last executing test programs: 16.466287853s ago: executing program 4 (id=3592): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000"], 0x18}}], 0x1, 0x44080) setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000140)=' ', 0x2e) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d00000524"], 0x0) r1 = syz_open_dev$dri(0x0, 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064d1, &(0x7f0000000040)={0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0xb2}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x44}}, 0x20000490) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_COUNTERS={0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x490) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0xa0, 0x2d, 0xb1, 0x40, 0xfff0, 0xfff0, 0x71df, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x40, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x27, 0x0, 0x2, 0x7c, 0xc0, 0x51, 0x0, [], [{{0x9, 0x5, 0xe, 0x0, 0x400, 0x5, 0xe, 0x4}}, {{0x9, 0x5, 0x4, 0x3, 0x3ff, 0x8, 0x3, 0x40}}]}}]}}]}}, 0x0) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x40, @private2, 0x10000}, 0x1c) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x39, 0x301, 0x70bd29, 0xfffffffc, {0x10}}, 0x14}, 0x1, 0x0, 0x0, 0x4004097}, 0x0) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r4, 0x6b, 0x1, &(0x7f0000000180)=[{0x2, 0x1, {0x0, 0x1}, {0x2, 0x0, 0x3}, 0xff, 0x1}, {0x3, 0x1, {0x2, 0x0, 0x1}, {0x1, 0x1}, 0xfe}, {0x2, 0x3, {0x2, 0xff, 0x3}, {0x0, 0x1}, 0x0, 0xfd}], 0x60) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r5, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 15.14699203s ago: executing program 3 (id=3595): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket(0x1, 0x1, 0x0) r4 = fsopen(&(0x7f0000000140)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r5, 0x0) fsmount(r4, 0x0, 0xf) ioctl$sock_ifreq(r3, 0x8948, &(0x7f0000000040)={'bond0\x00', @ifru_names='pimreg1\x00'}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000300)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x7, 0x4, 0x0, 0x3e, 0x3c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local, {[@timestamp={0x44, 0x8, 0x67, 0x0, 0x0, [0x4]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x4, {[@window={0xa, 0x3}, @eol, @generic={0x0, 0x5, "d58838"}]}}}}}}, 0x4a) openat$procfs(0xffffff9c, &(0x7f0000000100)='/proc/vmstat\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000380)={{0x3, 0x81}, 'port0\x00', 0x41, 0x20010, 0x2, 0x1ff, 0x8000, 0xfffffffe, 0x8, 0x0, 0x4, 0xf4}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_emit_ethernet(0x6a, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb08004500005c0000000000019078ac1e0001ac1414aa05009078e00000e0400000000000000000110000ac14"], 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f00000000c0)={0x8000, 0xffffff9f, 0x6, 0x5}) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x4}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x100004, 0x220104, 0xe2a3, 0x1}, 0x50) 14.027945461s ago: executing program 0 (id=3596): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@broadcast, @in=@dev}}, {{@in6=@mcast2}, 0x0, @in6=@dev}}, &(0x7f0000000400)=0xe4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket(0x200000100000011, 0x3, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) timer_create(0x0, 0x0, 0x0) ptrace$ARCH_MAP_VDSO_64(0x1e, 0x0, 0x3, 0x2003) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f0000000080)) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) bind$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x7, 0x6, @local}, 0x14) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000140)="39000000140081ae0000dc676f97daf01e2357f9ff9bffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x3a}], 0x1}, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000001400)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="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"], 0x2214}, {&(0x7f0000000800)={0x87c, 0x23, 0x1, 0x70bd26, 0x25dfdbfc, "", [@generic="8b16e35ca8a620b4a22917dc29d40ea87e68acf8e76e823bb2cb7ec2f5e42de4f03e7a9374f3e8ec6d3087bd1bf9e2e1d0fc3cbf2e0def6bba225166fb2c963c8925adc39292b7dcc3a2ea761d94dcb7c3f8ab79f4d2fb203307c77ede31bce25568618203eea9c5ba9bd023b25cd551bb9816766ab15a819443b597e6760f3b027f64d5c2c4ec95f214d28fec07c0f8f9a628b90e38cfc8e943e20d7db4bf70a9481cfa3d6b5f894803788f409e5d", @generic="0830dd24634d569e2522e307bcf3c7a5252bc1c188f2b35fd61d5f186f9429c3184117761880f6b3df15358f72e3cccbef5d106707752f88ea752d90a5b12bb5eeba5c228a92a0763564c69113b5f15f7016a8b9d70c64bcee55811dd6fb49cad91f86f87375f6c2d91659cd084c0384e3d8a1a7", @generic, @nested={0xc8, 0xa9, 0x0, 0x1, [@typed={0x4, 0xe8}, @generic="a92f3e4d274fcbba50eb628f94cb0004e7a8e21395fba3c88014b4f3d99f1c0f45646b99525778d0b803", @nested={0x4, 0xb5}, @nested={0x4, 0xe6}, @generic="c9a546a47999bc8bc93bedd803386b3e382447a3cd97c1200218118a80abc4fc6c5a1ed65ac4c6d830df39d785b35c516b3f0dd475d6d89d797a396078ca351d00ecae863a4e3b96ee201bfe0c43aaada4148c9adc77f33dbaf39b21408d53c85437cb677b5090", @nested={0x4, 0x58}, @typed={0x8, 0x100, 0x0, 0x0, @pid}, @typed={0x14, 0x6e, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @generic="006dcf6e061e9c"]}, @nested={0x67e, 0x112, 0x0, 0x1, [@generic="edd50422f793ade81dd026aa5c007fa8b8b33453546e5889953859135fb8a32690bec3e0f0f262f53b822d9f477f1d5cf2c99ca622e25ccc00ff66c6433b14d41432be887343db9e17002bc22548dc1f89ff9221847f03c7145e8f0ded4e072ad4bbf4bc7fcd0476fbe988bab21058b30db0f121163999abd48594839fad4cf2c3630b8370604609f63b10c36c8b7bb4ae413a9eb4dd507cec5d1d0e5952c35da5574696c6e2210aa818da7a047df343f991778312981cb3f527d7f1ed30b8d2232016cda32de613124bfcd3f65d7d36767c", @generic="8a28ca", @nested={0x262, 0x11b, 0x0, 0x1, [@generic="3ef4f4b0d59d75135c2f86b2a1419d1873572d72b87bf989e9bb02e789c178befaffd2ff77f10f9fddeca2a9d4333a1ce5c5dfd4b7b4c04a9115113fb682fb280cb3803af709ae2e83bc8ff6f14ddf897d30db54f28907833286ef6231f1ee6c6426379650a5a01c750ca7a6ae266baa8f407733c7d483e298cddb18a3e6abcc435e143259502b81888205f05a33915a7f2348724b1a758344457b4b468c11e85c604e5ee14ea21c56a3a1c55d7d440fd080dcbb64df5100d79c9d6bb58b33f496ef1f1d5d506234f6abd3ccfcbe1d217bb4c6cecf90e3661510f39d0e41", @generic="31b7aca84dd19eca2ea72453f463ad6995f864b27a8d9b8c113fac362811b89c35", @nested={0x4, 0x1b}, @typed={0x7, 0x145, 0x0, 0x0, @str='@@\x00'}, @typed={0x11, 0xc, 0x0, 0x0, @binary="87a8da3dd6ab837167a7fa179f"}, @generic="5332e0ff0fa3b583f195113cf19ef44abab8f6f609fa19066d9e8da4f887a40348606fcb805232a9e96694173e65f92913280ad0205aecfea8e57d397994842b8ea122ed5f5198fb2d3e984c83d0571aff21b2b69dc792a93ee140262b8118f6724a71863daece4814cbc463d83e0f28b70a3ebd1a5ee0b5696092b876da8f3bcc83135b7bd2640b14262079bdf4b41e557915f2e731bce06f2144b3fda0b7b2daa049b83dcab9199d182669a7abbe3227ec5bca63812ee2543d787a9ae7b7ffe61ecadc015bed8b5108188cf35a77", @generic="79855e067f747c2a9d2cb7ec3e7ff958809d0289edc2ed59e181f5f0e3dde9ec2a4ca4a82c3d9bbba943eb30a7bea7e104929683b3a3ce0efdc8f1872c41f457bd08cae322df06119cee855c8fd288afaca7cca76f2c639d253f463a25bc779f8de283fb4bbb93a5697ca0ff", @nested={0x4, 0x7}]}, @nested={0x177, 0x2a, 0x0, 0x1, [@generic="8c4350d80306cc8027b2a1ecada676c02dfb7036177860a174a226c678c7b5517a9bbb2795c92c7c8cde41d50dc0fffd2b750839679d453acb0cfa46234f5647a3e101381ca3a08162b38d474c375d3e68f226350d31321131fde9bb04573f3d5ee39472af33bda78f873ab9acb2244b38f8df3ed8172bc7d067fb8540e1acee63eda683417f8e6cfa9e8c96e3af68b36a28fd6a28750a5ffbad1e4e6d936c54d8fe4c7f8f36f6b9ff1aa3d7f5f27aca08ca62cd97df9355283dd9684411114f30df4da9fe1a99e4dd2938d6292151f32b706ae3d5bebf217005a78d7cb419c491f1", @generic="ac9ffe4fa89140e8e9a51a331ebe760348da1b8ed0966c71ef0c822b255099d6017c22d2f15390995a9702779e804276f75086381da9abe7c7ade45fbaa068bebc7ca901e46ea619aa709fb70eb2f98d8ff340a497af6230fabfa7e3a9af81cdebc8d3dcedfa5997bb4a83853c2e850974bd9fa214692b0fdee19c1fa81852b62527a45ca3832769d29f540823466db0bf"]}, @typed={0x8, 0x132, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x14, 0x1c, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x39}}, @generic="a08fd8d4afdcfb0be027e40044665c1827ac0a6dfe68f42b4e691da55ae5065923d4cf088045fdb44fdf7a73f219dbc4329d6257486b4003757e485057af96dda896ce1ec99c22d0133eb879f0a3a9166a76071e7372440e758989eb7af435e9142641d5dc62a9a7aa0781fc93622df02493da9028ee42210342717990fa1d74bc3a9d14148c059f05c9d936e5c4755357f4108185fae6a2e379f4498fc7f2a265660345218a53f86b4718539fa1f7749b869a3c6bcfbd2f9c8bda275de49f6da99dd7c7d614318b", @generic="51440017d1859e0e988fdf2fca17c69c47826afcee1f231aefc34bdc36dd3be853f4a45216178a9303b30417f35ea11e044429e6c5aeec90a115bc83061877ff967358ddab26def7cafbe4e92c3ef259e2e9006ab458640bed02701827e8f6f9a5e01492b87d6e0dc7e8be1d14e016afe26e785abd70200050fdccadc091e278e6ddee9246455c01f71c33c597db733a65983e103d83be4f056bf3027b042e88a48e51e92764df2e0c38aaf9893b0030bfd6fca63e0173c3baded2ec5dbae7209bb267233fc5b0650e7ff762c35e2639dedd7241296d1b8501d1a28b9242e2c89cdad0afdc"]}]}, 0x87c}], 0x2, 0x0, 0x0, 0x880}, 0x4001) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) fsopen(&(0x7f0000000100)='zonefs\x00', 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) copy_file_range(r7, 0x0, r7, &(0x7f00000003c0)=0xffffffffffff7ffb, 0x2000000, 0x0) bind$inet(r6, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e21, @multicast2}, 0x10) sendfile(r6, r5, 0x0, 0x20000023893) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 14.027418948s ago: executing program 1 (id=3597): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x2) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xfffffffb}, 0x0) r2 = syz_open_dev$dri(0x0, 0x7, 0x200) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000040)}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0x0, 0x0]}) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000000000"], 0x30}}, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0) read$FUSE(r4, &(0x7f00000034c0)={0x2020}, 0x2020) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x25, 0x0, @val=@uprobe_multi={&(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)=[0x6, 0xb, 0x9, 0x7, 0xff, 0x9, 0x3], &(0x7f0000000300)=[0x1, 0x5, 0x2, 0x4, 0x4], 0x5, 0x7}}, 0x3c) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) r6 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000240)=r6) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x1, r6}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000680)) r7 = syz_open_dev$swradio(&(0x7f0000001c40), 0x0, 0x2) ioctl$VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000000)={0xd70f, 0xb, 0x3, "5cb2117e734c8efecf179ff3f458bb23b09982cd0b2c6f8315a127237f901310", 0x4745504d}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x1) 14.01557988s ago: executing program 3 (id=3598): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001180)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) move_pages(r3, 0x4, &(0x7f00000031c0)=[&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil], &(0x7f0000003200)=[0x4, 0x2, 0x800, 0x7, 0x2], &(0x7f0000003240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) sendto$packet(r2, &(0x7f0000000180)="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", 0x1000, 0x14, &(0x7f0000000040)={0x11, 0x1a, 0x0, 0x1, 0xf6, 0x6, @multicast}, 0x14) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) openat$dir(0xffffff9c, 0x0, 0xb0040, 0x140) syz_usb_connect(0x2, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x62, 0xa1, 0xb, 0x40, 0xc45, 0x1010, 0xe6fc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x32, 0x0, 0x1, 0x97, 0x40, 0xa4, 0x0, [], [{{0x9, 0x5, 0x82, 0x3, 0x3ff, 0x0, 0x7e}}]}}]}}]}}, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) preadv(r4, &(0x7f0000000140)=[{&(0x7f0000000080)=""/128, 0x80}], 0x1, 0x219, 0x200) 12.980598873s ago: executing program 4 (id=3600): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x6a040000) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_GET_TSC(0x43, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x4, 0x3}, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x12) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000020605000000000000000000070000000c00078008001240000100029c62ba93ae80e42419a69316887756b15b3b417397e677db94ac34d9be5517d3fdfa2e11a0bb43383c5690f9062ab0aa553be0cc47263b9bfc7ee44f73175194bf5f176430b0179ec1ac4e1523868136cf3ed2de8e91fd6da223c788f7"], 0x20}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x1418, 0x1, 0x70bd25, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x25}}, 0x4008040) sched_setattr(0x0, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r3, 0x5407, &(0x7f00000000c0)={0x6, 0x420b, 0xa, 0x200, 0x3}) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000000)=0x8001) 11.910132918s ago: executing program 0 (id=3601): socket$inet6(0xa, 0x1, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xd1) accept4(r0, 0x0, 0x0, 0x800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0x14004, 0x100000, 0x8, 0x1, 0xfe}, {0x0, 0x2000, 0xf, 0x0, 0x0, 0x0, 0x0, 0xff, 0x8, 0x0, 0x6}, {0xd000, 0xf000, 0x0, 0x0, 0xf9, 0x0, 0x0, 0x0, 0x23, 0x0, 0x4}, {0x5000, 0xffff1000, 0xf, 0x41, 0x0, 0x2, 0x1, 0xfc, 0x0, 0x6}, {0x1, 0xffff1000, 0xc, 0x1, 0x3, 0x10, 0x0, 0x0, 0x1, 0x0, 0xb6, 0x90}, {0x2, 0x100000, 0x0, 0x6, 0xf}, {0x8000000, 0xeeee8000, 0xa, 0x0, 0x2, 0x0, 0x9, 0x7, 0x3a, 0x2, 0xff}, {0x0, 0x2, 0x0, 0x2, 0x0, 0x6, 0x7, 0x0, 0xfa, 0x0, 0x0, 0x5}, {0x0, 0x400}, {0xdddd0000}, 0xddf8fffb, 0x0, 0xeeee0000, 0x100, 0x8, 0x8000, 0xffff1000, [0x0, 0x10000000000, 0x2]}) ioctl$KVM_TRANSLATE(r6, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x5, 0x50}) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) link(0x0, &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./file1/file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], 0x0, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x8e79f0352167ea94) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r8, 0x0) mmap(&(0x7f00002b9000/0xf000)=nil, 0xf000, 0x0, 0x4008031, 0xffffffffffffffff, 0x4000) 11.451956942s ago: executing program 2 (id=3602): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xd1) accept4(r0, 0x0, 0x0, 0x800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0x14004, 0x100000, 0x8, 0x1, 0xfe}, {0x0, 0x2000, 0xf, 0x0, 0x0, 0x0, 0x0, 0xff, 0x8, 0x0, 0x6}, {0xd000, 0xf000, 0x0, 0x0, 0xf9, 0x0, 0x0, 0x0, 0x23, 0x0, 0x4}, {0x5000, 0xffff1000, 0xf, 0x41, 0x0, 0x2, 0x1, 0xfc, 0x0, 0x6}, {0x1, 0xffff1000, 0xc, 0x1, 0x3, 0x10, 0x0, 0x0, 0x1, 0x0, 0xb6, 0x90}, {0x2, 0x100000, 0x0, 0x6, 0xf}, {0x8000000, 0xeeee8000, 0xa, 0x0, 0x2, 0x0, 0x9, 0x7, 0x3a, 0x2, 0xff}, {0x0, 0x2, 0x0, 0x2, 0x0, 0x6, 0x7, 0x0, 0xfa, 0x0, 0x0, 0x5}, {0x0, 0x400}, {0xdddd0000}, 0xddf8fffb, 0x0, 0xeeee0000, 0x100, 0x8, 0x8000, 0xffff1000, [0x0, 0x10000000000, 0x2]}) ioctl$KVM_TRANSLATE(r6, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x5, 0x50}) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) link(0x0, &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./file1/file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], 0x0, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x8e79f0352167ea94) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r8, 0x0) mmap(&(0x7f00002b9000/0xf000)=nil, 0xf000, 0x0, 0x4008031, 0xffffffffffffffff, 0x4000) 11.450706456s ago: executing program 1 (id=3612): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@ipv6_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8}}, 0x1c}, 0x1, 0x0, 0x0, 0x40804}, 0x4040004) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0000002400010122bd7000fcfffffe4b0000000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x4048957}, 0x80) 10.979629583s ago: executing program 1 (id=3603): socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000240)={0x8000000000000001, 0x3, 0x0, 0xfffffffb}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x217, &(0x7f0000000e80)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="8eff80ec0031", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x8, 0x209, 0x68, 0x0, 0x8, 0x2f, 0x0, @multicast2, @multicast1}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x63, 0x3, [0xa0], "6dda9bee70d70e0a8db6140328942d8bd436401aacb08d4259f9b5c50634de3ef6d9481c1c6d5cfe3c10ab6867d56dc69c1a7e2a980a0f985ad2eb564e8d6a8c1b9ff52e083ce80c085aa8156a11749aa37474ad8fb4230f0f3b26ece94fad6e7138e9"}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [0x1, 0x5], "809106a3e83dde913d898fa4d26255f8794e6d530f5d3a1952a8ce80f468664f9afcc6a462107cb9b8821366ae88ff3b8a6e3432a6bfee6f06e16836632fe342c8f19abebc57b5682a32cceb723cb5985a41e74c9ea18c5f53e465b745af24121b4aa5fbe98f7b7de9e16aca62a4e983727a219f9835d5fc1f6e6db20299eca226ca504ef750c2fe46c8df34d4481b8a1bdf230ae50fa6b37717a807b2f0dc02db27c5400f356af7800458f528677730276ece3a06d7061c1d243244e08192fb8570efe30d56acb1fd5ae66c286fe8a1cc2673638fd8681e24bf71e4e23622fb94b61e4ef4179aaa76392b409ad7a3b47dee063fe67b9022a8c1"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [0x1, 0x2, 0x9]}, {0x8, 0x88be, 0x1, {{0x6, 0x1, 0x9, 0x0, 0x1, 0x0, 0x4, 0xbe}, 0x1, {0x9}}}, {0x8, 0x22eb, 0x3, {{0x4, 0x2, 0x9, 0x3, 0x1, 0x3, 0x2, 0x1}, 0x2, {0x6, 0x2e2b, 0x2, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1}}}, {0x8, 0x6558, 0x3, "b568d78557d1b681e06ba2878e547ee3aa46f8bf23ced70cf258b9be758109d78916913e8ca3849839c93459b32aed4621ef068273d3676f6849cad54d4a4251f7b5cc0a8a3cbc2a"}}}}}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x22, 0x2, 0x24) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') read$FUSE(r4, 0x0, 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000700)={0x20, 0x11, 0x1, "ce"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000000180)={0x0, 0x3, 0x6, &(0x7f0000000100)={0xd, "c6c103de0000000000000000000000551a00000000000100"}}) 10.484307316s ago: executing program 4 (id=3604): r0 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000040)={0x1, 0xfffffff7}) r1 = open_tree(r0, &(0x7f0000000080)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) r2 = syz_clone(0x40040000, &(0x7f0000000140)="dba020bcf44c1d4c4949d3e3862304e7fda884d6a869d260d4f58a49a33ba88bdf9a20162af8de19c4d6dce05941c9f1467b7f9f0f3b", 0x36, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="803343") r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r1}, 0x8) r4 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000000280)={0x5, 0x7fff, 0x1, 0x0, 0x0, [{{r4}, 0x7}]}) kcmp(0x0, r2, 0x0, r1, r4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r5, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x1b}, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x24000, 0x61}}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x80004}, 0x4c000) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000001, 0x2010, r0, 0x1439b000) read$eventfd(r0, &(0x7f0000001bc0), 0x8) 9.619598876s ago: executing program 4 (id=3605): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x64004880}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x28, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004084}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000005c0)={0x24, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "48b603de"}]}}, 0x0}, 0x0) unshare(0x24020400) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000080)={0x200000, 0x0, 0x10}, 0x18) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x3}, @IFLA_GTP_CREATE_SOCKETS={0x5}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8801}, 0x800) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 9.618448853s ago: executing program 3 (id=3616): r0 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000040)={0x1, 0xfffffff7}) r1 = open_tree(r0, &(0x7f0000000080)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) r2 = syz_clone(0x40040000, &(0x7f0000000140)="dba020bcf44c1d4c4949d3e3862304e7fda884d6a869d260d4f58a49a33ba88bdf9a20162af8de19c4d6dce05941c9f1467b7f9f0f3b", 0x36, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="803343") r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r1}, 0x8) r4 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000000280)={0x5, 0x7fff, 0x1, 0x0, 0x0, [{{r4}, 0x7}]}) kcmp(0x0, r2, 0x0, r1, r4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r5, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x1b}, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x24000, 0x61}}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x80004}, 0x4c000) read$eventfd(r0, &(0x7f0000001bc0), 0x8) 9.564254619s ago: executing program 0 (id=3606): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20040051}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x40050}, 0x0) syz_emit_ethernet(0x16, &(0x7f0000000940)={@broadcast, @local, @void, {@llc={0x8864, {@snap={0xab, 0xaa, '\x00', "fd27a7", 0xf8}}}}}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0x3, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) r4 = syz_open_dev$usbfs(0x0, 0x76, 0x103901) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) accept4(r0, 0x0, 0x0, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000003740), 0x2000) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f0000003780)={{0x3, 0x1, 0x4, 0x2, 0xfffffff1}, 0x8, 0x7, 'id0\x00', 'timer1\x00', 0x0, 0x15, 0x5, 0xb05, 0x8}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) 8.824865758s ago: executing program 2 (id=3607): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x2) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xfffffffb}, 0x0) r2 = syz_open_dev$dri(0x0, 0x7, 0x200) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000040)}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0x0, 0x0]}) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000200000000"], 0x30}}, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0) read$FUSE(r4, &(0x7f00000034c0)={0x2020}, 0x2020) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x25, 0x0, @val=@uprobe_multi={&(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)=[0x6, 0xb, 0x9, 0x7, 0xff, 0x9, 0x3, 0x8000000000000001], &(0x7f0000000300)=[0x1, 0x5, 0x2, 0x4, 0x4], 0x5, 0x8}}, 0x3c) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) r6 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000240)=r6) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x1, r6}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000680)) r7 = syz_open_dev$swradio(&(0x7f0000001c40), 0x0, 0x2) ioctl$VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000000)={0xd70f, 0xb, 0x3, "5cb2117e734c8efecf179ff3f458bb23b09982cd0b2c6f8315a127237f901310", 0x4745504d}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x1) 8.736543637s ago: executing program 3 (id=3608): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xd1) accept4(r0, 0x0, 0x0, 0x800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0x14004, 0x100000, 0x8, 0x1, 0xfe}, {0x0, 0x2000, 0xf, 0x0, 0x0, 0x0, 0x0, 0xff, 0x8, 0x0, 0x6}, {0xd000, 0xf000, 0x0, 0x0, 0xf9, 0x0, 0x0, 0x0, 0x23, 0x0, 0x4}, {0x5000, 0xffff1000, 0xf, 0x41, 0x0, 0x2, 0x1, 0xfc, 0x0, 0x6}, {0x1, 0xffff1000, 0xc, 0x1, 0x3, 0x10, 0x0, 0x0, 0x1, 0x0, 0xb6, 0x90}, {0x2, 0x100000, 0x0, 0x6, 0xf}, {0x8000000, 0xeeee8000, 0xa, 0x0, 0x2, 0x0, 0x9, 0x7, 0x3a, 0x2, 0xff}, {0x0, 0x2, 0x0, 0x2, 0x0, 0x6, 0x7, 0x0, 0xfa, 0x0, 0x0, 0x5}, {0x0, 0x400}, {0xdddd0000}, 0xddf8fffb, 0x0, 0xeeee0000, 0x100, 0x8, 0x8000, 0xffff1000, [0x0, 0x10000000000, 0x2]}) ioctl$KVM_TRANSLATE(r6, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x5, 0x50}) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) link(0x0, &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./file1/file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], 0x0, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x8e79f0352167ea94) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r8, 0x0) mmap(&(0x7f00002b9000/0xf000)=nil, 0xf000, 0x0, 0x4008031, 0xffffffffffffffff, 0x4000) 7.416025175s ago: executing program 1 (id=3609): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x64004880}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x28, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004084}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000005c0)={0x24, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "48b603de"}]}}, 0x0}, 0x0) unshare(0x24020400) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000080)={0x200000, 0x0, 0x10}, 0x18) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x3}, @IFLA_GTP_CREATE_SOCKETS={0x5}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8801}, 0x800) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 7.275160042s ago: executing program 4 (id=3610): socket$inet(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) cachestat(r2, &(0x7f0000001180)={0x5, 0x6}, &(0x7f000009de80), 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000abd1a0407b2dc4228bca0000400109021200010000003a92f800c307efcfa52d73cedd1bfc0d033c1ba7562a061502ee8277f9809791fc20259520f4e903ba5c634d71ed6b24a8c610af8009fd066593912af027f2"], 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0) ioctl$TIOCPKT(r4, 0x5420, &(0x7f00000001c0)=0x3f0f) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00769a7d8200010000001495595915303d6000"}) r5 = syz_open_pts(r4, 0x0) ioctl$TCFLSH(r5, 0x540b, 0x2) syz_usb_control_io$printer(r3, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x4, 0x5, 0x5, 0x4, 0xffffff81}) r6 = socket$unix(0x1, 0x2, 0x0) bind$unix(r6, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r6) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000001980)={0x765, {"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", 0xfffffd78}}, 0x1012) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x294, 0x10, 0x8, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, {0xc, 0x8}, {0xe2b6bf8396f93026, 0x10}, {0xc, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x1c, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x6}, @TCA_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_CODEL_ECN={0x8, 0x4, 0x1}]}}, @TCA_STAB={0x148, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x3, 0x8201, 0x3, 0x2, 0x6, 0x2, 0x4}}, {0xc, 0x2, [0xfffb, 0x8, 0x1, 0x8]}}, {{0x1c, 0x1, {0x24, 0x1, 0x8, 0x492217ad, 0x0, 0xffff, 0xc4b, 0x8}}, {0x14, 0x2, [0xe, 0xc77, 0xff5a, 0x2, 0x0, 0x3, 0x5, 0xcd]}}, {{0x1c, 0x1, {0x3, 0x0, 0x1, 0x5, 0x2, 0x7, 0x5, 0x2}}, {0x8, 0x2, [0x5, 0xbb]}}, {{0x1c, 0x1, {0x1, 0xf, 0x40, 0x8, 0x0, 0x101, 0x5, 0x1}}, {0x6, 0x2, [0x2]}}, {{0x1c, 0x1, {0x4, 0x1, 0x6, 0xf2, 0x3, 0xfffffff8, 0xfffffffb, 0x8}}, {0x14, 0x2, [0x4, 0x75, 0x1ff, 0x8cf, 0x188, 0x3, 0x6, 0xfffd]}}, {{0x1c, 0x1, {0x5, 0x7, 0x12b3, 0x8001, 0x2, 0xfffffffd, 0x2, 0x1}}, {0x6, 0x2, [0x7]}}, {{0x1c, 0x1, {0x1, 0x1, 0xf2, 0xb, 0x2, 0x0, 0x4, 0x3}}, {0xa, 0x2, [0x600, 0x1, 0x0]}}, {{0x1c, 0x1, {0x7f, 0x1, 0x1000, 0x5, 0x0, 0x4, 0x8, 0x4}}, {0xc, 0x2, [0xffff, 0x9, 0x5, 0xffff]}}]}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x8, 0x0, 0xe, 0x2, 0x5, 0x401}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x3, 0xe, 0x18d, 0x1, 0x6, 0x401, 0xa}}, {0x18, 0x2, [0xd, 0x0, 0x5, 0x9, 0x7, 0x0, 0x3b, 0x3, 0x9, 0x9]}}, {{0x1c, 0x1, {0x77, 0x1, 0x2a, 0x9, 0x0, 0x300, 0x8, 0x3}}, {0xa, 0x2, [0xe3ee, 0x4e, 0x2]}}, {{0x1c, 0x1, {0x5, 0x3, 0x6, 0x400, 0x1, 0x7, 0x5cb91401, 0x1}}, {0x6, 0x2, [0x2]}}, {{0x1c, 0x1, {0xa, 0x4, 0x1b3, 0x6, 0x2, 0x9, 0x8, 0x5}}, {0xe, 0x2, [0x3, 0xffff, 0x2, 0x88a, 0x0]}}, {{0x1c, 0x1, {0x80, 0xb, 0x8, 0x6, 0x1, 0x9, 0x1, 0x3}}, {0xa, 0x2, [0x0, 0x7, 0x3593]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x294}}, 0x40c0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) 6.461589346s ago: executing program 2 (id=3611): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)=0xffff0018) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz0\x00', {0xfff7, 0xc, 0x100, 0x81}, 0x54, [0x7b, 0xb7e2, 0x3, 0x6, 0x4000100, 0x3, 0x1, 0x7, 0x9, 0x2, 0x7, 0xa, 0x3, 0x0, 0x7f, 0xd, 0x7fff, 0x6, 0x6, 0x5, 0x6, 0x6, 0x7, 0x6, 0xff, 0x2, 0xa5f2b87a, 0x405, 0x0, 0xfc75, 0x8, 0x9, 0x4, 0x7fff, 0xffffffff, 0x81, 0xfffff765, 0x2, 0x3, 0x6, 0xa, 0x7c449458, 0x5, 0x0, 0x0, 0x6, 0x7, 0x8000, 0xfffffffd, 0x80, 0x8, 0x8, 0x9, 0x7, 0x101, 0xc3c, 0x1733, 0x7fff, 0x7ffc, 0x1, 0x6, 0x5, 0x1, 0x4], [0x8, 0x3, 0x8, 0x8, 0xfffffffc, 0x8, 0x1, 0x0, 0x25, 0x10, 0x7, 0x8001, 0x8, 0xe62, 0xffffff73, 0x1000, 0x6, 0x13e5, 0x3, 0x3, 0x1000, 0x7, 0xfffffffc, 0x3b40, 0x4, 0x40, 0x5, 0x7fff, 0x8, 0x5a, 0xffff2503, 0x7fffffff, 0x6995, 0x1, 0x80000000, 0x8, 0xdab, 0x5, 0x2, 0x76c4, 0xfffffffd, 0x10000005, 0x4, 0x10004, 0xd, 0xfffffffe, 0x9, 0x10, 0x4000e, 0x9, 0x7, 0xa, 0x9, 0x3, 0x8, 0x3, 0x2, 0x3a6, 0x0, 0xc0d, 0xfffffffd, 0x9, 0xc, 0xfffffffb], [0x3, 0x6, 0x6, 0x9, 0x1000, 0x0, 0x80000000, 0x5, 0x7f, 0xa, 0x100, 0x1000, 0xf1, 0x6, 0xc, 0x10000, 0x72, 0x8, 0x633, 0xd, 0x7, 0x6, 0x80000000, 0x6, 0x4, 0x7, 0x8, 0x2ef3adcb, 0x10, 0x2, 0xf, 0x8, 0xffff, 0x4, 0x7, 0x7ff, 0x7, 0x63, 0x7, 0x2, 0x3, 0x3, 0xe3a, 0xfffffffd, 0x2, 0xa1, 0x0, 0x9d, 0x7, 0xa8a, 0x2, 0x6, 0x77, 0x8000008, 0x1ff, 0x7, 0x3, 0x2, 0x3, 0x2, 0x8, 0x2, 0x3], [0x4, 0x4, 0x5, 0x8000, 0x493e, 0x3, 0x35ff4447, 0x5, 0x400005, 0x5, 0x5d3a, 0x5, 0x3, 0x3ff, 0x6, 0xffff0000, 0x9, 0xf7df, 0x2, 0x10, 0x8, 0x2, 0xff, 0x6, 0x4, 0x4, 0x200, 0x0, 0x7, 0x4e6, 0x8, 0x40000000, 0x5ef, 0x8000, 0xc, 0x41, 0x402, 0x1, 0x5, 0x0, 0x9a8, 0x99f, 0x231, 0x3ff, 0x8, 0x1, 0xffff0001, 0x1, 0x3, 0x10, 0x8, 0x5396, 0x6161, 0x9, 0x101, 0x202, 0x8, 0x431, 0x6, 0x5, 0x10, 0x77, 0x7fc, 0x9]}, 0x45c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) r2 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) r6 = openat$vmci(0xffffff9c, &(0x7f0000001180), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000040)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f00000000c0)={@hyper}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r6, 0x7af, &(0x7f0000001100)={@hyper, 0x10000}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r6, 0x7b2, &(0x7f00000010c0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0xffffffff, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x1, 0x400}) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000001140)={0x99, @local, 0x4e23, 0x1, 'lblc\x00', 0x8, 0xef, 0x5b}, 0x2c) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000140)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r5, 0x0, &(0x7f0000000380)={0x10, 0x0, 0x0, 0x0}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = open(&(0x7f0000000000)='./bus\x00', 0x142b42, 0x84) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r10, 0x0, r9, 0x0, 0x1000, 0x800000000000000) splice(r7, 0x0, r11, 0x0, 0x80, 0x0) write$binfmt_aout(r8, 0x0, 0x20) close_range(r3, 0xffffffffffffffff, 0x0) 6.253653052s ago: executing program 0 (id=3613): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x5, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'ovf\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e23, 0x12002, 0x8, 0x48001}}, 0x44) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, 0x0, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x1c1900, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000200)="0fa20367553f46836b4876477500c71a66ba4100edb9800000c00f320f4285a15a00000f30420f017805450f0866b8af008ed86446d8e4b8010000000f01d9", 0x3f}], 0x1, 0x20, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)=ANY=[]) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.823621238s ago: executing program 3 (id=3614): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x2) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xfffffffb}, 0x0) r2 = syz_open_dev$dri(0x0, 0x7, 0x200) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000040)}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0x0, 0x0]}) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB], 0x30}}, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0) read$FUSE(r4, &(0x7f00000034c0)={0x2020}, 0x2020) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x25, 0x0, @val=@uprobe_multi={&(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)=[0x6, 0xb, 0x9, 0x7, 0xff, 0x9, 0x3, 0x8000000000000001], &(0x7f0000000300)=[0x1, 0x5, 0x2, 0x4, 0x4], 0x5, 0x8}}, 0x3c) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) r6 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000240)=r6) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x1, r6}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000680)) r7 = syz_open_dev$swradio(&(0x7f0000001c40), 0x0, 0x2) ioctl$VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000000)={0xd70f, 0xb, 0x3, "5cb2117e734c8efecf179ff3f458bb23b09982cd0b2c6f8315a127237f901310", 0x4745504d}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x1) 4.816521394s ago: executing program 0 (id=3625): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket(0x1, 0x1, 0x0) r4 = fsopen(&(0x7f0000000140)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r5, 0x0) fsmount(r4, 0x0, 0xf) ioctl$sock_ifreq(r3, 0x8948, &(0x7f0000000040)={'bond0\x00', @ifru_names='pimreg1\x00'}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000300)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x7, 0x4, 0x0, 0x3e, 0x3c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local, {[@timestamp={0x44, 0x8, 0x67, 0x0, 0x0, [0x3]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x4, {[@window={0xa, 0x3}, @eol, @generic={0x0, 0x5, "d58838"}]}}}}}}, 0x4a) openat$procfs(0xffffff9c, &(0x7f0000000100)='/proc/vmstat\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000380)={{0x3, 0x81}, 'port0\x00', 0x41, 0x20010, 0x2, 0x1ff, 0x8000, 0xfffffffe, 0x8, 0x0, 0x4, 0xf4}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_emit_ethernet(0x6a, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb08004500005c0000000000019078ac1e0001ac1414aa05009078e00000e0400000000000000000110000ac14"], 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f00000000c0)={0x8000, 0xffffff9f, 0x6, 0x5}) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x4}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x100004, 0x220104, 0xe2a3, 0x1}, 0x50) 4.815337933s ago: executing program 2 (id=3615): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xd1) accept4(r0, 0x0, 0x0, 0x800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0x14004, 0x100000, 0x8, 0x1, 0xfe}, {0x0, 0x2000, 0xf, 0x0, 0x0, 0x0, 0x0, 0xff, 0x8, 0x0, 0x6}, {0xd000, 0xf000, 0x0, 0x0, 0xf9, 0x0, 0x0, 0x0, 0x23, 0x0, 0x4}, {0x5000, 0xffff1000, 0xf, 0x41, 0x0, 0x2, 0x1, 0xfc, 0x0, 0x6}, {0x1, 0xffff1000, 0xc, 0x1, 0x3, 0x10, 0x0, 0x0, 0x1, 0x0, 0xb6, 0x90}, {0x2, 0x100000, 0x0, 0x6, 0xf}, {0x8000000, 0xeeee8000, 0xa, 0x0, 0x2, 0x0, 0x9, 0x7, 0x3a, 0x2, 0xff}, {0x0, 0x2, 0x0, 0x2, 0x0, 0x6, 0x7, 0x0, 0xfa, 0x0, 0x0, 0x5}, {0x0, 0x400}, {0xdddd0000}, 0xddf8fffb, 0x0, 0xeeee0000, 0x100, 0x8, 0x8000, 0xffff1000, [0x0, 0x10000000000, 0x2]}) ioctl$KVM_TRANSLATE(r6, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x5, 0x50}) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) link(0x0, &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./file1/file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], 0x0, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x8e79f0352167ea94) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r8, 0x0) mmap(&(0x7f00002b9000/0xf000)=nil, 0xf000, 0x0, 0x4008031, 0xffffffffffffffff, 0x4000) 2.815564561s ago: executing program 2 (id=3617): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x80002, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) socket$netlink(0x10, 0x3, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETLED(r4, 0x4b32, 0xf1a) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000800014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) r5 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r5, &(0x7f00000000c0)=""/4096, 0x1000) keyctl$read(0xb, r5, &(0x7f00000010c0)=""/4096, 0x1000) 2.814366468s ago: executing program 1 (id=3628): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x64004880}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x28, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004084}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000005c0)={0x24, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "48b603de"}]}}, 0x0}, 0x0) unshare(0x24020400) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000080)={0x200000, 0x0, 0x10}, 0x18) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x3}, @IFLA_GTP_CREATE_SOCKETS={0x5}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8801}, 0x800) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.289723372s ago: executing program 2 (id=3618): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001180)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) move_pages(r3, 0x4, &(0x7f00000031c0)=[&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil], &(0x7f0000003200)=[0x4, 0x2, 0x800, 0x7, 0x2], &(0x7f0000003240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) sendto$packet(r2, &(0x7f0000000180)="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", 0x1000, 0x14, &(0x7f0000000040)={0x11, 0x1a, 0x0, 0x1, 0xf6, 0x6, @multicast}, 0x14) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) openat$dir(0xffffff9c, 0x0, 0xb0040, 0x140) syz_usb_connect(0x2, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x62, 0xa1, 0xb, 0x40, 0xc45, 0x1010, 0xe6fc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x32, 0x0, 0x1, 0x97, 0x40, 0xa4, 0x0, [], [{{0x9, 0x5, 0x82, 0x3, 0x3ff, 0x0, 0x7e}}]}}]}}]}}, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) preadv(r4, &(0x7f0000000140)=[{&(0x7f0000000080)=""/128, 0x80}], 0x1, 0x219, 0x200) 1.288947043s ago: executing program 4 (id=3619): socket$inet6(0xa, 0x1, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xd1) accept4(r0, 0x0, 0x0, 0x800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0x14004, 0x100000, 0x8, 0x1, 0xfe}, {0x0, 0x2000, 0xf, 0x0, 0x0, 0x0, 0x0, 0xff, 0x8, 0x0, 0x6}, {0xd000, 0xf000, 0x0, 0x0, 0xf9, 0x0, 0x0, 0x0, 0x23, 0x0, 0x4}, {0x5000, 0xffff1000, 0xf, 0x41, 0x0, 0x2, 0x1, 0xfc, 0x0, 0x6}, {0x1, 0xffff1000, 0xc, 0x1, 0x3, 0x10, 0x0, 0x0, 0x1, 0x0, 0xb6, 0x90}, {0x2, 0x100000, 0x0, 0x6, 0xf}, {0x8000000, 0xeeee8000, 0xa, 0x0, 0x2, 0x0, 0x9, 0x7, 0x3a, 0x2, 0xff}, {0x0, 0x2, 0x0, 0x2, 0x0, 0x6, 0x7, 0x0, 0xfa, 0x0, 0x0, 0x5}, {0x0, 0x400}, {0xdddd0000}, 0xddf8fffb, 0x0, 0xeeee0000, 0x100, 0x8, 0x8000, 0xffff1000, [0x0, 0x10000000000, 0x2]}) ioctl$KVM_TRANSLATE(r6, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x5, 0x50}) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) link(0x0, &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./file1/file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], 0x0, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x8e79f0352167ea94) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r8, 0x0) mmap(&(0x7f00002b9000/0xf000)=nil, 0xf000, 0x0, 0x4008031, 0xffffffffffffffff, 0x4000) 1.288292783s ago: executing program 0 (id=3630): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket(0x1, 0x1, 0x0) r4 = fsopen(&(0x7f0000000140)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r5, 0x0) fsmount(r4, 0x0, 0xf) ioctl$sock_ifreq(r3, 0x8948, &(0x7f0000000040)={'bond0\x00', @ifru_names='pimreg1\x00'}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000300)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x7, 0x4, 0x0, 0x3e, 0x3c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local, {[@timestamp={0x44, 0x8, 0x67, 0x0, 0x0, [0x3]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x4, {[@window={0xa, 0x3}, @eol, @generic={0x0, 0x5, "d58838"}]}}}}}}, 0x4a) openat$procfs(0xffffff9c, &(0x7f0000000100)='/proc/vmstat\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000380)={{0x3, 0x81}, 'port0\x00', 0x41, 0x20010, 0x2, 0x1ff, 0x8000, 0xfffffffe, 0x8, 0x0, 0x4, 0xf4}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_emit_ethernet(0x6a, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb08004500005c0000000000019078ac1e0001ac1414aa05009078e00000e0400000000000000000110000ac14"], 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f00000000c0)={0x8000, 0xffffff9f, 0x6, 0x5}) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x4}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x100004, 0x220104, 0xe2a3, 0x1}, 0x50) 1.189849249s ago: executing program 3 (id=3620): syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b1000905"], 0x0) r0 = socket$packet(0x11, 0x3, 0x300) pwritev2(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000000c0)="05", 0x1}], 0x1, 0x0, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f00000010c0)=0x1, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x78}}, 0x20008844) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200"], 0x7c}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905"], 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xb}}, [@NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DIRECTION={0x5}]}}}, {0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}, {0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xfbc55af47d033ccd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xbc}, 0x1, 0x0, 0x0, 0x840}, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) futex(&(0x7f0000000180)=0x2, 0x10b, 0x2, &(0x7f0000000280)={0x77359400}, &(0x7f0000000540)=0x1, 0x2) ioctl$EVIOCSKEYCODE(r3, 0x40084504, &(0x7f00000002c0)=[0x2a, 0x98]) syz_usb_connect$uac1(0x69a90eab3db9c902, 0x98, &(0x7f0000000280)={{0x12, 0x1, 0x100, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x86, 0x3, 0x1, 0x4, 0xa0, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xfff7, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x82, 0x4, 0x9, 0x10, "", "ca"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x9, 0x8, 0x7, 0x6, "5d7b68d5"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0xff, 0xc8, 0x3, {0x7, 0x25, 0x1, 0x0, 0x4, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x6, 0x1, 0x8, 0x1, "3a3882"}, @as_header={0x7, 0x24, 0x1, 0x1, 0xc0, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x50, 0x5, 0x8, 0x41, {0x7, 0x25, 0x1, 0x82, 0xfe, 0x7}}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2000000000000020}) 0s ago: executing program 1 (id=3621): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x2) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xfffffffb}, 0x0) r2 = syz_open_dev$dri(0x0, 0x7, 0x200) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000040)}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0x0, 0x0]}) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000000000"], 0x30}}, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0) read$FUSE(r4, &(0x7f00000034c0)={0x2020}, 0x2020) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x25, 0x0, @val=@uprobe_multi={&(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)=[0x6, 0xb, 0x9, 0x7, 0xff, 0x9, 0x8000000000000001], &(0x7f0000000300)=[0x1, 0x5, 0x2, 0x4, 0x4], 0x5, 0x7}}, 0x3c) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) r6 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000240)=r6) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x1, r6}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000680)) r7 = syz_open_dev$swradio(&(0x7f0000001c40), 0x0, 0x2) ioctl$VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000000)={0xd70f, 0xb, 0x3, "5cb2117e734c8efecf179ff3f458bb23b09982cd0b2c6f8315a127237f901310", 0x4745504d}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x1) kernel console output (not intermixed with test programs): a_spca508: reg_read err -32 [ 1164.912164][ T43] gspca_spca508: reg_read err -32 [ 1164.918386][ T43] gspca_spca508: reg write: error -32 [ 1164.923957][ T43] spca508 2-1:0.0: probe with driver spca508 failed with error -32 [ 1164.971584][T20239] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1164.995785][T20239] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1165.019213][T20239] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1165.039877][T20239] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1165.049385][T20239] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1165.058794][T20239] usb 1-1: Product: syz [ 1165.063188][T20239] usb 1-1: Manufacturer: syz [ 1165.068262][T20239] usb 1-1: SerialNumber: syz [ 1165.104148][T20239] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 1165.122327][T20239] cdc_ncm 1-1:1.0: bind() failure [ 1165.147235][T12100] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1165.356130][T20495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1165.373710][T20495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1165.448349][T20239] usb 2-1: USB disconnect, device number 15 [ 1165.509758][T20495] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3192'. [ 1165.693848][ T43] usb 1-1: USB disconnect, device number 10 [ 1166.058221][T20509] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3194'. [ 1167.193529][T20538] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3200'. [ 1168.058446][T20543] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3201'. [ 1169.037120][ T5922] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1169.297104][T12100] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1169.321477][ T5922] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 1169.347435][ T5922] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1169.378398][ T5922] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1169.391865][ T5922] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1169.401528][ T5922] usb 1-1: Manufacturer: syz [ 1169.413302][ T5922] usb 1-1: config 0 descriptor?? [ 1169.436126][ T5922] igorplugusb 1-1:0.0: incorrect number of endpoints [ 1169.451328][T12100] usb 3-1: device descriptor read/64, error -71 [ 1169.547839][ T43] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1169.651184][T20550] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3203'. [ 1169.667847][T20550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1169.678955][T20550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1169.737224][T12100] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1169.820226][T20569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1169.833312][T20569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1169.923016][T12100] usb 3-1: device descriptor read/64, error -71 [ 1170.041480][T12100] usb usb3-port1: attempt power cycle [ 1170.573990][T12100] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1170.584630][T20575] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3210'. [ 1170.597739][T12100] usb 3-1: device descriptor read/8, error -71 [ 1170.837170][T12100] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1170.857815][T12100] usb 3-1: device descriptor read/8, error -71 [ 1171.149078][T12100] usb usb3-port1: unable to enumerate USB device [ 1171.480884][T20579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3212'. [ 1171.657101][ T5922] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1171.726399][T20590] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3213'. [ 1172.553670][ T43] usb 1-1: USB disconnect, device number 11 [ 1172.599146][ T5922] usb 4-1: config 0 has an invalid descriptor of length 146, skipping remainder of the config [ 1172.811528][ T5922] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1172.991303][ T5922] usb 4-1: New USB device found, idVendor=2d7b, idProduct=22c4, bcdDevice=ca.8b [ 1173.013222][ T5922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=64 [ 1173.052322][ T5922] usb 4-1: SerialNumber: syz [ 1173.093359][ T5922] usb 4-1: config 0 descriptor?? [ 1174.627192][T12467] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1174.812936][T20620] VFS: Warning: syz.1.3219 using old stat() call. Recompile your binary. [ 1174.824591][ T30] audit: type=1326 audit(1760018891.372:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20619 comm="syz.1.3219" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ad558 code=0x7ffc0000 [ 1174.910025][ T5826] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 1174.995768][T20622] bridge0: entered promiscuous mode [ 1175.001553][ T30] audit: type=1326 audit(1760018891.372:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20619 comm="syz.1.3219" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ad558 code=0x7ffc0000 [ 1175.043361][T20622] macvtap1: entered allmulticast mode [ 1175.076219][T20622] bridge0: entered allmulticast mode [ 1175.102892][ T30] audit: type=1326 audit(1760018891.372:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20619 comm="syz.1.3219" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1175.156340][T20622] bridge0: port 3(macvtap1) entered blocking state [ 1175.173303][T20622] bridge0: port 3(macvtap1) entered disabled state [ 1175.190501][ T30] audit: type=1326 audit(1760018891.372:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20619 comm="syz.1.3219" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ad558 code=0x7ffc0000 [ 1175.228916][T20622] bridge0: left allmulticast mode [ 1175.234115][T20622] bridge0: left promiscuous mode [ 1175.252478][ T30] audit: type=1326 audit(1760018891.372:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20619 comm="syz.1.3219" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1175.285439][ T30] audit: type=1326 audit(1760018891.372:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20619 comm="syz.1.3219" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ad558 code=0x7ffc0000 [ 1175.313716][ T30] audit: type=1326 audit(1760018891.372:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20619 comm="syz.1.3219" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ad558 code=0x7ffc0000 [ 1175.339656][ T30] audit: type=1326 audit(1760018891.372:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20619 comm="syz.1.3219" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ad558 code=0x7ffc0000 [ 1175.369712][ T30] audit: type=1326 audit(1760018891.372:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20619 comm="syz.1.3219" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ad558 code=0x7ffc0000 [ 1175.395147][ T30] audit: type=1326 audit(1760018891.372:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20619 comm="syz.1.3219" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ad558 code=0x7ffc0000 [ 1175.711731][T12467] usb 4-1: USB disconnect, device number 5 [ 1175.797489][ T5922] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1175.872929][T20638] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3226'. [ 1176.577655][ T5922] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 1176.586130][ T5922] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1176.624674][ T5922] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1176.645206][ T5922] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1176.727448][ T5826] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1176.746489][ T5922] usb 1-1: Manufacturer: syz [ 1176.776874][ T5922] usb 1-1: config 0 descriptor?? [ 1176.808698][ T5922] igorplugusb 1-1:0.0: incorrect number of endpoints [ 1176.887080][ T5826] usb 2-1: Using ep0 maxpacket: 16 [ 1176.893997][ T5826] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1176.905725][ T5826] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1176.922625][ T5826] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1176.934370][ T5826] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1176.964997][ T5826] usb 2-1: Product: syz [ 1176.969643][ T5826] usb 2-1: Manufacturer: syz [ 1176.981776][ T5826] usb 2-1: SerialNumber: syz [ 1177.001190][ T5826] usb 2-1: config 0 descriptor?? [ 1177.025634][T20632] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3225'. [ 1177.043114][ T5826] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1177.162471][T20652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3229'. [ 1177.282513][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.288898][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.339927][T20655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1177.355005][T20655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1177.361650][ T5826] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1177.509906][T20655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1177.522946][T20655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1177.917479][ T5826] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1177.923964][ T5826] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 1177.938433][ T5826] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 1177.945536][ T5826] em28xx 2-1:0.0: No AC97 audio processor [ 1177.955238][ T5826] usb 2-1: USB disconnect, device number 17 [ 1177.962538][ T5826] em28xx 2-1:0.0: Disconnecting em28xx [ 1178.008672][ T5826] em28xx 2-1:0.0: Freeing device [ 1178.760686][ T5892] usb 1-1: USB disconnect, device number 12 [ 1179.326926][ T24] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1179.368333][T20674] FAULT_INJECTION: forcing a failure. [ 1179.368333][T20674] name failslab, interval 1, probability 0, space 0, times 0 [ 1179.382272][T20674] CPU: 1 UID: 0 PID: 20674 Comm: syz.0.3235 Not tainted syzkaller #0 PREEMPT(full) [ 1179.382294][T20674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1179.382304][T20674] Call Trace: [ 1179.382311][T20674] [ 1179.382321][T20674] dump_stack_lvl+0x189/0x250 [ 1179.382344][T20674] ? __pfx____ratelimit+0x10/0x10 [ 1179.382363][T20674] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1179.382380][T20674] ? __pfx__printk+0x10/0x10 [ 1179.382398][T20674] ? __pfx___might_resched+0x10/0x10 [ 1179.382416][T20674] ? fs_reclaim_acquire+0x7d/0x100 [ 1179.382444][T20674] should_fail_ex+0x414/0x560 [ 1179.382484][T20674] should_failslab+0xa8/0x100 [ 1179.382500][T20674] __kmalloc_cache_noprof+0x6f/0x6f0 [ 1179.382522][T20674] ? nfnetlink_rcv+0xf97/0x2590 [ 1179.382557][T20674] ? __nla_parse+0x40/0x60 [ 1179.382582][T20674] nfnetlink_rcv+0xf97/0x2590 [ 1179.382629][T20674] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1179.382664][T20674] ? ref_tracker_free+0x63a/0x7d0 [ 1179.382705][T20674] ? __netlink_deliver_tap+0x807/0x850 [ 1179.382721][T20674] ? netlink_deliver_tap+0x2e/0x1b0 [ 1179.382749][T20674] netlink_unicast+0x82f/0x9e0 [ 1179.382779][T20674] ? __pfx_netlink_unicast+0x10/0x10 [ 1179.382804][T20674] ? netlink_sendmsg+0x642/0xb30 [ 1179.382819][T20674] ? skb_put+0x11b/0x210 [ 1179.382838][T20674] netlink_sendmsg+0x805/0xb30 [ 1179.382861][T20674] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1179.382879][T20674] ? __import_iovec+0x5d4/0x7f0 [ 1179.382891][T20674] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1179.382914][T20674] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1179.382929][T20674] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1179.382946][T20674] __sock_sendmsg+0x219/0x270 [ 1179.382970][T20674] ____sys_sendmsg+0x505/0x830 [ 1179.382992][T20674] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1179.383022][T20674] ___sys_sendmsg+0x21f/0x2a0 [ 1179.383042][T20674] ? __pfx____sys_sendmsg+0x10/0x10 [ 1179.383086][T20674] ? __fget_files+0x2a/0x420 [ 1179.383099][T20674] ? __fget_files+0x3a0/0x420 [ 1179.383120][T20674] __sys_sendmsg+0x164/0x220 [ 1179.383139][T20674] ? __pfx___sys_sendmsg+0x10/0x10 [ 1179.383163][T20674] ? __pfx_ksys_write+0x10/0x10 [ 1179.383187][T20674] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1179.383209][T20674] ? lockdep_hardirqs_on+0x9c/0x150 [ 1179.383229][T20674] __do_fast_syscall_32+0xb6/0x2b0 [ 1179.383255][T20674] do_fast_syscall_32+0x34/0x80 [ 1179.383275][T20674] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1179.383293][T20674] RIP: 0023:0xf7ff1539 [ 1179.383307][T20674] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1179.383321][T20674] RSP: 002b:00000000f54e655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1179.383337][T20674] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 1179.383349][T20674] RDX: 0000000024000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1179.383358][T20674] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1179.383367][T20674] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1179.383376][T20674] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1179.383400][T20674] [ 1180.387223][T13835] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1180.609267][T13835] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1180.619756][T13835] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1180.629230][T13835] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1180.730308][T13835] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1180.744547][T13835] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1180.786507][T13835] usb 4-1: Product: syz [ 1180.805701][T13835] usb 4-1: Manufacturer: syz [ 1181.012351][T13835] usb 4-1: SerialNumber: syz [ 1181.066662][T13835] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 1181.082716][T13835] cdc_ncm 4-1:1.0: bind() failure [ 1181.313329][T20682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1181.333123][T20682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1181.348855][T20698] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3241'. [ 1181.386801][T20682] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3238'. [ 1181.897411][T12100] usb 4-1: USB disconnect, device number 6 [ 1182.284028][T20702] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3242'. [ 1182.423856][ T30] kauditd_printk_skb: 69 callbacks suppressed [ 1182.423877][ T30] audit: type=1326 audit(1760018898.962:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20701 comm="syz.2.3242" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03539 code=0x7ffc0000 [ 1182.480393][ T30] audit: type=1326 audit(1760018898.962:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20701 comm="syz.2.3242" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03539 code=0x7ffc0000 [ 1182.506124][ T30] audit: type=1326 audit(1760018898.962:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20701 comm="syz.2.3242" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f03539 code=0x7ffc0000 [ 1182.529169][ T30] audit: type=1326 audit(1760018898.962:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20701 comm="syz.2.3242" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03539 code=0x7ffc0000 [ 1182.596336][ T30] audit: type=1326 audit(1760018898.962:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20701 comm="syz.2.3242" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03539 code=0x7ffc0000 [ 1182.650450][T20713] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3244'. [ 1182.659976][T20713] netlink: 'syz.4.3244': attribute type 2 has an invalid length. [ 1182.673971][T20713] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3244'. [ 1182.693354][ T30] audit: type=1326 audit(1760018898.962:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20701 comm="syz.2.3242" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f03539 code=0x7ffc0000 [ 1182.813851][ T30] audit: type=1326 audit(1760018898.962:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20701 comm="syz.2.3242" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03539 code=0x7ffc0000 [ 1182.836210][ T30] audit: type=1326 audit(1760018898.962:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20701 comm="syz.2.3242" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03539 code=0x7ffc0000 [ 1182.858564][ T30] audit: type=1326 audit(1760018898.962:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20701 comm="syz.2.3242" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f03539 code=0x7ffc0000 [ 1182.904334][ T30] audit: type=1326 audit(1760018898.972:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20701 comm="syz.2.3242" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03539 code=0x7ffc0000 [ 1183.896158][T20732] program syz.3.3250 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1184.387128][ T5826] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 1184.620416][ T5826] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1184.635647][ T5826] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1184.653247][T20745] fuse: Bad value for 'rootmode' [ 1185.129040][ T5826] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 1185.140420][ T5826] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1185.150470][ T5826] usb 2-1: SerialNumber: syz [ 1185.170964][ T5826] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 1185.191405][ T5826] usb-storage 2-1:1.0: USB Mass Storage device detected [ 1185.228376][ T5826] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 1186.744245][T12100] usb 2-1: USB disconnect, device number 19 [ 1186.867311][T13835] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1187.042046][T13835] usb 3-1: config 0 has an invalid descriptor of length 146, skipping remainder of the config [ 1187.052813][T13835] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1187.090264][T13835] usb 3-1: New USB device found, idVendor=2d7b, idProduct=22c4, bcdDevice=ca.8b [ 1187.100409][T13835] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=64 [ 1187.118452][T13835] usb 3-1: SerialNumber: syz [ 1187.131343][T20765] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3258'. [ 1187.157986][T13835] usb 3-1: config 0 descriptor?? [ 1187.591684][T16539] bridge_slave_1: left allmulticast mode [ 1187.601591][T16539] bridge_slave_1: left promiscuous mode [ 1187.608873][T16539] bridge0: port 2(bridge_slave_1) entered disabled state [ 1187.620185][T16539] bridge_slave_0: left allmulticast mode [ 1187.625927][T16539] bridge_slave_0: left promiscuous mode [ 1187.634644][T16539] bridge0: port 1(bridge_slave_0) entered disabled state [ 1187.647589][T16539] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 1187.655237][T16539] batman_adv: batadv0: Interface deactivated: ip6gretap2 [ 1187.662504][T16539] batman_adv: batadv0: Interface deactivated: ip6gretap3 [ 1187.670506][T16539] batman_adv: batadv0: Interface deactivated: ip6gretap4 [ 1187.677957][T16539] batman_adv: batadv0: Interface deactivated: ip6gretap5 [ 1187.690819][T16539] batman_adv: batadv0: Interface deactivated: ip6gretap6 [ 1187.708644][T16539] batman_adv: batadv0: Interface deactivated: ip6gretap7 [ 1187.716568][T16539] batman_adv: batadv0: Interface deactivated: ip6gretap8 [ 1189.032614][T16539] batman_adv: batadv0: Interface deactivated: ip6gretap9 [ 1189.042293][T16539] batman_adv: batadv0: Interface deactivated: ip6gretap10 [ 1189.339567][T16539] batman_adv: batadv0: Interface deactivated: ip6gretap11 [ 1189.438937][T16539] batman_adv: batadv0: Interface deactivated: ip6gretap12 [ 1189.475566][T16539] batman_adv: batadv0: Interface deactivated: ip6gretap13 [ 1189.502380][T16539] batman_adv: batadv0: Interface deactivated: ip6gretap14 [ 1189.517126][T16539] batman_adv: batadv0: Interface deactivated: ip6gretap15 [ 1189.527978][T16539] batman_adv: batadv0: Interface deactivated: ip6gretap16 [ 1189.552460][T16539] batman_adv: batadv0: Interface deactivated: ip6gretap17 [ 1189.916674][T16539] batman_adv: batadv0: Interface deactivated: ip6gretap18 [ 1189.924616][T16539] batman_adv: batadv0: Interface deactivated: ip6gretap19 [ 1189.979999][T16539] batman_adv: batadv0: Interface deactivated: ip6gretap20 [ 1189.996449][T16539] batman_adv: batadv0: Interface deactivated: ip6gretap21 [ 1190.016807][T16539] batman_adv: batadv0: Interface deactivated: ip6gretap22 [ 1190.132600][T16539] batman_adv: batadv0: Interface deactivated: ip6gretap23 [ 1190.192506][T16539] batman_adv: batadv0: Interface deactivated: ip6gretap24 [ 1190.250274][T20785] FAULT_INJECTION: forcing a failure. [ 1190.250274][T20785] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1190.267594][T16539] batman_adv: batadv0: Interface deactivated: ip6gretap25 [ 1190.289634][T20785] CPU: 1 UID: 0 PID: 20785 Comm: syz.4.3262 Not tainted syzkaller #0 PREEMPT(full) [ 1190.289655][T20785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1190.289664][T20785] Call Trace: [ 1190.289670][T20785] [ 1190.289677][T20785] dump_stack_lvl+0x189/0x250 [ 1190.289695][T20785] ? __pfx____ratelimit+0x10/0x10 [ 1190.289711][T20785] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1190.289725][T20785] ? __pfx__printk+0x10/0x10 [ 1190.289747][T20785] should_fail_ex+0x414/0x560 [ 1190.289766][T20785] _copy_to_user+0x31/0xb0 [ 1190.289781][T20785] simple_read_from_buffer+0xe1/0x170 [ 1190.289804][T20785] proc_fail_nth_read+0x1b3/0x220 [ 1190.289822][T20785] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1190.289840][T20785] ? rw_verify_area+0x2a6/0x4d0 [ 1190.289858][T20785] ? __lock_acquire+0xab9/0xd20 [ 1190.289870][T20785] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1190.289887][T20785] vfs_read+0x1fd/0xa30 [ 1190.289905][T20785] ? fdget_pos+0x247/0x320 [ 1190.289920][T20785] ? __pfx___mutex_lock+0x10/0x10 [ 1190.289937][T20785] ? __pfx_vfs_read+0x10/0x10 [ 1190.289956][T20785] ? __fget_files+0x2a/0x420 [ 1190.289970][T20785] ? __fget_files+0x3a0/0x420 [ 1190.289982][T20785] ? __fget_files+0x2a/0x420 [ 1190.289999][T20785] ksys_read+0x145/0x250 [ 1190.290019][T20785] ? __pfx_ksys_read+0x10/0x10 [ 1190.290038][T20785] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1190.290057][T20785] ? lockdep_hardirqs_on+0x9c/0x150 [ 1190.290075][T20785] __do_fast_syscall_32+0xb6/0x2b0 [ 1190.290093][T20785] ? lockdep_hardirqs_on+0x9c/0x150 [ 1190.290111][T20785] do_fast_syscall_32+0x34/0x80 [ 1190.290129][T20785] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1190.290145][T20785] RIP: 0023:0xf703d539 [ 1190.290158][T20785] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1190.290170][T20785] RSP: 002b:00000000f540c590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 1190.290184][T20785] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f540c620 [ 1190.290194][T20785] RDX: 000000000000000f RSI: 00000000f73d5ff4 RDI: 0000000000000000 [ 1190.290202][T20785] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1190.290210][T20785] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1190.290218][T20785] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1190.290238][T20785] [ 1190.547435][T16539] batman_adv: batadv0: Interface deactivated: ip6gretap26 [ 1190.558992][T16539] batman_adv: batadv0: Interface deactivated: ip6gretap27 [ 1190.567714][T16539] batman_adv: batadv0: Interface deactivated: ip6gretap28 [ 1190.581364][T16539] batman_adv: batadv0: Interface deactivated: ip6gretap29 [ 1191.318174][T16539] batman_adv: batadv0: Removing interface: ip6gretap1 [ 1191.362707][T16539] batman_adv: batadv0: Removing interface: ip6gretap2 [ 1191.392094][T16539] batman_adv: batadv0: Removing interface: ip6gretap3 [ 1191.406064][ T5922] usb 3-1: USB disconnect, device number 13 [ 1191.430780][T16539] batman_adv: batadv0: Removing interface: ip6gretap4 [ 1191.461990][T16539] batman_adv: batadv0: Removing interface: ip6gretap5 [ 1191.483750][T16539] batman_adv: batadv0: Removing interface: ip6gretap6 [ 1191.506900][T16539] batman_adv: batadv0: Removing interface: ip6gretap7 [ 1191.517100][ T24] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1191.541718][T16539] batman_adv: batadv0: Removing interface: ip6gretap8 [ 1191.559981][T16539] batman_adv: batadv0: Removing interface: ip6gretap9 [ 1191.579939][T16539] batman_adv: batadv0: Removing interface: ip6gretap10 [ 1191.600888][T16539] batman_adv: batadv0: Removing interface: ip6gretap11 [ 1191.622288][T16539] batman_adv: batadv0: Removing interface: ip6gretap12 [ 1191.647092][ T24] usb 1-1: device descriptor read/64, error -71 [ 1191.664637][T16539] batman_adv: batadv0: Removing interface: ip6gretap13 [ 1191.693242][T16539] batman_adv: batadv0: Removing interface: ip6gretap14 [ 1191.717845][T16539] batman_adv: batadv0: Removing interface: ip6gretap15 [ 1191.741004][T16539] batman_adv: batadv0: Removing interface: ip6gretap16 [ 1191.771801][T16539] batman_adv: batadv0: Removing interface: ip6gretap17 [ 1191.799805][T16539] batman_adv: batadv0: Removing interface: ip6gretap18 [ 1191.824818][T16539] batman_adv: batadv0: Removing interface: ip6gretap19 [ 1191.851064][T16539] batman_adv: batadv0: Removing interface: ip6gretap20 [ 1191.869073][T16539] batman_adv: batadv0: Removing interface: ip6gretap21 [ 1191.890889][T16539] batman_adv: batadv0: Removing interface: ip6gretap22 [ 1191.907084][ T24] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1191.923664][T16539] batman_adv: batadv0: Removing interface: ip6gretap23 [ 1191.948089][T16539] batman_adv: batadv0: Removing interface: ip6gretap24 [ 1191.973484][T16539] batman_adv: batadv0: Removing interface: ip6gretap25 [ 1191.997543][T16539] batman_adv: batadv0: Removing interface: ip6gretap26 [ 1192.023268][T16539] batman_adv: batadv0: Removing interface: ip6gretap27 [ 1192.047295][ T24] usb 1-1: device descriptor read/64, error -71 [ 1192.049943][T16539] batman_adv: batadv0: Removing interface: ip6gretap28 [ 1192.074197][T16539] batman_adv: batadv0: Removing interface: ip6gretap29 [ 1192.167581][ T24] usb usb1-port1: attempt power cycle [ 1192.384090][T16539] bond1 (unregistering): (slave gre1): Releasing backup interface [ 1192.392496][T16539] gre1 (unregistering): left promiscuous mode [ 1192.537092][ T24] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1192.557907][ T24] usb 1-1: device descriptor read/8, error -71 [ 1192.771645][T16539] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1192.783493][T16539] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1192.794795][T16539] bond0 (unregistering): Released all slaves [ 1192.807201][ T24] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1192.852768][ T24] usb 1-1: device descriptor read/8, error -71 [ 1192.945317][T16539] bond1 (unregistering): Released all slaves [ 1192.966738][T16539] bond2 (unregistering): Released all slaves [ 1192.977386][ T24] usb usb1-port1: unable to enumerate USB device [ 1193.198136][T16539] tipc: Left network mode [ 1194.262244][T16539] hsr_slave_0: left promiscuous mode [ 1194.312648][T16539] hsr_slave_1: left promiscuous mode [ 1194.359298][T16539] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1194.366746][T16539] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1194.437859][T16539] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1194.485921][T16539] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1194.579793][T16539] veth0_macvtap: left promiscuous mode [ 1194.586672][T16539] veth1_vlan: left promiscuous mode [ 1194.592827][T16539] veth0_vlan: left promiscuous mode [ 1194.707227][T12100] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 1194.903440][T12100] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1194.920241][T12100] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1194.955822][T12100] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1194.995664][T12100] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1195.262890][T12100] usb 1-1: GET_CAPABILITIES returned 0 [ 1195.269191][T12100] usbtmc 1-1:16.0: can't read capabilities [ 1195.278271][T20830] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3273'. [ 1196.061613][T20825] usbtmc 1-1:16.0: send_request_dev_dep_msg_in returned -90 [ 1196.212170][ T5826] usb 1-1: USB disconnect, device number 17 [ 1197.167060][ T5826] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1197.319897][ T5826] usb 2-1: config 0 interface 0 altsetting 14 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1197.337528][ T5826] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1197.385784][T16539] team0 (unregistering): Port device team_slave_1 removed [ 1197.395018][ T5826] usb 2-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00 [ 1197.464570][ T5826] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1197.516063][ T5826] usb 2-1: config 0 descriptor?? [ 1197.521738][T16539] team0 (unregistering): Port device team_slave_0 removed [ 1198.055610][ T5826] a4tech 0003:09DA:001A.001D: unbalanced collection at end of report description [ 1198.092454][ T5826] a4tech 0003:09DA:001A.001D: parse failed [ 1198.099550][ T5826] a4tech 0003:09DA:001A.001D: probe with driver a4tech failed with error -22 [ 1198.240529][ T5826] usb 2-1: USB disconnect, device number 20 [ 1198.813737][T20863] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3282'. [ 1198.824173][T20863] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3282'. [ 1198.848173][T20863] netlink: 'syz.1.3282': attribute type 6 has an invalid length. [ 1198.856731][T20863] netlink: 'syz.1.3282': attribute type 5 has an invalid length. [ 1198.874481][T20863] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3282'. [ 1198.907098][T20853] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1199.932542][T16539] IPVS: stop unused estimator thread 0... [ 1200.313653][T20885] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3288'. [ 1200.877722][T20890] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1201.223132][T20892] loop6: detected capacity change from 0 to 7 [ 1201.230928][T20892] Dev loop6: unable to read RDB block 7 [ 1201.281823][T20892] loop6: unable to read partition table [ 1201.314430][T20892] loop6: partition table beyond EOD, truncated [ 1201.356724][T20892] loop_reread_partitions: partition scan of loop6 (žč¢«xü—ŸŃą– ) failed (rc=-5) [ 1201.807082][T13835] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1202.109261][T20910] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3294'. [ 1202.138978][T13835] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1202.180658][T13835] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1202.196525][T20908] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3292'. [ 1202.260714][T13835] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1202.696682][T13835] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1202.711241][T13835] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1202.892686][T13835] usb 1-1: Product: syz [ 1202.899555][T13835] usb 1-1: Manufacturer: syz [ 1202.943986][T13835] usb 1-1: SerialNumber: syz [ 1203.005223][T13835] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 1203.029604][T13835] cdc_ncm 1-1:1.0: bind() failure [ 1203.152286][T12100] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1203.190314][T20917] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3297'. [ 1203.227989][T20897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1203.247861][T20917] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3297'. [ 1203.256855][T20917] netlink: 'syz.3.3297': attribute type 6 has an invalid length. [ 1203.265121][T20897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1203.305642][T20897] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3291'. [ 1203.324445][T20917] netlink: 'syz.3.3297': attribute type 5 has an invalid length. [ 1203.337166][T12100] usb 2-1: Using ep0 maxpacket: 8 [ 1203.339435][T13835] usb 1-1: USB disconnect, device number 18 [ 1203.344347][T12100] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 1203.352107][T20920] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1203.366932][T20917] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3297'. [ 1203.413884][T12100] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1203.451007][T12100] usb 2-1: config 0 has no interfaces? [ 1203.466217][T12100] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1203.485210][T12100] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1203.507647][T12100] usb 2-1: Product: syz [ 1203.512073][T12100] usb 2-1: Manufacturer: syz [ 1203.537477][T12100] usb 2-1: SerialNumber: syz [ 1203.562059][T12100] usb 2-1: config 0 descriptor?? [ 1203.903410][ T5922] usb 2-1: USB disconnect, device number 22 [ 1204.337118][T12100] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1204.519205][T12100] usb 1-1: Using ep0 maxpacket: 16 [ 1204.538782][T12100] usb 1-1: too many configurations: 112, using maximum allowed: 8 [ 1204.616800][T12100] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1204.629257][T12100] usb 1-1: New USB device strings: Mfr=144, Product=246, SerialNumber=0 [ 1204.652117][T12100] usb 1-1: Product: syz [ 1204.772403][T12100] usb 1-1: Manufacturer: syz [ 1204.824793][T12100] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1204.831454][T12100] r8152-cfgselector 1-1: config 0 descriptor?? [ 1204.878559][T12100] cdc_acm 1-1:0.0: Zero length descriptor references [ 1204.885409][T12100] cdc_acm 1-1:0.0: probe with driver cdc_acm failed with error -22 [ 1205.466902][T20946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1205.514565][T20946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1205.603126][T20946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1205.613949][T20946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1205.770245][ T5922] r8152-cfgselector 1-1: USB disconnect, device number 19 [ 1206.353630][T20954] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3304'. [ 1206.952693][T20966] QAT: failed to copy from user cfg_data. [ 1207.112100][T20972] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3308'. [ 1207.541286][ T5922] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1207.959568][ T5922] usb 3-1: Using ep0 maxpacket: 16 [ 1207.966883][ T5922] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1208.003033][ T5922] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1208.033042][ T5922] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1208.043254][ T5922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1208.044130][T20977] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3311'. [ 1208.071742][ T5922] usb 3-1: config 0 descriptor?? [ 1208.132110][T20977] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3311'. [ 1208.148021][T20977] netlink: 'syz.4.3311': attribute type 6 has an invalid length. [ 1208.159113][T20977] netlink: 'syz.4.3311': attribute type 5 has an invalid length. [ 1208.168288][T20977] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3311'. [ 1208.247409][T13835] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1208.275395][T20980] fuse: Bad value for 'fd' [ 1208.421494][T13835] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1208.447819][T13835] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1208.457622][T13835] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1208.473643][T20983] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3313'. [ 1208.485476][T13835] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1208.500225][T13835] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1208.509753][T13835] usb 4-1: Product: syz [ 1208.514000][T13835] usb 4-1: Manufacturer: syz [ 1208.525972][T13835] usb 4-1: SerialNumber: syz [ 1208.540062][T13835] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 1208.550823][T13835] cdc_ncm 4-1:1.0: bind() failure [ 1208.658653][T20989] random: crng reseeded on system resumption [ 1208.744537][T20975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1208.753456][T20975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1208.765689][T20975] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3310'. [ 1208.779002][T13835] usb 4-1: USB disconnect, device number 8 [ 1209.724874][T21010] cgroup: fork rejected by pids controller in /syz3 [ 1210.006309][T13835] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1210.288171][T13835] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1210.321033][T13835] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1210.359529][T13835] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1210.414827][ T5922] usb 3-1: USB disconnect, device number 14 [ 1210.476543][T13835] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1210.520830][T13835] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1210.570164][T13835] usb 1-1: Product: syz [ 1210.576162][T13835] usb 1-1: Manufacturer: syz [ 1210.586309][T13835] usb 1-1: SerialNumber: syz [ 1210.612836][T13835] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 1210.722452][T13835] cdc_ncm 1-1:1.0: bind() failure [ 1210.752081][T21946] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3320'. [ 1210.814608][T21009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1210.824706][T21009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1210.827147][T12467] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1210.853385][T21009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3328'. [ 1210.868977][T12100] usb 1-1: USB disconnect, device number 20 [ 1211.067042][T12467] usb 2-1: Using ep0 maxpacket: 16 [ 1211.073642][T12467] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1211.089348][T12467] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1211.127861][T12467] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1211.137248][T12467] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1211.160145][T12467] usb 2-1: Product: syz [ 1211.171416][T12467] usb 2-1: Manufacturer: syz [ 1211.196435][T12467] usb 2-1: SerialNumber: syz [ 1211.212558][T12467] usb 2-1: config 0 descriptor?? [ 1211.224731][T12467] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1211.234856][T12467] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1211.523425][T12467] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1211.536060][T12467] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 1211.548506][T12467] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 1211.563308][T12467] em28xx 2-1:0.0: No AC97 audio processor [ 1211.580745][T12467] usb 2-1: USB disconnect, device number 23 [ 1211.590564][T12467] em28xx 2-1:0.0: Disconnecting em28xx [ 1211.602570][T12467] em28xx 2-1:0.0: Freeing device [ 1212.195723][T21980] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3322'. [ 1213.016874][T21993] loop2: detected capacity change from 0 to 7 [ 1213.050412][T21993] Dev loop2: unable to read RDB block 7 [ 1213.086571][T21993] loop2: unable to read partition table [ 1213.104895][T21995] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3327'. [ 1213.107439][T21993] loop2: partition table beyond EOD, truncated [ 1213.148693][T21993] loop_reread_partitions: partition scan of loop2 (žč¢«xü—ŸŃą– ) failed (rc=-5) [ 1213.181874][T21995] netlink: 'syz.4.3327': attribute type 6 has an invalid length. [ 1213.227282][T21995] netlink: 'syz.4.3327': attribute type 5 has an invalid length. [ 1213.247465][T21995] netlink: 'syz.4.3327': attribute type 4 has an invalid length. [ 1213.511818][ T5826] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 1213.637101][T12467] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1213.702271][ T5826] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1213.763809][ T5826] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1213.789061][ T5826] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1213.799171][ T5826] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1213.811582][T12467] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1213.849697][T12467] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1213.869160][T12467] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1213.899325][T12467] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1213.921233][T12467] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1213.945103][T12467] usb 2-1: Product: syz [ 1213.960691][T12467] usb 2-1: Manufacturer: syz [ 1213.986505][T12467] usb 2-1: SerialNumber: syz [ 1214.014757][T12467] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 1214.024671][T12467] cdc_ncm 2-1:1.0: bind() failure [ 1214.058662][ T5826] usb 4-1: GET_CAPABILITIES returned 0 [ 1214.082108][ T5826] usbtmc 4-1:16.0: can't read capabilities [ 1214.241813][T22010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1214.250658][T22010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1214.275021][T12467] usb 4-1: USB disconnect, device number 9 [ 1214.319178][T22010] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3332'. [ 1214.333816][ T5826] usb 2-1: USB disconnect, device number 24 [ 1215.494269][T22028] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3335'. [ 1216.413593][T22040] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3337'. [ 1217.280063][T22045] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3338'. [ 1217.677071][ T5826] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1217.813689][T22058] loop7: detected capacity change from 0 to 7 [ 1217.820993][ C1] blk_print_req_error: 26 callbacks suppressed [ 1217.821012][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1217.836351][ C1] buffer_io_error: 26 callbacks suppressed [ 1217.836363][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1217.851869][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1217.861099][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1217.899237][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1217.908507][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1217.916438][T22058] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1217.926468][T22058] Buffer I/O error on dev loop7, logical block 0, async page read [ 1217.936413][T22058] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1217.966321][ T5826] usb 4-1: device descriptor read/64, error -71 [ 1218.002252][T22058] Buffer I/O error on dev loop7, logical block 0, async page read [ 1218.041374][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 1218.041394][ T30] audit: type=1800 audit(1760018934.602:411): pid=22061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3343" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1218.044916][T22058] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1218.047681][ T30] audit: type=1800 audit(1760018934.602:412): pid=22061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3343" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1218.068091][T22058] Buffer I/O error on dev loop7, logical block 0, async page read [ 1218.122796][T22058] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1218.235082][T22058] Buffer I/O error on dev loop7, logical block 0, async page read [ 1218.247082][ T5826] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1218.351018][T22058] ldm_validate_partition_table(): Disk read failed. [ 1218.445044][T22058] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1218.477165][ T5826] usb 4-1: device descriptor read/64, error -71 [ 1218.536279][T22058] Buffer I/O error on dev loop7, logical block 0, async page read [ 1218.598299][ T5826] usb usb4-port1: attempt power cycle [ 1218.599781][T22058] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1218.617520][T22058] Buffer I/O error on dev loop7, logical block 0, async page read [ 1218.651680][T22058] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1218.683398][T22058] Buffer I/O error on dev loop7, logical block 0, async page read [ 1218.710975][T22058] Dev loop7: unable to read RDB block 0 [ 1218.731176][T22058] loop7: unable to read partition table [ 1218.747746][T22058] loop7: partition table beyond EOD, truncated [ 1218.756642][T22058] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 1218.769723][T13835] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1218.937277][ T5826] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1218.958949][ T5826] usb 4-1: device descriptor read/8, error -71 [ 1219.089081][T13835] usb 3-1: Using ep0 maxpacket: 8 [ 1219.100614][T13835] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1219.112720][T13835] usb 3-1: config 4 interface 0 has no altsetting 0 [ 1219.127256][T13835] usb 3-1: string descriptor 0 read error: -22 [ 1219.134424][T13835] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1219.148237][T13835] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1219.178625][T13835] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1219.247070][ T5826] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1219.613228][ T5826] usb 4-1: device descriptor read/8, error -71 [ 1219.737380][ T5826] usb usb4-port1: unable to enumerate USB device [ 1219.752513][T13835] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1219.946272][T22066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1220.045845][T22066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1220.116497][T13835] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1220.125901][T13835] usb 3-1: media controller created [ 1220.126442][T22078] trusted_key: encrypted_key: master key parameter 'ń' is invalid [ 1220.280040][T13835] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1220.726453][T22089] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 1221.125890][T13835] zl10353_read_register: readreg error (reg=127, ret==0) [ 1221.411275][T22104] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3350'. [ 1221.968019][T13835] usb 3-1: USB disconnect, device number 15 [ 1222.132625][T22116] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3352'. [ 1222.755500][T22119] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3353'. [ 1223.385942][T22129] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.3355'. [ 1223.430302][T22132] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3356'. [ 1223.627088][ T43] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1223.807077][ T5922] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1223.814692][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 1223.824130][ T43] usb 1-1: New USB device found, idVendor=0bc7, idProduct=0004, bcdDevice= e.74 [ 1223.833711][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1223.842161][ T43] usb 1-1: Product: syz [ 1223.846533][ T43] usb 1-1: Manufacturer: syz [ 1223.854651][ T43] usb 1-1: SerialNumber: syz [ 1223.872057][ T43] usb 1-1: config 0 descriptor?? [ 1223.883200][ T43] ati_remote 1-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints [ 1223.989210][ T5922] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1223.999859][ T5922] usb 3-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1224.015633][ T5922] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.99 [ 1224.036013][ T5922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1224.136251][ T5922] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1224.205716][ T5922] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1224.257084][ T5826] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1224.432127][ T5826] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1224.452558][ T5826] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1224.494522][ T5826] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1224.542787][ T5826] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1224.562984][ T5826] usb 4-1: SerialNumber: syz [ 1224.575406][T22149] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 1224.603132][T22149] batman_adv: batadv0: Adding interface: ip6gretap2 [ 1224.610872][T22149] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1224.637507][T22149] batman_adv: batadv0: Interface activated: ip6gretap2 [ 1224.790865][T22144] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3359'. [ 1225.336072][ T5826] usb 4-1: 0:2 : does not exist [ 1225.456387][ T5826] usb 4-1: USB disconnect, device number 14 [ 1225.553216][ T43] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1225.723521][ T43] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1225.741691][ T43] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1225.766871][T22163] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3364'. [ 1226.145343][ T43] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1226.188028][ T43] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1226.224449][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1226.308978][ T5922] usb 3-1: USB disconnect, device number 16 [ 1226.330269][ T43] usb 2-1: Product: syz [ 1226.343238][ T43] usb 2-1: Manufacturer: syz [ 1226.348405][ T43] usb 2-1: SerialNumber: syz [ 1226.394214][ T43] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 1226.419826][ T43] cdc_ncm 2-1:1.0: bind() failure [ 1226.652782][T22159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1226.652841][ T5826] usb 1-1: USB disconnect, device number 21 [ 1226.663655][T22159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1226.729326][T22159] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3363'. [ 1226.740713][ T5922] usb 2-1: USB disconnect, device number 25 [ 1228.381339][ T5826] IPVS: starting estimator thread 0... [ 1228.727331][T20239] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1228.772573][T22191] IPVS: using max 30 ests per chain, 72000 per kthread [ 1228.927048][T20239] usb 4-1: Using ep0 maxpacket: 32 [ 1228.957074][T20239] usb 4-1: New USB device found, idVendor=0bc7, idProduct=0004, bcdDevice= e.74 [ 1228.972529][T20239] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1229.013376][T20239] usb 4-1: Product: syz [ 1229.031339][T20239] usb 4-1: Manufacturer: syz [ 1229.084373][T20239] usb 4-1: SerialNumber: syz [ 1229.100885][T20239] usb 4-1: config 0 descriptor?? [ 1229.159145][T20239] ati_remote 4-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints [ 1229.377066][ T5826] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1229.403957][T22199] FAULT_INJECTION: forcing a failure. [ 1229.403957][T22199] name failslab, interval 1, probability 0, space 0, times 0 [ 1229.416806][T22199] CPU: 0 UID: 0 PID: 22199 Comm: syz.3.3371 Not tainted syzkaller #0 PREEMPT(full) [ 1229.416827][T22199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1229.416836][T22199] Call Trace: [ 1229.416844][T22199] [ 1229.416851][T22199] dump_stack_lvl+0x189/0x250 [ 1229.416872][T22199] ? __pfx____ratelimit+0x10/0x10 [ 1229.416890][T22199] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1229.416907][T22199] ? __pfx__printk+0x10/0x10 [ 1229.416928][T22199] ? __pfx___might_resched+0x10/0x10 [ 1229.416952][T22199] ? fs_reclaim_acquire+0x7d/0x100 [ 1229.416992][T22199] should_fail_ex+0x414/0x560 [ 1229.417023][T22199] should_failslab+0xa8/0x100 [ 1229.417042][T22199] __kmalloc_cache_noprof+0x6f/0x6f0 [ 1229.417065][T22199] ? __io_uring_add_tctx_node+0x149/0x4e0 [ 1229.417089][T22199] __io_uring_add_tctx_node+0x149/0x4e0 [ 1229.417110][T22199] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 1229.417128][T22199] ? __fget_files+0x2a/0x420 [ 1229.417144][T22199] ? __fget_files+0x2a/0x420 [ 1229.417160][T22199] __io_uring_add_tctx_node_from_submit+0x91/0x120 [ 1229.417182][T22199] __se_sys_io_uring_enter+0x24fc/0x2b20 [ 1229.417216][T22199] ? ksys_write+0x1cb/0x250 [ 1229.417241][T22199] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 1229.417259][T22199] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1229.417280][T22199] ? __pfx_vfs_write+0x10/0x10 [ 1229.417304][T22199] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1229.417327][T22199] ? __fget_files+0x3a0/0x420 [ 1229.417346][T22199] ? fput+0xa0/0xd0 [ 1229.417375][T22199] ? ksys_write+0x22a/0x250 [ 1229.417394][T22199] ? exc_page_fault+0x82/0x100 [ 1229.417413][T22199] ? __pfx_ksys_write+0x10/0x10 [ 1229.417436][T22199] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1229.417456][T22199] ? __ia32_sys_io_uring_enter+0x21/0xf0 [ 1229.417478][T22199] __do_fast_syscall_32+0xb6/0x2b0 [ 1229.417499][T22199] ? lockdep_hardirqs_on+0x9c/0x150 [ 1229.417520][T22199] do_fast_syscall_32+0x34/0x80 [ 1229.417540][T22199] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1229.417565][T22199] RIP: 0023:0xf7f26539 [ 1229.417579][T22199] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1229.417592][T22199] RSP: 002b:00000000f53dc55c EFLAGS: 00000206 ORIG_RAX: 00000000000001aa [ 1229.417609][T22199] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000002def [ 1229.417619][T22199] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1229.417628][T22199] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1229.417638][T22199] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1229.417646][T22199] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1229.417668][T22199] [ 1229.837058][ T5826] usb 1-1: Using ep0 maxpacket: 32 [ 1229.843804][ T5826] usb 1-1: config 0 interface 0 altsetting 140 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1229.855046][ T5826] usb 1-1: config 0 interface 0 altsetting 140 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1229.864980][ T5826] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1229.871688][ T5826] usb 1-1: New USB device found, idVendor=1e7d, idProduct=3264, bcdDevice= 0.00 [ 1229.880789][ T5826] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1229.892309][ T5826] usb 1-1: config 0 descriptor?? [ 1230.297432][T22212] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3378'. [ 1231.037148][ T5922] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1231.094978][ T5826] isku 0003:1E7D:3264.001E: hidraw0: USB HID v0.00 Device [HID 1e7d:3264] on usb-dummy_hcd.0-1/input0 [ 1231.138750][ T5826] usb 1-1: USB disconnect, device number 22 [ 1231.193225][T22214] fido_id[22214]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1231.211156][ T5922] usb 3-1: config 0 interface 0 altsetting 60 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 1231.231173][ T5922] usb 3-1: config 0 interface 0 altsetting 60 endpoint 0xD has invalid wMaxPacketSize 0 [ 1231.243959][ T5922] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1231.267654][ T5922] usb 3-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=ae.ad [ 1231.281603][ T5922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1231.292489][ T5922] usb 3-1: config 0 descriptor?? [ 1231.488957][ T5826] usb 4-1: USB disconnect, device number 15 [ 1231.572623][T22208] tipc: Started in network mode [ 1231.579741][T22208] tipc: Node identity 6eb371a89212, cluster identity 4711 [ 1231.599449][T22208] tipc: Enabled bearer , priority 0 [ 1231.608100][T13835] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1231.621257][T22208] tipc: Resetting bearer [ 1231.633950][T22207] tipc: Disabling bearer [ 1231.778179][T13835] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1231.807422][T13835] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1231.816395][T13835] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1231.862112][ T5922] usb 3-1: string descriptor 0 read error: -71 [ 1231.878069][ T5922] usb 3-1: ucan: probing device on interface #0 [ 1231.884370][ T5922] usb 3-1: ucan: invalid endpoint configuration [ 1231.909460][T13835] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1231.927354][ T5922] usb 3-1: ucan: probe failed; try to update the device firmware [ 1231.942768][T13835] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1231.967074][T13835] usb 2-1: Product: syz [ 1231.971294][T13835] usb 2-1: Manufacturer: syz [ 1231.975906][T13835] usb 2-1: SerialNumber: syz [ 1231.987271][ T5922] usb 3-1: USB disconnect, device number 17 [ 1232.066298][T13835] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 1232.085378][T13835] cdc_ncm 2-1:1.0: bind() failure [ 1232.412290][T22218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1232.421650][T22218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1232.465545][T22218] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3380'. [ 1232.582695][ T5826] usb 2-1: USB disconnect, device number 26 [ 1234.500523][T22264] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3390'. [ 1234.617523][T22266] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3391'. [ 1235.742184][T22276] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3395'. [ 1235.853487][T22276] netlink: 'syz.3.3395': attribute type 6 has an invalid length. [ 1235.916540][T22276] netlink: 'syz.3.3395': attribute type 5 has an invalid length. [ 1235.990011][T22276] netlink: 'syz.3.3395': attribute type 4 has an invalid length. [ 1236.162329][ T5922] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1236.297147][T13835] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1236.448667][T22292] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3399'. [ 1236.520687][T13835] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1236.531364][T13835] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1236.540887][T13835] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1236.567139][ T5826] usb 1-1: new low-speed USB device number 23 using dummy_hcd [ 1236.571961][T13835] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1236.584892][T13835] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1236.593212][T13835] usb 3-1: Product: syz [ 1236.599004][T13835] usb 3-1: Manufacturer: syz [ 1236.604067][T13835] usb 3-1: SerialNumber: syz [ 1236.701605][T13835] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 1236.730929][ T5826] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1236.746687][ T5826] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1236.749411][T13835] cdc_ncm 3-1:1.0: bind() failure [ 1236.781725][ T5826] usb 1-1: string descriptor 0 read error: -22 [ 1236.793279][ T5826] usb 1-1: New USB device found, idVendor=0b48, idProduct=1009, bcdDevice=b2.43 [ 1236.805896][ T5826] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1236.833098][ T5826] ttusb_dec_send_command: command bulk message failed: error -22 [ 1236.851255][ T5826] ttusb-dec 1-1:8.0: probe with driver ttusb-dec failed with error -22 [ 1236.904396][T22283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1236.914578][T22283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1236.929885][T22283] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3398'. [ 1236.946557][T13835] usb 3-1: USB disconnect, device number 18 [ 1237.165003][T13835] usb 1-1: USB disconnect, device number 23 [ 1237.313253][T22296] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3401'. [ 1237.352715][ T5922] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 1237.517270][ T5922] usb 4-1: device descriptor read/64, error -71 [ 1237.627261][ T5922] usb usb4-port1: attempt power cycle [ 1237.892026][T22307] FAULT_INJECTION: forcing a failure. [ 1237.892026][T22307] name failslab, interval 1, probability 0, space 0, times 0 [ 1237.906593][T22307] CPU: 1 UID: 0 PID: 22307 Comm: syz.2.3405 Not tainted syzkaller #0 PREEMPT(full) [ 1237.906614][T22307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1237.906624][T22307] Call Trace: [ 1237.906631][T22307] [ 1237.906638][T22307] dump_stack_lvl+0x189/0x250 [ 1237.906659][T22307] ? __pfx____ratelimit+0x10/0x10 [ 1237.906677][T22307] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1237.906694][T22307] ? __pfx__printk+0x10/0x10 [ 1237.906712][T22307] ? __pfx___might_resched+0x10/0x10 [ 1237.906729][T22307] ? fs_reclaim_acquire+0x7d/0x100 [ 1237.906756][T22307] should_fail_ex+0x414/0x560 [ 1237.906778][T22307] should_failslab+0xa8/0x100 [ 1237.906801][T22307] __kmalloc_cache_noprof+0x6f/0x6f0 [ 1237.906823][T22307] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1237.906845][T22307] ? genl_start+0x1c9/0x6c0 [ 1237.906880][T22307] genl_start+0x1c9/0x6c0 [ 1237.906898][T22307] ? netlink_lookup+0x30/0x200 [ 1237.906916][T22307] __netlink_dump_start+0x466/0x7e0 [ 1237.906946][T22307] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 1237.906978][T22307] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 1237.907003][T22307] ? genl_get_cmd+0x67f/0x910 [ 1237.907032][T22307] ? __pfx___mutex_lock+0x10/0x10 [ 1237.907058][T22307] ? __pfx_genl_start+0x10/0x10 [ 1237.907081][T22307] ? __pfx_genl_dumpit+0x10/0x10 [ 1237.907105][T22307] ? __pfx_genl_done+0x10/0x10 [ 1237.907146][T22307] genl_rcv_msg+0x5da/0x790 [ 1237.907179][T22307] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1237.907205][T22307] ? __pfx_smc_nl_get_fback_stats+0x10/0x10 [ 1237.907229][T22307] ? __asan_memcpy+0x40/0x70 [ 1237.907255][T22307] ? __pfx_ref_tracker_free+0x10/0x10 [ 1237.907289][T22307] netlink_rcv_skb+0x208/0x470 [ 1237.907308][T22307] ? __lock_acquire+0xab9/0xd20 [ 1237.907329][T22307] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1237.907358][T22307] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1237.907398][T22307] ? down_read+0x1ad/0x2e0 [ 1237.907428][T22307] genl_rcv+0x28/0x40 [ 1237.907453][T22307] netlink_unicast+0x82f/0x9e0 [ 1237.907493][T22307] ? __pfx_netlink_unicast+0x10/0x10 [ 1237.907526][T22307] ? netlink_sendmsg+0x642/0xb30 [ 1237.907546][T22307] ? skb_put+0x11b/0x210 [ 1237.907572][T22307] netlink_sendmsg+0x805/0xb30 [ 1237.907604][T22307] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1237.907628][T22307] ? __import_iovec+0x5d4/0x7f0 [ 1237.907646][T22307] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1237.907676][T22307] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1237.907696][T22307] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1237.907719][T22307] __sock_sendmsg+0x219/0x270 [ 1237.907751][T22307] ____sys_sendmsg+0x505/0x830 [ 1237.907781][T22307] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1237.907829][T22307] ___sys_sendmsg+0x21f/0x2a0 [ 1237.907856][T22307] ? __pfx____sys_sendmsg+0x10/0x10 [ 1237.907917][T22307] ? __fget_files+0x2a/0x420 [ 1237.907934][T22307] ? __fget_files+0x3a0/0x420 [ 1237.907964][T22307] __sys_sendmsg+0x164/0x220 [ 1237.907990][T22307] ? __pfx___sys_sendmsg+0x10/0x10 [ 1237.908024][T22307] ? __pfx_ksys_write+0x10/0x10 [ 1237.908056][T22307] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1237.908084][T22307] ? lockdep_hardirqs_on+0x9c/0x150 [ 1237.908112][T22307] __do_fast_syscall_32+0xb6/0x2b0 [ 1237.908139][T22307] ? lockdep_hardirqs_on+0x9c/0x150 [ 1237.908167][T22307] do_fast_syscall_32+0x34/0x80 [ 1237.908194][T22307] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1237.908218][T22307] RIP: 0023:0xf7f03539 [ 1237.908236][T22307] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1237.908254][T22307] RSP: 002b:00000000f53f655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1237.908276][T22307] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 1237.908290][T22307] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1237.908303][T22307] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1237.908332][T22307] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1237.908345][T22307] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1237.908397][T22307] [ 1238.407186][ T5922] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 1238.427636][ T5922] usb 4-1: device descriptor read/8, error -71 [ 1238.437693][T22310] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3404'. [ 1238.587026][T20239] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1238.667049][ T5922] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 1238.687692][ T5922] usb 4-1: device descriptor read/8, error -71 [ 1238.721538][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.729710][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.757100][T20239] usb 3-1: Using ep0 maxpacket: 8 [ 1238.763902][T20239] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 1238.772585][T20239] usb 3-1: config 0 has no interface number 0 [ 1238.797653][ T5922] usb usb4-port1: unable to enumerate USB device [ 1238.839345][T20239] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1238.849030][T20239] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1238.864863][T20239] usb 3-1: Product: syz [ 1238.870210][T20239] usb 3-1: Manufacturer: syz [ 1238.875063][T20239] usb 3-1: SerialNumber: syz [ 1238.884739][T20239] usb 3-1: config 0 descriptor?? [ 1239.147515][T20239] uvcvideo 3-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1239.161229][T20239] uvcvideo 3-1:0.31: Entity type for entity Output 6 was not initialized! [ 1239.173570][T20239] uvcvideo 3-1:0.31: Failed to create links for entity 5 [ 1239.180978][T20239] uvcvideo 3-1:0.31: Failed to register entities (-22). [ 1239.221786][T20239] usb 3-1: USB disconnect, device number 19 [ 1239.370849][T22318] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3408'. [ 1239.532839][T22324] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3410'. [ 1239.542213][T22324] netlink: 'syz.0.3410': attribute type 6 has an invalid length. [ 1239.550713][T22324] netlink: 'syz.0.3410': attribute type 5 has an invalid length. [ 1239.558965][T22324] netlink: 'syz.0.3410': attribute type 4 has an invalid length. [ 1240.287159][ T43] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1240.434784][T22343] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3414'. [ 1240.448566][ T43] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1240.458871][ T43] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1240.468081][ T43] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1240.484944][ T43] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1240.504374][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1240.524564][ T43] usb 3-1: Product: syz [ 1240.531663][ T43] usb 3-1: Manufacturer: syz [ 1240.536309][ T43] usb 3-1: SerialNumber: syz [ 1240.543017][T22335] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3413'. [ 1240.584347][ T43] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 1240.593776][ T43] cdc_ncm 3-1:1.0: bind() failure [ 1240.937588][T22334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1240.985197][T22334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1241.019934][T22334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3412'. [ 1241.090438][ T43] usb 3-1: USB disconnect, device number 20 [ 1241.178118][ T5922] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1241.349117][ T5922] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 1241.368526][ T5922] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1241.452953][ T5922] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1241.471495][ T5922] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1241.506612][T22352] loop4: detected capacity change from 0 to 524255232 [ 1241.557558][ T5922] usb 1-1: Manufacturer: syz [ 1241.582100][ T5922] usb 1-1: config 0 descriptor?? [ 1241.620428][ T5922] igorplugusb 1-1:0.0: incorrect number of endpoints [ 1241.884110][T22347] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3416'. [ 1241.948777][T22347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1241.987547][T22347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1242.414429][T22361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1242.728099][T22364] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3419'. [ 1242.780783][T22361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1243.895201][T22386] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3425'. [ 1243.963766][T22386] netlink: 'syz.3.3425': attribute type 6 has an invalid length. [ 1243.996059][T22386] netlink: 'syz.3.3425': attribute type 5 has an invalid length. [ 1244.007057][ T5922] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1244.028528][T22386] netlink: 'syz.3.3425': attribute type 4 has an invalid length. [ 1244.071700][ T24] usb 1-1: USB disconnect, device number 25 [ 1244.177033][ T5922] usb 3-1: Using ep0 maxpacket: 8 [ 1244.182557][T22391] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3427'. [ 1244.198616][T22391] FAULT_INJECTION: forcing a failure. [ 1244.198616][T22391] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1244.212914][ T5922] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 1244.222791][ T5922] usb 3-1: config 0 has no interface number 0 [ 1244.232379][T22391] CPU: 1 UID: 0 PID: 22391 Comm: syz.0.3427 Not tainted syzkaller #0 PREEMPT(full) [ 1244.232403][T22391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1244.232416][T22391] Call Trace: [ 1244.232425][T22391] [ 1244.232433][T22391] dump_stack_lvl+0x189/0x250 [ 1244.232459][T22391] ? __pfx____ratelimit+0x10/0x10 [ 1244.232487][T22391] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1244.232508][T22391] ? __pfx__printk+0x10/0x10 [ 1244.232530][T22391] ? fs_reclaim_acquire+0x7d/0x100 [ 1244.232569][T22391] should_fail_ex+0x414/0x560 [ 1244.232597][T22391] prepare_alloc_pages+0x213/0x610 [ 1244.232634][T22391] __alloc_frozen_pages_noprof+0x123/0x370 [ 1244.232656][T22391] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1244.232685][T22391] ? policy_nodemask+0x27c/0x720 [ 1244.232714][T22391] ? __pfx___console_unlock+0x10/0x10 [ 1244.232742][T22391] alloc_pages_mpol+0x232/0x4a0 [ 1244.232778][T22391] ___kmalloc_large_node+0x5f/0x1b0 [ 1244.232809][T22391] __kmalloc_large_node_noprof+0x18/0x90 [ 1244.232838][T22391] __kmalloc_noprof+0x4bd/0x7f0 [ 1244.232863][T22391] ? wiphy_new_nm+0x625/0x19e0 [ 1244.232892][T22391] ? __pfx_mac80211_hwsim_remove_chanctx+0x10/0x10 [ 1244.232911][T22391] wiphy_new_nm+0x625/0x19e0 [ 1244.232932][T22391] ? ieee80211_alloc_hw_nm+0x3da/0x1f60 [ 1244.232966][T22391] ? __pfx_mac80211_hwsim_remove_chanctx+0x10/0x10 [ 1244.232983][T22391] ieee80211_alloc_hw_nm+0x3f3/0x1f60 [ 1244.233014][T22391] ? __pfx_mac80211_hwsim_add_chanctx+0x10/0x10 [ 1244.233040][T22391] mac80211_hwsim_new_radio+0x1eb/0x5220 [ 1244.233073][T22391] ? __pfx____ratelimit+0x10/0x10 [ 1244.233097][T22391] ? __pfx__printk+0x10/0x10 [ 1244.233120][T22391] ? __sock_sendmsg+0x219/0x270 [ 1244.233153][T22391] ? rcu_is_watching+0x15/0xb0 [ 1244.233176][T22391] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1244.233201][T22391] ? __nla_validate_parse+0x251c/0x2d40 [ 1244.233227][T22391] ? __sys_sendmsg+0x164/0x220 [ 1244.233257][T22391] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 1244.233286][T22391] ? __pfx___nla_validate_parse+0x10/0x10 [ 1244.233325][T22391] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1244.233354][T22391] ? rcu_is_watching+0x15/0xb0 [ 1244.233379][T22391] ? __nla_parse+0x40/0x60 [ 1244.233409][T22391] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1244.233444][T22391] genl_family_rcv_msg_doit+0x215/0x300 [ 1244.233477][T22391] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1244.233516][T22391] ? bpf_lsm_capable+0x9/0x20 [ 1244.233539][T22391] ? security_capable+0x7e/0x2e0 [ 1244.233569][T22391] genl_rcv_msg+0x60e/0x790 [ 1244.233601][T22391] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1244.233626][T22391] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1244.233650][T22391] ? __asan_memcpy+0x40/0x70 [ 1244.233691][T22391] ? __pfx_ref_tracker_free+0x10/0x10 [ 1244.233726][T22391] netlink_rcv_skb+0x208/0x470 [ 1244.233745][T22391] ? __lock_acquire+0xab9/0xd20 [ 1244.233765][T22391] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1244.233792][T22391] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1244.233831][T22391] ? down_read+0x1ad/0x2e0 [ 1244.233862][T22391] genl_rcv+0x28/0x40 [ 1244.233886][T22391] netlink_unicast+0x82f/0x9e0 [ 1244.233926][T22391] ? __pfx_netlink_unicast+0x10/0x10 [ 1244.233959][T22391] ? netlink_sendmsg+0x642/0xb30 [ 1244.233977][T22391] ? skb_put+0x11b/0x210 [ 1244.234003][T22391] netlink_sendmsg+0x805/0xb30 [ 1244.234035][T22391] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1244.234060][T22391] ? __import_iovec+0x5d4/0x7f0 [ 1244.234078][T22391] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1244.234109][T22391] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1244.234138][T22391] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1244.234161][T22391] __sock_sendmsg+0x219/0x270 [ 1244.234195][T22391] ____sys_sendmsg+0x505/0x830 [ 1244.234226][T22391] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1244.234268][T22391] ___sys_sendmsg+0x21f/0x2a0 [ 1244.234296][T22391] ? __pfx____sys_sendmsg+0x10/0x10 [ 1244.234358][T22391] ? __fget_files+0x2a/0x420 [ 1244.234376][T22391] ? __fget_files+0x3a0/0x420 [ 1244.234406][T22391] __sys_sendmsg+0x164/0x220 [ 1244.234434][T22391] ? __pfx___sys_sendmsg+0x10/0x10 [ 1244.234469][T22391] ? __pfx_ksys_write+0x10/0x10 [ 1244.234500][T22391] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1244.234529][T22391] ? lockdep_hardirqs_on+0x9c/0x150 [ 1244.234557][T22391] __do_fast_syscall_32+0xb6/0x2b0 [ 1244.234585][T22391] ? lockdep_hardirqs_on+0x9c/0x150 [ 1244.234615][T22391] do_fast_syscall_32+0x34/0x80 [ 1244.234643][T22391] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1244.234668][T22391] RIP: 0023:0xf7ff1539 [ 1244.234687][T22391] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1244.234706][T22391] RSP: 002b:00000000f54e655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1244.234729][T22391] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 1244.234744][T22391] RDX: 0000000000000084 RSI: 0000000000000000 RDI: 0000000000000000 [ 1244.234756][T22391] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1244.234769][T22391] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1244.234782][T22391] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1244.234814][T22391] [ 1244.782280][ T5922] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1244.791729][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1244.802972][ T5922] usb 3-1: Product: syz [ 1244.807234][ T5922] usb 3-1: Manufacturer: syz [ 1244.811847][ T5922] usb 3-1: SerialNumber: syz [ 1244.819860][ T5922] usb 3-1: config 0 descriptor?? [ 1244.837264][T22397] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3428'. [ 1244.888478][ T30] audit: type=1326 audit(1760018961.452:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22398 comm="syz.0.3429" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 1244.920759][ T30] audit: type=1326 audit(1760018961.482:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22398 comm="syz.0.3429" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 1244.979585][ T30] audit: type=1326 audit(1760018961.482:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22398 comm="syz.0.3429" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 1245.062710][ T5922] uvcvideo 3-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1245.070514][ T5922] uvcvideo 3-1:0.31: Entity type for entity Output 6 was not initialized! [ 1245.079289][ T5922] uvcvideo 3-1:0.31: Failed to create links for entity 5 [ 1245.086359][ T5922] uvcvideo 3-1:0.31: Failed to register entities (-22). [ 1245.100738][ T5922] usb 3-1: USB disconnect, device number 21 [ 1245.110982][ T30] audit: type=1326 audit(1760018961.502:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22398 comm="syz.0.3429" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 1245.136495][ T30] audit: type=1326 audit(1760018961.502:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22398 comm="syz.0.3429" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 1245.161253][ T30] audit: type=1326 audit(1760018961.502:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22398 comm="syz.0.3429" exe="/root/syz-executor" sig=0 arch=40000003 syscall=225 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 1245.183452][ T30] audit: type=1326 audit(1760018961.502:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22398 comm="syz.0.3429" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 1245.205954][ T30] audit: type=1326 audit(1760018961.502:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22398 comm="syz.0.3429" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 1245.547065][T22418] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3435'. [ 1246.413034][ T24] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1246.570482][ T24] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 1246.579025][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1246.615509][ T24] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1246.624662][ T24] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1246.648854][ T24] usb 3-1: Manufacturer: syz [ 1246.678247][ T24] usb 3-1: config 0 descriptor?? [ 1246.698160][ T24] igorplugusb 3-1:0.0: incorrect number of endpoints [ 1246.919517][T22425] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3437'. [ 1246.930032][T22425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1246.939266][T22425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1247.027343][T22436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1247.166259][T22436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1247.322047][ T5826] hid_parser_main: 5 callbacks suppressed [ 1247.322063][ T5826] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 1247.374922][ T5826] hid-generic 0000:0000:0000.001F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1248.457024][ T5826] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1248.938991][ T5826] usb 1-1: Using ep0 maxpacket: 16 [ 1248.959258][ T5826] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1248.970806][ T5826] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1249.003933][ T5826] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1249.030564][ T5826] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1249.037541][T22451] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3443'. [ 1249.068995][T22451] netlink: 'syz.1.3443': attribute type 6 has an invalid length. [ 1249.078153][T22451] netlink: 'syz.1.3443': attribute type 5 has an invalid length. [ 1249.081301][ T5826] usb 1-1: config 0 descriptor?? [ 1249.094283][T22451] netlink: 'syz.1.3443': attribute type 4 has an invalid length. [ 1249.185790][T20239] usb 3-1: USB disconnect, device number 22 [ 1249.331927][T22459] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3444'. [ 1249.412305][T12100] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1250.252028][T22462] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3445'. [ 1251.151115][ T5826] usb 1-1: language id specifier not provided by device, defaulting to English [ 1251.367075][ T5922] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 1251.498484][ T5922] usb 4-1: device descriptor read/64, error -71 [ 1251.615351][T22475] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3449'. [ 1251.737505][ T5922] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 1251.939782][ T5922] usb 4-1: device descriptor read/64, error -71 [ 1251.973793][ T5826] usb 1-1: Max retries (5) exceeded reading string descriptor 200 [ 1251.990175][ T5826] letsketch 0003:6161:4D15.0020: probe with driver letsketch failed with error -71 [ 1252.050973][ T5826] usb 1-1: USB disconnect, device number 26 [ 1252.058057][ T5922] usb usb4-port1: attempt power cycle [ 1252.407084][ T5922] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 1252.437826][ T5922] usb 4-1: device descriptor read/8, error -71 [ 1252.697059][ T5922] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 1252.797963][ T5922] usb 4-1: device descriptor read/8, error -71 [ 1252.863127][T22485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3452'. [ 1252.931848][ T5922] usb usb4-port1: unable to enumerate USB device [ 1253.117071][ T24] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1253.518697][ T24] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 1253.618337][ T24] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1253.946726][ T24] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1253.964198][ T24] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1254.007433][ T24] usb 2-1: Manufacturer: syz [ 1254.068745][ T24] usb 2-1: config 0 descriptor?? [ 1254.082624][ T24] igorplugusb 2-1:0.0: incorrect number of endpoints [ 1254.409265][T22504] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3455'. [ 1254.439852][T22496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1254.457612][T22496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1254.583119][T22503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1254.640165][T22503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1254.883068][T22513] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3458'. [ 1255.207949][T22516] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3459'. [ 1255.233267][T22516] netlink: 'syz.0.3459': attribute type 6 has an invalid length. [ 1255.252272][T22516] netlink: 'syz.0.3459': attribute type 5 has an invalid length. [ 1255.529308][T22516] netlink: 'syz.0.3459': attribute type 4 has an invalid length. [ 1256.056605][ T5826] usb 2-1: USB disconnect, device number 28 [ 1256.287885][T22534] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3463'. [ 1256.652320][T22541] fuse: Unknown parameter 'fe' [ 1257.232828][T22546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3469'. [ 1258.127406][ T5826] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1258.304801][ T5826] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 1258.338235][ T5826] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1258.487640][T22567] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3475'. [ 1258.497052][T22567] netlink: 'syz.2.3475': attribute type 6 has an invalid length. [ 1258.509917][T22567] netlink: 'syz.2.3475': attribute type 5 has an invalid length. [ 1258.514149][ T5826] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1258.518281][T22567] netlink: 'syz.2.3475': attribute type 4 has an invalid length. [ 1258.554928][ T5826] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1258.584076][ T5826] usb 1-1: Manufacturer: syz [ 1258.647830][ T5826] usb 1-1: config 0 descriptor?? [ 1258.658641][ T5826] igorplugusb 1-1:0.0: incorrect number of endpoints [ 1258.865002][T22565] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3474'. [ 1258.879098][T22565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1258.889745][T22565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1258.955991][T22570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1258.970681][T22570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1259.388838][T22578] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3476'. [ 1260.033575][T22588] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3479'. [ 1260.653505][T11622] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 1260.890804][T20239] usb 1-1: USB disconnect, device number 28 [ 1260.921393][T11622] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1260.956904][T11622] usb 4-1: not running at top speed; connect to a high speed hub [ 1260.992096][T11622] usb 4-1: config 219 has an invalid interface number: 147 but max is 1 [ 1261.005833][T11622] usb 4-1: config 219 has an invalid interface number: 147 but max is 1 [ 1261.015517][T11622] usb 4-1: config 219 has 1 interface, different from the descriptor's value: 2 [ 1261.027762][T11622] usb 4-1: config 219 has no interface number 0 [ 1261.050495][T11622] usb 4-1: config 219 interface 147 has no altsetting 0 [ 1261.099994][T11622] usb 4-1: config 219 interface 147 has no altsetting 1 [ 1261.137776][T11622] usb 4-1: New USB device found, idVendor=07b0, idProduct=0006, bcdDevice=9e.d4 [ 1261.148391][T11622] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1261.162928][T22596] syzkaller0: entered promiscuous mode [ 1261.183770][T22597] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3480'. [ 1261.193063][T11622] usb 4-1: Product: syz [ 1261.200557][T11622] usb 4-1: Manufacturer: syz [ 1261.207326][T11622] usb 4-1: SerialNumber: syz [ 1261.213885][T22596] syzkaller0: entered allmulticast mode [ 1261.454414][T22580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1261.620501][T22580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1261.996373][T22580] netlink: 666 bytes leftover after parsing attributes in process `syz.3.3478'. [ 1262.339393][T11622] HFC-S_USB 4-1:219.147: probe with driver HFC-S_USB failed with error -5 [ 1262.390521][T11622] usb 4-1: USB disconnect, device number 25 [ 1262.566792][T22621] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3495'. [ 1264.757567][T22640] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3489'. [ 1264.789881][T22640] netlink: 'syz.0.3489': attribute type 6 has an invalid length. [ 1264.818735][T22640] netlink: 'syz.0.3489': attribute type 5 has an invalid length. [ 1264.887087][T22640] netlink: 'syz.0.3489': attribute type 4 has an invalid length. [ 1264.917209][T11622] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1265.106249][T11622] usb 3-1: config 0 has an invalid descriptor of length 146, skipping remainder of the config [ 1265.129575][T11622] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1265.149967][T11622] usb 3-1: New USB device found, idVendor=2d7b, idProduct=22c4, bcdDevice=ca.8b [ 1265.159538][T11622] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=64 [ 1265.187275][T11622] usb 3-1: SerialNumber: syz [ 1265.200199][T11622] usb 3-1: config 0 descriptor?? [ 1265.889524][ T5826] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1266.118178][ T5826] usb 4-1: config 0 has an invalid descriptor of length 146, skipping remainder of the config [ 1266.220674][ T5826] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1266.299176][ T5826] usb 4-1: New USB device found, idVendor=2d7b, idProduct=22c4, bcdDevice=ca.8b [ 1266.309371][ T5826] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=64 [ 1266.327337][ T5826] usb 4-1: SerialNumber: syz [ 1266.369139][T22661] fuse: Unknown parameter 'ęd90x0000000000000009' [ 1266.445222][ T5826] usb 4-1: config 0 descriptor?? [ 1266.639597][T22665] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3494'. [ 1268.032662][T22672] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3496'. [ 1268.406636][T22676] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3497'. [ 1268.584256][T22680] sctp: [Deprecated]: syz.1.3497 (pid 22680) Use of int in maxseg socket option. [ 1268.584256][T22680] Use struct sctp_assoc_value instead [ 1268.825100][ T43] usb 3-1: USB disconnect, device number 24 [ 1269.256098][T22695] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3500'. [ 1270.328873][T22698] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1270.459070][ T43] usb 4-1: USB disconnect, device number 26 [ 1271.157098][T22714] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3504'. [ 1272.342634][ T5826] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1272.763138][ T5826] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1272.810001][T22728] fuse: Unknown parameter 'ęd90x0000000000000009' [ 1272.816636][ T5826] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1272.857627][ T5826] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1272.903209][ T5826] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1272.922416][ T5826] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1272.932113][ T5826] usb 4-1: Product: syz [ 1272.936377][ T5826] usb 4-1: Manufacturer: syz [ 1272.943136][ T5826] usb 4-1: SerialNumber: syz [ 1273.120087][ T5826] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 1273.148020][ T5826] cdc_ncm 4-1:1.0: bind() failure [ 1273.510395][T22722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1273.521042][T22722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1273.559689][T22722] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3505'. [ 1273.572201][ T43] usb 4-1: USB disconnect, device number 27 [ 1274.187022][T22745] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3511'. [ 1274.507012][ T24] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1274.960147][ T24] usb 1-1: config 0 has an invalid descriptor of length 146, skipping remainder of the config [ 1274.993460][ T24] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1275.075580][ T24] usb 1-1: New USB device found, idVendor=2d7b, idProduct=22c4, bcdDevice=ca.8b [ 1275.229337][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=64 [ 1275.258021][ T24] usb 1-1: SerialNumber: syz [ 1275.286526][ T24] usb 1-1: config 0 descriptor?? [ 1275.478030][T22754] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3512'. [ 1276.583807][T22763] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3514'. [ 1276.667707][T22765] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3513'. [ 1279.083535][T22785] veth1_macvtap: left promiscuous mode [ 1279.089161][T22785] macsec0: entered promiscuous mode [ 1279.264242][ T43] IPVS: starting estimator thread 0... [ 1279.437519][T22787] IPVS: using max 27 ests per chain, 64800 per kthread [ 1279.686639][ T43] usb 1-1: USB disconnect, device number 30 [ 1280.423358][T22800] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3531'. [ 1281.496469][ T43] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1281.730156][ T43] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1281.740573][ T43] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1281.760233][ T43] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1281.796633][ T43] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1281.824413][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1281.853630][ T43] usb 4-1: Product: syz [ 1281.857996][ T43] usb 4-1: Manufacturer: syz [ 1281.862612][ T43] usb 4-1: SerialNumber: syz [ 1281.908177][ T43] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 1281.937072][ T43] cdc_ncm 4-1:1.0: bind() failure [ 1282.077099][T11622] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1282.101256][T22810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1282.113849][T22815] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3536'. [ 1282.124974][T22815] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3536'. [ 1282.135368][T22815] netlink: 'syz.0.3536': attribute type 6 has an invalid length. [ 1282.135752][T22810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1282.145291][T22815] netlink: 'syz.0.3536': attribute type 5 has an invalid length. [ 1282.161831][T22815] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3536'. [ 1282.237565][T11622] usb 2-1: Using ep0 maxpacket: 16 [ 1282.262688][T11622] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1282.283617][T11622] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1282.298314][T22810] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3523'. [ 1282.329622][ T5826] usb 4-1: USB disconnect, device number 28 [ 1282.338829][T11622] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1282.359476][T11622] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1282.376111][T11622] usb 2-1: config 0 descriptor?? [ 1282.400546][T11622] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1282.427723][ T43] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1282.717031][ T24] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1282.867869][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 1282.875563][ T24] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1282.885077][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1282.908099][ T24] usb 3-1: config 0 descriptor?? [ 1282.972975][T22826] random: crng reseeded on system resumption [ 1283.025837][T22829] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3526'. [ 1283.764124][ T24] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1283.927675][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1283.997754][ T24] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1284.010737][ T24] usb 3-1: media controller created [ 1284.116676][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1284.639095][T22834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3528'. [ 1285.583463][ T24] az6027: usb out operation failed. (-71) [ 1285.584419][T22816] delete_channel: no stack [ 1285.657422][ T24] az6027: usb out operation failed. (-71) [ 1285.658724][ T5826] usb 2-1: USB disconnect, device number 29 [ 1285.663193][ T24] stb0899_attach: Driver disabled by Kconfig [ 1285.663208][ T24] az6027: no front-end attached [ 1285.663208][ T24] [ 1285.719310][ T24] az6027: usb out operation failed. (-71) [ 1285.725175][ T24] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1285.849144][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input87 [ 1285.957338][ T24] dvb-usb: schedule remote query interval to 400 msecs. [ 1285.999162][ T24] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1286.137077][ T24] usb 3-1: USB disconnect, device number 25 [ 1286.619389][T22856] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3530'. [ 1286.688690][ T24] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1287.107999][ T24] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1287.899825][ T24] usb 3-1: config 0 has an invalid descriptor of length 146, skipping remainder of the config [ 1287.911180][ T24] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1287.922080][ T24] usb 3-1: New USB device found, idVendor=2d7b, idProduct=22c4, bcdDevice=ca.8b [ 1287.933420][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=64 [ 1287.942573][ T24] usb 3-1: SerialNumber: syz [ 1288.132481][ T24] usb 3-1: config 0 descriptor?? [ 1288.908329][ T43] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1289.181462][ T43] usb 4-1: config 0 has no interfaces? [ 1289.192803][ T43] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1289.202155][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1289.210222][ T43] usb 4-1: Product: syz [ 1289.214471][ T43] usb 4-1: Manufacturer: syz [ 1289.227041][ T43] usb 4-1: SerialNumber: syz [ 1289.255543][ T43] usb 4-1: config 0 descriptor?? [ 1289.677071][ T43] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1289.691269][ C1] raw-gadget.3 gadget.1: ignoring, device is not running [ 1289.691369][T22871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1289.732688][T22871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1289.929800][ T43] usb 2-1: device descriptor read/64, error -32 [ 1290.628402][T22886] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3541'. [ 1290.828333][ T5922] usb 3-1: USB disconnect, device number 26 [ 1291.087132][ T43] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1291.257369][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 1291.279419][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1291.291904][ T43] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1291.324221][ T43] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1291.336706][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1291.358288][ T43] usb 2-1: config 0 descriptor?? [ 1291.370088][ T43] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1291.782506][T20239] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1292.026391][T22904] random: crng reseeded on system resumption [ 1292.041827][T20239] usb 3-1: Using ep0 maxpacket: 32 [ 1292.076153][ T5826] usb 4-1: USB disconnect, device number 29 [ 1292.090030][T20239] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1292.126307][T20239] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1292.170553][T20239] usb 3-1: config 0 descriptor?? [ 1292.576330][T20239] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1292.603551][T20239] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1292.614833][T20239] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1292.622116][T20239] usb 3-1: media controller created [ 1292.645584][T20239] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1293.697040][ T24] usb 2-1: USB disconnect, device number 31 [ 1293.935778][T22918] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3548'. [ 1294.170985][ T5826] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1294.447915][ T5826] usb 1-1: Using ep0 maxpacket: 16 [ 1294.456850][ T5826] usb 1-1: config 254 has an invalid interface number: 235 but max is 0 [ 1294.472733][ T5826] usb 1-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config [ 1294.522059][T22898] delete_channel: no stack [ 1294.526609][T20239] az6027: usb out operation failed. (-71) [ 1294.536450][T20239] az6027: usb out operation failed. (-71) [ 1294.616618][T20239] stb0899_attach: Driver disabled by Kconfig [ 1294.641095][ T5826] usb 1-1: config 254 has no interface number 0 [ 1294.657045][T20239] az6027: no front-end attached [ 1294.657045][T20239] [ 1294.693564][ T5826] usb 1-1: config 254 interface 235 altsetting 2 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 1294.712370][T20239] az6027: usb out operation failed. (-71) [ 1294.746576][T20239] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1294.774572][ T5826] usb 1-1: config 254 interface 235 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1294.808192][T20239] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input88 [ 1295.019353][ T5826] usb 1-1: config 254 interface 235 has no altsetting 0 [ 1295.215163][ T5826] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 1295.302612][ T5826] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1295.374168][T20239] dvb-usb: schedule remote query interval to 400 msecs. [ 1295.382537][ T5826] usb 1-1: Product: syz [ 1295.386752][ T5826] usb 1-1: Manufacturer: syz [ 1295.403439][T20239] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1295.421844][ T5826] usb 1-1: SerialNumber: syz [ 1295.444177][T20239] usb 3-1: USB disconnect, device number 27 [ 1295.516831][T20239] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1295.663833][ T5826] usbtest 1-1:254.235: Linux gadget zero [ 1295.680169][ T5826] usbtest 1-1:254.235: high-speed {control in/out iso-out} tests (+alt) [ 1296.395024][T22938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3553'. [ 1296.476563][T22949] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3555'. [ 1296.957181][ T5826] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1297.036111][T11622] usb 1-1: USB disconnect, device number 32 [ 1297.261873][ T5826] usb 2-1: config 0 has an invalid descriptor of length 146, skipping remainder of the config [ 1297.275579][ T5826] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1297.651513][ T5826] usb 2-1: New USB device found, idVendor=2d7b, idProduct=22c4, bcdDevice=ca.8b [ 1297.661296][ T5826] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=64 [ 1297.671432][ T5826] usb 2-1: SerialNumber: syz [ 1297.681344][ T5826] usb 2-1: config 0 descriptor?? [ 1298.167002][ T5826] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1298.247006][T20239] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1298.326998][ T5826] usb 1-1: Using ep0 maxpacket: 16 [ 1298.333704][ T5826] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1298.346845][ T5826] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1298.360075][ T5826] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1298.373440][ T5826] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1298.399391][T20239] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1298.410408][ T5826] usb 1-1: config 0 descriptor?? [ 1298.430616][T20239] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1298.441870][ T5826] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1298.453122][T20239] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1298.471805][T20239] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1298.482925][T20239] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1298.491261][T20239] usb 3-1: Product: syz [ 1298.495772][T20239] usb 3-1: Manufacturer: syz [ 1298.503197][T20239] usb 3-1: SerialNumber: syz [ 1298.514714][T20239] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 1298.525540][T20239] cdc_ncm 3-1:1.0: bind() failure [ 1298.728110][T22963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1298.728399][T22963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1298.730651][T22963] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3559'. [ 1298.749462][T20239] usb 3-1: USB disconnect, device number 28 [ 1298.993612][T22967] random: crng reseeded on system resumption [ 1299.379062][T22972] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 1300.029703][T22983] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3563'. [ 1300.136738][T20239] usb 2-1: USB disconnect, device number 32 [ 1300.160766][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.167279][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.941413][T11622] usb 1-1: USB disconnect, device number 33 [ 1301.797024][ T43] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1302.077033][T23004] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3568'. [ 1302.337494][ T43] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1302.365606][ T43] usb 1-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1302.402107][ T43] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1302.430949][ T43] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1302.456176][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1302.496318][ T43] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1302.639855][ T43] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1302.793214][T23000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1302.805119][T23000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1302.856997][ T5892] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1303.059668][ T5892] usb 4-1: config 0 has an invalid descriptor of length 146, skipping remainder of the config [ 1303.070366][ T5892] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1303.111346][ T5892] usb 4-1: New USB device found, idVendor=2d7b, idProduct=22c4, bcdDevice=ca.8b [ 1303.147031][T20239] usb 1-1: USB disconnect, device number 34 [ 1303.256958][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=64 [ 1303.296980][ T5892] usb 4-1: SerialNumber: syz [ 1303.422570][ T5892] usb 4-1: config 0 descriptor?? [ 1303.533138][T23012] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3570'. [ 1304.135162][T23023] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3571'. [ 1305.679987][T23034] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3583'. [ 1305.773636][ T43] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1306.015144][ T43] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1306.027017][ T43] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1306.129341][ T43] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1306.163563][ T43] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1306.173096][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1306.182247][ T43] usb 2-1: Product: syz [ 1306.189568][ T43] usb 2-1: Manufacturer: syz [ 1306.194346][ T43] usb 2-1: SerialNumber: syz [ 1306.220562][ T43] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 1306.232976][ T43] cdc_ncm 2-1:1.0: bind() failure [ 1306.522750][T23044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1306.563365][T23044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1306.594574][T23044] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3572'. [ 1306.719780][T20239] usb 2-1: USB disconnect, device number 33 [ 1306.838639][ T43] usb 4-1: USB disconnect, device number 30 [ 1307.199329][T20239] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1307.368854][T20239] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1307.389426][T20239] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1307.398463][T20239] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1307.414699][T20239] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1307.424019][T20239] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1307.432080][T20239] usb 3-1: Product: syz [ 1307.436356][T20239] usb 3-1: Manufacturer: syz [ 1307.441016][T20239] usb 3-1: SerialNumber: syz [ 1307.457056][ T5922] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1307.512655][T20239] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 1307.536248][T20239] cdc_ncm 3-1:1.0: bind() failure [ 1307.867578][T23048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1307.876321][T23048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1307.890824][T23048] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3574'. [ 1307.931993][T20239] usb 3-1: USB disconnect, device number 30 [ 1307.947137][ T5922] usb 1-1: Using ep0 maxpacket: 16 [ 1307.955537][ T5922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1307.968266][ T5922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1308.402067][ T5922] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1308.425529][ T5922] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1308.436479][ T5922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1308.522809][ T5922] usb 1-1: config 0 descriptor?? [ 1309.109189][T23055] random: crng reseeded on system resumption [ 1309.206118][T23069] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3579'. [ 1309.226684][ T5922] input: HID 0955:7214 Haptics as /devices/virtual/input/input89 [ 1309.389190][ T5922] shield 0003:0955:7214.0021: Registered Thunderstrike controller [ 1309.399772][ T5922] shield 0003:0955:7214.0021: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 1310.140806][ T5892] usb 1-1: USB disconnect, device number 35 [ 1310.147476][ T43] shield 0003:0955:7214.0021: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1310.225590][ T43] shield 0003:0955:7214.0021: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1310.367025][ T43] shield 0003:0955:7214.0021: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1310.719216][ T43] shield 0003:0955:7214.0021: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1310.853845][T23082] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3584'. [ 1311.967698][T20239] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1312.173187][T20239] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 1312.181911][T20239] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1312.214185][T20239] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1312.243483][T20239] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1312.263904][T20239] usb 3-1: Manufacturer: syz [ 1312.292653][T20239] usb 3-1: config 0 descriptor?? [ 1312.311473][T20239] igorplugusb 3-1:0.0: incorrect number of endpoints [ 1312.367005][ T43] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1312.568987][ T43] usb 2-1: config 0 has an invalid interface number: 91 but max is 0 [ 1312.585091][ T43] usb 2-1: config 0 has an invalid descriptor of length 12, skipping remainder of the config [ 1312.663263][T23086] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3585'. [ 1312.703910][T23086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1312.776877][T23086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1312.881287][T23102] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3589'. [ 1313.051409][T23105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1313.077611][T23105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1313.098632][ T43] usb 2-1: config 0 has no interface number 0 [ 1313.104747][ T43] usb 2-1: config 0 interface 91 altsetting 3 has an invalid endpoint descriptor of length 5, skipping [ 1313.387731][ T43] usb 2-1: config 0 interface 91 has no altsetting 0 [ 1313.394590][ T43] usb 2-1: New USB device found, idVendor=174f, idProduct=5212, bcdDevice=60.41 [ 1313.476967][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1313.624521][ T43] usb 2-1: config 0 descriptor?? [ 1313.906468][ T43] usb 2-1: string descriptor 0 read error: -71 [ 1313.914755][ T43] uvcvideo 2-1:0.91: probe with driver uvcvideo failed with error -22 [ 1313.944036][ T43] usb 2-1: USB disconnect, device number 34 [ 1314.789678][ T43] usb 3-1: USB disconnect, device number 31 [ 1315.297010][ T43] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1315.466508][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 1315.519173][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1315.856442][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1315.900268][ T43] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1315.953916][ T43] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1315.995046][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1316.158180][ T43] usb 3-1: config 0 descriptor?? [ 1316.596834][T23123] random: crng reseeded on system resumption [ 1316.617506][ T43] input: HID 0955:7214 Haptics as /devices/virtual/input/input90 [ 1316.651807][ T43] shield 0003:0955:7214.0022: Registered Thunderstrike controller [ 1316.677508][ T43] shield 0003:0955:7214.0022: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 1317.181936][T23138] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3597'. [ 1317.406807][T13835] shield 0003:0955:7214.0022: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1317.419111][ T5922] usb 3-1: USB disconnect, device number 32 [ 1317.437590][T13835] shield 0003:0955:7214.0022: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1317.477137][ T43] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 1317.513697][T13835] shield 0003:0955:7214.0022: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1317.598398][T13835] shield 0003:0955:7214.0022: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1317.653628][ T43] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 1317.662284][ T43] usb 4-1: config 0 has no interface number 0 [ 1317.670342][ T43] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1317.710397][ T43] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 1317.970877][ T43] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1317.980471][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1318.006385][ T43] usb 4-1: Product: syz [ 1318.165818][ T43] usb 4-1: Manufacturer: syz [ 1318.171725][ T43] usb 4-1: SerialNumber: syz [ 1318.182404][ T43] usb 4-1: config 0 descriptor?? [ 1318.243422][T23143] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1318.254466][ T43] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 1319.352203][T23155] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3600'. [ 1320.635710][ T43] usb 4-1: USB disconnect, device number 31 [ 1320.641746][ T5922] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1320.685820][ T43] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 1320.847029][ T5922] usb 2-1: Using ep0 maxpacket: 32 [ 1320.855431][ T5922] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1320.875910][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1320.923446][ T5922] usb 2-1: config 0 descriptor?? [ 1321.391501][ T5922] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1321.424898][ T5922] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1321.457777][ T5922] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1321.464992][ T5922] usb 2-1: media controller created [ 1321.556261][ T5922] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1321.848366][T23187] random: crng reseeded on system resumption [ 1322.540327][T23194] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3607'. [ 1323.449013][T23167] delete_channel: no stack [ 1323.462060][ T5922] az6027: usb out operation failed. (-71) [ 1323.488076][ T5922] az6027: usb out operation failed. (-71) [ 1323.495369][ T5922] stb0899_attach: Driver disabled by Kconfig [ 1323.523195][ T5922] az6027: no front-end attached [ 1323.523195][ T5922] [ 1323.645803][ T5922] az6027: usb out operation failed. (-71) [ 1323.657114][ T5922] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1323.702703][ T5922] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input91 [ 1323.800814][ T5922] dvb-usb: schedule remote query interval to 400 msecs. [ 1323.813846][ T5922] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1323.895310][ T5922] usb 2-1: USB disconnect, device number 35 [ 1324.697954][ T5922] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1324.867094][T20239] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1324.924072][ T43] IPVS: starting estimator thread 0... [ 1325.037057][T23216] IPVS: using max 31 ests per chain, 74400 per kthread [ 1325.400858][ T5922] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1325.587068][ T5922] usb 2-1: Using ep0 maxpacket: 16 [ 1325.608584][ T5922] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1325.624170][ T5922] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1325.668927][ T5922] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1325.787029][ T5922] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1325.796128][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1325.870816][ T5922] usb 2-1: config 0 descriptor?? [ 1326.401576][T23226] random: crng reseeded on system resumption [ 1326.569496][ T5922] input: HID 0955:7214 Haptics as /devices/virtual/input/input92 [ 1326.714899][ T5922] shield 0003:0955:7214.0023: Registered Thunderstrike controller [ 1326.735804][ T5922] shield 0003:0955:7214.0023: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 1327.857572][ T43] shield 0003:0955:7214.0023: Failed to output Thunderstrike HOSTCMD request HID report due to -ESHUTDOWN [ 1327.910162][ T43] shield 0003:0955:7214.0023: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1327.947062][ T43] shield 0003:0955:7214.0023: Failed to output Thunderstrike HOSTCMD request HID report due to -EPIPE [ 1327.991529][T13835] usb 2-1: reset high-speed USB device number 36 using dummy_hcd [ 1328.015357][ T43] shield 0003:0955:7214.0023: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1328.593072][T23240] netlink: 'syz.2.3617': attribute type 21 has an invalid length. [ 1328.686959][T13835] usb 2-1: device descriptor read/64, error -32 [ 1328.738477][T23241] netlink: 'syz.2.3617': attribute type 21 has an invalid length. [ 1328.797862][T23240] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3617'. [ 1328.831475][T23241] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3617'. [ 1328.947037][T13835] usb 2-1: reset high-speed USB device number 36 using dummy_hcd [ 1329.381745][T23236] random: crng reseeded on system resumption [ 1330.407147][T11622] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 1330.445299][T20239] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1330.694842][T20239] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 1330.703682][T20239] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1330.729054][T11622] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 1330.740273][T11622] usb 3-1: config 0 has no interface number 0 [ 1330.746390][T11622] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1330.962804][ T24] usb 2-1: USB disconnect, device number 36 [ 1331.006629][ T24] ------------[ cut here ]------------ [ 1331.012137][ T24] workqueue: work disable count underflowed [ 1331.018105][ T24] WARNING: CPU: 1 PID: 24 at kernel/workqueue.c:4355 enable_work+0x2b1/0x2c0 [ 1331.026900][ T24] Modules linked in: [ 1331.031107][ T24] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT(full) [ 1331.040307][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1331.050361][ T24] Workqueue: usb_hub_wq hub_event [ 1331.055398][ T24] RIP: 0010:enable_work+0x2b1/0x2c0 [ 1331.060656][ T24] Code: 41 5e 41 5f 5d e9 4f 40 c4 09 cc e8 b9 5c c1 09 e8 a4 af 35 00 c6 05 fa 35 fe 0d 01 90 48 c7 c7 c0 ef 69 8b e8 a0 cc f8 ff 90 <0f> 0b 90 90 e9 69 ff ff ff 66 0f 1f 44 00 00 90 90 90 90 90 90 90 [ 1331.080296][ T24] RSP: 0018:ffffc900001e7040 EFLAGS: 00010046 [ 1331.086386][ T24] RAX: 587c29283f88ec00 RBX: ffff88804f3d5738 RCX: 0000000000100000 [ 1331.094363][ T24] RDX: ffffc9001ce72000 RSI: 000000000000b238 RDI: 000000000000b239 [ 1331.102383][ T24] RBP: ffffc900001e70f8 R08: 0000000000000003 R09: 0000000000000004 [ 1331.110353][ T24] R10: dffffc0000000000 R11: fffffbfff1bfa658 R12: 1ffff9200003ce0c [ 1331.118323][ T24] R13: dffffc0000000000 R14: 0000000000000000 R15: 001fffffffc00001 [ 1331.126308][ T24] FS: 0000000000000000(0000) GS:ffff888125e12000(0000) knlGS:0000000000000000 [ 1331.135235][ T24] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1331.141849][ T24] CR2: 00000000f744b208 CR3: 0000000072710000 CR4: 00000000003526f0 [ 1331.149828][ T24] Call Trace: [ 1331.153107][ T24] [ 1331.156039][ T24] ? __pfx_enable_work+0x10/0x10 [ 1331.161000][ T24] ? __thermal_zone_cdev_unbind+0x485/0x4c0 [ 1331.166951][ T24] ? lockdep_hardirqs_on+0x9c/0x150 [ 1331.172173][ T24] __cancel_work_sync+0xf7/0x110 [ 1331.177114][ T24] thermal_zone_device_unregister+0x23e/0x3f0 [ 1331.183193][ T24] power_supply_unregister+0xf9/0x140 [ 1331.188568][ T24] ? __pfx_shield_remove+0x10/0x10 [ 1331.193688][ T24] shield_remove+0x72/0x120 [ 1331.198196][ T24] hid_device_remove+0x228/0x370 [ 1331.203143][ T24] ? __pfx_hid_device_remove+0x10/0x10 [ 1331.208610][ T24] device_release_driver_internal+0x46f/0x800 [ 1331.214687][ T24] bus_remove_device+0x34d/0x410 [ 1331.219637][ T24] device_del+0x511/0x8e0 [ 1331.223978][ T24] ? __pfx_device_del+0x10/0x10 [ 1331.228850][ T24] hid_destroy_device+0x6b/0x1b0 [ 1331.233824][ T24] usbhid_disconnect+0x9f/0xc0 [ 1331.238600][ T24] usb_unbind_interface+0x26e/0x910 [ 1331.243817][ T24] ? __pfx_usb_unbind_interface+0x10/0x10 [ 1331.249561][ T24] device_release_driver_internal+0x4d9/0x800 [ 1331.255645][ T24] bus_remove_device+0x34d/0x410 [ 1331.260608][ T24] device_del+0x511/0x8e0 [ 1331.264968][ T24] ? __pfx_device_del+0x10/0x10 [ 1331.269834][ T24] ? kobject_put+0x446/0x480 [ 1331.274441][ T24] usb_disable_device+0x3e9/0x8a0 [ 1331.279480][ T24] usb_disconnect+0x330/0x950 [ 1331.284166][ T24] hub_event+0x1cf5/0x4a20 [ 1331.288607][ T24] ? do_raw_spin_lock+0x121/0x290 [ 1331.293645][ T24] ? register_lock_class+0x51/0x320 [ 1331.298861][ T24] ? __pfx_hub_event+0x10/0x10 [ 1331.303630][ T24] ? process_scheduled_works+0x9ef/0x17b0 [ 1331.309357][ T24] ? _raw_spin_unlock_irq+0x23/0x50 [ 1331.314559][ T24] ? process_scheduled_works+0x9ef/0x17b0 [ 1331.320280][ T24] ? process_scheduled_works+0x9ef/0x17b0 [ 1331.326015][ T24] process_scheduled_works+0xae1/0x17b0 [ 1331.331588][ T24] ? __pfx_process_scheduled_works+0x10/0x10 [ 1331.337594][ T24] worker_thread+0x8a0/0xda0 [ 1331.342204][ T24] kthread+0x711/0x8a0 [ 1331.346302][ T24] ? __pfx_worker_thread+0x10/0x10 [ 1331.351427][ T24] ? __pfx_kthread+0x10/0x10 [ 1331.356048][ T24] ? _raw_spin_unlock_irq+0x23/0x50 [ 1331.361265][ T24] ? lockdep_hardirqs_on+0x9c/0x150 [ 1331.366472][ T24] ? __pfx_kthread+0x10/0x10 [ 1331.371091][ T24] ret_from_fork+0x4bc/0x870 [ 1331.375707][ T24] ? __pfx_ret_from_fork+0x10/0x10 [ 1331.380854][ T24] ? __switch_to_asm+0x39/0x70 [ 1331.385613][ T24] ? __switch_to_asm+0x33/0x70 [ 1331.390370][ T24] ? __pfx_kthread+0x10/0x10 [ 1331.394964][ T24] ret_from_fork_asm+0x1a/0x30 [ 1331.399741][ T24] [ 1331.402759][ T24] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1331.410033][ T24] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT(full) [ 1331.419235][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1331.429291][ T24] Workqueue: usb_hub_wq hub_event [ 1331.434326][ T24] Call Trace: [ 1331.437608][ T24] [ 1331.440548][ T24] dump_stack_lvl+0x99/0x250 [ 1331.445139][ T24] ? __asan_memcpy+0x40/0x70 [ 1331.449751][ T24] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1331.454952][ T24] ? __pfx__printk+0x10/0x10 [ 1331.459551][ T24] vpanic+0x237/0x6d0 [ 1331.463560][ T24] ? __pfx_vpanic+0x10/0x10 [ 1331.468086][ T24] panic+0xb9/0xc0 [ 1331.471827][ T24] ? __pfx_panic+0x10/0x10 [ 1331.476287][ T24] __warn+0x31b/0x4b0 [ 1331.480278][ T24] ? enable_work+0x2b1/0x2c0 [ 1331.484868][ T24] ? enable_work+0x2b1/0x2c0 [ 1331.489467][ T24] report_bug+0x2be/0x4f0 [ 1331.493803][ T24] ? enable_work+0x2b1/0x2c0 [ 1331.498416][ T24] ? enable_work+0x2b1/0x2c0 [ 1331.503015][ T24] ? enable_work+0x2b3/0x2c0 [ 1331.507602][ T24] handle_bug+0x84/0x160 [ 1331.511854][ T24] exc_invalid_op+0x1a/0x50 [ 1331.516366][ T24] asm_exc_invalid_op+0x1a/0x20 [ 1331.521218][ T24] RIP: 0010:enable_work+0x2b1/0x2c0 [ 1331.526440][ T24] Code: 41 5e 41 5f 5d e9 4f 40 c4 09 cc e8 b9 5c c1 09 e8 a4 af 35 00 c6 05 fa 35 fe 0d 01 90 48 c7 c7 c0 ef 69 8b e8 a0 cc f8 ff 90 <0f> 0b 90 90 e9 69 ff ff ff 66 0f 1f 44 00 00 90 90 90 90 90 90 90 [ 1331.546045][ T24] RSP: 0018:ffffc900001e7040 EFLAGS: 00010046 [ 1331.552122][ T24] RAX: 587c29283f88ec00 RBX: ffff88804f3d5738 RCX: 0000000000100000 [ 1331.560094][ T24] RDX: ffffc9001ce72000 RSI: 000000000000b238 RDI: 000000000000b239 [ 1331.568081][ T24] RBP: ffffc900001e70f8 R08: 0000000000000003 R09: 0000000000000004 [ 1331.576051][ T24] R10: dffffc0000000000 R11: fffffbfff1bfa658 R12: 1ffff9200003ce0c [ 1331.584027][ T24] R13: dffffc0000000000 R14: 0000000000000000 R15: 001fffffffc00001 [ 1331.592018][ T24] ? __pfx_enable_work+0x10/0x10 [ 1331.596965][ T24] ? __thermal_zone_cdev_unbind+0x485/0x4c0 [ 1331.602867][ T24] ? lockdep_hardirqs_on+0x9c/0x150 [ 1331.608090][ T24] __cancel_work_sync+0xf7/0x110 [ 1331.613039][ T24] thermal_zone_device_unregister+0x23e/0x3f0 [ 1331.619114][ T24] power_supply_unregister+0xf9/0x140 [ 1331.624490][ T24] ? __pfx_shield_remove+0x10/0x10 [ 1331.629626][ T24] shield_remove+0x72/0x120 [ 1331.634157][ T24] hid_device_remove+0x228/0x370 [ 1331.639108][ T24] ? __pfx_hid_device_remove+0x10/0x10 [ 1331.644577][ T24] device_release_driver_internal+0x46f/0x800 [ 1331.650650][ T24] bus_remove_device+0x34d/0x410 [ 1331.655594][ T24] device_del+0x511/0x8e0 [ 1331.659947][ T24] ? __pfx_device_del+0x10/0x10 [ 1331.664837][ T24] hid_destroy_device+0x6b/0x1b0 [ 1331.669787][ T24] usbhid_disconnect+0x9f/0xc0 [ 1331.674554][ T24] usb_unbind_interface+0x26e/0x910 [ 1331.679764][ T24] ? __pfx_usb_unbind_interface+0x10/0x10 [ 1331.685579][ T24] device_release_driver_internal+0x4d9/0x800 [ 1331.691654][ T24] bus_remove_device+0x34d/0x410 [ 1331.696604][ T24] device_del+0x511/0x8e0 [ 1331.700991][ T24] ? __pfx_device_del+0x10/0x10 [ 1331.705842][ T24] ? kobject_put+0x446/0x480 [ 1331.710446][ T24] usb_disable_device+0x3e9/0x8a0 [ 1331.715481][ T24] usb_disconnect+0x330/0x950 [ 1331.720162][ T24] hub_event+0x1cf5/0x4a20 [ 1331.724604][ T24] ? do_raw_spin_lock+0x121/0x290 [ 1331.729635][ T24] ? register_lock_class+0x51/0x320 [ 1331.734862][ T24] ? __pfx_hub_event+0x10/0x10 [ 1331.739659][ T24] ? process_scheduled_works+0x9ef/0x17b0 [ 1331.745387][ T24] ? _raw_spin_unlock_irq+0x23/0x50 [ 1331.750585][ T24] ? process_scheduled_works+0x9ef/0x17b0 [ 1331.756301][ T24] ? process_scheduled_works+0x9ef/0x17b0 [ 1331.762035][ T24] process_scheduled_works+0xae1/0x17b0 [ 1331.767609][ T24] ? __pfx_process_scheduled_works+0x10/0x10 [ 1331.773629][ T24] worker_thread+0x8a0/0xda0 [ 1331.778241][ T24] kthread+0x711/0x8a0 [ 1331.782318][ T24] ? __pfx_worker_thread+0x10/0x10 [ 1331.787452][ T24] ? __pfx_kthread+0x10/0x10 [ 1331.792051][ T24] ? _raw_spin_unlock_irq+0x23/0x50 [ 1331.797257][ T24] ? lockdep_hardirqs_on+0x9c/0x150 [ 1331.802457][ T24] ? __pfx_kthread+0x10/0x10 [ 1331.807062][ T24] ret_from_fork+0x4bc/0x870 [ 1331.811655][ T24] ? __pfx_ret_from_fork+0x10/0x10 [ 1331.816769][ T24] ? __switch_to_asm+0x39/0x70 [ 1331.821536][ T24] ? __switch_to_asm+0x33/0x70 [ 1331.826298][ T24] ? __pfx_kthread+0x10/0x10 [ 1331.830893][ T24] ret_from_fork_asm+0x1a/0x30 [ 1331.835671][ T24] [ 1331.838965][ T24] Kernel Offset: disabled [ 1331.843294][ T24] Rebooting in 86400 seconds..