last executing test programs: 11.076273853s ago: executing program 3 (id=402): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x1a9d42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000480)=ANY=[@ANYBLOB="01000000000000000d0002000600000009000000001000000100000000000000"]) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r3 = syz_usb_connect(0x5, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0xe, 0xde, 0x84, 0x20, 0x85a, 0x9, 0xa347, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xeb, 0x0, 0x0, 0x79, 0x16, 0xfd}}]}}]}}, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000000)=[{0x7, 0x0, 0x83}, {0x9, 0x0, 0xb187}], 0x2, 0x201, 0x0, 0x0, 0x42, 0x5c}) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$addseals(r5, 0x409, 0x8) 10.323437628s ago: executing program 4 (id=408): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_int(r2, 0x29, 0x13, 0x0, 0x300) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) syz_usb_connect(0x4, 0x5f, &(0x7f00000002c0)=ANY=[@ANYRESDEC, @ANYRES64=0x0, @ANYRESHEX], 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x68040200) syz_usb_connect(0x0, 0x2d, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000083667d1040206402d14e010203010902"], 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) add_key(&(0x7f00000001c0)='dns_resolver\x00', 0x0, &(0x7f0000000480)="0008b15610c2", 0x6, 0xfffffffffffffffd) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, 0x0, 0x701, 0xfffffffc, 0x0, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x24044004}, 0x4000) r6 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x6, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90a, 0x78, '\x00', @string=&(0x7f0000000040)=0x4}}) r7 = syz_open_procfs(0x0, 0x0) r8 = getpid() r9 = creat(&(0x7f0000000300)='./file0\x00', 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f00000006c0)=@v2={0x2000000, [{0x2, 0xeec}, {0xe8000000, 0xffff8000}]}, 0x14, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(0xffffffffffffffff, 0x4068aea3, 0x0) r10 = syz_pidfd_open(r8, 0x0) setns(r10, 0x24020000) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f00000000c0)={0x14, &(0x7f0000000380)={0x20, 0xa, 0xb8, {0xb8, 0xe, "00d07ea241cf622af2bc2d9713ce538f76f34e3fb5f52d6108179ade741b650f10a44d07d1875e96b38c164090c6f8440a86fda63de45d4f80d538080bbf54fe937a799476fef5c6d69eaf3d94c450ba31b6f834424db81ee74d9d218af5ef93bb758d6854b38b06d92bfae40c2b9abe6ebfaa919caeb8e862fe6f262627c76df81011433c854a095e86f0d0e136166b64452bced63de14a35e84901385a6f72038c1a31c14cdddddcd8bec8efccd3ffc3b15c5731fd"}}, 0x0}, &(0x7f0000000700)={0x44, 0x0, &(0x7f0000000240)={0x0, 0xa, 0x1}, 0x0, &(0x7f00000004c0)=ANY=[@ANYRES32=r9, @ANYRES64=r3, @ANYRESDEC=r9, @ANYRESHEX=r3, @ANYRES8=r0, @ANYRESHEX=r7, @ANYRES8, @ANYRES32=0x0, @ANYRES8=r4], &(0x7f0000000600)={0x20, 0x82, 0x1, '\b'}, &(0x7f0000000200)={0x20, 0x83, 0x2, "0400"}, &(0x7f0000000680)={0x20, 0x84, 0x4, "01000000"}, 0x0}) 8.916255859s ago: executing program 0 (id=411): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000580)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000480)) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r6, &(0x7f0000000140)) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r6, 0xc0182101, &(0x7f00000003c0)={r7, 0xfffffffffffffa6f, 0xfffffffc}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r11 = syz_usb_connect(0x2, 0x24, &(0x7f0000000bc0)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$cdc_ecm(r11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa8}, [@ldst={0x7}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2a) syz_usb_control_io(r11, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r11, 0x0, 0x0) syz_usb_control_io$hid(r11, 0x0, 0x0) syz_usb_control_io$uac1(r11, 0x0, &(0x7f0000000b40)={0x44, &(0x7f0000000940)={0x0, 0xe, 0x2, "1b6a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) 8.886006963s ago: executing program 3 (id=412): pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x880) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000140)) syz_open_dev$vim2m(&(0x7f0000000040), 0x2, 0x2) syz_io_uring_setup(0x6f10, &(0x7f0000000b00)={0x0, 0xfffffffd, 0x10, 0x4, 0x4}, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000080)={[{0x6, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x10, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x20000000, 0x440, 0x821, 0x0, 0x0, 0x2004cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000], 0x0, 0x200306}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 7.731201215s ago: executing program 3 (id=414): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000840), 0x20000, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000b80)={0x8, 0x2, 0x8, 0x9, 0x7f, "45cb897f634c0f58ba18cb6fe3f546a9e734ea", 0x10000, 0x401}) mq_open(&(0x7f00000005c0)='eth0\x00#\x13\xaeu\xe0\xfb\x050*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\x19\xf1\xcce\xab\x80M\xc9\xcf\xaeR\xb69k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3\xff\a\x00\x00\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\aY\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3Cs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\x96{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\x03\x00\x00\x00y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\x8e\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9\xb3\x83\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|c\xf3\x8b\xc2E\x00\x00\x00\x00\x00\x00', 0x42, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0xfd, 0xb, 0x1, 0x5, @private1, @loopback={0x0, 0x460c6}, 0x20, 0x8000, 0x804, 0x40000}}) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) r2 = socket$kcm(0x2, 0x2, 0x73) sendmmsg(r2, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000240)="fe136b5d1eb5ea195cbf5179fbdbc4c055389c1eb0670db3f87c1bdb44b82dd7a2f5de13bd95ceda7834730e0f60d726cd8cc762a620896da5db306ec63cc25bd1eaa793031ef1dae0c7afdbe3f8a695900842833880af5e9c976b719b3ab59aa105ea7c36b3cfff56046fd73201cdceaff37435c42abaf59e831713142e6dfc53f26e1cc13a5565140a7606ba18fd687ddcc3c2a5c6d7b40594f3957f244c2d7186dbf77dfcd0e0bed355313f1505bd3b486f0710bdd40e", 0xb8}, {&(0x7f0000000100)="1e86a0d81a58556687393dd7333fe85276fe12cb9b1535c33a5cdb697f73eb163ec51b59dc7fe9c26b180e5a0485899e32514af6b1231fb0384ddc7381aea611fd79a2b75261c52e29d222841ce58631f76a004afc4cd054c9972de6e49964a2b8f0bebd4f44e824cc", 0x69}, {&(0x7f0000000300)="d25196f8565b318409676b07b620d5a0240a17f190be0be3b543585d6fdea77512cf85c622c3d276cc39627fceac", 0x2e}, {&(0x7f0000000340)="b5c7621e85aa5eb09d00e782b9087ba903b985a04c340c21690905fc53", 0x1d}], 0x4, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x610}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000003c0)="ee8f7a718cc45b05da234d5b", 0xc}, {&(0x7f0000000400)="27154d2bbfa4f27e3551a853726b2c60571d297bbbe1fcd56010826af90d7a61ac23a0e11328b019b65a8c6e9dacfb4a8326ed0679a739653b640b2c60916705ab5cba9462dba2e59ce89ba9976f77bc5d1a44cbfae7617e8296d0a48e3074f618ba4ddf", 0x64}, {&(0x7f0000000480)="bd9073c7f83fc8c608126cb808fd76533c55b0622ac872b3e0444ac59dcf2397cbfba306a4e21713c7513359821c88d906e8e0534a135643a890a0450645f52eea5019f987799ffa64ef228a11f5835590b5acfef6584018d892055b25f061d1d795ebf8e99a3ced243cf1add22df409383e71dc", 0x74}, {&(0x7f0000000740)="19c53e6c389bb4aa64ebc59419426dc5801a584a882fa73da4f843de175d271babfb1fd12cefadb72e104352edf6c3906851de63aac212e8eef8cb7326d7e9823518e3f80f372d565a6503dfdc836df74ac2d9c6198a7fe6f2e2878997cf49aa0f61c799c02845bbebafe9fd38e70cf4855aa5aa07952b469ac8c62a9c52cb430a364734a3f55287b641868faf3d4eb048c2e1efac99a5f9ea1de5365a6b9b344b8a6802e9703716f3db4f5d04ddee1278e7c4fd2d3a9eecafdb9ee480d4914c3a68972849ebdb5e3ac84ac7d853380beddfc361cbc8a9928a2a4912ab", 0xdd}, {&(0x7f0000000500)="0c547d85aa01a26c718a66af387f6869", 0x10}], 0x5, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1c8}}], 0x2, 0x80) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) socket$xdp(0x2c, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x2d, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1201000057eb0020fd070400fa8e0102030109021b0002"], 0x0) socket$netlink(0x10, 0x3, 0xb) openat$audio1(0xffffff9c, &(0x7f0000000040), 0x8081, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x21, 0x2, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4], 0x90}}, 0x0) 6.491830085s ago: executing program 4 (id=419): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000060000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) 6.435677981s ago: executing program 4 (id=420): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000030000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) 6.175732883s ago: executing program 4 (id=423): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) modify_ldt$write2(0x11, &(0x7f0000000040), 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x5, 0x2, 0x10}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}}, {0x4}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x14}, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x5452, &(0x7f0000000000)) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x401, 0x2000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13101}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6erspan={{0x4}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x0, 0x2, 0x5}, @IFLA_GRE_IKEY={0x8}, @IFLA_GRE_FLOWINFO={0x0, 0xc, 0x611}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000}, 0x7a25aecbc4e00408) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r5 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d2407010604000000000000e90924030000000001"], 0x0) syz_usb_control_io(r5, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r5, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000400)={0x40, 0x0, 0x1, "e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r5, 0x0, &(0x7f00000009c0)={0x84, &(0x7f00000002c0)={0x0, 0xf, 0x1, "e9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r5, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0003ed000000ed03dc"], 0x0, 0x0, 0x0}, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 5.846133997s ago: executing program 0 (id=425): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000b1b05b983a14076000000000ed8d4642fa", 0x3e}], 0x1) 5.790657805s ago: executing program 3 (id=426): socket$netlink(0x10, 0x3, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x8000) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r2 = syz_io_uring_setup(0x4e3, &(0x7f0000000480)={0x0, 0x938c, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) read$dsp(r1, &(0x7f0000003200)=""/4096, 0x1000) 5.738005426s ago: executing program 0 (id=427): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040084) 5.655957278s ago: executing program 0 (id=428): r0 = gettid() timer_create(0x6, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK/file0\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000380)=0x3) ioctl$TIOCGLCKTRMIOS(r6, 0x5456, &(0x7f0000000240)={0x400, 0x101, 0xee, 0x1, 0x0, "807ae6ef68f71527f2b6a8558e00"}) r7 = syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f000007c000/0x4000)=nil, &(0x7f0000370000/0x3000)=nil, 0x41, 0x0, 0x21, 0x4, 0x90, 0x0, 0x9, 0xb}) connect$unix(r3, &(0x7f00000002c0)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK/file0\x00'}, 0x6e) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r9, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x384, 0x1000, 0x0, 0xd968d5b908ac0cdc, 0x0, {}, {0x3}, {0xf4f2, 0x1000}, {0x0, 0x0, 0xffe}, 0x0, 0x100, 0x0, 0xd613, 0x0, 0x0, 0x1, 0x0, 0x32, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}) close(r8) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018002580140004004d2906d0880fc8acc30fe2020f9849675000028004000500a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe41bcc5aa8f56c94714"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4) listen(r10, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1a86dd60f900f500180600fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="7800001e0200000000000000"], 0x0) sendmmsg(r4, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000140)=[{r3, 0x8100}], 0x1, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$VHOST_SET_LOG_FD(r6, 0x4004af07, &(0x7f0000000340)=r6) timer_settime(r1, 0x0, &(0x7f0000000100)={{r11, r12+10000000}}, &(0x7f0000000200)) readv(r2, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/150, 0x96}], 0x1) 5.307897913s ago: executing program 2 (id=430): r0 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x4b, 0x41, 0x46, 0x8, 0x1660, 0x932, 0x80ea, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x5, 0x10, 0xf}}]}}]}}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0xfffffffd) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001000), 0x581, 0x40000000, 0x0) connect$packet(r3, &(0x7f00000000c0)={0x11, 0x2, 0x0, 0x1, 0x9}, 0x14) r4 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffb, 0x0, 0xffffffff}, 0x10) recvmmsg(r4, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)=""/38, 0x26}], 0x1}, 0x2174eda0}], 0x1, 0x1, &(0x7f0000000580)={0x77359400}) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000002580)={&(0x7f0000000180)=[{0x3, 0x5000, 0x0, 0x0}, {0x6, 0x4001, 0x0, 0x0}], 0x2}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) 5.004917168s ago: executing program 3 (id=431): r0 = timerfd_create(0x7, 0x0) timerfd_settime(r0, 0x3, &(0x7f00000001c0)={{0x0, 0x3938700}}, &(0x7f0000000200)={{0x0}, {0x0, 0x0}}) syz_usb_connect(0x2, 0x3d, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRESHEX, @ANYBLOB="a53501e19e505ed18b2c9b42939e69098746e990ded4be90da68e7e801e223869f3af3d1aba88b1bc8a7fcda47d0f2a009b1be2e28c80e6184fc27a866afe1cfe4655872f3ff2d390c9cd8a35c9c7b9535ecd112fa936ba93dde660548202287ae42a391e26602da8c63fe60ba761425d7f79444886960afd94aba59", @ANYRES64=r0, @ANYRES16, @ANYRES64=r1, @ANYBLOB="6bb80c8b25688dae4e9942a58a79c40971fd5cc4b75f72148524413aea385f1bb10c84ab070d1f506c8a1483aa6cfafbad2611bb5e0deba33817e7a940706aa3549756b45106154bbde516c91118d79fc148f4f4ef6618c80131ac9a2d679d69e6ea62cb3767a51196d68c90b9541e0887c5e93ab960408c4d11d297f143eaa29b26ea41e8bd058a64ccd9adcebe286c3138bbe72eeaa3462f82a1d74504353cbb4db7e95bd8c9ebfd14e146ea2ed324", @ANYRES64, @ANYRESDEC=r2], 0x0) 4.632803016s ago: executing program 0 (id=433): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="380000004900010026bd7000fbdbdf250a008000", @ANYRES32=0x0, @ANYBLOB="df5300001400010000000000000000000000e1ffffffec000800"], 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x8080) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x840000000002, 0x3, 0x100) sendmmsg$inet(r3, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000002c0)={0x2, 0x4e24, @broadcast}, 0x10, 0x0}}], 0x2, 0xd0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0xd4) preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000480)=""/187, 0xbb}], 0x1, 0xffffff51, 0x0) r4 = mq_open(&(0x7f0000000a00)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xeeux\x00\xbf@\xf4\x1c\xbce\xca\x97\xd5pkv\x88L\xe8$\xef\xfeI\xdaW1\xfcg\xa1\xdb$,0y$\xcd{zl.\xae\x805\xa8\xd6\x85\x15\xd2\x0e~\xcc\x90\x97\xe8h\v\x1a9X\a\xca{\x11#\x95m{U\xe5-\xabRw\xcafy\xe6\aNhX4Ll[\x14\x150x0, 0x0}) mq_timedsend(r0, &(0x7f0000000040)="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", 0x1000, 0x0, &(0x7f0000001080)={r1, r2+10000000}) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f00000010c0)=0x1) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001200)={&(0x7f0000001100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001140)=[0x0, 0x0, 0x0], &(0x7f0000001180)=[0x0], &(0x7f00000011c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x1, 0x4}) renameat2(r0, &(0x7f0000001240)='./file0\x00', r0, &(0x7f0000001280)='./file0\x00', 0x3) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001340), r0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000001440)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x70, r4, 0x4, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8001}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xa}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4006}, 0xc0) clock_gettime(0x0, &(0x7f00000014c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000001500)={0x0, 0x0}) utimensat(r0, &(0x7f0000001480)='./file0\x00', &(0x7f0000001540)={{r5, r6/1000+60000}, {r7, r8/1000+60000}}, 0x100) syz_open_dev$char_usb(0xc, 0xb4, 0xffff) clock_gettime(0x0, &(0x7f0000003ac0)={0x0, 0x0}) futex_waitv(&(0x7f0000003080)=[{0x1, &(0x7f0000001580)=0x9, 0x82}, {0x2, &(0x7f00000015c0)=0x5, 0x2}, {0x5, &(0x7f0000001600)=0x3, 0x2}, {0x6, &(0x7f0000001640)=0x82e1, 0x2}, {0x2, &(0x7f0000001680)=0x7, 0x2}, {0x9, &(0x7f00000016c0)=0x8000, 0x104}, {0x4, &(0x7f0000001700)=0x1ff, 0x82}, {0x3, &(0x7f0000001740)=0xffff, 0x2}, {0xff, &(0x7f0000001780)=0x6, 0x82}, {0xf2e, &(0x7f00000017c0)=0x7, 0x82}, {0xd4ce, &(0x7f0000001800)=0xb0d, 0x2}, {0x6, &(0x7f0000001840)=0x3ff, 0x82}, {0x2, &(0x7f0000001880)=0x4, 0x2}, {0x4, &(0x7f00000018c0)=0x7, 0x82}, {0x2, &(0x7f0000001900)=0x4, 0x2}, {0x8, &(0x7f0000001940)=0x7, 0x82}, {0x5, &(0x7f0000001980)=0x2, 0x2}, {0x4e0, &(0x7f00000019c0)=0xffffffff, 0x2}, {0xffffffffffffff81, &(0x7f0000001a00)=0x5, 0x82}, {0x8, &(0x7f0000001a40)=0xe, 0x2}, {0x4, &(0x7f0000001a80)=0xffffffffffff7fff, 0x2}, {0x0, &(0x7f0000001ac0)=0x7f, 0x82}, {0x6, &(0x7f0000001b00)=0x4}, {0x200, &(0x7f0000001b40)=0x6d00c5fb, 0x82}, {0x45, &(0x7f0000001b80)=0x100000000, 0x80}, {0x6, &(0x7f0000001bc0)=0x1800000000000, 0x82}, {0x10000, &(0x7f0000001c00)=0xffff, 0x82}, {0xc2, &(0x7f0000001c40)=0x20400000000000, 0x82}, {0x4, &(0x7f0000001c80)=0x2, 0x82}, {0x9, &(0x7f0000001cc0)=0x7, 0x2}, {0x4, &(0x7f0000001d00)=0x1}, {0x10001, &(0x7f0000001d40), 0x82}, {0xe, &(0x7f0000001d80)=0x4705, 0x2}, {0x2, &(0x7f0000001dc0)=0x1, 0x2}, {0x9, &(0x7f0000001e00)=0x5, 0x82}, {0x1, &(0x7f0000001e40)=0x8000000000000000, 0x82}, {0x0, &(0x7f0000001e80)=0xfffffffffffffffb, 0x2}, {0x8, &(0x7f0000001ec0), 0x2}, {0xb, &(0x7f0000001f00)=0xfffffffffffffff9, 0x2}, {0x8, &(0x7f0000001f40)=0x7ff, 0x82}, {0xa, &(0x7f0000001f80)=0x8, 0x2}, {0x2, &(0x7f0000001fc0)=0x1, 0x2}, {0x5, &(0x7f0000002000)=0x7, 0x82}, {0x1, &(0x7f0000002040)=0x249, 0x2}, {0x4, &(0x7f0000002080)=0x26, 0x2}, {0xf, &(0x7f00000020c0)=0x100, 0x82}, {0x0, &(0x7f0000002100)=0x3e, 0x2}, {0x7, &(0x7f0000002140)=0x4, 0x2}, {0x1, &(0x7f0000002180)=0x8001, 0x2}, {0x7bb, &(0x7f00000021c0)=0x8, 0x2}, {0x350, &(0x7f0000002200)=0x7, 0x2}, {0x8000000000000000, &(0x7f0000002240)=0xe3ff, 0x82}, {0x5, &(0x7f0000002280)=0x9, 0x82}, {0x6, &(0x7f00000022c0)=0x5, 0x82}, {0xfffffffffffffff1, &(0x7f0000002300)=0xfff, 0x82}, {0x7, &(0x7f0000002340)=0x7, 0x2}, {0xfffffffffffffffd, &(0x7f0000002380)=0xaf92, 0x2}, {0x2, &(0x7f00000023c0)=0x3, 0x2}, {0x10fd929b, &(0x7f0000002400)=0xb2b, 0x2}, {0xfffffffffffff617, &(0x7f0000002440)=0xf, 0x82}, {0xfffffffffffffff9, &(0x7f0000002480)=0x88, 0x82}, {0x1, &(0x7f00000024c0)=0x8, 0x2}, {0x0, &(0x7f0000002500)=0x9, 0x2}, {0x4, &(0x7f0000002540)=0x7fffffffffffffff, 0x2}, {0x1, &(0x7f0000002580)=0x3, 0x2}, {0x10000, &(0x7f00000025c0)=0x2, 0x4}, {0x6c68, &(0x7f0000002600)=0x1, 0x2}, {0x6, &(0x7f0000002640)=0x1, 0x2}, {0x9, &(0x7f0000002680)=0x3, 0x82}, {0x3, &(0x7f00000026c0)=0x4, 0x82}, {0x9c, &(0x7f0000002700), 0x2}, {0x1bd9c0, &(0x7f0000002740)=0x100000000}, {0x3, &(0x7f0000002780)=0x380000000, 0x2}, {0x3, &(0x7f00000027c0)=0x21b, 0x2}, {0x9, &(0x7f0000002800)=0x1, 0x2}, {0x4, &(0x7f0000002840)=0x5, 0x82}, {0x7, &(0x7f0000002880)=0x2, 0x82}, {0xe2, &(0x7f00000028c0)=0x6, 0x2}, {0xfcf, &(0x7f0000002900)=0x5, 0x82}, {0x8, &(0x7f0000002940)=0x5af2, 0x2}, {0xfffffffffffffffc, &(0x7f0000002980)=0x9, 0x82}, {0x9, &(0x7f00000029c0)=0x5, 0x82}, {0x5, &(0x7f0000002a00)=0x401, 0x2}, {0xf58, &(0x7f0000002a40)=0x3, 0x82}, {0x18000000000000, &(0x7f0000002a80)=0x8000, 0x82}, {0xefd53ba, &(0x7f0000002ac0)=0x4, 0x2}, {0xc, &(0x7f0000002b00)=0x4, 0x2}, {0xfffffffffffffff8, &(0x7f0000002b40)=0x7fffffff}, {0x7, &(0x7f0000002b80)=0x2, 0x82}, {0x8, &(0x7f0000002bc0)=0xfffffffffffffffd}, {0x9, &(0x7f0000002c00)=0x3, 0x82}, {0x80, &(0x7f0000002c40)=0x4, 0x82}, {0xd4c, &(0x7f0000002c80)=0x7, 0x2}, {0x7fff, &(0x7f0000002cc0)=0x4, 0x2}, {0xffff, &(0x7f0000002d00), 0x82}, {0x7, &(0x7f0000002d40)=0x80000000, 0x82}, {0x9, &(0x7f0000002d80)=0x7, 0x2}, {0x2, &(0x7f0000002dc0), 0x82}, {0x6, &(0x7f0000002e00)=0x9, 0x82}, {0x2c, &(0x7f0000002e40)=0x9, 0x82}, {0x9, &(0x7f0000002e80)=0x6, 0x82}, {0x3, &(0x7f0000002ec0)=0x8000000000000001, 0x2}, {0x1, &(0x7f0000002f00)=0x8, 0x2}, {0x6, &(0x7f0000002f40)=0x8, 0x82}, {0xffffffffffffffff, &(0x7f0000002f80)=0x6, 0x2}, {0x3, &(0x7f0000002fc0)=0xfffffffffffffffe, 0x82}, {0x4, &(0x7f0000003000)=0xc, 0x2}, {0x4, &(0x7f0000003040)=0xf}], 0x6c, 0x0, &(0x7f0000003b00)={r9, r10+60000000}, 0x1) r11 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0xae61e914892dad9f, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x40, &(0x7f0000003b40)=0x9, 0x0, 0x4) r12 = syz_io_uring_complete(r11) r13 = syz_mount_image$fuse(&(0x7f0000003b80), &(0x7f0000003bc0)='./file0\x00', 0x200800, &(0x7f0000003c00)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@allow_other}, {@max_read={'max_read', 0x3d, 0x5}}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}], [{@flag='rw'}, {@euid_gt={'euid>', 0xee00}}, {@pcr={'pcr', 0x3d, 0x40}}, {@obj_user={'obj_user', 0x3d, '&@\xee'}}]}}, 0x1, 0x0, &(0x7f0000003d40)="f832b85fdd6688b66ab7bfe356e502662bb3b93d1ca6bc49bb8d7268fc29443b8155fd27c9b4860a4cb226be68ee646acd2c81b76e3b5e6592d3cf436ced0df0bd23ee937f3311034d49d252e80baf9b57a2f4e9f898de1f823d8a3422268b8fb5226a957f0b40a955f050813a24abe3ab201fd5867f326e94bc9937cc065902f34483654bb42ffa06c040903b3e051be434621ee20182673a5e06ebc0c4b026171a0df4e9") linkat(r13, &(0x7f0000003e00)='./file0\x00', r3, &(0x7f0000003e40)='./file0\x00', 0x1400) sched_setscheduler(0x0, 0xe6c5448f56cec8f7, &(0x7f0000003e80)=0x5) r14 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000003f80)={'syztnl0\x00', &(0x7f0000003f00)={'syztnl2\x00', 0x0, 0x4, 0x9, 0x7, 0xf, 0x4, @dev={0xfe, 0x80, '\x00', 0x2e}, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x80, 0x8, 0xc2f, 0x100}}) sendmsg$nl_xfrm(r14, &(0x7f0000004080)={&(0x7f0000003ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000004040)={&(0x7f0000003fc0)=@getpolicy={0x74, 0x15, 0x400, 0x70bd2b, 0x25dfdbfd, {{@in6=@rand_addr=' \x01\x00', @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x0, 0x4e21, 0x0, 0x2, 0x80, 0x0, 0x11, r15, 0xee01}, 0x6e6bb4, 0x2}, [@encap={0x1c, 0x4, {0xffffffffffffffff, 0x4e23, 0x4e20, @in=@empty}}, @extra_flags={0x8, 0x18, 0x9}]}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f00000040c0), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000004100)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x0, r16, 0x3, &(0x7f0000004180)) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r12, 0x84, 0x1d, &(0x7f00000041c0)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000004200)=0x28) openat$rfkill(0xffffffffffffff9c, &(0x7f0000004240), 0x103100, 0x0) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000004280), 0x2, 0x0) 2.668626985s ago: executing program 1 (id=437): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000840), 0x20000, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000b80)={0x8, 0x2, 0x8, 0x9, 0x7f, "45cb897f634c0f58ba18cb6fe3f546a9e734ea", 0x10000, 0x401}) mq_open(&(0x7f00000005c0)='eth0\x00#\x13\xaeu\xe0\xfb\x050*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\x19\xf1\xcce\xab\x80M\xc9\xcf\xaeR\xb69k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3\xff\a\x00\x00\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\aY\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3Cs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\x96{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\x03\x00\x00\x00y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\x8e\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9\xb3\x83\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|c\xf3\x8b\xc2E\x00\x00\x00\x00\x00\x00', 0x42, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0xfd, 0xb, 0x1, 0x5, @private1, @loopback={0x0, 0x460c6}, 0x20, 0x8000, 0x804, 0x40000}}) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) r2 = socket$kcm(0x2, 0x2, 0x73) sendmmsg(r2, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000240)="fe136b5d1eb5ea195cbf5179fbdbc4c055389c1eb0670db3f87c1bdb44b82dd7a2f5de13bd95ceda7834730e0f60d726cd8cc762a620896da5db306ec63cc25bd1eaa793031ef1dae0c7afdbe3f8a695900842833880af5e9c976b719b3ab59aa105ea7c36b3cfff56046fd73201cdceaff37435c42abaf59e831713142e6dfc53f26e1cc13a5565140a7606ba18fd687ddcc3c2a5c6d7b40594f3957f244c2d7186dbf77dfcd0e0bed355313f1505bd3b486f0710bdd40e", 0xb8}, {&(0x7f0000000100)="1e86a0d81a58556687393dd7333fe85276fe12cb9b1535c33a5cdb697f73eb163ec51b59dc7fe9c26b180e5a0485899e32514af6b1231fb0384ddc7381aea611fd79a2b75261c52e29d222841ce58631f76a004afc4cd054c9972de6e49964a2b8f0bebd4f44e824cc", 0x69}, {&(0x7f0000000300)="d25196f8565b318409676b07b620d5a0240a17f190be0be3b543585d6fdea77512cf85c622c3d276cc39627fceac", 0x2e}, {&(0x7f0000000340)="b5c7621e85aa5eb09d00e782b9087ba903b985a04c340c21690905fc53", 0x1d}], 0x4, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x610}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000003c0)="ee8f7a718cc45b05da234d5b", 0xc}, {&(0x7f0000000400)="27154d2bbfa4f27e3551a853726b2c60571d297bbbe1fcd56010826af90d7a61ac23a0e11328b019b65a8c6e9dacfb4a8326ed0679a739653b640b2c60916705ab5cba9462dba2e59ce89ba9976f77bc5d1a44cbfae7617e8296d0a48e3074f618ba4ddf", 0x64}, {&(0x7f0000000480)="bd9073c7f83fc8c608126cb808fd76533c55b0622ac872b3e0444ac59dcf2397cbfba306a4e21713c7513359821c88d906e8e0534a135643a890a0450645f52eea5019f987799ffa64ef228a11f5835590b5acfef6584018d892055b25f061d1d795ebf8e99a3ced243cf1add22df409383e71dc", 0x74}, {&(0x7f0000000740)="19c53e6c389bb4aa64ebc59419426dc5801a584a882fa73da4f843de175d271babfb1fd12cefadb72e104352edf6c3906851de63aac212e8eef8cb7326d7e9823518e3f80f372d565a6503dfdc836df74ac2d9c6198a7fe6f2e2878997cf49aa0f61c799c02845bbebafe9fd38e70cf4855aa5aa07952b469ac8c62a9c52cb430a364734a3f55287b641868faf3d4eb048c2e1efac99a5f9ea1de5365a6b9b344b8a6802e9703716f3db4f5d04ddee1278e7c4fd2d3a9eecafdb9ee480d4914c3a68972849ebdb5e3ac84ac7d853380beddfc361cbc8a9928a2a4912ab", 0xdd}, {&(0x7f0000000500)="0c547d85aa01a26c718a66af387f6869", 0x10}], 0x5, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1c8}}], 0x2, 0x80) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) socket$xdp(0x2c, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x2d, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1201000057eb0020fd070400fa8e0102030109021b0002"], 0x0) socket$netlink(0x10, 0x3, 0xb) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x21, 0x2, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4], 0x90}}, 0x0) 2.258128025s ago: executing program 2 (id=438): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040084) 2.149810907s ago: executing program 2 (id=439): semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x2}) accept4(r0, 0x0, 0x0, 0x0) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) r2 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r2, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x10, 0x29, 0x8}], 0x10}}], 0x1, 0x4000000) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) timer_create(0x0, 0x0, 0x0) dup(0xffffffffffffffff) msgrcv(0x0, 0x0, 0x0, 0x2, 0x2000) msgctl$IPC_SET(0x0, 0x1, 0x0) 1.941795105s ago: executing program 2 (id=440): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000580)={{0x5e, @broadcast, 0x4e21, 0x3, 'lc\x00', 0x2, 0x4, 0x87c}, {@loopback, 0x4e20, 0x2, 0xc6, 0x80012d58, 0x12d5c}}, 0x44) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x8, 0x101000) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000440)={r2, 0x6, {0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x12, 0x11, 0x5, "b5194508e3d7bd92aecb2fd9569f9203c2a1cb7fdfbbd1270e0bdcd1a080641687e439746bf7a1a19bc75cfbff02d4536b4b860dc8c866ac36e0de5fce07b54b", "0332333ce57a61670dc403c9c9474523592f523dac4abeeda2fbba68325bfbfc4dea4059f7b302d965ab7519672214ba271c6828209d436ac401cee61c04d436", "d0af00a8deed83a400949a9f676c42aeae87a365dbf917b1d9709b59c20462db", [0x3, 0xb2c7]}}) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x96) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_GET_LOW_DMA(r7, 0x227a, &(0x7f0000000080)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xdd860000, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0xb0, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x28, 0x16}, {0x8}, {0x1b}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8}, {0x8}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000900)={0x3, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x8, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2fd7}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x81}]}, &(0x7f0000000180)='GPL\x00', 0x9, 0xeb, &(0x7f0000000680)=""/235, 0xe2f401adb222a489, 0x2, '\x00', r6, @fallback=0x2e, r1, 0x8, &(0x7f0000000780)={0x8, 0x5}, 0x8, 0x10, &(0x7f00000007c0)={0x5, 0x2, 0x2, 0x6}, 0x10, r8, r1, 0x3, 0x0, &(0x7f0000000800)=[{0x3, 0x5, 0x80000}, {0x2, 0x1, 0x10, 0xa}, {0x5, 0x1, 0x8, 0x9}], 0x10, 0x4, @void, @value}, 0x94) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8000, 0x8) openat(r9, &(0x7f00000000c0)='./file0\x00', 0x8042, 0x41) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r11, 0x8b23, &(0x7f0000000040)) syz_usb_connect(0x3, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="12011003ea969420ca16021558510102030109021b0001050d9001090434000159492e260905030200047f42ff109e7845fa410ab4923aad5d59da116a1ef0b03227636aa686defb72ef78d1d023cc8888ec15e06dcc2d645f4db8e724d95b654d94a58390a7537a0da5825fab7882ebf37fbceda14365b94f8b1817246381aa00c89763822be17edef7b306561de180aed9e6b8f4e51edebc7072f997808800000000000000000000190d69c01671fc959e273941cd55c1545e7a42f1b58f7708eb68ca75a17fcf2d528bd3b83ce77ba94803c52f065b5d8a12147fac547d68cfd09f0b8f22c1a1"], &(0x7f0000000240)={0x0, 0x0, 0x1, 0x0, 0x155555555555564f, [{0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000394c2d2cc0e680fea4881c0e0273acac8738d923da8c115c839c3a5e0909cdf7424e602a87e4b32918c008dd97756c91c3d18b79c77cc7c39ac4bb07474fb10b9787e871463"]}, {0x0, &(0x7f0000000040)=@lang_id={0x0, 0x3, 0x458}}, {0x0, &(0x7f0000000080)=@lang_id={0x0, 0x3, 0x441}}, {0x0, &(0x7f00000001c0)=@string={0x0, 0x3, "9a888dba1f00c02f37229deaeca21ecabdbc4f403e2b4f59a210cd63cccb6876b17e3f784d98c6e5751e36580494885c8425aa31d15cc2bd7c592909d2"}}, {0xfffffffffffffced, &(0x7f0000000200)=@lang_id={0x0, 0x3, 0x44c}}]}) setsockopt(r10, 0x770, 0x38fc, &(0x7f0000000040)="ecd5", 0x2) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000)) 1.906379968s ago: executing program 3 (id=441): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, 0x0, &(0x7f00000000c0)) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000140)) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, 0x0) sendfile(r6, r5, &(0x7f0000002080)=0x64, 0x23b) write(r6, 0x0, 0x0) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000280)={0x0, 0x4, 0x21}) ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, &(0x7f0000000380)={0x3, 0x5}) syz_emit_ethernet(0x52, &(0x7f0000000300)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @broadcast}, @redirect={0x5, 0x0, 0x0, @private=0xa010102, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1}, {[@rr={0x7, 0x13, 0x0, [@multicast2, @private, @broadcast, @dev={0xac, 0x14, 0x14, 0xc}]}]}}}}}}}, 0x0) r8 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r8, 0xc0045005, &(0x7f0000000640)=0x8000) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.501409044s ago: executing program 0 (id=442): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x60281, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x37, 0xbb9}, 0x0, &(0x7f00000002c0)={0x3ff, 0x3, 0x0, 0x9, 0x9c7, 0x0, 0x7fffffff}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x4000) 1.113929853s ago: executing program 1 (id=443): syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x400) (async, rerun: 32) r0 = socket(0x10, 0x803, 0x0) (async, rerun: 32) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r1, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x4b, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r1, &(0x7f0000002080)={0x2, 0x0, {&(0x7f0000001f80)=""/152, 0x98, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r1, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000000)=""/27, 0x1b, 0x0, 0x2, 0x2}}, 0x48) (async) write$vhost_msg_v2(r1, &(0x7f00000003c0)={0x2, 0x0, {&(0x7f00000002c0)=""/119, 0xfca2, 0x0, 0x0, 0x3}}, 0x48) write(r0, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) (async, rerun: 32) socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32) r2 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000086d042fc500000004000109022400010000000009040000010300000009210000000122f400a8309582062dbd251b"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) (async, rerun: 64) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c000000140001002dbd7000fcdbdf25ac14143d000000000000000000000000ac1414aa0000000000000000000000004e2400084e230006020030800c000000", @ANYRES32=0x0, @ANYRESHEX=r0, @ANYBLOB="b30500001570bb00cec4187b"], 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) (async, rerun: 64) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) (async, rerun: 32) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (rerun: 32) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000080)=0x200000000) r5 = dup2(r4, r4) preadv2(r5, &(0x7f0000000880)=[{&(0x7f0000000100)=""/199, 0xc7}], 0x1, 0x7, 0x3, 0x1) (async, rerun: 64) r6 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, 0x0, 0x0) (async, rerun: 32) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) (async, rerun: 32) setsockopt$sock_int(r6, 0x1, 0x9, 0x0, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) (async) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@dev, @in6}}, {{@in=@private}, 0x0, @in6=@loopback}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 32) syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) 943.817064ms ago: executing program 1 (id=444): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a80)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr=0x64010100, @in=@dev={0xac, 0x14, 0x14, 0x11}, 0x2}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x32}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0x0, 0x0, 0xfffffffffffeffff, 0x0, 0x4, 0x6}, {0xfffffffffffff461}, {0x0, 0x2}, 0x70bd2d, 0x0, 0x2, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x24000010}, 0x20000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = syz_open_dev$evdev(&(0x7f0000001500), 0x0, 0x0) ioctl$EVIOCGBITSW(r3, 0x80404525, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000080)=0x200000000) r5 = dup2(r4, r4) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000040)=0x1) read$FUSE(r5, &(0x7f0000004d80)={0x2020}, 0x2020) write$vhost_msg_v2(r5, &(0x7f0000000280)={0x2, 0x0, {&(0x7f0000000140)=""/121, 0x79, 0x0, 0x0, 0x2}}, 0x48) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @local}, 0x2}}, 0x2e) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e22, 0x81, @mcast2, 0x5}, 0x1c) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2, 0x9800}}, 0x2e) r9 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_CONTROL(r9, 0xc0185500, &(0x7f00000001c0)={0xa1, 0x9, 0x0, 0x0, 0xecff, 0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x24, 0x10, 0x1, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xe}, {0xf}, {0xe, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) 433.334408ms ago: executing program 2 (id=445): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2) r1 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0xdc9, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746182f70400028008000500", @ANYRES32=r4, @ANYBLOB="080003"], 0x44}}, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f0000000100)={0x2017be01}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0x0, 0x34565559, 0xfdfdffff, @discrete={0xfffffffa}}) 432.55821ms ago: executing program 4 (id=446): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={0x2, 0x1, 0x1, 0x9, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x17, 0x32, 0x20, 0x0, @in6={0xa, 0x4e22, 0x6, @local, 0x5}}]}, 0x38}}, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) gettid() r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newtfilter={0x34, 0x28, 0xd27, 0x2, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x1}, {0x0, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x4}}, @TCA_RATE={0x6, 0x5, {0xfd}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x44844) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) setsockopt$IP_VS_SO_SET_EDIT(r6, 0x0, 0x483, &(0x7f0000000280)={0x2b, @private=0xa010100, 0x4e22, 0x1, 'rr\x00', 0x0, 0x7, 0x49}, 0x2c) r9 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) io_uring_setup(0x194e, &(0x7f0000000a80)={0x0, 0xb8d5, 0x4, 0x5, 0x81}) r10 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r10, 0x4008af03, &(0x7f0000000280)) r11 = dup2(r10, r10) ioctl$VHOST_VSOCK_SET_RUNNING(r11, 0x4004af61, &(0x7f0000000000)=0x5) ioctl$VHOST_VSOCK_SET_RUNNING(r11, 0x4004af61, &(0x7f0000000040)=0x1) r12 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGSOFTCAR(r12, 0x5414, &(0x7f0000000040)) 262.796617ms ago: executing program 1 (id=447): socket$kcm(0xa, 0x1, 0x106) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'veth0_to_team\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x100001, 0x5}}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r5) sendmsg$DEVLINK_CMD_SB_POOL_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000008480)={&(0x7f0000000000)={0x44, r6, 0x1, 0x70bd29, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8000}, {0x6, 0x11, 0x2}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000884}, 0x40010) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400080}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, r6, 0x800, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x8}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x20040001) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xc}, {0xfff3}}}, 0x24}}, 0x0) 0s ago: executing program 2 (id=448): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x140, 0x800, 0x3ff, 0xfffbff7f, 0x0, 0x800001, {0x4, 0x4}, {0xfffffffd}, {0x0, 0x4}, {0x0, 0x4, 0x8}, 0x0, 0x3f0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, 0x0, 0x0, 0x6, 0x69, 0x0, 0x100, 0x2, 0xc}) kernel console output (not intermixed with test programs): : syz [ 81.477130][ T5884] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 81.489378][ T5884] usb 3-1: config 0 interface 0 has no altsetting 0 [ 81.500466][ T5884] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 81.600107][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 81.685207][ T5884] usb 3-1: Product: syz [ 81.857614][ T5884] usb 3-1: Manufacturer: syz [ 81.883271][ T5902] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 81.911588][ T5884] usb 3-1: SerialNumber: syz [ 81.985757][ T5884] usb 3-1: config 0 descriptor?? [ 82.009936][ T5980] netlink: 16 bytes leftover after parsing attributes in process `syz.4.22'. [ 82.067688][ T5884] usb 3-1: selecting invalid altsetting 0 [ 82.118537][ T5902] usb 2-1: config 0 has no interfaces? [ 82.127509][ T5902] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 82.140697][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.177802][ T5902] usb 2-1: Product: syz [ 82.271290][ T5967] mmap: syz.2.20 (5967) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 82.313538][ T5902] usb 2-1: Manufacturer: syz [ 82.340288][ T5902] usb 2-1: SerialNumber: syz [ 82.461541][ T5902] usb 2-1: config 0 descriptor?? [ 82.540852][ T5989] netlink: 28 bytes leftover after parsing attributes in process `syz.4.24'. [ 82.847877][ T5887] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 82.857577][ T5977] netlink: 16 bytes leftover after parsing attributes in process `syz.1.23'. [ 83.159638][ T5967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.171300][ T5887] usb 5-1: config 0 has no interfaces? [ 83.176637][ T5967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.239935][ T5967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20'. [ 83.288220][ T5887] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 83.340112][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.484584][ T24] usb 4-1: USB disconnect, device number 2 [ 83.504234][ T5887] usb 5-1: Product: syz [ 83.610758][ T5887] usb 5-1: Manufacturer: syz [ 83.636900][ T5887] usb 5-1: SerialNumber: syz [ 83.716953][ T5994] syzkaller1: entered promiscuous mode [ 83.721758][ T5887] usb 5-1: config 0 descriptor?? [ 83.843773][ T5994] syzkaller1: entered allmulticast mode [ 84.246205][ T6002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.255515][ T6002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.266124][ T6002] netlink: 8 bytes leftover after parsing attributes in process `syz.4.24'. [ 84.553606][ T6006] netlink: 368 bytes leftover after parsing attributes in process `syz.3.27'. [ 84.613696][ T6006] geneve2: entered promiscuous mode [ 84.619871][ T6006] geneve2: entered allmulticast mode [ 85.030815][ T24] usb 2-1: USB disconnect, device number 2 [ 85.383268][ T5888] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 85.533347][ T5888] usb 1-1: Using ep0 maxpacket: 16 [ 85.613254][ T5888] usb 1-1: config 0 has an invalid interface number: 194 but max is 0 [ 85.653235][ T5888] usb 1-1: config 0 has no interface number 0 [ 85.671050][ T6015] netlink: 12 bytes leftover after parsing attributes in process `syz.1.31'. [ 85.682099][ T5902] usb 3-1: USB disconnect, device number 2 [ 85.691414][ T5888] usb 1-1: New USB device found, idVendor=0557, idProduct=2002, bcdDevice=37.0c [ 85.733385][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.793758][ T5888] usb 1-1: Product: syz [ 85.803786][ T5888] usb 1-1: Manufacturer: syz [ 85.808409][ T5888] usb 1-1: SerialNumber: syz [ 85.923030][ T5888] usb 1-1: config 0 descriptor?? [ 85.964730][ T5887] usb 5-1: USB disconnect, device number 2 [ 85.971466][ T6015] bridge_slave_1: left allmulticast mode [ 86.005645][ T6015] bridge_slave_1: left promiscuous mode [ 86.037695][ T6015] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.117208][ T6015] bridge_slave_0: left allmulticast mode [ 86.126306][ T6015] bridge_slave_0: left promiscuous mode [ 86.133128][ T6015] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.311298][ T5888] kaweth 1-1:0.194: Firmware present in device. [ 86.475810][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 86.543499][ T9] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 86.680606][ T5888] kaweth 1-1:0.194: Error reading configuration (-71), no net device created [ 86.789068][ T5888] kaweth 1-1:0.194: probe with driver kaweth failed with error -5 [ 86.801385][ T1210] cfg80211: failed to load regulatory.db [ 87.036489][ T5888] usb 1-1: USB disconnect, device number 3 [ 87.226201][ T6041] syz.1.37 uses obsolete (PF_INET,SOCK_PACKET) [ 88.013272][ T5886] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 88.207371][ T5886] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 88.263274][ T5886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.286090][ T5886] usb 1-1: config 0 descriptor?? [ 88.294381][ T5886] cp210x 1-1:0.0: cp210x converter detected [ 88.350217][ T6058] netlink: 4 bytes leftover after parsing attributes in process `syz.1.42'. [ 88.373824][ T6058] Zero length message leads to an empty skb [ 88.796743][ T6067] bridge1: entered promiscuous mode [ 88.997817][ T6074] netlink: 12 bytes leftover after parsing attributes in process `syz.1.46'. [ 89.179535][ T1210] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 89.454157][ T1210] usb 4-1: Using ep0 maxpacket: 8 [ 89.525542][ T1210] usb 4-1: config 0 has an invalid interface number: 154 but max is 0 [ 89.559391][ T1210] usb 4-1: config 0 has no interface number 0 [ 89.633863][ T1210] usb 4-1: config 0 interface 154 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 89.661054][ T1210] usb 4-1: config 0 interface 154 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 89.688302][ T1210] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=9e.bc [ 89.701930][ T6069] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.709602][ T6069] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.718103][ T1210] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.732518][ T1210] usb 4-1: Product: syz [ 89.742412][ T1210] usb 4-1: Manufacturer: syz [ 89.753916][ T1210] usb 4-1: SerialNumber: syz [ 89.776774][ T1210] usb 4-1: config 0 descriptor?? [ 89.790564][ T1210] appletouch 4-1:0.154: Could not find int-in endpoint [ 89.798303][ T1210] appletouch 4-1:0.154: probe with driver appletouch failed with error -5 [ 89.809268][ T1210] usbhid 4-1:0.154: couldn't find an input interrupt endpoint [ 89.937653][ T6069] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.956626][ T6069] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.036895][ T6069] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.053407][ T6069] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.075432][ T6069] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.086650][ T6069] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.343373][ T5888] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 90.438484][ T5886] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 90.454239][ T5886] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 90.494180][ T5888] usb 5-1: Invalid ep0 maxpacket: 16 [ 90.494315][ T5886] usb 1-1: cp210x converter now attached to ttyUSB0 [ 90.541066][ T5886] usb 1-1: USB disconnect, device number 4 [ 90.561342][ T5886] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 90.606491][ T5886] cp210x 1-1:0.0: device disconnected [ 90.684586][ T5888] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 90.728647][ T30] audit: type=1326 audit(1748804018.963:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6082 comm="syz.1.48" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f815018e969 code=0x0 [ 90.903357][ T5888] usb 5-1: Invalid ep0 maxpacket: 16 [ 90.910829][ T5888] usb usb5-port1: attempt power cycle [ 91.114205][ T6087] B: renamed from veth0 (while UP) [ 91.264209][ T5888] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 91.305171][ T5888] usb 5-1: Invalid ep0 maxpacket: 16 [ 91.401981][ T6094] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.409963][ T6094] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.428066][ T6094] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.442362][ T6094] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.450155][ T5888] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 91.478306][ T5888] usb 5-1: Invalid ep0 maxpacket: 16 [ 91.484301][ T5888] usb usb5-port1: unable to enumerate USB device [ 91.495744][ T6095] fuse: Invalid rootmode [ 91.801475][ T6069] syz.3.45 (6069) used greatest stack depth: 20008 bytes left [ 91.830810][ T5830] usb 4-1: USB disconnect, device number 3 [ 92.013354][ T6098] netlink: 48 bytes leftover after parsing attributes in process `syz.3.53'. [ 92.067310][ T6101] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (33) [ 92.344593][ T6104] binder: 6102:6104 ioctl c0306201 2000000001c0 returned -14 [ 92.569066][ T6109] netlink: 12 bytes leftover after parsing attributes in process `syz.1.58'. [ 93.239053][ T30] audit: type=1326 audit(1748804021.483:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6119 comm="syz.4.63" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f841cd8e969 code=0x0 [ 93.525311][ T6136] input: syz1 as /devices/virtual/input/input6 [ 94.386047][ T6154] netlink: 12 bytes leftover after parsing attributes in process `syz.4.71'. [ 94.447114][ T6154] bridge_slave_1: left allmulticast mode [ 94.452769][ T6154] bridge_slave_1: left promiscuous mode [ 94.483684][ T6154] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.539680][ T6154] bridge_slave_0: left allmulticast mode [ 94.558156][ T6154] bridge_slave_0: left promiscuous mode [ 94.576130][ T6154] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.678157][ T6158] xt_CT: No such helper "snmp" [ 95.023295][ T5902] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 95.049243][ T6168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.77'. [ 95.187298][ T5902] usb 3-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 95.198857][ T5902] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 95.208552][ T5902] usb 3-1: SerialNumber: syz [ 95.223917][ T5902] usb 3-1: config 0 descriptor?? [ 95.443867][ T5902] hackrf 3-1:0.0: Board ID: 00 [ 95.444358][ T6172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.449891][ T5902] hackrf 3-1:0.0: Firmware version: [ 95.476373][ T5902] hackrf 3-1:0.0: Registered as swradio24 [ 95.482635][ T5902] videodev: could not get a free minor [ 95.488641][ T5902] hackrf 3-1:0.0: Failed to register as video device (-23) [ 95.500194][ T5902] hackrf 3-1:0.0: probe with driver hackrf failed with error -23 [ 95.529891][ T6172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.666655][ T5902] usb 3-1: USB disconnect, device number 3 [ 95.677832][ T6176] capability: warning: `syz.4.79' uses deprecated v2 capabilities in a way that may be insecure [ 96.206986][ T6185] netlink: 368 bytes leftover after parsing attributes in process `syz.1.82'. [ 96.453123][ T6194] netlink: 4 bytes leftover after parsing attributes in process `syz.1.85'. [ 96.710115][ T5888] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 96.933278][ T5888] usb 3-1: Using ep0 maxpacket: 8 [ 96.941389][ T5888] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 96.962747][ T5888] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 96.995559][ T5888] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 97.185104][ T5888] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 97.221153][ T6210] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 97.234601][ T5888] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 97.272441][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.589817][ T6196] warning: `syz.2.86' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 97.604029][ T5888] usb 3-1: GET_CAPABILITIES returned 0 [ 97.610092][ T5888] usbtmc 3-1:16.0: can't read capabilities [ 98.137386][ T6218] netlink: 100 bytes leftover after parsing attributes in process `syz.4.91'. [ 98.635638][ T5888] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 98.747628][ T6239] netlink: 4 bytes leftover after parsing attributes in process `syz.3.98'. [ 98.945330][ T5888] usb 5-1: config 6 has an invalid interface number: 2 but max is 0 [ 98.956137][ T5888] usb 5-1: config 6 has no interface number 0 [ 98.964251][ T5888] usb 5-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 98.991993][ T5888] usb 5-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 99.009657][ T6247] netlink: 48 bytes leftover after parsing attributes in process `syz.3.101'. [ 99.018882][ T5888] usb 5-1: config 6 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 99.119185][ T5888] usb 5-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 99.136840][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.174191][ T5888] usb 5-1: Product: syz [ 99.191670][ T5888] usb 5-1: Manufacturer: syz [ 99.233455][ T5888] usb 5-1: SerialNumber: syz [ 99.292436][ T5888] hso 5-1:6.2: Failed to find INT IN ep [ 99.395183][ T30] audit: type=1326 audit(1748804027.643:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6249 comm="syz.3.102" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f76f7b8e969 code=0x0 [ 99.574174][ T5887] usb 3-1: USB disconnect, device number 4 [ 99.785923][ T5902] usb 5-1: USB disconnect, device number 7 [ 100.303810][ T5887] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 100.431686][ T6270] openvswitch: netlink: Multiple metadata blocks provided [ 100.483345][ T5887] usb 3-1: Using ep0 maxpacket: 32 [ 100.490527][ T5887] usb 3-1: config 0 has an invalid interface number: 126 but max is 0 [ 100.499515][ T5887] usb 3-1: config 0 has no interface number 0 [ 100.543298][ T5887] usb 3-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 100.604678][ T5887] usb 3-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 100.635537][ T5887] usb 3-1: config 0 interface 126 has no altsetting 0 [ 100.668527][ T5887] usb 3-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 100.683211][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.691233][ T5887] usb 3-1: Product: syz [ 100.725223][ T5887] usb 3-1: Manufacturer: syz [ 100.729885][ T5887] usb 3-1: SerialNumber: syz [ 100.766069][ T5887] usb 3-1: config 0 descriptor?? [ 100.772343][ T6259] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 100.794004][ T6259] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 100.861889][ T6284] ip6erspan0: entered promiscuous mode [ 101.024056][ T5887] ir_usb 3-1:0.126: IR Dongle converter detected [ 101.065192][ T5887] usb 3-1: IRDA class descriptor not found, device not bound [ 101.079498][ T6291] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 101.110444][ T5887] usb 3-1: USB disconnect, device number 5 [ 101.153477][ T6297] use of bytesused == 0 is deprecated and will be removed in the future, [ 101.195300][ T6297] use the actual size instead. [ 101.464350][ T6302] netlink: 196 bytes leftover after parsing attributes in process `syz.0.119'. [ 101.743475][ T5887] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 101.984643][ T6313] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 102.079195][ T5887] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.123225][ T5887] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 102.237314][ T5887] usb 5-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 102.293210][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.354138][ T5887] usb 5-1: config 0 descriptor?? [ 102.465468][ T5888] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 102.643441][ T5888] usb 1-1: Using ep0 maxpacket: 32 [ 102.667304][ T5888] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 102.680945][ T5888] usb 1-1: config 0 has no interface number 0 [ 102.707966][ T5888] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 102.728513][ T5888] usb 1-1: config 0 interface 1 has no altsetting 0 [ 102.736000][ T5887] usbhid 5-1:0.0: can't add hid device: -71 [ 102.742355][ T5887] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 102.770574][ T5888] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 102.803816][ T5887] usb 5-1: USB disconnect, device number 8 [ 102.810158][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.828330][ T5888] usb 1-1: Product: syz [ 102.832532][ T5888] usb 1-1: Manufacturer: syz [ 102.889751][ T5888] usb 1-1: SerialNumber: syz [ 102.918505][ T5888] usb 1-1: config 0 descriptor?? [ 103.148649][ T5888] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 103.207319][ T5888] cx231xx 1-1:0.1: Failed to read PCB config [ 103.249280][ T5888] cx231xx 1-1:0.1: probe with driver cx231xx failed with error -71 [ 103.312433][ T5888] usb 1-1: USB disconnect, device number 5 [ 103.454136][ T5830] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 103.633355][ T5830] usb 4-1: config 201 has an invalid interface number: 249 but max is 0 [ 103.692118][ T5830] usb 4-1: config 201 has no interface number 0 [ 103.717559][ T5830] usb 4-1: config 201 interface 249 altsetting 4 has an endpoint descriptor with address 0xF1, changing to 0x81 [ 103.736855][ T5888] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 103.744201][ T5830] usb 4-1: config 201 interface 249 altsetting 4 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 103.775500][ T5830] usb 4-1: config 201 interface 249 has no altsetting 0 [ 103.802727][ T5830] usb 4-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=fa.df [ 103.824563][ T5830] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.839323][ T5830] usb 4-1: Product: syz [ 103.844004][ T5830] usb 4-1: Manufacturer: syz [ 103.856041][ T5830] usb 4-1: SerialNumber: syz [ 103.933416][ T5888] usb 1-1: Using ep0 maxpacket: 32 [ 103.962446][ T5888] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 103.962471][ T5888] usb 1-1: config 0 has no interface number 0 [ 103.962507][ T5888] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 103.962526][ T5888] usb 1-1: config 0 interface 1 has no altsetting 0 [ 103.970300][ T5888] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 103.970326][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.970343][ T5888] usb 1-1: Product: syz [ 103.970355][ T5888] usb 1-1: Manufacturer: syz [ 103.970369][ T5888] usb 1-1: SerialNumber: syz [ 103.973711][ T5888] usb 1-1: config 0 descriptor?? [ 104.192910][ T6353] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 104.201328][ T5888] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 104.214833][ T5888] cx231xx 1-1:0.1: bad scenario!!!!! [ 104.214833][ T5888] config_info=0 [ 104.214856][ T5888] cx231xx 1-1:0.1: Failed to read PCB config [ 104.410091][ T6320] netlink: 76 bytes leftover after parsing attributes in process `syz.0.128'. [ 104.426741][ T24] usb 1-1: USB disconnect, device number 6 [ 105.393043][ T5830] ath6kl: Failed to submit usb control message: -71 [ 105.414953][ T5830] ath6kl: unable to send the bmi data to the device: -71 [ 105.423309][ T5888] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 105.432355][ T5830] ath6kl: Unable to send get target info: -71 [ 105.449842][ T5830] ath6kl: Failed to init ath6kl core: -71 [ 105.464167][ T5830] ath6kl_usb 4-1:201.249: probe with driver ath6kl_usb failed with error -71 [ 105.480421][ T5830] usb 4-1: USB disconnect, device number 4 [ 105.881326][ T5888] usb 5-1: config index 0 descriptor too short (expected 8192, got 77) [ 105.965555][ T5888] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.983379][ T5888] usb 5-1: config 0 has no interfaces? [ 106.019049][ T5830] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 106.141737][ T5888] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 106.156715][ T6389] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 106.173369][ T5830] usb 4-1: device descriptor read/64, error -71 [ 106.183261][ T24] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 106.225862][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.315459][ T24] usb 3-1: device descriptor read/64, error -71 [ 106.321784][ T5888] usb 5-1: Product: syz [ 106.362927][ T5888] usb 5-1: Manufacturer: syz [ 106.372572][ T5888] usb 5-1: SerialNumber: syz [ 106.423339][ T5830] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 106.433509][ T30] audit: type=1326 audit(1748804034.643:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6390 comm="syz.1.152" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f815018e969 code=0x0 [ 106.478178][ T5888] usb 5-1: config 0 descriptor?? [ 106.523991][ T1210] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 106.594475][ T24] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 106.602092][ T5830] usb 4-1: device descriptor read/64, error -71 [ 106.675214][ T1210] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 106.689284][ T1210] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 106.709747][ T1210] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 106.728363][ T5830] usb usb4-port1: attempt power cycle [ 106.734152][ T24] usb 3-1: device descriptor read/64, error -71 [ 106.748878][ T1210] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 106.852790][ T1210] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 106.863006][ T24] usb usb3-port1: attempt power cycle [ 106.869645][ T1210] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 106.880056][ T1210] usb 1-1: Manufacturer: syz [ 106.905172][ T1210] usb 1-1: config 0 descriptor?? [ 107.105624][ T5830] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 107.137543][ T5830] usb 4-1: device descriptor read/8, error -71 [ 107.209721][ T24] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 107.223238][ T1210] rc_core: IR keymap rc-hauppauge not found [ 107.231472][ T1210] Registered IR keymap rc-empty [ 107.240537][ T1210] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 107.250713][ T24] usb 3-1: device descriptor read/8, error -71 [ 107.293340][ T1210] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 107.335977][ T1210] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 107.372372][ T1210] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input8 [ 107.387323][ T5830] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 107.414258][ T1210] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 107.430489][ T5830] usb 4-1: device descriptor read/8, error -71 [ 107.466150][ T1210] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 107.495787][ T1210] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 107.524618][ T24] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 107.542082][ T1210] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 107.549718][ T5830] usb usb4-port1: unable to enumerate USB device [ 107.588294][ T1210] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 107.596042][ T24] usb 3-1: device descriptor read/8, error -71 [ 107.625293][ T1210] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 107.696262][ T1210] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 107.726023][ T1210] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 107.733651][ T24] usb usb3-port1: unable to enumerate USB device [ 107.766047][ T1210] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 107.793956][ T1210] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 107.893752][ T1210] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 107.895661][ T5888] usb 5-1: USB disconnect, device number 9 [ 107.902833][ T1210] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 108.431315][ T6409] netlink: 80 bytes leftover after parsing attributes in process `syz.4.158'. [ 108.557299][ T6411] netlink: 'syz.3.159': attribute type 10 has an invalid length. [ 108.571951][ T6413] netlink: 12 bytes leftover after parsing attributes in process `syz.4.160'. [ 108.594072][ T6411] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.613460][ T6411] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 108.789799][ T6419] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 108.995963][ T24] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 109.093389][ T5830] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 109.171659][ T1210] usb 1-1: USB disconnect, device number 7 [ 109.226302][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 109.243558][ T5830] usb 4-1: device descriptor read/64, error -71 [ 109.260389][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 109.290802][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 109.316283][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 109.353340][ T24] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 109.362415][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.394394][ T24] usb 5-1: config 0 descriptor?? [ 109.503953][ T5830] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 109.639930][ T24] hdpvr 5-1:0.0: firmware version 0xd dated jl;S11!vOp [ 109.639930][ T24] 4(r [ 109.639930][ T24] d2}d~٭^r [ 109.654606][ T5830] usb 4-1: device descriptor read/64, error -71 [ 109.767029][ T5830] usb usb4-port1: attempt power cycle [ 109.794891][ T6443] netlink: 12 bytes leftover after parsing attributes in process `syz.1.171'. [ 109.838453][ T6445] FAULT_INJECTION: forcing a failure. [ 109.838453][ T6445] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 109.856140][ T24] hdpvr 5-1:0.0: device init failed [ 109.861445][ T24] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 109.874839][ T6445] CPU: 0 UID: 0 PID: 6445 Comm: syz.2.172 Not tainted 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) [ 109.874860][ T6445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 109.874877][ T6445] Call Trace: [ 109.874884][ T6445] [ 109.874891][ T6445] dump_stack_lvl+0x189/0x250 [ 109.874918][ T6445] ? __pfx____ratelimit+0x10/0x10 [ 109.874939][ T6445] ? __pfx_dump_stack_lvl+0x10/0x10 [ 109.874961][ T6445] ? __pfx__printk+0x10/0x10 [ 109.874998][ T6445] should_fail_ex+0x414/0x560 [ 109.875023][ T6445] _copy_to_user+0x31/0xb0 [ 109.875041][ T6445] drm_ioctl+0x6a4/0xb10 [ 109.875066][ T6445] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 109.875090][ T6445] ? __pfx_drm_ioctl+0x10/0x10 [ 109.875120][ T6445] ? __fget_files+0x2a/0x420 [ 109.875139][ T6445] ? bpf_lsm_file_ioctl+0x9/0x20 [ 109.875159][ T6445] ? __pfx_drm_ioctl+0x10/0x10 [ 109.875177][ T6445] __se_sys_ioctl+0xfc/0x170 [ 109.875200][ T6445] do_syscall_64+0xfa/0x3b0 [ 109.875218][ T6445] ? lockdep_hardirqs_on+0x9c/0x150 [ 109.875237][ T6445] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.875251][ T6445] ? clear_bhb_loop+0x60/0xb0 [ 109.875270][ T6445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.875285][ T6445] RIP: 0033:0x7f733c98e969 [ 109.875305][ T6445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.875319][ T6445] RSP: 002b:00007f733d7bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 109.875336][ T6445] RAX: ffffffffffffffda RBX: 00007f733cbb5fa0 RCX: 00007f733c98e969 [ 109.875348][ T6445] RDX: 00002000000002c0 RSI: 00000000c03864bc RDI: 0000000000000003 [ 109.875358][ T6445] RBP: 00007f733d7bf090 R08: 0000000000000000 R09: 0000000000000000 [ 109.875368][ T6445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 109.875377][ T6445] R13: 0000000000000000 R14: 00007f733cbb5fa0 R15: 00007f733ccdfa28 [ 109.875402][ T6445] [ 109.904999][ T24] usb 5-1: USB disconnect, device number 10 [ 110.005687][ T6448] netlink: 'syz.1.173': attribute type 4 has an invalid length. [ 110.124056][ T6449] sit0: entered promiscuous mode [ 110.131991][ T6449] netlink: 'syz.1.173': attribute type 1 has an invalid length. [ 110.144278][ T5830] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 110.152684][ T6449] netlink: 9 bytes leftover after parsing attributes in process `syz.1.173'. [ 110.164251][ T5830] usb 4-1: device descriptor read/8, error -71 [ 110.413396][ T5830] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 110.455658][ T5830] usb 4-1: device descriptor read/8, error -71 [ 110.579715][ T5830] usb usb4-port1: unable to enumerate USB device [ 110.634208][ T6465] netlink: 12 bytes leftover after parsing attributes in process `syz.0.179'. [ 110.700045][ T6467] netlink: 20 bytes leftover after parsing attributes in process `syz.4.178'. [ 110.710800][ T6467] netlink: 4 bytes leftover after parsing attributes in process `syz.4.178'. [ 111.327871][ T6475] "syz.0.180" (6475) uses obsolete ecb(arc4) skcipher [ 111.476938][ T6481] FAULT_INJECTION: forcing a failure. [ 111.476938][ T6481] name failslab, interval 1, probability 0, space 0, times 1 [ 111.518138][ T6483] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 111.534036][ T6481] CPU: 1 UID: 0 PID: 6481 Comm: syz.1.181 Not tainted 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) [ 111.534051][ T6481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 111.534057][ T6481] Call Trace: [ 111.534061][ T6481] [ 111.534066][ T6481] dump_stack_lvl+0x189/0x250 [ 111.534085][ T6481] ? __pfx____ratelimit+0x10/0x10 [ 111.534098][ T6481] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.534112][ T6481] ? __pfx__printk+0x10/0x10 [ 111.534125][ T6481] ? __pfx___might_resched+0x10/0x10 [ 111.534137][ T6481] ? fs_reclaim_acquire+0x7d/0x100 [ 111.534156][ T6481] should_fail_ex+0x414/0x560 [ 111.534172][ T6481] should_failslab+0xa8/0x100 [ 111.534188][ T6481] kmem_cache_alloc_noprof+0x73/0x3c0 [ 111.534201][ T6481] ? vm_area_dup+0x2b/0x680 [ 111.534212][ T6481] vm_area_dup+0x2b/0x680 [ 111.534223][ T6481] __split_vma+0x1a0/0x9b0 [ 111.534235][ T6481] ? mas_next_slot+0xc20/0xcf0 [ 111.534250][ T6481] ? __pfx___split_vma+0x10/0x10 [ 111.534267][ T6481] ? userfaultfd_unmap_prep+0x99/0x3e0 [ 111.534282][ T6481] vms_gather_munmap_vmas+0x4ab/0x12b0 [ 111.534304][ T6481] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 111.534326][ T6481] mmap_region+0x678/0x1f30 [ 111.534344][ T6481] ? is_bpf_text_address+0x26/0x2b0 [ 111.534360][ T6481] ? __pfx_mmap_region+0x10/0x10 [ 111.534370][ T6481] ? is_bpf_text_address+0x26/0x2b0 [ 111.534383][ T6481] ? kernel_text_address+0xa5/0xe0 [ 111.534394][ T6481] ? __kernel_text_address+0xd/0x40 [ 111.534403][ T6481] ? unwind_get_return_address+0x4d/0x90 [ 111.534446][ T6481] ? mm_get_unmapped_area_vmflags+0xb3/0xe0 [ 111.534462][ T6481] ? hugetlb_get_unmapped_area+0x1f7/0x290 [ 111.534473][ T6481] ? cap_mmap_addr+0xb0/0x100 [ 111.534484][ T6481] ? bpf_lsm_mmap_addr+0x9/0x20 [ 111.534496][ T6481] ? security_mmap_addr+0x71/0x270 [ 111.534507][ T6481] ? shmem_mapping+0xd/0x50 [ 111.534516][ T6481] ? memfd_check_seals_mmap+0x165/0x200 [ 111.534529][ T6481] do_mmap+0xc45/0x10d0 [ 111.534549][ T6481] ? __pfx_do_mmap+0x10/0x10 [ 111.534560][ T6481] ? down_write_killable+0x178/0x230 [ 111.534574][ T6481] ? end_current_label_crit_section+0x152/0x180 [ 111.534587][ T6481] ? __pfx_down_write_killable+0x10/0x10 [ 111.534605][ T6481] vm_mmap_pgoff+0x31b/0x4c0 [ 111.534621][ T6481] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 111.534630][ T6481] ? rcu_is_watching+0x15/0xb0 [ 111.534643][ T6481] ? hugetlbfs_get_inode+0x448/0x660 [ 111.534658][ T6481] ? hugetlb_file_setup+0x429/0x630 [ 111.534671][ T6481] ksys_mmap_pgoff+0x587/0x760 [ 111.534687][ T6481] do_syscall_64+0xfa/0x3b0 [ 111.534700][ T6481] ? lockdep_hardirqs_on+0x9c/0x150 [ 111.534710][ T6481] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.534719][ T6481] ? clear_bhb_loop+0x60/0xb0 [ 111.534731][ T6481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.534739][ T6481] RIP: 0033:0x7f815018e969 [ 111.534748][ T6481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.534755][ T6481] RSP: 002b:00007f814dff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 111.534766][ T6481] RAX: ffffffffffffffda RBX: 00007f81503b5fa0 RCX: 00007f815018e969 [ 111.534773][ T6481] RDX: 0000000003000001 RSI: 000000000095c000 RDI: 0000200000000000 [ 111.534779][ T6481] RBP: 00007f814dff6090 R08: ffffffffffffffff R09: 0000000000000000 [ 111.534784][ T6481] R10: 8c4b815a5465c2b1 R11: 0000000000000246 R12: 0000000000000001 [ 111.534790][ T6481] R13: 0000000000000000 R14: 00007f81503b5fa0 R15: 00007f81504dfa28 [ 111.534805][ T6481] [ 111.882804][ C1] vkms_vblank_simulate: vblank timer overrun [ 112.693701][ T5902] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 112.955979][ T5902] usb 1-1: Using ep0 maxpacket: 32 [ 112.988446][ T5902] usb 1-1: New USB device found, idVendor=050d, idProduct=0121, bcdDevice= 6.59 [ 113.073356][ T5902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.081404][ T5902] usb 1-1: Product: syz [ 113.117650][ T5902] usb 1-1: Manufacturer: syz [ 113.122288][ T5902] usb 1-1: SerialNumber: syz [ 113.154189][ T5902] usb 1-1: config 0 descriptor?? [ 113.197782][ T6510] netlink: 4 bytes leftover after parsing attributes in process `syz.2.189'. [ 113.576054][ T9] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 113.743268][ T5830] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 113.760154][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 113.771283][ T9] usb 2-1: config 1 has an invalid descriptor of length 90, skipping remainder of the config [ 113.784605][ T9] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 113.799402][ T9] usb 2-1: New USB device found, idVendor=0535, idProduct=a4a8, bcdDevice= 0.40 [ 113.809531][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.817819][ T9] usb 2-1: Product: syz [ 113.822160][ T9] usb 2-1: Manufacturer: syz [ 113.828345][ T9] usb 2-1: SerialNumber: syz [ 114.201498][ T5830] usb 5-1: not running at top speed; connect to a high speed hub [ 114.257096][ T5902] pegasus 1-1:0.0: probe with driver pegasus failed with error -32 [ 114.338980][ T5830] usb 5-1: config 1 has an invalid descriptor of length 90, skipping remainder of the config [ 114.431561][ T6533] FAULT_INJECTION: forcing a failure. [ 114.431561][ T6533] name failslab, interval 1, probability 0, space 0, times 0 [ 114.470200][ T6533] CPU: 0 UID: 0 PID: 6533 Comm: syz.2.196 Not tainted 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) [ 114.470226][ T6533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 114.470236][ T6533] Call Trace: [ 114.470243][ T6533] [ 114.470250][ T6533] dump_stack_lvl+0x189/0x250 [ 114.470278][ T6533] ? __pfx____ratelimit+0x10/0x10 [ 114.470298][ T6533] ? __pfx_dump_stack_lvl+0x10/0x10 [ 114.470322][ T6533] ? __pfx__printk+0x10/0x10 [ 114.470354][ T6533] should_fail_ex+0x414/0x560 [ 114.470380][ T6533] should_failslab+0xa8/0x100 [ 114.470405][ T6533] kmem_cache_alloc_noprof+0x73/0x3c0 [ 114.470426][ T6533] ? skb_clone+0x212/0x3a0 [ 114.470447][ T6533] skb_clone+0x212/0x3a0 [ 114.470468][ T6533] __netlink_deliver_tap+0x404/0x850 [ 114.470505][ T6533] ? netlink_deliver_tap+0x2e/0x1b0 [ 114.470529][ T6533] netlink_deliver_tap+0x19c/0x1b0 [ 114.470561][ T6533] netlink_sendskb+0x68/0x140 [ 114.470585][ T6533] nfnetlink_rcv+0x2290/0x2520 [ 114.470637][ T6533] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 114.470674][ T6533] ? ref_tracker_free+0x63a/0x7d0 [ 114.470725][ T6533] ? __netlink_deliver_tap+0x807/0x850 [ 114.470757][ T6533] ? netlink_deliver_tap+0x2e/0x1b0 [ 114.470780][ T6533] ? netlink_deliver_tap+0x2e/0x1b0 [ 114.470808][ T6533] netlink_unicast+0x758/0x8d0 [ 114.470840][ T6533] netlink_sendmsg+0x805/0xb30 [ 114.470866][ T6533] ? __pfx_netlink_sendmsg+0x10/0x10 [ 114.470885][ T6533] ? aa_sock_msg_perm+0x94/0x160 [ 114.470907][ T6533] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 114.470925][ T6533] ? __pfx_netlink_sendmsg+0x10/0x10 [ 114.470941][ T6533] __sock_sendmsg+0x219/0x270 [ 114.470964][ T6533] ____sys_sendmsg+0x505/0x830 [ 114.470986][ T6533] ? __pfx_____sys_sendmsg+0x10/0x10 [ 114.471011][ T6533] ? import_iovec+0x74/0xa0 [ 114.471031][ T6533] ___sys_sendmsg+0x21f/0x2a0 [ 114.471050][ T6533] ? __pfx____sys_sendmsg+0x10/0x10 [ 114.471100][ T6533] ? __fget_files+0x2a/0x420 [ 114.471114][ T6533] ? __fget_files+0x3a0/0x420 [ 114.471140][ T6533] __x64_sys_sendmsg+0x19b/0x260 [ 114.471160][ T6533] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 114.471187][ T6533] ? __pfx_ksys_write+0x10/0x10 [ 114.471206][ T6533] ? rcu_is_watching+0x15/0xb0 [ 114.471232][ T6533] ? do_syscall_64+0xbe/0x3b0 [ 114.471256][ T6533] do_syscall_64+0xfa/0x3b0 [ 114.471275][ T6533] ? lockdep_hardirqs_on+0x9c/0x150 [ 114.471292][ T6533] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.471308][ T6533] ? clear_bhb_loop+0x60/0xb0 [ 114.471326][ T6533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.471340][ T6533] RIP: 0033:0x7f733c98e969 [ 114.471355][ T6533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.471368][ T6533] RSP: 002b:00007f733d7bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 114.471385][ T6533] RAX: ffffffffffffffda RBX: 00007f733cbb5fa0 RCX: 00007f733c98e969 [ 114.471397][ T6533] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000003 [ 114.471407][ T6533] RBP: 00007f733d7bf090 R08: 0000000000000000 R09: 0000000000000000 [ 114.471417][ T6533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 114.471427][ T6533] R13: 0000000000000000 R14: 00007f733cbb5fa0 R15: 00007f733ccdfa28 [ 114.471454][ T6533] [ 114.478187][ T5830] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 114.909942][ T5830] usb 5-1: New USB device found, idVendor=0535, idProduct=a4a8, bcdDevice= 0.40 [ 114.923254][ T5830] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.964942][ T5830] usb 5-1: Product: syz [ 114.972624][ T5830] usb 5-1: Manufacturer: syz [ 114.986450][ T5830] usb 5-1: SerialNumber: syz [ 115.210290][ T24] usb 1-1: USB disconnect, device number 8 [ 115.303227][ T5886] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 115.475262][ T5886] usb 3-1: Using ep0 maxpacket: 32 [ 115.495378][ T5886] usb 3-1: config 198 has an invalid descriptor of length 161, skipping remainder of the config [ 115.521774][ T5886] usb 3-1: config 198 has 0 interfaces, different from the descriptor's value: 2 [ 115.558323][ T6540] netlink: 32 bytes leftover after parsing attributes in process `syz.0.199'. [ 115.565551][ T5886] usb 3-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 115.585356][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.591673][ T6540] syz_tun: entered promiscuous mode [ 115.622037][ T5886] usb 3-1: Product: syz [ 115.644967][ T5886] usb 3-1: Manufacturer: syz [ 115.655538][ T5886] usb 3-1: SerialNumber: syz [ 115.938838][ T6544] ptm ptm18: ldisc open failed (-12), clearing slot 18 [ 115.993871][ T5886] usb 3-1: USB disconnect, device number 10 [ 116.143349][ T24] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 116.229370][ T9] usb 2-1: USB disconnect, device number 3 [ 116.286756][ T6554] netlink: 4 bytes leftover after parsing attributes in process `syz.3.203'. [ 116.306189][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 116.327060][ T24] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 116.335324][ T24] usb 1-1: can't read configurations, error -61 [ 116.439289][ T5830] usb 5-1: USB disconnect, device number 11 [ 116.458219][ T6557] netlink: 12 bytes leftover after parsing attributes in process `syz.3.205'. [ 116.476156][ T24] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 116.486470][ T6557] bridge_slave_1: left allmulticast mode [ 116.506044][ T6557] bridge_slave_1: left promiscuous mode [ 116.525983][ T6557] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.588378][ T6557] bridge_slave_0: left allmulticast mode [ 116.613018][ T6557] bridge_slave_0: left promiscuous mode [ 116.628474][ T6557] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.636056][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 116.643330][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 116.667484][ T24] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 116.677342][ T24] usb 1-1: can't read configurations, error -61 [ 116.692555][ T24] usb usb1-port1: attempt power cycle [ 116.805345][ T9] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 116.814523][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.828425][ T9] usb 2-1: config 0 descriptor?? [ 116.846153][ T9] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 117.043298][ T24] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 117.074436][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 117.097638][ T24] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 117.115835][ T24] usb 1-1: can't read configurations, error -61 [ 117.262024][ T9] cpia1 2-1:0.0: unexpected state after lo power cmd: 00 [ 117.463306][ T24] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 117.472067][ T6580] netlink: 'syz.3.212': attribute type 1 has an invalid length. [ 117.494181][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 117.501339][ T24] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 117.509332][ T24] usb 1-1: can't read configurations, error -61 [ 117.522635][ T24] usb usb1-port1: unable to enumerate USB device [ 117.646478][ T6586] netlink: 'syz.4.213': attribute type 9 has an invalid length. [ 117.654393][ T6586] netlink: 212160 bytes leftover after parsing attributes in process `syz.4.213'. [ 117.700484][ T9] gspca_cpia1: usb_control_msg 02, error -71 [ 117.705344][ T6580] 8021q: adding VLAN 0 to HW filter on device bond1 [ 117.720977][ T9] gspca_cpia1: usb_control_msg 05, error -71 [ 117.727987][ T9] cpia1 2-1:0.0: unexpected systemstate: 00 [ 117.758557][ T6585] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 117.768041][ T6589] FAULT_INJECTION: forcing a failure. [ 117.768041][ T6589] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 117.768300][ T9] usb 2-1: USB disconnect, device number 4 [ 117.789633][ T6589] CPU: 1 UID: 0 PID: 6589 Comm: syz.2.214 Not tainted 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) [ 117.789656][ T6589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 117.789666][ T6589] Call Trace: [ 117.789673][ T6589] [ 117.789680][ T6589] dump_stack_lvl+0x189/0x250 [ 117.789707][ T6589] ? __pfx____ratelimit+0x10/0x10 [ 117.789727][ T6589] ? __pfx_dump_stack_lvl+0x10/0x10 [ 117.789751][ T6589] ? __pfx__printk+0x10/0x10 [ 117.789781][ T6589] should_fail_ex+0x414/0x560 [ 117.789807][ T6589] _copy_to_user+0x31/0xb0 [ 117.789827][ T6589] simple_read_from_buffer+0xe1/0x170 [ 117.789855][ T6589] proc_fail_nth_read+0x1df/0x250 [ 117.789876][ T6589] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 117.789896][ T6589] ? rw_verify_area+0x258/0x650 [ 117.789917][ T6589] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 117.789936][ T6589] vfs_read+0x200/0x980 [ 117.789963][ T6589] ? __pfx___mutex_lock+0x10/0x10 [ 117.789985][ T6589] ? __pfx_vfs_read+0x10/0x10 [ 117.790007][ T6589] ? __fget_files+0x2a/0x420 [ 117.790027][ T6589] ? __fget_files+0x3a0/0x420 [ 117.790042][ T6589] ? __fget_files+0x2a/0x420 [ 117.790066][ T6589] ksys_read+0x145/0x250 [ 117.790090][ T6589] ? __pfx_ksys_read+0x10/0x10 [ 117.790108][ T6589] ? rcu_is_watching+0x15/0xb0 [ 117.790134][ T6589] ? do_syscall_64+0xbe/0x3b0 [ 117.790159][ T6589] do_syscall_64+0xfa/0x3b0 [ 117.790177][ T6589] ? lockdep_hardirqs_on+0x9c/0x150 [ 117.790195][ T6589] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.790211][ T6589] ? clear_bhb_loop+0x60/0xb0 [ 117.790231][ T6589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.790247][ T6589] RIP: 0033:0x7f733c98d37c [ 117.790262][ T6589] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 117.790276][ T6589] RSP: 002b:00007f733d7bf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 117.790293][ T6589] RAX: ffffffffffffffda RBX: 00007f733cbb5fa0 RCX: 00007f733c98d37c [ 117.790305][ T6589] RDX: 000000000000000f RSI: 00007f733d7bf0a0 RDI: 0000000000000004 [ 117.790315][ T6589] RBP: 00007f733d7bf090 R08: 0000000000000000 R09: 0000000000000000 [ 117.790324][ T6589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 117.790334][ T6589] R13: 0000000000000000 R14: 00007f733cbb5fa0 R15: 00007f733ccdfa28 [ 117.790361][ T6589] [ 118.022715][ C1] vkms_vblank_simulate: vblank timer overrun [ 118.272647][ T6587] vlan2: entered allmulticast mode [ 118.280090][ T6587] veth1: entered allmulticast mode [ 118.289184][ T6587] bond1: (slave vlan2): Opening slave failed [ 118.320552][ T6591] netlink: 4 bytes leftover after parsing attributes in process `syz.2.215'. [ 118.787314][ T6599] netlink: 44 bytes leftover after parsing attributes in process `syz.2.218'. [ 118.813237][ T9] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 118.932181][ T6603] netlink: 12 bytes leftover after parsing attributes in process `syz.2.220'. [ 118.979370][ T6603] bridge_slave_1: left allmulticast mode [ 119.013796][ T5888] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 119.014421][ T6603] bridge_slave_1: left promiscuous mode [ 119.048519][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 119.049999][ T6603] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.096013][ T9] usb 2-1: config 1 has an invalid descriptor of length 90, skipping remainder of the config [ 119.116927][ T6603] bridge_slave_0: left allmulticast mode [ 119.125139][ T6603] bridge_slave_0: left promiscuous mode [ 119.131228][ T6603] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.147965][ T9] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 119.177538][ T9] usb 2-1: New USB device found, idVendor=0535, idProduct=a4a8, bcdDevice= 0.40 [ 119.210243][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.219883][ T9] usb 2-1: Product: syz [ 119.224155][ T5888] usb 4-1: Using ep0 maxpacket: 32 [ 119.235435][ T5888] usb 4-1: config 198 has an invalid descriptor of length 161, skipping remainder of the config [ 119.247438][ T9] usb 2-1: Manufacturer: syz [ 119.252389][ T5888] usb 4-1: config 198 has 0 interfaces, different from the descriptor's value: 2 [ 119.262390][ T9] usb 2-1: SerialNumber: syz [ 119.273471][ T5888] usb 4-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 119.285757][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.296779][ T5888] usb 4-1: Product: syz [ 119.301145][ T5888] usb 4-1: Manufacturer: syz [ 119.316564][ T5888] usb 4-1: SerialNumber: syz [ 119.472150][ T6615] netlink: 'syz.2.224': attribute type 4 has an invalid length. [ 119.484491][ T6615] sit0: entered promiscuous mode [ 119.495961][ T6615] netlink: 'syz.2.224': attribute type 1 has an invalid length. [ 119.504117][ T6615] netlink: 9 bytes leftover after parsing attributes in process `syz.2.224'. [ 119.593851][ T5902] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 119.625624][ T5888] usb 4-1: USB disconnect, device number 13 [ 119.731091][ T6620] Invalid logical block size (17746) [ 119.743553][ T5902] usb 5-1: Using ep0 maxpacket: 8 [ 119.751817][ T5902] usb 5-1: config 0 has too many interfaces: 65, using maximum allowed: 32 [ 119.761169][ T5902] usb 5-1: config 0 has an invalid interface number: 150 but max is 64 [ 119.784472][ T5902] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.798981][ T5902] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 65 [ 119.808738][ T5902] usb 5-1: config 0 has no interface number 0 [ 119.815800][ T5902] usb 5-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 119.829856][ T5902] usb 5-1: config 0 interface 150 has no altsetting 0 [ 119.836984][ T5902] usb 5-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 119.846565][ T5902] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.857754][ T5902] usb 5-1: config 0 descriptor?? [ 120.121260][ T5902] usb 5-1: USB disconnect, device number 12 [ 120.244809][ T6627] netlink: 4 bytes leftover after parsing attributes in process `syz.3.228'. [ 120.658535][ T6633] xfrm0: entered promiscuous mode [ 120.665617][ T6633] xfrm0: entered allmulticast mode [ 120.726721][ T6635] program syz.4.231 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 120.798177][ T6637] team_slave_0: entered promiscuous mode [ 120.804443][ T6637] team_slave_1: entered promiscuous mode [ 120.830514][ T6637] netlink: 12 bytes leftover after parsing attributes in process `syz.0.232'. [ 120.841646][ T6637] netlink: 36 bytes leftover after parsing attributes in process `syz.0.232'. [ 120.872044][ T6637] vlan2: entered allmulticast mode [ 120.889709][ T6637] macvtap0: entered allmulticast mode [ 120.901018][ T6637] veth0_macvtap: entered allmulticast mode [ 121.153359][ T5884] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 121.244271][ T6650] batadv0: entered promiscuous mode [ 121.313294][ T5884] usb 5-1: Using ep0 maxpacket: 16 [ 121.322612][ T5884] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.322683][ T6652] program syz.3.237 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 121.338344][ T5884] usb 5-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 121.357792][ T5884] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.371618][ T5884] usb 5-1: config 0 descriptor?? [ 121.432460][ T9] usb 2-1: USB disconnect, device number 5 [ 121.625709][ T6659] netlink: 36 bytes leftover after parsing attributes in process `syz.3.240'. [ 121.638193][ T6657] netlink: 4 bytes leftover after parsing attributes in process `syz.0.239'. [ 121.746136][ T6663] tipc: Started in network mode [ 121.751253][ T6663] tipc: Node identity 68a, cluster identity 4711 [ 121.758355][ T6663] tipc: Node number set to 1674 [ 121.766654][ T6663] tipc: Cannot configure node identity twice [ 121.821187][ T5884] hid-led 0003:1294:1320.0002: unknown main item tag 0x0 [ 121.831448][ T5884] hid-led 0003:1294:1320.0002: unknown main item tag 0x0 [ 121.839651][ T5884] hid-led 0003:1294:1320.0002: unknown main item tag 0x0 [ 121.849414][ T5884] hid-led 0003:1294:1320.0002: unknown main item tag 0x0 [ 121.857721][ T5884] hid-led 0003:1294:1320.0002: unknown main item tag 0x0 [ 121.863663][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 121.874335][ T5884] hid-led 0003:1294:1320.0002: hidraw0: USB HID v0.03 Device [HID 1294:1320] on usb-dummy_hcd.4-1/input0 [ 121.917744][ T5884] hid-led 0003:1294:1320.0002: Riso Kagaku Webmail Notifier initialized [ 122.018440][ T6641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.031348][ T6641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.043374][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 122.063894][ T9] usb 2-1: config 198 has an invalid descriptor of length 161, skipping remainder of the config [ 122.078830][ T9] usb 2-1: config 198 has 0 interfaces, different from the descriptor's value: 2 [ 122.091083][ T9] usb 2-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 122.098851][ T6641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.100662][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.115357][ T6641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.117327][ T9] usb 2-1: Product: syz [ 122.129096][ T9] usb 2-1: Manufacturer: syz [ 122.134043][ T9] usb 2-1: SerialNumber: syz [ 122.139177][ T6674] vivid-001: disconnect [ 122.294618][ T5884] usb 5-1: USB disconnect, device number 13 [ 122.310233][ T3458] leds riso_kagaku0:blue: Setting an LED's brightness failed (-38) [ 122.320731][ T3458] leds riso_kagaku0:green: Setting an LED's brightness failed (-38) [ 122.331547][ T773] leds riso_kagaku0:red: Setting an LED's brightness failed (-38) [ 122.391582][ T9] usb 2-1: USB disconnect, device number 6 [ 122.729883][ T6676] netlink: 252 bytes leftover after parsing attributes in process `syz.0.245'. [ 122.797321][ T30] audit: type=1326 audit(1748804051.043:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6670 comm="syz.3.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76f7b8e969 code=0x7fc00000 [ 122.844276][ T6670] vivid-001: reconnect [ 122.861503][ T30] audit: type=1326 audit(1748804051.073:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6670 comm="syz.3.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f76f7b8e969 code=0x7fc00000 [ 122.944021][ T30] audit: type=1326 audit(1748804051.073:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6670 comm="syz.3.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76f7b8e969 code=0x7fc00000 [ 123.033887][ T30] audit: type=1326 audit(1748804051.073:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6670 comm="syz.3.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76f7b8e969 code=0x7fc00000 [ 123.083396][ T30] audit: type=1326 audit(1748804051.073:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6670 comm="syz.3.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76f7b8e969 code=0x7fc00000 [ 123.119428][ T6689] bond0: option arp_validate: invalid value (18446744073441116161) [ 123.146969][ T30] audit: type=1326 audit(1748804051.073:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6670 comm="syz.3.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76f7b8e969 code=0x7fc00000 [ 123.182358][ T6693] FAULT_INJECTION: forcing a failure. [ 123.182358][ T6693] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 123.240067][ T6693] CPU: 0 UID: 0 PID: 6693 Comm: syz.2.249 Not tainted 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) [ 123.240092][ T6693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 123.240102][ T6693] Call Trace: [ 123.240109][ T6693] [ 123.240117][ T6693] dump_stack_lvl+0x189/0x250 [ 123.240145][ T6693] ? __pfx____ratelimit+0x10/0x10 [ 123.240166][ T6693] ? __pfx_dump_stack_lvl+0x10/0x10 [ 123.240189][ T6693] ? __pfx__printk+0x10/0x10 [ 123.240209][ T6693] ? fs_reclaim_acquire+0x7d/0x100 [ 123.240235][ T6693] should_fail_ex+0x414/0x560 [ 123.240261][ T6693] prepare_alloc_pages+0x213/0x610 [ 123.240285][ T6693] __alloc_frozen_pages_noprof+0x123/0x370 [ 123.240307][ T6693] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 123.240332][ T6693] ? policy_nodemask+0x27c/0x720 [ 123.240351][ T6693] ? __lock_acquire+0xab9/0xd20 [ 123.240376][ T6693] alloc_pages_mpol+0x232/0x4a0 [ 123.240405][ T6693] vma_alloc_folio_noprof+0xe4/0x200 [ 123.240431][ T6693] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 123.240466][ T6693] folio_prealloc+0x30/0x180 [ 123.240492][ T6693] __handle_mm_fault+0x2c88/0x5620 [ 123.240533][ T6693] ? __pfx___handle_mm_fault+0x10/0x10 [ 123.240571][ T6693] ? find_vma+0xe7/0x160 [ 123.240592][ T6693] ? __pfx_find_vma+0x10/0x10 [ 123.240616][ T6693] handle_mm_fault+0x40a/0x8e0 [ 123.240647][ T6693] do_user_addr_fault+0x764/0x1390 [ 123.240679][ T6693] exc_page_fault+0x76/0xf0 [ 123.240701][ T6693] asm_exc_page_fault+0x26/0x30 [ 123.240717][ T6693] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 123.240733][ T6693] Code: f7 03 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 cf f7 03 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 123.240751][ T6693] RSP: 0018:ffffc9000c0bfb48 EFLAGS: 00050206 [ 123.240766][ T6693] RAX: ffffffff84bff601 RBX: 0000000000001000 RCX: 0000000000000240 [ 123.240778][ T6693] RDX: 0000000000000000 RSI: ffff88803020edc0 RDI: 000020000000c000 [ 123.240789][ T6693] RBP: ffffc9000c0bfc90 R08: ffff88803020efff R09: 1ffff11006041dff [ 123.240800][ T6693] R10: dffffc0000000000 R11: ffffed1006041e00 R12: 000020000000c240 [ 123.240812][ T6693] R13: 00007ffffffff000 R14: ffff88803020e000 R15: 000020000000b240 [ 123.240832][ T6693] ? _copy_from_user+0x51/0xb0 [ 123.240857][ T6693] _copy_to_user+0x8a/0xb0 [ 123.240877][ T6693] pagemap_read+0x4d4/0x7b0 [ 123.240915][ T6693] ? __pfx_pagemap_read+0x10/0x10 [ 123.240945][ T6693] ? rw_verify_area+0x258/0x650 [ 123.240965][ T6693] ? __pfx_pagemap_read+0x10/0x10 [ 123.240988][ T6693] vfs_read+0x200/0x980 [ 123.241017][ T6693] ? __pfx_vfs_read+0x10/0x10 [ 123.241040][ T6693] ? __fget_files+0x2a/0x420 [ 123.241063][ T6693] ? __fget_files+0x2a/0x420 [ 123.241077][ T6693] ? __fget_files+0x3a0/0x420 [ 123.241091][ T6693] ? __fget_files+0x2a/0x420 [ 123.241116][ T6693] __x64_sys_pread64+0x193/0x220 [ 123.241141][ T6693] ? __pfx___x64_sys_pread64+0x10/0x10 [ 123.241161][ T6693] ? rcu_is_watching+0x15/0xb0 [ 123.241188][ T6693] ? do_syscall_64+0xbe/0x3b0 [ 123.241212][ T6693] do_syscall_64+0xfa/0x3b0 [ 123.241230][ T6693] ? lockdep_hardirqs_on+0x9c/0x150 [ 123.241249][ T6693] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.241264][ T6693] ? clear_bhb_loop+0x60/0xb0 [ 123.241283][ T6693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.241298][ T6693] RIP: 0033:0x7f733c98e969 [ 123.241311][ T6693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.241323][ T6693] RSP: 002b:00007f733d79e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 123.241339][ T6693] RAX: ffffffffffffffda RBX: 00007f733cbb6080 RCX: 00007f733c98e969 [ 123.241351][ T6693] RDX: 0000000000200000 RSI: 0000200000001240 RDI: 0000000000000003 [ 123.241361][ T6693] RBP: 00007f733d79e090 R08: 0000000000000000 R09: 0000000000000000 [ 123.241371][ T6693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 123.241380][ T6693] R13: 0000000000000000 R14: 00007f733cbb6080 R15: 00007f733ccdfa28 [ 123.241408][ T6693] [ 123.667898][ T30] audit: type=1326 audit(1748804051.073:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6670 comm="syz.3.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76f7b8e969 code=0x7fc00000 [ 123.672979][ T6696] netlink: 4 bytes leftover after parsing attributes in process `syz.1.252'. [ 123.690071][ T30] audit: type=1326 audit(1748804051.073:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6670 comm="syz.3.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76f7b8e969 code=0x7fc00000 [ 123.723431][ T30] audit: type=1326 audit(1748804051.073:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6670 comm="syz.3.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76f7b8e969 code=0x7fc00000 [ 123.745867][ T30] audit: type=1326 audit(1748804051.073:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6670 comm="syz.3.244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76f7b8e969 code=0x7fc00000 [ 123.769386][ T5902] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 123.796892][ T5884] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 123.954781][ T5902] usb 1-1: config index 0 descriptor too short (expected 3133, got 61) [ 123.963100][ T5902] usb 1-1: config 0 has an invalid interface number: 156 but max is 1 [ 123.971341][ T5902] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.981983][ T5902] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 123.990930][ T5902] usb 1-1: config 0 has no interface number 0 [ 123.992247][ T6700] netlink: 64 bytes leftover after parsing attributes in process `syz.3.254'. [ 123.997153][ T5902] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 124.017251][ T5902] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 124.032437][ T5902] usb 1-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 124.045516][ T5902] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 124.054616][ T5902] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.096462][ T5902] usb 1-1: config 0 descriptor?? [ 124.308987][ T5902] gspca_main: spca561-2.14.0 probing abcd:cdee [ 124.328646][ T5884] usb 5-1: not running at top speed; connect to a high speed hub [ 124.453741][ T5884] usb 5-1: config 1 has an invalid descriptor of length 90, skipping remainder of the config [ 124.697559][ T5884] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 124.754159][ T5884] usb 5-1: New USB device found, idVendor=0535, idProduct=a4a8, bcdDevice= 0.40 [ 124.775536][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.825434][ T5884] usb 5-1: Product: syz [ 124.843226][ T5884] usb 5-1: Manufacturer: syz [ 124.868280][ T5884] usb 5-1: SerialNumber: syz [ 124.875015][ T5902] spca561 1-1:0.156: probe with driver spca561 failed with error -22 [ 124.907537][ T5902] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 124.953823][ T5902] usb 1-1: MIDIStreaming interface descriptor not found [ 125.040305][ T6680] input: syz0 as /devices/virtual/input/input9 [ 125.113294][ T5888] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 125.186278][ T5902] usb 1-1: USB disconnect, device number 13 [ 125.314914][ T5888] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 125.356904][ T5888] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 125.394446][ T5888] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 125.431587][ T5888] usb 2-1: config 220 has no interface number 2 [ 125.442759][ T5888] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 125.477553][ T5888] usb 2-1: config 220 interface 0 has no altsetting 0 [ 125.487990][ T5888] usb 2-1: config 220 interface 76 has no altsetting 0 [ 125.496588][ T5888] usb 2-1: config 220 interface 1 has no altsetting 0 [ 125.507548][ T5888] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 125.524617][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.537070][ T6724] netlink: 12 bytes leftover after parsing attributes in process `syz.3.262'. [ 125.548432][ T5888] usb 2-1: Product: syz [ 125.553011][ T5888] usb 2-1: Manufacturer: syz [ 125.600453][ T5888] usb 2-1: SerialNumber: syz [ 125.764745][ T24] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 125.873328][ T5902] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 125.928168][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 125.949278][ T24] usb 3-1: config 198 has an invalid descriptor of length 161, skipping remainder of the config [ 125.975139][ T24] usb 3-1: config 198 has 0 interfaces, different from the descriptor's value: 2 [ 125.988138][ T6730] netlink: 4 bytes leftover after parsing attributes in process `syz.0.265'. [ 126.006621][ T24] usb 3-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 126.019931][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.028706][ T24] usb 3-1: Product: syz [ 126.033120][ T24] usb 3-1: Manufacturer: syz [ 126.037851][ T24] usb 3-1: SerialNumber: syz [ 126.053361][ T5902] usb 4-1: Using ep0 maxpacket: 16 [ 126.072826][ T5902] usb 4-1: config 0 has an invalid interface number: 140 but max is 1 [ 126.092872][ T5902] usb 4-1: config 0 has an invalid interface number: 230 but max is 1 [ 126.110801][ T5902] usb 4-1: config 0 has an invalid descriptor of length 36, skipping remainder of the config [ 126.123970][ T6732] netlink: 20 bytes leftover after parsing attributes in process `syz.0.266'. [ 126.136708][ T5902] usb 4-1: config 0 has no interface number 0 [ 126.144959][ T5902] usb 4-1: config 0 has no interface number 1 [ 126.151204][ T5902] usb 4-1: config 0 interface 230 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 126.178798][ T5902] usb 4-1: config 0 interface 230 has no altsetting 0 [ 126.203816][ T5902] usb 4-1: New USB device found, idVendor=1199, idProduct=9002, bcdDevice=67.8b [ 126.213694][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.222687][ T5902] usb 4-1: Product: syz [ 126.230259][ T5884] usb 5-1: USB disconnect, device number 14 [ 126.233653][ T5902] usb 4-1: Manufacturer: syz [ 126.263683][ T5902] usb 4-1: SerialNumber: syz [ 126.272037][ T6723] netlink: 28 bytes leftover after parsing attributes in process `syz.2.261'. [ 126.273986][ T5902] usb 4-1: config 0 descriptor?? [ 126.293580][ T6723] netlink: 28 bytes leftover after parsing attributes in process `syz.2.261'. [ 126.341774][ T6723] team0: entered promiscuous mode [ 126.352205][ T6723] team_slave_0: entered promiscuous mode [ 126.361357][ T6723] team_slave_1: entered promiscuous mode [ 126.383319][ T6723] team0: left promiscuous mode [ 126.388256][ T6723] team_slave_0: left promiscuous mode [ 126.398625][ T6723] team_slave_1: left promiscuous mode [ 126.513581][ T24] usb 3-1: USB disconnect, device number 11 [ 126.533539][ T5886] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 126.554863][ T5902] usb 4-1: USB disconnect, device number 14 [ 126.631686][ T5888] usb 2-1: selecting invalid altsetting 0 [ 126.640196][ T5888] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 126.646705][ T5888] usb 2-1: No valid video chain found. [ 126.676615][ T5886] usb 1-1: device descriptor read/64, error -71 [ 126.694757][ T5888] usb 2-1: selecting invalid altsetting 0 [ 126.700489][ T5888] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 126.714064][ T5888] usb 2-1: USB disconnect, device number 7 [ 126.764760][ T5884] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 126.880037][ T6742] netlink: 12 bytes leftover after parsing attributes in process `syz.1.271'. [ 126.903809][ T5884] usb 5-1: device descriptor read/64, error -71 [ 126.934838][ T5886] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 126.967591][ T6744] netlink: 'syz.1.272': attribute type 1 has an invalid length. [ 126.975477][ T6744] netlink: 9 bytes leftover after parsing attributes in process `syz.1.272'. [ 127.086029][ T5886] usb 1-1: device descriptor read/64, error -71 [ 127.109006][ T6747] netlink: 12 bytes leftover after parsing attributes in process `syz.3.273'. [ 127.155261][ T5884] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 127.210766][ T5886] usb usb1-port1: attempt power cycle [ 127.265995][ T6752] netlink: 4 bytes leftover after parsing attributes in process `syz.3.276'. [ 127.313316][ T5884] usb 5-1: device descriptor read/64, error -71 [ 127.586585][ T5884] usb usb5-port1: attempt power cycle [ 127.653295][ T5886] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 127.706608][ T5886] usb 1-1: device descriptor read/8, error -71 [ 127.853554][ T5830] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 127.933891][ T5884] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 127.966680][ T5884] usb 5-1: device descriptor read/8, error -71 [ 127.983248][ T5886] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 128.008958][ T5886] usb 1-1: device descriptor read/8, error -71 [ 128.021237][ T5830] usb 3-1: not running at top speed; connect to a high speed hub [ 128.064800][ T5830] usb 3-1: config 1 has an invalid descriptor of length 90, skipping remainder of the config [ 128.098101][ T5830] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 128.334173][ T5886] usb usb1-port1: unable to enumerate USB device [ 128.367617][ T5830] usb 3-1: New USB device found, idVendor=0535, idProduct=a4a8, bcdDevice= 0.40 [ 128.403534][ T5884] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 128.411736][ T5830] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.446728][ T5884] usb 5-1: device descriptor read/8, error -71 [ 128.478122][ T5830] usb 3-1: Product: syz [ 128.491487][ T5830] usb 3-1: Manufacturer: syz [ 128.496330][ T5830] usb 3-1: SerialNumber: syz [ 128.583784][ T5884] usb usb5-port1: unable to enumerate USB device [ 128.865730][ T6773] can: request_module (can-proto-0) failed. [ 129.030746][ T6779] binder: 6778:6779 ioctl c0306201 2000000001c0 returned -22 [ 129.161756][ T6781] sit0: entered promiscuous mode [ 129.172857][ T6781] netlink: 'syz.3.285': attribute type 1 has an invalid length. [ 129.181113][ T6781] netlink: 9 bytes leftover after parsing attributes in process `syz.3.285'. [ 129.322165][ T6786] netlink: 12 bytes leftover after parsing attributes in process `syz.3.287'. [ 129.417567][ T6788] netlink: 'syz.3.288': attribute type 16 has an invalid length. [ 129.425807][ T6788] netlink: 'syz.3.288': attribute type 17 has an invalid length. [ 129.564484][ T5884] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 129.755144][ T5884] usb 1-1: Using ep0 maxpacket: 32 [ 129.764358][ T5884] usb 1-1: config 198 has an invalid descriptor of length 161, skipping remainder of the config [ 129.774966][ T5884] usb 1-1: config 198 has 0 interfaces, different from the descriptor's value: 2 [ 129.794833][ T5884] usb 1-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 129.804169][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.824740][ T5884] usb 1-1: Product: syz [ 129.836461][ T5884] usb 1-1: Manufacturer: syz [ 129.863191][ T5884] usb 1-1: SerialNumber: syz [ 130.122900][ T6783] team0: entered promiscuous mode [ 130.142923][ T6783] team0: left promiscuous mode [ 130.195670][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 130.195686][ T30] audit: type=1326 audit(1748804058.443:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6801 comm="syz.4.294" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f841cd8e969 code=0x0 [ 130.385254][ T5830] usb 3-1: USB disconnect, device number 12 [ 130.459965][ T5884] usb 1-1: USB disconnect, device number 18 [ 131.214360][ T6819] binder: 6818:6819 ioctl c018aa3f 200000000080 returned -22 [ 131.291216][ T6819] binder: 6818:6819 ioctl 8138ae83 7f814dff4aa0 returned -22 [ 131.446985][ T6821] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 131.548507][ T6826] __nla_validate_parse: 6 callbacks suppressed [ 131.548524][ T6826] netlink: 4 bytes leftover after parsing attributes in process `syz.1.301'. [ 132.083367][ T5884] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 132.265086][ T5884] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.275375][ T5884] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 132.303487][ T5884] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 132.330010][ T5884] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 132.339470][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.351377][ T5884] usb 4-1: config 0 descriptor?? [ 132.423416][ T5886] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 132.565090][ T5884] ath6kl: Failed to submit usb control message: -71 [ 132.573322][ T5884] ath6kl: unable to send the bmi data to the device: -71 [ 132.580374][ T5884] ath6kl: Unable to send get target info: -71 [ 132.586747][ T5830] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 132.663803][ T5884] ath6kl: Failed to init ath6kl core: -71 [ 132.670227][ T5884] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 132.688190][ T5886] usb 2-1: not running at top speed; connect to a high speed hub [ 132.706241][ T5884] usb 4-1: USB disconnect, device number 15 [ 132.763370][ T5830] usb 1-1: Using ep0 maxpacket: 32 [ 132.772477][ T5886] usb 2-1: config 1 has an invalid descriptor of length 90, skipping remainder of the config [ 132.813794][ T5830] usb 1-1: config 198 has an invalid descriptor of length 161, skipping remainder of the config [ 132.826864][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.835727][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.857115][ T5886] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 132.870061][ T5830] usb 1-1: config 198 has 0 interfaces, different from the descriptor's value: 2 [ 132.947425][ T5886] usb 2-1: New USB device found, idVendor=0535, idProduct=a4a8, bcdDevice= 0.40 [ 132.960123][ T5830] usb 1-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 132.984216][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.992438][ T5830] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.003727][ T5886] usb 2-1: Product: syz [ 133.034412][ T5830] usb 1-1: Product: syz [ 133.038687][ T5886] usb 2-1: Manufacturer: syz [ 133.044823][ T5830] usb 1-1: Manufacturer: syz [ 133.049650][ T5830] usb 1-1: SerialNumber: syz [ 133.059801][ T5886] usb 2-1: SerialNumber: syz [ 133.275577][ T6851] netlink: 28 bytes leftover after parsing attributes in process `syz.0.311'. [ 133.292743][ T6851] netlink: 28 bytes leftover after parsing attributes in process `syz.0.311'. [ 133.332582][ T6851] team0: entered promiscuous mode [ 133.342542][ T6851] team0: left promiscuous mode [ 133.490297][ T5830] usb 1-1: USB disconnect, device number 19 [ 133.523290][ T5884] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 133.675577][ T5884] usb 4-1: Using ep0 maxpacket: 8 [ 133.689983][ T5884] usb 4-1: config 1 has an invalid interface number: 204 but max is 0 [ 133.703543][ T5884] usb 4-1: config 1 has no interface number 0 [ 133.714606][ T5884] usb 4-1: New USB device found, idVendor=1498, idProduct=9206, bcdDevice=a8.6b [ 133.736204][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.745211][ T5884] usb 4-1: Product: syz [ 133.751509][ T5884] usb 4-1: Manufacturer: syz [ 133.759878][ T5884] usb 4-1: SerialNumber: syz [ 133.802192][ T6870] netlink: 4 bytes leftover after parsing attributes in process `syz.2.317'. [ 133.831883][ T30] audit: type=1326 audit(1748804062.073:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6867 comm="syz.4.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f841cd8e969 code=0x7ffc0000 [ 133.877071][ T30] audit: type=1326 audit(1748804062.073:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6867 comm="syz.4.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f841cd8e969 code=0x7ffc0000 [ 133.943313][ T30] audit: type=1326 audit(1748804062.073:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6867 comm="syz.4.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f841cd8e969 code=0x7ffc0000 [ 133.973566][ T30] audit: type=1326 audit(1748804062.103:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6867 comm="syz.4.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f841cd8e969 code=0x7ffc0000 [ 133.999526][ T30] audit: type=1326 audit(1748804062.103:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6867 comm="syz.4.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f841cd8e969 code=0x7ffc0000 [ 134.036208][ T30] audit: type=1326 audit(1748804062.103:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6867 comm="syz.4.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f841cd8e969 code=0x7ffc0000 [ 134.103341][ T30] audit: type=1326 audit(1748804062.103:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6867 comm="syz.4.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f841cd8e969 code=0x7ffc0000 [ 134.366819][ T30] audit: type=1326 audit(1748804062.613:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6867 comm="syz.4.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f841cd8e969 code=0x7ffc0000 [ 134.433659][ T30] audit: type=1326 audit(1748804062.643:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6867 comm="syz.4.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f841cd8e969 code=0x7ffc0000 [ 134.756725][ T5902] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 134.950613][ T5886] usb 2-1: USB disconnect, device number 8 [ 134.963925][ T5902] usb 5-1: Using ep0 maxpacket: 32 [ 134.994650][ T5902] usb 5-1: config index 0 descriptor too short (expected 2210, got 1175) [ 135.013528][ T5902] usb 5-1: config 0 has an invalid interface number: 241 but max is 2 [ 135.022821][ T5902] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.038336][ T6889] x_tables: ip_tables: IDLETIMER.0 target: invalid size 40 (kernel) != (user) 29 [ 135.045138][ T5902] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 135.054783][ T6886] netlink: 'syz.2.324': attribute type 10 has an invalid length. [ 135.064071][ T5902] usb 5-1: config 0 has no interface number 0 [ 135.064116][ T5902] usb 5-1: config 0 interface 241 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 135.075926][ T6886] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.086039][ T5902] usb 5-1: config 0 interface 241 altsetting 4 has an endpoint descriptor with address 0xAE, changing to 0x8E [ 135.103099][ T5902] usb 5-1: config 0 interface 241 altsetting 4 endpoint 0x8E has an invalid bInterval 108, changing to 10 [ 135.125577][ T5831] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 135.138252][ T6886] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.151042][ T5902] usb 5-1: config 0 interface 241 altsetting 4 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 135.151492][ T6886] batadv_slave_0: entered promiscuous mode [ 135.172152][ T6886] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 135.223824][ T5902] usb 5-1: config 0 interface 241 has no altsetting 0 [ 135.260955][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 135.260970][ T30] audit: type=1326 audit(1748804063.503:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6867 comm="syz.4.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f841cd8e56b code=0x7ffc0000 [ 135.292686][ T5902] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=e0.70 [ 135.293385][ T5884] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 135.307146][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.319874][ T5902] usb 5-1: Product: syz [ 135.327225][ T30] audit: type=1326 audit(1748804063.503:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6867 comm="syz.4.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f841cd8e56b code=0x7ffc0000 [ 135.352068][ T5902] usb 5-1: Manufacturer: syz [ 135.356824][ T5902] usb 5-1: SerialNumber: syz [ 135.365744][ T30] audit: type=1326 audit(1748804063.503:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6867 comm="syz.4.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f841cd8e56b code=0x7ffc0000 [ 135.389537][ T5902] usb 5-1: config 0 descriptor?? [ 135.396315][ T30] audit: type=1326 audit(1748804063.503:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6867 comm="syz.4.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f841cd8e56b code=0x7ffc0000 [ 135.418776][ T30] audit: type=1326 audit(1748804063.503:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6867 comm="syz.4.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f841cd8e56b code=0x7ffc0000 [ 135.442187][ T30] audit: type=1326 audit(1748804063.503:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6867 comm="syz.4.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f841cd8e56b code=0x7ffc0000 [ 135.464470][ T30] audit: type=1326 audit(1748804063.523:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6867 comm="syz.4.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f841cd8e56b code=0x7ffc0000 [ 135.487348][ T30] audit: type=1326 audit(1748804063.543:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6867 comm="syz.4.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f841cd8e56b code=0x7ffc0000 [ 135.495990][ T5884] usb 1-1: Using ep0 maxpacket: 16 [ 135.509558][ T30] audit: type=1326 audit(1748804063.673:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6867 comm="syz.4.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f841cd8e56b code=0x7ffc0000 [ 135.509599][ T30] audit: type=1326 audit(1748804063.673:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6867 comm="syz.4.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f841cd8e56b code=0x7ffc0000 [ 135.563695][ T5884] usb 1-1: config 0 has an invalid interface number: 196 but max is 1 [ 135.574348][ T5884] usb 1-1: config 0 has an invalid interface number: 196 but max is 1 [ 135.582704][ T5884] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 135.594055][ T5884] usb 1-1: config 0 has no interface number 0 [ 135.600180][ T5884] usb 1-1: config 0 interface 196 altsetting 119 endpoint 0xB has an invalid bInterval 248, changing to 11 [ 135.611732][ T5884] usb 1-1: config 0 interface 196 altsetting 119 endpoint 0xD has invalid wMaxPacketSize 0 [ 135.621913][ T5884] usb 1-1: config 0 interface 196 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 135.632968][ T5884] usb 1-1: config 0 interface 196 has no altsetting 0 [ 135.639854][ T5884] usb 1-1: config 0 interface 196 has no altsetting 1 [ 135.659410][ T5884] usb 1-1: New USB device found, idVendor=0a46, idProduct=1269, bcdDevice=1a.0a [ 135.672406][ T5902] usb 5-1: USB disconnect, device number 19 [ 135.673270][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.692267][ T5884] usb 1-1: Product: syz [ 135.697170][ T5884] usb 1-1: Manufacturer: syz [ 135.702669][ T5884] usb 1-1: SerialNumber: syz [ 135.716176][ T5884] usb 1-1: config 0 descriptor?? [ 135.940021][ T6899] netlink: 60 bytes leftover after parsing attributes in process `syz.2.329'. [ 135.951242][ T6899] netlink: 12 bytes leftover after parsing attributes in process `syz.2.329'. [ 135.960264][ T6899] netlink: 60 bytes leftover after parsing attributes in process `syz.2.329'. [ 135.985323][ T5884] dm9601 1-1:0.196: probe with driver dm9601 failed with error -22 [ 136.010836][ T5884] usb 1-1: USB disconnect, device number 20 [ 136.068675][ T6903] ucma_write: process 197 (syz.1.330) changed security contexts after opening file descriptor, this is not allowed. [ 136.237152][ T5902] usb 4-1: USB disconnect, device number 16 [ 136.383309][ T5886] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 136.440691][ T6912] futex_wake_op: syz.4.334 tries to shift op by 32; fix this program [ 136.565971][ T5886] usb 2-1: Using ep0 maxpacket: 8 [ 136.602337][ T5886] usb 2-1: too many configurations: 100, using maximum allowed: 8 [ 136.616959][ T5886] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 136.626082][ T5886] usb 2-1: can't read configurations, error -61 [ 136.759995][ T5902] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 136.778002][ T5886] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 136.813395][ T5885] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 136.933199][ T5902] usb 4-1: Using ep0 maxpacket: 16 [ 136.944295][ T5902] usb 4-1: config 4 has an invalid interface number: 15 but max is 0 [ 136.952384][ T5902] usb 4-1: config 4 has no interface number 0 [ 136.963508][ T5886] usb 2-1: Using ep0 maxpacket: 8 [ 136.970784][ T5886] usb 2-1: too many configurations: 100, using maximum allowed: 8 [ 136.978741][ T9] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 136.980559][ T5886] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 136.997124][ T5886] usb 2-1: can't read configurations, error -61 [ 137.007728][ T5886] usb usb2-port1: attempt power cycle [ 137.007748][ T5902] usb 4-1: config 4 interface 15 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 137.042133][ T5902] usb 4-1: config 4 interface 15 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 137.052313][ T5885] usb 5-1: Using ep0 maxpacket: 32 [ 137.067740][ T5885] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 137.077817][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.085907][ T5902] usb 4-1: config 4 interface 15 has no altsetting 0 [ 137.150007][ T5885] usb 5-1: Product: syz [ 137.175025][ T5885] usb 5-1: Manufacturer: syz [ 137.183359][ T5885] usb 5-1: SerialNumber: syz [ 137.190849][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 137.199330][ T5902] usb 4-1: New USB device found, idVendor=0930, idProduct=0a13, bcdDevice=76.44 [ 137.211408][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.220302][ T5885] usb 5-1: config 0 descriptor?? [ 137.226184][ T5902] usb 4-1: Product: syz [ 137.233224][ T5902] usb 4-1: Manufacturer: syz [ 137.237880][ T5902] usb 4-1: SerialNumber: syz [ 137.254355][ T6910] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 137.254367][ T9] usb 1-1: config 1 has an invalid descriptor of length 90, skipping remainder of the config [ 137.254386][ T9] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 137.280967][ T6910] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 137.363280][ T5886] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 137.393610][ T5886] usb 2-1: Using ep0 maxpacket: 8 [ 137.400296][ T5886] usb 2-1: too many configurations: 100, using maximum allowed: 8 [ 137.410191][ T5886] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 137.421855][ T5886] usb 2-1: can't read configurations, error -61 [ 137.428435][ T9] usb 1-1: New USB device found, idVendor=0535, idProduct=a4a8, bcdDevice= 0.40 [ 137.438539][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.462677][ T9] usb 1-1: Product: syz [ 137.513200][ T5885] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: version d4.15 found at bus 005 address 020 [ 137.532656][ T9] usb 1-1: Manufacturer: syz [ 137.565437][ T5886] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 137.587234][ T9] usb 1-1: SerialNumber: syz [ 137.698083][ T6914] netlink: 'syz.4.334': attribute type 2 has an invalid length. [ 137.753924][ T5886] usb 2-1: Using ep0 maxpacket: 8 [ 137.922005][ T6914] ave_0: entered promiscuous mode [ 137.945713][ T5886] usb 2-1: too many configurations: 100, using maximum allowed: 8 [ 137.946590][ T5902] ax88179_178a 4-1:4.15: probe with driver ax88179_178a failed with error -71 [ 137.955127][ T5886] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 137.971901][ T5886] usb 2-1: can't read configurations, error -61 [ 137.978655][ T5886] usb usb2-port1: unable to enumerate USB device [ 138.005090][ T5902] usb 4-1: USB disconnect, device number 17 [ 138.159277][ T6928] input: syz1 as /devices/virtual/input/input10 [ 139.469690][ T6938] loop2: detected capacity change from 0 to 7 [ 139.508139][ T5978] Dev loop2: unable to read RDB block 7 [ 139.548934][ T5978] loop2: AHDI p1 p2 p3 [ 139.571655][ T5978] loop2: partition table partially beyond EOD, truncated [ 139.576483][ T5978] loop2: p1 start 1601398130 is beyond EOD, truncated [ 139.576505][ T5978] loop2: p2 start 1702059890 is beyond EOD, truncated [ 139.611616][ T6938] Dev loop2: unable to read RDB block 7 [ 139.611645][ T6938] loop2: AHDI p1 p2 p3 [ 139.611671][ T6938] loop2: partition table partially beyond EOD, truncated [ 139.626840][ T6938] loop2: p1 start 1601398130 is beyond EOD, [ 139.693074][ T9] usb 1-1: USB disconnect, device number 21 [ 139.801137][ T6938] truncated [ 139.806499][ T6944] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 139.830631][ T6938] loop2: p2 start 1702059890 is beyond EOD, truncated [ 139.924589][ T6947] binder: 6946:6947 ioctl c0306201 200000000c00 returned -14 [ 139.943472][ T6944] netlink: 596 bytes leftover after parsing attributes in process `syz.0.343'. [ 139.978474][ T24] usb 5-1: USB disconnect, device number 20 [ 140.618850][ T6968] netlink: 'syz.1.348': attribute type 1 has an invalid length. [ 140.642476][ T6968] netlink: 9 bytes leftover after parsing attributes in process `syz.1.348'. [ 140.843315][ T5902] usb 5-1: new low-speed USB device number 21 using dummy_hcd [ 141.032239][ T5902] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 141.088640][ T5902] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 141.134892][ T5902] usb 5-1: config 0 has no interface number 0 [ 141.147234][ T5902] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 141.167440][ T5888] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 141.175540][ T5902] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 141.184941][ T5902] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.199627][ T5902] usb 5-1: config 0 descriptor?? [ 141.212537][ T6970] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 141.253624][ T24] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 141.343385][ T5888] usb 3-1: Using ep0 maxpacket: 16 [ 141.369104][ T5888] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 141.378715][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.400577][ T5888] usb 3-1: Product: syz [ 141.418674][ T5888] usb 3-1: Manufacturer: syz [ 141.433495][ T5888] usb 3-1: SerialNumber: syz [ 141.466217][ T5888] usb 3-1: config 0 descriptor?? [ 141.529885][ T24] usb 4-1: not running at top speed; connect to a high speed hub [ 141.599461][ T24] usb 4-1: config 1 has an invalid descriptor of length 90, skipping remainder of the config [ 141.612859][ T24] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 141.644037][ T24] usb 4-1: New USB device found, idVendor=0535, idProduct=a4a8, bcdDevice= 0.40 [ 141.664547][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.672811][ T24] usb 4-1: Product: syz [ 141.678943][ T24] usb 4-1: Manufacturer: syz [ 141.699077][ T24] usb 4-1: SerialNumber: syz [ 141.780379][ T5902] usb 5-1: USB disconnect, device number 21 [ 141.958652][ T6993] netlink: 20 bytes leftover after parsing attributes in process `syz.0.358'. [ 141.958783][ T5888] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 142.022443][ T5888] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 142.056690][ T5888] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 142.097871][ T5888] usb 3-1: media controller created [ 142.166927][ T5888] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 142.245532][ T5888] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 142.259191][ T5888] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 142.475109][ T5902] usb 3-1: USB disconnect, device number 13 [ 142.598464][ T5902] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 142.853097][ T7007] sit0: entered promiscuous mode [ 142.892589][ T7007] netlink: 'syz.4.364': attribute type 1 has an invalid length. [ 142.921211][ T7007] netlink: 9 bytes leftover after parsing attributes in process `syz.4.364'. [ 143.533298][ T5888] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 143.633307][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 143.713269][ T5888] usb 5-1: Using ep0 maxpacket: 16 [ 143.720200][ T5888] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 143.746399][ T5888] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 143.783423][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 143.816653][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 143.864759][ T24] usb 4-1: USB disconnect, device number 18 [ 143.868765][ T5888] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 143.894378][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 143.975681][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.994448][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 144.009303][ T5888] usb 5-1: Product: syz [ 144.017651][ T5888] usb 5-1: Manufacturer: syz [ 144.033459][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 144.051406][ T5888] usb 5-1: SerialNumber: syz [ 144.070481][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 144.091090][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 144.101027][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 144.131894][ T9] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 144.213238][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.221460][ T9] usb 3-1: Product: syz [ 144.231572][ T9] usb 3-1: Manufacturer: syz [ 144.236326][ T9] usb 3-1: SerialNumber: syz [ 144.248018][ T9] usb 3-1: config 0 descriptor?? [ 144.262366][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 144.273531][ T5886] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 144.373265][ T24] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 144.453299][ T5886] usb 2-1: Using ep0 maxpacket: 32 [ 144.507360][ T5888] usb 5-1: USB disconnect, device number 22 [ 144.517957][ T5986] udevd[5986]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 144.546340][ T5886] usb 2-1: config 2 has an invalid interface number: 157 but max is 0 [ 144.567717][ T5886] usb 2-1: config 2 has no interface number 0 [ 144.584781][ T5886] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=a4.1b [ 144.594035][ T24] usb 4-1: device descriptor read/64, error -71 [ 144.596788][ T5978] udevd[5978]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 144.604291][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.628750][ T9] usb 3-1: USB disconnect, device number 14 [ 144.717247][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 144.717262][ T30] audit: type=1326 audit(1748804072.963:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7026 comm="syz.0.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21cab8e969 code=0x7ffc0000 [ 144.749243][ T5886] usb 2-1: Product: syz [ 144.758442][ T5886] usb 2-1: Manufacturer: syz [ 144.760097][ T30] audit: type=1326 audit(1748804073.003:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7026 comm="syz.0.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21cab8e969 code=0x7ffc0000 [ 144.787732][ T30] audit: type=1326 audit(1748804073.003:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7026 comm="syz.0.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f21cab8e969 code=0x7ffc0000 [ 144.811894][ T5886] usb 2-1: SerialNumber: syz [ 144.828960][ T5886] imon 2-1:2.157: unable to register, err -19 [ 144.863391][ T24] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 144.896837][ T7030] netlink: 124 bytes leftover after parsing attributes in process `syz.4.371'. [ 145.054028][ T5886] usb 2-1: USB disconnect, device number 13 [ 145.063361][ T24] usb 4-1: device descriptor read/64, error -71 [ 145.104062][ T7034] netlink: 80 bytes leftover after parsing attributes in process `syz.4.372'. [ 145.212156][ T7035] netlink: 'syz.0.370': attribute type 61 has an invalid length. [ 145.222231][ T24] usb usb4-port1: attempt power cycle [ 145.290972][ T7038] netlink: 4 bytes leftover after parsing attributes in process `syz.0.370'. [ 145.341392][ T7035] netlink: 'syz.0.370': attribute type 10 has an invalid length. [ 145.349602][ T7035] netlink: 40 bytes leftover after parsing attributes in process `syz.0.370'. [ 145.369316][ T7035] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 145.434738][ T5830] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 145.543358][ T5884] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 145.588343][ T24] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 145.617367][ T24] usb 4-1: device descriptor read/8, error -71 [ 145.647934][ T5830] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 145.703309][ T5884] usb 3-1: Using ep0 maxpacket: 16 [ 145.732306][ T5884] usb 3-1: unable to get BOS descriptor or descriptor too short [ 145.751466][ T5830] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.761190][ T5884] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 145.773377][ T5830] usb 5-1: Product: syz [ 145.784237][ T5830] usb 5-1: Manufacturer: syz [ 145.790300][ T5884] usb 3-1: can't read configurations, error -71 [ 145.796678][ T5830] usb 5-1: SerialNumber: syz [ 145.816599][ T5830] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 145.859221][ T1210] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 145.868355][ T24] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 145.883507][ T5886] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 145.893806][ T24] usb 4-1: device descriptor read/8, error -71 [ 146.013699][ T24] usb usb4-port1: unable to enumerate USB device [ 146.036814][ T5886] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.062694][ T5886] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 146.072214][ T5886] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 146.169178][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.193527][ T5886] usb 2-1: config 0 descriptor?? [ 146.206610][ T5886] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 146.219166][ T5886] dvb-usb: bulk message failed: -22 (3/0) [ 146.253654][ T5886] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 146.284312][ T5886] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 146.291490][ T5886] usb 2-1: media controller created [ 146.307892][ T5886] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 146.330983][ T5886] dvb-usb: bulk message failed: -22 (6/0) [ 146.356457][ T7050] netlink: 12 bytes leftover after parsing attributes in process `syz.2.378'. [ 146.368235][ T5886] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 146.384979][ T5886] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input12 [ 146.429418][ T5886] dvb-usb: schedule remote query interval to 150 msecs. [ 146.439036][ T5886] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 146.453770][ T5886] usb 2-1: USB disconnect, device number 14 [ 146.568318][ T5886] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 146.673473][ T5830] usb 5-1: USB disconnect, device number 23 [ 146.841076][ T7063] netlink: 8 bytes leftover after parsing attributes in process `syz.4.382'. [ 146.886303][ T1210] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 146.893392][ T24] usb 1-1: new low-speed USB device number 22 using dummy_hcd [ 147.080871][ T1210] ath9k_htc: Failed to initialize the device [ 147.163213][ T24] usb 1-1: Invalid ep0 maxpacket: 16 [ 147.243856][ T5886] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 147.296417][ T5830] usb 5-1: ath9k_htc: USB layer deinitialized [ 147.396564][ T24] usb 1-1: new low-speed USB device number 23 using dummy_hcd [ 147.468368][ T5886] usb 3-1: config 0 has no interfaces? [ 147.498311][ T5886] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 147.563696][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.580818][ T5886] usb 3-1: Product: syz [ 147.592968][ T5886] usb 3-1: Manufacturer: syz [ 147.602837][ T5886] usb 3-1: SerialNumber: syz [ 147.625352][ T5886] usb 3-1: config 0 descriptor?? [ 147.653399][ T5830] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 147.668953][ T24] usb 1-1: Invalid ep0 maxpacket: 16 [ 147.682226][ T24] usb usb1-port1: attempt power cycle [ 147.853363][ T5830] usb 5-1: config 0 has no interfaces? [ 147.876138][ T5830] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 147.886038][ T5830] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.905945][ T5830] usb 5-1: Product: syz [ 147.916861][ T5830] usb 5-1: Manufacturer: syz [ 147.928743][ T5830] usb 5-1: SerialNumber: syz [ 147.978089][ T5830] usb 5-1: config 0 descriptor?? [ 147.988305][ T7074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.013074][ T7074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.023627][ T24] usb 1-1: new low-speed USB device number 24 using dummy_hcd [ 148.065743][ T24] usb 1-1: Invalid ep0 maxpacket: 16 [ 148.086427][ T7074] netlink: 8 bytes leftover after parsing attributes in process `syz.2.381'. [ 148.193367][ T24] usb 1-1: new low-speed USB device number 25 using dummy_hcd [ 148.236175][ T7063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.247638][ T7063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.260145][ T7063] netlink: 8 bytes leftover after parsing attributes in process `syz.4.382'. [ 148.293383][ T24] usb 1-1: Invalid ep0 maxpacket: 16 [ 148.305634][ T24] usb usb1-port1: unable to enumerate USB device [ 149.152686][ T7088] netlink: 12 bytes leftover after parsing attributes in process `syz.3.390'. [ 149.268890][ T7090] netlink: 'syz.3.391': attribute type 1 has an invalid length. [ 149.278154][ T7090] netlink: 9 bytes leftover after parsing attributes in process `syz.3.391'. [ 149.337411][ T24] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 149.494851][ T24] usb 2-1: config 0 has an invalid interface number: 246 but max is 0 [ 149.503306][ T24] usb 2-1: config 0 has an invalid descriptor of length 168, skipping remainder of the config [ 149.538001][ T24] usb 2-1: config 0 has no interface number 0 [ 149.538116][ T7094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.393'. [ 149.567506][ T24] usb 2-1: New USB device found, idVendor=28a7, idProduct=71ab, bcdDevice=df.39 [ 149.576789][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.588690][ T24] usb 2-1: Product: syz [ 149.612713][ T24] usb 2-1: Manufacturer: syz [ 149.629676][ T24] usb 2-1: SerialNumber: syz [ 149.647418][ T24] usb 2-1: config 0 descriptor?? [ 149.661778][ T24] cdc_wdm 2-1:0.246: probe with driver cdc_wdm failed with error -22 [ 149.797923][ T24] usb 5-1: USB disconnect, device number 24 [ 149.950846][ T5888] usb 3-1: USB disconnect, device number 17 [ 150.001220][ T7105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.020875][ T7105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.080978][ T7108] x_tables: unsorted entry at hook 2 [ 150.182665][ T5830] usb 2-1: USB disconnect, device number 15 [ 150.190296][ T7112] __nla_validate_parse: 1 callbacks suppressed [ 150.190311][ T7112] netlink: 52 bytes leftover after parsing attributes in process `syz.3.400'. [ 150.262135][ T7114] netlink: 12 bytes leftover after parsing attributes in process `syz.3.401'. [ 150.453709][ T5888] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 150.583263][ T9] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 150.603242][ T5888] usb 3-1: Using ep0 maxpacket: 8 [ 150.609672][ T5888] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 150.620165][ T5888] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 150.629266][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.734792][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 150.763623][ T9] usb 4-1: config 0 has an invalid interface number: 235 but max is 0 [ 150.771822][ T9] usb 4-1: config 0 has no interface number 0 [ 150.834010][ T9] usb 4-1: New USB device found, idVendor=085a, idProduct=0009, bcdDevice=a3.47 [ 150.856502][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.861094][ T7122] netlink: 'syz.4.405': attribute type 28 has an invalid length. [ 150.889628][ T9] usb 4-1: Product: syz [ 150.894228][ T9] usb 4-1: Manufacturer: syz [ 150.899024][ T9] usb 4-1: SerialNumber: syz [ 150.914365][ T9] usb 4-1: config 0 descriptor?? [ 151.096825][ T7133] netlink: 16 bytes leftover after parsing attributes in process `syz.1.404'. [ 151.174485][ T9] kaweth 4-1:0.235: Firmware present in device. [ 151.349501][ T9] kaweth 4-1:0.235: Statistics collection: 0 [ 151.403723][ T9] kaweth 4-1:0.235: Multicast filter limit: 0 [ 151.413353][ T9] kaweth 4-1:0.235: MTU: 0 [ 151.421151][ T9] kaweth 4-1:0.235: Read MAC address 00:00:00:00:00:00 [ 151.543641][ T24] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 151.846509][ T5888] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 151.953296][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 152.074759][ T24] usb 5-1: config 0 has no interfaces? [ 152.093029][ T24] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 152.107332][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.149989][ T5888] usb 2-1: config 0 has no interfaces? [ 152.172241][ T5888] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 152.187363][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.196130][ T5888] usb 2-1: Product: syz [ 152.200442][ T5888] usb 2-1: Manufacturer: syz [ 152.270959][ T24] usb 5-1: Product: syz [ 152.276240][ T9] kaweth 4-1:0.235: Error setting SOFS wait [ 152.290495][ T24] usb 5-1: Manufacturer: syz [ 152.295366][ T24] usb 5-1: SerialNumber: syz [ 152.303182][ T24] usb 5-1: config 0 descriptor?? [ 152.361134][ T5888] usb 2-1: SerialNumber: syz [ 152.366243][ T9] kaweth 4-1:0.235: probe with driver kaweth failed with error -5 [ 152.384244][ T5888] usb 2-1: config 0 descriptor?? [ 152.529082][ T7135] dns_resolver: Unsupported content type (8) [ 152.564180][ T9] usb 4-1: USB disconnect, device number 23 [ 152.738482][ T30] audit: type=1326 audit(1748804080.963:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7145 comm="syz.0.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21cab8e969 code=0x7fc00000 [ 152.860757][ T7151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.873945][ T7151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.887066][ T7151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.409'. [ 152.974399][ T24] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 153.120994][ T24] usb 1-1: device descriptor read/64, error -71 [ 153.136031][ T1210] usb 3-1: USB disconnect, device number 18 [ 153.170099][ T7150] kvm: requested 5028 ns i8254 timer period limited to 200000 ns [ 153.222621][ T7150] kvm: pic: non byte read [ 153.241535][ T7150] kvm: pic: non byte read [ 153.249032][ T7150] kvm: pic: non byte read [ 153.255533][ T7150] kvm: pic: non byte read [ 153.376563][ T24] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 153.539594][ T7159] pim6reg: entered allmulticast mode [ 153.549916][ T7159] pim6reg: left allmulticast mode [ 153.625927][ T24] usb 1-1: device descriptor read/64, error -71 [ 153.733783][ T24] usb usb1-port1: attempt power cycle [ 153.993451][ T1210] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 154.172882][ T24] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 154.193808][ T24] usb 1-1: device descriptor read/8, error -71 [ 154.243357][ T1210] usb 4-1: Using ep0 maxpacket: 32 [ 154.249831][ T1210] usb 4-1: config 198 has an invalid descriptor of length 161, skipping remainder of the config [ 154.261663][ T1210] usb 4-1: config 198 has 0 interfaces, different from the descriptor's value: 2 [ 154.279630][ T1210] usb 4-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 154.290174][ T1210] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.305710][ T1210] usb 4-1: Product: syz [ 154.314502][ T1210] usb 4-1: Manufacturer: syz [ 154.325482][ T1210] usb 4-1: SerialNumber: syz [ 154.437163][ T24] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 154.468942][ T24] usb 1-1: device descriptor read/8, error -71 [ 154.546904][ T7161] netlink: 28 bytes leftover after parsing attributes in process `syz.3.414'. [ 154.568313][ T7161] netlink: 28 bytes leftover after parsing attributes in process `syz.3.414'. [ 154.589841][ T7161] team0: entered promiscuous mode [ 154.608936][ T7161] team_slave_0: entered promiscuous mode [ 154.622638][ T24] usb usb1-port1: unable to enumerate USB device [ 154.638292][ T7161] team_slave_1: entered promiscuous mode [ 154.689423][ T7161] team0: left promiscuous mode [ 154.694539][ T7161] team_slave_0: left promiscuous mode [ 154.703942][ T7167] netlink: 28 bytes leftover after parsing attributes in process `syz.2.417'. [ 154.716273][ T7161] team_slave_1: left promiscuous mode [ 154.851493][ T5888] usb 5-1: USB disconnect, device number 25 [ 154.924921][ T7171] xt_nfacct: accounting object `syz0' does not exists [ 154.971121][ T5884] usb 2-1: USB disconnect, device number 16 [ 155.070700][ T1210] usb 4-1: USB disconnect, device number 24 [ 155.478593][ T30] audit: type=1326 audit(1748804083.723:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7145 comm="syz.0.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f21cab8e969 code=0x7fc00000 [ 155.505785][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 155.563271][ T5888] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 155.580302][ T7186] sit0: entered promiscuous mode [ 155.591215][ T7186] netlink: 'syz.0.425': attribute type 1 has an invalid length. [ 155.599244][ T7186] netlink: 9 bytes leftover after parsing attributes in process `syz.0.425'. [ 155.663608][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 155.676684][ T9] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 155.690034][ T9] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 155.701457][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 155.731324][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 155.740969][ T5888] usb 5-1: Using ep0 maxpacket: 16 [ 155.750671][ T5888] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 155.763845][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.772427][ T5888] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 155.782786][ T9] usb 2-1: Product: 塽ᵂ楲質葿㑪沨돬畸衞퇚鵝戒ㆫ몍梼魥忧㨍롒畞둪ܧ䒞깟즽팣ﳄꊑ潺ℬ楔ṁ㈑ꚳ쯷➸嵳麊쮄栋ꬴ኷랏།짥ꂎ罶渚흇뭓斤鶒庱傏庌⬈ᠪ㡔늴폟୧옦嶑겧䨹͙ᙰ⭩싲폆ꈠ섦匍탹엀❲ⷊ觗팍簘⾭넙ꀖ䠙ᱻᾱ⌺Ꞃ浜‐꣙芼ꌄ투ք퐗囡쇇ૄ蠶苚꽾⠸﯂떦Ǐ [ 155.820071][ T5888] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 155.847149][ T9] usb 2-1: Manufacturer: 쮏Ჾ⿌蚕厅車ხ苸谥擁剧㋡ᎎ႙㐹饪ⱁߠ䚧역ᶌ죙膬ꟻ褽ꬭ꺬㜡띺탟학敖挿摛跱㈶뼔莩鄥桨奊㴀팼虥娪꾍戒᳗煞ꍠ㿢뚷엨 [ 155.868449][ T9] usb 2-1: SerialNumber: ꅜ菃앴⛑᯵鵋⏩ [ 155.868611][ T5888] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 155.885071][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.893085][ T5888] usb 5-1: Product: syz [ 155.898630][ T5888] usb 5-1: Manufacturer: syz [ 155.905209][ T5888] usb 5-1: SerialNumber: syz [ 156.293294][ T5885] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 156.321412][ T5888] usb 5-1: 0:2 : does not exist [ 156.463283][ T5885] usb 3-1: Using ep0 maxpacket: 8 [ 156.472400][ T5885] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 156.482294][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.491101][ T5885] usb 3-1: Product: syz [ 156.495438][ T5885] usb 3-1: Manufacturer: syz [ 156.500068][ T5885] usb 3-1: SerialNumber: syz [ 156.507853][ T5885] usb 3-1: config 0 descriptor?? [ 156.522545][ T5885] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 156.530822][ T5885] usb 3-1: setting power ON [ 156.535782][ T5885] dvb-usb: bulk message failed: -22 (2/0) [ 156.546297][ T5885] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 156.556207][ T5885] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 156.565025][ T5885] usb 3-1: media controller created [ 156.586995][ T5885] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 156.605841][ T5885] usb 3-1: selecting invalid altsetting 6 [ 156.611685][ T5885] usb 3-1: digital interface selection failed (-22) [ 156.618332][ T5885] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 156.628150][ T5885] usb 3-1: setting power OFF [ 156.632995][ T5885] dvb-usb: bulk message failed: -22 (2/0) [ 156.638913][ T5885] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 156.643701][ T1210] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 156.648312][ T5885] (NULL device *): no alternate interface [ 156.782662][ T7206] dvb-usb: bulk message failed: -22 (3/0) [ 156.796299][ T7206] dvb-usb: bulk message failed: -22 (3/0) [ 156.803326][ T1210] usb 4-1: device descriptor read/64, error -71 [ 156.934252][ T9] usb 2-1: 0:2 : does not exist [ 156.995846][ T9] usb 2-1: USB disconnect, device number 17 [ 157.066423][ T1210] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 157.110720][ T5978] udevd[5978]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 157.219528][ T1210] usb 4-1: device descriptor read/64, error -71 [ 157.225978][ T5884] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 157.245367][ T24] usb 5-1: USB disconnect, device number 26 [ 157.347024][ T1210] usb usb4-port1: attempt power cycle [ 157.423524][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 157.439317][ T5884] usb 1-1: config 0 has no interfaces? [ 157.450736][ T5884] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 157.466090][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.479736][ T5884] usb 1-1: Product: syz [ 157.493300][ T5884] usb 1-1: Manufacturer: syz [ 157.509374][ T5884] usb 1-1: SerialNumber: syz [ 157.518376][ T5884] usb 1-1: config 0 descriptor?? [ 157.583564][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 157.596484][ T9] usb 2-1: config 13 has an invalid interface number: 56 but max is 1 [ 157.616704][ T9] usb 2-1: config 13 has no interface number 1 [ 157.622900][ T9] usb 2-1: config 13 interface 56 has no altsetting 0 [ 157.647328][ T9] usb 2-1: New USB device found, idVendor=413c, idProduct=81a4, bcdDevice=65.93 [ 157.656446][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.667476][ T9] usb 2-1: Product: syz [ 157.677590][ T9] usb 2-1: Manufacturer: syz [ 157.682212][ T9] usb 2-1: SerialNumber: syz [ 157.693340][ T1210] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 157.724135][ T1210] usb 4-1: device descriptor read/8, error -71 [ 157.888970][ T7212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.916683][ T7203] netlink: 44 bytes leftover after parsing attributes in process `syz.1.432'. [ 157.929854][ T7212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.944704][ T7212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.433'. [ 157.983301][ T1210] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 158.004580][ T1210] usb 4-1: device descriptor read/8, error -71 [ 158.030356][ T9] usb 2-1: USB disconnect, device number 18 [ 158.113426][ T1210] usb usb4-port1: unable to enumerate USB device [ 158.233377][ T5902] usb 5-1: new low-speed USB device number 27 using dummy_hcd [ 158.393224][ T5902] usb 5-1: Invalid ep0 maxpacket: 16 [ 158.523274][ T5902] usb 5-1: new low-speed USB device number 28 using dummy_hcd [ 158.623000][ T7218] fuse: Bad value for 'user_id' [ 158.627978][ T7218] fuse: Bad value for 'user_id' [ 158.685467][ T5902] usb 5-1: Invalid ep0 maxpacket: 16 [ 158.693076][ T5902] usb usb5-port1: attempt power cycle [ 158.913236][ T5888] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 159.033235][ T5902] usb 5-1: new low-speed USB device number 29 using dummy_hcd [ 159.053825][ T5902] usb 5-1: Invalid ep0 maxpacket: 16 [ 159.066054][ T5888] usb 2-1: Using ep0 maxpacket: 32 [ 159.077212][ T5888] usb 2-1: config 198 has an invalid descriptor of length 161, skipping remainder of the config [ 159.087853][ T5885] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 159.097748][ T5888] usb 2-1: config 198 has 0 interfaces, different from the descriptor's value: 2 [ 159.117979][ T5888] usb 2-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 159.128538][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.138397][ T5885] usb 3-1: USB disconnect, device number 19 [ 159.162358][ T5888] usb 2-1: Product: syz [ 159.168656][ T5888] usb 2-1: Manufacturer: syz [ 159.175581][ T5888] usb 2-1: SerialNumber: syz [ 159.203330][ T5902] usb 5-1: new low-speed USB device number 30 using dummy_hcd [ 159.224165][ T5902] usb 5-1: Invalid ep0 maxpacket: 16 [ 159.233084][ T5902] usb usb5-port1: unable to enumerate USB device [ 159.403864][ T7220] netlink: 28 bytes leftover after parsing attributes in process `syz.1.437'. [ 159.417684][ T7227] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20001 [ 159.426825][ T7220] netlink: 28 bytes leftover after parsing attributes in process `syz.1.437'. [ 159.473095][ T7220] team0: entered promiscuous mode [ 159.485238][ T7220] team_slave_0: entered promiscuous mode [ 159.492328][ T7220] team_slave_1: entered promiscuous mode [ 159.508350][ T7220] team0: left promiscuous mode [ 159.515219][ T7220] team_slave_0: left promiscuous mode [ 159.520838][ T7220] team_slave_1: left promiscuous mode [ 159.535662][ T7227] netlink: 80 bytes leftover after parsing attributes in process `syz.2.440'. [ 159.546981][ T7227] netlink: 80 bytes leftover after parsing attributes in process `syz.2.440'. [ 159.585077][ T5888] usb 2-1: USB disconnect, device number 19 [ 159.851369][ T5884] usb 1-1: USB disconnect, device number 30 [ 159.867958][ T1210] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 159.949937][ T7237] netlink: 'syz.3.441': attribute type 27 has an invalid length. [ 159.958505][ T7237] sit0: left promiscuous mode [ 160.085651][ T1210] usb 3-1: Using ep0 maxpacket: 32 [ 160.092054][ T1210] usb 3-1: unable to get BOS descriptor or descriptor too short [ 160.101347][ T1210] usb 3-1: config 5 has an invalid interface number: 52 but max is 0 [ 160.111311][ T1210] usb 3-1: config 5 has no interface number 0 [ 160.118874][ T1210] usb 3-1: config 5 interface 52 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 160.149312][ T1210] usb 3-1: string descriptor 0 read error: -22 [ 160.155708][ T1210] usb 3-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=51.58 [ 160.166617][ T1210] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.186815][ T7227] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 160.196120][ T1210] aircable 3-1:5.52: aircable converter detected [ 160.209296][ T1210] usb 3-1: aircable converter now attached to ttyUSB0 [ 160.268611][ T7238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.289918][ T7238] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.314443][ T7238] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 160.337178][ T5884] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 160.398509][ T1210] usb 3-1: USB disconnect, device number 20 [ 160.411415][ T1210] aircable ttyUSB0: aircable converter now disconnected from ttyUSB0 [ 160.451268][ T1210] aircable 3-1:5.52: device disconnected [ 160.493207][ T5884] usb 1-1: Using ep0 maxpacket: 8 [ 160.500538][ T5884] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 160.693768][ T5884] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 160.715935][ T5884] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 160.726164][ T5884] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 160.739808][ T5884] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 160.780981][ T5884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.017716][ T5884] usb 1-1: GET_CAPABILITIES returned 0 [ 161.028731][ T5884] usbtmc 1-1:16.0: can't read capabilities [ 161.042235][ T7251] netlink: 4 bytes leftover after parsing attributes in process `syz.4.446'. [ 161.093648][ T7254] netlink: 12 bytes leftover after parsing attributes in process `syz.4.446'. [ 161.197172][ T7256] netlink: 4 bytes leftover after parsing attributes in process `syz.1.447'. [ 165.079823][ C1] sched: DL replenish lagged too much [ 194.365779][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.380084][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.236248][ T5829] Bluetooth: hci2: command 0x0406 tx timeout [ 262.242322][ T5829] Bluetooth: hci1: command 0x0406 tx timeout [ 262.256988][ T5831] Bluetooth: hci4: command 0x0406 tx timeout [ 262.271876][ T5831] Bluetooth: hci0: command 0x0406 tx timeout [ 262.339065][ T5843] Bluetooth: hci3: command 0x0406 tx timeout [ 266.213096][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 266.220078][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7232/1:b..l [ 266.228363][ C0] rcu: (detected by 0, t=10503 jiffies, g=20737, q=1745 ncpus=2) [ 266.236184][ C0] task:syz.3.441 state:R running task stack:24472 pid:7232 tgid:7228 ppid:5847 task_flags:0x400040 flags:0x00004006 [ 266.250480][ C0] Call Trace: [ 266.253784][ C0] [ 266.256731][ C0] __schedule+0x16f5/0x4d00 [ 266.261281][ C0] ? preempt_schedule_irq+0xb5/0x150 [ 266.266591][ C0] ? __pfx___schedule+0x10/0x10 [ 266.271474][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 266.276782][ C0] preempt_schedule_irq+0xb5/0x150 [ 266.281915][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 266.287664][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 266.293495][ C0] irqentry_exit+0x6f/0x90 [ 266.297926][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 266.303919][ C0] RIP: 0010:unwind_next_frame+0xb3f/0x2390 [ 266.309743][ C0] Code: 9c 24 88 00 00 00 49 8d 5c 24 f8 4d 8b 66 10 48 b8 00 00 00 00 00 fc ff df 48 8b 4c 24 20 0f b6 04 01 84 c0 0f 85 85 13 00 00 <41> 83 3e 00 0f 95 c0 49 39 df 0f 96 c1 20 c1 49 39 dc 0f 97 c0 20 [ 266.329364][ C0] RSP: 0018:ffffc90003c3eb58 EFLAGS: 00000246 [ 266.335445][ C0] RAX: 0000000000000000 RBX: ffffc90003c3f250 RCX: 1ffff92000787d85 [ 266.343423][ C0] RDX: ffffffff903f3fb8 RSI: 0000000000000002 RDI: ffffffff8be26ee0 [ 266.351400][ C0] RBP: 1ffff92000787d86 R08: 0000000000000001 R09: ffffffff81727e15 [ 266.359379][ C0] R10: ffffc90003c3ec78 R11: ffffffff81acd580 R12: ffffc90003c40000 [ 266.367359][ C0] R13: 1ffff92000787d87 R14: ffffc90003c3ec28 R15: ffffc90003c38000 [ 266.375350][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 266.381524][ C0] ? unwind_next_frame+0xa5/0x2390 [ 266.386658][ C0] ? unwind_next_frame+0xd4/0x2390 [ 266.391786][ C0] ? unwind_next_frame+0xa5/0x2390 [ 266.396910][ C0] ? evict+0x797/0x9c0 [ 266.400992][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 266.407162][ C0] arch_stack_walk+0x11c/0x150 [ 266.411944][ C0] ? evict+0x797/0x9c0 [ 266.416032][ C0] stack_trace_save+0x9c/0xe0 [ 266.420722][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 266.426109][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 266.431407][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 266.436619][ C0] kasan_save_stack+0x3e/0x60 [ 266.441307][ C0] ? kasan_save_stack+0x3e/0x60 [ 266.446168][ C0] ? kasan_record_aux_stack+0xbd/0xd0 [ 266.451546][ C0] ? call_rcu+0x142/0x990 [ 266.455883][ C0] ? __destroy_inode+0x2da/0x670 [ 266.460833][ C0] ? evict+0x797/0x9c0 [ 266.464958][ C0] kasan_record_aux_stack+0xbd/0xd0 [ 266.470168][ C0] ? __pfx_inode_free_by_rcu+0x10/0x10 [ 266.475636][ C0] call_rcu+0x142/0x990 [ 266.479813][ C0] ? bpf_inode_storage_free+0x77/0x2b0 [ 266.485283][ C0] ? __pfx_migrate_enable+0x10/0x10 [ 266.490498][ C0] ? __pfx_call_rcu+0x10/0x10 [ 266.495190][ C0] ? bpf_inode_storage_free+0x77/0x2b0 [ 266.500667][ C0] ? bpf_inode_storage_free+0x77/0x2b0 [ 266.506128][ C0] ? bpf_inode_storage_free+0x77/0x2b0 [ 266.511598][ C0] __destroy_inode+0x2da/0x670 [ 266.516381][ C0] evict+0x797/0x9c0 [ 266.520302][ C0] ? __pfx_evict+0x10/0x10 [ 266.524727][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 266.529934][ C0] ? _raw_spin_unlock+0x28/0x50 [ 266.534793][ C0] ? iput+0x6d8/0x9d0 [ 266.538788][ C0] __dentry_kill+0x209/0x660 [ 266.543390][ C0] ? shrink_kill+0x8d/0x2c0 [ 266.547900][ C0] shrink_kill+0xa9/0x2c0 [ 266.552239][ C0] shrink_dentry_list+0x2e0/0x5e0 [ 266.557276][ C0] prune_dcache_sb+0x10e/0x180 [ 266.562051][ C0] ? __pfx_prune_dcache_sb+0x10/0x10 [ 266.567347][ C0] ? list_lru_count_one+0x27/0x2c0 [ 266.572466][ C0] ? list_lru_count_one+0x264/0x2c0 [ 266.577680][ C0] super_cache_scan+0x369/0x4b0 [ 266.582553][ C0] do_shrink_slab+0x6ef/0x1110 [ 266.587340][ C0] ? shrink_slab+0x129/0x10d0 [ 266.592023][ C0] shrink_slab+0xd74/0x10d0 [ 266.596534][ C0] ? shrink_slab+0x129/0x10d0 [ 266.601232][ C0] ? __pfx_shrink_slab+0x10/0x10 [ 266.606181][ C0] ? mem_cgroup_iter+0x3b/0x460 [ 266.611050][ C0] ? mem_cgroup_iter+0x3e7/0x460 [ 266.615994][ C0] ? mem_cgroup_iter+0x3b/0x460 [ 266.620857][ C0] drop_slab+0x14e/0x290 [ 266.625115][ C0] drop_caches_sysctl_handler+0xc7/0x170 [ 266.630767][ C0] proc_sys_call_handler+0x50c/0x7c0 [ 266.636071][ C0] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 266.641889][ C0] ? __asan_memset+0x22/0x50 [ 266.646494][ C0] iter_file_splice_write+0x93a/0x1000 [ 266.651995][ C0] ? __pfx_iter_file_splice_write+0x10/0x10 [ 266.657905][ C0] ? rcu_read_lock_any_held+0xb3/0x120 [ 266.663391][ C0] ? __pfx_iter_file_splice_write+0x10/0x10 [ 266.669299][ C0] direct_splice_actor+0x101/0x160 [ 266.674430][ C0] splice_direct_to_actor+0x5a5/0xcc0 [ 266.679838][ C0] ? __pfx_direct_splice_actor+0x10/0x10 [ 266.685486][ C0] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 266.691399][ C0] ? __pfx_aa_file_perm+0x10/0x10 [ 266.696444][ C0] do_splice_direct+0x181/0x270 [ 266.701314][ C0] ? __pfx_do_splice_direct+0x10/0x10 [ 266.706702][ C0] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 266.712609][ C0] ? rw_verify_area+0x258/0x650 [ 266.717477][ C0] do_sendfile+0x4da/0x7e0 [ 266.721910][ C0] ? __pfx_do_sendfile+0x10/0x10 [ 266.726870][ C0] __se_sys_sendfile64+0xd9/0x190 [ 266.731903][ C0] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 266.737538][ C0] ? rcu_is_watching+0x15/0xb0 [ 266.742318][ C0] ? do_syscall_64+0xbe/0x3b0 [ 266.747016][ C0] do_syscall_64+0xfa/0x3b0 [ 266.751532][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 266.756739][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.762814][ C0] ? clear_bhb_loop+0x60/0xb0 [ 266.767500][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.773399][ C0] RIP: 0033:0x7f76f7b8e969 [ 266.777832][ C0] RSP: 002b:00007f76f59b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 266.786261][ C0] RAX: ffffffffffffffda RBX: 00007f76f7db6160 RCX: 00007f76f7b8e969 [ 266.794238][ C0] RDX: 0000200000002080 RSI: 0000000000000008 RDI: 0000000000000009 [ 266.802218][ C0] RBP: 00007f76f7c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 266.810198][ C0] R10: 000000000000023b R11: 0000000000000246 R12: 0000000000000000 [ 266.818175][ C0] R13: 0000000000000000 R14: 00007f76f7db6160 R15: 00007f76f7edfa28 [ 266.826173][ C0] [ 267.705834][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 267.719441][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 268.750768][ T7233] syz.3.441 (7233): drop_caches: 2