last executing test programs: 13.302654338s ago: executing program 0 (id=653): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x30, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}}}}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1c0002, 0x0) write$vga_arbiter(r2, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x1b) writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000480)='R', 0x1}, {0x0}], 0x2) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ptrace(0x10, 0x1) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000), 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000000) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) 12.614550308s ago: executing program 1 (id=655): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x6, 0x1, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, ["", "", ""]}, 0x14}}, 0x800) landlock_restrict_self(0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) migrate_pages(0x0, 0x8, &(0x7f0000000280)=0xd, &(0x7f00000003c0)=0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x1}) sendmmsg$unix(r5, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="e9", 0x1}], 0x1}}], 0x1, 0x40815) sendmmsg$inet(r4, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000700)}, {&(0x7f0000000d40)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa438689d28748c22ebfe2772d64b64e706d94864d785dcc6b24fff7858b2a4e", 0xe1}, {&(0x7f0000000b80)}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x2, 0x400e0) fsmount(r3, 0x1, 0x9a) sendto$inet(r4, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) 11.104171371s ago: executing program 3 (id=659): munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) syz_io_uring_setup(0x23d, &(0x7f0000000300)={0x0, 0xa57b, 0x40, 0x0, 0x1d4}, 0x0, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="c0400001", @ANYRES16=0x0, @ANYBLOB="000000000000000000001b000000200022801c000080080002000000000008000400000000000800050000000000050092000000000007002100616100007c00228034000080080003000000000008000500000000000800020000000000080003000000000008000200000000000800040000000000440000800800040000000000080007000000000008000600000000000800050000000000080001000000000008000200000000000800030000000000080007"], 0xc0}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180), 0xfefc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000002000/0x3000)=nil, &(0x7f0000000000/0xe000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000008000/0x2000)=nil, &(0x7f0000260000/0x4000)=nil, &(0x7f0000008000/0x3000)=nil, &(0x7f0000947000/0x1000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000969000/0x1000)=nil, &(0x7f0000663000/0x1000)=nil, &(0x7f000000c000/0x2000)=nil, 0x0, 0x0, r0}, 0x68) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x7c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x4c, 0x2, [@TCA_FLOW_POLICE={0x48, 0xa, 0x0, 0x1, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x3ff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x0, 0x0, 0x1, 0x5, {0x9, 0x0, 0x401, 0xfffb, 0x8000}, {0x9, 0x0, 0x4, 0x2, 0x66f, 0x5}, 0x6, 0x4, 0x3c2}}]}]}}]}, 0x7c}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x5a, 0x8c, 0xf1, 0x10, 0xeb1, 0x7007, 0x202, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6, 0x1c, 0x45}}]}}]}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=ANY=[@ANYBLOB="980200001e0001002abd7000fddbdf25fe8000000000000000000000000000bb000004d302003c00fc0100000000000000000000000000010700000000350000080016000010000010000a"], 0x298}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000b4321f00000000000a00630018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000100b706000014000000b703000000060000850000002f000000bf0900000000000055090100000000007b00000000000000bf91000000000000b702000000000000850000000c000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x7, 0x1000, &(0x7f0000001e40)=""/4096, 0x40f00, 0x8}, 0x94) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$FICLONE(r6, 0x40049409, r7) 10.707927059s ago: executing program 1 (id=661): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)={0x48, r1, 0x1, 0x0, 0x10, {}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xa4a}}, './file0\x00'}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0x3ff, 0x0, 0x34324258, 0x8, 0x0, [{0x8, 0xf}, {0x8, 0x29f6ebcd}, {0xd, 0x8}, {0x5, 0x8}, {0x2, 0x3}, {0x5, 0x4}, {0x6, 0x409}, {0x10001, 0x1800000}], 0x0, 0xd, 0x7, 0x3078182a3427730f, 0x1}}) newfstatat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', &(0x7f0000000a40), 0x6000) 10.376610841s ago: executing program 0 (id=663): socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffe, 0xfffffffc}, 0x0) (async, rerun: 32) r2 = getpid() (rerun: 32) syz_pidfd_open(r2, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async, rerun: 32) socket$inet_icmp_raw(0x2, 0x3, 0x1) (rerun: 32) r3 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240), 0x4000095, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, &(0x7f0000000180), &(0x7f0000000380)}, 0x20) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r4, 0x890c, &(0x7f0000000000)=@generic={0x0, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x8) (async, rerun: 64) r5 = socket(0x5, 0x2, 0x569) (async, rerun: 64) r6 = open$dir(&(0x7f0000000700)='./file0\x00', 0x22c401, 0x25) mkdirat(r6, 0x0, 0x105) write(r5, 0x0, 0x0) (async, rerun: 64) sendmsg$rds(r3, 0x0, 0x90) (async, rerun: 64) socket$can_bcm(0x1d, 0x2, 0x2) (async) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, 0x0) (async) socket$inet(0x2, 0x80001, 0x84) (async) syz_emit_ethernet(0x45, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x37, 0x0, 0x2, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c"}}}}}, 0x0) (async, rerun: 64) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xd6, 0x0, 0x6, 0x4, 0x10, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0xffffffffffffffff, 0x5, 0x0, 0xbdb], 0x1, 0x3e5254}) (async, rerun: 64) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x1000000000000e) (async) syz_open_dev$I2C(&(0x7f0000000180), 0x0, 0x0) 10.360887341s ago: executing program 1 (id=664): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x480}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 10.17563572s ago: executing program 4 (id=665): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x178}}, 0x0) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x6, 0x0, 0x0, "5debca561a5fbf61048955f6f876b2ff"}) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r2, r2, r2}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) 10.095851513s ago: executing program 1 (id=666): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) statx(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x100, 0x20, &(0x7f0000000440)) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000540)={'syztnl0\x00', r3, 0x29, 0x45, 0x9, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x2e}, 0x20, 0x8000, 0x745f, 0x8001}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x7, 0x10, 0x0, 0x0, 0xb47, 0x9, 0x8, 0xffffeffc, 0x3}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x0, &(0x7f0000000280)}, 0x10) r4 = socket(0x8000000010, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000040000000000000000f6ffffffffffffff00000000000000"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r5, 0x94, &(0x7f0000000900)}, 0x10) write(r4, &(0x7f00000002c0)="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", 0xfc) r6 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r7 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r6) writev(r7, &(0x7f0000000600)=[{&(0x7f0000000040)="01f18efba406af802992bd", 0xb}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r8 = socket(0x840000000002, 0x3, 0x100) connect$inet(r8, &(0x7f0000000400)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r8, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r9, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) 8.393881318s ago: executing program 0 (id=667): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000140)={0x1, 'ip6tnl0\x00', {}, 0x7ff}) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f907, 0x4, '\x00', @p_u8=&(0x7f0000000180)}}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000440)={0x1, @pix_mp={0x62, 0x1, 0x3031334d, 0x3, 0xa, [{0x3, 0x6}, {0x2, 0x2}, {0x3, 0x411}, {0x10001, 0x8}, {0x6, 0x8}, {0x4, 0xd}, {0x8, 0xfffffff8}, {0x5, 0x1}], 0xc, 0x2, 0x1, 0x0, 0x2}}) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e22, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xef}}, 0x7, 0x101, 0x9, 0x7fffffff, 0x1f, 0x1}, &(0x7f0000000180)=0x9c) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@bridge_setlink={0x2b4, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r5}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x5, 0x0, 0x1, {0xc, 0x5, 0x0, 0x1, [{0x8}]}}]}, @IFLA_VF_PORTS={0x1c8, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "714abbd2547de97cbbf6efb226f19bf9"}, @IFLA_PORT_PROFILE={0xd, 0x2, ':(\x8e^[[Z@\x00'}]}, {0x60, 0x7, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "293a02149f3b75a67093c28fd6f55a23"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "e48f01e49713f0c2d839f940d9f088d8"}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_PROFILE={0x13, 0x2, 'bridge_slave_0\x00'}, @IFLA_PORT_PROFILE={0x7, 0x2, '):\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "4d2906d0880fc8acc30fe2020f984967"}]}, {0x50, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "a1085e7df341b9dc3d8008a2fe5bdaad"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "9c7e472c916020fe41bcc5aa8f56c947"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "80ab8be51421cfa3c9e5cbfe8217e0af"}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_VF={0x8}]}, {0x60, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_PROFILE={0xc, 0x2, 'syztnl0\x00'}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0x13, 0x2, 'bridge_slave_0\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "e078d277f38ed3a40a448f3f6b6763e8"}]}, {0x30, 0xc, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x2c}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_PROFILE={0x6, 0x2, '%\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x8, "eb052fcd3dd4d3e8bbcbf1de857c0e1c"}]}, {0x3c, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "b2112a97bf9704ee57915340334b8271"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "e8635392a70f36f95f4b9b352920ebec"}]}]}, @IFLA_GSO_MAX_SEGS={0x8}, @IFLA_AF_SPEC={0xb0, 0x1a, 0x0, 0x1, [@AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET6={0x2c, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}, @IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, @AF_INET6={0x60, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @remote}, @IFLA_INET6_TOKEN={0x14, 0x7, @loopback}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @private2}, @IFLA_INET6_ADDR_GEN_MODE={0x5}]}]}]}, 0x2b4}}, 0x0) r7 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000040)={0x0, 0x2, 0x0, "e5e81571c97b166978ff61fcfd2409b2b73e0f936ed774de107de8a9041b5113"}) r8 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000080)={r8, 0x0, r8}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'blake2b-384-generic\x00'}}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x8417f, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 7.91572393s ago: executing program 3 (id=668): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = syz_open_dev$sndctrl(0x0, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd, 0x0, 0x20000000, 0x801e, 0x0, 0x1, {0x1}}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f00000000c0)='{', 0x1, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000200)="d5", 0x1, 0xc0400d1, 0x0, 0x0) shutdown(r3, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0xc, &(0x7f0000000140)=0x5, 0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x2, 0x0, 0x40000000000, 0xffffffffffffffff, 0xffffffefffffffff, 0x0, 0x4, 0x0, 0x7, 0x4, 0x0, 0x0, 0xfffffeffbfffffff, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x6, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x40, 0xffffffff, 0xfffffffffffffffd, 0x100200000, 0x4, 0x6, 0x0, 0xfffffffffffffff9, 0x0, 0x9, 0x1, 0x4010000, 0x1000, 0x0, 0x3, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x10000, 0x7785, 0x0, 0x24, 0x5, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x1000000000, 0x0, 0x80000000000000, 0x0, 0xfffffffffffffffe, 0x0, 0x1, 0xfffffffffffffffe, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x400000000, 0x1000000000000000, 0xfffffffffffffffd, 0x0, 0x0, 0xcf9, 0x100, 0x81, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x2, 0x100000000000, 0x0, 0x3, 0x2, 0x0, 0x7, 0x20000c0c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x20000000, 0x6, 0x80]}) r4 = socket$packet(0x11, 0x3, 0x300) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, 0x0) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) setsockopt$packet_int(r4, 0x107, 0xe, &(0x7f00000001c0)=0x800002, 0x4) socket$netlink(0x10, 0x3, 0x4) mremap(&(0x7f000080a000/0x1000)=nil, 0x1000, 0x800000, 0x7, &(0x7f0000130000/0x800000)=nil) 6.491531866s ago: executing program 2 (id=670): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000300)=@filter={'filter\x00', 0xe, 0x4, 0x3f0, 0xffffffff, 0x238, 0x98, 0x0, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, &(0x7f00000000c0), {[{{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff, 0xffffff00, 'virt_wifi0\x00', 'ipvlan0\x00', {}, {0xff}, 0x67, 0x0, 0x27}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ip={@broadcast, @private=0xa010100, 0xffffffff, 0xffffffff, 'batadv_slave_1\x00', 'wg0\x00', {}, {}, 0x33, 0x6, 0x21}, 0x0, 0x178, 0x1a0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x9, 0x7, 'bm\x00', "e9700ca5b961ee734d8b1c6fe823b21d5602ddab1de6f556d3a6f614e057f58064b7e40f553f4e28f989173cbee5b6928e6b96dc0d2c40b575bf2a1f52f6737709765d37ed35c7b177ccd35cd02ea0c1b2a7687030d62fa37413b9e7cd0923ded423db9185c3b2b0def6a17303e75134dce16cde83a411658bbafde526fb8da5", 0x9, 0x1, {0x5d3}}}, @common=@unspec=@nfacct={{0x48}, {'syz1\x00', 0xd}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "1564"}}, @common=@ttl={{0x28}, {0x0, 0x33}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @local, 0x7, 0x0, [0x30, 0x16, 0x25, 0x26, 0x2, 0x16, 0xd, 0x27, 0x2c, 0x22, 0xe, 0x2d, 0x3, 0x3, 0x3b, 0x5], 0x2, 0x50000000}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x34, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x39}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) 6.328197002s ago: executing program 4 (id=671): r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000002240)={'ip6_vti0\x00', &(0x7f00000021c0)={'ip6_vti0\x00', r5, 0x2f, 0x2, 0x0, 0xa, 0x22, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7800, 0x700, 0x7d6, 0x8133}}) setsockopt$MRT6_DEL_MIF(r3, 0x29, 0xcb, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, r5, 0x3}, 0xc) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r6 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x1, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, r8, 0x2dc, 0x40011}, [@IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x2c}}, 0x800) io_uring_enter(r0, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x110, 0x0, 0x0, 0x4) 5.985397147s ago: executing program 2 (id=672): socket(0x10, 0x803, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) ppoll(&(0x7f0000000100)=[{r0, 0x1}], 0x1, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$P9_RSTATu(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x458) socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, 0x0, 0x0) syz_usb_connect(0x3, 0xf5, 0x0, 0x0) 5.585592691s ago: executing program 1 (id=673): r0 = socket(0x21, 0x5, 0xffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010b00000000000000000e00000008000300", @ANYRES32], 0x1c}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, 0x0, 0x20040001) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000006f80)=ANY=[@ANYBLOB="a03700002d00010026bd7000fcdbdf250400000005000b00", @ANYRES32, @ANYBLOB="81120c"], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) unshare(0x50000) 5.473528229s ago: executing program 4 (id=674): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x1, 0x80, 0x8b, 0x10000, {{0x9, 0x4, 0x3, 0x8, 0x24, 0x65, 0x0, 0x3, 0x29, 0x0, @empty, @multicast1, {[@lsrr={0x83, 0xb, 0x21, [@multicast2, @local]}, @noop, @generic={0x83, 0x4, "1438"}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x6d014, 0xa2041}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_MIN_LINKS={0x8, 0x12, 0xfffffff8}, @IFLA_BOND_PRIMARY={0x8, 0xb, r1}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) 5.063250728s ago: executing program 3 (id=675): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000240)=[@in6={0xa, 0x4e22, 0x401, @loopback, 0x9}], 0x1c) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x4, 0xbfdffffc}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r5 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x801}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_setup(0x2402, &(0x7f0000000240)={0x0, 0x0, 0x10000, 0x2, 0xe1}, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r8, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100}) io_uring_enter(r5, 0x10da, 0x9c3c, 0x6d, 0x0, 0x0) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2}, 0x6e) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) 4.999870614s ago: executing program 2 (id=676): syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x101440, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000180)={0x0, 0x5}, 0x8) syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff0204000000000000000000000000000000000000080000", 0x18) socket$tipc(0x1e, 0x5, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, 0x0, 0x0, 0x2, 0x0) 4.937121886s ago: executing program 0 (id=677): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x1ffc, 0x2000003}) link(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='./file1\x00') (async) link(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='./file1\x00') r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000500070002000000"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000500070002000000"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r6 = socket(0x27, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r6, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=@delqdisc={0x1cc, 0x25, 0x200, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x2, 0xfff1}, {0xfff9, 0x7}, {0x1, 0xfffb}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xd}, @qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x2, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x862f}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_RATE={0x6, 0x5, {0x5, 0x8}}, @qdisc_kind_options=@q_gred={{0x9}, {0xc, 0x2, [@TCA_GRED_MAX_P={0x8}]}}, @TCA_STAB={0x54, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xc0, 0x1, 0x5, 0x7, 0x2, 0x1, 0x3, 0x6}}, {0x10, 0x2, [0x7, 0x8, 0x1, 0x0, 0x3, 0x2]}}, {{0x1c, 0x1, {0x7, 0x80, 0x1, 0x3, 0x1, 0x800, 0x49b5, 0x1}}, {0x6, 0x2, [0x2]}}]}, @TCA_STAB={0xfc, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x1, 0xfa56, 0x0, 0x2, 0x7, 0x8, 0x3}}, {0xa, 0x2, [0x9, 0x7ff, 0x2]}}, {{0x1c, 0x1, {0x90, 0x2, 0x2, 0x2, 0x1, 0x0, 0x9, 0x5}}, {0xe, 0x2, [0x40, 0x6ed, 0xf23, 0xffff, 0x6]}}, {{0x1c, 0x1, {0x2, 0x55, 0x8, 0xfffffffa, 0x2, 0x9, 0x7, 0x3}}, {0xa, 0x2, [0x3, 0x4, 0x9]}}, {{0x1c, 0x1, {0xad, 0x4, 0x5, 0x1, 0x2, 0x2, 0x1b5d, 0x5}}, {0xe, 0x2, [0x3, 0x3e0, 0x4db, 0x40, 0x964]}}, {{0x1c, 0x1, {0xc, 0xf2, 0x70, 0x5, 0x1, 0x5, 0xa, 0x6}}, {0x10, 0x2, [0x2, 0x7f, 0x457d, 0xffff, 0x5, 0x4]}}, {{0x1c, 0x1, {0x4, 0x9, 0x0, 0xc, 0x0, 0xf6, 0x0, 0x2}}, {0x8, 0x2, [0x8, 0x7f]}}]}, @qdisc_kind_options=@q_blackhole={0xe}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x4}, 0x4804) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f00000005c0), 0x10) recvmmsg(r8, &(0x7f0000001000)=[{{&(0x7f0000000040)=@l2tp={0x2, 0x0, @remote}, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)=""/53}]}, 0x3ff}, {{&(0x7f00000001c0)=@tipc=@id, 0x0, &(0x7f0000000940)=[{&(0x7f0000000280)=""/41}, {&(0x7f0000000400)=""/160}, {&(0x7f0000000340)=""/62}, {&(0x7f00000004c0)=""/73}, {&(0x7f0000000600)=""/201}, {&(0x7f0000000540)=""/15}, {&(0x7f0000000580)=""/1}, {&(0x7f0000000700)=""/189}, {&(0x7f00000007c0)=""/168}, {&(0x7f0000000880)=""/145}], 0x0, &(0x7f0000000a00)=""/146}, 0x4}, {{&(0x7f0000000ac0)=@isdn, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000b40)=""/26}, {&(0x7f0000000b80)=""/232}, {&(0x7f0000000c80)=""/88}, {&(0x7f0000000d00)=""/46}, {&(0x7f0000000d40)=""/224}, {&(0x7f0000000e40)=""/111}], 0x0, &(0x7f0000000f40)=""/168}}], 0xde0fddea64781a, 0x10002, 0x0) (async) recvmmsg(r8, &(0x7f0000001000)=[{{&(0x7f0000000040)=@l2tp={0x2, 0x0, @remote}, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)=""/53}]}, 0x3ff}, {{&(0x7f00000001c0)=@tipc=@id, 0x0, &(0x7f0000000940)=[{&(0x7f0000000280)=""/41}, {&(0x7f0000000400)=""/160}, {&(0x7f0000000340)=""/62}, {&(0x7f00000004c0)=""/73}, {&(0x7f0000000600)=""/201}, {&(0x7f0000000540)=""/15}, {&(0x7f0000000580)=""/1}, {&(0x7f0000000700)=""/189}, {&(0x7f00000007c0)=""/168}, {&(0x7f0000000880)=""/145}], 0x0, &(0x7f0000000a00)=""/146}, 0x4}, {{&(0x7f0000000ac0)=@isdn, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000b40)=""/26}, {&(0x7f0000000b80)=""/232}, {&(0x7f0000000c80)=""/88}, {&(0x7f0000000d00)=""/46}, {&(0x7f0000000d40)=""/224}, {&(0x7f0000000e40)=""/111}], 0x0, &(0x7f0000000f40)=""/168}}], 0xde0fddea64781a, 0x10002, 0x0) sendmsg$can_bcm(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) (async) sendmsg$can_bcm(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) r9 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x485000, 0x0) r10 = dup(r9) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x0, 0x0, 0x0) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) (async) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x110, r1, 0x10000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) 4.906572091s ago: executing program 4 (id=678): r0 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x0, 0x3}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) syz_usb_connect(0x2, 0x3d5, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff5, 0x9, 0x6, 0x6, 0xb87}, 0x6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x90}, 0x1, 0x0, 0x0, 0x2000080d}, 0x24000000) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RENAMEAT={0x23, 0x3a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x1}) io_uring_enter(r0, 0x48e9, 0x0, 0x2, 0x0, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x70a, 0x183e, 0x30314142, 0x6, 0x9, [{0x8f, 0xf}, {0x6, 0x5}, {0x2, 0x7}, {0x400, 0x7fff}, {0x7fffffff, 0xffffff78}, {0x5, 0xfdfd}, {0xfffffffb, 0x10}, {0xffff, 0x400003}], 0x9, 0x2, 0x2, 0x1, 0x6}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000140)={'netdevsim0\x00', @multicast}) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)=ANY=[@ANYBLOB="2400000001010102000000000000000043eb317b00000002060012400001000006001240"], 0x24}, 0x1, 0x0, 0x0, 0x20044850}, 0x20088080) syz_clone(0x0, &(0x7f00000001c0)="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", 0x1000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000011c0)="31907a909f668c66e7f822e9d29b53e7f0c68fc38a332480770fc3eb27c67d86bfae9b672ccc59ab5af2fcb408e80dcc8c68a1915e6c582f7e19cb26ea7b5c8c0fc1c6004de3cea5d50f1e9b15d7bd44b469ab4217a0145d663c9e65f0756f824356609b6863ac4d586fca2b48b1dc301fda86ca075dfdb7dd4173e87bde57ec665d084f03f90f1ef2acac1c126567c2f4fcf1dcfcd1d3a75a97ab38e2ef6dd82958ba8ac2e92b9ae3cbb4b8ac61bca2570cc8") 4.455909381s ago: executing program 0 (id=679): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x6, 0x1, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, ["", "", ""]}, 0x14}}, 0x800) landlock_restrict_self(0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) migrate_pages(0x0, 0x8, &(0x7f0000000280)=0xd, &(0x7f00000003c0)=0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setownex(r6, 0xf, &(0x7f0000000180)={0x1}) sendmmsg$unix(r5, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="e9", 0x1}], 0x1}}], 0x1, 0x40815) sendmmsg$inet(r4, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000700)}, {&(0x7f0000000d40)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa438689d28748c22ebfe2772d64b64e706d94864d785dcc6b24fff7858b2a4e", 0xe1}, {&(0x7f0000000b80)}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x2, 0x400e0) fsmount(r3, 0x1, 0x9a) sendto$inet(r4, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) 3.975810226s ago: executing program 3 (id=680): r0 = socket(0x40000000015, 0x5, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00"], 0x0) (async) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0x78, 0x0, 0x0) bind$inet(r0, 0x0, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x6, 0x242) fsetxattr$security_capability(r3, &(0x7f0000001cc0), &(0x7f0000001d00)=@v2={0x2000000, [{0x101, 0x7}, {0x4, 0x20000000}]}, 0x14, 0x1) write$USERIO_CMD_SEND_INTERRUPT(r3, &(0x7f0000001d80)={0x2, 0x4}, 0x2) (async) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400d4}, 0x40001) (async) timer_create(0x3, &(0x7f0000000480)={0x0, 0x24, 0x4, @thr={&(0x7f0000000500)="2a92ceb59a34d94f24ebead77bf4b312e2a3ee78b8a06bc1b9dc1095dace325f832f8ee8234db59b01a33b3a24e7f707b69beb29e4c187754a903a1ad5f2c40fe1811dd0d224502acb7591346514e1e9be86a8ece049165d8184b9f8dc6a1f8bb19672cc4e423ad4cd0b2640e9b7", &(0x7f00000008c0)="f9646c6b81f8390f4f65775d570f5c805b77b0d8cbd9d380dd8e708a82137f6163a5af9c1932ccb2758397d628caa83a4a5a1e69a1043e3971328725bcb103589bbf9ad99c0bdc389761f34fff4118be349861bab133d6bf9b4a1c1a0144d8e962c48aea0056c56815bb63943c20651b8c6a2ad09c070c83eff1f601189a0be908149ba4cd62c1a8e730f0d0c02f5aa89532b1290a8032126f9f2b003a8fc320282428694a2babf6a2cb09409c3615c11ef9735783503fc77db5235ed3cf7eb143345770c0940a684b61da46146ace2ebadc4d46a7013b744230ffc19bb0d2176399e936a366fee98ac668a2"}}, &(0x7f0000044000)) (async) timer_settime(0x0, 0x1, 0x0, 0x0) clock_gettime(0x0, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = memfd_create(&(0x7f0000000140)='\xdd#\x00\xe6Z\x00\xafq%\xa5\x83\xa6#\r\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\xf9\xff\xff\xff\x00\x17?$^\xe1Ob\xe1Y\x03\x00\x00\x00\x00\x00\x00\x00\xce\xe5\x19THP\xf4O\xe2\x9f\xd9\xae\xcf>/\xdc\xaa<\x96\xedE>{\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0\xb04\xb7T5\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\x03\x8a\xc40\xbe\xe3\x93A\x15\xec\xdb\xaa\xdc\n\xcbC\x15\xfcp\x11\xdai\f{\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\x82t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9\x87\xb6^r\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9w\xd2\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T[\xb7\xa4\xb0\bk&\xede\x8b\xc2\xb2\xcd\xef\xcf\x0fE\xc5\x86]\xc0]}\xdd^\xf6&\x16>c\x9d\x9c\xc9\x01\x04\x00\x00\xe9h\xbd\x10p\x8f\x14\x1f2\"\x1b;\xfda\x19\x8bo^\x96\x9a~Q\xce\x95\x02\xb8e\xbbG\xb0V[\xfe\x80\x94$y\x8a\\@\xa9^\x95!IJ\xcf\xf7\xafoX/qG\x97ITp\x01\xae\f\"n;%\xecT\xf6\xb6\xbf;\xde\xec\xb4z\xaa\xd9%\xa5wy~\xcb\x9a\xd7\r\xe2\xcd\xf0C\x16\xbf0\x89\xb4\xf5\x86\xf3\x99\x9bq\xd3\x15\xe1:\x86\xe4\x14\x805K\xcf\xf6\xda\xd1A>\xf4r>\xfdyAH\x0f\x00'/426, 0x3) fsetxattr$security_capability(r5, &(0x7f0000000000), 0x0, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 3.532351333s ago: executing program 2 (id=681): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)={0x48, r1, 0x1, 0x0, 0x10, {}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xa4a}}, './file0\x00'}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0x3ff, 0x0, 0x34324258, 0x8, 0x0, [{0x8, 0xf}, {0x8, 0x29f6ebcd}, {0xd, 0x8}, {0x5, 0x8}, {0x2, 0x3}, {0x5, 0x4}, {0x6, 0x409}, {0x10001, 0x1800000}], 0x0, 0xd, 0x7, 0x3078182a3427730f, 0x1}}) newfstatat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', &(0x7f0000000a40), 0x6000) 3.189337733s ago: executing program 2 (id=682): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xff2e) r1 = io_uring_setup(0x257c, &(0x7f0000000000)) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x80080) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r4, 0x1, &(0x7f0000000080)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0xfffc, r3, 0x0, 0x0, 0x0, 0x0, 0x4}]) recvmmsg(r3, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x4c42bb4f92, 0x0) shutdown(r3, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000d, 0x12, r2, 0x5000) io_uring_register$IORING_UNREGISTER_PBUF_RING(r1, 0x17, &(0x7f0000001500)={0x0, 0x0, 0x1}, 0x1) r5 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f0000000080)) ioctl$TCFLSH(r0, 0x540b, 0x0) 2.255873023s ago: executing program 0 (id=683): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000000e40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000040), 0xff7a}], 0x1}}], 0x8000000000000df, 0x40080c1) shutdown(r1, 0x1) syz_usb_connect(0x0, 0x63, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005e05b14021040203e8450000000109025100010000000009040900000202ff00052406000105240000000d24b8fe3f9ea3a0e8ca0800ff06241a05002a0524010103052406000105"], 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x40000008) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r5) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r5, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003640)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3095fadb961442daccabdbec7abe5aa24a6f00", @ANYRES16=r6, @ANYBLOB="01002dbd7000ffdbdf2501000000000000000b0000000014001462726f6164636173742d6c696e6b0000"], 0x30}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000004) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)) openat$fuse(0xffffff9c, &(0x7f0000000280), 0x2, 0x0) r7 = syz_io_uring_setup(0x7b1, &(0x7f0000000200)={0x0, 0x200086f7, 0x80, 0x0, 0x3b6, 0x0, r0}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="0a01000005af9e08d2106528c9a4000000010902120001000000000904"], 0x0) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') lseek(r10, 0x401, 0x0) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x23}) r11 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f91524fc60", 0x14}], 0x1}, 0x0) io_uring_enter(r7, 0x48e9, 0x0, 0x3, 0x0, 0x0) 2.012814114s ago: executing program 2 (id=684): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xff2e) r1 = io_uring_setup(0x257c, &(0x7f0000000000)) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x80080) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r4, 0x1, &(0x7f0000000080)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0xfffc, r3, 0x0, 0x0, 0x0, 0x0, 0x4}]) recvmmsg(r3, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x4c42bb4f92, 0x0) shutdown(r3, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000d, 0x12, r2, 0x5000) io_uring_register$IORING_UNREGISTER_PBUF_RING(r1, 0x17, &(0x7f0000001500)={0x0, 0x0, 0x1}, 0x1) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd2, 0x48, 0x52, 0x20, 0x16dc, 0x15, 0x8453, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x4f, 0x0, 0x1, 0xf8, 0x9d, 0x1e, 0xfe, [], [{{0x9, 0x5, 0x4, 0x3, 0x10, 0x6, 0x4, 0x4}}]}}]}}]}}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f0000000080)) ioctl$TCFLSH(r0, 0x540b, 0x0) 1.326100295s ago: executing program 1 (id=685): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000040)={0x556, 0x2, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket(0x11, 0x2, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) migrate_pages(0x0, 0x8, &(0x7f0000000280)=0xd, &(0x7f00000003c0)=0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setownex(r7, 0xf, &(0x7f0000000180)={0x1}) sendmmsg$unix(r6, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="e9", 0x1}], 0x1}}], 0x1, 0x40815) sendmmsg$inet(r5, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000700)}, {&(0x7f0000000d40)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa438689d28748c22ebfe2772d64b64e706d94864d785dcc6b24fff7858b2a4e", 0xe1}, {&(0x7f0000000b80)}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x2, 0x400e0) fsmount(r4, 0x1, 0x9a) sendto$inet(r5, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) 1.040134305s ago: executing program 4 (id=686): r0 = syz_open_dev$media(&(0x7f0000000080), 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x24004094}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x558}}, 0x40) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4, 0x0, 0x0, 0x66666666666680e, 0x0, &(0x7f0000000fc0)=[{}, {}]}) 992.449188ms ago: executing program 3 (id=687): socket(0x10, 0x803, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) ppoll(&(0x7f0000000100)=[{r0, 0x1}], 0x1, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$P9_RSTATu(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x458) socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, 0x0, 0x0) syz_usb_connect(0x3, 0xf5, 0x0, 0x0) 731.534656ms ago: executing program 4 (id=688): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtaction={0x14, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008800) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$dri(0x0, 0x0, 0x381102) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000017c0)={0x8, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x4, 0x1002, &(0x7f0000001880)=""/4098, 0x41100, 0x20, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000100"/99], 0x64}}, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x5}}, 0xff, 0x0, 0x318, 0x1, 0x4, 0x1, 0x2}, 0x9c) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) writev(r8, &(0x7f0000000840)=[{&(0x7f0000000440)="5040f2d770957e56fa0a65472d2488d9fef6b3fb105be0ecb30af03054a00b56df32da9591015ec70e978dc0713e93145c6f23d038d5158cbecec238106b", 0x3e}], 0x1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x78, 0x0, &(0x7f00000015c0)=[@request_death={0x400c630e, 0x1}, @enter_looper, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f00000000c0)={@flat=@handle={0x73682a85, 0x0, 0x1}, @fda={0x66646185, 0x5, 0x2, 0x3b}, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/98, 0x62, 0x0, 0x24}}, &(0x7f0000000180)={0x0, 0x18, 0x38}}, 0x400}, @register_looper, @acquire_done={0x40106309, 0x1}], 0x0, 0x0, &(0x7f0000000440)}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c00028008000500010000001400070000000000000000050000000000000001", @ANYRES16=r4, @ANYBLOB="aa07482aae6802dcb7ee94172d76bf75c3311ac07d2b4c9be5becd2fe80ff7e6ed5c16bcc8f46ad4f92e510e9989e6abd91bdf9fee7bec5ebc49cdeac812d935"], 0x74}}, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000140)='wg0\x00', 0x4) 0s ago: executing program 3 (id=689): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001300)={0xc, {"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", 0x1000}}, 0x1006) syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000080)=[0x3, 0x2ff]) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat2(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x8200, 0x54, 0x10}, 0x18) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) kernel console output (not intermixed with test programs): 64] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 176.941267][ T6864] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 177.028152][ T6864] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 177.044043][ T6864] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 177.087019][ T6864] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 177.104432][ T6864] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 177.130671][ T6864] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 177.187712][ T6864] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 177.211901][ T6864] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 177.249149][ T6864] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 177.390447][ C0] iowarrior 5-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1 [ 177.403210][ T5909] usb 5-1: USB disconnect, device number 16 [ 177.536570][ T5850] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 177.703910][ T5850] usb 2-1: not running at top speed; connect to a high speed hub [ 177.757405][ T5850] usb 2-1: config 145 has an invalid interface number: 82 but max is 3 [ 177.765863][ T5850] usb 2-1: config 145 contains an unexpected descriptor of type 0x2, skipping [ 177.781205][ T5850] usb 2-1: config 145 has an invalid interface number: 46 but max is 3 [ 177.792080][ T5850] usb 2-1: config 145 has an invalid interface number: 17 but max is 3 [ 177.800548][ T5850] usb 2-1: config 145 contains an unexpected descriptor of type 0x2, skipping [ 177.816753][ T5938] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 177.835615][ T5850] usb 2-1: config 145 has an invalid interface descriptor of length 3, skipping [ 177.856409][ T5850] usb 2-1: config 145 contains an unexpected descriptor of type 0x2, skipping [ 177.875824][ T5850] usb 2-1: config 145 has an invalid descriptor of length 0, skipping remainder of the config [ 177.909475][ T6903] loop2: detected capacity change from 0 to 7 [ 177.921880][ T5850] usb 2-1: config 145 has 3 interfaces, different from the descriptor's value: 4 [ 177.955132][ T6904] netlink: 4 bytes leftover after parsing attributes in process `syz.3.249'. [ 177.969194][ T6904] netlink: 4 bytes leftover after parsing attributes in process `syz.3.249'. [ 177.969228][ T5850] usb 2-1: config 145 has no interface number 0 [ 177.990268][ T5850] usb 2-1: config 145 has no interface number 1 [ 178.000293][ T5850] usb 2-1: config 145 has no interface number 2 [ 178.007017][ T6903] Dev loop2: unable to read RDB block 7 [ 178.023419][ T5938] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 178.035613][ T6903] loop2: unable to read partition table [ 178.042932][ T5938] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.056116][ T5850] usb 2-1: config 145 interface 82 altsetting 5 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 178.079053][ T6903] loop2: partition table beyond EOD, truncated [ 178.081710][ T5847] Bluetooth: hci0: command 0x0c1a tx timeout [ 178.116541][ T5938] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 178.149925][ T5850] usb 2-1: config 145 interface 46 altsetting 16 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 178.181694][ T5938] usb 1-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 178.202457][ T5850] usb 2-1: config 145 interface 46 altsetting 16 has a duplicate endpoint with address 0x4, skipping [ 178.228013][ T6903] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 178.249181][ T5938] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.276084][ T5850] usb 2-1: config 145 interface 46 altsetting 16 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 178.299969][ T5938] usb 1-1: config 0 descriptor?? [ 178.316195][ T5850] usb 2-1: config 145 interface 46 altsetting 16 has a duplicate endpoint with address 0x1, skipping [ 178.413135][ T5850] usb 2-1: config 145 interface 17 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 178.561073][ T5850] usb 2-1: config 145 interface 82 has no altsetting 0 [ 178.607007][ T5850] usb 2-1: config 145 interface 46 has no altsetting 0 [ 178.614018][ T5850] usb 2-1: config 145 interface 17 has no altsetting 0 [ 178.671249][ T5850] usb 2-1: string descriptor 0 read error: -71 [ 178.737701][ T5850] usb 2-1: New USB device found, idVendor=2770, idProduct=930b, bcdDevice=76.65 [ 178.780014][ T6917] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 178.794133][ T5850] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.859731][ T5850] usb 2-1: can't set config #145, error -71 [ 178.921473][ T5850] usb 2-1: USB disconnect, device number 12 [ 178.936587][ T5847] Bluetooth: hci1: command 0x0c1a tx timeout [ 179.026447][ T5847] Bluetooth: hci3: command 0x0c1a tx timeout [ 179.096599][ T5847] Bluetooth: hci2: command 0x0c1a tx timeout [ 179.166461][ T5931] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 179.267500][ T5847] Bluetooth: hci4: command 0x0c1a tx timeout [ 179.342209][ T5931] usb 3-1: config 67 has an invalid descriptor of length 125, skipping remainder of the config [ 179.356428][ T10] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 179.437702][ T5931] usb 3-1: config 67 has 0 interfaces, different from the descriptor's value: 1 [ 179.458360][ T5931] usb 3-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 179.475675][ T5931] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.536805][ T5850] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 179.586584][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 179.622040][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.663937][ T10] usb 5-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 179.688758][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.710212][ T10] usb 5-1: config 0 descriptor?? [ 179.736620][ T5850] usb 2-1: Invalid ep0 maxpacket: 9 [ 179.743016][ T5931] usb 3-1: string descriptor 0 read error: -71 [ 179.773784][ T5931] usb 3-1: USB disconnect, device number 9 [ 179.857689][ T5938] ntrig 0003:1B96:0009.0002: item fetching failed at offset 2/5 [ 179.866820][ T5938] ntrig 0003:1B96:0009.0002: parse failed [ 179.872788][ T5938] ntrig 0003:1B96:0009.0002: probe with driver ntrig failed with error -22 [ 179.896658][ T5850] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 180.066446][ T5850] usb 2-1: Invalid ep0 maxpacket: 9 [ 180.072359][ T5850] usb usb2-port1: attempt power cycle [ 180.099208][ T5938] usb 1-1: USB disconnect, device number 13 [ 180.136823][ T5847] Bluetooth: hci0: command 0x0c1a tx timeout [ 180.148341][ T10] kye 0003:0458:5016.0003: control desc unexpectedly large [ 180.169478][ T10] input: HID 0458:5016 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5016.0003/input/input6 [ 180.258440][ T10] input: HID 0458:5016 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5016.0003/input/input7 [ 180.364196][ T10] kye 0003:0458:5016.0003: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.4-1/input0 [ 180.478966][ T5850] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 180.540291][ T5850] usb 2-1: Invalid ep0 maxpacket: 9 [ 180.999833][ T6940] netlink: 108 bytes leftover after parsing attributes in process `syz.4.257'. [ 181.027716][ T5847] Bluetooth: hci1: command 0x0c1a tx timeout [ 181.036001][ T6941] netlink: 60 bytes leftover after parsing attributes in process `syz.2.260'. [ 181.046717][ T5850] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 181.155214][ T5850] usb 2-1: Invalid ep0 maxpacket: 9 [ 181.161538][ T5850] usb usb2-port1: unable to enumerate USB device [ 181.168100][ T5847] Bluetooth: hci3: command 0x0c1a tx timeout [ 181.183695][ T5847] Bluetooth: hci2: command 0x0c1a tx timeout [ 181.336795][ T5847] Bluetooth: hci4: command 0x0c1a tx timeout [ 182.153067][ T6953] netlink: 80 bytes leftover after parsing attributes in process `syz.0.264'. [ 182.176438][ T5850] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 182.417811][ T5833] usb 5-1: USB disconnect, device number 17 [ 182.559200][ T5850] usb 4-1: unable to get BOS descriptor set [ 182.572532][ T5850] usb 4-1: not running at top speed; connect to a high speed hub [ 182.629443][ T5850] usb 4-1: config 1 interface 0 has no altsetting 0 [ 182.665908][ T5850] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 182.667343][ T6955] netlink: 8 bytes leftover after parsing attributes in process `syz.1.265'. [ 182.706158][ T5850] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.740349][ T5850] usb 4-1: Product: syz [ 182.744609][ T5850] usb 4-1: Manufacturer: syz [ 182.806560][ T5850] usb 4-1: SerialNumber: syz [ 182.958954][ T6961] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 183.073178][ T5909] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 183.103452][ T5847] Bluetooth: hci1: command 0x0c1a tx timeout [ 183.145113][ T5850] usb 4-1: USB disconnect, device number 15 [ 183.188889][ T5847] Bluetooth: hci3: command 0x0c1a tx timeout [ 183.259378][ T5847] Bluetooth: hci2: command 0x0c1a tx timeout [ 183.276742][ T5909] usb 2-1: Using ep0 maxpacket: 32 [ 183.285677][ T5909] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 183.480804][ T5847] Bluetooth: hci4: command 0x0c1a tx timeout [ 183.721473][ T5909] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 183.730953][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 183.756103][ T5909] usb 2-1: Product: syz [ 183.901894][ T5909] usb 2-1: Manufacturer: syz [ 183.917042][ T5909] usb 2-1: SerialNumber: syz [ 183.927856][ T5909] usb 2-1: config 0 descriptor?? [ 183.936777][ T6958] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 183.973556][ T5909] hub 2-1:0.0: bad descriptor, ignoring hub [ 184.007428][ T5909] hub 2-1:0.0: probe with driver hub failed with error -5 [ 184.488090][ T5850] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 184.556427][ T5930] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 184.686476][ T5850] usb 3-1: Using ep0 maxpacket: 8 [ 184.799764][ T5930] usb 4-1: config 1 interface 0 has no altsetting 0 [ 184.827822][ T5850] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 184.839526][ T5930] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 184.855025][ T5850] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.875392][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.890311][ T5850] usb 3-1: Product: syz [ 184.894588][ T5850] usb 3-1: Manufacturer: syz [ 184.904942][ T5930] usb 4-1: Product: syz [ 184.919899][ T5930] usb 4-1: Manufacturer: syz [ 184.925909][ T5850] usb 3-1: SerialNumber: syz [ 184.986362][ T5930] usb 4-1: SerialNumber: syz [ 184.991337][ T6955] usb 2-1: reset high-speed USB device number 17 using dummy_hcd [ 185.018807][ T5850] usb 3-1: config 0 descriptor?? [ 185.052939][ T5850] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 185.061340][ T5850] usb 3-1: setting power ON [ 185.066154][ T5850] dvb-usb: bulk message failed: -22 (2/0) [ 185.082068][ T5850] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 185.094427][ T5850] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 185.103606][ T5850] usb 3-1: media controller created [ 185.180845][ T6955] usb 2-1: device firmware changed [ 185.191298][ T5909] usb 2-1: USB disconnect, device number 17 [ 185.252400][ T5850] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 185.293256][ T6989] netlink: 8 bytes leftover after parsing attributes in process `syz.0.276'. [ 185.315321][ T5850] usb 3-1: selecting invalid altsetting 6 [ 185.323377][ T5850] usb 3-1: digital interface selection failed (-22) [ 185.333906][ T5850] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 185.347222][ T5850] usb 3-1: setting power OFF [ 185.351945][ T5850] dvb-usb: bulk message failed: -22 (2/0) [ 185.471446][ T5850] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 185.471608][ T5909] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 185.511577][ T5850] (NULL device *): no alternate interface [ 185.656906][ T6977] dvb-usb: bulk message failed: -22 (3/0) [ 185.692735][ T5930] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 185.717854][ T6977] dvb-usb: bulk message failed: -22 (4/0) [ 185.744227][ T6977] cxusb: i2c read failed [ 185.820992][ T5850] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 185.869547][ T5909] usb 2-1: device not accepting address 18, error -71 [ 185.906218][ T5850] usb 3-1: USB disconnect, device number 10 [ 186.095850][ C1] usblp0: nonzero write bulk status received: -71 [ 186.103648][ T24] usb 4-1: USB disconnect, device number 16 [ 186.120739][ T7005] usblp0: removed [ 186.286486][ T5909] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 186.431566][ T7014] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 186.456162][ T5909] usb 2-1: config 0 has no interfaces? [ 186.474103][ T5909] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 186.494436][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.526411][ T5909] usb 2-1: Product: syz [ 186.534873][ T5909] usb 2-1: Manufacturer: syz [ 186.550864][ T5909] usb 2-1: SerialNumber: syz [ 186.586229][ T5909] usb 2-1: config 0 descriptor?? [ 186.629091][ T7017] netlink: 'syz.0.281': attribute type 10 has an invalid length. [ 186.791354][ T7017] team0: Port device wlan1 added [ 189.098655][ T7046] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 189.454028][ T7053] netlink: 92 bytes leftover after parsing attributes in process `syz.2.289'. [ 190.498253][ T5909] usb 2-1: USB disconnect, device number 19 [ 190.958718][ T5909] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 191.110036][ T7069] loop2: detected capacity change from 0 to 7 [ 191.116647][ T5909] usb 2-1: Using ep0 maxpacket: 8 [ 191.129483][ T5909] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 191.142186][ T7069] loop2: p1 [ 191.150389][ T7069] loop2: partition table partially beyond EOD, truncated [ 191.159926][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.174754][ T7069] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 191.186087][ T5909] usb 2-1: Product: syz [ 191.192057][ T5909] usb 2-1: Manufacturer: syz [ 191.226598][ T5909] usb 2-1: SerialNumber: syz [ 191.251563][ T5909] usb 2-1: config 0 descriptor?? [ 191.275948][ T5909] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 191.305863][ T5909] usb 2-1: setting power ON [ 191.310895][ T5903] udevd[5903]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 191.331117][ T5909] dvb-usb: bulk message failed: -22 (2/0) [ 191.374947][ T5909] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 191.446224][ T5909] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 191.516602][ T5909] usb 2-1: media controller created [ 191.556801][ T7071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.295'. [ 191.622876][ T5909] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 191.701731][ T5909] usb 2-1: selecting invalid altsetting 6 [ 191.737205][ T5909] usb 2-1: digital interface selection failed (-22) [ 191.776866][ T5909] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 191.818658][ T5909] usb 2-1: setting power OFF [ 191.833877][ T7080] netlink: 8 bytes leftover after parsing attributes in process `syz.0.294'. [ 191.842975][ T5909] dvb-usb: bulk message failed: -22 (2/0) [ 191.856427][ T5909] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 191.882761][ T5909] (NULL device *): no alternate interface [ 192.021993][ T5909] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 192.088812][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 192.088832][ T30] audit: type=1326 audit(1752020223.867:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7083 comm="syz.0.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3678f8e929 code=0x7ffc0000 [ 192.133312][ T30] audit: type=1326 audit(1752020223.867:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7083 comm="syz.0.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3678f8e929 code=0x7ffc0000 [ 192.169628][ T30] audit: type=1326 audit(1752020223.917:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7083 comm="syz.0.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3678f8d290 code=0x7ffc0000 [ 192.213428][ T30] audit: type=1326 audit(1752020223.917:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7083 comm="syz.0.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3678f8e929 code=0x7ffc0000 [ 192.243647][ T30] audit: type=1326 audit(1752020223.917:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7083 comm="syz.0.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3678f8e929 code=0x7ffc0000 [ 192.286834][ T30] audit: type=1326 audit(1752020223.927:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7083 comm="syz.0.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f3678f8e929 code=0x7ffc0000 [ 192.309106][ C1] vkms_vblank_simulate: vblank timer overrun [ 192.335447][ T7089] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 192.344954][ T30] audit: type=1326 audit(1752020223.927:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7083 comm="syz.0.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3678f8e929 code=0x7ffc0000 [ 192.367798][ T30] audit: type=1326 audit(1752020223.927:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7083 comm="syz.0.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3678f8e929 code=0x7ffc0000 [ 192.454881][ T30] audit: type=1326 audit(1752020223.927:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7083 comm="syz.0.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f3678f8e929 code=0x7ffc0000 [ 192.477067][ C1] vkms_vblank_simulate: vblank timer overrun [ 192.573173][ T30] audit: type=1326 audit(1752020223.927:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7083 comm="syz.0.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3678f8e929 code=0x7ffc0000 [ 192.741313][ T7097] netlink: 92 bytes leftover after parsing attributes in process `syz.3.301'. [ 193.436422][ T5850] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 193.521293][ T7105] netlink: 152 bytes leftover after parsing attributes in process `syz.4.304'. [ 193.531503][ T7105] tipc: Started in network mode [ 193.538210][ T7105] tipc: Node identity fe80000000000000000000000000002a, cluster identity 4711 [ 193.548581][ T7105] tipc: Enabled bearer , priority 10 [ 193.582171][ T10] usb 2-1: USB disconnect, device number 20 [ 193.606873][ T5850] usb 4-1: Using ep0 maxpacket: 16 [ 193.616809][ T5850] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 193.650711][ T5850] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 193.663875][ T5850] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.681932][ T5850] usb 4-1: Product: syz [ 193.698762][ T5850] usb 4-1: Manufacturer: syz [ 193.715535][ T5850] usb 4-1: SerialNumber: syz [ 193.744135][ T5850] usb 4-1: config 0 descriptor?? [ 193.772815][ T5850] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 193.789404][ T7107] loop2: detected capacity change from 0 to 7 [ 193.798947][ T5850] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 193.805452][ T7107] loop2: p1 [ 193.809960][ T7107] loop2: partition table partially beyond EOD, truncated [ 193.821831][ T7107] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 193.922992][ T5903] udevd[5903]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 194.392816][ T7120] netlink: 4 bytes leftover after parsing attributes in process `syz.2.308'. [ 194.405479][ T7120] netlink: 4 bytes leftover after parsing attributes in process `syz.2.308'. [ 194.484015][ T5850] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 194.532757][ T7119] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 194.545482][ T7119] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 194.560017][ T7119] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 194.566795][ T7119] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 194.602079][ T7119] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 194.608370][ T7119] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 194.674238][ T7119] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 194.680518][ T10] tipc: Node number set to 4269801514 [ 194.692964][ T7119] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 194.726033][ T7119] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 194.732196][ T7119] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 194.826411][ T10] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 195.033262][ T7129] syzkaller1: entered promiscuous mode [ 195.049517][ T10] usb 2-1: config 1 has an invalid interface number: 128 but max is 1 [ 195.069267][ T7129] syzkaller1: entered allmulticast mode [ 195.069943][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 195.426679][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 195.482254][ T10] usb 2-1: config 1 has no interface number 0 [ 195.502589][ T10] usb 2-1: config 1 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 195.680170][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 195.698000][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.726359][ T10] usb 2-1: Product: syz [ 195.776423][ T1209] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 195.865782][ T10] usb 2-1: Manufacturer: syz [ 195.966409][ T1209] usb 5-1: Using ep0 maxpacket: 16 [ 195.986188][ T5850] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 195.996109][ T10] usb 2-1: SerialNumber: syz [ 196.024578][ T5850] em28xx 4-1:0.0: board has no eeprom [ 196.084467][ T7141] netlink: 92 bytes leftover after parsing attributes in process `syz.0.312'. [ 196.114781][ T10] cdc_wdm 2-1:1.128: skipping garbage [ 196.142103][ T10] cdc_wdm 2-1:1.128: probe with driver cdc_wdm failed with error -22 [ 196.256632][ T5850] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 196.401224][ T5850] em28xx 4-1:0.0: dvb set to bulk mode. [ 196.420502][ T7124] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 196.462787][ T5938] em28xx 4-1:0.0: Binding DVB extension [ 196.492359][ T5850] usb 4-1: USB disconnect, device number 17 [ 196.514937][ T5850] em28xx 4-1:0.0: Disconnecting em28xx [ 196.685965][ T5938] em28xx 4-1:0.0: Registering input extension [ 196.778248][ T5850] em28xx 4-1:0.0: Closing input extension [ 197.028282][ T5850] em28xx 4-1:0.0: Freeing device [ 197.635145][ T7151] loop2: detected capacity change from 0 to 7 [ 197.846490][ T7151] loop2: p1 [ 197.849776][ T7151] loop2: partition table partially beyond EOD, truncated [ 198.058461][ T5850] usb 2-1: USB disconnect, device number 21 [ 198.076712][ T7151] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 198.126406][ T5909] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 198.356406][ T5909] usb 4-1: Using ep0 maxpacket: 8 [ 198.370189][ T5903] udevd[5903]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 198.406582][ T5909] usb 4-1: New USB device found, idVendor=0ab4, idProduct=0014, bcdDevice=c4.18 [ 198.415790][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.494632][ T7158] bridge_slave_0: left allmulticast mode [ 198.501284][ T7158] bridge_slave_0: left promiscuous mode [ 198.522959][ T7158] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.565546][ T5909] usb 4-1: Product: syz [ 198.575522][ T5909] usb 4-1: Manufacturer: syz [ 198.606228][ T5909] usb 4-1: SerialNumber: syz [ 198.628644][ T5909] usb 4-1: config 0 descriptor?? [ 198.663467][ T5909] esd_usb 4-1:0.0: sending version message failed [ 198.671492][ T7159] netlink: 'syz.0.319': attribute type 10 has an invalid length. [ 198.683585][ T7158] bridge_slave_1: left allmulticast mode [ 198.718688][ T5909] esd_usb 4-1:0.0: probe with driver esd_usb failed with error -22 [ 198.743689][ T7158] bridge_slave_1: left promiscuous mode [ 198.780451][ T7158] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.807588][ T7161] netlink: 4 bytes leftover after parsing attributes in process `syz.0.319'. [ 198.873409][ T7158] bond0: (slave bond_slave_0): Releasing backup interface [ 199.230254][ T7158] bond0: (slave bond_slave_1): Releasing backup interface [ 199.305257][ T7158] team0: Port device team_slave_0 removed [ 199.400956][ T7158] team0: Port device team_slave_1 removed [ 199.470295][ T7158] team0: Port device wlan1 removed [ 199.643783][ T7159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.652740][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.659916][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.719779][ T7159] team0: Port device bond0 added [ 200.337979][ T7161] team0 (unregistering): Port device bond0 removed [ 200.373435][ T1209] usb 5-1: unable to get BOS descriptor or descriptor too short [ 200.405439][ T1209] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 200.495313][ T1209] usb 5-1: can't read configurations, error -71 [ 200.544036][ T7178] netlink: 'syz.4.321': attribute type 3 has an invalid length. [ 200.798987][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 200.799006][ T30] audit: type=1326 audit(1752020232.577:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7180 comm="syz.2.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3decf8e929 code=0x7ffc0000 [ 200.921957][ T30] audit: type=1326 audit(1752020232.617:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7180 comm="syz.2.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7f3decf8e929 code=0x7ffc0000 [ 201.002149][ T30] audit: type=1326 audit(1752020232.617:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7180 comm="syz.2.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3decf8e929 code=0x7ffc0000 [ 201.114266][ T30] audit: type=1326 audit(1752020232.627:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7180 comm="syz.2.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3decf8e929 code=0x7ffc0000 [ 201.155068][ T5850] usb 4-1: USB disconnect, device number 18 [ 201.161316][ T30] audit: type=1326 audit(1752020232.627:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7180 comm="syz.2.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3decf8e929 code=0x7ffc0000 [ 201.193235][ T7158] syz.0.319 (7158) used greatest stack depth: 19272 bytes left [ 201.294999][ T30] audit: type=1326 audit(1752020232.627:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7180 comm="syz.2.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3decf8e929 code=0x7ffc0000 [ 201.393832][ T30] audit: type=1326 audit(1752020232.627:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7180 comm="syz.2.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3decf8e929 code=0x7ffc0000 [ 201.465341][ T30] audit: type=1326 audit(1752020232.627:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7180 comm="syz.2.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3decf8e929 code=0x7ffc0000 [ 201.520717][ T30] audit: type=1326 audit(1752020232.627:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7180 comm="syz.2.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3decf8e929 code=0x7ffc0000 [ 201.682233][ T30] audit: type=1326 audit(1752020232.627:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7180 comm="syz.2.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3decf8e929 code=0x7ffc0000 [ 201.735236][ T7188] netlink: 116 bytes leftover after parsing attributes in process `syz.3.323'. [ 202.206380][ T7206] loop2: detected capacity change from 0 to 7 [ 203.667059][ T7206] loop2: p1 [ 203.688557][ T7206] loop2: partition table partially beyond EOD, truncated [ 203.695857][ T7206] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 203.981395][ T5903] udevd[5903]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 204.006537][ T24] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 204.177194][ T24] usb 4-1: device descriptor read/64, error -71 [ 204.457171][ T24] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 204.616124][ T24] usb 4-1: device descriptor read/64, error -71 [ 204.629620][ T7235] netlink: 32 bytes leftover after parsing attributes in process `syz.2.335'. [ 204.638827][ T7235] veth0_to_bond: entered promiscuous mode [ 204.650899][ T7235] netlink: 32 bytes leftover after parsing attributes in process `syz.2.335'. [ 204.727339][ T24] usb usb4-port1: attempt power cycle [ 205.046834][ T5850] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 205.096429][ T24] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 205.167719][ T24] usb 4-1: device descriptor read/8, error -71 [ 205.238226][ T5850] usb 5-1: Using ep0 maxpacket: 8 [ 205.276204][ T5850] usb 5-1: New USB device found, idVendor=0ab4, idProduct=0014, bcdDevice=c4.18 [ 205.285942][ T5850] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.328078][ T5850] usb 5-1: Product: syz [ 205.334202][ T5850] usb 5-1: Manufacturer: syz [ 205.350179][ T5850] usb 5-1: SerialNumber: syz [ 205.411391][ T5850] usb 5-1: config 0 descriptor?? [ 205.426857][ T5850] esd_usb 5-1:0.0: sending version message failed [ 205.434297][ T5850] esd_usb 5-1:0.0: probe with driver esd_usb failed with error -22 [ 205.436540][ T24] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 205.507585][ T7245] netlink: 56 bytes leftover after parsing attributes in process `syz.2.339'. [ 205.608200][ T24] usb 4-1: device descriptor read/8, error -71 [ 205.718283][ T24] usb usb4-port1: unable to enumerate USB device [ 206.013388][ T5850] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 206.366358][ T5850] usb 1-1: Using ep0 maxpacket: 16 [ 206.378942][ T5850] usb 1-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 206.389505][ T5850] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 206.448933][ T5850] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 206.464323][ T5850] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.492198][ T5850] usb 1-1: Product: syz [ 206.515215][ T5850] usb 1-1: Manufacturer: syz [ 206.545799][ T5850] usb 1-1: SerialNumber: syz [ 206.840094][ T5850] usb 1-1: 0:2 : does not exist [ 206.959292][ T5850] usb 1-1: USB disconnect, device number 15 [ 207.196335][ T7263] syz.3.343: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 207.224221][ T7263] CPU: 1 UID: 0 PID: 7263 Comm: syz.3.343 Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(full) [ 207.224255][ T7263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 207.224269][ T7263] Call Trace: [ 207.224278][ T7263] [ 207.224289][ T7263] dump_stack_lvl+0x189/0x250 [ 207.224328][ T7263] ? __pfx_dump_stack_lvl+0x10/0x10 [ 207.224359][ T7263] ? __pfx__printk+0x10/0x10 [ 207.224392][ T7263] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 207.224424][ T7263] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 207.224457][ T7263] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 207.224492][ T7263] warn_alloc+0x214/0x310 [ 207.224523][ T7263] ? stack_depot_save_flags+0x429/0x900 [ 207.224563][ T7263] ? __pfx_warn_alloc+0x10/0x10 [ 207.224597][ T7263] ? kasan_save_track+0x4f/0x80 [ 207.224623][ T7263] ? xskq_create+0x56/0x170 [ 207.224656][ T7263] ? xsk_init_queue+0xb0/0x110 [ 207.224686][ T7263] ? xsk_setsockopt+0x43f/0x710 [ 207.224715][ T7263] ? do_sock_setsockopt+0x25a/0x3e0 [ 207.224742][ T7263] ? __x64_sys_setsockopt+0x18b/0x220 [ 207.224769][ T7263] ? do_syscall_64+0xfa/0x3b0 [ 207.224790][ T7263] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.224822][ T7263] __vmalloc_node_range_noprof+0x125/0x12f0 [ 207.224887][ T7263] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 207.224921][ T7263] ? xskq_create+0x56/0x170 [ 207.224957][ T7263] ? __kasan_kmalloc+0x93/0xb0 [ 207.224988][ T7263] vmalloc_user_noprof+0xad/0xf0 [ 207.225031][ T7263] ? xskq_create+0xbf/0x170 [ 207.225066][ T7263] xskq_create+0xbf/0x170 [ 207.225104][ T7263] xsk_init_queue+0xb0/0x110 [ 207.225142][ T7263] xsk_setsockopt+0x43f/0x710 [ 207.225178][ T7263] ? __pfx_xsk_setsockopt+0x10/0x10 [ 207.225213][ T7263] ? apparmor_socket_setsockopt+0xd/0x30 [ 207.225251][ T7263] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 207.225286][ T7263] ? __pfx_xsk_setsockopt+0x10/0x10 [ 207.225321][ T7263] do_sock_setsockopt+0x25a/0x3e0 [ 207.225353][ T7263] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 207.225388][ T7263] ? __fget_files+0x2a/0x420 [ 207.225429][ T7263] __x64_sys_setsockopt+0x18b/0x220 [ 207.225465][ T7263] do_syscall_64+0xfa/0x3b0 [ 207.225486][ T7263] ? lockdep_hardirqs_on+0x9c/0x150 [ 207.225522][ T7263] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.225544][ T7263] ? clear_bhb_loop+0x60/0xb0 [ 207.225572][ T7263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.225595][ T7263] RIP: 0033:0x7f1fe778e929 [ 207.225617][ T7263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.225638][ T7263] RSP: 002b:00007f1fe8574038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 207.225664][ T7263] RAX: ffffffffffffffda RBX: 00007f1fe79b6240 RCX: 00007f1fe778e929 [ 207.225681][ T7263] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 207.225695][ T7263] RBP: 00007f1fe7810b39 R08: 0000000000000052 R09: 0000000000000000 [ 207.225711][ T7263] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 207.225726][ T7263] R13: 0000000000000000 R14: 00007f1fe79b6240 R15: 00007f1fe7adfa28 [ 207.225761][ T7263] [ 207.532035][ C1] vkms_vblank_simulate: vblank timer overrun [ 207.678751][ T43] usb 5-1: USB disconnect, device number 20 [ 207.772843][ T7264] program syz.3.343 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 207.782402][ T7263] Mem-Info: [ 207.785587][ T7263] active_anon:6596 inactive_anon:0 isolated_anon:0 [ 207.785587][ T7263] active_file:8024 inactive_file:39898 isolated_file:0 [ 207.785587][ T7263] unevictable:768 dirty:126 writeback:0 [ 207.785587][ T7263] slab_reclaimable:10195 slab_unreclaimable:99419 [ 207.785587][ T7263] mapped:34733 shmem:1545 pagetables:1278 [ 207.785587][ T7263] sec_pagetables:0 bounce:0 [ 207.785587][ T7263] kernel_misc_reclaimable:0 [ 207.785587][ T7263] free:1314641 free_pcp:13659 free_cma:0 [ 207.909420][ T5903] udevd[5903]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 208.074240][ T7263] Node 0 active_anon:26852kB inactive_anon:0kB active_file:32096kB inactive_file:159388kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:142772kB dirty:548kB writeback:0kB shmem:4752kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12180kB pagetables:4844kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 208.107711][ C1] vkms_vblank_simulate: vblank timer overrun [ 208.151480][ T7263] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 208.182987][ C1] vkms_vblank_simulate: vblank timer overrun [ 208.189858][ T7263] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 208.219028][ C1] vkms_vblank_simulate: vblank timer overrun [ 208.249978][ T7263] lowmem_reserve[]: 0 2498 2500 2500 2500 [ 208.328881][ T7263] Node 0 DMA32 free:1345016kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27204kB inactive_anon:0kB active_file:32096kB inactive_file:157812kB unevictable:1536kB writepending:548kB present:3129332kB managed:2558408kB mlocked:0kB bounce:0kB free_pcp:34188kB local_pcp:14828kB free_cma:0kB [ 208.656768][ T7263] lowmem_reserve[]: 0 0 1 1 1 [ 208.665583][ T7263] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 208.694653][ C1] vkms_vblank_simulate: vblank timer overrun [ 208.873510][ T7263] lowmem_reserve[]: 0 0 0 0 0 [ 208.920814][ T7263] Node 1 Normal free:3896320kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:21152kB local_pcp:8704kB free_cma:0kB [ 208.953008][ C1] vkms_vblank_simulate: vblank timer overrun [ 209.030356][ T7263] lowmem_reserve[]: 0 0 0 0 0 [ 209.063464][ T7263] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 209.076468][ T7263] Node 0 DMA32: 2*4kB (UM) 484*8kB (UME) 437*16kB (UM) 275*32kB (UME) 76*64kB (UM) 11*128kB (UM) 4*256kB (UME) 1*512kB (U) 3*1024kB (UME) 1*2048kB (M) 320*4096kB (M) = 1343320kB [ 209.094680][ C1] vkms_vblank_simulate: vblank timer overrun [ 209.100989][ T7263] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 209.114454][ T7263] Node 1 Normal: 196*4kB (UE) 54*8kB (UME) 48*16kB (UME) 76*32kB (UME) 21*64kB (UME) 9*128kB (UME) 3*256kB (UM) 3*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 948*4096kB (M) = 3896320kB [ 209.133115][ T7263] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 209.142959][ T7263] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 209.152536][ T7263] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 209.162353][ T7263] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 209.171785][ T7263] 49656 total pagecache pages [ 209.176922][ T7263] 0 pages in swap cache [ 209.181155][ T7263] Free swap = 124996kB [ 209.185342][ T7263] Total swap = 124996kB [ 209.190384][ T7263] 2097051 pages RAM [ 209.212643][ T7263] 0 pages HighMem/MovableOnly [ 209.247853][ T7263] 425407 pages reserved [ 209.336517][ T7263] 0 pages cma reserved [ 210.358215][ T5938] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 210.536643][ T5938] usb 3-1: Using ep0 maxpacket: 16 [ 210.611791][ T5938] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 210.661571][ T5938] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 210.733503][ T5938] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 210.830512][ T5938] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 1, skipping [ 210.908528][ T5938] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 210.975460][ T5938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.023624][ T5938] usb 3-1: Product: syz [ 211.040880][ T5938] usb 3-1: Manufacturer: syz [ 211.045568][ T5938] usb 3-1: SerialNumber: syz [ 211.156450][ T5909] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 211.232771][ T7312] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 211.327975][ T5909] usb 1-1: Using ep0 maxpacket: 16 [ 211.339497][ T5909] usb 1-1: too many configurations: 121, using maximum allowed: 8 [ 211.369869][ T5909] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 211.383438][ T5909] usb 1-1: can't read configurations, error -61 [ 211.432500][ T5938] usb 3-1: USB disconnect, device number 11 [ 211.536448][ T5909] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 211.567573][ T5903] udevd[5903]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 211.736840][ T5909] usb 1-1: Using ep0 maxpacket: 16 [ 211.757135][ T5909] usb 1-1: too many configurations: 121, using maximum allowed: 8 [ 211.792074][ T5909] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 211.808217][ T5909] usb 1-1: can't read configurations, error -61 [ 211.831684][ T5909] usb usb1-port1: attempt power cycle [ 211.846630][ T5850] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 212.036932][ T5850] usb 2-1: Using ep0 maxpacket: 8 [ 212.054753][ T5850] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 212.065454][ T5850] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.088563][ T5850] usb 2-1: Product: syz [ 212.107126][ T5850] usb 2-1: Manufacturer: syz [ 212.111828][ T5850] usb 2-1: SerialNumber: syz [ 212.125335][ T5850] usb 2-1: config 0 descriptor?? [ 212.171007][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 212.171027][ T30] audit: type=1326 audit(1752020243.957:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7328 comm="syz.2.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3decf8e929 code=0x7ffc0000 [ 212.203923][ T5909] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 212.215043][ T30] audit: type=1326 audit(1752020243.957:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7328 comm="syz.2.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3decf8e929 code=0x7ffc0000 [ 212.250005][ T30] audit: type=1326 audit(1752020243.987:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7328 comm="syz.2.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3decf8e929 code=0x7ffc0000 [ 212.273205][ T5909] usb 1-1: Using ep0 maxpacket: 16 [ 212.280918][ T5909] usb 1-1: too many configurations: 121, using maximum allowed: 8 [ 212.289753][ T30] audit: type=1326 audit(1752020243.987:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7328 comm="syz.2.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3decf8e929 code=0x7ffc0000 [ 212.314823][ T5909] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 212.323171][ T5909] usb 1-1: can't read configurations, error -61 [ 212.354202][ T5850] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 212.373614][ T30] audit: type=1326 audit(1752020243.987:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7328 comm="syz.2.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3decf8e929 code=0x7ffc0000 [ 212.401531][ T30] audit: type=1326 audit(1752020243.997:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7328 comm="syz.2.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f3decf8e929 code=0x7ffc0000 [ 212.424647][ T30] audit: type=1326 audit(1752020243.997:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7328 comm="syz.2.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3decf8e929 code=0x7ffc0000 [ 212.447422][ T30] audit: type=1326 audit(1752020243.997:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7328 comm="syz.2.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3decf8e929 code=0x7ffc0000 [ 212.476441][ T5909] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 212.492335][ T30] audit: type=1326 audit(1752020244.027:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7328 comm="syz.2.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f3decf8e929 code=0x7ffc0000 [ 212.518562][ T30] audit: type=1326 audit(1752020244.027:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7328 comm="syz.2.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3decf8e929 code=0x7ffc0000 [ 212.523261][ T5909] usb 1-1: Using ep0 maxpacket: 16 [ 212.555575][ T5909] usb 1-1: too many configurations: 121, using maximum allowed: 8 [ 212.570213][ T5909] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 212.578438][ T5909] usb 1-1: can't read configurations, error -61 [ 212.586114][ T5909] usb usb1-port1: unable to enumerate USB device [ 212.709108][ T7337] loop2: detected capacity change from 0 to 7 [ 212.726603][ T5903] loop2: p1 [ 212.730262][ T5903] loop2: partition table partially beyond EOD, truncated [ 212.739010][ T5903] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 212.782404][ T7337] loop2: p1 [ 212.793434][ T7337] loop2: partition table partially beyond EOD, truncated [ 212.810195][ T7337] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 212.920896][ T7343] netlink: 148 bytes leftover after parsing attributes in process `syz.3.369'. [ 213.138753][ T5903] udevd[5903]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 213.201624][ T5903] udevd[5903]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 213.309729][ T7345] loop2: detected capacity change from 0 to 7 [ 213.317762][ T7345] loop2: [ 213.321710][ T7345] loop2: partition table partially beyond EOD, truncated [ 213.624209][ T7318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.672532][ T7318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.936617][ T5850] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 213.976980][ T5850] usb 2-1: USB disconnect, device number 22 [ 214.759837][ T7374] loop2: detected capacity change from 0 to 7 [ 214.815537][ T7374] loop2: p1 [ 214.894469][ T7374] loop2: partition table partially beyond EOD, truncated [ 215.000024][ T7374] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 215.215188][ T5903] udevd[5903]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 215.737264][ T7390] ptrace attach of "./syz-executor exec"[5859] was attempted by "./syz-executor exec"[7390] [ 216.798283][ T5909] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 218.156543][ T5909] usb 4-1: Using ep0 maxpacket: 16 [ 219.567509][ T7426] loop2: detected capacity change from 0 to 7 [ 219.601187][ T7426] loop2: p1 [ 219.616398][ T5850] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 219.617415][ T7426] loop2: partition table partially beyond EOD, truncated [ 219.654660][ T7418] netlink: 4 bytes leftover after parsing attributes in process `syz.0.390'. [ 219.676647][ T7426] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 219.786711][ T5850] usb 5-1: Using ep0 maxpacket: 16 [ 219.795821][ T5850] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.818779][ T5850] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.855793][ T5850] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 219.908621][ T5850] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 219.933466][ T5850] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.057840][ T5903] udevd[5903]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 220.112765][ T5850] usb 5-1: config 0 descriptor?? [ 220.419378][ T5909] usb 4-1: unable to get BOS descriptor or descriptor too short [ 220.456739][ T5909] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 220.480258][ T5909] usb 4-1: can't read configurations, error -71 [ 220.576432][ T43] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 220.641736][ T7440] netlink: 28 bytes leftover after parsing attributes in process `syz.1.398'. [ 220.798900][ T43] usb 3-1: config 0 has an invalid interface number: 101 but max is 0 [ 220.828172][ T43] usb 3-1: config 0 has no interface number 0 [ 220.844745][ T43] usb 3-1: config 0 interface 101 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 220.869457][ T43] usb 3-1: config 0 interface 101 altsetting 0 endpoint 0x9 has invalid maxpacket 2007, setting to 1024 [ 220.909146][ T43] usb 3-1: New USB device found, idVendor=093a, idProduct=2623, bcdDevice=b2.14 [ 220.936235][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.973526][ T43] usb 3-1: Product: syz [ 220.978206][ T43] usb 3-1: Manufacturer: syz [ 220.994433][ T43] usb 3-1: SerialNumber: syz [ 221.007709][ T43] usb 3-1: config 0 descriptor?? [ 221.013770][ T7449] netlink: 40 bytes leftover after parsing attributes in process `syz.1.400'. [ 221.030484][ T43] gspca_main: gspca_pac7302-2.14.0 probing 093a:2623 [ 221.054506][ T5850] usbhid 5-1:0.0: can't add hid device: -71 [ 221.125077][ T5850] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 221.177588][ T5850] usb 5-1: USB disconnect, device number 21 [ 221.206401][ T7450] ALSA: mixer_oss: invalid OSS volume '' [ 221.212204][ T7450] ALSA: mixer_oss: invalid OSS volume '' [ 221.220825][ T7450] ALSA: mixer_oss: invalid OSS volume '8’è' [ 221.366414][ T5909] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 221.451630][ T7452] netlink: 80 bytes leftover after parsing attributes in process `syz.4.401'. [ 221.466972][ T7452] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 511 [ 221.529835][ T5909] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 221.540295][ T5909] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 221.558331][ T5909] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 221.567865][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.576830][ T5909] usb 4-1: Product: syz [ 221.582289][ T5909] usb 4-1: Manufacturer: syz [ 221.592217][ T5909] usb 4-1: SerialNumber: syz [ 221.837139][ T43] input: gspca_pac7302 as /devices/platform/dummy_hcd.2/usb3/3-1/input/input9 [ 221.857685][ T5909] usb 4-1: 0:2 : does not exist [ 221.892790][ T5909] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 222.013527][ T5909] usb 4-1: USB disconnect, device number 24 [ 222.066843][ T7434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.075528][ T7434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.085401][ T7461] ptrace attach of "./syz-executor exec"[5860] was attempted by "./syz-executor exec"[7461] [ 222.217799][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 222.217818][ T30] audit: type=1326 audit(1752020253.987:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7433 comm="syz.2.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3decf8e929 code=0x7ffc0000 [ 222.259888][ T5940] udevd[5940]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 222.324468][ T30] audit: type=1326 audit(1752020253.987:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7433 comm="syz.2.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f3decf8e929 code=0x7ffc0000 [ 222.408406][ T30] audit: type=1326 audit(1752020253.987:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7433 comm="syz.2.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3decf8e929 code=0x7ffc0000 [ 222.448076][ T7469] netlink: 20 bytes leftover after parsing attributes in process `syz.4.406'. [ 222.512879][ T30] audit: type=1326 audit(1752020253.997:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7433 comm="syz.2.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3decf8e929 code=0x7ffc0000 [ 222.589804][ T30] audit: type=1326 audit(1752020253.997:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7433 comm="syz.2.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3decf8e929 code=0x7ffc0000 [ 222.616856][ T5850] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 222.730849][ T30] audit: type=1326 audit(1752020253.997:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7433 comm="syz.2.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3decf8e929 code=0x7ffc0000 [ 222.776457][ T5850] usb 2-1: Using ep0 maxpacket: 32 [ 222.796247][ T5850] usb 2-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice=3d.42 [ 222.810119][ T5850] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.820028][ T5850] usb 2-1: Product: syz [ 222.826429][ T30] audit: type=1326 audit(1752020253.997:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7433 comm="syz.2.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3decf8e929 code=0x7ffc0000 [ 222.831844][ T5850] usb 2-1: Manufacturer: syz [ 222.857538][ T5850] usb 2-1: SerialNumber: syz [ 222.879041][ T5850] usb 2-1: config 0 descriptor?? [ 222.904133][ T5850] ttusb_dec_send_command: command bulk message failed: error -22 [ 222.919499][ T5850] ttusb-dec 2-1:0.0: probe with driver ttusb-dec failed with error -22 [ 222.950737][ T30] audit: type=1326 audit(1752020253.997:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7433 comm="syz.2.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3decf8e929 code=0x7ffc0000 [ 222.961549][ T10] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 223.020929][ T30] audit: type=1326 audit(1752020253.997:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7433 comm="syz.2.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3decf8e929 code=0x7ffc0000 [ 223.046844][ T30] audit: type=1326 audit(1752020253.997:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7433 comm="syz.2.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f3decf8e929 code=0x7ffc0000 [ 223.120108][ T5909] usb 2-1: USB disconnect, device number 23 [ 223.162536][ T10] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 223.187001][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.198623][ T10] usb 4-1: Product: syz [ 223.202851][ T10] usb 4-1: Manufacturer: syz [ 223.213327][ T10] usb 4-1: SerialNumber: syz [ 223.244148][ T10] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 223.270594][ T5938] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 223.484054][ T10] usb 3-1: USB disconnect, device number 12 [ 224.089483][ T24] usb 4-1: USB disconnect, device number 25 [ 224.106686][ T5909] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 224.149362][ T7487] netlink: 152 bytes leftover after parsing attributes in process `syz.0.411'. [ 224.178313][ T7487] tipc: Started in network mode [ 224.183517][ T7487] tipc: Node identity fe80000000000000000000000000002a, cluster identity 4711 [ 224.197476][ T7487] tipc: Enabling of bearer rejected, failed to enable media [ 224.296936][ T5909] usb 3-1: Using ep0 maxpacket: 16 [ 224.370783][ T5938] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 224.431130][ T5938] ath9k_htc: Failed to initialize the device [ 224.453900][ T24] usb 4-1: ath9k_htc: USB layer deinitialized [ 224.816497][ T24] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 224.938883][ T5850] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 224.960407][ T24] usb 4-1: device descriptor read/64, error -71 [ 225.150506][ T5850] usb 1-1: too many configurations: 151, using maximum allowed: 8 [ 225.206407][ T24] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 225.278646][ T5850] usb 1-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 225.331290][ T5850] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 225.352680][ T5850] usb 1-1: Product: syz [ 225.370324][ T5850] usb 1-1: Manufacturer: syz [ 225.376799][ T24] usb 4-1: device descriptor read/64, error -71 [ 225.395931][ T5850] usb 1-1: SerialNumber: syz [ 225.439426][ T5850] usb 1-1: config 0 descriptor?? [ 225.507643][ T24] usb usb4-port1: attempt power cycle [ 225.856948][ T24] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 225.889544][ T24] usb 4-1: device descriptor read/8, error -71 [ 226.136530][ T24] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 226.157975][ T24] usb 4-1: device descriptor read/8, error -71 [ 226.279403][ T24] usb usb4-port1: unable to enumerate USB device [ 227.456909][ T5938] usb 1-1: USB disconnect, device number 20 [ 227.756474][ T5931] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 228.165410][ T5909] usb 3-1: unable to get BOS descriptor or descriptor too short [ 228.296179][ T5909] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 228.316175][ T5909] usb 3-1: can't read configurations, error -71 [ 228.336922][ T5931] usb 5-1: config 0 has no interfaces? [ 228.393347][ T5931] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 228.446662][ T5931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.454832][ T5931] usb 5-1: Product: syz [ 228.460460][ T5931] usb 5-1: Manufacturer: syz [ 228.470818][ T5931] usb 5-1: SerialNumber: syz [ 228.495619][ T5931] usb 5-1: config 0 descriptor?? [ 228.997301][ T7556] netlink: 28 bytes leftover after parsing attributes in process `syz.2.422'. [ 229.028015][ T7558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.423'. [ 229.266484][ T5931] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 229.446433][ T5931] usb 1-1: Using ep0 maxpacket: 16 [ 230.827480][ T5850] usb 5-1: USB disconnect, device number 22 [ 230.876383][ T5938] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 231.186610][ T5938] usb 3-1: Using ep0 maxpacket: 8 [ 231.356832][ T5938] usb 3-1: New USB device found, idVendor=0ab4, idProduct=0014, bcdDevice=c4.18 [ 231.411989][ T5938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.485732][ T5938] usb 3-1: Product: syz [ 231.516223][ T5938] usb 3-1: Manufacturer: syz [ 231.542869][ T5938] usb 3-1: SerialNumber: syz [ 231.617098][ T5938] usb 3-1: config 0 descriptor?? [ 231.709892][ T5938] esd_usb 3-1:0.0: sending version message failed [ 231.729085][ T5938] esd_usb 3-1:0.0: probe with driver esd_usb failed with error -22 [ 232.006029][ T5931] usb 1-1: unable to get BOS descriptor or descriptor too short [ 232.049605][ T5931] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 232.093242][ T5931] usb 1-1: can't read configurations, error -71 [ 232.336682][ T5909] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 232.544878][ T5909] usb 5-1: Using ep0 maxpacket: 16 [ 233.046386][ T10] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 233.342973][ T5850] usb 3-1: USB disconnect, device number 15 [ 233.379579][ T10] usb 2-1: config 0 has no interfaces? [ 233.390616][ T10] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 233.433149][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.518428][ T10] usb 2-1: Product: syz [ 233.569179][ T10] usb 2-1: Manufacturer: syz [ 233.610226][ T7604] tipc: Started in network mode [ 233.644648][ T7604] tipc: Node identity ac14140c, cluster identity 4711 [ 233.655289][ T10] usb 2-1: SerialNumber: syz [ 233.662687][ T7604] tipc: New replicast peer: 255.255.255.255 [ 233.759519][ T10] usb 2-1: config 0 descriptor?? [ 233.793138][ T7604] tipc: Enabled bearer , priority 10 [ 233.855579][ T7606] netlink: 12 bytes leftover after parsing attributes in process `syz.3.436'. [ 233.928557][ T7606] tipc: Disabling bearer [ 234.370517][ T7616] netlink: 28 bytes leftover after parsing attributes in process `syz.3.439'. [ 234.640397][ T5931] usb 2-1: USB disconnect, device number 24 [ 234.800959][ T7618] netlink: 116 bytes leftover after parsing attributes in process `syz.2.440'. [ 234.979655][ T7623] netlink: 'syz.1.441': attribute type 1 has an invalid length. [ 235.435138][ T7632] netlink: 44 bytes leftover after parsing attributes in process `syz.0.442'. [ 235.603528][ T7640] IPv6: addrconf: prefix option has invalid lifetime [ 235.676757][ T5909] usb 5-1: unable to get BOS descriptor or descriptor too short [ 235.736550][ T5909] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 235.744235][ T5909] usb 5-1: can't read configurations, error -71 [ 235.976544][ T5938] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 236.336441][ T5931] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 236.396426][ T5909] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 236.446400][ T5938] usb 2-1: Using ep0 maxpacket: 16 [ 236.489047][ T5938] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 236.511581][ T5938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.546491][ T5938] usb 2-1: Product: syz [ 236.550759][ T5938] usb 2-1: Manufacturer: syz [ 236.557472][ T5909] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 236.571999][ T5931] usb 3-1: config 0 has no interfaces? [ 236.619577][ T5938] usb 2-1: SerialNumber: syz [ 236.639708][ T5909] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 236.691584][ T5938] usb 2-1: config 0 descriptor?? [ 236.712041][ T5931] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 236.723499][ T5909] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 236.744578][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.756792][ T5938] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 236.766372][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.788856][ T5938] usb 2-1: Detected FT-X [ 236.793348][ T5931] usb 3-1: Product: syz [ 236.817973][ T5931] usb 3-1: Manufacturer: syz [ 236.835433][ T7649] bridge0: entered promiscuous mode [ 236.843315][ T7649] bond0: entered promiscuous mode [ 236.867017][ T5931] usb 3-1: SerialNumber: syz [ 236.933680][ T5931] usb 3-1: config 0 descriptor?? [ 236.936675][ T7649] bond_slave_0: entered promiscuous mode [ 237.000285][ T7649] bond_slave_1: entered promiscuous mode [ 237.054981][ T7649] hsr1: entered allmulticast mode [ 237.065017][ T7649] bridge0: entered allmulticast mode [ 237.075402][ T7649] bond0: entered allmulticast mode [ 237.084651][ T7645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.094312][ T5909] usb 5-1: usb_control_msg returned -32 [ 237.105935][ T7649] bond_slave_0: entered allmulticast mode [ 237.110954][ T7645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.130098][ T5909] usbtmc 5-1:16.0: can't read capabilities [ 237.235956][ T7649] bond_slave_1: entered allmulticast mode [ 237.891870][ T5938] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 238.019403][ T5938] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 238.027287][ T5938] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 238.200316][ T5938] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 238.252919][ T5938] usb 2-1: USB disconnect, device number 25 [ 238.301972][ T5909] usb 5-1: USB disconnect, device number 24 [ 238.328724][ T5938] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 238.350764][ T5938] ftdi_sio 2-1:0.0: device disconnected [ 238.407092][ T7663] snd_dummy snd_dummy.0: control 3:5:3:syz1:9 is already present [ 238.886163][ T7666] netlink: 152 bytes leftover after parsing attributes in process `syz.1.450'. [ 238.972820][ T7666] tipc: Started in network mode [ 239.026471][ T7666] tipc: Node identity fe80000000000000000000000000002a, cluster identity 1776 [ 239.037666][ T7666] tipc: Enabled bearer , priority 10 [ 239.490918][ T5833] usb 3-1: USB disconnect, device number 16 [ 239.932519][ T7679] netlink: 148 bytes leftover after parsing attributes in process `syz.3.455'. [ 239.976580][ T5938] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 240.036427][ T1209] tipc: Node number set to 4269801514 [ 240.178587][ T5938] usb 2-1: too many configurations: 31, using maximum allowed: 8 [ 240.266576][ T5938] usb 2-1: config 0 has an invalid interface number: 140 but max is 0 [ 240.311998][ T5938] usb 2-1: config 0 has no interface number 0 [ 240.336567][ T5938] usb 2-1: config 0 has an invalid interface number: 140 but max is 0 [ 240.395405][ T5938] usb 2-1: config 0 has no interface number 0 [ 240.450999][ T5938] usb 2-1: config 0 has an invalid interface number: 140 but max is 0 [ 240.469318][ T5938] usb 2-1: config 0 has no interface number 0 [ 240.516519][ T5938] usb 2-1: config 0 has an invalid interface number: 140 but max is 0 [ 240.626917][ T5938] usb 2-1: config 0 has no interface number 0 [ 240.668433][ T5938] usb 2-1: config 0 has an invalid interface number: 140 but max is 0 [ 240.690672][ T5938] usb 2-1: config 0 has no interface number 0 [ 240.720837][ T5938] usb 2-1: config 0 has an invalid interface number: 140 but max is 0 [ 240.741200][ T5938] usb 2-1: config 0 has no interface number 0 [ 241.151809][ T5938] usb 2-1: config 0 has an invalid interface number: 140 but max is 0 [ 241.192367][ T5938] usb 2-1: config 0 has no interface number 0 [ 241.217138][ T5938] usb 2-1: config 0 has an invalid interface number: 140 but max is 0 [ 241.246207][ T5938] usb 2-1: config 0 has no interface number 0 [ 241.555214][ T5938] usb 2-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice=71.01 [ 241.573105][ T5938] usb 2-1: New USB device strings: Mfr=174, Product=61, SerialNumber=132 [ 241.601295][ T5938] usb 2-1: Product: syz [ 241.676511][ T5938] usb 2-1: Manufacturer: syz [ 241.706541][ T5938] usb 2-1: SerialNumber: syz [ 241.757690][ T5938] usb 2-1: config 0 descriptor?? [ 241.987986][ T5938] as10x_usb: device has been detected [ 242.026007][ T5938] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 242.128339][ T5938] usb 2-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 242.201859][ T5938] as10x_usb: error during firmware upload part1 [ 242.215307][ T5938] Registered device Elgato EyeTV DTT Deluxe [ 242.242070][ T5938] usb 2-1: USB disconnect, device number 26 [ 242.453551][ T5938] Unregistered device Elgato EyeTV DTT Deluxe [ 242.465555][ T5938] as10x_usb: device has been disconnected [ 242.481952][ T7695] xt_hashlimit: size too large, truncated to 1048576 [ 242.547993][ T7696] netlink: 4 bytes leftover after parsing attributes in process `syz.4.459'. [ 243.167636][ T7703] loop2: detected capacity change from 0 to 7 [ 243.181530][ T7695] Cannot find set identified by id 65535 to match [ 243.212523][ T7703] loop2: p1 [ 243.226474][ T7703] loop2: partition table partially beyond EOD, truncated [ 243.247216][ T7703] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 243.342735][ T5903] udevd[5903]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 243.613119][ T7712] netlink: 116 bytes leftover after parsing attributes in process `syz.4.465'. [ 243.624775][ T7711] netlink: 152 bytes leftover after parsing attributes in process `syz.0.464'. [ 243.635008][ T7712] FAULT_INJECTION: forcing a failure. [ 243.635008][ T7712] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.648674][ T7711] tipc: Enabling of bearer rejected, failed to enable media [ 243.687302][ T7712] CPU: 1 UID: 0 PID: 7712 Comm: syz.4.465 Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(full) [ 243.687335][ T7712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 243.687363][ T7712] Call Trace: [ 243.687377][ T7712] [ 243.687387][ T7712] dump_stack_lvl+0x189/0x250 [ 243.687419][ T7712] ? __pfx____ratelimit+0x10/0x10 [ 243.687453][ T7712] ? __pfx_dump_stack_lvl+0x10/0x10 [ 243.687480][ T7712] ? __pfx__printk+0x10/0x10 [ 243.687522][ T7712] should_fail_ex+0x414/0x560 [ 243.687561][ T7712] _copy_to_user+0x31/0xb0 [ 243.687590][ T7712] simple_read_from_buffer+0xe1/0x170 [ 243.687624][ T7712] proc_fail_nth_read+0x1df/0x250 [ 243.687659][ T7712] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 243.687694][ T7712] ? rw_verify_area+0x258/0x650 [ 243.687717][ T7712] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 243.687750][ T7712] vfs_read+0x200/0x980 [ 243.687782][ T7712] ? __pfx___mutex_lock+0x10/0x10 [ 243.687804][ T7712] ? __pfx_vfs_read+0x10/0x10 [ 243.687830][ T7712] ? __fget_files+0x2a/0x420 [ 243.687864][ T7712] ? __fget_files+0x3a0/0x420 [ 243.687891][ T7712] ? __fget_files+0x2a/0x420 [ 243.687936][ T7712] ksys_read+0x145/0x250 [ 243.687963][ T7712] ? __pfx_ksys_read+0x10/0x10 [ 243.687985][ T7712] ? rcu_is_watching+0x15/0xb0 [ 243.688017][ T7712] ? do_syscall_64+0xbe/0x3b0 [ 243.688042][ T7712] do_syscall_64+0xfa/0x3b0 [ 243.688062][ T7712] ? lockdep_hardirqs_on+0x9c/0x150 [ 243.688095][ T7712] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.688116][ T7712] ? clear_bhb_loop+0x60/0xb0 [ 243.688142][ T7712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.688164][ T7712] RIP: 0033:0x7fdcbeb8d33c [ 243.688184][ T7712] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 243.688202][ T7712] RSP: 002b:00007fdcbfa5b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 243.688227][ T7712] RAX: ffffffffffffffda RBX: 00007fdcbedb5fa0 RCX: 00007fdcbeb8d33c [ 243.688244][ T7712] RDX: 000000000000000f RSI: 00007fdcbfa5b0a0 RDI: 0000000000000004 [ 243.688261][ T7712] RBP: 00007fdcbfa5b090 R08: 0000000000000000 R09: 0000000000000000 [ 243.688275][ T7712] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000001 [ 243.688287][ T7712] R13: 0000000000000000 R14: 00007fdcbedb5fa0 R15: 00007fdcbeedfa28 [ 243.688316][ T7712] [ 244.411192][ T5909] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 244.485508][ T5909] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 244.490247][ T7724] syzkaller1: entered promiscuous mode [ 244.511217][ T5909] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 244.530366][ T7724] syzkaller1: entered allmulticast mode [ 244.647901][ T5909] hid-generic 0003:0004:0000.0004: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 245.077054][ T7732] fido_id[7732]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 246.420847][ T7746] loop2: detected capacity change from 0 to 7 [ 246.451595][ T7746] loop2: p1 [ 246.454904][ T7746] loop2: partition table partially beyond EOD, truncated [ 246.471443][ T7746] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 246.660254][ T5903] udevd[5903]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 246.939619][ T5909] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 247.087341][ T5909] usb 1-1: device descriptor read/64, error -71 [ 247.156512][ T5931] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 247.178225][ T5938] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 247.462526][ T5931] usb 3-1: config 0 has no interfaces? [ 247.475631][ T5931] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 247.487604][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.501389][ T5909] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 247.520490][ T5938] usb 5-1: config 0 has no interfaces? [ 247.557298][ T5938] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 247.566541][ T5938] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.574611][ T5938] usb 5-1: Product: syz [ 247.578946][ T5938] usb 5-1: Manufacturer: syz [ 247.586026][ T5938] usb 5-1: SerialNumber: syz [ 247.618038][ T5938] usb 5-1: config 0 descriptor?? [ 247.682861][ T5931] usb 3-1: Product: syz [ 247.738915][ T5931] usb 3-1: Manufacturer: syz [ 247.744064][ T5931] usb 3-1: SerialNumber: syz [ 247.881517][ T7763] netlink: 'syz.4.476': attribute type 12 has an invalid length. [ 247.889810][ T7763] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.476'. [ 247.907163][ T5931] usb 3-1: config 0 descriptor?? [ 248.345645][ T7762] netlink: 'syz.2.477': attribute type 12 has an invalid length. [ 248.354034][ T7762] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.477'. [ 248.772842][ T7784] netlink: 'syz.0.483': attribute type 6 has an invalid length. [ 248.795739][ T7784] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.483'. [ 249.023224][ T7794] netlink: 152 bytes leftover after parsing attributes in process `syz.3.485'. [ 249.093700][ T5938] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 249.107238][ T7794] tipc: Enabled bearer , priority 10 [ 249.322496][ T5938] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 249.354088][ T5938] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 249.393990][ T5938] usb 1-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=d0.62 [ 249.403546][ T5938] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.438306][ T5938] usb 1-1: Product: syz [ 249.446111][ T5938] usb 1-1: Manufacturer: syz [ 249.457666][ T5938] usb 1-1: SerialNumber: syz [ 249.482695][ T5938] usb 1-1: config 0 descriptor?? [ 250.234482][ T1209] usb 5-1: USB disconnect, device number 25 [ 250.237478][ T5909] tipc: Node number set to 2886997004 [ 250.385431][ T5931] usb 3-1: USB disconnect, device number 17 [ 250.534280][ T7811] tipc: Enabled bearer , priority 0 [ 250.549012][ T7811] syzkaller0: entered promiscuous mode [ 250.554671][ T7811] syzkaller0: entered allmulticast mode [ 250.705712][ T7816] syzkaller0: mtu less than device minimum [ 250.828657][ T7810] tipc: Resetting bearer [ 251.055446][ T7810] tipc: Disabling bearer [ 251.056520][ T1209] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 251.609137][ T5938] usb 1-1: USB disconnect, device number 25 [ 251.644209][ T1209] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 251.663819][ T1209] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.694372][ T1209] usb 3-1: Product: syz [ 251.701800][ T1209] usb 3-1: Manufacturer: syz [ 251.722333][ T1209] usb 3-1: SerialNumber: syz [ 251.767179][ T1209] usb 3-1: config 0 descriptor?? [ 251.813388][ T1209] ch341 3-1:0.0: ch341-uart converter detected [ 252.072618][ T1209] usb 3-1: failed to receive control message: -121 [ 252.092872][ T1209] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121 [ 252.176040][ T7825] netlink: 116 bytes leftover after parsing attributes in process `syz.4.493'. [ 252.340700][ T7827] loop2: detected capacity change from 0 to 7 [ 252.367092][ T7827] Dev loop2: unable to read RDB block 7 [ 252.372777][ T7827] loop2: unable to read partition table [ 252.405742][ T7827] loop2: partition table beyond EOD, truncated [ 252.414320][ T7827] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 252.894759][ T7841] veth0: entered promiscuous mode [ 252.919744][ T7843] netlink: 4 bytes leftover after parsing attributes in process `syz.3.498'. [ 252.986455][ T1209] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 253.426374][ T1209] usb 1-1: Using ep0 maxpacket: 16 [ 253.926424][ T5931] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 254.306806][ T10] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 254.382427][ T5931] usb 4-1: config 0 has no interfaces? [ 254.399028][ T5931] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 254.409043][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.466837][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 254.473140][ T5931] usb 4-1: Product: syz [ 254.485470][ T5931] usb 4-1: Manufacturer: syz [ 254.500704][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.520758][ T5931] usb 4-1: SerialNumber: syz [ 254.537131][ T5931] usb 4-1: config 0 descriptor?? [ 254.561200][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.590789][ T7865] netlink: 152 bytes leftover after parsing attributes in process `syz.4.502'. [ 254.607942][ T7865] tipc: Enabling of bearer rejected, already enabled [ 254.769250][ T7855] netlink: 'syz.3.499': attribute type 12 has an invalid length. [ 254.778906][ T7855] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.499'. [ 254.797579][ T10] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 254.807488][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.825955][ T10] usb 2-1: config 0 descriptor?? [ 254.903823][ T5938] usb 3-1: USB disconnect, device number 18 [ 254.929034][ T5938] ch341 3-1:0.0: device disconnected [ 255.594696][ T7859] tipc: Enabled bearer , priority 0 [ 255.615523][ T7859] syzkaller0: entered promiscuous mode [ 255.634113][ T7859] syzkaller0: entered allmulticast mode [ 255.661503][ T7859] tipc: Resetting bearer [ 255.896505][ T10] hid-picolcd 0003:04D8:F002.0005: No report with id 0xf3 found [ 256.024492][ T10] hid-picolcd 0003:04D8:F002.0005: No report with id 0xf4 found [ 256.304941][ T7858] tipc: Resetting bearer [ 256.411996][ T7858] tipc: Disabling bearer [ 256.544888][ T5931] usb 2-1: USB disconnect, device number 27 [ 257.207661][ T1209] usb 1-1: unable to get BOS descriptor or descriptor too short [ 257.244229][ T1209] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 257.282653][ T1209] usb 1-1: can't read configurations, error -71 [ 257.774906][ T7891] netlink: 152 bytes leftover after parsing attributes in process `syz.4.509'. [ 257.846151][ T7891] tipc: Enabling of bearer rejected, already enabled [ 258.287324][ T5938] usb 4-1: USB disconnect, device number 30 [ 258.472684][ T7904] loop2: detected capacity change from 0 to 7 [ 258.716473][ T7904] loop2: [ 258.720580][ T7904] loop2: partition table partially beyond EOD, truncated [ 259.494384][ T7908] netlink: 152 bytes leftover after parsing attributes in process `syz.4.513'. [ 259.569762][ T7908] tipc: Enabling of bearer rejected, already enabled [ 259.632464][ T7912] sctp: [Deprecated]: syz.0.514 (pid 7912) Use of struct sctp_assoc_value in delayed_ack socket option. [ 259.632464][ T7912] Use struct sctp_sack_info instead [ 260.049550][ T5833] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 260.139147][ T5909] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 260.296476][ T5909] usb 1-1: device descriptor read/64, error -71 [ 260.306800][ T5833] usb 4-1: Using ep0 maxpacket: 16 [ 260.319830][ T5833] usb 4-1: config 0 interface 0 altsetting 48 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 260.335712][ T5833] usb 4-1: config 0 interface 0 has no altsetting 0 [ 260.348634][ T5833] usb 4-1: New USB device found, idVendor=046d, idProduct=c219, bcdDevice= 0.00 [ 260.365970][ T5833] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.377476][ T10] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 260.395411][ T5833] usb 4-1: config 0 descriptor?? [ 260.546533][ T5909] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 260.583231][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 260.754314][ T5909] usb 1-1: device descriptor read/64, error -71 [ 260.876874][ T5909] usb usb1-port1: attempt power cycle [ 261.023688][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.030332][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.566469][ T5909] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 261.657101][ T5909] usb 1-1: device descriptor read/8, error -71 [ 261.922346][ T5909] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 261.991079][ T5909] usb 1-1: device descriptor read/8, error -71 [ 262.129306][ T5909] usb usb1-port1: unable to enumerate USB device [ 263.286530][ T5833] usbhid 4-1:0.0: can't add hid device: -71 [ 263.326051][ T5833] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 263.367141][ T5833] usb 4-1: USB disconnect, device number 31 [ 264.095503][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 264.157945][ T10] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 264.160696][ T7936] netlink: 40 bytes leftover after parsing attributes in process `syz.0.521'. [ 264.208317][ T7936] ALSA: mixer_oss: invalid OSS volume '' [ 264.214142][ T7936] ALSA: mixer_oss: invalid OSS volume '' [ 264.216452][ T10] usb 5-1: can't read configurations, error -71 [ 264.252712][ T7936] ALSA: mixer_oss: invalid OSS volume '8’è' [ 264.739819][ T7948] fuse: Bad value for 'fd' [ 264.805026][ T7940] netlink: 64 bytes leftover after parsing attributes in process `syz.3.520'. [ 264.886377][ T10] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 265.076572][ T5931] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 265.264153][ T5931] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 265.816518][ T5931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.855235][ T5931] usb 2-1: config 0 descriptor?? [ 265.857674][ T10] usb 5-1: config 0 has no interfaces? [ 265.878508][ T10] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 265.927112][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.006369][ T10] usb 5-1: Product: syz [ 266.010667][ T10] usb 5-1: Manufacturer: syz [ 266.015759][ T10] usb 5-1: SerialNumber: syz [ 266.048802][ T7958] netlink: 152 bytes leftover after parsing attributes in process `syz.3.526'. [ 266.091389][ T7958] tipc: Enabling of bearer rejected, already enabled [ 266.091581][ T5931] usb 2-1: Cannot read MAC address [ 266.118003][ T10] usb 5-1: config 0 descriptor?? [ 266.128196][ T5931] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 266.386654][ T5931] usb 2-1: USB disconnect, device number 28 [ 266.418700][ T7943] netlink: 'syz.4.522': attribute type 12 has an invalid length. [ 266.426748][ T7943] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.522'. [ 268.166435][ T5938] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 268.396833][ T5938] usb 1-1: Using ep0 maxpacket: 16 [ 269.144557][ T7991] capability: warning: `syz.2.534' uses 32-bit capabilities (legacy support in use) [ 269.233833][ T5909] usb 5-1: USB disconnect, device number 27 [ 269.899341][ T5931] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 270.060622][ T5931] usb 3-1: Using ep0 maxpacket: 8 [ 270.084252][ T5931] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 270.099497][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.108535][ T5931] usb 3-1: Product: syz [ 270.112935][ T5931] usb 3-1: Manufacturer: syz [ 270.142935][ T5931] usb 3-1: SerialNumber: syz [ 270.194211][ T5931] usb 3-1: config 0 descriptor?? [ 270.597722][ T5931] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 271.469521][ T8010] loop2: detected capacity change from 0 to 7 [ 271.508700][ T8010] loop2: p1 [ 271.512042][ T8010] loop2: partition table partially beyond EOD, truncated [ 271.568047][ T8010] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 271.621289][ T5938] usb 1-1: unable to get BOS descriptor or descriptor too short [ 271.685830][ T5938] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 271.724441][ T5938] usb 1-1: can't read configurations, error -71 [ 271.910467][ T5940] udevd[5940]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 272.038201][ T5931] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 272.059786][ T5931] usb 3-1: USB disconnect, device number 19 [ 272.067899][ T8021] warning: `syz.0.542' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 272.082821][ T8021] netlink: 60 bytes leftover after parsing attributes in process `syz.0.542'. [ 272.276520][ T1209] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 272.583737][ T1209] usb 5-1: Using ep0 maxpacket: 8 [ 272.751184][ T1209] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 272.859300][ T8026] loop4: detected capacity change from 0 to 7 [ 272.869341][ T8026] Dev loop4: unable to read RDB block 7 [ 272.875002][ T8026] loop4: AHDI p1 p2 [ 272.890218][ T1209] usb 5-1: config 0 interface 0 has no altsetting 0 [ 272.924948][ T1209] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 272.949388][ T1209] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.986327][ T1209] usb 5-1: Product: syz [ 272.996480][ T8026] loop4: partition table partially beyond EOD, truncated [ 273.015046][ T1209] usb 5-1: Manufacturer: syz [ 273.055214][ T1209] usb 5-1: SerialNumber: syz [ 273.142420][ T1209] usb 5-1: config 0 descriptor?? [ 273.198397][ T1209] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found [ 273.208368][ T8026] loop4: p1 size 4227858431 extends beyond EOD, truncated [ 273.431406][ T1209] snd_usb_toneport 5-1:0.0: cannot get proper max packet size [ 273.479289][ T1209] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected [ 273.558706][ T1209] snd_usb_toneport 5-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 273.633868][ T5938] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 273.892016][ T8037] FAULT_INJECTION: forcing a failure. [ 273.892016][ T8037] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 273.915515][ T5938] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 273.925669][ T5938] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.948617][ T8037] CPU: 1 UID: 0 PID: 8037 Comm: syz.3.548 Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(full) [ 273.948656][ T8037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 273.948670][ T8037] Call Trace: [ 273.948677][ T8037] [ 273.948686][ T8037] dump_stack_lvl+0x189/0x250 [ 273.948717][ T8037] ? __pfx____ratelimit+0x10/0x10 [ 273.948752][ T8037] ? __pfx_dump_stack_lvl+0x10/0x10 [ 273.948780][ T8037] ? __pfx__printk+0x10/0x10 [ 273.948823][ T8037] should_fail_ex+0x414/0x560 [ 273.948861][ T8037] _copy_to_user+0x31/0xb0 [ 273.948890][ T8037] simple_read_from_buffer+0xe1/0x170 [ 273.948924][ T8037] proc_fail_nth_read+0x1df/0x250 [ 273.948958][ T8037] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 273.948993][ T8037] ? rw_verify_area+0x258/0x650 [ 273.949016][ T8037] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 273.949050][ T8037] vfs_read+0x200/0x980 [ 273.949079][ T8037] ? __pfx___mutex_lock+0x10/0x10 [ 273.949101][ T8037] ? __pfx_vfs_read+0x10/0x10 [ 273.949127][ T8037] ? __fget_files+0x2a/0x420 [ 273.949162][ T8037] ? __fget_files+0x3a0/0x420 [ 273.949189][ T8037] ? __fget_files+0x2a/0x420 [ 273.949227][ T8037] ksys_read+0x145/0x250 [ 273.949254][ T8037] ? __pfx_ksys_read+0x10/0x10 [ 273.949276][ T8037] ? rcu_is_watching+0x15/0xb0 [ 273.949308][ T8037] ? do_syscall_64+0xbe/0x3b0 [ 273.949334][ T8037] do_syscall_64+0xfa/0x3b0 [ 273.949354][ T8037] ? lockdep_hardirqs_on+0x9c/0x150 [ 273.949386][ T8037] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.949408][ T8037] ? clear_bhb_loop+0x60/0xb0 [ 273.949435][ T8037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.949456][ T8037] RIP: 0033:0x7f1fe778d33c [ 273.949474][ T8037] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 273.949493][ T8037] RSP: 002b:00007f1fe85d7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 273.949517][ T8037] RAX: ffffffffffffffda RBX: 00007f1fe79b5fa0 RCX: 00007f1fe778d33c [ 273.949533][ T8037] RDX: 000000000000000f RSI: 00007f1fe85d70a0 RDI: 0000000000000004 [ 273.949546][ T8037] RBP: 00007f1fe85d7090 R08: 0000000000000000 R09: 0000000000000000 [ 273.949559][ T8037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.949570][ T8037] R13: 0000000000000000 R14: 00007f1fe79b5fa0 R15: 00007f1fe7adfa28 [ 273.949604][ T8037] [ 274.436353][ T5938] usb 2-1: config 0 descriptor?? [ 275.824920][ T8050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.868609][ T8050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.001051][ T5938] pegasus 2-1:0.0: probe with driver pegasus failed with error -71 [ 276.097227][ T5938] usb 2-1: USB disconnect, device number 29 [ 276.429343][ T8060] netlink: 'syz.2.553': attribute type 10 has an invalid length. [ 276.464624][ T8060] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.498959][ T8060] bond0: (slave team0): Enslaving as an active interface with an up link [ 276.516535][ T10] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 276.676443][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 277.436418][ T5931] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 277.616339][ T5931] usb 2-1: Using ep0 maxpacket: 8 [ 277.624398][ T5931] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 277.984711][ T5931] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 278.020166][ T5931] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 278.048075][ T5931] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 278.123368][ T5931] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 278.204093][ T5931] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 278.542213][ T5931] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 278.581139][ T5931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.892891][ T5938] usb 5-1: USB disconnect, device number 28 [ 278.910808][ T8067] binder: 8062:8067 ioctl c00c6211 0 returned -14 [ 279.044720][ T5931] usb 2-1: GET_CAPABILITIES returned 0 [ 279.081007][ T5931] usbtmc 2-1:16.0: can't read capabilities [ 279.695858][ C0] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 279.801914][ T8074] usbtmc 2-1:16.0: Unable to send data, error -71 [ 279.808440][ T8086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.858684][ T8086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.898669][ T8087] netlink: 24 bytes leftover after parsing attributes in process `syz.4.559'. [ 279.972620][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 280.020838][ T10] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 280.053549][ T10] usb 1-1: can't read configurations, error -71 [ 281.055006][ T8116] netlink: 152 bytes leftover after parsing attributes in process `syz.3.568'. [ 281.349495][ T5909] usb 2-1: USB disconnect, device number 30 [ 281.358375][ T8116] tipc: Enabling of bearer rejected, already enabled [ 281.386417][ T5833] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 281.851661][ T5833] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 281.877311][ T5833] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 281.966434][ T5833] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 281.985839][ T5833] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.993976][ T5833] usb 3-1: Product: syz [ 282.006345][ T5833] usb 3-1: Manufacturer: syz [ 282.011997][ T5833] usb 3-1: SerialNumber: syz [ 282.155365][ T5938] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 282.295594][ T8115] netlink: 20 bytes leftover after parsing attributes in process `syz.2.569'. [ 282.354783][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 282.354803][ T30] audit: type=1326 audit(1752020314.137:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8122 comm="syz.0.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3678f8e929 code=0x7ffc0000 [ 282.386401][ T5938] usb 2-1: Using ep0 maxpacket: 16 [ 282.414472][ T8115] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 282.430957][ T5938] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 282.454814][ T5938] usb 2-1: config 0 has no interface number 0 [ 282.474736][ T8126] Cannot find add_set index 0 as target [ 282.482958][ T5938] usb 2-1: too many endpoints for config 0 interface 21 altsetting 212: 252, using maximum allowed: 30 [ 282.589392][ T30] audit: type=1326 audit(1752020314.137:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8122 comm="syz.0.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f3678f8e929 code=0x7ffc0000 [ 282.735240][ T5938] usb 2-1: config 0 interface 21 altsetting 212 has 0 endpoint descriptors, different from the interface descriptor's value: 252 [ 282.752467][ T30] audit: type=1326 audit(1752020314.137:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8122 comm="syz.0.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3678f8e929 code=0x7ffc0000 [ 282.807010][ T5833] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 282.835743][ T5938] usb 2-1: config 0 interface 21 has no altsetting 0 [ 282.856035][ T5938] usb 2-1: New USB device found, idVendor=0458, idProduct=704a, bcdDevice=3a.55 [ 282.868414][ T5938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.906215][ T5938] usb 2-1: Product: syz [ 282.921073][ T30] audit: type=1326 audit(1752020314.137:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8122 comm="syz.0.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3678f8e929 code=0x7ffc0000 [ 282.935032][ T5938] usb 2-1: Manufacturer: syz [ 282.969936][ T5938] usb 2-1: SerialNumber: syz [ 282.992774][ T5938] usb 2-1: config 0 descriptor?? [ 283.038219][ T5938] gspca_main: gspca_sn9c20x-2.14.0 probing 0458:704a [ 283.113434][ T5833] usb 3-1: USB disconnect, device number 20 [ 283.151505][ T30] audit: type=1326 audit(1752020314.137:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8122 comm="syz.0.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3678f8e929 code=0x7ffc0000 [ 283.229809][ T5903] udevd[5903]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 283.340237][ T30] audit: type=1326 audit(1752020314.137:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8122 comm="syz.0.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3678f8e929 code=0x7ffc0000 [ 283.370854][ T10] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 283.377081][ T30] audit: type=1326 audit(1752020314.137:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8122 comm="syz.0.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3678f8e929 code=0x7ffc0000 [ 283.392433][ T8138] deleting an unspecified loop device is not supported. [ 283.497785][ T8118] netlink: 4 bytes leftover after parsing attributes in process `syz.1.570'. [ 283.556487][ T30] audit: type=1326 audit(1752020314.137:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8122 comm="syz.0.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3678f8e929 code=0x7ffc0000 [ 283.587062][ T30] audit: type=1326 audit(1752020314.147:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8122 comm="syz.0.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3678f8d290 code=0x7ffc0000 [ 283.656651][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 283.683780][ T5938] gspca_sn9c20x: Write register 1001 failed -71 [ 283.694376][ T30] audit: type=1326 audit(1752020314.147:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8122 comm="syz.0.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3678f8e929 code=0x7ffc0000 [ 283.719146][ T5938] gspca_sn9c20x: Device initialization failed [ 283.845656][ T5938] gspca_sn9c20x 2-1:0.21: probe with driver gspca_sn9c20x failed with error -71 [ 283.974575][ T5938] usb 2-1: USB disconnect, device number 31 [ 286.575539][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 286.667393][ T10] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 286.844648][ T10] usb 1-1: can't read configurations, error -71 [ 287.768293][ T8191] loop2: detected capacity change from 0 to 7 [ 287.787152][ T8191] loop2: p1 [ 287.790473][ T8191] loop2: partition table partially beyond EOD, truncated [ 287.818162][ T8191] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 287.949278][ T5903] udevd[5903]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 288.806433][ T5931] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 288.856403][ T5833] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 289.075821][ T5833] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 289.088347][ T5833] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 289.223953][ T5833] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 289.236528][ T5833] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 289.276366][ T5931] usb 2-1: Using ep0 maxpacket: 16 [ 289.285646][ T5833] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 289.379781][ T5833] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.392440][ T5833] usb 4-1: Product: syz [ 289.397073][ T5833] usb 4-1: Manufacturer: syz [ 289.401840][ T5833] usb 4-1: SerialNumber: syz [ 289.413371][ T5833] usb 4-1: config 0 descriptor?? [ 289.439953][ T5833] iguanair 4-1:0.0: failed to get version [ 289.451630][ C1] iguanair 4-1:0.0: failed to resubmit urb: -1 [ 289.459403][ T5833] iguanair 4-1:0.0: probe with driver iguanair failed with error -90 [ 289.521684][ T8220] VFS: Mount too revealing [ 289.669851][ T5833] usb 4-1: USB disconnect, device number 32 [ 290.871637][ T8232] netlink: 'syz.2.598': attribute type 8 has an invalid length. [ 290.920887][ T8237] netlink: 32 bytes leftover after parsing attributes in process `syz.0.600'. [ 291.187445][ T8239] fuse: Unknown parameter 'no' [ 291.327558][ T8242] fuse: Unknown parameter 'no' [ 291.552263][ T8247] loop2: detected capacity change from 0 to 7 [ 291.739389][ T8247] loop2: p1 [ 291.743572][ T8247] loop2: partition table partially beyond EOD, truncated [ 292.068059][ T8247] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 292.589134][ T5903] udevd[5903]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 292.710383][ T8257] netlink: 20 bytes leftover after parsing attributes in process `syz.3.609'. [ 292.796405][ T8257] netlink: 20 bytes leftover after parsing attributes in process `syz.3.609'. [ 292.870851][ T8257] loop6: detected capacity change from 0 to 63 [ 292.927801][ T5931] usb 2-1: unable to get BOS descriptor or descriptor too short [ 293.154451][ T5931] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 293.174573][ T5931] usb 2-1: can't read configurations, error -71 [ 293.188691][ T8257] Buffer I/O error on dev loop6, logical block 0, async page read [ 293.220635][ T8257] Buffer I/O error on dev loop6, logical block 1, async page read [ 293.296600][ T8257] Buffer I/O error on dev loop6, logical block 2, async page read [ 293.390643][ T8257] Buffer I/O error on dev loop6, logical block 3, async page read [ 293.446578][ T8257] Buffer I/O error on dev loop6, logical block 0, async page read [ 293.455580][ T8257] Buffer I/O error on dev loop6, logical block 1, async page read [ 293.465640][ T8257] Buffer I/O error on dev loop6, logical block 2, async page read [ 293.482942][ T8257] Buffer I/O error on dev loop6, logical block 3, async page read [ 293.499435][ T5940] Buffer I/O error on dev loop6, logical block 0, async page read [ 293.524009][ T5940] Buffer I/O error on dev loop6, logical block 1, async page read [ 293.898873][ T8221] delete_channel: no stack [ 294.466620][ T5931] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 294.640486][ T5931] usb 2-1: config 0 has no interfaces? [ 294.652140][ T5931] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 294.672918][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.696488][ T5931] usb 2-1: Product: syz [ 294.700724][ T5931] usb 2-1: Manufacturer: syz [ 294.726555][ T5931] usb 2-1: SerialNumber: syz [ 294.749151][ T5931] usb 2-1: config 0 descriptor?? [ 294.793253][ T8288] tun0: tun_chr_ioctl cmd 1074025675 [ 294.805638][ T8288] tun0: persist enabled [ 294.895061][ T8292] ALSA: mixer_oss: invalid OSS volume '' [ 294.920676][ T8280] tun0: tun_chr_ioctl cmd 1074025675 [ 294.926064][ T8280] tun0: persist disabled [ 295.001081][ T8270] netlink: 'syz.1.612': attribute type 12 has an invalid length. [ 295.008977][ T8270] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.612'. [ 295.038954][ T8292] ALSA: mixer_oss: invalid OSS volume '' [ 296.693263][ T5909] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 296.977939][ T5909] usb 3-1: Using ep0 maxpacket: 16 [ 297.073262][ T8304] netlink: 'syz.0.622': attribute type 10 has an invalid length. [ 297.377892][ T5938] usb 2-1: USB disconnect, device number 34 [ 298.128039][ T10] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 298.306472][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 298.321032][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 298.335462][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 298.351369][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 298.458450][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.503490][ T10] usb 4-1: Product: syz [ 298.508242][ T10] usb 4-1: Manufacturer: syz [ 298.513004][ T10] usb 4-1: SerialNumber: syz [ 298.933815][ T10] usb 4-1: 0:2 : does not exist [ 298.966424][ T43] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 299.144845][ T43] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 299.157647][ T43] usb 2-1: config 0 interface 0 has no altsetting 0 [ 299.167825][ T43] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 299.178044][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.186143][ T43] usb 2-1: Product: syz [ 299.228911][ T43] usb 2-1: Manufacturer: syz [ 299.244225][ T43] usb 2-1: SerialNumber: syz [ 299.270676][ T43] usb 2-1: config 0 descriptor?? [ 299.281622][ T43] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 299.328744][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 299.328765][ T30] audit: type=1326 audit(1752020331.107:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8309 comm="syz.3.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fe778e929 code=0x7fc00000 [ 299.374207][ T43] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 299.384883][ T30] audit: type=1326 audit(1752020331.107:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8309 comm="syz.3.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f1fe778e929 code=0x7fc00000 [ 299.408875][ T43] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 299.421607][ T43] usb 2-1: media controller created [ 299.481726][ T8317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.495331][ T8319] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 299.515736][ T8317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.537363][ T30] audit: type=1326 audit(1752020331.107:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8309 comm="syz.3.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fe778e929 code=0x7fc00000 [ 299.563533][ T30] audit: type=1326 audit(1752020331.107:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8309 comm="syz.3.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fe778e929 code=0x7fc00000 [ 299.683888][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 299.733238][ T30] audit: type=1326 audit(1752020331.107:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8309 comm="syz.3.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fe778e929 code=0x7fc00000 [ 299.755482][ C1] vkms_vblank_simulate: vblank timer overrun [ 299.791616][ T30] audit: type=1326 audit(1752020331.107:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8309 comm="syz.3.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fe778e929 code=0x7fc00000 [ 299.820283][ T30] audit: type=1326 audit(1752020331.107:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8309 comm="syz.3.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fe778e929 code=0x7fc00000 [ 299.849246][ T30] audit: type=1326 audit(1752020331.107:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8309 comm="syz.3.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fe778e929 code=0x7fc00000 [ 299.871671][ C1] vkms_vblank_simulate: vblank timer overrun [ 299.887599][ T30] audit: type=1326 audit(1752020331.107:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8309 comm="syz.3.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fe778e929 code=0x7fc00000 [ 299.914632][ T30] audit: type=1326 audit(1752020331.107:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8309 comm="syz.3.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fe778e929 code=0x7fc00000 [ 299.936977][ C1] vkms_vblank_simulate: vblank timer overrun [ 300.048206][ T43] DVB: Unable to find symbol tda10046_attach() [ 300.055699][ T43] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 300.100832][ T43] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 300.144859][ T5909] usb 3-1: unable to get BOS descriptor or descriptor too short [ 300.220362][ T5909] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 300.242914][ T5909] usb 3-1: can't read configurations, error -71 [ 300.332083][ T10] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 300.374358][ T8323] netlink: 'syz.1.626': attribute type 1 has an invalid length. [ 300.422244][ T10] usb 4-1: USB disconnect, device number 33 [ 300.495789][ T8327] bond3: entered promiscuous mode [ 300.501449][ T8327] bond3: entered allmulticast mode [ 300.507702][ T8327] 8021q: adding VLAN 0 to HW filter on device bond3 [ 300.677634][ T5903] udevd[5903]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 300.802800][ T8329] netlink: 116 bytes leftover after parsing attributes in process `syz.0.628'. [ 301.538915][ T8347] ptrace attach of "./syz-executor exec"[5860] was attempted by "./syz-executor exec"[8347] [ 302.088726][ T43] dvb_usb_m920x 2-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 302.096401][ T10] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 302.101805][ T43] usb 2-1: USB disconnect, device number 35 [ 302.287086][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 302.312644][ T10] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 302.331439][ T10] usb 3-1: config 0 has no interface number 0 [ 302.348967][ T10] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 302.379823][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.399910][ T10] usb 3-1: Product: syz [ 302.412066][ T10] usb 3-1: Manufacturer: syz [ 302.422467][ T10] usb 3-1: SerialNumber: syz [ 302.581687][ T8359] netlink: 4 bytes leftover after parsing attributes in process `syz.3.637'. [ 302.647406][ T10] usb 3-1: config 0 descriptor?? [ 302.709089][ T10] smsc95xx v2.0.0 [ 303.140090][ T10] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 303.267836][ T10] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 304.126443][ T1209] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 304.192044][ T8380] netlink: 116 bytes leftover after parsing attributes in process `syz.0.643'. [ 304.292510][ T10] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 304.308304][ T1209] usb 4-1: config 8 has an invalid interface number: 177 but max is 0 [ 304.316882][ T10] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 304.336144][ T1209] usb 4-1: config 8 has no interface number 0 [ 304.347460][ T10] usb 3-1: USB disconnect, device number 23 [ 304.364925][ T1209] usb 4-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 304.438124][ T1209] usb 4-1: config 8 interface 177 altsetting 9 endpoint 0x4 has invalid maxpacket 30644, setting to 64 [ 304.482145][ T1209] usb 4-1: config 8 interface 177 has no altsetting 0 [ 304.511342][ T1209] usb 4-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 304.541471][ T1209] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.586508][ T8377] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 304.604205][ T8377] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 304.658294][ T8384] loop2: detected capacity change from 0 to 7 [ 304.682245][ T8384] loop2: [ 304.686400][ T8384] loop2: partition table partially beyond EOD, truncated [ 304.870663][ T1209] usb 4-1: string descriptor 0 read error: -71 [ 304.898318][ T1209] ir_toy 4-1:8.177: required endpoints not found [ 304.952224][ T1209] usb 4-1: USB disconnect, device number 34 [ 305.211696][ T30] kauditd_printk_skb: 805 callbacks suppressed [ 305.211714][ T30] audit: type=1326 audit(1752020336.997:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8398 comm="syz.2.651" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3decf8e929 code=0x0 [ 305.256395][ T5909] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 305.409299][ T5909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 305.449991][ T5909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 305.469912][ T5909] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 305.488961][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.501121][ T5909] usb 5-1: Product: syz [ 305.505439][ T5909] usb 5-1: Manufacturer: syz [ 305.510790][ T5909] usb 5-1: SerialNumber: syz [ 305.537565][ T5909] usb 5-1: config 0 descriptor?? [ 305.588588][ T5909] usb 5-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00 [ 305.616375][ T10] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 305.789396][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 305.822869][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 305.875060][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 305.915812][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 305.994376][ T5909] usb 5-1: USB disconnect, device number 29 [ 306.008041][ T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 306.046579][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.118023][ T10] usb 3-1: config 0 descriptor?? [ 306.278739][ T5930] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 306.488025][ T5930] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 306.498423][ T5930] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 306.508969][ T5930] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 306.518282][ T5930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 306.526857][ T5930] usb 4-1: SerialNumber: syz [ 306.560364][ T10] plantronics 0003:047F:FFFF.0006: ignoring exceeding usage max [ 306.835718][ T5930] usb 4-1: 0:2 : does not exist [ 306.852622][ T8418] ptrace attach of "./syz-executor exec"[5860] was attempted by "./syz-executor exec"[8418] [ 306.864412][ T10] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 306.938717][ T5930] usb 4-1: USB disconnect, device number 35 [ 307.069707][ T5903] udevd[5903]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 307.109059][ T8419] netlink: 116 bytes leftover after parsing attributes in process `syz.4.656'. [ 307.553966][ T8426] loop2: detected capacity change from 0 to 7 [ 307.591642][ T8426] loop2: [ 307.603759][ T8426] loop2: partition table partially beyond EOD, truncated [ 308.120699][ T10] usb 3-1: reset high-speed USB device number 24 using dummy_hcd [ 308.236603][ T5930] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 308.367845][ T5930] usb 4-1: device descriptor read/64, error -71 [ 308.666899][ T5930] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 308.916947][ T5930] usb 4-1: device descriptor read/64, error -71 [ 309.087417][ T5930] usb usb4-port1: attempt power cycle [ 309.159749][ T1209] usb 3-1: USB disconnect, device number 24 [ 309.460759][ T8458] netlink: 'syz.1.666': attribute type 12 has an invalid length. [ 309.616454][ T5930] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 309.786405][ T5931] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 309.897755][ T5930] usb 4-1: device descriptor read/8, error -71 [ 310.186414][ T5931] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 310.189627][ T5930] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 310.247002][ T5930] usb 4-1: device descriptor read/8, error -71 [ 310.313234][ T5931] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 310.499817][ T5930] usb usb4-port1: unable to enumerate USB device [ 310.629673][ T5931] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 310.736550][ T5931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.856815][ T8458] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 310.950272][ T5931] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 311.656850][ T5931] usb 2-1: USB disconnect, device number 36 [ 312.850806][ T30] audit: type=1326 audit(1752020344.627:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8475 comm="syz.2.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3decf8e929 code=0x7ffc0000 [ 312.974632][ T30] audit: type=1326 audit(1752020344.627:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8475 comm="syz.2.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3decf8e929 code=0x7ffc0000 [ 313.066363][ T30] audit: type=1326 audit(1752020344.627:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8475 comm="syz.2.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f3decf8e929 code=0x7ffc0000 [ 313.190319][ T30] audit: type=1326 audit(1752020344.627:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8475 comm="syz.2.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3decf8e929 code=0x7ffc0000 [ 313.302542][ T30] audit: type=1326 audit(1752020344.627:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8475 comm="syz.2.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f3decf8e929 code=0x7ffc0000 [ 313.376404][ T30] audit: type=1326 audit(1752020344.627:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8475 comm="syz.2.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3decf8e929 code=0x7ffc0000 [ 313.461701][ T30] audit: type=1326 audit(1752020344.637:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8475 comm="syz.2.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3decf8e929 code=0x7ffc0000 [ 313.561472][ T30] audit: type=1326 audit(1752020344.637:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8475 comm="syz.2.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3decf8e929 code=0x7ffc0000 [ 313.670738][ T8487] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551608) [ 313.719454][ T30] audit: type=1326 audit(1752020344.637:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8475 comm="syz.2.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3decf8e929 code=0x7ffc0000 [ 313.732425][ T8487] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 313.791685][ T5833] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 313.822810][ T30] audit: type=1326 audit(1752020344.637:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8475 comm="syz.2.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f3decf8e929 code=0x7ffc0000 [ 314.087940][ T5833] usb 2-1: config 0 has no interfaces? [ 314.105043][ T5833] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 314.124452][ T5833] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.167896][ T5833] usb 2-1: Product: syz [ 314.190303][ T5833] usb 2-1: Manufacturer: syz [ 314.216300][ T5833] usb 2-1: SerialNumber: syz [ 314.244549][ T5833] usb 2-1: config 0 descriptor?? [ 314.496796][ T10] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 314.705875][ T8485] netlink: 'syz.1.673': attribute type 12 has an invalid length. [ 314.716988][ T8485] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.673'. [ 314.870832][ T10] usb 5-1: config 0 has an invalid interface number: 172 but max is 0 [ 314.937927][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 314.976799][ T10] usb 5-1: config 0 has no interface number 0 [ 315.256585][ T10] usb 5-1: config 0 interface 172 altsetting 0 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 315.579333][ T10] usb 5-1: config 0 interface 172 altsetting 0 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 315.686455][ T10] usb 5-1: config 0 interface 172 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 316.063044][ T10] usb 5-1: config 0 interface 172 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 316.195565][ T10] usb 5-1: config 0 interface 172 altsetting 0 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 316.247826][ T10] usb 5-1: config 0 interface 172 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 316.346097][ T10] usb 5-1: config 0 interface 172 altsetting 0 has 9 endpoint descriptors, different from the interface descriptor's value: 15 [ 316.437646][ T10] usb 5-1: New USB device found, idVendor=07c4, idProduct=a002, bcdDevice=c3.c0 [ 316.492188][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.561991][ T10] usb 5-1: Product: syz [ 316.615521][ T10] usb 5-1: Manufacturer: syz [ 316.681556][ T10] usb 5-1: SerialNumber: syz [ 316.766438][ T10] usb 5-1: config 0 descriptor?? [ 316.783538][ T10] ums-datafab 5-1:0.172: USB Mass Storage device detected [ 316.877637][ T10] ums-datafab 5-1:0.172: Quirks match for vid 07c4 pid a002: 1 [ 317.060697][ T8525] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 317.071331][ T8525] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 317.415185][ T5930] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 317.432017][ T5833] usb 5-1: USB disconnect, device number 30 [ 317.563064][ T5909] usb 2-1: USB disconnect, device number 37 [ 317.609919][ T5930] usb 1-1: config 0 has an invalid interface number: 9 but max is 0 [ 317.638880][ T5930] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 317.692267][ T5930] usb 1-1: config 0 has no interface number 0 [ 317.711152][ T5930] usb 1-1: New USB device found, idVendor=0421, idProduct=0302, bcdDevice=45.e8 [ 317.756310][ T5930] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.875746][ T5930] usb 1-1: config 0 descriptor?? [ 317.919876][ T5930] rndis_host 1-1:0.9: More than one union descriptor, skipping ... [ 317.936417][ T5930] rndis_host 1-1:0.9: skipping garbage [ 317.960270][ T5930] usb 1-1: bad CDC descriptors [ 317.973955][ T5930] cdc_acm 1-1:0.9: More than one union descriptor, skipping ... [ 317.988052][ T5930] cdc_acm 1-1:0.9: skipping garbage [ 317.998267][ T8540] netlink: 12 bytes leftover after parsing attributes in process `syz.4.686'. [ 318.036961][ T8540] netlink: 'syz.4.686': attribute type 2 has an invalid length. [ 318.045124][ T8540] netlink: 'syz.4.686': attribute type 1 has an invalid length. [ 318.076600][ T8540] netlink: 4 bytes leftover after parsing attributes in process `syz.4.686'. [ 318.503769][ T8553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.516800][ T8553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.588826][ T8554] netlink: 8 bytes leftover after parsing attributes in process `syz.4.688'. [ 318.597800][ T8554] netlink: 'syz.4.688': attribute type 5 has an invalid length. [ 318.606293][ T8554] netlink: 20 bytes leftover after parsing attributes in process `syz.4.688'. [ 318.628053][ T8554] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 318.637424][ T8554] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 318.706402][ T8554] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 318.734249][ T8554] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 318.743670][ T8554] geneve2: entered promiscuous mode [ 318.749042][ T8554] geneve2: entered allmulticast mode [ 319.416666][ T5930] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 319.566459][ T5930] usb 4-1: Using ep0 maxpacket: 16 [ 319.596930][ T5930] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 319.596955][ T5930] usb 4-1: config 0 has no interface number 0 [ 319.596986][ T5930] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 319.597007][ T5930] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 319.603386][ T5930] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 319.603423][ T5930] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 319.603439][ T5930] usb 4-1: Product: syz [ 319.603452][ T5930] usb 4-1: SerialNumber: syz [ 319.619783][ T5930] usb 4-1: config 0 descriptor?? [ 319.623716][ T5930] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 319.635868][ T5930] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input12 [ 319.645979][ T5930] ------------[ cut here ]------------ [ 319.646039][ T5930] URB ffff8880787fd500 submitted while active [ 319.647183][ T5930] WARNING: CPU: 0 PID: 5930 at drivers/usb/core/urb.c:379 usb_submit_urb+0xff3/0x1890 [ 319.647243][ T5930] Modules linked in: [ 319.647289][ T5930] CPU: 0 UID: 0 PID: 5930 Comm: kworker/0:5 Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(full) [ 319.647310][ T5930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 319.647323][ T5930] Workqueue: usb_hub_wq hub_event [ 319.647344][ T5930] RIP: 0010:usb_submit_urb+0xff3/0x1890 [ 319.647387][ T5930] Code: 00 eb 5c e8 3f 14 9f fa e9 be f0 ff ff e8 35 14 9f fa c6 05 e6 d0 6a 08 01 90 48 c7 c7 80 3d 34 8c 48 89 de e8 5e f4 62 fa 90 <0f> 0b 90 90 e9 85 f0 ff ff e8 0f 14 9f fa eb 11 e8 08 14 9f fa bd [ 319.647404][ T5930] RSP: 0018:ffffc900044ceb38 EFLAGS: 00010246 [ 319.647421][ T5930] RAX: 29e868c0bbf49f00 RBX: ffff8880787fd500 RCX: 0000000000100000 [ 319.647435][ T5930] RDX: ffffc9001a5e5000 RSI: 00000000000152cd RDI: 00000000000152ce [ 319.647447][ T5930] RBP: 000000000000000f R08: ffffffff8fa1eef7 R09: 1ffffffff1f43dde [ 319.647460][ T5930] R10: dffffc0000000000 R11: fffffbfff1f43ddf R12: 1ffff1100b4d770a [ 319.647473][ T5930] R13: dffffc0000000000 R14: ffff8880787fd508 R15: 0000000000000cc0 [ 319.647486][ T5930] FS: 0000000000000000(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000 [ 319.647501][ T5930] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 319.647531][ T5930] CR2: 000020000030d030 CR3: 00000000777d8000 CR4: 00000000003526f0 [ 319.647546][ T5930] Call Trace: [ 319.647554][ T5930] [ 319.647566][ T5930] ? __pm_runtime_resume+0x129/0x180 [ 319.647595][ T5930] cm109_input_open+0x1fb/0x460 [ 319.647630][ T5930] input_open_device+0x1c5/0x360 [ 319.647672][ T5930] kbd_connect+0xed/0x140 [ 319.647698][ T5930] input_register_device+0xceb/0x10b0 [ 319.647728][ T5930] cm109_usb_probe+0x118c/0x1690 [ 319.647769][ T5930] usb_probe_interface+0x641/0xbc0 [ 319.647816][ T5930] ? __pfx_usb_probe_interface+0x10/0x10 [ 319.647837][ T5930] really_probe+0x26a/0x9a0 [ 319.647867][ T5930] __driver_probe_device+0x18c/0x2f0 [ 319.647896][ T5930] driver_probe_device+0x4f/0x430 [ 319.647939][ T5930] __device_attach_driver+0x2ce/0x530 [ 319.647968][ T5930] bus_for_each_drv+0x251/0x2e0 [ 319.647987][ T5930] ? __pfx___device_attach_driver+0x10/0x10 [ 319.648011][ T5930] ? __pfx_bus_for_each_drv+0x10/0x10 [ 319.648039][ T5930] __device_attach+0x2b8/0x400 [ 319.648079][ T5930] ? __pfx___device_attach+0x10/0x10 [ 319.648105][ T5930] ? do_raw_spin_unlock+0x122/0x240 [ 319.648137][ T5930] bus_probe_device+0x185/0x260 [ 319.648160][ T5930] device_add+0x7b6/0xb50 [ 319.648185][ T5930] usb_set_configuration+0x1a87/0x20e0 [ 319.648246][ T5930] usb_generic_driver_probe+0x8d/0x150 [ 319.648268][ T5930] usb_probe_device+0x1c4/0x390 [ 319.648292][ T5930] ? __pfx_usb_probe_device+0x10/0x10 [ 319.648311][ T5930] really_probe+0x26a/0x9a0 [ 319.648357][ T5930] __driver_probe_device+0x18c/0x2f0 [ 319.648384][ T5930] driver_probe_device+0x4f/0x430 [ 319.648411][ T5930] __device_attach_driver+0x2ce/0x530 [ 319.648462][ T5930] bus_for_each_drv+0x251/0x2e0 [ 319.648497][ T5930] ? __pfx___device_attach_driver+0x10/0x10 [ 319.648522][ T5930] ? __pfx_bus_for_each_drv+0x10/0x10 [ 319.648549][ T5930] __device_attach+0x2b8/0x400 [ 319.648574][ T5930] ? __pfx___device_attach+0x10/0x10 [ 319.648601][ T5930] ? do_raw_spin_unlock+0x122/0x240 [ 319.648653][ T5930] bus_probe_device+0x185/0x260 [ 319.648675][ T5930] device_add+0x7b6/0xb50 [ 319.648700][ T5930] usb_new_device+0xa39/0x16c0 [ 319.648738][ T5930] ? __pfx_usb_new_device+0x10/0x10 [ 319.648783][ T5930] ? _raw_spin_unlock_irq+0x23/0x50 [ 319.648820][ T5930] ? lockdep_hardirqs_on+0x9c/0x150 [ 319.648861][ T5930] hub_event+0x2941/0x4a00 [ 319.648979][ T5930] ? __pfx_hub_event+0x10/0x10 [ 319.649011][ T5930] ? process_scheduled_works+0x9ef/0x17b0 [ 319.649076][ T5930] ? _raw_spin_unlock_irq+0x23/0x50 [ 319.649112][ T5930] ? process_scheduled_works+0x9ef/0x17b0 [ 319.649141][ T5930] ? process_scheduled_works+0x9ef/0x17b0 [ 319.649178][ T5930] process_scheduled_works+0xae1/0x17b0 [ 319.649268][ T5930] ? __pfx_process_scheduled_works+0x10/0x10 [ 319.649319][ T5930] worker_thread+0x8a0/0xda0 [ 319.649379][ T5930] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 319.649428][ T5930] ? __kthread_parkme+0x7b/0x200 [ 319.649473][ T5930] kthread+0x70e/0x8a0 [ 319.649537][ T5930] ? __pfx_worker_thread+0x10/0x10 [ 319.649568][ T5930] ? __pfx_kthread+0x10/0x10 [ 319.649607][ T5930] ? _raw_spin_unlock_irq+0x23/0x50 [ 319.649672][ T5930] ? lockdep_hardirqs_on+0x9c/0x150 [ 319.649708][ T5930] ? __pfx_kthread+0x10/0x10 [ 319.649745][ T5930] ret_from_fork+0x3f9/0x770 [ 319.649778][ T5930] ? __pfx_ret_from_fork+0x10/0x10 [ 319.649840][ T5930] ? __switch_to_asm+0x39/0x70 [ 319.649873][ T5930] ? __switch_to_asm+0x33/0x70 [ 319.649906][ T5930] ? __pfx_kthread+0x10/0x10 [ 319.649966][ T5930] ret_from_fork_asm+0x1a/0x30 [ 319.650023][ T5930] [ 319.650037][ T5930] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 319.650055][ T5930] CPU: 0 UID: 0 PID: 5930 Comm: kworker/0:5 Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(full) [ 319.650086][ T5930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 319.650104][ T5930] Workqueue: usb_hub_wq hub_event [ 319.650132][ T5930] Call Trace: [ 319.650142][ T5930] [ 319.650153][ T5930] dump_stack_lvl+0x99/0x250 [ 319.650183][ T5930] ? __asan_memcpy+0x40/0x70 [ 319.650208][ T5930] ? __pfx_dump_stack_lvl+0x10/0x10 [ 319.650238][ T5930] ? __pfx__printk+0x10/0x10 [ 319.650289][ T5930] panic+0x2db/0x790 [ 319.650324][ T5930] ? __pfx_panic+0x10/0x10 [ 319.650374][ T5930] ? ret_from_fork_asm+0x1a/0x30 [ 319.650415][ T5930] __warn+0x31b/0x4b0 [ 319.650441][ T5930] ? usb_submit_urb+0xff3/0x1890 [ 319.650480][ T5930] ? usb_submit_urb+0xff3/0x1890 [ 319.650516][ T5930] report_bug+0x2be/0x4f0 [ 319.650552][ T5930] ? usb_submit_urb+0xff3/0x1890 [ 319.650589][ T5930] ? usb_submit_urb+0xff3/0x1890 [ 319.650633][ T5930] ? usb_submit_urb+0xff5/0x1890 [ 319.650670][ T5930] handle_bug+0x84/0x160 [ 319.650698][ T5930] exc_invalid_op+0x1a/0x50 [ 319.650725][ T5930] asm_exc_invalid_op+0x1a/0x20 [ 319.650748][ T5930] RIP: 0010:usb_submit_urb+0xff3/0x1890 [ 319.650784][ T5930] Code: 00 eb 5c e8 3f 14 9f fa e9 be f0 ff ff e8 35 14 9f fa c6 05 e6 d0 6a 08 01 90 48 c7 c7 80 3d 34 8c 48 89 de e8 5e f4 62 fa 90 <0f> 0b 90 90 e9 85 f0 ff ff e8 0f 14 9f fa eb 11 e8 08 14 9f fa bd [ 319.650805][ T5930] RSP: 0018:ffffc900044ceb38 EFLAGS: 00010246 [ 319.650827][ T5930] RAX: 29e868c0bbf49f00 RBX: ffff8880787fd500 RCX: 0000000000100000 [ 319.650845][ T5930] RDX: ffffc9001a5e5000 RSI: 00000000000152cd RDI: 00000000000152ce [ 319.650863][ T5930] RBP: 000000000000000f R08: ffffffff8fa1eef7 R09: 1ffffffff1f43dde [ 319.650881][ T5930] R10: dffffc0000000000 R11: fffffbfff1f43ddf R12: 1ffff1100b4d770a [ 319.650900][ T5930] R13: dffffc0000000000 R14: ffff8880787fd508 R15: 0000000000000cc0 [ 319.650940][ T5930] ? usb_submit_urb+0xff2/0x1890 [ 319.650981][ T5930] ? __pm_runtime_resume+0x129/0x180 [ 319.651021][ T5930] cm109_input_open+0x1fb/0x460 [ 319.651060][ T5930] input_open_device+0x1c5/0x360 [ 319.651095][ T5930] kbd_connect+0xed/0x140 [ 319.651130][ T5930] input_register_device+0xceb/0x10b0 [ 319.651173][ T5930] cm109_usb_probe+0x118c/0x1690 [ 319.651233][ T5930] usb_probe_interface+0x641/0xbc0 [ 319.651277][ T5930] ? __pfx_usb_probe_interface+0x10/0x10 [ 319.651306][ T5930] really_probe+0x26a/0x9a0 [ 319.651350][ T5930] __driver_probe_device+0x18c/0x2f0 [ 319.651387][ T5930] driver_probe_device+0x4f/0x430 [ 319.651426][ T5930] __device_attach_driver+0x2ce/0x530 [ 319.651466][ T5930] bus_for_each_drv+0x251/0x2e0 [ 319.651493][ T5930] ? __pfx___device_attach_driver+0x10/0x10 [ 319.651528][ T5930] ? __pfx_bus_for_each_drv+0x10/0x10 [ 319.651566][ T5930] __device_attach+0x2b8/0x400 [ 319.651603][ T5930] ? __pfx___device_attach+0x10/0x10 [ 319.651646][ T5930] ? do_raw_spin_unlock+0x122/0x240 [ 319.651688][ T5930] bus_probe_device+0x185/0x260 [ 319.651719][ T5930] device_add+0x7b6/0xb50 [ 319.651753][ T5930] usb_set_configuration+0x1a87/0x20e0 [ 319.651818][ T5930] usb_generic_driver_probe+0x8d/0x150 [ 319.651849][ T5930] usb_probe_device+0x1c4/0x390 [ 319.651884][ T5930] ? __pfx_usb_probe_device+0x10/0x10 [ 319.651911][ T5930] really_probe+0x26a/0x9a0 [ 319.651953][ T5930] __driver_probe_device+0x18c/0x2f0 [ 319.651990][ T5930] driver_probe_device+0x4f/0x430 [ 319.652028][ T5930] __device_attach_driver+0x2ce/0x530 [ 319.652068][ T5930] bus_for_each_drv+0x251/0x2e0 [ 319.652095][ T5930] ? __pfx___device_attach_driver+0x10/0x10 [ 319.652129][ T5930] ? __pfx_bus_for_each_drv+0x10/0x10 [ 319.652169][ T5930] __device_attach+0x2b8/0x400 [ 319.652204][ T5930] ? __pfx___device_attach+0x10/0x10 [ 319.652243][ T5930] ? do_raw_spin_unlock+0x122/0x240 [ 319.652284][ T5930] bus_probe_device+0x185/0x260 [ 319.652314][ T5930] device_add+0x7b6/0xb50 [ 319.652350][ T5930] usb_new_device+0xa39/0x16c0 [ 319.652404][ T5930] ? __pfx_usb_new_device+0x10/0x10 [ 319.652445][ T5930] ? _raw_spin_unlock_irq+0x23/0x50 [ 319.652480][ T5930] ? lockdep_hardirqs_on+0x9c/0x150 [ 319.652520][ T5930] hub_event+0x2941/0x4a00 [ 319.652613][ T5930] ? __pfx_hub_event+0x10/0x10 [ 319.652648][ T5930] ? process_scheduled_works+0x9ef/0x17b0 [ 319.652685][ T5930] ? _raw_spin_unlock_irq+0x23/0x50 [ 319.652717][ T5930] ? process_scheduled_works+0x9ef/0x17b0 [ 319.652744][ T5930] ? process_scheduled_works+0x9ef/0x17b0 [ 319.652775][ T5930] process_scheduled_works+0xae1/0x17b0 [ 319.652841][ T5930] ? __pfx_process_scheduled_works+0x10/0x10 [ 319.652892][ T5930] worker_thread+0x8a0/0xda0 [ 319.652925][ T5930] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 319.652972][ T5930] ? __kthread_parkme+0x7b/0x200 [ 319.653015][ T5930] kthread+0x70e/0x8a0 [ 319.653054][ T5930] ? __pfx_worker_thread+0x10/0x10 [ 319.653082][ T5930] ? __pfx_kthread+0x10/0x10 [ 319.653119][ T5930] ? _raw_spin_unlock_irq+0x23/0x50 [ 319.653153][ T5930] ? lockdep_hardirqs_on+0x9c/0x150 [ 319.653187][ T5930] ? __pfx_kthread+0x10/0x10 [ 319.653223][ T5930] ret_from_fork+0x3f9/0x770 [ 319.653253][ T5930] ? __pfx_ret_from_fork+0x10/0x10 [ 319.653288][ T5930] ? __switch_to_asm+0x39/0x70 [ 319.653319][ T5930] ? __switch_to_asm+0x33/0x70 [ 319.653349][ T5930] ? __pfx_kthread+0x10/0x10 [ 319.653386][ T5930] ret_from_fork_asm+0x1a/0x30 [ 319.653438][ T5930] [ 319.653808][ T5930] Kernel Offset: disabled