last executing test programs: 10.62350808s ago: executing program 3 (id=2283): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x68, 0x100000, 0x0, 0x68, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x80000, 0x0, 0x0, 0x1, 0x11}, @ptr={0x73682a85, 0x5, 0x0, 0x0, 0x1, 0xca}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 10.547281275s ago: executing program 3 (id=2284): r0 = socket(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce010203010902"], 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x0, 0x819, 0x40, 0x0, 0x164}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x232e, 0x20, 0x2, 0x3d9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc038, 0x1, 0x0, 0x1bb}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7f24, 0x1, 0x2, 0x21}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac28, 0x400, 0x3, 0x2e8}}], 0x4, &(0x7f0000001a80)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x0, '\x00', {0x1, 0x4a0, 0x0, &(0x7f0000000a80)=@buf_512="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"}}, &(0x7f0000001b00)) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000400)={0x0, 0x6e41, 0x8000, 0x2, 0x158, 0x0, r0}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000140)) (async) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000400)={0x0, 0x6e41, 0x8000, 0x2, 0x158, 0x0, r0}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r6) (async) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x145}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0xb8}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) (async) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x145}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0xb8}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000340)='.\x00', 0xa50003d1) 8.59380226s ago: executing program 4 (id=2305): r0 = socket$netlink(0x10, 0x3, 0x2) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002900)={0x110, 0x5f, 0x101, 0x0, 0x25dfdbff, "", [@nested={0x100, 0x50, 0x0, 0x1, [@nested={0x75, 0x87, 0x0, 0x1, [@generic="9909b9a3556a23ac132da78ad50ddbaa9297c73d4757c1a8d8f277b2329eebef8b0dca3c3a876e267a7343a855eb06e2d9d4588b14839b21a9172f9906bbbc78a6b3d01b1fc87230a0cd617814b9949b235ab272f4f54b9cb3df0d9dd526002f5cd158f87c65ed129fc6f70729a527015c"]}, @generic="47e3b9708db25322e01bdc6b7f694fe1beb0ebfeaeb8aba7698c5de50637fbdb7cd6ce33317694ca210f9e118ce2cc7bc8ab42b979233442dcb2ebfa85274d92617080ae72d77583845f590c3c72084a6d930695c3fbd26fdd89ae827d55240034e97f185635d504e7ec283dd9bda165aaac4aaacc4e2f456e458f8ea3dd746bdb1b0e0e"]}]}, 0x110}], 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r3 = memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\'5\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\x05\x00\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) writev(r5, &(0x7f0000000500)=[{&(0x7f0000000680)="9dcf1bee6c065ac5fc95bb65d2", 0xd}], 0x1) splice(r5, 0x0, r4, 0x0, 0xc, 0x9) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r6, 0x0, 0x8008000000010, &(0x7f00000000c0)="17000000020001000003be8c5ee1768810003308030300ecff3f000000030000980000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba000840024f0298e9e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0x11a) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xc0010006, 0x0, 0x8000000000000000}]}) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)=0x0) write$P9_RGETLOCK(r7, &(0x7f0000000540)=ANY=[@ANYBLOB="270000003701000282000000000000000300000000000000200558712439b727c5a5f5634b91066867477e10486307242934771eae0623d4074b81c2ebb372b35031103c63929f5089e31c204ccfa908c76111e046511018f766659f57196755aebf2cc235c320c2adfecedabf06c476abf016991e717cd9c16819d6fd10a4a1654da06c297802d3d0ee86884b917ad9cf80fca8fd5d69ec28ce509c278de8eab618b0058ec20e9e34216e54573a84019f63af7bf5", @ANYRES32=r8, @ANYBLOB='\t\x00/dev/kvm\x00'], 0x27) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r0, @ANYRESDEC=0x0, @ANYRES32=r0], 0x34}, 0x1, 0x0, 0x0, 0x40010}, 0x10) 7.064354837s ago: executing program 3 (id=2311): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x5c, r2, 0x917, 0x0, 0x1000000, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x100002}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x5c}}, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001d0038002e001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bbfbffa8499c69ac76dd752d005cf868eefd6a343f12e2e2cd91fbeccbf146ec8ec3d3bb17535dcc71c048196c20a0ee5dc8023b4e9d7318b07c15ae1a1daaecb1966bc7f0d3e27df9baf81e131945dfc91e79fe155d799f89de5cc2c8fc5e555189098bba389da78e81b3fb811c3fe6d59dc30eb2fb5e095412603f3aaf055f7f3d0c4b229f911eaa2b3fb9506bda1dc5e5644db881dbcbebc08acf0526fde9847357a3350fff2658bf6ca49a77eb297b59741b321652d9f66f01010000014d36814d6be7", 0x110}, {&(0x7f0000000480)="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", 0x1000}], 0x0, 0x0, 0x0, 0x1f00c00e}, 0x14) 6.170008097s ago: executing program 3 (id=2316): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x5, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x2, 0xfffffffd, 0x8, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x100000, 0x3c5b, 0x3ff, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x24000, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x7, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x407, 0x7, 0x10103, 0x0, 0x5, 0x3c, 0x91, 0x2, 0xfffff7fd, 0x3, 0x5, 0x4, 0x8, 0x4, 0x80, 0x0, 0x5, 0x2, 0x8, 0x4, 0xfffffffd, 0x514], [0x10000007, 0x8, 0x12f, 0x8000, 0x10, 0x4, 0x129432e2, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x7, 0x0, 0x10007, 0x5, 0x2f, 0xb99, 0x312, 0x78, 0x6, 0xa, 0x6, 0x4000, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0x8, 0x1005, 0x5, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0xe, 0x80004, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x800004, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x1, 0x7fff, 0x6, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x85, 0x6, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x7, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d6, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x0, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb2f, 0x3, 0x8, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x8ad, 0x0, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x4, 0x5, 0xffffffff, 0x7ffffffe, 0x5, 0x6, 0x0, 0x3, 0x2, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10003, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x100005, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x49, 0xcd, 0xb4, 0x40, 0x424, 0xcf19, 0x7190, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x2, 0xff, 0x2b, 0x20, 0x6, "", [{{0x9, 0x4, 0xeb, 0x4, 0x0, 0xfc, 0x6c, 0x65, 0x4}}, {{0x9, 0x4, 0x61, 0x9, 0x2, 0x2, 0x2, 0xff, 0x7, [], [{{0x9, 0x5, 0x2, 0x0, 0x200, 0x7, 0x2, 0xe}}, {{0x9, 0x5, 0x5, 0x2, 0x8, 0xb, 0x5, 0x9}}]}}]}}]}}, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) write$char_usb(r0, &(0x7f0000000040)="e2", 0x918) 5.408135909s ago: executing program 1 (id=2321): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000550001002bbd70000200000007000000", @ANYRES32=r4, @ANYBLOB="20000100", @ANYRES32=r1, @ANYBLOB="00020200000000000000000002ffffffac1414bb86dd"], 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x0) 5.385009207s ago: executing program 1 (id=2322): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x2a, 0x1, 0x0, 0x1, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x12) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r3 = fsopen(&(0x7f0000000040)='fuse\x00', 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) r4 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r4, 0x110, 0x1, &(0x7f0000000040)='\x04]{!\x00', 0x5) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000080)='user_id', 0x0, 0xffffffffffffff9c) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd0900008400000005010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[@ANYBLOB="6001001d1000130726bd700000000000fe800000000000000000000000000033ac1414110000000000000000000000004e2a00004e230003020000003a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="02000000"], 0x160}, 0x1, 0x0, 0x0, 0xc0}, 0x0) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000008004500002400"], 0x0) pipe(&(0x7f0000000000)) socket$inet6(0xa, 0x2, 0x0) 4.15159456s ago: executing program 4 (id=2326): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x2, 0x4, 0x44008, 0x7, 0x12}, 0x50) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_cache\x00') read$FUSE(r1, &(0x7f0000002280)={0x2020}, 0x2020) pread64(r1, &(0x7f000001a240)=""/102393, 0x18ff9, 0x100008) getresuid(&(0x7f00000002c0), &(0x7f0000000300)=0x0, &(0x7f0000000340)) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in=@loopback, @in=@empty, 0x4e21, 0x149b, 0x4e21, 0x8001, 0x0, 0x80, 0x20, 0x60deb33187d90601, 0x0, r2}, {0x7, 0x2f5, 0x0, 0x3, 0x7fffffffffffffff, 0x2, 0x5, 0x85c0}, {0x2, 0x10001, 0x7, 0x7fffffff}, 0x7, 0x6e6bb5, 0x1, 0x0, 0x0, 0x2}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x21}, 0x4d5, 0x2b}, 0xa, @in=@remote, 0x3503, 0x0, 0x0, 0x1, 0x5, 0xff, 0xae}}, 0xe4) writev(r0, &(0x7f00000004c0)=[{&(0x7f00000000c0)="943a", 0x2}, {0x0}], 0x2) syz_clone(0x2008000, &(0x7f0000000140)="9491d04a79b3cb495d27111f84f968460873374b6e2226be2eef09e1ac6e47fcda6df740ef89584301396762296368d475899efb042fc87238035f6af7f3cff340540f09a029fdd9be56c7a5a698d673c1079037766067060729267daac1c93fac730d115ab9a946107c99", 0x6b, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)="b1bf4410f50ee84109b5") r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r4, 0x9}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x3ff, r5, 0x4}, 0x38) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x2d) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r3, 0xc038943b, &(0x7f0000000100)={0xfffffffffffffff8, 0x30, '\x00', 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x3}, @TCA_CAKE_WASH={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48801}, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009e293610ef171e7206de90f600700902120001000000000904"], 0x0) openat$sequencer2(0xffffff9c, &(0x7f0000005e00), 0x0, 0x0) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r10, 0xc058534f, &(0x7f0000000080)={{0xf, 0x1}, 0x1, 0x16d, 0x3, {0x0, 0x8}, 0x6, 0x6}) ioctl$KVM_GET_MSRS_cpu(r7, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xd90, 0x0, 0x200000000014000}]}) 3.374546537s ago: executing program 0 (id=2329): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000580)=@deltclass={0x2c, 0x29, 0x4, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x4, 0x2}, {0x7, 0xffff}, {0x4, 0xf}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x7f}}]}, 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="b40000001800090000000000000000001c140000fe000001000000"], 0xb4}}, 0x24040810) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffe01, 0x8]}, 0x8) r1 = syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000102c0)={0x2020, 0x0, 0x0}, 0x2046) syz_fuse_handle_req(r2, &(0x7f000000c280)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0xfffffffe}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000000380)={0x50, 0x0, r3, {0x7, 0x27, 0x0, 0xffffffff84048108, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000008280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') syz_fuse_handle_req(r2, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x90, 0x0, 0x0, {0x3, 0x0, 0x85b, 0x0, 0x0, 0xfffffffd, {0x5, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0xa000, 0xffffffff, 0x0, 0x0, 0x80000000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0\x00', 0x300480c, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10) bind$tipc(r5, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x43, 0x0, 0x3}, 0x10) bind$tipc(r4, 0x0, 0x0) close(r4) move_pages(r1, 0x2, &(0x7f0000000080)=[&(0x7f0000ddd000/0x3000)=nil, &(0x7f0000188000/0x1000)=nil], &(0x7f00000000c0)=[0x0, 0x2, 0x2, 0x5, 0x7, 0x80000000, 0xe4a3, 0x9, 0xffffffff], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) 3.038679712s ago: executing program 2 (id=2330): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OKEY={0x8, 0x4, 0x2}]}}}]}, 0x40}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="6800000042000100000000000000000003010000060000002600010000112233445566778899aabb0800450000140000000001170000010203040506070800000c00020006000600050000000c0003"], 0x68}}, 0x0) 2.879448471s ago: executing program 2 (id=2331): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xfffffffe, 0x40003) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000040)=""/255) (async) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000140)=""/254) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000280)={&(0x7f0000000240)=[0x0, 0x0, 0x0], 0x3, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, &(0x7f0000000300)=r1) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4038587a, &(0x7f0000000540)={{r0, &(0x7f0000000340)='/dev/input/event#\x00', 0x0, &(0x7f0000000380)={@align=0x6, {0xb2f2, 0xccd4, 0xa433, 0x4}}, 0xadf, &(0x7f00000003c0)={@_ha_fsid}, &(0x7f0000000400)=0x9}, {[0xec1d, 0x80, 0x1, 0x6]}, 0x2, 0xdb, &(0x7f0000000440)=""/219}) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r2, 0xc0fc4110, &(0x7f0000000580)={0x1, [0x3ff, 0x6, 0xce], [{0x6, 0x4, 0x0, 0x1, 0x1}, {0x6, 0x6, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x5, 0x0, 0x0, 0x1, 0x1}, {0x80000001, 0x5, 0x1, 0x0, 0x1}, {0x1d, 0x4, 0x0, 0x1}, {0x0, 0x10000, 0x1, 0x1, 0x1}, {0x1000, 0x1000, 0x0, 0x0, 0x1, 0x1}, {0x7, 0x1, 0x1, 0x0, 0x1}, {0x5, 0x8, 0x0, 0x1, 0x0, 0x1}, {0x0, 0x4, 0x0, 0x0, 0x1, 0x1}, {0x4, 0x10000, 0x1, 0x1}, {0x14, 0x9, 0x1, 0x1, 0x0, 0x1}], 0xff}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) r3 = syz_io_uring_setup(0x25b5, &(0x7f0000000680)={0x0, 0xbf68, 0x0, 0x2, 0x299}, &(0x7f0000000700)=0x0, &(0x7f0000000740)=0x0, &(0x7f0000000780)=0x0) (async) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f00000007c0)={0x1, 0x0, [{0x33c, 0x0, 0x1}]}) ioctl$XFS_IOC_OPEN_BY_HANDLE(r3, 0xc01c586b, &(0x7f0000000900)={r0, &(0x7f0000000800)='%-@\x00', 0x8000, &(0x7f0000000840)={@_ha_fsid={[0x9, 0xaa]}, {0x2, 0x8000, 0x6, 0x9}}, 0x7fff, &(0x7f0000000880)={@_ha_fsid}, &(0x7f00000008c0)}) (async) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000980), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f0000000b40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20081000}, 0xc, &(0x7f0000000b00)={&(0x7f00000009c0)={0x11c, r7, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x401}, {0x6, 0x11, 0x40}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x21c}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x86}, {0x6, 0x11, 0xf890}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x7}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) (async) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000b80)) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f0000000bc0)=0x4) (async) ioctl$KVM_NMI(r2, 0xae9a) (async) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000c00)=@IORING_OP_FALLOCATE={0x11, 0x20, 0x0, @fd=r2, 0x100, 0x0, 0x4, 0x0, 0x1, {0x0, r8}}) write(r2, &(0x7f0000000c80)="aeadd5e78d962bb02a72ef5000976160753348e35e95f56b556c486a8b31b162a9ab2f182f385d9d941a13b031df49398dd7678e62ef21e9cd8930563628e6591cbf", 0x42) (async) r9 = syz_open_dev$dri(&(0x7f0000000d00), 0x97ce, 0x44000) ioctl$DRM_IOCTL_GET_UNIQUE(r9, 0xc0086401, &(0x7f0000000d80)={0x38, &(0x7f0000000d40)=""/56}) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4024587b, &(0x7f0000001840)={{r0, &(0x7f0000000dc0)='[%@].\x00', 0x280000, &(0x7f0000000e00)={@_ha_fsid={[0x2, 0x4]}, {0x6, 0x7, 0x3}}, 0x9874, &(0x7f0000000e40)={@_ha_fsid}, &(0x7f0000000e80)=0x8000}, 0x9, &(0x7f0000001740)=[{0x1, 0x90000000, &(0x7f0000000ec0)='(\x00', &(0x7f0000000f00)="70dc1b8446751f6f7efec57b53b5b3129893f544864a4e3b4aad882c60ee8134f9d0fb24d96b73c22a69c611143f7de40894478c07f9d12a0f5bb358baecf27fa8007a7122431063480c7652aa802b551ce5887d9c04b4cd45a9f8c9e8d520d7e37aa39137f939", 0x67}, {0x2, 0x77, &(0x7f0000000f80)='%-@\x00', &(0x7f0000000fc0)="079e439d27b231b30c983bd0978afee7cb922bbf5d041455ca16c706e6514321e751ffb83bb3f6163a87097b543adbc5837d4a1404b675854048a26d6f301a641c979fdb42bd6666ddd6cd4a652a4ca5475e9fe997f4082c63ded60fe2b68822930a15bc7e7185cfb92583073e1a2b2cf75118866e463d7a12c06557b2c68606c2862942e1276d6cb12be04146e5d12ff0960bc8b94bab195c673319322daac7d0f284fa28af76a0ed4f4a416fdc1214637a8e5103731e9701b66b6e72a16aed5d920d91d0cda94fae7723fc8768a1d6ce331c5e968d14355038220952fef7b387a0a0f3d5a1af35f28fe54f7c8390e07d", 0xf1, 0x8}, {0x2, 0x5, &(0x7f00000010c0)='0000:00:10.0\x00', &(0x7f0000001100)="891206580bc97ca19edc86d13353625b26fce93c68f8ea741b13758954536f6ac11280533797b4eccc166a2ef098508a304e383a5a9d73689dea0bad0425a0", 0x3f}, {0x3, 0x9, &(0x7f0000001140)='\xb0{:{@\x00', &(0x7f0000001180)="25669ed4b7c7c04d436c5b68ee6d47f02e26c89b65bf6cfed0021a2984ac774b990ab2c45784b30521df9d7a69bf4702633fa62e53c032235e5487f1b2cbdd3cd3cbebdf82fffd1fd66c70f2ff6d33bc0604cd90649260739cecb91a1000cae04a61e27eee2690fcd8b6293b24b86dad737e1e21f58e7aeac4e886254a0b34b9f584126cbd687e726d76b24d1bf4a889b447c8e7d36b99cabfdb8d0673b3562b79c7bfcfe2ac3a100b5b939ca939", 0xae, 0x12}, {0x1, 0xb78f, &(0x7f0000001240)='\x00', &(0x7f0000001280)="200a80a98c4f4a901c58eb64f996c4e05204116f3404d3df7034940ded911b3ed1b695f40e1dd2c2bd128a4790d567f54d9b05643c58f9e26c75f857dc16ad5699dec303ef7c66db9d18036e2abd5a2129213e0668add116b9f948c4537f653e8962edd1da", 0x65, 0x22}, {0x1, 0x2, &(0x7f0000001300)='(.:*\x00', &(0x7f0000001340)="8bbf295097a2ad8ca0943dd1a07e46085b5c2147d6a0ec17029a3d537d05dfda1925a9ff633c744c19b57f92ed0356dfd251ec4685ef96293a3e69364844a41f29a19713294247acdf23561c57772775c37a7e2a3d544ea4fe68eea02d7a06e6832f08f7cd2576f4b3c2bf19afcaced15c22437eabc00a772ce4d221843bc2bab59b1c34990ca0e8cce240ea2c8a96d2ff43f2d7a27cb965bee385b518f46e3fd47e20232acd878e2ce66c5c3829a0fd618b3941354a655f6d", 0xb9, 0x32}, {0x1, 0x4, &(0x7f0000001400)=':\',:&}}/\x00', &(0x7f0000001440)="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", 0xfc, 0x16}, {0x1, 0x9, &(0x7f0000001540)='%-@\x00', &(0x7f0000001580)="ba6661544081570f4c6edd6b53917371832f34cdb5aa14287955c8817c1eb0a95f558021d3fc0850d70d31dfe782358c6a4d47ca9e53165679d56adfe5632ab2cef8eccf0e3ee554c1987b21183975419e0ea1b53afb952af05cccd50e7bc3561542b514f07e546db657157a33ba4cee189991ac32e8dfb6831a76412bc5f7798918ea4f29d2808b2caff2aea9f53bac1fd9a01de4a7705d3eda43", 0x9b, 0x30}, {0x3, 0xe, &(0x7f0000001640)='netdevsim\x00', &(0x7f0000001680)="120fa5c447e0f89671cc08ac213172dbdb37cd7f4b3b362cb58abe924d2306567fbd35daf1c8a6313f742e7bc1d8c527f8346fa55d65d67f055086fdab2c7331e39f77fdc7109a323ff9e3367b05588e1d5dbf5c9ce30c0396b03fe098d41b9441dda61774b644c90b7504fcb16ab60ad185f5faeda97324d6558f15e0c5db57cf3fd1a5113797e8f7b0433dc0f071b859b44cdcf4d73e8fe7217c8e02f20b614a99ce36cb978e2aa04ea56e14", 0xad, 0x20}]}) write$P9_RMKDIR(r10, &(0x7f0000001880)={0x14, 0x49, 0x2, {0x0, 0x3, 0x5}}, 0x14) (async) r11 = openat$rdma_cm(0xffffff9c, &(0x7f00000018c0), 0x2, 0x0) (async) r12 = mmap$IORING_OFF_CQ_RING(0x0, 0x58, 0x0, 0x12, r10, 0x8000000) syz_io_uring_modify_offsets$generic(r4, r12, 0x34, 0x4) (async) fsopen(&(0x7f0000001900)='minix\x00', 0x1) ioctl$SNDRV_PCM_IOCTL_RESUME(r10, 0x4147, 0x0) (async) pwritev(r11, &(0x7f0000001d80)=[{&(0x7f0000001940)="80c7c8f41e52736b090af8d16bdf38f7ce362c5d87500d29822dcab6c2c971e804d240458df8fa179df4842c1308cd70c38d36906ff6c4c77129a6b8097369ae5c7f31", 0x43}, {&(0x7f00000019c0)="a95971d9c51f51b5ac85a71aaae49d02390bca05a3063724611ba5a2b43134e2c8fd4cfea42144b13ab0c3984bd24391205a92ffbe36c0c10b5ec2478b93180a4950f805c4956783f79f4fc2f848c6a73b2cc1cebd2d15338a4e3f464ebaa167f68d3606c60b52947903ceba742ff2db85be120daef0261222fa1fd3a963faf3e48e454460d0383ea158078572e45387df0244fd97f2601a3bbc2e9dd89ca7e7d6a7dba912ccd697fb0a2b00150875b8dc2646dbb2f58ed44bc9e2f1c2ec6a4840eab092148a5431ab383427", 0xcc}, {&(0x7f0000001ac0)="afc16f4d3902ab7a0a9932c34b3e9e8a33606c4cf7c66e63d5d816ac4bb238dbfec402c3be25f608ee409bf00fc86dbc24818359bf4dad0f88319e884d48d79f8a40d8d432b18b464aea1c2a047f8164a252c008753117371bc4d9196db34f6374dbab33c703fcb0610ff90c5f7c57d5d9425f3b2ad4d9ca019eb27637", 0x7d}, {&(0x7f0000001b40)="247f4d4daa707b9f3809ed9a3d6c6b6d9dfdcb42a2939985e4735bf3517ee5a299173acbf6f637c4ab48c5dfc392b3bed9fc024d1400ba5170acf130eb6a388e9a4289fd5a8b10cbcf3d8c431e6c339d4abb43722a482c29970309357d", 0x5d}, {&(0x7f0000001bc0)="0a6a0e75f92c9808f511f5e6ded1d855be894bc6954c8a1cf3c92e177916a75535376f08cbb563ad58cb7a53030080", 0x2f}, {&(0x7f0000001c00)="a76dadede9", 0x5}, {&(0x7f0000001c40)="b2f0e9b1faae39947f652f7e3597ed74ac7cc313c11fc69880db1830159a6073f3839992a441de297e4ba83a18011bccb1665041662a12f649e3cd031c6a7f41b852576207d171cbd5edd22bf3e1a804c8ab59b341475e8b79a0b7f316057ed2d28643efeb4e9aa1b489e1e3dd4c34affa31a8a5499c077df02713cac1304bbeb007", 0x82}, {&(0x7f0000001d00)="6da7a8c7d0e6a8cbbd", 0x9}, {&(0x7f0000001d40)="fea883b3c76a9663386f183be9fe5c0b5e2b95d544de348e01", 0x19}], 0x9, 0xfffffff8, 0x7) (async) ioctl$KVM_SET_MP_STATE(r10, 0x4004ae99, &(0x7f0000001e00)=0x1) 2.815821583s ago: executing program 2 (id=2332): r0 = syz_open_procfs(0x0, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4038587a, &(0x7f0000000740)={{r0, &(0x7f0000000080)='/proc/cpuinfo\x00', 0x200, 0x0, 0x8, &(0x7f00000005c0), 0x0}, {[0x681, 0x7, 0x8a6]}, 0x1, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000025c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500f4094c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc10001180090001006c61737400000000140000001100010000000000000000000900000a"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000200)="22e7f4eddbffada2a190628d2815f2813199e4", 0x13}], 0x1, &(0x7f0000000280)=[@txtime={{0x14, 0x1, 0x3d, 0x40}}, @txtime={{0x14, 0x1, 0x3d, 0x1}}, @txtime={{0x14, 0x1, 0x3d, 0x265}}, @mark={{0x10, 0x1, 0x24, 0x10000}}], 0x4c}, 0x8000) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010408000000000000000a0000040900010073797a31000000000900020073797a32000000001c000480180001800d00010073796e70726f7879000000"], 0x70}, 0x1, 0x0, 0x0, 0x4000851}, 0x24044010) r6 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xffffffffffff0000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x4040060) 2.68813742s ago: executing program 2 (id=2333): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='yeah', 0x4) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)="89000000120081ae08060cdc030000fe7f03234e0000004e2301ffca1bdcfdd9fb0024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000600)="11d6cb557c849601b143d4f4f2fe4b15f1b62db6", 0x14}], 0x2}, 0x4000000) 2.551652827s ago: executing program 2 (id=2334): r0 = socket$kcm(0x21, 0x7, 0x2) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@in={0x2, 0x4e23, @rand_addr=0x64010102}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ae", 0x1}, {0x0}], 0x2, &(0x7f0000000300)=ANY=[@ANYBLOB="ee5305771d383b344b0d795f494ce30f57907994631d4a423bff508fd0b8e4476d861629f4d5bcafc29b95bca68de32ed6c708884c582fbd15073b8ec055592b6e6d2c257c13bde44b5847027d75dbe0f3292cd54852fd3a54b20138095d606d1dcf4e09f4b2001589212ca978faa488ea994ad3eea33ee0776da55a4a48f71033506c6e483a5db2dc295ceae582d3945a235b53e97307193f56104c3a1468931aaa5a5626c7d855c0f48e0111ad3e3ab38ea3aa0e9cffc14808a48b412f349407193986aa77a7c3e54c79450682f6f4ed4572a8cb2824246685"], 0x10b8}, 0x10) (async) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@in={0x2, 0x4e23, @rand_addr=0x64010102}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ae", 0x1}, {0x0}], 0x2, &(0x7f0000000300)=ANY=[@ANYBLOB="ee5305771d383b344b0d795f494ce30f57907994631d4a423bff508fd0b8e4476d861629f4d5bcafc29b95bca68de32ed6c708884c582fbd15073b8ec055592b6e6d2c257c13bde44b5847027d75dbe0f3292cd54852fd3a54b20138095d606d1dcf4e09f4b2001589212ca978faa488ea994ad3eea33ee0776da55a4a48f71033506c6e483a5db2dc295ceae582d3945a235b53e97307193f56104c3a1468931aaa5a5626c7d855c0f48e0111ad3e3ab38ea3aa0e9cffc14808a48b412f349407193986aa77a7c3e54c79450682f6f4ed4572a8cb2824246685"], 0x10b8}, 0x10) write$binfmt_script(0xffffffffffffffff, &(0x7f00000002c0), 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x448d4) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r0], 0x4c}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) socket(0x1, 0x5, 0xf06b) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, 0x0, 0x20000000) madvise(&(0x7f00004b8000/0x1000)=nil, 0x1000, 0xa) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4, 0x4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000200)=[{0x7c, 0x0, 0x0, 0x800000}, {0xb, 0x0, 0x0, 0x3}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000200)=[{0x7c, 0x0, 0x0, 0x800000}, {0xb, 0x0, 0x0, 0x3}]}) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') (async) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') read$FUSE(r7, &(0x7f0000004180)={0x2020}, 0x2020) (async) read$FUSE(r7, &(0x7f0000004180)={0x2020}, 0x2020) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x1, 0x2) (async) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x1, 0x2) 2.229865526s ago: executing program 1 (id=2335): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x26f}], 0x1}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24040000) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f00000002c0)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x2940000, @remote, 0x9}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466ccfe807a000000ad6e911b51818462b40006000001", 0x2c}], 0x1}, 0x3004003f) 2.132811654s ago: executing program 3 (id=2336): r0 = socket$netlink(0x10, 0x3, 0x2) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002900)={0x110, 0x5f, 0x101, 0x0, 0x25dfdbff, "", [@nested={0x100, 0x50, 0x0, 0x1, [@nested={0x75, 0x87, 0x0, 0x1, [@generic="9909b9a3556a23ac132da78ad50ddbaa9297c73d4757c1a8d8f277b2329eebef8b0dca3c3a876e267a7343a855eb06e2d9d4588b14839b21a9172f9906bbbc78a6b3d01b1fc87230a0cd617814b9949b235ab272f4f54b9cb3df0d9dd526002f5cd158f87c65ed129fc6f70729a527015c"]}, @generic="47e3b9708db25322e01bdc6b7f694fe1beb0ebfeaeb8aba7698c5de50637fbdb7cd6ce33317694ca210f9e118ce2cc7bc8ab42b979233442dcb2ebfa85274d92617080ae72d77583845f590c3c72084a6d930695c3fbd26fdd89ae827d55240034e97f185635d504e7ec283dd9bda165aaac4aaacc4e2f456e458f8ea3dd746bdb1b0e0e"]}]}, 0x110}], 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r3 = memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\'5\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\x05\x00\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)={0x1c, r5, 0x1, 0x0, 0x0, {{0x53}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) 2.072019771s ago: executing program 1 (id=2338): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x482, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000fd3f00000000000009000000850000002e000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe80, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3000000}, 0x4c) 2.012786568s ago: executing program 1 (id=2339): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x640400c0}, 0xc800) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xff2c}], 0x20, &(0x7f0000000000)=ANY=[@ANYBLOB="2c000000840000000100002dff0000000c"], 0x2c}], 0x1, 0x890) 1.957492055s ago: executing program 0 (id=2340): inotify_init1(0x80000) openat$kvm(0xffffffffffffff9c, 0x0, 0x101000, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000580)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x45}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000500)={0x0, 0x1fffd, 0x0, 0x3}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x3, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf7ff, 0x8, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x10, 0x2, 0xe3, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x29a7, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x20, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r4, '\x00', {0x2, 0x0, 0x0, 0x0}}, 0x0) (fail_nth: 15) ioctl$UI_ABS_SETUP(r7, 0x401c5504, &(0x7f0000000340)={0x30, {0x0, 0x2, 0x7, 0x4}}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_dev$loop(0x0, 0xee8, 0x5042) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) ioctl$KVM_CREATE_PIT2(r9, 0x4040ae77, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_PIT(r9, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x8, 0x0, 0x0, 0x3, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x9, 0x0, 0x2, 0x2}, {0xeda7, 0x4, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffffffffffe}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x4, 0x1000000000080, 0xfffffffffffffff8, 0x0, 0x0, 0x2004cb, 0x3, 0x100000000000000, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2eb, 0x2000000000003ff, 0x2, 0x0, 0x400000], 0x0, 0x200306}) 1.824598971s ago: executing program 1 (id=2341): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000080)=&(0x7f0000000040)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0xffffffffffffff14, 0x1, 0x1, 0x0, @empty=0x8002}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x5}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x21c}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x70}}, 0x20000044) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="120100030000000878f0031840000102030109022d000101009003020000080103010202092101040301221f040905810308000808070905020300040a0904"], &(0x7f0000000400)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x200, 0x7, 0xe2, 0x7c, 0xff, 0xf7}, 0x10c, &(0x7f00000001c0)={0x5, 0xf, 0x10c, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0xfa, "418a4a85ae4590a40029c467d31e1345"}, @generic={0xe9, 0x10, 0x1, "fc143227482a8ea03eb33da8951831d1f762a747a48104b568f060f22f3c612c4d18450e7be21ec197b73d4399bf67c246f39c2f38ae4502d6a767ae9a5773227538f0cd90c6ee32dadd496cac8736cbf3c3967fbd8d0d93acb1e6c89d0aefe3b9478c2fa6ef822047c9466daa9dcc11fc1530b5f2e6dcc7882540a4c18735815860e4889064f2fb3524271ab69c8f8fb2041eb3eae7b3bd0e8a4092cbab5eddbf5bdeebd9062d3efa7692881eef9095c37f687391c0b473e86cfdbdd66b28ce0b75865604b38ff423157e903aeea6762b744b8b642a74223cd77ba5a44ac89c7037fbff0122"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x9, 0x8, 0x6}]}, 0x3, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x441}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x180c}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x813}}]}) syz_usb_control_io$hid(r3, &(0x7f0000000500)={0x24, 0x0, &(0x7f0000000440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x445}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000008c0)={0x24, 0x0, &(0x7f00000007c0)={0x0, 0x3, 0xc, @string={0xc, 0x3, "c992c0ad082f92484cf0"}}, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x280, &(0x7f0000000b00)={@multicast, @multicast, @void, {@mpls_uc={0x8847, {[{0x3d1, 0x0, 0x1}, {0x3ff}, {0x13, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0xf4c7, 0x0, 0x1}, {0x8}], @ipv6=@generic={0x7, 0x6, "75c405", 0x22e, 0x0, 0x0, @empty, @loopback, {[@routing={0x6c, 0x6, 0x2, 0x7, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, @dev={0xfe, 0x80, '\x00', 0x1a}]}, @fragment={0x33, 0x0, 0x1, 0x1, 0x0, 0xe, 0x65}, @srh={0x62, 0xa, 0x4, 0x5, 0xa, 0x10, 0x8, [@private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @ipv4={'\x00', '\xff\xff', @broadcast}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1]}, @dstopts={0xc, 0x3, '\x00', [@pad1, @calipso={0x7, 0x10, {0x1, 0x2, 0xac, 0xfff7, [0x8]}}, @jumbo={0xc2, 0x4, 0xffff0000}, @pad1]}, @routing={0x5e, 0x12, 0x0, 0x1, 0x0, [@mcast2, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @loopback, @dev={0xfe, 0x80, '\x00', 0x27}]}, @routing={0x83, 0xc, 0x1, 0xfb, 0x0, [@remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @empty, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @routing={0xc, 0xc, 0x1, 0x4, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @mcast1, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback]}], "902946752147"}}}}}}, &(0x7f0000000d80)={0x0, 0x2, [0xb4, 0x1db, 0xf5c, 0xb8f]}) r4 = socket$inet_udp(0x2, 0x2, 0x0) unshare(0x22020400) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f00000000c0)=0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f0000000480)=r5) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x2b, @private=0xa010100, 0x4e21, 0x0, 'wlc\x00', 0xc, 0x2, 0x47}, 0x2c) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(0x0, r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r9, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="2508007a0000000000030700000008000300", @ANYRES32=r8, @ANYBLOB="1400060064756d6d7930000000000000000000001400040076657468315f746f5f626f016400000005005300010000000800050004"], 0x54}}, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0xaf01, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') read$qrtrtun(r10, &(0x7f0000000000)=""/137, 0x89) preadv(r10, &(0x7f0000000700)=[{&(0x7f0000000280)=""/124, 0x7c}], 0x1, 0x91, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="6800000042000100000000000000000003010000061400002600010007112233445566778899aabb0800450000140000000001170000010203040506070800000c00020006000600810000000c0003"], 0x68}}, 0x0) 1.770193536s ago: executing program 2 (id=2342): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xca, r0, 0x18}, 0x38) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) r2 = epoll_create1(0x80000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) preadv2(r3, &(0x7f0000000340)=[{&(0x7f0000000380)=""/258, 0x102}], 0x1, 0x7, 0x4, 0x21) r4 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x4]}, 0x8, 0x800) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000040)={0xc0000008}) signalfd4(r4, &(0x7f0000000140)={[0xfffffffffffffff9]}, 0x8, 0x0) syz_usb_control_io$uac3(r1, 0x0, 0x0) 1.588012607s ago: executing program 0 (id=2343): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="600000001000050401c3000000000000000000000003000000000000000000000a00030076657468300000003400128009000100766574680000000024000280200001"], 0x60}}, 0x0) 1.075823211s ago: executing program 0 (id=2344): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='yeah', 0x4) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)="89000000120081ae08060cdc030000fe7f03446b000000750001ffca1bdcfdd9fb0024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000600)="11d6cb557c849601b143d4f4f2fe4b15f1b62db6", 0x14}], 0x2}, 0x4000000) 972.270371ms ago: executing program 4 (id=2345): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00), 0x0, 0x402}, 0x38) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = fsopen(&(0x7f00000000c0)='f2fs\x00', 0x1) r4 = fcntl$dupfd(r3, 0x0, r3) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r4, 0xc040583f, &(0x7f0000000380)={{@align=0xb3f, {0x5, 0xe5, 0x3, 0x9}}, {{[0x7, 0x1, 0x8, 0x401]}, 0x0, 0x2, 0x6, 0x0, &(0x7f0000000340)}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000041000701fefffffffeffffff017c0000040042800c00018006050000000000000000028008001800", @ANYRES32=r6, @ANYBLOB='I\f\x00\x00'], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0x4000000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x44090}, 0xc0) 929.436519ms ago: executing program 0 (id=2346): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$l2tp(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r5, &(0x7f0000004100)={0x2020}, 0x2020) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="a7ffa88800000000200012800900010069706970000000fa0f000280040013000500090000000008f33a5798cb485f3a9776f093ab3e544599d87862ad961fa67f7215b55c42d37b9a100eb2ec063287898534c013c8f11d376156badd398f094e0e3b0cae09b813a27158392211de2312f252"], 0x40}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_virt_wifi\x00'}) socket(0x400000000010, 0x3, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r8, &(0x7f0000002640)={0x2020}, 0x2020) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4401000010000100feffffbf00010000fe88000000000000000000000000000000000000000000000000000107944e230005000000003a0000000000000000007c", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000009000000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000ff0100000000000002000000fcffffff000000002abd700004350000020001fd20000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0015005a07350003000000"], 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x134, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0xa, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x134}, 0x1, 0x0, 0x0, 0x8801}, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000100)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x1, @random="0c31b0d3ddb0"}, 0x6, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x29}}, 'bridge0\x00'}) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x30, 0x1, 0x4, 0x401, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x101}, @NFULA_CFG_MODE={0xa, 0x2, {0x9, 0x3}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x884c) 273.142071ms ago: executing program 4 (id=2347): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x18, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0xe, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0xe703, 0x42804}, 0x10) 222.969313ms ago: executing program 4 (id=2348): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/240, 0x302000, 0x1000, 0x5, 0x6}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r2) syz_clone(0x2048000, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=2349): ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x0, [{0x0, 0x4d88, 0x6, &(0x7f0000000640)="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"}, {0x0, 0x0, 0x1ff, 0x0}, {0x3, 0x0, 0x100d5b6, 0x0}, {0x2, 0x0, 0xfffffff8, 0x0}, {0x0, 0x0, 0xa, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x0, 0x0, 0x1, 0x0}, {0xc467fcc90cc6be14, 0x0, 0x814d, 0x0}, {0x7, 0x0, 0x1000, 0x0}, {0x3, 0x0, 0x6, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x3, 0x0, 0x1545, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40007, 0x0}]}) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) (async) ioctl$TCXONC(r0, 0x540a, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000003, 0x13, r6, 0x0) (async) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x10fffffffffffffd, 0x9, 0x7ffffffffffffffd, 0xffffffffffffffff, 0x3ffffd, 0x400000000006, 0x0, 0x2, 0x7fffffffffffffff, 0x5, 0x401, 0x6, 0x6, 0x20000001, 0xfffffffffffffffc], 0xd5d5c004, 0x1354}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f00000000c0)=@ethtool_stats}) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0x3261e) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) (async) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000040)={'wlan0\x00', 0x0}) (async) unshare(0x600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan0\x00', 0x0}) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) kernel console output (not intermixed with test programs): ptor of length 0, skipping remainder of the config [ 497.059563][ T5359] usb 5-1: config 0 has no interface number 0 [ 497.065707][ T5359] usb 5-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30 [ 497.077084][ T5359] usb 5-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216 [ 497.090523][ T5359] usb 5-1: config 0 interface 106 has no altsetting 0 [ 497.097582][ T5359] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 497.106701][ T5359] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.116896][ T5359] usb 5-1: config 0 descriptor?? [ 497.129580][ T5359] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 497.164058][T12535] fuse: Unknown parameter 'f;û’M 0x0000000000000007' [ 497.172846][T12535] sg_write: process 1147 (syz.1.1968) changed security contexts after opening file descriptor, this is not allowed. [ 497.472308][ T7827] hid_parser_main: 7 callbacks suppressed [ 497.472331][ T7827] thrustmaster 0003:044F:B651.000B: unknown main item tag 0x0 [ 497.485582][ T7827] thrustmaster 0003:044F:B651.000B: unknown main item tag 0x0 [ 497.493080][ T7827] thrustmaster 0003:044F:B651.000B: unknown main item tag 0x0 [ 497.500564][ T7827] thrustmaster 0003:044F:B651.000B: unknown main item tag 0x0 [ 497.508033][ T7827] thrustmaster 0003:044F:B651.000B: unknown main item tag 0x0 [ 497.515498][ T7827] thrustmaster 0003:044F:B651.000B: unknown main item tag 0x0 [ 497.522962][ T7827] thrustmaster 0003:044F:B651.000B: unknown main item tag 0x0 [ 497.530420][ T7827] thrustmaster 0003:044F:B651.000B: unknown main item tag 0x0 [ 497.537884][ T7827] thrustmaster 0003:044F:B651.000B: unknown main item tag 0x0 [ 497.545363][ T7827] thrustmaster 0003:044F:B651.000B: unknown main item tag 0x0 [ 497.558085][ T7827] thrustmaster 0003:044F:B651.000B: hidraw0: USB HID v0.81 Device [HID 044f:b651] on usb-dummy_hcd.1-1/input0 [ 497.629554][ T7827] thrustmaster 0003:044F:B651.000B: no inputs found [ 497.674369][ T7827] usb 2-1: USB disconnect, device number 77 [ 497.688967][ T7810] usb 3-1: Using ep0 maxpacket: 32 [ 497.913277][ T5359] usb 4-1: USB disconnect, device number 76 [ 498.345463][ T7810] usb 3-1: config 64 has an invalid interface number: 110 but max is 0 [ 498.355856][ T7810] usb 3-1: config 64 has no interface number 0 [ 498.362570][ T7810] usb 3-1: config 64 interface 110 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 498.373540][ T7810] usb 3-1: config 64 interface 110 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 498.385278][ T7810] usb 3-1: config 64 interface 110 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 498.396655][ T7810] usb 3-1: config 64 interface 110 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 498.397340][T12560] netlink: 'syz.3.1975': attribute type 4 has an invalid length. [ 498.406942][ T7810] usb 3-1: config 64 interface 110 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 498.406971][ T7810] usb 3-1: config 64 interface 110 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 498.406998][ T7810] usb 3-1: config 64 interface 110 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 498.448234][ T1175] usb 5-1: Failed to submit usb control message: -110 [ 498.469549][T12566] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 498.476598][ T1175] usb 5-1: unable to send the bmi data to the device: -110 [ 498.486764][ T1175] usb 5-1: unable to get target info from device [ 498.497106][ T1175] usb 5-1: could not get target info (-110) [ 498.507219][ T1175] usb 5-1: could not probe fw (-110) [ 498.671628][T12569] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1977'. [ 499.223044][ T7810] usb 3-1: New USB device found, idVendor=04fc, idProduct=0231, bcdDevice=6f.a9 [ 499.233205][ T7810] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.241446][ T5359] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 499.271031][ T7810] usb 3-1: Product: syz [ 499.277509][ T7810] usb 3-1: Manufacturer: syz [ 499.284721][ T7810] usb 3-1: SerialNumber: syz [ 499.300789][T12551] raw-gadget.5 gadget.2: fail, usb_ep_enable returned -22 [ 499.333310][ T7810] spcp8x5 3-1:64.110: SPCP8x5 converter detected [ 499.356055][ T7810] usb 3-1: SPCP8x5 converter now attached to ttyUSB0 [ 499.396477][ T5359] usb 4-1: config 0 has an invalid interface number: 106 but max is 0 [ 499.421472][ T5359] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 499.445089][ T5359] usb 4-1: config 0 has no interface number 0 [ 499.460259][ T5359] usb 4-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30 [ 499.483940][ T5359] usb 4-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216 [ 499.515602][ T5359] usb 4-1: config 0 interface 106 has no altsetting 0 [ 499.524014][T12580] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 499.533041][ T5359] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 499.542777][ T5359] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.567402][T12551] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 499.585015][ T5359] usb 4-1: config 0 descriptor?? [ 499.595785][ T7816] usb 3-1: USB disconnect, device number 59 [ 499.619901][ T7816] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 499.631047][ T5359] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 499.646061][ T7816] spcp8x5 3-1:64.110: device disconnected [ 499.699009][T12587] ALSA: mixer_oss: invalid OSS volume '' [ 499.724584][T12587] ALSA: mixer_oss: invalid OSS volume '' [ 499.745328][T12587] ALSA: mixer_oss: invalid OSS volume '|--' [ 499.768671][T12587] ALSA: mixer_oss: invalid OSS volume '/32' [ 499.800677][T12587] ALSA: mixer_oss: invalid OSS volume 'Main:' [ 499.811813][T12587] ALSA: mixer_oss: invalid OSS volume '+--' [ 499.817726][T12587] ALSA: mixer_oss: invalid OSS volume '|--' [ 499.831408][T12587] ALSA: mixer_oss: invalid OSS volume '/32' [ 499.842166][T12587] ALSA: mixer_oss: invalid OSS volume '+--' [ 499.848094][T12587] ALSA: mixer_oss: invalid OSS volume '+--' [ 499.862503][T12587] ALSA: mixer_oss: invalid OSS volume '|--' [ 499.872892][T12587] ALSA: mixer_oss: invalid OSS volume '/32' [ 499.878794][T12587] ALSA: mixer_oss: invalid OSS volume '|--' [ 499.901983][T12587] ALSA: mixer_oss: invalid OSS volume '/32' [ 499.942180][T12587] ALSA: mixer_oss: invalid OSS volume '|--' [ 499.979731][T12587] ALSA: mixer_oss: invalid OSS volume '/32' [ 500.020991][T12587] ALSA: mixer_oss: invalid OSS volume '|--' [ 500.046477][T12587] ALSA: mixer_oss: invalid OSS volume '/32' [ 500.071408][T12587] ALSA: mixer_oss: invalid OSS volume '|--' [ 500.091951][T12587] ALSA: mixer_oss: invalid OSS volume '/32' [ 500.100591][T12587] ALSA: mixer_oss: invalid OSS volume '|--' [ 500.107713][T12587] ALSA: mixer_oss: invalid OSS volume '/32' [ 500.113669][T12587] ALSA: mixer_oss: invalid OSS volume '|--' [ 500.123310][T12587] ALSA: mixer_oss: invalid OSS volume '/32' [ 500.129968][T12587] ALSA: mixer_oss: invalid OSS volume '|--' [ 500.217201][T12587] ALSA: mixer_oss: invalid OSS volume '/32' [ 500.239240][T12587] ALSA: mixer_oss: invalid OSS volume '|--' [ 500.280030][T12593] netlink: 'syz.2.1982': attribute type 13 has an invalid length. [ 500.289939][T12587] ALSA: mixer_oss: invalid OSS volume '/32' [ 500.300707][T12593] gretap0: refused to change device tx_queue_len [ 500.307059][T12593] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 500.349591][T12593] tipc: Enabled bearer , priority 0 [ 500.351079][ T7810] usb 5-1: USB disconnect, device number 64 [ 500.367928][T12587] ALSA: mixer_oss: invalid OSS volume '|--' [ 500.393168][T12587] ALSA: mixer_oss: invalid OSS volume '/32' [ 500.411496][T12587] ALSA: mixer_oss: invalid OSS volume '|--' [ 500.422522][T12587] ALSA: mixer_oss: invalid OSS volume '/32' [ 500.433227][T12587] ALSA: mixer_oss: invalid OSS volume '|--' [ 500.452642][T12587] ALSA: mixer_oss: invalid OSS volume '/32' [ 500.480082][T12587] ALSA: mixer_oss: invalid OSS volume '|--' [ 500.488996][T12596] FAULT_INJECTION: forcing a failure. [ 500.488996][T12596] name failslab, interval 1, probability 0, space 0, times 0 [ 500.504772][T12587] ALSA: mixer_oss: invalid OSS volume '/32' [ 500.522739][T12587] ALSA: mixer_oss: invalid OSS volume '|--' [ 500.530082][T12593] syzkaller0: entered promiscuous mode [ 500.537472][T12587] ALSA: mixer_oss: invalid OSS volume '/32' [ 500.543962][T12596] CPU: 0 UID: 0 PID: 12596 Comm: syz.4.1983 Tainted: G L syzkaller #0 PREEMPT(full) [ 500.543992][T12596] Tainted: [L]=SOFTLOCKUP [ 500.543999][T12596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 500.544011][T12596] Call Trace: [ 500.544019][T12596] [ 500.544028][T12596] dump_stack_lvl+0xe8/0x150 [ 500.544075][T12596] should_fail_ex+0x40c/0x560 [ 500.544108][T12596] should_failslab+0xa8/0x100 [ 500.544173][T12596] __kmalloc_cache_noprof+0xa8/0x660 [ 500.544208][T12596] ? __kmalloc_cache_noprof+0x150/0x660 [ 500.544234][T12596] ? snd_pcm_oss_change_params_locked+0x1ab/0x3c80 [ 500.544338][T12596] ? snd_pcm_oss_change_params_locked+0x1ab/0x3c80 [ 500.544377][T12596] snd_pcm_oss_change_params_locked+0x1ab/0x3c80 [ 500.544411][T12596] ? __pfx___mutex_trylock_common+0x10/0x10 [ 500.544443][T12596] ? rcu_is_watching+0x15/0xb0 [ 500.544465][T12596] ? trace_contention_end+0x3d/0x140 [ 500.544488][T12596] ? __mutex_lock+0x30d/0x1550 [ 500.544557][T12596] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 500.544588][T12596] ? snd_pcm_oss_write+0x201/0xb40 [ 500.544617][T12596] ? __pfx___mutex_lock+0x10/0x10 [ 500.544663][T12596] snd_pcm_oss_write+0x26e/0xb40 [ 500.544706][T12596] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 500.544733][T12596] vfs_write+0x296/0xba0 [ 500.544762][T12596] ? __pfx_vfs_write+0x10/0x10 [ 500.544784][T12596] ? __fget_files+0x2a/0x420 [ 500.544815][T12596] ? __fget_files+0x2a/0x420 [ 500.544840][T12596] ? __fget_files+0x3a2/0x420 [ 500.544866][T12596] ? __fget_files+0x2a/0x420 [ 500.544902][T12596] ksys_write+0x150/0x270 [ 500.544926][T12596] ? __pfx_ksys_write+0x10/0x10 [ 500.544956][T12596] __do_fast_syscall_32+0x23e/0x6f0 [ 500.544984][T12596] ? do_fast_syscall_32+0x33/0x70 [ 500.545010][T12596] ? lockdep_hardirqs_on+0x7a/0x110 [ 500.545035][T12596] ? asm_int80_emulation+0x1a/0x20 [ 500.545062][T12596] ? do_int80_emulation+0x29f/0x550 [ 500.545091][T12596] ? trace_irq_disable+0x3b/0x140 [ 500.545122][T12596] do_fast_syscall_32+0x33/0x70 [ 500.545150][T12596] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 500.545174][T12596] RIP: 0023:0xf6fef0ec [ 500.545192][T12596] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 500.545210][T12596] RSP: 002b:00000000f53dd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 500.545231][T12596] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000500 [ 500.545245][T12596] RDX: 000000000000fdbc RSI: 0000000000000000 RDI: 0000000000000000 [ 500.545257][T12596] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 500.545270][T12596] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 500.545281][T12596] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 500.545310][T12596] [ 500.829150][T12587] ALSA: mixer_oss: invalid OSS volume '|--' [ 500.835118][T12587] ALSA: mixer_oss: invalid OSS volume '/32' [ 500.841191][T12587] ALSA: mixer_oss: invalid OSS volume '|--' [ 500.854412][T12587] ALSA: mixer_oss: invalid OSS volume '/32' [ 500.860384][T12587] ALSA: mixer_oss: invalid OSS volume '|--' [ 500.868881][T12587] ALSA: mixer_oss: invalid OSS volume '/32' [ 500.874831][T12587] ALSA: mixer_oss: invalid OSS volume '|--' [ 500.880844][T12587] ALSA: mixer_oss: invalid OSS volume '/32' [ 500.886812][T12587] ALSA: mixer_oss: invalid OSS volume '|--' [ 500.892819][T12587] ALSA: mixer_oss: invalid OSS volume '/32' [ 500.898758][T12587] ALSA: mixer_oss: invalid OSS volume '|--' [ 500.904762][T12587] ALSA: mixer_oss: invalid OSS volume '/32' [ 500.910707][T12587] ALSA: mixer_oss: invalid OSS volume '+--' [ 500.916807][T12587] ALSA: mixer_oss: invalid OSS volume '|--' [ 500.922760][T12587] ALSA: mixer_oss: invalid OSS volume '/32' [ 500.928752][T12587] ALSA: mixer_oss: invalid OSS volume '|--' [ 500.934683][T12587] ALSA: mixer_oss: invalid OSS volume '/32' [ 500.940675][T12587] ALSA: mixer_oss: invalid OSS volume '|--' [ 500.946644][T12587] ALSA: mixer_oss: invalid OSS volume '/32' [ 500.952623][T12587] ALSA: mixer_oss: invalid OSS volume '|--' [ 500.964642][T12587] ALSA: mixer_oss: invalid OSS volume '/32' [ 500.970572][T12587] ALSA: mixer_oss: invalid OSS volume '|--' [ 500.976609][T12587] ALSA: mixer_oss: invalid OSS volume '/32' [ 500.982555][T12587] ALSA: mixer_oss: invalid OSS volume '|--' [ 500.988580][T12587] ALSA: mixer_oss: invalid OSS volume '/32' [ 500.994551][T12587] ALSA: mixer_oss: invalid OSS volume '|--' [ 501.000571][T12587] ALSA: mixer_oss: invalid OSS volume '/32' [ 501.006519][T12587] ALSA: mixer_oss: invalid OSS volume '|--' [ 501.012548][T12587] ALSA: mixer_oss: invalid OSS volume '/32' [ 501.018481][T12587] ALSA: mixer_oss: invalid OSS volume '|--' [ 501.024589][T12587] ALSA: mixer_oss: invalid OSS volume '/32' [ 501.030524][T12587] ALSA: mixer_oss: invalid OSS volume '|--' [ 501.036552][T12587] ALSA: mixer_oss: invalid OSS volume '/32' [ 501.042505][T12587] ALSA: mixer_oss: invalid OSS volume '|--' [ 501.048513][T12587] ALSA: mixer_oss: invalid OSS volume '/32' [ 501.054567][T12587] ALSA: mixer_oss: invalid OSS volume '|--' [ 501.060595][T12587] ALSA: mixer_oss: invalid OSS volume '/32' [ 501.066603][T12587] ALSA: mixer_oss: invalid OSS volume '|--' [ 501.072668][T12587] ALSA: mixer_oss: invalid OSS volume '/32' [ 501.078613][T12587] ALSA: mixer_oss: invalid OSS volume '|--' [ 501.084623][T12587] ALSA: mixer_oss: invalid OSS volume '/32' [ 501.090634][T12587] ALSA: mixer_oss: invalid OSS volume '|--' [ 501.096710][T12587] ALSA: mixer_oss: invalid OSS volume '/32' [ 501.102668][T12587] ALSA: mixer_oss: invalid OSS volume '|--' [ 501.111466][T12587] ALSA: mixer_oss: invalid OSS volume '/32' [ 501.125816][T12587] ALSA: mixer_oss: invalid OSS volume '|--' [ 501.135034][T12587] ALSA: mixer_oss: invalid OSS volume '/32' [ 501.141815][T12587] ALSA: mixer_oss: invalid OSS volume '|--' [ 501.149433][T12593] syzkaller0: entered allmulticast mode [ 501.166882][T12587] ALSA: mixer_oss: invalid OSS volume '/32' [ 501.173717][T12587] ALSA: mixer_oss: invalid OSS volume '|--' [ 501.189852][T12587] ALSA: mixer_oss: invalid OSS volume '/32' [ 501.208738][ T13] usb 4-1: Failed to submit usb control message: -110 [ 501.216926][T12587] ALSA: mixer_oss: invalid OSS volume '|--' [ 501.226055][ T13] usb 4-1: unable to send the bmi data to the device: -110 [ 501.233874][T12587] ALSA: mixer_oss: invalid OSS volume '/32' [ 501.245188][T12587] ALSA: mixer_oss: invalid OSS volume '|--' [ 501.255234][ T13] usb 4-1: unable to get target info from device [ 501.272029][ T13] usb 4-1: could not get target info (-110) [ 501.278756][T12587] ALSA: mixer_oss: invalid OSS volume '/32' [ 501.287397][ T13] usb 4-1: could not probe fw (-110) [ 501.301808][T12587] ALSA: mixer_oss: invalid OSS volume '|--' [ 501.318998][T12587] ALSA: mixer_oss: invalid OSS volume '/32' [ 501.335914][T12587] ALSA: mixer_oss: invalid OSS volume '|--' [ 501.343926][T12587] ALSA: mixer_oss: invalid OSS volume '/32' [ 501.353819][T12587] ALSA: mixer_oss: invalid OSS volume '|--' [ 501.363496][T12587] ALSA: mixer_oss: invalid OSS volume '/32' [ 501.373571][T12587] ALSA: mixer_oss: invalid OSS volume '|--' [ 501.383720][T12587] ALSA: mixer_oss: invalid OSS volume '/32' [ 501.393699][T12587] ALSA: mixer_oss: invalid OSS volume '|--' [ 501.403803][T12587] ALSA: mixer_oss: invalid OSS volume '/32' [ 501.416874][T12587] ALSA: mixer_oss: invalid OSS volume '|--' [ 501.432208][T12587] ALSA: mixer_oss: invalid OSS volume '/32' [ 501.467610][T12587] ALSA: mixer_oss: invalid OSS volume '|--' [ 501.480764][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.487117][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.507000][T12587] ALSA: mixer_oss: invalid OSS volume '/32' [ 501.518675][T12587] ALSA: mixer_oss: invalid OSS volume '+--' [ 501.526223][T12587] ALSA: mixer_oss: invalid OSS volume '|--' [ 501.540765][T12587] ALSA: mixer_oss: invalid OSS volume '/32' [ 501.555931][T12587] ALSA: mixer_oss: invalid OSS volume '|--' [ 501.569683][T12587] ALSA: mixer_oss: invalid OSS volume '/32' [ 501.584433][T12587] ALSA: mixer_oss: invalid OSS volume '|--' [ 501.593147][T12587] ALSA: mixer_oss: invalid OSS volume '/32' [ 501.607512][T12587] ALSA: mixer_oss: invalid OSS volume '|--' [ 501.626820][T12587] ALSA: mixer_oss: invalid OSS volume '/32' [ 501.634639][T12587] ALSA: mixer_oss: invalid OSS volume '|--' [ 501.643415][T12587] ALSA: mixer_oss: invalid OSS volume '/32' [ 501.649381][T12587] ALSA: mixer_oss: invalid OSS volume '|--' [ 501.655378][T12587] ALSA: mixer_oss: invalid OSS volume '/32' [ 501.661319][T12587] ALSA: mixer_oss: invalid OSS volume '|--' [ 501.668977][T12587] ALSA: mixer_oss: invalid OSS volume '/32' [ 501.691254][T12587] ALSA: mixer_oss: invalid OSS volume 'Local:' [ 501.708522][T12587] ALSA: mixer_oss: invalid OSS volume '+--' [ 501.714790][T12587] ALSA: mixer_oss: invalid OSS volume '|--' [ 501.723352][T12587] ALSA: mixer_oss: invalid OSS volume '/32' [ 501.736780][T12587] ALSA: mixer_oss: invalid OSS volume '+--' [ 501.767363][T12587] ALSA: mixer_oss: invalid OSS volume '+--' [ 501.773502][T12587] ALSA: mixer_oss: invalid OSS volume '|--' [ 501.798030][T12587] ALSA: mixer_oss: invalid OSS volume '/32' [ 501.856509][T12587] ALSA: mixer_oss: invalid OSS volume '|--' [ 501.904868][T12587] ALSA: mixer_oss: invalid OSS volume '/32' [ 501.910999][T12587] ALSA: mixer_oss: invalid OSS volume '|--' [ 501.917036][T12587] ALSA: mixer_oss: invalid OSS volume '/32' [ 501.941133][T12587] ALSA: mixer_oss: invalid OSS volume '|--' [ 501.958452][T12587] ALSA: mixer_oss: invalid OSS volume '/32' [ 501.964486][T12587] ALSA: mixer_oss: invalid OSS volume '|--' [ 501.987260][T12587] ALSA: mixer_oss: invalid OSS volume '/32' [ 502.021083][T12587] ALSA: mixer_oss: invalid OSS volume '|--' [ 502.027063][T12587] ALSA: mixer_oss: invalid OSS volume '/32' [ 502.050466][T12587] ALSA: mixer_oss: invalid OSS volume '|--' [ 502.062746][T12587] ALSA: mixer_oss: invalid OSS volume '/32' [ 502.091176][T12587] ALSA: mixer_oss: invalid OSS volume '|--' [ 502.103668][T12587] ALSA: mixer_oss: invalid OSS volume '/32' [ 502.142559][T12587] ALSA: mixer_oss: invalid OSS volume '|--' [ 502.158411][T12587] ALSA: mixer_oss: invalid OSS volume '/32' [ 502.174171][T12587] ALSA: mixer_oss: invalid OSS volume '|--' [ 502.189668][T12587] ALSA: mixer_oss: invalid OSS volume '/32' [ 502.211126][T12587] ALSA: mixer_oss: invalid OSS volume '' [ 503.711782][ T7810] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 503.891706][ T7810] usb 5-1: Using ep0 maxpacket: 16 [ 503.901841][ T7810] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 503.915016][ T7810] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 504.101768][T12593] tipc: Resetting bearer [ 504.108488][T12592] tipc: Resetting bearer [ 504.128347][T12592] tipc: Disabling bearer [ 504.256620][T12617] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1989'. [ 504.268860][T12618] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 504.285310][T12617] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1989'. [ 504.467457][ T7810] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 504.478576][ T7810] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.497377][ T7810] usb 5-1: Product: syz [ 504.504224][ T7810] usb 5-1: Manufacturer: syz [ 504.505394][ T5359] usb 4-1: USB disconnect, device number 77 [ 504.510688][ T7810] usb 5-1: SerialNumber: syz [ 504.553720][ T7810] usb 5-1: config 0 descriptor?? [ 504.661470][ T7816] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 504.729205][ T7810] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 504.738708][ T7810] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 504.801471][ T7816] usb 1-1: device descriptor read/64, error -71 [ 504.991517][ T5359] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 505.041494][ T7816] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 505.121648][ T5359] usb 4-1: device descriptor read/64, error -71 [ 505.171485][ T7816] usb 1-1: device descriptor read/64, error -71 [ 505.291689][ T7816] usb usb1-port1: attempt power cycle [ 505.372190][ T5359] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 505.512625][ T5359] usb 4-1: device descriptor read/64, error -71 [ 505.540780][ T7810] em28xx 5-1:0.0: chip ID is em2828X [ 505.623825][ T5359] usb usb4-port1: attempt power cycle [ 505.641731][ T7816] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 505.672032][ T7816] usb 1-1: device descriptor read/8, error -71 [ 505.744562][T12610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.753369][T12610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.763538][T11946] usb 5-1: USB disconnect, device number 65 [ 505.772807][T11946] em28xx 5-1:0.0: Disconnecting em28xx [ 505.777881][ T7809] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 505.790896][T11946] em28xx 5-1:0.0: Freeing device [ 505.921547][ T7816] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 505.941903][ T7816] usb 1-1: device descriptor read/8, error -71 [ 505.961556][ T5359] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 505.982092][ T5359] usb 4-1: device descriptor read/8, error -71 [ 506.051702][ T7816] usb usb1-port1: unable to enumerate USB device [ 506.190414][ T7809] usb 3-1: config 0 has an invalid interface number: 106 but max is 0 [ 506.212931][ T7809] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 506.221869][ T5359] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 506.223123][ T7809] usb 3-1: config 0 has no interface number 0 [ 506.223157][ T7809] usb 3-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30 [ 506.248250][ T7809] usb 3-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216 [ 506.253250][ T5359] usb 4-1: device descriptor read/8, error -71 [ 506.261561][ T7809] usb 3-1: config 0 interface 106 has no altsetting 0 [ 506.261601][ T7809] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 506.261624][ T7809] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.286617][T12646] tipc: Enabling of bearer rejected, already enabled [ 506.311208][T12646] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1999'. [ 506.322383][ T7809] usb 3-1: config 0 descriptor?? [ 506.339110][T12646] netlink: 'syz.1.1999': attribute type 1 has an invalid length. [ 506.374954][T12646] bond4: entered promiscuous mode [ 506.380368][T12646] 8021q: adding VLAN 0 to HW filter on device bond4 [ 506.391646][ T5359] usb usb4-port1: unable to enumerate USB device [ 506.403767][T12646] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1999'. [ 506.412867][T12646] bond4: entered allmulticast mode [ 506.435571][T12646] bond4: (slave bridge3): making interface the new active one [ 506.443340][T12646] bridge3: entered promiscuous mode [ 506.448801][T12646] bridge3: entered allmulticast mode [ 506.458096][T12646] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 506.548574][ T7809] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 506.610349][T12659] netlink: 'syz.1.2003': attribute type 13 has an invalid length. [ 506.618960][T12659] gretap0: refused to change device tx_queue_len [ 506.625660][T12659] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 506.657835][T12659] tipc: Enabled bearer , priority 0 [ 506.701243][T12659] syzkaller0: entered promiscuous mode [ 506.706795][T12659] syzkaller0: entered allmulticast mode [ 506.951620][ T5359] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 507.114007][ T5359] usb 5-1: config 0 has an invalid interface number: 106 but max is 0 [ 507.131178][ T5359] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 507.158178][ T5359] usb 5-1: config 0 has no interface number 0 [ 507.169076][ T5359] usb 5-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30 [ 507.189309][ T5359] usb 5-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216 [ 507.232089][ T5359] usb 5-1: config 0 interface 106 has no altsetting 0 [ 507.239226][ T5359] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 507.253704][ T5359] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.277069][ T5359] usb 5-1: config 0 descriptor?? [ 507.363704][ T5359] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 507.608236][ T8955] usb 3-1: Failed to submit usb control message: -110 [ 507.655041][ T8955] usb 3-1: unable to send the bmi data to the device: -110 [ 507.713341][ T8955] usb 3-1: unable to get target info from device [ 507.754600][ T8955] usb 3-1: could not get target info (-110) [ 507.788616][ T8955] usb 3-1: could not probe fw (-110) [ 507.901587][ T5359] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 508.031748][T12682] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 508.130495][ T5359] usb 1-1: unable to get BOS descriptor or descriptor too short [ 508.153378][ T5359] usb 1-1: config 3 has an invalid interface number: 151 but max is 0 [ 508.166758][ T5359] usb 1-1: config 3 has no interface number 0 [ 508.173473][ T5359] usb 1-1: config 3 interface 151 has no altsetting 0 [ 508.197729][ T5359] usb 1-1: New USB device found, idVendor=05ac, idProduct=0263, bcdDevice=1d.cd [ 508.207392][ T5359] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.249066][ T5359] usb 1-1: Product: syz [ 508.256629][ T5359] usb 1-1: Manufacturer: syz [ 508.268520][ T5359] usb 1-1: SerialNumber: syz [ 508.498006][T12676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.517772][ T8952] usb 5-1: Failed to submit usb control message: -110 [ 508.526110][T12676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.546016][ T8952] usb 5-1: unable to send the bmi data to the device: -110 [ 508.555890][T12676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.580869][T12676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.589603][T12676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.598342][T12676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.606914][T12676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.615589][T12676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.624235][T12676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.632992][T12676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.661150][ T8952] usb 5-1: unable to get target info from device [ 508.675743][ T8952] usb 5-1: could not get target info (-110) [ 508.709846][ T8952] usb 5-1: could not probe fw (-110) [ 508.737485][ T5359] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:3.151/input/input40 [ 508.767191][ T4978] bcm5974 1-1:3.151: could not read from device [ 508.799323][ T5359] usb 1-1: USB disconnect, device number 75 [ 508.812757][ T4978] bcm5974 1-1:3.151: could not read from device [ 508.820151][ T4978] bcm5974 1-1:3.151: could not read from device [ 508.827206][ T4978] bcm5974 1-1:3.151: could not read from device [ 508.893260][ T5793] udevd[5793]: Error opening device "/dev/input/event4": No such file or directory [ 508.902809][ T5793] udevd[5793]: Unable to EVIOCGABS device "/dev/input/event4" [ 508.910442][ T5793] udevd[5793]: Unable to EVIOCGABS device "/dev/input/event4" [ 508.936091][ T5793] udevd[5793]: Unable to EVIOCGABS device "/dev/input/event4" [ 508.943694][ T5793] udevd[5793]: Unable to EVIOCGABS device "/dev/input/event4" [ 509.774637][T12665] tipc: Resetting bearer [ 509.828541][T12658] tipc: Resetting bearer [ 509.828932][ T7810] usb 5-1: USB disconnect, device number 66 [ 509.897379][T12658] tipc: Disabling bearer [ 510.184568][T12707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2013'. [ 510.200564][T12707] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2013'. [ 510.225831][ T7827] usb 3-1: USB disconnect, device number 60 [ 510.505983][T12720] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 510.770891][ T7810] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 511.015327][T12729] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2020'. [ 511.197132][ T7827] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 511.419675][ T7810] usb 5-1: Using ep0 maxpacket: 16 [ 511.640932][ T7809] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 511.729844][T12738] netlink: 'syz.3.2023': attribute type 13 has an invalid length. [ 511.748910][T12738] gretap0: refused to change device tx_queue_len [ 511.756442][T12738] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 511.774996][T12738] tipc: Started in network mode [ 511.779866][T12738] tipc: Node identity , cluster identity 4711 [ 511.786018][T12738] tipc: Failed to obtain node identity [ 511.791509][T12738] tipc: Enabling of bearer rejected, failed to enable media [ 511.823358][T12738] syzkaller0: entered promiscuous mode [ 511.828872][T12738] syzkaller0: entered allmulticast mode [ 511.864332][ T7827] usb 3-1: Using ep0 maxpacket: 32 [ 512.084967][ T7810] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 512.096525][ T7810] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 512.246878][T12742] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2024'. [ 512.302547][ T7809] usb 2-1: Using ep0 maxpacket: 32 [ 512.949707][ T7810] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 512.959870][ T7809] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 512.971069][ T7810] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.983897][ T7827] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 512.996019][ T7810] usb 5-1: Product: syz [ 513.000759][ T7809] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 513.013846][ T7827] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.025148][ T7810] usb 5-1: Manufacturer: syz [ 513.041538][ T7810] usb 5-1: SerialNumber: syz [ 513.046683][ T7809] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 513.056775][ T7827] usb 3-1: Product: syz [ 513.074962][ T7827] usb 3-1: Manufacturer: syz [ 513.083074][ T7810] usb 5-1: config 0 descriptor?? [ 513.089374][ T7809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.098513][ T7827] usb 3-1: SerialNumber: syz [ 513.115156][ T7810] usb 5-1: can't set config #0, error -71 [ 513.151933][ T7809] usb 2-1: config 0 descriptor?? [ 513.157692][ T7827] usb 3-1: config 0 descriptor?? [ 513.164220][ T7810] usb 5-1: USB disconnect, device number 67 [ 513.707117][ T7827] airspy 3-1:0.0: Board ID: 00 [ 513.711940][ T7827] airspy 3-1:0.0: Firmware version: [ 513.893263][T12750] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2026'. [ 513.902268][T12750] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2026'. [ 514.224880][T12761] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2030'. [ 514.274232][T12762] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2027'. [ 514.284527][T12762] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2027'. [ 514.352326][T12768] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 514.531594][ T5359] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 514.791757][ T5359] usb 4-1: Using ep0 maxpacket: 32 [ 514.798828][ T5359] usb 4-1: config index 0 descriptor too short (expected 19, got 18) [ 514.809675][ T5359] usb 4-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 514.819735][ T5359] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.829601][ T5359] usb 4-1: Product: syz [ 514.833855][ T5359] usb 4-1: Manufacturer: syz [ 514.838468][ T5359] usb 4-1: SerialNumber: syz [ 514.845423][ T5359] usb 4-1: config 0 descriptor?? [ 514.855259][ T5359] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 514.863656][ T5359] dvb-usb: bulk message failed: -22 (2/0) [ 514.874969][ T5359] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 514.884895][ T5359] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 514.893671][ T5359] usb 4-1: media controller created [ 514.915710][ T5359] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 514.960651][ T5359] usb 4-1: selecting invalid altsetting 7 [ 514.966583][ T5359] cxusb: set interface failed [ 514.971709][ T5359] dvb-usb: bulk message failed: -22 (1/0) [ 515.021156][ T5359] DVB: Unable to find symbol lgdt330x_attach() [ 515.027605][ T5359] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 515.049092][ T7827] airspy 3-1:0.0: Registered as swradio24 [ 515.054881][ T7827] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 515.067075][ T7810] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 515.151806][ T5359] rc_core: IR keymap rc-dvico-portable not found [ 515.158302][ T5359] Registered IR keymap rc-empty [ 515.181701][ T5359] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 515.194049][ T5359] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input41 [ 515.207109][ T5359] dvb-usb: schedule remote query interval to 100 msecs. [ 515.225416][ T5359] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 515.323809][ T5359] dvb-usb: bulk message failed: -22 (1/0) [ 515.431810][ T5359] dvb-usb: bulk message failed: -22 (1/0) [ 515.531130][ T7809] usb 3-1: USB disconnect, device number 61 [ 515.543750][ T5359] dvb-usb: bulk message failed: -22 (1/0) [ 515.555599][ T5705] usb 2-1: USB disconnect, device number 78 [ 515.597681][ T7827] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 515.651965][ T5359] dvb-usb: bulk message failed: -22 (1/0) [ 515.760953][T12784] netlink: 'syz.1.2037': attribute type 13 has an invalid length. [ 515.766996][ T5359] dvb-usb: bulk message failed: -22 (1/0) [ 515.768991][T12784] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2037'. [ 515.790014][T12784] tipc: Enabled bearer , priority 0 [ 515.840966][T12784] syzkaller0: entered promiscuous mode [ 515.846482][T12784] syzkaller0: entered allmulticast mode [ 515.871780][T11946] dvb-usb: bulk message failed: -22 (1/0) [ 515.981705][T11946] dvb-usb: bulk message failed: -22 (1/0) [ 516.042598][ T7827] usb 1-1: device descriptor read/64, error -71 [ 516.105767][T11946] dvb-usb: bulk message failed: -22 (1/0) [ 516.245040][T11946] dvb-usb: bulk message failed: -22 (1/0) [ 516.364153][T11946] dvb-usb: bulk message failed: -22 (1/0) [ 516.371882][ T7810] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 516.382793][ T7810] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 516.481616][T11946] dvb-usb: bulk message failed: -22 (1/0) [ 516.487750][ T7827] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 516.597281][ T7809] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 516.601756][T11946] dvb-usb: bulk message failed: -22 (1/0) [ 516.713671][T11946] dvb-usb: bulk message failed: -22 (1/0) [ 516.831603][ T5359] dvb-usb: bulk message failed: -22 (1/0) [ 516.924854][ T7827] usb 1-1: device descriptor read/64, error -71 [ 516.941750][ T5359] dvb-usb: bulk message failed: -22 (1/0) [ 517.035998][ T7827] usb usb1-port1: attempt power cycle [ 517.041607][ T5359] dvb-usb: bulk message failed: -22 (1/0) [ 517.085216][ T5705] usb 4-1: USB disconnect, device number 82 [ 517.189027][ T5705] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 517.254949][ T7810] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 517.265938][ T7810] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.273971][ T7810] usb 5-1: Product: syz [ 517.278123][ T7810] usb 5-1: Manufacturer: syz [ 517.282711][ T7810] usb 5-1: SerialNumber: syz [ 517.291305][ T7809] usb 3-1: Using ep0 maxpacket: 16 [ 517.471914][ T7827] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 517.483972][ T7810] cdc_mbim 5-1:1.0: skipping garbage [ 517.689605][T12773] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 517.798145][ T7809] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 517.811611][ T7827] usb 1-1: device descriptor read/8, error -71 [ 517.818826][ T7809] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 517.836064][ T7809] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 517.847206][ T7809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.856473][ T5705] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 517.865329][ T7809] usb 3-1: Product: syz [ 517.870639][ T7809] usb 3-1: Manufacturer: syz [ 517.876141][ T7809] usb 3-1: SerialNumber: syz [ 517.896282][ T7809] usb 3-1: config 0 descriptor?? [ 517.922810][ T7809] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 517.933162][ T7809] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 518.017487][T12773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 518.027448][T12773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 518.048718][T12773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 518.057516][T12773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 518.109651][T12786] tipc: Resetting bearer [ 518.115994][T12783] tipc: Resetting bearer [ 518.129784][ T7827] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 518.151046][T12783] tipc: Disabling bearer [ 518.456671][ T7827] usb 1-1: device descriptor read/8, error -71 [ 518.565813][T12773] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 518.577771][ T7827] usb usb1-port1: unable to enumerate USB device [ 518.673785][ T7810] cdc_mbim 5-1:1.0: setting tx_max = 16384 [ 518.680740][ T5720] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 518.688584][ T7810] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device [ 518.703325][ T7810] wwan wwan0: port wwan0mbim0 attached [ 518.715183][ T7810] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, 26:bd:1a:f9:c3:fd [ 518.781259][ T5705] usb 4-1: config 0 has an invalid interface number: 106 but max is 0 [ 518.789440][ T5705] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 518.802185][ T5705] usb 4-1: config 0 has no interface number 0 [ 518.808306][ T5705] usb 4-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30 [ 518.821557][ T5705] usb 4-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216 [ 518.848148][ T5705] usb 4-1: config 0 interface 106 has no altsetting 0 [ 518.870393][ T5705] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 518.889002][ C0] wdm_int_callback: 36 callbacks suppressed [ 518.889055][ C0] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 518.899346][ T7809] em28xx 3-1:0.0: chip ID is em2828X [ 518.901800][ C0] wdm_int_callback: 36 callbacks suppressed [ 518.901847][ C0] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 518.919642][ C0] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 518.926342][ C0] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 518.932691][ C0] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 518.939400][ C0] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 518.945775][ C0] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 518.952492][ C0] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 518.958856][ T5705] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.958881][ C0] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 518.973574][ C0] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 518.981572][ C0] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 518.988300][ C0] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 518.994711][ C0] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 519.001438][ C0] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 519.007862][ C0] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 519.014570][ C0] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 519.020968][ C0] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 519.027674][ C0] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 519.034081][ C0] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 519.040780][ C0] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 519.053004][ C0] cdc_mbim 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 519.064244][ T7827] usb 5-1: USB disconnect, device number 68 [ 519.071236][ T7827] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM [ 519.096945][ T5705] usb 4-1: config 0 descriptor?? [ 519.160413][T12802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.181679][T12802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.256399][ T7827] wwan wwan0: port wwan0mbim0 disconnected [ 519.279904][ T5705] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 519.354762][T11946] usb 3-1: USB disconnect, device number 62 [ 519.371762][T11946] em28xx 3-1:0.0: Disconnecting em28xx [ 519.405506][T11946] em28xx 3-1:0.0: Freeing device [ 520.019761][ T5720] usb 2-1: config 0 has an invalid interface number: 106 but max is 0 [ 520.030122][ T5720] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 520.050476][ T5720] usb 2-1: config 0 has no interface number 0 [ 520.056580][ T5720] usb 2-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30 [ 520.085437][ T5720] usb 2-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216 [ 520.103685][ T5720] usb 2-1: config 0 interface 106 has no altsetting 0 [ 520.110587][ T5720] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 520.141825][T12829] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 520.178216][ T5720] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.199354][ T5720] usb 2-1: config 0 descriptor?? [ 520.446051][T12839] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2046'. [ 520.464157][ T13] usb 4-1: Failed to submit usb control message: -110 [ 520.464235][ T13] usb 4-1: unable to send the bmi data to the device: -110 [ 520.464258][ T13] usb 4-1: unable to get target info from device [ 520.464276][ T13] usb 4-1: could not get target info (-110) [ 520.464297][ T13] usb 4-1: could not probe fw (-110) [ 520.513106][ T5720] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 520.562810][T12839] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2046'. [ 520.606456][ T5359] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 520.803340][ T5359] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 520.821920][ T5359] usb 5-1: config 1 has no interface number 0 [ 520.830672][ T5359] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 520.851444][ T5359] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 520.871416][ T5359] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 520.894036][ T5359] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 520.969179][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 520.969224][ T29] audit: type=1800 audit(1785891279.310:345): pid=12849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2047" name="/" dev="fuse" ino=1 res=0 errno=0 [ 521.002163][ T5359] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.028926][ T5359] usb 5-1: Product: syz [ 521.082475][ T5359] usb 5-1: Manufacturer: syz [ 521.096825][ T5359] usb 5-1: SerialNumber: syz [ 521.124139][T12835] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 521.257100][T12856] netlink: 'syz.2.2050': attribute type 1 has an invalid length. [ 521.302849][T12856] 8021q: adding VLAN 0 to HW filter on device bond3 [ 521.366666][T12835] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 521.606527][ T5359] sierra_net 5-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.4-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 521.697994][ T5720] usb 4-1: USB disconnect, device number 83 [ 521.797332][T12835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 521.799179][ T8952] usb 2-1: Failed to submit usb control message: -110 [ 521.812679][ T8952] usb 2-1: unable to send the bmi data to the device: -110 [ 521.819901][ T8952] usb 2-1: unable to get target info from device [ 521.821886][T12835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 521.837137][T12867] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2053'. [ 521.863947][ T8952] usb 2-1: could not get target info (-110) [ 521.869885][ T8952] usb 2-1: could not probe fw (-110) [ 522.261227][ T7827] usb 2-1: USB disconnect, device number 79 [ 522.322237][ T5359] usb 5-1: USB disconnect, device number 69 [ 522.354840][ T5359] sierra_net 5-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.4-1, Sierra Wireless USB-to-WWAN Modem [ 522.358393][ T5705] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 522.468359][ T5359] sierra_net 5-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 522.794053][ T5720] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 522.880139][T12895] fuse: Bad value for 'fd' [ 523.016127][ T5705] usb 3-1: Using ep0 maxpacket: 16 [ 523.036878][T12906] pim6reg: entered allmulticast mode [ 523.065024][T12906] pim6reg: left allmulticast mode [ 523.086433][T12905] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 523.422258][ T5359] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 523.450749][ T5720] usb 4-1: Using ep0 maxpacket: 16 [ 523.659719][ T5705] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 523.662001][ T5359] usb 2-1: Using ep0 maxpacket: 16 [ 523.670627][ T5705] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 523.670672][ T5705] usb 3-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 523.696283][ T5705] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.714833][ T5705] usb 3-1: config 0 descriptor?? [ 523.721416][ T5359] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 523.742922][ T5359] usb 2-1: config 0 has no interface number 0 [ 523.753726][ T5359] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 523.790257][ T5359] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 523.816720][ T5359] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 523.835200][ T5359] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.855748][ T5359] usb 2-1: Product: syz [ 523.865622][ T5359] usb 2-1: Manufacturer: syz [ 523.891492][ T5359] usb 2-1: SerialNumber: syz [ 523.906953][ T5359] usb 2-1: config 0 descriptor?? [ 524.100476][ T5720] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 524.112019][ T5720] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 524.130441][ T5359] usbtouchscreen 2-1:0.214: Failed to read FW rev: -71 [ 524.156859][ T5359] usbtouchscreen 2-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 524.197080][ T5359] usb 2-1: USB disconnect, device number 80 [ 524.476627][T12932] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2064'. [ 524.765581][ T5705] hid (null): nested delimiters [ 524.772955][ T5705] hid_parser_main: 30 callbacks suppressed [ 524.772969][ T5705] wacom 0003:056A:0084.000C: unknown main item tag 0x0 [ 524.785622][ T5705] wacom 0003:056A:0084.000C: unknown main item tag 0x0 [ 524.792466][ T5705] wacom 0003:056A:0084.000C: nested delimiters [ 524.798614][ T5705] wacom 0003:056A:0084.000C: item 0 1 2 10 parsing failed [ 524.806185][ T5705] wacom 0003:056A:0084.000C: parse failed [ 524.815897][ T5705] wacom 0003:056A:0084.000C: probe with driver wacom failed with error -22 [ 524.980853][ T5720] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 524.990931][ T5720] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.999556][T11946] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 525.013473][ T5720] usb 4-1: Product: syz [ 525.022324][ T5720] usb 4-1: Manufacturer: syz [ 525.034187][ T5720] usb 4-1: SerialNumber: syz [ 525.048601][ T5720] usb 4-1: config 0 descriptor?? [ 525.114237][ T5720] usb 4-1: can't set config #0, error -71 [ 525.124622][ T5720] usb 4-1: USB disconnect, device number 84 [ 525.149952][ T5359] usb 3-1: USB disconnect, device number 63 [ 525.223546][T11946] usb 5-1: config 0 has an invalid interface number: 106 but max is 0 [ 525.233052][T11946] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 525.243557][T11946] usb 5-1: config 0 has no interface number 0 [ 525.249860][T11946] usb 5-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30 [ 525.261316][T11946] usb 5-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216 [ 525.274689][T11946] usb 5-1: config 0 interface 106 has no altsetting 0 [ 525.282553][T11946] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 525.293801][T11946] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.303881][T11946] usb 5-1: config 0 descriptor?? [ 525.325015][T11946] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 525.501597][ T7816] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 525.771637][ T7816] usb 2-1: Using ep0 maxpacket: 32 [ 525.798857][ T7816] usb 2-1: unable to get BOS descriptor or descriptor too short [ 525.824022][ T7816] usb 2-1: config 7 has an invalid interface number: 187 but max is 0 [ 525.860585][ T7816] usb 2-1: config 7 has no interface number 0 [ 525.877368][ T7816] usb 2-1: config 7 interface 187 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 525.897272][ T7816] usb 2-1: config 7 interface 187 has no altsetting 0 [ 525.964069][ T7816] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 525.983463][ T7816] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.991609][ T7816] usb 2-1: Product: syz [ 526.001529][ T7816] usb 2-1: Manufacturer: syz [ 526.007530][ T7816] usb 2-1: SerialNumber: syz [ 526.028350][T12964] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 526.272180][ T7816] usb 2-1: Unknown endpoint type found, address 0x07 [ 526.303976][ T7816] usb 2-1: Unknown endpoint type found, address 0x03 [ 526.321105][ T7816] usb 2-1: Not enough endpoints found in device, aborting! [ 526.348468][ T1175] usb 5-1: Failed to submit usb control message: -110 [ 526.355475][ T1175] usb 5-1: unable to send the bmi data to the device: -110 [ 526.362701][ T1175] usb 5-1: unable to get target info from device [ 526.369047][ T1175] usb 5-1: could not get target info (-110) [ 526.374970][ T1175] usb 5-1: could not probe fw (-110) [ 526.487326][T12952] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2073'. [ 526.876519][T12971] netlink: 'syz.1.2073': attribute type 43 has an invalid length. [ 526.951614][ T7816] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 527.213258][ T7816] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 527.223911][ T7816] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 527.233503][ T7816] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 527.248364][ T7816] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 527.257704][ T7816] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.265785][ T7816] usb 3-1: Product: syz [ 527.270070][ T7816] usb 3-1: Manufacturer: syz [ 527.275023][ T7816] usb 3-1: SerialNumber: syz [ 527.284723][ T7816] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 527.291565][ T7816] cdc_ncm 3-1:1.0: bind() failure [ 527.330676][ T5720] usb 1-1: new full-speed USB device number 80 using dummy_hcd [ 528.087969][ T7816] usb 5-1: USB disconnect, device number 70 [ 528.419956][T12982] ALSA: mixer_oss: invalid OSS volume '' [ 528.425848][T12982] ALSA: mixer_oss: invalid OSS volume '' [ 528.431479][T12982] ALSA: mixer_oss: invalid OSS volume '+--' [ 528.437368][T12982] ALSA: mixer_oss: invalid OSS volume '|--' [ 528.443282][T12982] ALSA: mixer_oss: invalid OSS volume '/32' [ 528.449227][T12982] ALSA: mixer_oss: invalid OSS volume '+--' [ 528.455114][T12982] ALSA: mixer_oss: invalid OSS volume '+--' [ 528.461017][T12982] ALSA: mixer_oss: invalid OSS volume '|--' [ 528.466920][T12982] ALSA: mixer_oss: invalid OSS volume '/32' [ 528.472810][T12982] ALSA: mixer_oss: invalid OSS volume '|--' [ 528.478759][T12982] ALSA: mixer_oss: invalid OSS volume '/32' [ 528.484715][T12982] ALSA: mixer_oss: invalid OSS volume '|--' [ 528.490614][T12982] ALSA: mixer_oss: invalid OSS volume '/32' [ 528.496528][T12982] ALSA: mixer_oss: invalid OSS volume '|--' [ 528.502417][T12982] ALSA: mixer_oss: invalid OSS volume '/32' [ 528.517582][T12982] ALSA: mixer_oss: invalid OSS volume '|--' [ 528.523575][T12982] ALSA: mixer_oss: invalid OSS volume '/32' [ 528.531333][T12982] ALSA: mixer_oss: invalid OSS volume '+--' [ 528.546422][T12982] ALSA: mixer_oss: invalid OSS volume '|--' [ 528.553308][T12982] ALSA: mixer_oss: invalid OSS volume '/32' [ 528.559302][T12982] ALSA: mixer_oss: invalid OSS volume '|--' [ 528.565944][T12982] ALSA: mixer_oss: invalid OSS volume '/32' [ 528.573029][T12982] ALSA: mixer_oss: invalid OSS volume '|--' [ 528.578933][T12982] ALSA: mixer_oss: invalid OSS volume '/32' [ 528.584890][T12982] ALSA: mixer_oss: invalid OSS volume '|--' [ 528.590798][T12982] ALSA: mixer_oss: invalid OSS volume '/32' [ 528.599423][T12982] ALSA: mixer_oss: invalid OSS volume '|--' [ 528.605334][T12982] ALSA: mixer_oss: invalid OSS volume '/32' [ 528.611217][T12982] ALSA: mixer_oss: invalid OSS volume '|--' [ 528.625683][ T5720] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 528.635937][ T5720] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 528.644855][ T5720] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 528.650630][ T5359] usb 2-1: USB disconnect, device number 81 [ 528.682160][T12982] ALSA: mixer_oss: invalid OSS volume '/32' [ 528.693358][T12982] ALSA: mixer_oss: invalid OSS volume '|--' [ 528.702170][T12982] ALSA: mixer_oss: invalid OSS volume '/32' [ 528.710214][T12982] ALSA: mixer_oss: invalid OSS volume '|--' [ 528.737712][T12982] ALSA: mixer_oss: invalid OSS volume '/32' [ 528.762556][T12982] ALSA: mixer_oss: invalid OSS volume '+--' [ 528.778844][T12982] ALSA: mixer_oss: invalid OSS volume '|--' [ 528.786029][T12982] ALSA: mixer_oss: invalid OSS volume '/32' [ 528.872491][T12982] ALSA: mixer_oss: invalid OSS volume '|--' [ 528.886782][T12982] ALSA: mixer_oss: invalid OSS volume '/32' [ 528.984762][T12982] ALSA: mixer_oss: invalid OSS volume '|--' [ 528.990809][T12982] ALSA: mixer_oss: invalid OSS volume '/32' [ 529.014067][T12982] ALSA: mixer_oss: invalid OSS volume '|--' [ 529.027442][T12982] ALSA: mixer_oss: invalid OSS volume '/32' [ 529.033734][T12982] ALSA: mixer_oss: invalid OSS volume '|--' [ 529.039862][T12982] ALSA: mixer_oss: invalid OSS volume '/32' [ 529.045931][T12982] ALSA: mixer_oss: invalid OSS volume '|--' [ 529.061590][T12982] ALSA: mixer_oss: invalid OSS volume '/32' [ 529.068715][T12982] ALSA: mixer_oss: invalid OSS volume '|--' [ 529.171019][T12982] ALSA: mixer_oss: invalid OSS volume '/32' [ 529.192726][T12982] ALSA: mixer_oss: invalid OSS volume '+--' [ 529.249274][T12982] ALSA: mixer_oss: invalid OSS volume '|--' [ 529.262454][T12982] ALSA: mixer_oss: invalid OSS volume '/32' [ 529.281070][T12982] ALSA: mixer_oss: invalid OSS volume '|--' [ 529.295126][T12982] ALSA: mixer_oss: invalid OSS volume '/32' [ 529.304450][T12982] ALSA: mixer_oss: invalid OSS volume '|--' [ 529.373415][T12982] ALSA: mixer_oss: invalid OSS volume '/32' [ 529.401778][T12982] ALSA: mixer_oss: invalid OSS volume '|--' [ 529.414589][T12982] ALSA: mixer_oss: invalid OSS volume '/32' [ 529.435369][T12982] ALSA: mixer_oss: invalid OSS volume '|--' [ 529.467034][T12982] ALSA: mixer_oss: invalid OSS volume '/32' [ 529.495634][ T5720] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 529.504716][ T5720] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.513005][T12982] ALSA: mixer_oss: invalid OSS volume '|--' [ 529.518942][ T5720] usb 1-1: Product: syz [ 529.523101][ T5720] usb 1-1: Manufacturer: syz [ 529.527696][ T5720] usb 1-1: SerialNumber: syz [ 529.563647][T12982] ALSA: mixer_oss: invalid OSS volume '/32' [ 529.634902][T12982] ALSA: mixer_oss: invalid OSS volume '+--' [ 529.649534][T12982] ALSA: mixer_oss: invalid OSS volume '|--' [ 529.669810][T12982] ALSA: mixer_oss: invalid OSS volume '/32' [ 529.678773][T12982] ALSA: mixer_oss: invalid OSS volume '|--' [ 529.685800][T12982] ALSA: mixer_oss: invalid OSS volume '/32' [ 529.691736][T12982] ALSA: mixer_oss: invalid OSS volume '|--' [ 529.697646][T12982] ALSA: mixer_oss: invalid OSS volume '/32' [ 529.712233][ T5720] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 529.719172][ T5720] cdc_ncm 1-1:1.0: bind() failure [ 529.727701][T12982] ALSA: mixer_oss: invalid OSS volume '|--' [ 529.735142][T12982] ALSA: mixer_oss: invalid OSS volume '/32' [ 529.741413][T12982] ALSA: mixer_oss: invalid OSS volume '|--' [ 529.748456][T12982] ALSA: mixer_oss: invalid OSS volume '/32' [ 529.755263][T12982] ALSA: mixer_oss: invalid OSS volume '|--' [ 529.762451][T12982] ALSA: mixer_oss: invalid OSS volume '/32' [ 529.768474][T12982] ALSA: mixer_oss: invalid OSS volume '+--' [ 529.775513][T12982] ALSA: mixer_oss: invalid OSS volume '|--' [ 529.781681][T12982] ALSA: mixer_oss: invalid OSS volume '/32' [ 529.787716][T12982] ALSA: mixer_oss: invalid OSS volume '|--' [ 529.818442][T12982] ALSA: mixer_oss: invalid OSS volume '/32' [ 529.826159][T12982] ALSA: mixer_oss: invalid OSS volume '|--' [ 529.842500][T12982] ALSA: mixer_oss: invalid OSS volume '/32' [ 529.853119][T12982] ALSA: mixer_oss: invalid OSS volume '|--' [ 529.864474][T12982] ALSA: mixer_oss: invalid OSS volume '/32' [ 529.954476][T12998] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2083'. [ 529.975346][T12982] ALSA: mixer_oss: invalid OSS volume '|--' [ 529.987250][ T5720] usb 1-1: USB disconnect, device number 80 [ 530.061697][T12982] ALSA: mixer_oss: invalid OSS volume '/32' [ 530.089491][T12982] ALSA: mixer_oss: invalid OSS volume '|--' [ 530.136560][T12982] ALSA: mixer_oss: invalid OSS volume '/32' [ 530.206865][T12982] ALSA: mixer_oss: invalid OSS volume '|--' [ 530.221742][ T7816] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 530.242604][T12982] ALSA: mixer_oss: invalid OSS volume '/32' [ 530.252751][T12982] ALSA: mixer_oss: invalid OSS volume '|--' [ 530.272454][T13002] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2085'. [ 530.283585][T13002] [U] [ 530.286364][T13002] [U] [ 530.289070][T13002] [U] [ 530.291774][T13002] [U] [ 530.294570][T13002] [U] [ 530.297273][T13002] [U] [ 530.299949][T13002] [U] [ 530.302632][T13002] [U] < [ 530.305490][T13002] [U] [ 530.308294][T13002] [U] [ 530.311124][T13002] [U] [ 530.313839][T13002] [U] [ 530.316536][T13002] [U] [ 530.328765][T12982] ALSA: mixer_oss: invalid OSS volume '/32' [ 530.334723][T12982] ALSA: mixer_oss: invalid OSS volume '+--' [ 530.340652][T12982] ALSA: mixer_oss: invalid OSS volume '|--' [ 530.346586][T12982] ALSA: mixer_oss: invalid OSS volume '/32' [ 530.352526][T12982] ALSA: mixer_oss: invalid OSS volume '|--' [ 530.358471][T12982] ALSA: mixer_oss: invalid OSS volume '/32' [ 530.364399][T12982] ALSA: mixer_oss: invalid OSS volume '|--' [ 530.393765][T12982] ALSA: mixer_oss: invalid OSS volume '/32' [ 530.402443][T12982] ALSA: mixer_oss: invalid OSS volume '|--' [ 530.421443][T12982] ALSA: mixer_oss: invalid OSS volume '/32' [ 530.442187][T12982] ALSA: mixer_oss: invalid OSS volume '|--' [ 530.448081][T12982] ALSA: mixer_oss: invalid OSS volume '/32' [ 530.454214][T12982] ALSA: mixer_oss: invalid OSS volume '|--' [ 530.460114][T12982] ALSA: mixer_oss: invalid OSS volume '/32' [ 530.466465][T12982] ALSA: mixer_oss: invalid OSS volume '|--' [ 530.472621][T12982] ALSA: mixer_oss: invalid OSS volume '/32' [ 530.478517][T12982] ALSA: mixer_oss: invalid OSS volume '|--' [ 530.484566][ T7816] usb 4-1: Using ep0 maxpacket: 16 [ 530.496225][T12982] ALSA: mixer_oss: invalid OSS volume '/32' [ 530.506106][T12982] ALSA: mixer_oss: invalid OSS volume '+--' [ 530.512499][T12982] ALSA: mixer_oss: invalid OSS volume '|--' [ 530.518775][ T7816] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 530.530425][ T7816] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 530.541366][T12982] ALSA: mixer_oss: invalid OSS volume '/32' [ 530.547348][T12982] ALSA: mixer_oss: invalid OSS volume '|--' [ 530.553883][T12982] ALSA: mixer_oss: invalid OSS volume '/32' [ 530.560205][T12982] ALSA: mixer_oss: invalid OSS volume '|--' [ 530.567061][T12982] ALSA: mixer_oss: invalid OSS volume '/32' [ 530.573358][ T7816] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 530.582443][ T7816] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.590420][ T7816] usb 4-1: Product: syz [ 530.601772][T12982] ALSA: mixer_oss: invalid OSS volume '|--' [ 530.607778][ T7816] usb 4-1: Manufacturer: syz [ 530.621380][ T7816] usb 4-1: SerialNumber: syz [ 530.626024][T12982] ALSA: mixer_oss: invalid OSS volume '/32' [ 530.636850][ T7816] usb 4-1: config 0 descriptor?? [ 530.653489][ T7816] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 530.662874][T12982] ALSA: mixer_oss: invalid OSS volume '|--' [ 530.674367][ T5359] usb 3-1: USB disconnect, device number 64 [ 530.680300][ T7816] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 530.694848][T12982] ALSA: mixer_oss: invalid OSS volume '/32' [ 530.748691][T12982] ALSA: mixer_oss: invalid OSS volume '|--' [ 530.777596][T12982] ALSA: mixer_oss: invalid OSS volume '/32' [ 530.792126][T12982] ALSA: mixer_oss: invalid OSS volume '' [ 531.090119][T13001] [U] [ 531.204337][T13010] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 531.374492][ T7816] em28xx 4-1:0.0: chip ID is em2828X [ 531.646297][T12995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 531.654946][T12995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 531.674135][ T5720] usb 4-1: USB disconnect, device number 85 [ 531.681239][ T5720] em28xx 4-1:0.0: Disconnecting em28xx [ 531.713526][ T5720] em28xx 4-1:0.0: Freeing device [ 532.511613][ T5705] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 533.030390][T13052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2100'. [ 533.170912][ T5705] usb 5-1: Using ep0 maxpacket: 16 [ 533.307946][T13057] bridge6: entered promiscuous mode [ 533.316667][T13057] bridge6: entered allmulticast mode [ 533.365298][T13057] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2101'. [ 533.814448][ T5705] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 533.824150][ T5705] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 533.833786][ T5705] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 533.843434][ T5705] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 533.998248][T13067] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 534.329480][T13076] FAULT_INJECTION: forcing a failure. [ 534.329480][T13076] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 534.344121][T13076] CPU: 0 UID: 0 PID: 13076 Comm: syz.0.2107 Tainted: G L syzkaller #0 PREEMPT(full) [ 534.344153][T13076] Tainted: [L]=SOFTLOCKUP [ 534.344161][T13076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 534.344174][T13076] Call Trace: [ 534.344182][T13076] [ 534.344190][T13076] dump_stack_lvl+0xe8/0x150 [ 534.344226][T13076] should_fail_ex+0x40c/0x560 [ 534.344256][T13076] _copy_from_user+0x2d/0xb0 [ 534.344277][T13076] get_compat_msghdr+0xb3/0x4c0 [ 534.344307][T13076] ? __pfx_get_compat_msghdr+0x10/0x10 [ 534.344336][T13076] ? kfree+0x4d/0x640 [ 534.344364][T13076] ___sys_recvmsg+0x1db/0x5a0 [ 534.344394][T13076] ? __pfx____sys_recvmsg+0x10/0x10 [ 534.344418][T13076] ? irqentry_exit+0x218/0x8f0 [ 534.344443][T13076] ? lockdep_hardirqs_on+0x7a/0x110 [ 534.344467][T13076] ? irqentry_exit+0x218/0x8f0 [ 534.344516][T13076] do_recvmmsg+0x38b/0x7f0 [ 534.344548][T13076] ? __pfx_do_recvmmsg+0x10/0x10 [ 534.344583][T13076] ? __mutex_unlock_slowpath+0x731/0x900 [ 534.344621][T13076] __sys_recvmmsg+0x1a5/0x290 [ 534.344655][T13076] ? __pfx___sys_recvmmsg+0x10/0x10 [ 534.344681][T13076] ? ksys_write+0x242/0x270 [ 534.344706][T13076] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 534.344737][T13076] __do_fast_syscall_32+0x23e/0x6f0 [ 534.344765][T13076] ? do_fast_syscall_32+0x33/0x70 [ 534.344790][T13076] ? lockdep_hardirqs_on+0x7a/0x110 [ 534.344818][T13076] ? asm_int80_emulation+0x1a/0x20 [ 534.344836][T13076] ? do_int80_emulation+0x29f/0x550 [ 534.344861][T13076] ? trace_irq_disable+0x3b/0x140 [ 534.344889][T13076] do_fast_syscall_32+0x33/0x70 [ 534.344916][T13076] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 534.344939][T13076] RIP: 0023:0xf709f0ec [ 534.344957][T13076] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 534.344974][T13076] RSP: 002b:00000000f548d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 534.344995][T13076] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800021c0 [ 534.345009][T13076] RDX: 000000000000005b RSI: 0000000000000002 RDI: 0000000000000000 [ 534.345020][T13076] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 534.345031][T13076] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 534.345043][T13076] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 534.345069][T13076] [ 534.732904][ T5705] usb 5-1: New USB device found, idVendor=0586, idProduct=1500, bcdDevice=2e.97 [ 534.741982][ T5705] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.749960][ T5705] usb 5-1: Product: syz [ 534.754116][ T5705] usb 5-1: Manufacturer: syz [ 534.758705][ T5705] usb 5-1: SerialNumber: syz [ 534.805827][ T5705] usb 5-1: config 0 descriptor?? [ 534.952917][ T5705] omninet 5-1:0.0: ZyXEL - omni.net usb converter detected [ 534.976889][ T5705] usb 5-1: ZyXEL - omni.net usb converter now attached to ttyUSB0 [ 535.194075][ T5705] usb 5-1: USB disconnect, device number 71 [ 535.207189][ T5705] omninet ttyUSB0: ZyXEL - omni.net usb converter now disconnected from ttyUSB0 [ 535.216735][ T5705] omninet 5-1:0.0: device disconnected [ 535.294126][T13094] usb usb8: usbfs: process 13094 (syz.3.2114) did not claim interface 0 before use [ 535.303685][T13094] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 535.546803][T13104] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2117'. [ 535.555826][T13104] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2117'. [ 535.598311][ T7827] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 535.830229][ T29] audit: type=1326 audit(1785891294.180:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13105 comm="syz.1.2118" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f470ec code=0x7ffc0000 [ 535.882964][ T29] audit: type=1326 audit(1785891294.180:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13105 comm="syz.1.2118" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f470ec code=0x7ffc0000 [ 535.928941][ T29] audit: type=1326 audit(1785891294.180:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13105 comm="syz.1.2118" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=283 compat=1 ip=0xf7f470ec code=0x7ffc0000 [ 535.954163][ T29] audit: type=1326 audit(1785891294.180:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13105 comm="syz.1.2118" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f470ec code=0x7ffc0000 [ 535.987153][ T29] audit: type=1326 audit(1785891294.180:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13105 comm="syz.1.2118" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f470ec code=0x7ffc0000 [ 536.033420][ T29] audit: type=1326 audit(1785891294.180:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13105 comm="syz.1.2118" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f470ec code=0x7ffc0000 [ 536.095700][ T29] audit: type=1326 audit(1785891294.180:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13105 comm="syz.1.2118" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f470ec code=0x7ffc0000 [ 536.146439][ T29] audit: type=1326 audit(1785891294.180:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13105 comm="syz.1.2118" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f470ec code=0x7ffc0000 [ 536.192011][T13108] netlink: 'syz.1.2118': attribute type 4 has an invalid length. [ 536.200244][T13108] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2118'. [ 536.212187][ T29] audit: type=1326 audit(1785891294.180:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13105 comm="syz.1.2118" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f470ec code=0x7ffc0000 [ 536.243811][T13108] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 536.259388][ T29] audit: type=1326 audit(1785891294.180:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13105 comm="syz.1.2118" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f470ec code=0x7ffc0000 [ 536.321643][ T5359] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 536.594037][ T5359] usb 3-1: unable to get BOS descriptor or descriptor too short [ 536.603401][ T5359] usb 3-1: config 3 has an invalid interface number: 86 but max is 0 [ 536.611674][ T7816] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 536.631406][ T5359] usb 3-1: config 3 has an invalid descriptor of length 34, skipping remainder of the config [ 536.641730][ T5359] usb 3-1: config 3 has no interface number 0 [ 536.651454][ T5359] usb 3-1: config 3 interface 86 altsetting 11 endpoint 0xC has invalid maxpacket 56804, setting to 1024 [ 536.671362][ T5359] usb 3-1: config 3 interface 86 altsetting 11 bulk endpoint 0xC has invalid maxpacket 1024 [ 536.691446][ T5359] usb 3-1: config 3 interface 86 has no altsetting 0 [ 536.703618][ T5359] usb 3-1: New USB device found, idVendor=e4b7, idProduct=cda2, bcdDevice= 0.01 [ 536.731409][ T5359] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 536.741446][ T5359] usb 3-1: SerialNumber: syz [ 536.759650][T13110] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 536.821673][ T7816] usb 5-1: Using ep0 maxpacket: 16 [ 536.834784][ T7816] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 536.846042][ T7816] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 536.859304][ T7816] usb 5-1: New USB device found, idVendor=05a4, idProduct=8003, bcdDevice= 0.00 [ 536.871848][ T7816] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.894067][ T7816] usb 5-1: config 0 descriptor?? [ 536.946475][ T7827] usb 1-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 536.955216][ T7827] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 537.076102][ T5359] rndis_host 3-1:3.86: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 537.090430][ T5359] usb 3-1: USB disconnect, device number 65 [ 537.104104][T13112] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2120'. [ 537.117304][ T7816] usbhid 5-1:0.0: can't add hid device: -71 [ 537.127836][ T7816] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 537.140953][ T7816] usb 5-1: USB disconnect, device number 72 [ 537.161392][ T5720] usb 4-1: new full-speed USB device number 87 using dummy_hcd [ 537.379715][T13129] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 537.486612][ T7827] usb 1-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 537.496657][ T7827] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.508960][ T7827] usb 1-1: Product: syz [ 537.521269][ T7827] usb 1-1: Manufacturer: syz [ 537.529701][ T7827] usb 1-1: SerialNumber: syz [ 537.551452][ T7827] usb 1-1: config 0 descriptor?? [ 537.567963][ T7827] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 537.575538][ T5720] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 537.594965][ T5720] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 537.613357][ T5720] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 537.737685][ T5720] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 537.748105][ T5720] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.757245][ T5720] usb 4-1: Product: syz [ 537.778443][ T5720] usb 4-1: Manufacturer: syz [ 537.785749][ T5720] usb 4-1: SerialNumber: syz [ 537.850366][ T5720] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 537.924535][ T5720] cdc_ncm 4-1:1.0: bind() failure [ 538.185468][T13092] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2113'. [ 538.309949][T13139] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2129'. [ 538.331417][ T7816] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 538.341105][T13139] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2129'. [ 538.354111][T13139] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2129'. [ 538.561715][ T7816] usb 3-1: Using ep0 maxpacket: 32 [ 538.579934][ C1] sd 0:0:1:0: [sda] tag#4180 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 538.591772][ C1] sd 0:0:1:0: [sda] tag#4180 CDB: Write(6) 0a 00 00 00 00 00 00 01 fe 80 00 00 [ 538.604001][T13135] syzkaller0: entered promiscuous mode [ 538.613650][T13135] syzkaller0: entered allmulticast mode [ 538.623936][ T5359] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 538.851743][ T5359] usb 2-1: Using ep0 maxpacket: 32 [ 538.859258][ T5359] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 26, changing to 7 [ 538.881561][ T5359] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 538.890815][ T5359] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.898904][ T5359] usb 2-1: Product: syz [ 538.903152][ T5359] usb 2-1: Manufacturer: syz [ 538.907772][ T5359] usb 2-1: SerialNumber: syz [ 539.076952][ T7816] usb 3-1: unable to get BOS descriptor or descriptor too short [ 539.101760][ T7816] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 539.119599][ T7816] usb 3-1: can't read configurations, error -71 [ 539.132936][ T5359] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 539.159294][ T5359] usb 2-1: USB disconnect, device number 82 [ 539.185477][ T7827] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 539.523703][ T5720] usb 4-1: USB disconnect, device number 87 [ 539.631497][ T7827] usb 5-1: Using ep0 maxpacket: 16 [ 539.639752][ T7827] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 539.652741][ T7827] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 539.731892][T13161] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2135'. [ 540.100043][T13167] netlink: 'syz.1.2136': attribute type 4 has an invalid length. [ 540.199006][ T5720] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 540.224099][ T5705] usb 1-1: USB disconnect, device number 81 [ 540.518135][ T7827] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 540.527196][ T7827] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.537183][ T7827] usb 5-1: Product: syz [ 540.541378][ T7827] usb 5-1: Manufacturer: syz [ 540.551654][ T7827] usb 5-1: SerialNumber: syz [ 540.556538][T13174] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2138'. [ 540.572766][ T7816] usb 3-1: new full-speed USB device number 68 using dummy_hcd [ 540.582451][ T7827] usb 5-1: config 0 descriptor?? [ 540.753229][ T7827] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 540.768507][ T7827] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 540.847716][ T5720] usb 4-1: Using ep0 maxpacket: 16 [ 540.875749][T13169] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2137'. [ 540.919642][T13169] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2137'. [ 541.007589][ T7816] usb 3-1: unable to get BOS descriptor or descriptor too short [ 541.039410][ T7816] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 541.076240][ T7816] usb 3-1: can't read configurations, error -71 [ 541.400044][T13186] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 541.498002][ T5720] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 541.506048][ T5720] usb 4-1: config 0 has no interface number 0 [ 541.512169][ T5720] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 541.525595][ T5720] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 541.535371][ T5720] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 541.544442][ T5720] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.555518][ T5720] usb 4-1: config 0 descriptor?? [ 541.638654][T13190] erspan1: entered allmulticast mode [ 541.686787][T13191] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2142'. [ 541.714431][ T7827] em28xx 5-1:0.0: chip ID is em2828X [ 541.964235][T13153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 541.979403][T13153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.004574][ T7827] usb 5-1: USB disconnect, device number 73 [ 542.011683][ T7827] em28xx 5-1:0.0: Disconnecting em28xx [ 542.022049][ T7827] em28xx 5-1:0.0: Freeing device [ 542.201692][ T7816] usb 3-1: new full-speed USB device number 69 using dummy_hcd [ 542.306848][T13197] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2145'. [ 542.324848][T13197] ipvlan2: entered allmulticast mode [ 542.330281][T13197] syz_tun: entered allmulticast mode [ 542.344964][T13199] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2146'. [ 542.446906][T13205] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2148'. [ 542.457840][T13205] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2148'. [ 542.473315][ T7816] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 542.489655][ T7816] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 542.499520][ T7816] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 542.515756][ T7816] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 542.528499][ T7816] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.536611][ T7816] usb 3-1: Product: syz [ 542.540806][ T7816] usb 3-1: Manufacturer: syz [ 542.546348][ T7816] usb 3-1: SerialNumber: syz [ 542.557095][ T7816] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 542.571567][ T7816] cdc_ncm 3-1:1.0: bind() failure [ 542.713669][ T5720] input: HID 28bd:0071 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:28BD:0071.000D/input/input43 [ 542.767341][ T5720] input: HID 28bd:0071 Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:28BD:0071.000D/input/input44 [ 542.837030][ T5720] uclogic 0003:28BD:0071.000D: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.3-1/input1 [ 542.928232][ T7827] usb 1-1: new full-speed USB device number 82 using dummy_hcd [ 543.018143][ T5720] usb 4-1: USB disconnect, device number 88 [ 543.263894][T13228] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 543.875629][T13234] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2157'. [ 544.140992][T13247] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2162'. [ 544.189288][T13247] netlink: 'syz.4.2162': attribute type 1 has an invalid length. [ 544.205683][T13247] vlan4: entered allmulticast mode [ 544.211211][T13247] bond2: entered allmulticast mode [ 544.218347][T13247] bond2: (slave vlan4): Opening slave failed [ 544.236453][ T7827] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 544.247568][ T7827] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 544.452590][ T5720] usb 4-1: new full-speed USB device number 89 using dummy_hcd [ 544.564781][T13260] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2164'. [ 544.895190][ T7827] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 544.904299][ T7827] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 544.912668][ T7827] usb 1-1: Product: syz [ 544.916907][ T7827] usb 1-1: Manufacturer: syz [ 545.118686][ T7827] hub 1-1:4.0: USB hub found [ 545.501941][ T7816] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 545.514127][T13279] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 545.771445][ T7816] usb 5-1: Using ep0 maxpacket: 32 [ 545.781233][ T7827] hub 1-1:4.0: config failed, hub has too many ports! (err -19) [ 545.792039][ T5720] usb 4-1: config 8 has an invalid interface number: 148 but max is 1 [ 545.800230][ T5720] usb 4-1: config 8 has an invalid interface number: 134 but max is 1 [ 545.809340][ T5720] usb 4-1: config 8 has no interface number 0 [ 545.817853][ T5720] usb 4-1: config 8 has no interface number 1 [ 545.824309][ T5720] usb 4-1: config 8 interface 148 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 545.837917][ T5720] usb 4-1: config 8 interface 148 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 545.845681][ T7816] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 545.848834][ T5720] usb 4-1: config 8 interface 134 altsetting 195 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 545.905048][ T5720] usb 4-1: config 8 interface 148 has no altsetting 0 [ 545.911853][ T5720] usb 4-1: config 8 interface 134 has no altsetting 0 [ 545.921983][ T7816] usb 5-1: config 0 has no interface number 0 [ 545.942067][ T7816] usb 5-1: config 0 interface 12 has no altsetting 0 [ 545.961153][ T7816] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 545.973545][ T7816] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.982354][ T7816] usb 5-1: Product: syz [ 546.004741][ T7827] usb 1-1: USB disconnect, device number 82 [ 546.017470][ T7816] usb 5-1: Manufacturer: syz [ 546.032305][ T7816] usb 5-1: SerialNumber: syz [ 546.047270][ T7816] usb 5-1: config 0 descriptor?? [ 546.598160][ T7827] usb 3-1: USB disconnect, device number 69 [ 546.772509][ T5720] usb 4-1: Dual-Role OTG device on HNP port [ 546.834421][T13302] __nla_validate_parse: 1 callbacks suppressed [ 546.834438][T13302] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2178'. [ 546.882447][ T5720] usb 4-1: New USB device found, idVendor=2001, idProduct=7d04, bcdDevice=ce.7f [ 546.891907][ T5720] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.902460][ T5720] usb 4-1: Product: syz [ 546.906670][ T5720] usb 4-1: Manufacturer: syz [ 546.925684][ T5720] usb 4-1: SerialNumber: syz [ 547.118502][T13308] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2181'. [ 547.446252][ T7827] usb 1-1: new low-speed USB device number 83 using dummy_hcd [ 547.546032][ T5720] option 4-1:8.148: GSM modem (1-port) converter detected [ 547.749636][T13317] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 547.819905][ T5720] usb 4-1: USB disconnect, device number 89 [ 547.861463][ T5720] option 4-1:8.148: device disconnected [ 548.761779][ T7827] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 548.770020][ T7827] usb 1-1: config 0 has no interface number 0 [ 548.776141][ T7827] usb 1-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 548.787163][ T7827] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 548.796995][ T7827] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0xC has invalid maxpacket 64, setting to 8 [ 548.807699][ T7827] usb 1-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 548.822214][ T7827] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 548.833411][ T7827] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid maxpacket 245, setting to 8 [ 548.844325][ T7827] usb 1-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 548.877340][ T7816] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 548.899973][ T7816] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 548.921894][ T7816] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 548.941487][ T7816] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 548.965735][ T7816] usb 5-1: USB disconnect, device number 74 [ 549.135091][T13329] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2188'. [ 549.309420][ T5705] usb 2-1: new full-speed USB device number 83 using dummy_hcd [ 549.457500][T13338] bridge4: entered promiscuous mode [ 549.502855][T13340] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2192'. [ 549.534019][ T5720] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 549.752494][T13349] input: syz0 as /devices/virtual/input/input45 [ 549.801704][ T5359] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 549.884023][ T5705] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 549.895328][ T5705] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 549.905304][ T5705] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 550.026289][ T5359] usb 5-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice= 0.40 [ 550.035707][ T5359] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.044060][ T5359] usb 5-1: Product: syz [ 550.048637][ T5359] usb 5-1: Manufacturer: syz [ 550.057553][ T5359] usb 5-1: SerialNumber: syz [ 550.258818][ T5720] usb 4-1: Using ep0 maxpacket: 32 [ 550.683726][ T5359] usb 5-1: 1:1 : no cluster descriptor [ 550.697288][ T5359] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 550.707807][ T7827] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 550.716923][ T7827] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.729085][ T7827] usb 1-1: config 0 descriptor?? [ 550.742534][T13360] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2197'. [ 550.777786][ T5359] usb 5-1: USB disconnect, device number 75 [ 550.820585][ T5705] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 550.829698][ T5705] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.837721][ T5705] usb 2-1: Product: syz [ 550.841911][ T5705] usb 2-1: Manufacturer: syz [ 550.846535][ T5705] usb 2-1: SerialNumber: syz [ 550.851561][ T7827] usb 1-1: can't set config #0, error -71 [ 550.881556][ T5640] udevd[5640]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 550.899377][ T7827] usb 1-1: USB disconnect, device number 83 [ 550.930915][ T5720] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 550.941232][ T5720] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 550.952901][ T5720] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 550.963948][ T5720] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 551.045543][ T5705] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 551.052726][ T5705] cdc_ncm 2-1:1.0: bind() failure [ 551.719967][T13371] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 551.809354][ T5720] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 551.818460][ T5720] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.826640][ T5720] usb 4-1: Product: syz [ 551.831100][ T5720] usb 4-1: Manufacturer: syz [ 551.835741][ T5720] usb 4-1: SerialNumber: syz [ 552.359118][ T5720] usb 4-1: can't set config #155, error -71 [ 552.373293][ T5705] usb 2-1: USB disconnect, device number 83 [ 552.432473][ T5720] usb 4-1: USB disconnect, device number 90 [ 553.118516][T13398] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2211'. [ 553.273336][ T5359] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 553.492098][ T7816] usb 1-1: new full-speed USB device number 84 using dummy_hcd [ 553.540677][ T5720] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 553.542376][ T5359] usb 5-1: Using ep0 maxpacket: 32 [ 553.555256][ T5359] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 553.563488][ T5359] usb 5-1: config 0 has no interface number 0 [ 553.569740][ T5359] usb 5-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid maxpacket 62431, setting to 64 [ 553.580912][ T5359] usb 5-1: config 0 interface 89 has no altsetting 0 [ 553.589903][ T5359] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 553.599814][ T5359] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.607900][ T5359] usb 5-1: Product: syz [ 553.612124][ T5359] usb 5-1: Manufacturer: syz [ 553.616721][ T5359] usb 5-1: SerialNumber: syz [ 553.624491][ T5359] usb 5-1: config 0 descriptor?? [ 553.633329][ T5359] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 553.643814][ T5359] em28xx 5-1:0.89: Video interface 89 found: [ 553.713471][ T7816] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 553.723640][ T7816] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 553.732602][ T7816] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 553.747665][ T7816] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 553.756812][ T7816] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.765055][ T7816] usb 1-1: Product: syz [ 553.769298][ T7816] usb 1-1: Manufacturer: syz [ 553.773955][ T7816] usb 1-1: SerialNumber: syz [ 553.790497][ T7816] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 553.797991][ T7816] cdc_ncm 1-1:1.0: bind() failure [ 554.186370][T13412] tipc: Enabled bearer , priority 0 [ 554.193893][T13412] syzkaller0: entered promiscuous mode [ 554.199393][T13412] syzkaller0: entered allmulticast mode [ 554.229191][ T5720] usb 4-1: Using ep0 maxpacket: 32 [ 554.243397][T13412] tipc: Resetting bearer [ 554.260499][T13411] tipc: Resetting bearer [ 554.285980][T13411] tipc: Disabling bearer [ 554.323564][ T5359] em28xx 5-1:0.89: unknown em28xx chip ID (64) [ 554.391685][ T7816] usb 2-1: new low-speed USB device number 84 using dummy_hcd [ 554.565576][T13424] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2221'. [ 554.618170][ T5359] em28xx 5-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 554.627370][ T5359] em28xx 5-1:0.89: board has no eeprom [ 554.633444][T13426] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2222'. [ 554.642688][T13426] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2222'. [ 554.661637][ T7816] usb 2-1: Invalid ep0 maxpacket: 16 [ 554.721621][ T5359] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 554.729828][ T5359] em28xx 5-1:0.89: analog set to bulk mode. [ 554.735917][T11946] em28xx 5-1:0.89: Registering V4L2 extension [ 554.794025][ T5359] usb 5-1: USB disconnect, device number 76 [ 554.804017][T11946] em28xx 5-1:0.89: reading from i2c device at 0x4a failed (error=-5) [ 554.816472][ T5359] em28xx 5-1:0.89: Disconnecting em28xx [ 554.824476][T11946] em28xx 5-1:0.89: Config register raw data: 0xffffffed [ 554.831903][ T7816] usb 2-1: new low-speed USB device number 85 using dummy_hcd [ 554.839487][T11946] em28xx 5-1:0.89: AC97 chip type couldn't be determined [ 554.848597][T11946] em28xx 5-1:0.89: No AC97 audio processor [ 554.857920][T11946] usb 5-1: Decoder not found [ 554.868741][T11946] em28xx 5-1:0.89: failed to create media graph [ 554.875102][T11946] em28xx 5-1:0.89: V4L2 device video103 deregistered [ 554.918958][T11946] em28xx 5-1:0.89: Registering snapshot button... [ 554.952495][T11946] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input46 [ 555.034279][T11946] em28xx 5-1:0.89: Remote control support is not available for this card. [ 555.045956][ T5359] em28xx 5-1:0.89: Closing input extension [ 555.062831][ T5359] em28xx 5-1:0.89: Deregistering snapshot button [ 555.107224][ T7816] usb 2-1: Invalid ep0 maxpacket: 16 [ 555.108434][ T5720] usb 4-1: unable to get BOS descriptor or descriptor too short [ 555.121166][ T7816] usb usb2-port1: attempt power cycle [ 555.180377][T13436] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2225'. [ 555.193634][ T5359] em28xx 5-1:0.89: Freeing device [ 555.259885][T13436] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2225'. [ 555.269066][T13437] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2225'. [ 555.374859][ T5720] usb 4-1: config 6 has an invalid interface number: 253 but max is 0 [ 555.384247][ T5720] usb 4-1: config 6 has no interface number 0 [ 555.391248][ T5720] usb 4-1: config 6 interface 253 has no altsetting 0 [ 555.510674][ T7827] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 555.538378][T13451] tipc: Enabling of bearer rejected, failed to enable media [ 555.561757][ T7816] usb 2-1: new low-speed USB device number 86 using dummy_hcd [ 555.612074][ T7816] usb 2-1: Invalid ep0 maxpacket: 16 [ 555.781878][ T7816] usb 2-1: new low-speed USB device number 87 using dummy_hcd [ 555.843394][ T7816] usb 2-1: Invalid ep0 maxpacket: 16 [ 555.849329][ T7816] usb usb2-port1: unable to enumerate USB device [ 555.942844][T13460] netlink: 'syz.3.2207': attribute type 10 has an invalid length. [ 555.953225][T13460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 555.969854][T13460] team0: Port device bond0 added [ 556.169364][ T7827] usb 3-1: Using ep0 maxpacket: 32 [ 556.277028][ T5720] usb 4-1: New USB device found, idVendor=0781, idProduct=0001, bcdDevice= 2.00 [ 556.286205][ T5720] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.294208][ T5720] usb 4-1: Product: syz [ 556.298372][ T5720] usb 4-1: Manufacturer: syz [ 556.302953][ T5720] usb 4-1: SerialNumber: syz [ 556.603335][ T7827] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 556.617195][ T7827] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 556.627330][ T7827] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 556.637620][ T7827] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.648851][ T7827] usb 3-1: config 0 descriptor?? [ 556.682516][T13466] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2234'. [ 557.068661][ T5720] usb-storage 4-1:6.253: USB Mass Storage device detected [ 557.095962][ T5720] usb-storage 4-1:6.253: Quirks match for vid 0781 pid 0001: 1 [ 557.176801][ T5720] usb 4-1: USB disconnect, device number 91 [ 557.746543][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 557.746559][ T29] audit: type=1326 audit(1785891316.080:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13481 comm="syz.4.2239" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6fef0ec code=0x0 [ 557.944591][ T29] audit: type=1326 audit(1785891316.300:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13493 comm="syz.3.2244" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 557.998105][ T29] audit: type=1326 audit(1785891316.300:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13493 comm="syz.3.2244" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 558.147645][T13500] vlan2: entered promiscuous mode [ 558.161088][T13500] team0: entered promiscuous mode [ 558.170903][T13500] team_slave_0: entered promiscuous mode [ 558.178040][T13500] team_slave_1: entered promiscuous mode [ 558.188012][T13500] bond0: entered promiscuous mode [ 558.193265][T13500] bond_slave_0: entered promiscuous mode [ 558.203860][T13500] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 558.390080][T13504] tipc: Enabling of bearer rejected, already enabled [ 558.541603][ T5359] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 558.737583][ T5720] usb 3-1: USB disconnect, device number 70 [ 558.814157][ T5359] usb 4-1: config 1 has an invalid descriptor of length 72, skipping remainder of the config [ 558.834267][ T5359] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 558.851389][ T5359] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 558.883343][ T5359] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 558.901414][ T5359] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.909456][ T5359] usb 4-1: Product: syz [ 558.918270][ T5359] usb 4-1: Manufacturer: syz [ 558.923207][ T5359] usb 4-1: SerialNumber: syz [ 558.937516][ T5359] cdc_mbim 4-1:1.0: skipping garbage [ 558.952390][ T5359] cdc_mbim 4-1:1.0: CDC Union missing and no IAD found [ 558.960524][ T5359] cdc_mbim 4-1:1.0: bind() failure [ 559.166795][T13518] C: renamed from veth1_to_team [ 559.196375][T13518] netlink: 'syz.4.2251': attribute type 1 has an invalid length. [ 559.205188][T13518] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2251'. [ 559.216820][T13518] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 559.245389][T13521] netlink: 'syz.1.2252': attribute type 1 has an invalid length. [ 559.293224][T13518] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2251'. [ 559.383650][T13521] 8021q: adding VLAN 0 to HW filter on device bond5 [ 559.803166][ T5705] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 559.822299][T13530] netlink: 'syz.2.2255': attribute type 13 has an invalid length. [ 559.830149][T13530] netlink: 'syz.2.2255': attribute type 27 has an invalid length. [ 559.839794][T13530] tipc: Enabled bearer , priority 0 [ 559.873437][T13530] syzkaller0: entered promiscuous mode [ 559.878924][T13530] syzkaller0: entered allmulticast mode [ 561.102574][ T5705] usb 2-1: config 0 has an invalid interface number: 106 but max is 0 [ 561.110898][ T5705] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 561.121679][ T5705] usb 2-1: config 0 has no interface number 0 [ 561.127799][ T5705] usb 2-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30 [ 561.138867][ T5705] usb 2-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216 [ 561.153067][ T5705] usb 2-1: config 0 interface 106 has no altsetting 0 [ 561.159895][ T5705] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 561.169009][ T5705] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.186018][ T5705] usb 2-1: config 0 descriptor?? [ 561.236626][ T7816] usb 1-1: USB disconnect, device number 84 [ 561.342020][ T5705] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 561.446699][ T5636] Bluetooth: hci4: unexpected event for opcode 0x080d [ 562.055099][ T7816] usb 4-1: USB disconnect, device number 92 [ 562.360571][T13533] tipc: Resetting bearer [ 562.369701][T13529] tipc: Resetting bearer [ 562.394357][T13529] tipc: Disabling bearer [ 562.474578][ T8952] usb 2-1: Failed to submit usb control message: -110 [ 562.497052][ T8952] usb 2-1: unable to send the bmi data to the device: -110 [ 562.519689][ T8952] usb 2-1: unable to get target info from device [ 562.537912][ T8952] usb 2-1: could not get target info (-110) [ 562.564458][ T8952] usb 2-1: could not probe fw (-110) [ 562.803310][T13562] netlink: 'syz.0.2262': attribute type 9 has an invalid length. [ 562.893311][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.899705][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.907833][T13555] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 562.998645][ T5705] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 563.420185][T13576] netlink: 'syz.4.2265': attribute type 5 has an invalid length. [ 563.562108][T13578] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2266'. [ 563.577863][T13578] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2266'. [ 563.814937][T13588] netlink: 'syz.0.2268': attribute type 21 has an invalid length. [ 563.847501][T13588] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2268'. [ 563.917666][T13588] netlink: 'syz.0.2268': attribute type 5 has an invalid length. [ 563.944544][T13588] netlink: 'syz.0.2268': attribute type 6 has an invalid length. [ 563.989984][T13588] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2268'. [ 564.013867][T13582] netlink: 'syz.0.2268': attribute type 21 has an invalid length. [ 564.028571][T13582] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2268'. [ 564.060049][T13582] netlink: 'syz.0.2268': attribute type 5 has an invalid length. [ 564.080689][T13582] netlink: 'syz.0.2268': attribute type 6 has an invalid length. [ 564.111719][T13582] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2268'. [ 564.481605][ T7816] usb 5-1: new low-speed USB device number 77 using dummy_hcd [ 564.634249][ T5720] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 564.649402][ T5359] usb 2-1: USB disconnect, device number 88 [ 564.731977][ T7816] usb 5-1: Invalid ep0 maxpacket: 32 [ 564.902071][ T7816] usb 5-1: new low-speed USB device number 78 using dummy_hcd [ 565.066658][ T5720] usb 3-1: device descriptor read/64, error -71 [ 565.125579][ T5359] usb 2-1: new full-speed USB device number 89 using dummy_hcd [ 565.171746][ T7816] usb 5-1: Invalid ep0 maxpacket: 32 [ 565.177652][ T7816] usb usb5-port1: attempt power cycle [ 565.181403][ T5705] usb 4-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 565.192083][ T5705] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.200131][ T5705] usb 4-1: Product: syz [ 565.204352][ T5705] usb 4-1: Manufacturer: syz [ 565.208975][ T5705] usb 4-1: SerialNumber: syz [ 565.217086][ T5705] usb 4-1: config 0 descriptor?? [ 565.341727][ T5359] usb 2-1: device descriptor read/64, error -71 [ 565.397543][ T5720] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 565.562232][ T7816] usb 5-1: new low-speed USB device number 79 using dummy_hcd [ 565.612277][ T7816] usb 5-1: Invalid ep0 maxpacket: 32 [ 565.627412][ T5705] peak_usb 4-1:0.0 can0: unable to request usb[type=0 value=1] err=-32 [ 565.634187][ T5359] usb 2-1: new full-speed USB device number 90 using dummy_hcd [ 565.635708][ T5705] peak_usb 4-1:0.0: unable to read PCAN-USB FD firmware info (err -32) [ 565.713633][T13619] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2278'. [ 565.781693][ T5359] usb 2-1: device descriptor read/64, error -71 [ 565.788187][ T7816] usb 5-1: new low-speed USB device number 80 using dummy_hcd [ 565.832316][ T7816] usb 5-1: Invalid ep0 maxpacket: 32 [ 565.838171][ T7816] usb usb5-port1: unable to enumerate USB device [ 565.855036][ T5720] usb 3-1: device descriptor read/64, error -71 [ 565.861746][ T5705] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -32 [ 565.901779][ T5359] usb usb2-port1: attempt power cycle [ 565.954791][ T5720] usb usb3-port1: attempt power cycle [ 566.331808][ T5359] usb 2-1: new full-speed USB device number 91 using dummy_hcd [ 566.382248][ T5359] usb 2-1: device descriptor read/8, error -71 [ 566.389589][ T5720] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 566.567906][T13634] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2282'. [ 566.661538][ T5359] usb 2-1: new full-speed USB device number 92 using dummy_hcd [ 566.712231][ T5359] usb 2-1: device descriptor read/8, error -71 [ 566.751990][ T5705] usb 4-1: USB disconnect, device number 93 [ 566.832133][ T5359] usb usb2-port1: unable to enumerate USB device [ 566.843064][ T5720] usb 3-1: device descriptor read/8, error -71 [ 567.140720][T13642] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2285'. [ 567.248541][T13648] netlink: 'syz.0.2288': attribute type 11 has an invalid length. [ 567.258228][T13647] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2287'. [ 567.277369][ T5720] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 567.354747][T13651] loop2: detected capacity change from 0 to 7 [ 567.362150][T13651] Dev loop2: unable to read RDB block 7 [ 567.367829][T13651] loop2: unable to read partition table [ 567.373847][T13651] loop2: partition table beyond EOD, truncated [ 567.432184][T13652] netlink: 'syz.4.2287': attribute type 1 has an invalid length. [ 567.439945][T13652] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.2287'. [ 567.452144][T13651] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 567.485363][T13654] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2290'. [ 567.637531][ T5720] usb 3-1: device descriptor read/8, error -71 [ 567.644149][ T5705] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 567.743998][ T5720] usb usb3-port1: unable to enumerate USB device [ 568.112048][T13671] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2296'. [ 568.148829][T13674] usb usb8: usbfs: process 13674 (syz.4.2297) did not claim interface 0 before use [ 568.161384][T13675] netlink: 'syz.1.2298': attribute type 1 has an invalid length. [ 568.169522][T13674] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 568.224048][T13675] 8021q: adding VLAN 0 to HW filter on device bond6 [ 568.247112][T13682] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2300'. [ 568.256752][T13682] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2300'. [ 568.261355][T13677] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 568.302305][ T5705] usb 4-1: Using ep0 maxpacket: 32 [ 568.422698][ T5720] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 568.581612][ T7816] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 568.746819][ T7827] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 568.812555][T13691] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2304'. [ 568.853752][ T7816] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 568.865236][ T7816] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 568.874522][ T7816] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 568.895248][ T7816] usb 1-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice= 0.40 [ 568.904571][ T7816] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.913616][ T7816] usb 1-1: Product: syz [ 568.917796][ T7816] usb 1-1: Manufacturer: syz [ 568.922547][ T7816] usb 1-1: SerialNumber: syz [ 568.970649][ T5705] usb 4-1: config 0 has no interfaces? [ 569.195603][T13694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 569.208922][T13694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 569.261697][ T7816] usb 1-1: Can't get UAC3 power state for id 10 [ 569.279480][ T7816] usb 1-1: 2:0: failed to get current value for ch 0 (-71) [ 569.293391][ T7816] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 569.301110][ T7816] usb 1-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 569.316130][ T7816] usb 1-1: [2] FU [Generic Out Playback Volume] ch = 1, val = 0/1/1 [ 569.386856][T13701] netlink: 'syz.0.2307': attribute type 4 has an invalid length. [ 569.428889][ T7827] usb 2-1: Using ep0 maxpacket: 16 [ 569.434751][ T7810] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 569.451663][ T7816] usb 1-1: USB disconnect, device number 85 [ 569.572533][ T5626] udevd[5626]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 569.756567][ T5720] usb 3-1: config 2 has an invalid interface number: 174 but max is 0 [ 569.764782][ T5720] usb 3-1: config 2 has no interface number 0 [ 569.770876][ T5720] usb 3-1: config 2 interface 174 altsetting 0 has an endpoint descriptor with address 0x9E, changing to 0x8E [ 569.782519][ T5720] usb 3-1: config 2 interface 174 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 1023 [ 569.792839][ T5720] usb 3-1: config 2 interface 174 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 255 [ 569.860231][ T5705] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 569.869358][ T5705] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.877356][ T5705] usb 4-1: Product: syz [ 569.881690][ T5705] usb 4-1: Manufacturer: syz [ 569.886291][ T5705] usb 4-1: SerialNumber: syz [ 569.893343][ T5705] usb 4-1: config 0 descriptor?? [ 569.967661][ T5705] usb 4-1: can't set config #0, error -71 [ 569.974917][ T5705] usb 4-1: USB disconnect, device number 94 [ 570.021653][ T7816] usb 1-1: new full-speed USB device number 86 using dummy_hcd [ 570.074548][ T7827] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 97, changing to 10 [ 570.085733][ T7827] usb 2-1: config 0 interface 0 has no altsetting 0 [ 570.092477][ T7827] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 570.101529][ T7827] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.121452][ T7827] usb 2-1: config 0 descriptor?? [ 570.186296][ T7810] usb 5-1: Using ep0 maxpacket: 16 [ 570.241672][ T7816] usb 1-1: device descriptor read/64, error -71 [ 570.289828][ T5720] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 570.302065][ T7810] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 570.316558][ T5720] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.324552][ T5720] usb 3-1: Product: syz [ 570.328702][ T5720] usb 3-1: Manufacturer: syz [ 570.333291][ T5720] usb 3-1: SerialNumber: syz [ 570.343092][ T7810] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 570.425643][T13654] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 570.433239][T13654] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 570.582273][ T7816] usb 1-1: new full-speed USB device number 87 using dummy_hcd [ 570.644097][ T5720] usb 3-1: can't set config #2, error -71 [ 570.660579][ T5720] usb 3-1: USB disconnect, device number 75 [ 570.723648][T13719] __nla_validate_parse: 1 callbacks suppressed [ 570.723661][T13719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2314'. [ 570.787781][ T7827] nzxt-smart2 0003:1E71:2009.000E: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 570.812744][ T7816] usb 1-1: device descriptor read/64, error -71 [ 570.961886][ T7816] usb usb1-port1: attempt power cycle [ 571.010950][ T5359] usb 2-1: USB disconnect, device number 93 [ 571.190488][ T7810] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 571.199560][ T7810] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.207552][ T7810] usb 5-1: Product: syz [ 571.211713][ T7810] usb 5-1: Manufacturer: syz [ 571.216304][ T7810] usb 5-1: SerialNumber: syz [ 571.241944][ T7810] usb 5-1: config 0 descriptor?? [ 571.351656][ T7816] usb 1-1: new full-speed USB device number 88 using dummy_hcd [ 571.405113][ T7816] usb 1-1: device descriptor read/8, error -71 [ 571.411536][ T7810] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 571.411568][ T7810] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 571.597668][T13728] syzkaller0: entered promiscuous mode [ 571.603170][T13728] syzkaller0: entered allmulticast mode [ 571.619914][ T7827] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 571.671772][ T7816] usb 1-1: new full-speed USB device number 89 using dummy_hcd [ 571.733379][ T7816] usb 1-1: device descriptor read/8, error -71 [ 571.842078][ T7816] usb usb1-port1: unable to enumerate USB device [ 571.997380][T13737] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2321'. [ 572.008317][T13737] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2321'. [ 572.381026][ T7810] em28xx 5-1:0.0: chip ID is em2828X [ 572.541689][ T7816] usb 3-1: new full-speed USB device number 76 using dummy_hcd [ 572.598680][T13693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 572.611839][T13693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 572.629849][ T7810] usb 5-1: USB disconnect, device number 81 [ 572.636931][ T7810] em28xx 5-1:0.0: Disconnecting em28xx [ 572.644161][ T7810] em28xx 5-1:0.0: Freeing device [ 572.709162][T13750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 572.729394][T13750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 572.820439][ T7816] usb 3-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 572.836369][ T7816] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.849960][ T7816] usb 3-1: Product: syz [ 572.857487][ T7816] usb 3-1: Manufacturer: syz [ 572.865602][ T7816] usb 3-1: SerialNumber: syz [ 572.928342][ T7827] usb 4-1: config 255 has an invalid interface number: 235 but max is 1 [ 572.936724][ T7827] usb 4-1: config 255 has an invalid interface number: 97 but max is 1 [ 572.945792][ T7827] usb 4-1: config 255 has no interface number 0 [ 572.952113][ T7827] usb 4-1: config 255 has no interface number 1 [ 572.959865][ T7827] usb 4-1: config 255 interface 97 altsetting 9 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 572.970893][ T7827] usb 4-1: config 255 interface 97 altsetting 9 bulk endpoint 0x5 has invalid maxpacket 8 [ 572.980924][ T7827] usb 4-1: config 255 interface 235 has no altsetting 0 [ 572.987936][ T7827] usb 4-1: config 255 interface 97 has no altsetting 0 [ 573.493104][ T7816] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 573.505521][ T7816] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 573.519122][ T7816] usb 3-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 573.553065][ T7816] usb 3-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 573.660203][ T7816] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 573.688775][ T7816] usb 3-1: USB disconnect, device number 76 [ 573.702887][ T7810] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 573.750135][ T5640] udevd[5640]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 573.813328][ T7827] usb 4-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=71.90 [ 573.822419][ T7827] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.830453][ T7827] usb 4-1: Product: syz [ 573.834644][ T7827] usb 4-1: Manufacturer: syz [ 573.839277][ T7827] usb 4-1: SerialNumber: syz [ 573.983475][T13758] ipvlan1: entered promiscuous mode [ 574.005092][T13757] ipvlan1: left promiscuous mode [ 574.095470][T13763] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2329'. [ 574.380564][ T7810] usb 5-1: Using ep0 maxpacket: 16 [ 574.435134][T13768] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2330'. [ 574.444211][T13768] openvswitch: netlink: EtherType 500 is less than min 600 [ 574.592493][ T7810] usb 5-1: too many configurations: 112, using maximum allowed: 8 [ 574.665721][T13776] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2332'. [ 574.932770][ T7827] rndis_host 4-1:255.97: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 574.962995][ T7827] usb 4-1: USB disconnect, device number 95 [ 574.972959][T13763] tipc: Failed to remove unknown binding: 66,0,0/3664630468:2178796812/2178796814 [ 575.005836][T13763] tipc: Failed to remove unknown binding: 66,0,0/3664630468:2178796812/2178796813 [ 575.032024][T13763] tipc: Failed to remove unknown binding: 66,0,0/3664630468:2178796812/2178796814 [ 575.051749][T13763] tipc: Failed to remove unknown binding: 66,0,0/3664630468:2178796812/2178796813 [ 575.396323][T13791] netlink: 'syz.0.2337': attribute type 1 has an invalid length. [ 575.581954][T13799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2341'. [ 575.819801][ T5705] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 575.876160][T13804] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2343'. [ 575.885473][T13804] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2343'. [ 575.981688][ T7816] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 575.989447][T11946] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 576.241697][ T7816] usb 3-1: Using ep0 maxpacket: 32 [ 576.249107][ T7816] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 576.259399][ T7816] usb 3-1: config 0 has no interface number 0 [ 576.266036][ T7816] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 576.282555][T11946] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 576.301192][T11946] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 576.313839][ T7816] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 576.323571][T11946] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 576.332725][ T7816] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.340770][T11946] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 576.349245][ T7816] usb 3-1: Product: syz [ 576.356212][ T7816] usb 3-1: Manufacturer: syz [ 576.360872][T11946] usb 2-1: Manufacturer: syz [ 576.365744][ T7816] usb 3-1: SerialNumber: syz [ 576.381121][ T7816] usb 3-1: config 0 descriptor?? [ 576.388608][T11946] usb 2-1: config 0 descriptor?? [ 576.410868][ T7816] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 576.433799][ T7816] em28xx 3-1:0.132: Video interface 132 found: [ 576.492655][ T5705] usb 4-1: Using ep0 maxpacket: 16 [ 576.717195][ T7810] usb 5-1: unable to read config index 4 descriptor/start: -71 [ 576.725202][ T7810] usb 5-1: can't read configurations, error -71 [ 576.822201][ T7816] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 576.830850][T13810] ipip0: entered promiscuous mode [ 576.936626][T13811] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2346'. [ 576.937992][T13810] ipip0: entered allmulticast mode [ 577.073864][T13814] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2345'. [ 577.082853][T13814] openvswitch: netlink: Flow actions attr not present in new flow. [ 577.158564][ T5705] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 577.170831][ T5705] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 577.245727][T13799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 577.269283][ T7816] em28xx 3-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 577.282381][ T7816] em28xx 3-1:0.132: board has no eeprom [ 577.292470][T13799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 577.431554][ T7816] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 577.442782][ T7816] em28xx 3-1:0.132: analog set to bulk mode. [ 577.453496][ T5359] em28xx 3-1:0.132: Registering V4L2 extension [ 577.604268][ T5359] em28xx 3-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 577.605085][ T5720] usb 3-1: USB disconnect, device number 77 [ 577.634475][ T5720] em28xx 3-1:0.132: Disconnecting em28xx [ 577.783278][ T5359] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 577.794589][ T5359] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 577.811515][ T5359] em28xx 3-1:0.132: No AC97 audio processor [ 577.882618][T13799] IPVS: set_ctl: invalid protocol: 43 10.1.1.0:20001 [ 577.902840][T13799] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2341'. [ 577.914840][ T5359] usb 3-1: Decoder not found [ 577.940204][ T5359] em28xx 3-1:0.132: failed to create media graph [ 577.988090][ T5359] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 578.003847][ T5359] em28xx 3-1:0.132: Remote control support is not available for this card. [ 578.003894][T13827] ================================================================== [ 578.020620][T13827] BUG: KASAN: slab-use-after-free in v4l2_open+0x397/0x3a0 [ 578.027966][T13827] Read of size 4 at addr ffff8880277c4860 by task v4l_id/13827 [ 578.035508][T13827] [ 578.037857][T13827] CPU: 1 UID: 0 PID: 13827 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 578.037883][T13827] Tainted: [L]=SOFTLOCKUP [ 578.037890][T13827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 578.037902][T13827] Call Trace: [ 578.037910][T13827] [ 578.037918][T13827] dump_stack_lvl+0xe8/0x150 [ 578.037948][T13827] print_address_description+0x55/0x1e0 [ 578.037984][T13827] ? v4l2_open+0x397/0x3a0 [ 578.038018][T13827] print_report+0x58/0x70 [ 578.038042][T13827] kasan_report+0x117/0x150 [ 578.038071][T13827] ? v4l2_open+0x397/0x3a0 [ 578.038097][T13827] v4l2_open+0x397/0x3a0 [ 578.038115][T13827] chrdev_open+0x4d9/0x600 [ 578.038131][T13827] ? __pfx_chrdev_open+0x10/0x10 [ 578.038157][T13827] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 578.038181][T13827] ? __pfx_chrdev_open+0x10/0x10 [ 578.038201][T13827] do_dentry_open+0x816/0x1380 [ 578.038228][T13827] vfs_open+0x3b/0x340 [ 578.038249][T13827] ? path_openat+0x2e2d/0x3830 [ 578.038262][T13827] path_openat+0x2e44/0x3830 [ 578.038276][T13827] ? kasan_save_track+0x3e/0x80 [ 578.038303][T13827] ? do_sys_openat2+0xcc/0x200 [ 578.038328][T13827] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.038356][T13827] do_file_open+0x23e/0x4a0 [ 578.038375][T13827] ? __pfx_do_file_open+0x10/0x10 [ 578.038417][T13827] ? _raw_spin_unlock+0x28/0x50 [ 578.038479][T13827] ? alloc_fd+0x651/0x6c0 [ 578.038509][T13827] do_sys_openat2+0x115/0x200 [ 578.038535][T13827] ? __pfx_do_sys_openat2+0x10/0x10 [ 578.038565][T13827] ? exc_page_fault+0x6a/0xc0 [ 578.038584][T13827] ? do_user_addr_fault+0xc4a/0x1340 [ 578.038626][T13827] __x64_sys_openat+0x138/0x170 [ 578.038655][T13827] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.038674][T13827] do_syscall_64+0x174/0x580 [ 578.038700][T13827] ? trace_irq_disable+0x3b/0x140 [ 578.038719][T13827] ? clear_bhb_loop+0x40/0x90 [ 578.038734][T13827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.038748][T13827] RIP: 0033:0x7fc2ffea7407 [ 578.038772][T13827] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 578.038791][T13827] RSP: 002b:00007fff6766f0f0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 578.038811][T13827] RAX: ffffffffffffffda RBX: 00007fc30057e880 RCX: 00007fc2ffea7407 [ 578.038826][T13827] RDX: 0000000000000000 RSI: 00007fff67670f1b RDI: ffffffffffffff9c [ 578.038839][T13827] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 578.038854][T13827] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 578.038863][T13827] R13: 00007fff6766f340 R14: 00007fc3006e5000 R15: 000055b83e0db4d8 [ 578.038879][T13827] [ 578.038885][T13827] [ 578.303939][T13827] Allocated by task 5359: [ 578.308298][T13827] kasan_save_track+0x3e/0x80 [ 578.313017][T13827] __kasan_kmalloc+0x93/0xb0 [ 578.317642][T13827] __kmalloc_cache_noprof+0x32d/0x660 [ 578.323048][T13827] em28xx_v4l2_init+0x103/0x3300 [ 578.328151][T13827] em28xx_init_extension+0x120/0x1d0 [ 578.333480][T13827] process_scheduled_works+0xa8e/0x14e0 [ 578.339051][T13827] worker_thread+0xa47/0xfb0 [ 578.343671][T13827] kthread+0x388/0x470 [ 578.347772][T13827] ret_from_fork+0x514/0xb70 [ 578.352402][T13827] ret_from_fork_asm+0x1a/0x30 [ 578.357180][T13827] [ 578.359523][T13827] Freed by task 5359: [ 578.363535][T13827] kasan_save_track+0x3e/0x80 [ 578.368234][T13827] kasan_save_free_info+0x40/0x50 [ 578.373290][T13827] __kasan_slab_free+0x5c/0x80 [ 578.378099][T13827] kfree+0x1c5/0x640 [ 578.382027][T13827] em28xx_v4l2_init+0x1919/0x3300 [ 578.387113][T13827] em28xx_init_extension+0x120/0x1d0 [ 578.392420][T13827] process_scheduled_works+0xa8e/0x14e0 [ 578.397991][T13827] worker_thread+0xa47/0xfb0 [ 578.402617][T13827] kthread+0x388/0x470 [ 578.406721][T13827] ret_from_fork+0x514/0xb70 [ 578.411343][T13827] ret_from_fork_asm+0x1a/0x30 [ 578.416127][T13827] [ 578.418465][T13827] The buggy address belongs to the object at ffff8880277c4000 [ 578.418465][T13827] which belongs to the cache kmalloc-8k of size 8192 [ 578.432535][T13827] The buggy address is located 2144 bytes inside of [ 578.432535][T13827] freed 8192-byte region [ffff8880277c4000, ffff8880277c6000) [ 578.446523][T13827] [ 578.448868][T13827] The buggy address belongs to the physical page: [ 578.455326][T13827] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x277c0 [ 578.464125][T13827] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 578.472644][T13827] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 578.480200][T13827] page_type: f5(slab) [ 578.484195][T13827] raw: 00fff00000000040 ffff88801b002280 dead000000000100 dead000000000122 [ 578.492795][T13827] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 578.501394][T13827] head: 00fff00000000040 ffff88801b002280 dead000000000100 dead000000000122 [ 578.510083][T13827] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 578.518771][T13827] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 578.527454][T13827] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 578.536127][T13827] page dumped because: kasan: bad access detected [ 578.542542][T13827] page_owner tracks the page as allocated [ 578.548269][T13827] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5288, tgid 5288 (dhcpcd), ts 54875557214, free_ts 54856728689 [ 578.568940][T13827] post_alloc_hook+0x1f9/0x250 [ 578.573752][T13827] get_page_from_freelist+0x21fa/0x2270 [ 578.579318][T13827] __alloc_frozen_pages_noprof+0x18d/0x380 [ 578.585184][T13827] allocate_slab+0x79/0x5e0 [ 578.589716][T13827] refill_objects+0x2d5/0x350 [ 578.594409][T13827] __pcs_replace_empty_main+0x2bf/0x6b0 [ 578.599976][T13827] __kvmalloc_node_noprof+0x66b/0x860 [ 578.605382][T13827] pfifo_fast_init+0x372/0x6c0 [ 578.610277][T13827] qdisc_create_dflt+0x13b/0x4e0 [ 578.615269][T13827] mq_init_common+0x267/0x440 [ 578.619974][T13827] mq_init+0x83/0x260 [ 578.624020][T13827] qdisc_create_dflt+0x13b/0x4e0 [ 578.629052][T13827] dev_activate+0x1ce/0x1150 [ 578.633651][T13827] __dev_open+0x699/0x850 [ 578.638117][T13827] __dev_change_flags+0x329/0x820 [ 578.643206][T13827] netif_change_flags+0x7c/0x1b0 [ 578.648181][T13827] page last free pid 5365 tgid 5365 stack trace: [ 578.654517][T13827] __free_frozen_pages+0xc1e/0xd10 [ 578.659655][T13827] __slab_free+0x274/0x2c0 [ 578.664101][T13827] qlist_free_all+0x99/0x100 [ 578.668718][T13827] kasan_quarantine_reduce+0x148/0x160 [ 578.674284][T13827] __kasan_slab_alloc+0x22/0x80 [ 578.679156][T13827] kmem_cache_alloc_noprof+0x2a0/0x5f0 [ 578.684631][T13827] do_getname+0x2e/0x250 [ 578.688879][T13827] __se_sys_chdir+0x8d/0x2a0 [ 578.693476][T13827] do_syscall_64+0x174/0x580 [ 578.698084][T13827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.703999][T13827] [ 578.706335][T13827] Memory state around the buggy address: [ 578.712009][T13827] ffff8880277c4700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 578.720089][T13827] ffff8880277c4780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 578.728165][T13827] >ffff8880277c4800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 578.736240][T13827] ^ [ 578.743443][T13827] ffff8880277c4880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 578.751510][T13827] ffff8880277c4900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 578.759589][T13827] ================================================================== [ 578.821908][ T5720] em28xx 3-1:0.132: Closing input extension [ 578.830240][ T5705] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 578.839328][ T5705] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.847379][ T5705] usb 4-1: Product: syz [ 578.851570][ T5705] usb 4-1: Manufacturer: syz [ 578.856189][ T5705] usb 4-1: SerialNumber: syz [ 578.873657][T13827] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 578.880909][T13827] CPU: 1 UID: 0 PID: 13827 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 578.891538][T13827] Tainted: [L]=SOFTLOCKUP [ 578.895873][T13827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 578.906030][T13827] Call Trace: [ 578.909335][T13827] [ 578.912285][T13827] vpanic+0x56c/0xa60 [ 578.916304][T13827] ? __pfx_vpanic+0x10/0x10 [ 578.920854][T13827] panic+0xc5/0xd0 [ 578.924610][T13827] ? __pfx_panic+0x10/0x10 [ 578.929066][T13827] ? preempt_schedule_thunk+0x16/0x40 [ 578.934474][T13827] ? preempt_schedule_thunk+0x16/0x40 [ 578.939889][T13827] ? v4l2_open+0x397/0x3a0 [ 578.944355][T13827] check_panic_on_warn+0x89/0xb0 [ 578.949471][T13827] ? v4l2_open+0x397/0x3a0 [ 578.953923][T13827] end_report+0x73/0x170 [ 578.958211][T13827] ? v4l2_open+0x397/0x3a0 [ 578.962660][T13827] kasan_report+0x128/0x150 [ 578.967189][T13827] ? v4l2_open+0x397/0x3a0 [ 578.971637][T13827] v4l2_open+0x397/0x3a0 [ 578.975914][T13827] chrdev_open+0x4d9/0x600 [ 578.980370][T13827] ? __pfx_chrdev_open+0x10/0x10 [ 578.985339][T13827] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 578.991693][T13827] ? __pfx_chrdev_open+0x10/0x10 [ 578.996659][T13827] do_dentry_open+0x816/0x1380 [ 579.001582][T13827] vfs_open+0x3b/0x340 [ 579.005691][T13827] ? path_openat+0x2e2d/0x3830 [ 579.010573][T13827] path_openat+0x2e44/0x3830 [ 579.015189][T13827] ? kasan_save_track+0x3e/0x80 [ 579.020063][T13827] ? do_sys_openat2+0xcc/0x200 [ 579.024867][T13827] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.030965][T13827] do_file_open+0x23e/0x4a0 [ 579.035494][T13827] ? __pfx_do_file_open+0x10/0x10 [ 579.040549][T13827] ? _raw_spin_unlock+0x28/0x50 [ 579.045424][T13827] ? alloc_fd+0x651/0x6c0 [ 579.049784][T13827] do_sys_openat2+0x115/0x200 [ 579.054494][T13827] ? __pfx_do_sys_openat2+0x10/0x10 [ 579.059718][T13827] ? exc_page_fault+0x6a/0xc0 [ 579.064416][T13827] ? do_user_addr_fault+0xc4a/0x1340 [ 579.069732][T13827] __x64_sys_openat+0x138/0x170 [ 579.074625][T13827] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.080806][T13827] do_syscall_64+0x174/0x580 [ 579.085423][T13827] ? trace_irq_disable+0x3b/0x140 [ 579.090480][T13827] ? clear_bhb_loop+0x40/0x90 [ 579.095179][T13827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.101101][T13827] RIP: 0033:0x7fc2ffea7407 [ 579.105531][T13827] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 579.125152][T13827] RSP: 002b:00007fff6766f0f0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 579.133588][T13827] RAX: ffffffffffffffda RBX: 00007fc30057e880 RCX: 00007fc2ffea7407 [ 579.141578][T13827] RDX: 0000000000000000 RSI: 00007fff67670f1b RDI: ffffffffffffff9c [ 579.149565][T13827] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 579.157547][T13827] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 579.165528][T13827] R13: 00007fff6766f340 R14: 00007fc3006e5000 R15: 000055b83e0db4d8 [ 579.173526][T13827] [ 579.177177][T13827] Kernel Offset: disabled [ 579.181541][T13827] Rebooting in 86400 seconds..