usbfs: interface 0 claimed by hub while 'syz.0.2790' resets device [ 521.911290][T14057] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 521.917856][T14057] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 521.930186][T14057] vhci_hcd vhci_hcd.0: Device attached [ 521.946142][T14057] vhci_hcd vhci_hcd.0: port 0 already used [ 521.958425][T14058] vhci_hcd: connection closed [ 521.963104][ T2981] vhci_hcd: stop threads [ 521.977399][ T2981] vhci_hcd: release socket [ 521.982754][ T2981] vhci_hcd: disconnect device [ 521.999989][ T24] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 522.175367][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 522.185912][ T24] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 522.206782][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.221055][ T24] usb 2-1: config 0 descriptor?? [ 522.238334][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 522.638900][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 522.649330][ T24] pwc: recv_control_msg error -32 req 02 val 2700 [ 522.670992][ T24] pwc: recv_control_msg error -32 req 02 val 2c00 [ 522.682709][ T24] pwc: recv_control_msg error -32 req 04 val 1000 [ 522.694327][ T24] pwc: recv_control_msg error -32 req 04 val 1300 [ 522.707760][ T24] pwc: recv_control_msg error -32 req 04 val 1400 [ 522.716917][ T24] pwc: recv_control_msg error -32 req 02 val 2000 [ 522.725677][ T24] pwc: recv_control_msg error -32 req 02 val 2100 [ 522.733981][ T24] pwc: recv_control_msg error -32 req 04 val 1500 [ 522.741716][ T24] pwc: recv_control_msg error -32 req 02 val 2500 [ 522.749529][ T24] pwc: recv_control_msg error -32 req 02 val 2400 [ 522.849081][T11766] usb 3-1: USB disconnect, device number 40 [ 522.900695][ T5908] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 522.958974][ T24] pwc: recv_control_msg error -32 req 02 val 2900 [ 522.967906][ T24] pwc: recv_control_msg error -32 req 02 val 2800 [ 522.991734][ T24] pwc: recv_control_msg error -71 req 04 val 1100 [ 523.005374][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 523.034847][T14090] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 523.036583][ T24] pwc: Registered as video103. [ 523.057673][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input116 [ 523.063541][T14090] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 523.078570][ T24] usb 2-1: USB disconnect, device number 90 [ 523.090270][ T5908] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 523.107375][ T5908] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 523.119186][ T5908] usb 1-1: config 0 has no interface number 0 [ 523.127519][ T5908] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 523.137888][ T5908] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 523.169603][ T5908] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 523.179704][ T5908] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.188125][ T5908] usb 1-1: Product: syz [ 523.192677][ T5908] usb 1-1: Manufacturer: syz [ 523.197407][ T5908] usb 1-1: SerialNumber: syz [ 523.208857][ T5908] usb 1-1: config 0 descriptor?? [ 523.410034][T11766] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 523.574268][T11766] usb 3-1: device descriptor read/64, error -71 [ 523.619699][ T24] usb 1-1: USB disconnect, device number 97 [ 523.823546][T11766] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 523.990316][T11766] usb 3-1: device descriptor read/64, error -71 [ 524.111721][T11766] usb usb3-port1: attempt power cycle [ 524.310292][ T5908] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 524.460003][T11766] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 524.470233][ T5908] usb 2-1: Using ep0 maxpacket: 8 [ 524.476601][ T5908] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 524.485805][ T5908] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 524.496984][T11766] usb 3-1: device descriptor read/8, error -71 [ 524.503408][ T5908] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 524.516732][ T5908] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 524.526005][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.546255][ T5908] usbtmc 2-1:16.0: bulk endpoints not found [ 524.755095][T11766] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 524.780926][T11766] usb 3-1: device descriptor read/8, error -71 [ 524.819471][T14136] FAULT_INJECTION: forcing a failure. [ 524.819471][T14136] name failslab, interval 1, probability 0, space 0, times 0 [ 524.832508][T14136] CPU: 1 UID: 0 PID: 14136 Comm: syz.0.2831 Not tainted syzkaller #0 PREEMPT(full) [ 524.832534][T14136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 524.832548][T14136] Call Trace: [ 524.832557][T14136] [ 524.832564][T14136] dump_stack_lvl+0x189/0x250 [ 524.832580][T14136] ? __pfx____ratelimit+0x10/0x10 [ 524.832596][T14136] ? __pfx_dump_stack_lvl+0x10/0x10 [ 524.832607][T14136] ? __pfx__printk+0x10/0x10 [ 524.832625][T14136] ? __pfx___might_resched+0x10/0x10 [ 524.832637][T14136] ? fs_reclaim_acquire+0x7d/0x100 [ 524.832653][T14136] should_fail_ex+0x414/0x560 [ 524.832668][T14136] should_failslab+0xa8/0x100 [ 524.832682][T14136] kmem_cache_alloc_node_noprof+0x77/0x710 [ 524.832693][T14136] ? __alloc_skb+0x112/0x2d0 [ 524.832712][T14136] __alloc_skb+0x112/0x2d0 [ 524.832729][T14136] alloc_skb_with_frags+0xca/0x890 [ 524.832748][T14136] sock_alloc_send_pskb+0x857/0x990 [ 524.832776][T14136] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 524.832794][T14136] ? iov_iter_advance+0x8b/0x1c0 [ 524.832811][T14136] tun_get_user+0xa43/0x3e20 [ 524.832837][T14136] ? aa_file_perm+0x44d/0x1550 [ 524.832847][T14136] ? __pfx_tun_get_user+0x10/0x10 [ 524.832861][T14136] ? _parse_integer_limit+0x1ae/0x1f0 [ 524.832879][T14136] ? __lock_acquire+0xab9/0xd20 [ 524.832893][T14136] ? ref_tracker_alloc+0x318/0x460 [ 524.832905][T14136] ? __lock_acquire+0xab9/0xd20 [ 524.832917][T14136] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 524.832932][T14136] ? tun_get+0x1c/0x2f0 [ 524.832949][T14136] ? tun_get+0x1c/0x2f0 [ 524.832962][T14136] ? tun_get+0x1c/0x2f0 [ 524.832978][T14136] tun_chr_write_iter+0x113/0x200 [ 524.832994][T14136] vfs_write+0x5c6/0xb30 [ 524.833010][T14136] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 524.833024][T14136] ? __pfx_vfs_write+0x10/0x10 [ 524.833041][T14136] ? __fget_files+0x2a/0x420 [ 524.833060][T14136] ksys_write+0x145/0x250 [ 524.833073][T14136] ? __pfx_ksys_write+0x10/0x10 [ 524.833087][T14136] ? do_syscall_64+0xbe/0xfa0 [ 524.833104][T14136] do_syscall_64+0xfa/0xfa0 [ 524.833119][T14136] ? lockdep_hardirqs_on+0x9c/0x150 [ 524.833133][T14136] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.833144][T14136] ? clear_bhb_loop+0x60/0xb0 [ 524.833156][T14136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.833167][T14136] RIP: 0033:0x7f4ac318eba9 [ 524.833178][T14136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 524.833188][T14136] RSP: 002b:00007f4ac3f3d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 524.833200][T14136] RAX: ffffffffffffffda RBX: 00007f4ac33d5fa0 RCX: 00007f4ac318eba9 [ 524.833208][T14136] RDX: 00000000000000d2 RSI: 0000200000000480 RDI: 0000000000000004 [ 524.833215][T14136] RBP: 00007f4ac3f3d090 R08: 0000000000000000 R09: 0000000000000000 [ 524.833222][T14136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 524.833228][T14136] R13: 00007f4ac33d6038 R14: 00007f4ac33d5fa0 R15: 00007ffcb8c6b768 [ 524.833245][T14136] [ 525.151433][T11766] usb usb3-port1: unable to enumerate USB device [ 525.253793][T14139] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2832'. [ 525.668449][T14149] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2837'. [ 526.429892][T11766] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 526.506662][T14177] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2848'. [ 526.581244][T11766] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 526.591733][T11766] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 526.600854][T11766] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.614049][T11766] usb 3-1: config 0 descriptor?? [ 526.626465][T11766] pwc: Askey VC010 type 2 USB webcam detected. [ 526.749993][ T43] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 526.901065][ T43] usb 1-1: Using ep0 maxpacket: 8 [ 526.906929][ T43] usb 1-1: too many configurations: 20, using maximum allowed: 8 [ 526.917318][ T43] usb 1-1: config 4 has an invalid interface number: 231 but max is 0 [ 526.925603][ T43] usb 1-1: config 4 has no interface number 0 [ 526.933103][ T43] usb 1-1: config 4 has an invalid interface number: 231 but max is 0 [ 526.941545][ T43] usb 1-1: config 4 has no interface number 0 [ 526.949143][ T43] usb 1-1: config 4 has an invalid interface number: 231 but max is 0 [ 526.957472][ T43] usb 1-1: config 4 has no interface number 0 [ 526.964869][ T43] usb 1-1: config 4 has an invalid interface number: 231 but max is 0 [ 526.973236][ T43] usb 1-1: config 4 has no interface number 0 [ 526.982973][ T43] usb 1-1: config 4 has an invalid interface number: 231 but max is 0 [ 526.991436][ T43] usb 1-1: config 4 has no interface number 0 [ 526.998735][ T43] usb 1-1: config 4 has an invalid interface number: 231 but max is 0 [ 527.007296][ T43] usb 1-1: config 4 has no interface number 0 [ 527.015457][ T43] usb 1-1: config 4 has an invalid interface number: 231 but max is 0 [ 527.023772][ T43] usb 1-1: config 4 has no interface number 0 [ 527.032235][ T43] usb 1-1: config 4 has an invalid interface number: 231 but max is 0 [ 527.033699][T11766] pwc: recv_control_msg error -32 req 02 val 2b00 [ 527.040793][ T43] usb 1-1: config 4 has no interface number 0 [ 527.054581][T11766] pwc: recv_control_msg error -32 req 02 val 2700 [ 527.055864][ T43] usb 1-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 527.071643][ T5945] usb 2-1: USB disconnect, device number 91 [ 527.082494][T11766] pwc: recv_control_msg error -32 req 02 val 2c00 [ 527.089914][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.105384][T11766] pwc: recv_control_msg error -32 req 04 val 1000 [ 527.109897][ T43] usb 1-1: Product: syz [ 527.116929][ T43] usb 1-1: Manufacturer: syz [ 527.122129][T11766] pwc: recv_control_msg error -32 req 04 val 1300 [ 527.142302][ T10] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 527.164532][T11766] pwc: recv_control_msg error -32 req 04 val 1400 [ 527.184139][ T43] usb 1-1: SerialNumber: syz [ 527.189157][T11766] pwc: recv_control_msg error -32 req 02 val 2000 [ 527.198244][ T10] dvb_usb_az6027 6-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 527.235341][T11766] pwc: recv_control_msg error -32 req 02 val 2100 [ 527.267621][ T43] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 527.268026][ T10] usb 6-1: USB disconnect, device number 7 [ 527.289712][T11766] pwc: recv_control_msg error -32 req 04 val 1500 [ 527.316022][T11766] pwc: recv_control_msg error -32 req 02 val 2500 [ 527.334103][T11766] pwc: recv_control_msg error -32 req 02 val 2400 [ 527.353094][T11766] pwc: recv_control_msg error -32 req 02 val 2600 [ 527.368256][T11766] pwc: recv_control_msg error -32 req 02 val 2900 [ 527.443066][ T43] vp7045: USB control message 'out' went wrong. [ 527.458061][ T43] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 527.489839][ T43] dvbdev: DVB: registering new adapter (DigitalNow TinyUSB 2 DVB-t Receiver) [ 527.501143][ T43] usb 1-1: media controller created [ 527.514082][ T43] vp7045: USB control message 'out' went wrong. [ 527.528443][ T43] dvb-usb: MAC address reading failed. [ 527.568330][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 527.582989][T11766] pwc: recv_control_msg error -32 req 04 val 1100 [ 527.603600][T11766] pwc: Registered as video103. [ 527.604357][ T43] vp7045: USB control message 'out' went wrong. [ 527.626720][T11766] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input118 [ 527.630864][ T43] vp7045: USB control message 'out' went wrong. [ 527.660888][ T43] vp7045: USB control message 'out' went wrong. [ 527.669004][ T43] usb 1-1: DVB: registering adapter 2 frontend 0 (Twinhan VP7045/46 USB DVB-T)... [ 527.685212][ T43] dvbdev: dvb_create_media_entity: media entity 'Twinhan VP7045/46 USB DVB-T' registered. [ 527.759892][ T24] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 527.859863][ T43] rc_core: IR keymap rc-twinhan1027 not found [ 527.866040][ T43] Registered IR keymap rc-empty [ 527.877666][ T43] rc rc0: DigitalNow TinyUSB 2 DVB-t Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 527.891029][T11766] usb 3-1: USB disconnect, device number 45 [ 527.896474][ T43] input: DigitalNow TinyUSB 2 DVB-t Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input119 [ 527.910325][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 527.922969][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 527.943510][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 527.958391][ T43] dvb-usb: schedule remote query interval to 400 msecs. [ 527.970490][ T24] usb 6-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 527.981343][ T43] vp7045: USB control message 'out' went wrong. [ 527.987705][ T43] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver successfully initialized and connected. [ 528.011593][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.031264][ T24] usb 6-1: config 0 descriptor?? [ 528.081439][ T43] usb 1-1: USB disconnect, device number 98 [ 528.213892][ T43] ================================================================== [ 528.222045][ T43] BUG: KASAN: slab-use-after-free in media_devnode_unregister+0xe2/0xf0 [ 528.230397][ T43] Read of size 4 at addr ffff8880308104f0 by task kworker/1:1/43 [ 528.238109][ T43] [ 528.240426][ T43] CPU: 1 UID: 0 PID: 43 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(full) [ 528.240452][ T43] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 528.240465][ T43] Workqueue: usb_hub_wq hub_event [ 528.240496][ T43] Call Trace: [ 528.240505][ T43] [ 528.240513][ T43] dump_stack_lvl+0x189/0x250 [ 528.240532][ T43] ? rcu_is_watching+0x15/0xb0 [ 528.240557][ T43] ? __kasan_check_byte+0x12/0x40 [ 528.240576][ T43] ? __pfx_dump_stack_lvl+0x10/0x10 [ 528.240591][ T43] ? rcu_is_watching+0x15/0xb0 [ 528.240611][ T43] ? lock_release+0x4b/0x3e0 [ 528.240631][ T43] ? __virt_addr_valid+0x1c8/0x5c0 [ 528.240656][ T43] ? __virt_addr_valid+0x4a5/0x5c0 [ 528.240685][ T43] print_report+0xca/0x240 [ 528.240702][ T43] ? media_devnode_unregister+0xe2/0xf0 [ 528.240723][ T43] kasan_report+0x118/0x150 [ 528.240745][ T43] ? media_devnode_unregister+0xe2/0xf0 [ 528.240769][ T43] media_devnode_unregister+0xe2/0xf0 [ 528.240790][ T43] media_device_unregister+0x37c/0x400 [ 528.240814][ T43] dvb_usb_adapter_dvb_exit+0xf3/0x1b0 [ 528.240833][ T43] dvb_usb_adapter_exit+0x8b/0x240 [ 528.240850][ T43] dvb_usb_device_exit+0x1b6/0x350 [ 528.240865][ T43] ? lockdep_hardirqs_on+0x9c/0x150 [ 528.240889][ T43] ? __pfx_dvb_usb_device_exit+0x10/0x10 [ 528.240903][ T43] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 528.240929][ T43] ? usb_disable_interface+0x31d/0x350 [ 528.240949][ T43] usb_unbind_interface+0x26e/0x910 [ 528.240973][ T43] ? __pfx_usb_unbind_interface+0x10/0x10 [ 528.240992][ T43] device_release_driver_internal+0x4d9/0x800 [ 528.241017][ T43] bus_remove_device+0x34d/0x410 [ 528.241035][ T43] device_del+0x511/0x8e0 [ 528.241055][ T43] ? __pm_runtime_barrier+0x212/0x460 [ 528.241076][ T43] ? __pfx_device_del+0x10/0x10 [ 528.241095][ T43] ? __pfx___mutex_lock+0x10/0x10 [ 528.241113][ T43] usb_disable_device+0x3e9/0x8a0 [ 528.241134][ T43] usb_disconnect+0x330/0x950 [ 528.241161][ T43] hub_event+0x1cf5/0x4a20 [ 528.241187][ T43] ? do_raw_spin_lock+0x121/0x290 [ 528.241212][ T43] ? register_lock_class+0x51/0x320 [ 528.241235][ T43] ? __pfx_hub_event+0x10/0x10 [ 528.241252][ T43] ? process_scheduled_works+0x9ef/0x17b0 [ 528.241274][ T43] ? _raw_spin_unlock_irq+0x23/0x50 [ 528.241295][ T43] ? process_scheduled_works+0x9ef/0x17b0 [ 528.241314][ T43] ? process_scheduled_works+0x9ef/0x17b0 [ 528.241334][ T43] process_scheduled_works+0xae1/0x17b0 [ 528.241364][ T43] ? __pfx_process_scheduled_works+0x10/0x10 [ 528.241391][ T43] worker_thread+0x8a0/0xda0 [ 528.241424][ T43] kthread+0x711/0x8a0 [ 528.241459][ T43] ? __pfx_worker_thread+0x10/0x10 [ 528.241483][ T43] ? __pfx_kthread+0x10/0x10 [ 528.241510][ T43] ? _raw_spin_unlock_irq+0x23/0x50 [ 528.241536][ T43] ? lockdep_hardirqs_on+0x9c/0x150 [ 528.241563][ T43] ? __pfx_kthread+0x10/0x10 [ 528.241591][ T43] ret_from_fork+0x47c/0x820 [ 528.241616][ T43] ? __pfx_ret_from_fork+0x10/0x10 [ 528.241641][ T43] ? __switch_to_asm+0x39/0x70 [ 528.241662][ T43] ? __switch_to_asm+0x33/0x70 [ 528.241682][ T43] ? __pfx_kthread+0x10/0x10 [ 528.241711][ T43] ret_from_fork_asm+0x1a/0x30 [ 528.241739][ T43] [ 528.241747][ T43] [ 528.552031][ T43] Allocated by task 43: [ 528.556172][ T43] kasan_save_track+0x3e/0x80 [ 528.560843][ T43] __kasan_kmalloc+0x93/0xb0 [ 528.565432][ T43] __kmalloc_cache_noprof+0x3d5/0x6f0 [ 528.570801][ T43] __media_device_register+0x58/0x280 [ 528.576174][ T43] dvb_usb_device_init+0x1bed/0x2580 [ 528.581452][ T43] usb_probe_interface+0x665/0xc30 [ 528.586559][ T43] really_probe+0x26d/0x9e0 [ 528.591054][ T43] __driver_probe_device+0x18c/0x2f0 [ 528.596426][ T43] driver_probe_device+0x4f/0x430 [ 528.601444][ T43] __device_attach_driver+0x2ce/0x530 [ 528.606809][ T43] bus_for_each_drv+0x24e/0x2e0 [ 528.611660][ T43] __device_attach+0x2b8/0x400 [ 528.616418][ T43] bus_probe_device+0x185/0x260 [ 528.621257][ T43] device_add+0x7b6/0xb50 [ 528.625576][ T43] usb_set_configuration+0x1a87/0x20e0 [ 528.631021][ T43] usb_generic_driver_probe+0x8d/0x150 [ 528.636468][ T43] usb_probe_device+0x1c1/0x390 [ 528.641481][ T43] really_probe+0x26d/0x9e0 [ 528.646017][ T43] __driver_probe_device+0x18c/0x2f0 [ 528.651380][ T43] driver_probe_device+0x4f/0x430 [ 528.656419][ T43] __device_attach_driver+0x2ce/0x530 [ 528.661784][ T43] bus_for_each_drv+0x24e/0x2e0 [ 528.666639][ T43] __device_attach+0x2b8/0x400 [ 528.671391][ T43] bus_probe_device+0x185/0x260 [ 528.676248][ T43] device_add+0x7b6/0xb50 [ 528.680566][ T43] usb_new_device+0xa39/0x16f0 [ 528.685322][ T43] hub_event+0x2958/0x4a20 [ 528.689726][ T43] process_scheduled_works+0xae1/0x17b0 [ 528.695357][ T43] worker_thread+0x8a0/0xda0 [ 528.700027][ T43] kthread+0x711/0x8a0 [ 528.704088][ T43] ret_from_fork+0x47c/0x820 [ 528.708664][ T43] ret_from_fork_asm+0x1a/0x30 [ 528.713414][ T43] [ 528.715722][ T43] Freed by task 43: [ 528.720033][ T43] kasan_save_track+0x3e/0x80 [ 528.724702][ T43] __kasan_save_free_info+0x46/0x50 [ 528.730063][ T43] __kasan_slab_free+0x5b/0x80 [ 528.734820][ T43] kfree+0x199/0x6d0 [ 528.738703][ T43] media_devnode_release+0x61/0xa0 [ 528.743803][ T43] device_release+0x99/0x1c0 [ 528.748405][ T43] kobject_put+0x228/0x480 [ 528.752925][ T43] media_devnode_unregister+0x6d/0xf0 [ 528.758379][ T43] media_device_unregister+0x37c/0x400 [ 528.763926][ T43] dvb_usb_adapter_dvb_exit+0xf3/0x1b0 [ 528.769375][ T43] dvb_usb_adapter_exit+0x8b/0x240 [ 528.774589][ T43] dvb_usb_device_exit+0x1b6/0x350 [ 528.779690][ T43] usb_unbind_interface+0x26e/0x910 [ 528.784962][ T43] device_release_driver_internal+0x4d9/0x800 [ 528.791023][ T43] bus_remove_device+0x34d/0x410 [ 528.795947][ T43] device_del+0x511/0x8e0 [ 528.800274][ T43] usb_disable_device+0x3e9/0x8a0 [ 528.805289][ T43] usb_disconnect+0x330/0x950 [ 528.810046][ T43] hub_event+0x1cf5/0x4a20 [ 528.814447][ T43] process_scheduled_works+0xae1/0x17b0 [ 528.819985][ T43] worker_thread+0x8a0/0xda0 [ 528.824575][ T43] kthread+0x711/0x8a0 [ 528.828645][ T43] ret_from_fork+0x47c/0x820 [ 528.833236][ T43] ret_from_fork_asm+0x1a/0x30 [ 528.838072][ T43] [ 528.840472][ T43] The buggy address belongs to the object at ffff888030810000 [ 528.840472][ T43] which belongs to the cache kmalloc-2k of size 2048 [ 528.854539][ T43] The buggy address is located 1264 bytes inside of [ 528.854539][ T43] freed 2048-byte region [ffff888030810000, ffff888030810800) [ 528.868585][ T43] [ 528.870909][ T43] The buggy address belongs to the physical page: [ 528.877412][ T43] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x30810 [ 528.886179][ T43] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 528.894665][ T43] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 528.902891][ T43] page_type: f5(slab) [ 528.906862][ T43] raw: 00fff00000000040 ffff88801a842000 0000000000000000 dead000000000001 [ 528.915433][ T43] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 528.924526][ T43] head: 00fff00000000040 ffff88801a842000 0000000000000000 dead000000000001 [ 528.933185][ T43] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 528.941851][ T43] head: 00fff00000000003 ffffea0000c20401 00000000ffffffff 00000000ffffffff [ 528.950595][ T43] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 528.959251][ T43] page dumped because: kasan: bad access detected [ 528.965659][ T43] page_owner tracks the page as allocated [ 528.971362][ T43] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5858, tgid 5858 (syz-executor), ts 76127167638, free_ts 64259483759 [ 528.992893][ T43] post_alloc_hook+0x240/0x2a0 [ 528.997651][ T43] get_page_from_freelist+0x21e4/0x22c0 [ 529.003373][ T43] __alloc_frozen_pages_noprof+0x181/0x370 [ 529.009167][ T43] alloc_pages_mpol+0x232/0x4a0 [ 529.014006][ T43] allocate_slab+0x8a/0x330 [ 529.018588][ T43] ___slab_alloc+0xbd1/0x13f0 [ 529.023255][ T43] __slab_alloc+0x55/0xa0 [ 529.027574][ T43] __kmalloc_cache_noprof+0x411/0x6f0 [ 529.032929][ T43] rxrpc_alloc_connection+0x7b/0x590 [ 529.038204][ T43] rxrpc_prealloc_service_connection+0x26/0x2e0 [ 529.044646][ T43] rxrpc_service_prealloc_one+0x2f5/0xe20 [ 529.050350][ T43] afs_charge_preallocation+0x394/0x4e0 [ 529.055921][ T43] afs_open_socket+0x302/0x3a0 [ 529.060702][ T43] afs_net_init+0x67d/0x880 [ 529.065243][ T43] ops_init+0x35c/0x5c0 [ 529.069401][ T43] setup_net+0x10c/0x320 [ 529.073641][ T43] page last free pid 5782 tgid 5782 stack trace: [ 529.079956][ T43] __free_frozen_pages+0xbc4/0xd30 [ 529.085175][ T43] __put_partials+0x146/0x170 [ 529.089871][ T43] put_cpu_partial+0x17c/0x250 [ 529.094634][ T43] __slab_free+0x2b9/0x390 [ 529.099050][ T43] qlist_free_all+0x97/0x140 [ 529.103633][ T43] kasan_quarantine_reduce+0x148/0x160 [ 529.109095][ T43] __kasan_slab_alloc+0x22/0x80 [ 529.113961][ T43] __kmalloc_noprof+0x3c3/0x7f0 [ 529.118813][ T43] tomoyo_realpath_from_path+0xe3/0x5d0 [ 529.124397][ T43] tomoyo_path_perm+0x213/0x4b0 [ 529.129284][ T43] security_inode_getattr+0x12f/0x330 [ 529.134652][ T43] __x64_sys_newfstat+0xfc/0x200 [ 529.139585][ T43] do_syscall_64+0xfa/0xfa0 [ 529.144112][ T43] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.150033][ T43] [ 529.152376][ T43] Memory state around the buggy address: [ 529.157989][ T43] ffff888030810380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 529.166061][ T43] ffff888030810400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 529.174117][ T43] >ffff888030810480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 529.182361][ T43] ^ [ 529.190091][ T43] ffff888030810500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 529.198141][ T43] ffff888030810580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 529.206204][ T43] ================================================================== [ 529.214287][ C1] vkms_vblank_simulate: vblank timer overrun [ 529.265086][ T43] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 529.272392][ T43] CPU: 1 UID: 0 PID: 43 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(full) [ 529.281687][ T43] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 529.291851][ T43] Workqueue: usb_hub_wq hub_event [ 529.296897][ T43] Call Trace: [ 529.300184][ T43] [ 529.303158][ T43] dump_stack_lvl+0x99/0x250 [ 529.307765][ T43] ? __asan_memcpy+0x40/0x70 [ 529.312477][ T43] ? __pfx_dump_stack_lvl+0x10/0x10 [ 529.317687][ T43] ? __pfx__printk+0x10/0x10 [ 529.322292][ T43] vpanic+0x237/0x6d0 [ 529.326264][ T43] ? __pfx_vpanic+0x10/0x10 [ 529.330752][ T43] ? preempt_schedule+0xae/0xc0 [ 529.335614][ T43] ? __pfx_preempt_schedule+0x10/0x10 [ 529.340989][ T43] panic+0xb9/0xc0 [ 529.344696][ T43] ? __pfx_panic+0x10/0x10 [ 529.349121][ T43] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 529.355002][ T43] ? media_devnode_unregister+0xe2/0xf0 [ 529.360536][ T43] check_panic_on_warn+0x89/0xb0 [ 529.365456][ T43] ? media_devnode_unregister+0xe2/0xf0 [ 529.370998][ T43] end_report+0x78/0x160 [ 529.375362][ T43] kasan_report+0x129/0x150 [ 529.379890][ T43] ? media_devnode_unregister+0xe2/0xf0 [ 529.385440][ T43] media_devnode_unregister+0xe2/0xf0 [ 529.390818][ T43] media_device_unregister+0x37c/0x400 [ 529.396317][ T43] dvb_usb_adapter_dvb_exit+0xf3/0x1b0 [ 529.401783][ T43] dvb_usb_adapter_exit+0x8b/0x240 [ 529.406902][ T43] dvb_usb_device_exit+0x1b6/0x350 [ 529.412007][ T43] ? lockdep_hardirqs_on+0x9c/0x150 [ 529.417203][ T43] ? __pfx_dvb_usb_device_exit+0x10/0x10 [ 529.422824][ T43] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 529.428892][ T43] ? usb_disable_interface+0x31d/0x350 [ 529.434344][ T43] usb_unbind_interface+0x26e/0x910 [ 529.439537][ T43] ? __pfx_usb_unbind_interface+0x10/0x10 [ 529.445251][ T43] device_release_driver_internal+0x4d9/0x800 [ 529.451318][ T43] bus_remove_device+0x34d/0x410 [ 529.456277][ T43] device_del+0x511/0x8e0 [ 529.460596][ T43] ? __pm_runtime_barrier+0x212/0x460 [ 529.465985][ T43] ? __pfx_device_del+0x10/0x10 [ 529.470834][ T43] ? __pfx___mutex_lock+0x10/0x10 [ 529.475864][ T43] usb_disable_device+0x3e9/0x8a0 [ 529.480883][ T43] usb_disconnect+0x330/0x950 [ 529.485560][ T43] hub_event+0x1cf5/0x4a20 [ 529.489974][ T43] ? do_raw_spin_lock+0x121/0x290 [ 529.495081][ T43] ? register_lock_class+0x51/0x320 [ 529.500292][ T43] ? __pfx_hub_event+0x10/0x10 [ 529.505065][ T43] ? process_scheduled_works+0x9ef/0x17b0 [ 529.510775][ T43] ? _raw_spin_unlock_irq+0x23/0x50 [ 529.515967][ T43] ? process_scheduled_works+0x9ef/0x17b0 [ 529.521763][ T43] ? process_scheduled_works+0x9ef/0x17b0 [ 529.527510][ T43] process_scheduled_works+0xae1/0x17b0 [ 529.533124][ T43] ? __pfx_process_scheduled_works+0x10/0x10 [ 529.539102][ T43] worker_thread+0x8a0/0xda0 [ 529.543696][ T43] kthread+0x711/0x8a0 [ 529.547761][ T43] ? __pfx_worker_thread+0x10/0x10 [ 529.552867][ T43] ? __pfx_kthread+0x10/0x10 [ 529.557469][ T43] ? _raw_spin_unlock_irq+0x23/0x50 [ 529.562723][ T43] ? lockdep_hardirqs_on+0x9c/0x150 [ 529.567932][ T43] ? __pfx_kthread+0x10/0x10 [ 529.572610][ T43] ret_from_fork+0x47c/0x820 [ 529.577202][ T43] ? __pfx_ret_from_fork+0x10/0x10 [ 529.582313][ T43] ? __switch_to_asm+0x39/0x70 [ 529.587070][ T43] ? __switch_to_asm+0x33/0x70 [ 529.591824][ T43] ? __pfx_kthread+0x10/0x10 [ 529.596411][ T43] ret_from_fork_asm+0x1a/0x30 [ 529.601229][ T43] [ 529.605145][ T43] Kernel Offset: disabled [ 529.609466][ T43] Rebooting in 86400 seconds..