last executing test programs: 13.495707411s ago: executing program 1 (id=999): bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x800, 0x5, 0xc000, 0xe, "0062ba7d8200000016001b000200f705096604"}) syz_open_pts(r0, 0xa0200) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000019700)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xf5ff}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}}, 0x40000) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0xbe04, 0x2c, 0x0, 0x0) 12.987760378s ago: executing program 1 (id=1002): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000380), 0x12) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x62c40, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000\"N000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuseblk(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x20080a0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x200000d4) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r6, 0xc1105511, &(0x7f00000000c0)={{0xc, 0x0, 0x2, 0xfffffffe, 'syz1\x00'}, 0x0, [0x0, 0x100, 0x4, 0x0, 0x9, 0x100000000, 0x0, 0x4, 0x8, 0x1, 0xc3, 0x7f, 0x1, 0x0, 0x4, 0xfff, 0x8, 0x0, 0x0, 0x1, 0x0, 0xd, 0x0, 0x3, 0x100000000, 0xee8000000000000, 0x0, 0x5, 0x4, 0x4, 0x2, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x3, 0x20, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0xfffffffe, 0x0, 0x7fffffffffffffff, 0xfffffdfffffffffe, 0x4, 0x800000, 0x0, 0x0, 0xffffffffffffffff, 0x100000001, 0x0, 0x0, 0x52d4, 0x0, 0x0, 0x401, 0xb4f, 0xffffffff, 0xfffffffffffffffd, 0x4, 0x1, 0x0, 0x20000000000, 0xd87, 0x0, 0x44, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x1, 0x800000000002, 0x5f9cd92, 0x8000200, 0x6, 0x5, 0xd, 0x0, 0x0, 0xbb, 0x6, 0x0, 0x0, 0xfffffffe, 0x7, 0x7ffffffd, 0x3, 0x4, 0xffffffffffff2328, 0x2, 0x3, 0x0, 0x0, 0x556a766c, 0x20000, 0x3, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0x0, 0xb, 0x1, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7ff]}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_usb_connect$uac2(0x3, 0x80, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000200000010532b230040000102030109026e00030104600e080b0202010620400904000000010120000924010700020e000105240b1400090401800001022000090401010101022000090501"], 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e657665000020000280140007000000000000000000000000007ffffffe05000c000100000008000a00", @ANYRES32=r7], 0x58}, 0x1, 0x20000200, 0x0, 0x40000}, 0x0) memfd_create(&(0x7f00000000c0)='=\x00', 0x2) 12.753090479s ago: executing program 0 (id=1004): syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f000082f000/0x2000)=nil, 0x2000, 0x19) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r3 = dup2(r2, r2) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f00000001c0)={0x14000000, 0xffffffff}) read$FUSE(r3, &(0x7f0000004940)={0x2020}, 0x2020) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, 0x0, 0x0, 0xffffffffffffff9c) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x19, 0xe, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x76, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) mprotect(&(0x7f000057d000/0x2000)=nil, 0x2000, 0x4) close(0xffffffffffffffff) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="01f4000005000000fd09000084000000050100", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = accept$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000380)=0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000001600)={{{@in=@initdev, @in=@empty}}, {{@in6=@private2}, 0x0, @in6=@mcast1}}, &(0x7f0000001700)=0xe8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100003f3fdc20221802324a130102030109021b0001000010000904cdf100d3"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="183f0000000000000000000003000000950000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x2, 0x1007, &(0x7f00000005c0)=""/4103, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0xc0) 10.809635822s ago: executing program 1 (id=1008): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x3) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[]) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f0000006140)={0x2020}, 0x2020) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="a7ffa88800000000200012800900010069706970000000fa0f000280040013000500090000000008f33a5798cb485f3a9776f093ab3e544599d87862ad961fa67f7215b55c42d37b9a100eb2ec063287898534c013c8f11d376156badd398f094e0e3b0cae09b813a27158392211de2312f2526854a5a004cb08"], 0x40}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) socket(0x400000000010, 0x3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000340)={0x10003, 0x7, 0xd000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r5) sendmsg$inet6(r5, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r6 = dup(r5) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0xda5a, @loopback}}}, &(0x7f00000001c0)=0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0xa4, 0x8, 0x2}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x1b}, 0x9c) ioctl$TUNGETIFF(r6, 0x800454d2, &(0x7f00000000c0)={'ipvlan1\x00'}) 10.252383189s ago: executing program 3 (id=1009): r0 = socket$inet6(0xa, 0x2, 0x0) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000040)={'ip6gre0\x00', 0x0}) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000004c80)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x9, @remote, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2400000000000000290000000200000000000000000000a7a122157b31c72f6831"], 0x28}}], 0x1, 0x0) 10.108225552s ago: executing program 3 (id=1010): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) syz_usb_connect(0x3, 0x3b, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r0, &(0x7f00000000c0), 0x0, 0x20000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="91100400000000009500000000000000ab89becd60798ba0c7b340b02956c1c3822c3ff6cb7955ac9702e4a18821040f9856a1bf21bf5e9b77a91e739c3ee223bb727fb18bc991da02854893b585f4465da763f2ac1d5e22ab728ef23681fe8fdf16f570082bdfadcd7f48aa86c2c12a78db90a7781fa547451f272ad46f8e5733fb606f040417634328cbf1b47957851ce3cbc4eb683cc45e48df30ead552a32564e7d1ab13b4aa22e4dd4970134ec08873d32468bed08369a2ec7cef09ea5af2dfc3dbf2f13954a41a3e02b5e2fd65c37b0f22ce8f18ef"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r1 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000200)={0x0, 0x7, 0x4, 0x0, 0x2, 0x1}) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1002}]}) pipe2$watch_queue(0x0, 0x80) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_open_dev$evdev(0x0, 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000003c0)={0x54, 0x0, 0x0, {0xffff, 0x1}, {0x50, 0x2}, @period={0x5c, 0x5394, 0x8, 0x401, 0x8, {0x4, 0x5, 0xfff, 0x2}, 0x0, &(0x7f00000000c0)}}) write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(0x0, 0xf01c, 0x0) r3 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) fchdir(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r5, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r5, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGMASK(r6, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) 8.764236697s ago: executing program 0 (id=1012): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000140)={0x12}) r2 = socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=[@in={0x2, 0x4e20, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f00000006c0)={r3, @in6={{0xa, 0x4e22, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffd}}}, &(0x7f0000000100)=0x84) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000007d80)={r4, 0x101, 0x40, 0xfff}, &(0x7f0000007dc0)=0x10) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="200000001600010a29bd700000000c00030000000c006c800800a500", @ANYRES32=r6, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x8098}, 0x4010) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000040)=0x1a0000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000440)=ANY=[@ANYRESHEX=r3], 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r8 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r8, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r8, &(0x7f0000001fc0)=""/184, 0xb8) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r7, 0x7a8, &(0x7f0000000540)={{@hyper, 0xffffffff}, @hyper, 0x0, 0xfffe, 0x5e, 0xfffffffffffffff9, 0x8000}) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{&(0x7f0000000400)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b80)="7b4c07fef788ad68a96659a47a3f61bf1d4366f74c7395a8eafe27a247c718ea768f35f151cf3d8da04cf385ae8cc5637277aedcd5f1c3a1a13a4013f42649c0f68b778f8a3707b25ee370db5b56f627e9eb23a3ccddedabe1f7cdd6a2174c2aa18cb4780b20", 0x66}, {&(0x7f0000000480)="200e3cd8bd284cad880bd275a43d5b5e83cd3df9cd8c98c4e493ee26ebfb011b030575a43b1c9c5d48c1a57e3099c28364ffc7192c87fff2c4109be3963dbd5f9d24bdaee2d75be5c9439b8783d0758ce235300e6487", 0x56}, {&(0x7f0000000580)="96b55c96249086ad49626d63668e7710b85e3c28f09c723b8fc101f470bd718f516556841fb9beab3ff3380eb4b581f8b0f27abc1dfdc692ed4102091e19a6f539b6f1402a53cdd507785b8e350780a4901997d7a83b0e7b49690acf0a788e041e6c3ca36e7aea9514421f82a0042768470eecd43ae929d40c000000fc3f64a27d202b46d641276fcff869e8f054d9882dfdd38e71793e4eae5821828ca184fa2ed683bec12e8ddc038b6e33d467965a30aaffa69c30f52a3bc38fbc2262e76c8e5c", 0xc2}, {&(0x7f0000000680)="1f0ad2243dd2104dbc75833dcab37480679fadcb6519", 0x16}, {&(0x7f0000000c00)="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", 0x12e}, {&(0x7f0000000280)="42d0efadcf01d4f65759120b4cb57848d08e51fc1fbab28eae940a2bef30f3be97d1da33f19c60a40a6c8bb910fbc38ab42d52472b9cb2c4fafa507a0a8425e2f13d01b746bd5d55fb97fa0ad22540c10752ef3a04803efcb49511fc9300cd3d2622112659354d024c2416d14d614a19a5e81caecab67e0b91b57354afb476b827b3", 0x82}, {&(0x7f0000000880)="fb5382d08d0248d2f56d7739ebf4e827ffdb7703b6529c2fb28149", 0x1b}, {&(0x7f00000008c0)="85a552152e9e3276215f7dbf45e1b5e05b1fa204", 0x14}, {&(0x7f0000000900)="dc4c05d63854e7a0b6a5d635ee64b1a69a37a3aa8a622835b875ab72944cbd25d8f7850881269b6614610018fc18af9be44c55c027c9f3b60c0052f5ef8863a1a3b665a4702b9afd8476bd317a751ec1c37c8b3ff40dc2a6726ccdfb48aa387fc9e103b69e6984da167efaf2492407ede3b88411", 0x74}, {&(0x7f0000000980)="1ccb0809745b21d298498e457e2e98f14b8883f22a424ef5ef258c3d99404745d9a98f138e37e17643420f48d9e2daecbab1b3601aa049ced9d3e40ce1bc43c163ecc59bd99dedb0188a309c0a3fd554a1e917d4db386c3b7c58a0588369dc", 0x5f}], 0xa, &(0x7f0000000ac0)=[@tclass={{0x14, 0x29, 0x43, 0x3}}], 0x18}}], 0x2, 0x2404b7d6) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r9, 0x84, 0x13, &(0x7f00000000c0)=0x3ff, 0x4) setrlimit(0x40000000000008, &(0x7f0000000000)) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) r10 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000d40)=[@wr_drn={0x68, 0x20, {0x4, 0x7fffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control64=0x202b, 0xc, 0xb745, 0xd}}, @wr_crn={0x67, 0x20, {0x4}}, @nested_amd_clgi={0x17f, 0x10}, @enable_nested={0x12c, 0x18}], 0xa0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e00)={0x1c, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="0201d7a5b31eda93bc0e046a52056d98c337de7cbc", @ANYRESOCT=0x0, @ANYRES16=r5, @ANYRES32=r10, @ANYRESHEX=r5], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 7.974952007s ago: executing program 1 (id=1014): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xc, &(0x7f00000002c0)={0x6, 0x8b}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) gettid() sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f00000003c0), 0x27fd, 0x2) ioctl$VIDIOC_CROPCAP(r5, 0xc02c563a, &(0x7f00000000c0)={0xa, {0x4, 0x3, 0x1, 0x401}, {0x0, 0x2, 0x4, 0x1000}, {0xa47, 0x5}}) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r6, &(0x7f0000001600)=""/4088, 0xff8, 0x94) r7 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, r7) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073787a30000091040900030073797acda933a526ca320000000014"], 0x7c}}, 0x0) r8 = gettid() r9 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0) read$FUSE(r9, &(0x7f0000002480)={0x2020}, 0x2020) tkill(r8, 0x8) 5.849532422s ago: executing program 1 (id=1019): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0x10, 0x3, 0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000180)=0x3ff, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001c00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000280)='S', 0x1}], 0x1}}], 0x1, 0x20008000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001800)={r4, 0xe0, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65, 0x8, 0x0, 0x0}}, 0x10) shutdown(0xffffffffffffffff, 0x1) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$nullb(0xffffffffffffff9c, 0x0, 0x1c7900, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0x201f00) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r6, 0x40a85321, &(0x7f00000004c0)={{0x80}, 'port0\x00', 0x50, 0x180c75, 0x7, 0x104, 0x1ff, 0x0, 0x0, 0x0, 0x6}) r7 = syz_open_dev$vbi(&(0x7f00000002c0), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f00000000c0)=0x2) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e24, @multicast1}}, 0x8000, 0x7f, 0x9, 0x2, 0x4}, &(0x7f0000000340)=0x98) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000006c0)={r8, @in6={{0xa, 0x4e22, 0x6, @local, 0x9}}, 0x6, 0x3f3}, 0x90) preadv(r7, &(0x7f0000000680)=[{&(0x7f0000000400)=""/162, 0xa2}, {&(0x7f0000000580)=""/203, 0xcb}], 0x2, 0x80000001, 0x3) ioctl$VIDIOC_S_STD(r7, 0x40085618, &(0x7f0000000300)=0x800) 5.74420844s ago: executing program 3 (id=1020): bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x66, &(0x7f0000000340)=ANY=[], 0x0) (async) syz_emit_ethernet(0x66, &(0x7f0000000340)=ANY=[], 0x0) syz_open_dev$I2C(&(0x7f0000000200), 0x0, 0x2) (async) syz_open_dev$I2C(&(0x7f0000000200), 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)={'#! ', '', [{0x20, '\t\xbb\x9b\x81\xa61\xdd\xd6\xe6\xb3R\xb9\xdb?\xbe\xd3&n\xe2\xb6\xf5%\xb2\xdf\xf5\x83\xba\xeb\x93~\x88\xdc\xec[6=\x01p\xcd\x8ay\x0ez\\U\xae\x9fj@5q\xb2\x89\x00\x17\xe3\x82\x81\xbeS\xd8\x00\x1c\x10\xf8\xf3\xd4\xddI<%\xbb\xa6\xab\x9a\xe5\xec\x19\xfa\xcb\x94\x90u\x9b\x13W\xbd\x9f\xfa\x032-{\x96{\x12\xddy\xb8\x0e%\xabx/\x9cb\xfe\xccO\x00\xf0\xf2\x9dZ\x19_\xc7\xf2\vI'}]}, 0x7d) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)={'#! ', '', [{0x20, '\t\xbb\x9b\x81\xa61\xdd\xd6\xe6\xb3R\xb9\xdb?\xbe\xd3&n\xe2\xb6\xf5%\xb2\xdf\xf5\x83\xba\xeb\x93~\x88\xdc\xec[6=\x01p\xcd\x8ay\x0ez\\U\xae\x9fj@5q\xb2\x89\x00\x17\xe3\x82\x81\xbeS\xd8\x00\x1c\x10\xf8\xf3\xd4\xddI<%\xbb\xa6\xab\x9a\xe5\xec\x19\xfa\xcb\x94\x90u\x9b\x13W\xbd\x9f\xfa\x032-{\x96{\x12\xddy\xb8\x0e%\xabx/\x9cb\xfe\xccO\x00\xf0\xf2\x9dZ\x19_\xc7\xf2\vI'}]}, 0x7d) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) setxattr$system_posix_acl(&(0x7f0000001ec0)='.\x00', &(0x7f00000020c0)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="020000000100040000000000040003000004000010000500000000002000000000000000"], 0x24, 0x1) (async) setxattr$system_posix_acl(&(0x7f0000001ec0)='.\x00', &(0x7f00000020c0)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="020000000100040000000000040003000004000010000500000000002000000000000000"], 0x24, 0x1) mkdir(&(0x7f0000000280)='./file0\x00', 0x112) lremovexattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=@known='system.posix_acl_default\x00') r2 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r4, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r4, 0x5b) (async) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r4, 0x5b) read$watch_queue(r3, &(0x7f0000000000)=""/1, 0x1) keyctl$revoke(0x3, r2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0x1, 0x283}, 0x0, 0x0, &(0x7f0000000000)) (async) syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0x1, 0x283}, 0x0, 0x0, &(0x7f0000000000)) r6 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) syz_usb_control_io$printer(r6, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) (async) syz_usb_control_io$printer(r6, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x40, [0x7ffd, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x200, 0x1, 0x7, 0x200, 0x3e, 0x2, 0x6, 0x6, 0xc, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000009, 0x9, 0x8000012f, 0x8004, 0x1, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x8, 0x6c7, 0x9, 0xfffffffc, 0x8, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x30e, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x6, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f34, 0xd, 0x100004e0, 0x2, 0x4, 0xb, 0x8001, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0xffffffff, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0x7f, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x9, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0xbe7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x0, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x6, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0xfffffff9, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x80009, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0xfffffffe, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7ff, 0x2, 0x5, 0x1, 0x2, 0x14d, 0x60a7, 0x16, 0x96, 0xfffffffe, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x1]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x3f00000000000000) 5.583273176s ago: executing program 0 (id=1022): syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x8, 0x400200) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000240)={0x5, "4e0755da6df34f375353b21a06c1b85b94b65f0c500529f86576fbbb04e4d194", 0x1, 0x5, 0x9, 0x4, 0x2}) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)=@multiplanar_fd={0x5, 0x8, 0x4, 0x800000, 0x80, {}, {0x1, 0x1, 0x17, 0xe, 0x3, 0x5, "43172f02"}, 0x81ff, 0x4, {0x0}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x39}, @exit], &(0x7f00000000c0)='GPL\x00', 0x9}, 0x94) syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) (async) syz_open_dev$video4linux(&(0x7f0000000040), 0x8, 0x400200) (async) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000240)={0x5, "4e0755da6df34f375353b21a06c1b85b94b65f0c500529f86576fbbb04e4d194", 0x1, 0x5, 0x9, 0x4, 0x2}) (async) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)=@multiplanar_fd={0x5, 0x8, 0x4, 0x800000, 0x80, {}, {0x1, 0x1, 0x17, 0xe, 0x3, 0x5, "43172f02"}, 0x81ff, 0x4, {0x0}}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x39}, @exit], &(0x7f00000000c0)='GPL\x00', 0x9}, 0x94) (async) 5.335856252s ago: executing program 0 (id=1025): socket$packet(0x11, 0x3, 0x300) r0 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x40, 0x2, 0x1b, 0xfe}, {0x9, 0x5, 0x7, 0x2, 0x200, 0xc, 0x77, 0x3}, {0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) (async) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x15) sendmsg$netlink(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="2c01000013000100"], 0x12c}], 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$netlink(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="2c01000013000100"], 0x12c}], 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = io_uring_setup(0x667, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) fsopen(&(0x7f00000000c0)='cifs\x00', 0x0) (async) r3 = fsopen(&(0x7f00000000c0)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) socket$kcm(0x2, 0x3, 0x2) (async) r4 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @remote}}}], 0x20}, 0x40800) close_range(r2, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x7, 0x4, 0x34524742, 0x8, 0xc, [{0xfffffffe, 0xb}, {0x40, 0x7}, {0x800, 0x100}, {0x8, 0x1}, {0xfffffffb, 0x676e7560}, {0xc2f8, 0x5}, {0x3, 0x1}, {0x4, 0x165}], 0xe, 0x6, 0x7, 0x0, 0x3}}) syz_usb_control_io$sierra_net(r0, &(0x7f00000006c0)={0x14, &(0x7f0000000600)={0x40, 0x5, 0x18, {0x18, 0x22, "44b5e16cc73db7e3e6b9260977a333fc828dd0cda02b"}}, 0x0}, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) gettid() (async) r9 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000001c0)={'ipvlan1\x00', 0x2000}) socket$unix(0x1, 0x2, 0x0) (async) socket$unix(0x1, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) (async) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x500000b, 0x204031, 0xffffffffffffffff, 0x47aef000) 4.2381291s ago: executing program 3 (id=1029): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xc, &(0x7f00000002c0)={0x6, 0x8b}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) gettid() sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f00000003c0), 0x27fd, 0x2) ioctl$VIDIOC_CROPCAP(r5, 0xc02c563a, &(0x7f00000000c0)={0xa, {0x4, 0x3, 0x1, 0x401}, {0x0, 0x2, 0x4, 0x1000}, {0xa47, 0x5}}) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r6, &(0x7f0000001600)=""/4088, 0xff8, 0x94) r7 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, r7) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073787a30000091040900030073797acda933a526ca320000000014"], 0x7c}}, 0x0) r8 = gettid() r9 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0) read$FUSE(r9, &(0x7f0000002480)={0x2020}, 0x2020) tkill(r8, 0x8) 4.04868316s ago: executing program 0 (id=1030): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a78000000060a010400000000000000000a0000010900010073797a31000000004c0004802800018007000100637400001c00020005000300010000000800014000000009080002400000000120000180070001006374000014000280080002400000000a08000140000000010900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0xa2442, 0x0) write$dsp(r1, &(0x7f0000002180)="af", 0x1) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)=0x400000) ioctl$SNDRV_PCM_IOCTL_START(0xffffffffffffffff, 0x4142, 0x0) 3.852991862s ago: executing program 2 (id=1032): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000004c0)={0x7, &(0x7f0000000480)=[{0x1, 0x5, 0xf, 0x1}, {0xe0, 0x9, 0x6, 0x8d}, {0x1, 0x5, 0x4, 0x7}, {0x27, 0xb, 0x2, 0x2}, {0xfff2, 0x5, 0x4, 0x400}, {0x1, 0x6, 0xd, 0x6}, {0x400, 0xe, 0x8, 0xfcec0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000007c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000740)={r2, 0x3, 0xffffffffffffffff, 0x2a3}) (async, rerun: 64) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="68000025a09d7fb54ce81a5de5e1ddf688cc00", @ANYRES16=0x0, @ANYBLOB="040028bd7000ffdbdf25350000000600fd00cb0d0000140055005ca1108d49366210a8fc6380842d7d6914005500a3bea2e7bc4eadedc025e7000000000008001f01030000000600fd00080000001400fe007980038ef1d61a1afdf0f69be00fecc1"], 0x68}, 0x1, 0x0, 0x0, 0x24004090}, 0x4804) (async, rerun: 64) set_mempolicy(0x4002, &(0x7f0000000400)=0x5, 0x19f34371) (async, rerun: 32) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000500)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000006c0)=""/101, 0x65, 0x5, 0x0, 0x4, 0x3, 0x10000001}}, 0x120) (async, rerun: 32) landlock_restrict_self(0xffffffffffffffff, 0x0) (async) writev(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f00000003c0)="0e000000", 0x4}, {&(0x7f00000006c0), 0x1000000}], 0x2) (async) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x4, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x4}, {0xffe0, 0xb}, {0xb, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x80000) (async, rerun: 32) r3 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x8c1}, 0x4004004) (async) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x2000012, 0x3, 0x0, &(0x7f0000000280)="63ec33", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xb}, 0x50) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/mnt\x00') (async, rerun: 64) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3) (rerun: 64) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) (async) syz_emit_vhci(&(0x7f0000000880)=ANY=[@ANYBLOB="04ff010269b92cda3d3738f5f5ab93722e2db8d52b18976fdaf30c5d176532c773e211ef748e19e57f79b8bf4bc47bbd1e6031479b876140d365ccd7f1f28254c03d694a8643086223bf67caa334cd3b05358db951e0cb017108414b1e5d42e7255f04e89fb07b1f2ddeddbe53c6952ebd299c722e5481917b9d447387203296775798ce6c2b6e724df3b4fb141123d31d6eeba5068dc6d83dff96ad422a547e5c1ee3ca78edacaef9ab11e4f79037749a4ff01b970cf0ef671a6f95155d00d0c488f22b8973752b5cffe096cd00"], 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1a}, 0x94) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x801a01, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) (async) writev(r5, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffffd}, 0x1c) (async) listen(r0, 0x10040) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) (async) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/36, 0x24}, {&(0x7f0000000140)=""/163, 0xa3}, {&(0x7f0000000200)=""/66, 0x42}], 0x3) (async) syz_emit_ethernet(0x36, &(0x7f0000000980)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1a080045000028006500000206907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c02ffff9078000054b03fc829e17a35af81aa9c2f8f2874a8c4f4"], 0x0) 3.576007413s ago: executing program 2 (id=1033): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000003, 0x7ffff, &(0x7f0000006680)) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af83, &(0x7f0000000200)={0x1, 0x0, [{0xf000, 0x0, 0x0}]}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async, rerun: 64) getpgid(0x0) (rerun: 64) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) tee(r3, r2, 0x827, 0x8) (async, rerun: 64) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r2, 0x5761, &(0x7f0000000580)={0x5, 0x0, [{0x12, 0x7, 0x9, [0x4fd2, 0x101, 0x5, 0x2, 0x4, 0xc0be6eb, 0x84, 0xfffffffa]}, {0x0, 0x5, 0x8, [0x9e49, 0x80000001, 0x8, 0x86a, 0xfffffff9, 0xffff, 0x9, 0x1]}, {0x5, 0x5, 0xe, [0xfffffff5, 0x2, 0x56e, 0x7f, 0x200, 0x2, 0x100, 0xffffff7f]}, {0x1, 0x1, 0xe92, [0x6, 0x0, 0x9, 0xc5, 0x7f, 0xd, 0x3, 0x1ff]}, {0x8, 0x8, 0xa00, [0x1, 0x7, 0xa96, 0x6, 0x5, 0x8d, 0xad1, 0x200]}]}) (async, rerun: 64) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_USERDATA={0x0, 0xd, 0x1, 0x0, "c86fd4c7e4c89799acdcd6eae8c93782fb3416ceb008600e9e2bfd1434d5fde5a5cfb2f3dbd92e188f112976783a64abbc5a55350818cb27bd7f13639ca8315cea7062afa9fe5c5e3d338a900e4fcd9d45f9069ccbf4c1d81a46fe38dc56215853c549684cadfc01747fd4feb1075154af7694c9f53870"}]}, @NFT_MSG_NEWSETELEM={0x158, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x130, 0x3, 0x0, 0x1, [{0x12c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPRESSIONS={0x11c, 0xb, 0x0, 0x1, [{0x118, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x108, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0xed, 0x3, "5e947a2ce2e29c1a26ad9831267a7192296f0cd54bd7ec939552718c9ff8d8f985d0b18fff294addc4c333787bfcc7cf2afef33abcadf6175966b5cacaed1fb4c5fc0491e53205ffb13e843736b327d70fc48ccf3a3247e4ff02b4bb1cdf2074c5f33c1cd321355c656627695b48c85a5b60367d065b251c1e5e9020d3ac0df907e7758e54463bda7a222f8f97df38f36d6dab8a4bf27ec85f206b0fd143ef14fd50b64e3c28177e18eda9fa750f2b7a089b55d2b0d734e1f66dfa0634df987be10a4ce5febc28c25c73d93bf6ed0972d5a7458a9193bc34b7594cf27eaad80a54e90a1f41b5aad1d5"}, @NFTA_TARGET_INFO={0x13, 0x3, "425a8712aed1c26533f43e5eb9bba0"}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}], {0x14, 0x10}}, 0x1e4}}, 0x0) 3.45608928s ago: executing program 4 (id=1034): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac0000000000000000000000000000000000000000001200", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 3.400373311s ago: executing program 1 (id=1035): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r1 = timerfd_create(0x1, 0x0) set_mempolicy(0x3, &(0x7f0000000040)=0xe3, 0x8) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, &(0x7f0000000280)={0x14, 0x0, &(0x7f0000000240)=ANY=[@ANYRES8=r0]}, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$uac2(r2, 0x0, &(0x7f00000003c0)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12150001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$alg(0x26, 0x5, 0x0) socket$rds(0x15, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fee000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r1}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89b, 0xc000, 0x3, 0x1f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x4fe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r4 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x4000) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r3, 0x466, 0x7721, 0x16, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e1e, 0x19fb, @empty, 0x75c41ba2}, 0x1c) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x1000084, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000000)=ANY=[], 0xffc9) 3.239560462s ago: executing program 0 (id=1036): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_setup(0x267a, &(0x7f0000000140)={0x0, 0x52a0, 0x8000, 0x1, 0x8e}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b19, &(0x7f0000000140)={'wlan1\x00', @random="0100eb00"}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = socket$tipc(0x1e, 0x5, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x8000, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0x1d0, 0x21, 0x1, 0x0, 0x4, {{@in6=@mcast1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x180, 0x11, [{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2b, 0x2, 0x0, 0x3501, 0x2, 0x2}, {@in=@multicast1, @in=@local, @in6=@private2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x33, 0x4, 0x0, 0x34ff, 0x2, 0x2}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, @in=@local, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3c, 0x0, 0x0, 0x0, 0xa, 0x8}, {@in=@private=0xa010102, @in6=@empty, @in=@local, @in6=@dev={0xfe, 0x80, '\x00', 0x3f}, 0x3c, 0x0, 0x0, 0x3505, 0x2, 0xa}, {@in=@loopback, @in6=@remote, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x33, 0x4, 0x0, 0x3503, 0xa, 0x2}]}]}, 0x1d0}}, 0x0) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r7 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) ioctl$VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000000)={0x102, 0x9, 0x100, "002daf47637cda9dc9f1f3a2c645122da80930470b873fa400", 0x42474752}) bind$tipc(r6, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r3, 0x0, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/tty/drivers\x00', 0x0, 0x0) fcntl$lock(r8, 0x5, &(0x7f0000000000)={0x0, 0x2, 0x7fffffffffffffff, 0xb}) syz_usb_connect$cdc_ncm(0x3, 0x74, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x2, 0x1, 0xa2, 0x20, 0xfc}}]}}, 0xfffffffffffffffc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x9}]}}}, {0x28, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xec}}, 0x0) 2.931507921s ago: executing program 4 (id=1037): syz_emit_ethernet(0x11, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffff46a84d74094a88648e422af3755e23ce010aff4f6769f62615b27ed65eabaf6f8ed8cdc202b819ac01710f2a0b510d5004b81ee3e477858467"], 0x0) syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @local, {[@timestamp_addr={0x44, 0x14, 0xa, 0x1, 0x0, [{@multicast1}, {@multicast1, 0x108}]}, @generic={0x7, 0x6, "04030e00"}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 2.493076209s ago: executing program 4 (id=1038): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, &(0x7f0000000080)="360f7883b81e2626660fc7350ff4650666b95c0300000f32f4656df30f09650f01cfc6f8000f0d35", 0x28}], 0x1, 0x2, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = eventfd2(0x1635, 0x800) r4 = eventfd2(0x1, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000000)={r3, 0x7, 0x2, r4}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000021000100280d00000800000100bce60100"/36], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x84) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000140)="3e660fae7dbc0f79c4c4c14157300fc76900c4e1fbf023c4c3ddce3726f30fc7b7c7010000c4c1d5ebe8b9ec080000b805000000ba000000000f300f2206"}], 0xaaaac9b, 0xa, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x9000, 0x0, {}, 0x1}, {"00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005bcc00", "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008bc584c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f6f38740000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a4900"}}) r6 = fspick(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r6, 0x2, &(0x7f0000000180)='/dev/kvm\x00', &(0x7f0000000240)="2ecdf1abde6505677dd1bbea8763c04839388e753fcee59138a457990c8bd591c759cc8142607756d6b9f5fc11e2b2e975c75ef4f2dcead145307055ebfe8276f697743722b1d2a257681fc6a50ff473b967efa1f155e221d2182d1e25c7e836d2be5775371856646dc1d2047e107c4a3d", 0x71) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.194816203s ago: executing program 3 (id=1039): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="e50000000000000071100a0000000000e5000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000940)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000440)={0x4bc, 0x1, 0x5, 0x401, 0x0, 0x0, {0x7, 0x0, 0x4}, [{{0x254, 0x1, {{0x3, 0xffffffff}, 0x8, 0x8a, 0x7f, 0x2, 0x1c, 'syz0\x00', "a1340a5d1d556ec8227d1902debac6b22ee1c3bdcdff1b5cd26f900c35cc896a", "b07e07dc812beb7f730500656da7abeef488694918e99433fbc135ff0ab3256f", [{0x10, 0x4c, {0x3, 0x8}}, {0x6, 0x5, {0x2, 0x9a}}, {0x0, 0x400, {0x3, 0x3}}, {0x2, 0x7, {0x3, 0x6}}, {0x9, 0x9, {0x3, 0xfff}}, {0x868, 0x40, {0x3, 0x3}}, {0x8, 0x2, {0x2, 0xf815}}, {0x7fff, 0x7, {0x3, 0x5cbc}}, {0x8, 0x2889, {0x0, 0x3ff}}, {0xf, 0x97}, {0x6, 0x10, {0x2, 0xfffff38f}}, {0x0, 0x80, {0x2, 0x35}}, {0x7, 0x3, {0x3, 0x9b75}}, {0x6, 0x98, {0x0, 0x6604}}, {0x7, 0x3, {0x3, 0x1}}, {0x4, 0x6, {0x0, 0xc83}}, {0xd2db, 0x0, {0x1, 0x5}}, {0x0, 0x4, {0x0, 0x4}}, {0xf, 0x1ff, {0x1, 0x8}}, {0x4, 0x4, {0x0, 0x401}}, {0xb6ab, 0x5, {0x1}}, {0x4, 0xfffd, {0x0, 0x255}}, {0x3985, 0x10, {0x3, 0x2c}}, {0x3, 0x49f3, {0x2, 0x5}}, {0x5, 0x9, {0x1, 0x5}}, {0x2a8, 0x3ff, {0x1}}, {0x5, 0x9, {0x1, 0x8}}, {0x7, 0xffff, {0x0, 0xfffffff9}}, {0x400, 0x400, {0x3}}, {0x13, 0x1, {0x1, 0x401}}, {0x7, 0x5e, {0x0, 0x3}}, {0x7, 0x1, {0x1, 0xffff6970}}, {0xfff8, 0x8001, {0x3, 0x8}}, {0x7, 0xf, {0x3, 0x1}}, {0xe, 0x0, {0x0, 0x401}}, {0x401, 0x7540, {0x2, 0x6f}}, {0x0, 0x81, {0x2, 0x80000001}}, {0x7ff, 0x0, {0x3, 0x3}}, {0x7, 0x1, {0x3}}, {0xfff7, 0xa, {0x2, 0x3}}]}}}, {{0x254, 0x1, {{0x2}, 0x8, 0x5, 0x8, 0x0, 0x13, 'syz1\x00', "6a7f9b1ee1e47221c11fd4d98ad067cbcc6d49b31443073ab0b97974299a3b47", "41f48684bd7e5051e0cd74935056a6838c7737c588f021381dcfc46077fe8f45", [{0x5, 0x3, {0x3, 0x4}}, {0x1ff, 0xffff, {0x0, 0x8}}, {0x7f, 0x6, {0x0, 0x9}}, {0x351c, 0x9, {0x2, 0x401}}, {0x3, 0x52, {0x0, 0x2}}, {0x6, 0x9, {0x1, 0x7fff}}, {0x236, 0x5, {0x2, 0x34a}}, {0x2, 0xc40b, {0x2, 0x3c0}}, {0x7, 0xff97, {0x1, 0x8001}}, {0x7, 0x401, {0x2, 0xd481}}, {0x9f97, 0x40, {0x3, 0x7}}, {0x7, 0xff27, {0x0, 0x21}}, {0x6254, 0xff, {0x1, 0x8001}}, {0xe5, 0x35f, {0x2, 0xfffffff1}}, {0x81, 0x1, {0x0, 0x1}}, {0x8, 0x9, {0x1}}, {0x1, 0x9, {0x0, 0x7}}, {0x0, 0x81, {0x1}}, {0x9, 0x956, {0x3, 0xb7b5}}, {0x2, 0x0, {0x2, 0x8}}, {0x9, 0x7, {0x1, 0xfffffffa}}, {0x6, 0x0, {0x3, 0x80}}, {0x8, 0x2, {0x3, 0x7}}, {0x1, 0x6, {0x2}}, {0x0, 0x1, {0x1, 0x80}}, {0x9, 0x1, {0x3, 0xfffffff6}}, {0x83c4, 0x1ff, {0x1, 0x5}}, {0x1, 0x5, {0x0, 0x7f}}, {0x4, 0xfc00, {0x1}}, {0x1000, 0x7, {0x0, 0x2}}, {0x1, 0x8, {0x2, 0x17}}, {0x7, 0x2, {0x0, 0x7}}, {0x1, 0x1, {0x0, 0x8}}, {0x6, 0x4, {0x3, 0x42}}, {0x1, 0xc, {0x3, 0x8b8}}, {0xf795, 0xfff9, {0x0, 0x2}}, {0x8, 0x8001, {0x1, 0x8}}, {0x4, 0x7f, {0x2, 0x7}}, {0x0, 0xec, {0x1, 0x5}}, {0xfff7, 0x4, {0x1, 0x426}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x8000}, 0x85) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x80, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x3c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000) syz_open_dev$vim2m(&(0x7f00000001c0), 0xffffffffffffffc0, 0x2) 1.979594507s ago: executing program 3 (id=1040): r0 = syz_usb_connect(0x4, 0x36, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000ec0)={0x1c, &(0x7f00000001c0)={0x0, 0x9, 0x6, "3f5b4db21bea"}, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000002300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0xa0000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r4, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r5, 0x0, &(0x7f0000000480)='L', 0x1, 0x2}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r4, 0x3ba0, &(0x7f00000006c0)={0x48, 0x1, r5, 0x0, 0x1000, 0x2000}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r5, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x5}) splice(r2, 0x0, r1, 0x0, 0x90, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r6) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c4b20710200e0101"], 0x0) syz_usb_ep_write(r6, 0x81, 0x51, &(0x7f00000042c0)="b9425b44651dd23241238a1d2eab7fb56e03b6d9dfa33e504c8a93f8f845a4213b4b1e2a5c10111e617db60716da78c785d5f48b17bb1fa8023c213f7640de56c158ee0254ccd0bc7786c7a8c557f02442") write$FUSE_ENTRY(r3, &(0x7f0000000000)={0x90, 0xfffffffffffffffe, 0x0, {0x7, 0x2, 0x8, 0x5, 0xffff2bfc, 0x3, {0x2, 0x80f, 0x7fff, 0x7, 0x800000000000a, 0xffc, 0x8, 0x802, 0x8, 0x8000, 0x2, 0x0, 0x0, 0x6704, 0x38311813}}}, 0x90) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000500)={0x20, 0x18, 0x2, "c2ac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r3) sendmsg$TIPC_CMD_SET_NETID(r3, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000180)={0x24, r7, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x80000}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x10) syz_usb_control_io$uac3(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x40, 0x8, 0x38, {0x38, 0x21, "3cb52a60deb66aec8b1080fc5336ad8b574c48875fe34d2820eced94703a342b202edf238f75d49a2a25779c005411a908810349e475"}}, &(0x7f0000000080)={0x0, 0x3, 0x1d, @string={0x1d, 0x3, "96be2fad62ea8783465bf7a900a74146c99cd0d7746a5ed029488f"}}}, &(0x7f0000000540)={0x44, &(0x7f0000000200)={0x40, 0x0, 0xee, "ee8684e2f6abf650ef9c5ef76c2a9f88bc935b488642283bbb84d201df133c7953e9b9d120c44a0e6edf03ab0baa9f5cf9044d4ad11e5e61e3c18613cfc93a5f745825f516f1e0cf7b8d6179d4768a0821cda62e4be3385fa37de5b58ead361064e77ab995edb2ea03d03dcdaf37b041e5b9e3deed3a9dd764c85e7be60652635b73909f5862df7da3a51c45eae67d79d949442416d3bf2ddd26ab636768703389a2b63a53c2ae8388d69a61dac4690514d8c55dc94d1b26d5b776ac9516b0f2dc413bbb15b8a1e05bfe654a15cf774ec0749e427e080da91ce2bb811627de2732e4f1cf843ebf25eccc720073f6"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xb}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000380)={0x20, 0x81, 0x1, "d9"}, &(0x7f00000003c0)={0x20, 0x82, 0x3, "f2cc29"}, &(0x7f0000000400)={0x20, 0x83, 0x1, 'u'}, &(0x7f0000000440)={0x20, 0x84, 0x2, "d1fb"}, &(0x7f0000000480)={0x20, 0x85, 0x3, "811192"}}) 1.979233345s ago: executing program 4 (id=1041): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x507, 0x4) sendto$inet(r0, 0x0, 0x0, 0x24000081, 0x0, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d000905097a63"], 0x0) (async) syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d000905097a63"], 0x0) syz_open_dev$audion(&(0x7f0000000000), 0x23, 0x401) (async) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x23, 0x401) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f00000005c0)=0xfffffffd) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000080)=0x10104) 1.978698206s ago: executing program 2 (id=1042): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000180)={0x1, 0x0, 0x1, 0xb, 0x4}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000580)=[@text32={0x20, &(0x7f0000000200)="0f20e035200000000f22e066b842000f00d8b805000000b9a00000000f21c13e0f070fde460b0f0130670f01c2f2360f217ab9e90200000f32", 0x39}], 0x1, 0x1, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_RUN(r3, 0xae80, 0x0) (rerun: 32) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000000)={0x1, 0x2, 0xd, 0xfffffffffffeffff}) 1.565856425s ago: executing program 2 (id=1043): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') lseek(r5, 0xbce0, 0x0) getdents64(r5, 0xffffffffffffffff, 0x43) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r3, 0xc08c5336, &(0x7f00000001c0)={0x80000001, 0x5a9f, 0x1, 'queue0\x00', 0x4}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) syz_io_uring_setup(0xd0, &(0x7f0000000480)={0x0, 0x4525, 0x0, 0x0, 0x12d}, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x7d, &(0x7f00000004c0)={0x0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x400}, 0x90) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0) close(r2) write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) fanotify_init(0x200, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000140)={0xfffffffffffffffc, 0x23000, 0x1000, 0x8, 0x2}, 0x20) getsockopt$bt_hci(r2, 0x84, 0x1, 0x0, 0x0) 486.704476ms ago: executing program 4 (id=1044): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) recvmmsg(r1, &(0x7f0000002f80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x7f00}, 0x9}], 0x1, 0x2, 0x0) 259.324291ms ago: executing program 4 (id=1045): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r0, 0x4004e502, &(0x7f0000000040)=0x8) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$FUSE(r1, &(0x7f00000000c0)={0x2020}, 0x2020) fstat(r1, &(0x7f0000002100)) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002180), 0x2000, 0x0) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000002200)={0x0, &(0x7f00000021c0)=[@nested_amd_set_intercept={0x181, 0x30, {0x2, 0x7, 0x5}}], 0x30}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000002240)={0x2, 0x0, [{0x6, 0xc0000000, 0x0, 0x1, 0x8, 0xfffffffc, 0x8}, {0x80000000, 0x10000, 0x2, 0xfffffff9, 0x3, 0x400, 0x2}]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000022c0), r4) ioctl$KVM_GET_SREGS2(r3, 0x8140aecc, &(0x7f0000002300)) r5 = socket(0x23, 0x800, 0x368e8905) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = accept4(r6, &(0x7f0000002440)=@tipc=@name, &(0x7f00000024c0)=0x80, 0x80800) r8 = syz_open_dev$sndpcmp(&(0x7f0000002500), 0x7, 0x80602) fremovexattr(r8, &(0x7f0000002540)=@known='trusted.overlay.nlink\x00') ioctl$FS_IOC_MEASURE_VERITY(r3, 0xc0046686, &(0x7f0000002580)={0x0, 0x32, "bf15c976536f638aee3ec8e355bcab74400040a1777e4037dc962e83df7b88a7c07853897b55b3b957281d287913b45862b8"}) ioctl$KVM_TDX_GET_CPUID(r3, 0xc008aeba, &(0x7f0000002600)={0x5, 0x0, &(0x7f00000025c0)={0x1, 0x0, [{0x4, 0x92, 0x1, 0x3, 0x10001, 0x1, 0x4}]}}) r9 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f0000002640)={0x0, @in={{0x2, 0x4e21, @private=0xa010102}}, [0x1, 0x3, 0x2, 0x8d7a, 0x1, 0x7, 0x6, 0x668b19c, 0x10001, 0xff, 0x6, 0xffffffff, 0x0, 0xe, 0xe5]}, &(0x7f0000002740)=0x100) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f0000002780)={r10, 0x9d5}, 0x8) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000027c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r11 = syz_open_dev$amidi(&(0x7f0000002800), 0xe, 0x410001) ioctl$INCFS_IOC_FILL_BLOCKS(r11, 0x80106720, &(0x7f0000003ac0)={0x5, &(0x7f0000003a00)=[{0x5, 0x5b, &(0x7f0000002840)="ee7c2ce205e06a120f145a6ba103f65f66ba83e3a384c98cc291fe29e7662b8ad300031f4927e3859d6ca077ba5292e95adf748c897249afbeee59e9c70d6c759e19a6b68e6c108c19e93b85e3a5e67082e4921f0ac8a72bef13b2", 0x0, 0x1}, {0xe, 0x2e, &(0x7f00000028c0)="23783df3400e7edff611ab00132770adb5e5a9e4e0dd457694ed4ce628b920f702ce6d6f8605c3774a26c6ad00a2", 0x0, 0x1}, {0x8, 0x85, &(0x7f0000002900)="42763378a09ceb5a066fac3251c98c583fd4d09f8af92b7f0713dd24c7d9edf62488b27c06ed8f6fc01d2ac2302d6b325d04c269e03cc3e1e79378057736aacd7d72b07acde8621da76353deabbd28eaab1c56e64cb00a836ad5599a4b2aee708585e4c0681de2ef3e9a8fba8d566f0f022529bffa35b5753031d753070fb7cb8b7454e692", 0x1, 0x1}, {0x6, 0x1000, &(0x7f00000029c0)="b320542dbc4092558f3dd1b4202030201b2b39acae43b6c702d62a5ffd56918322d67144e1846aa1ff358546f93b936d8f4fc14afe4a99e6e1e7980c6b5d1eb9cd11a383013cc21ae5c2b1a6747a19f69d33c207443b0465bee39160a6180a191f1756f697fb560b2343356ce8d98e0a5e25b42245fe3ddf23da7489c89480a73ea770f3d530d79a52c2e43fca42ce35bf610f42ef91eb86e14172613216e3c4ab723a5d9011a346c2ffc882abcbf9a4eba9efeac28d064ac34b1ece2519342faf675ffc07a73c3734c134d3e281135ac4062c625f1a81a924834bd6f8b5b0194a73f9e72e583a2b57ebfea4cf1676a0907be00084e397d763e7741bc8df8954c77433ab0c2497c07ad6544c5a979b33b8c630698828e2954befa48c3803c4b5e9a8eecaaad82b1cf28daa2b631d9fb967a873dee4583ebc34e98f65bb85c405b73e0db0a4e711a6535685b2b221ec8bca592b8cbe861f6801554495399385e29dc922d5b9a4c602af153da884783878b3032cdbf3c61ece48168343ebc7d0a0b55e38db92f3b4238808bb51cf3e296df425d02913cd32a607c149e902418cf4fc6c62b129faf785187124df6efcc8111e7bf77cd3c38944e3ae5acff258fe4a6e78022fbe922d9143eeca25e2023dfb089c5d8385b9234324c331f5f00d43438830398a67218362e6e764336a70bb274ff540775aded20714ba09a50722f4225db9668c1cdac9e3886d6bdff12279d57fb6e5b931f1e4ffdd5dc692e6e951298928d5328eb2e8ddcb0164d5be1057cbc4a1737a3fffbfbef75f18bdcddebb291828c440cd644a80b6884b3dceac6801315716eac678e48d0c23833a48066fa0ab1f87e7cd50dcafa5d30a65b669b4a00dd675d1196f6cc9d9da743afe16fc5b4e24470e5f5d681d04ce5d7c7e7e355fef77a937252bd9950a201526afeef8f67f97a8d166d6e81868b868bd641c372a27bf73a6ec2e5fb569a9d2cbf77815e82974718f7729cfac87181b42a980625c6f229a472efb71516bb77893b963aa7ca3799033b45c5376060902fc37bf4203a59772281c52a764a3584997494e35669a8a52d088fe259507dd3cb57100c6dfcc4da3281922248d2fa73c90f82651283cdfb2ec616e2818c11230a813fa43152fb68b344d105b0c6016d75d8b6e29a23ebe89a2d2792a16aaf503e8d3447f4ba5f9284823643cae682aa4141c580130766503220e5e395e63606fded1e3392866db880f10afe6289e4a6043697a1f9e49fca120aa448c5f578305d8579dcf6303c2022b669e199c06933419024384ec9efd274d1f37d22deb90d2c7479b79c24faa246658853ee96ead4ea251e9fed5f44a952d4bb2310fcaa651574330f1c8eb5650645596f817c30a5c06097a2018baa8fe2d3be21ff959260947d1e2d09ea173a3a400e7035b384ff3053dc4b33f6f07499c2213d8c0d6c737b793125f54e2920625941242084361ac2e0d6f4b3458ce7d62ba47b3687bf9cc1e9235225ac5996337a585b14ddcf30821b5563ecc456941f256d07242f4c44a41ce469679977f35e380a4803ed0b49b0a0ac866dc050b854423ed48c51bd3099537962e80e65b1e3514f25e16bb2af355c7230cc3503c0e16c1f88cb129031f1e53c046e43fbd76e01f690283be7041d3b713c7e88cc802d090b11ecf2452d103c56a45b643b4e7eec603c4de506fcb1acdb63b24e1d792f1b73534e4bd7912050c05890cac691bae9db87c0ae93fe14f6d3f8b3fed3264b0c2bdb4fce62187da853eda108f63df24591577291a6e4db835cad850354945097ae8006b14a00d572175efdbfee3ae35ca82c8416aa9922f30a8fa88c854227e4f63bfca215ea355ae70cbbb57f216ab5e2b981f20f38d86813cb1c5d356cd1794f9fbb756dfef40e1f85ae363b8915d44fe35159b3d5c938f03ad3003ea4fbee2a63a881b0d690c0ad0a8332aa8349f67487a776c586302bc89bf6a6098487fa33d0b2029ecd306500b393c79db715b261d05ecc80160aa8c7d6385a2c85f485a4980ad79c1581517365e6ce2b4112535cc5f87fac867ee5bc79abc1b47d7f64cff61283fbf4d9dfe07dea20069e7a3a09e5ed32f1dbc7b802ba3d3094e89c5f22917d38eef1738ed3da38f01f05eca4edb5abb901b3a891e092b780eb7b1fe5b2b4262baed369453af8c28fb59b09e8eb9d26e1962435e40204be3259311fae8fc9292e8bb01d65f2171e5de19b97814477b82d57d65add0cf8886635520528e7d25f246293b5f6852da533976facdff9754330749e42d049437caeaac54b3701dbe0bddd3f5efa6ef578fc30a0fe4d024ae7de9c83b777c56050002a70aeee71bb0f6713876f638dee38504c3d0ed05558ae714320e895d8ed77fa5bbcec72b9960fab112432ff023f6fb04d8ace0eddb88506115cb62dd7e13647868f834137d917b5b045e9e848a4881183a7cebe9ab161d52331514c00aca2fde0e80a99b2d4f88d64e3b103cc60fe2907f2ea92ef5add543cfc2cf4cb5262f5704c1ee7b6dab7e0d611e00f464bf6e2cf6a57801200a92d28508044b8fd46eff8d4a68d3c39e8fe72b684f64c92df74c4141aeb264067cd1c90b6f15eb615f1842c97b35c84361a45c58eaebaae018ea427a796705a6406193e1712941a3109c7e7f75b5ff0269d415a006a3f37036ad98e21f36395e28b56f022598a07820e4e5885f478fefcfdc8c1eeae748115cf31953681a803bd0eafebef832e9a3b6dcd2db64e7000de1c60472ef81b7713b37361813c561aefb370ea6d3339e54f9e554968e862763a45eca22d63385b13d0cac07607c8df4fdd3be061a2744f5a81960ba2029f4cc400926396520fa46440b4f69a7c6a11a188937f9c88da04cb1abf0c889f2aea227979be5d905aa2109e3682af6bbdbf4a647744f7ac88f21dbb603ecf27863494a511f23060c2a31d4d8e730eb063296ceada4a7e87a079d3645d60634d8c937956be902f9acb87a624f760d17579083d37ddfe677f41622efcf9c41d6a5a968612d98283521b66a9e6a4c1c0e2f886e1bcc1773e026eed696c9bf92cb1bc8cc46e4b64662460986573a9d5d9da7c212c44d4239eeba6fce75b2136be1e6407282fa255d274b0d3ddc2dd69fdbfb3c34152bab327784b9815be78cea8930836c8bce2cfd4cc28b2d1704f53867b335a54c6d99419e2d3985b3e4179bef7b2d8365364ab53ef80acafa6ce94ebf75b3dce07218af97f3f779eb00d9179540279bcc2acd66eaeb839b518a57d1b6647bff043c63fec257190f9971dc9d3d734c564faba613d4041010391533efd59e8f809b7d6734e410d65910e25990cc1955ba6d1ce8b4e4ae89ea2eb5747f352a859f7b652db94eaed3e8d26710658985030f91359be0dadbb4854fe5751443f6b03c3ae6359c73c5f5246a2cb4b4f0d1ce1756473467d8aa53e623d70b6d453022459e10ef255b4da7699e9a03189365eb24b620a62d25989b87b9b82c8cd2e68c80d415dc978668ee1dd95bad4c55dafea5092acbb1d56bf5ef2ff4caac21c38fac21fbd05295ed3bac11fc8c547ff7a20582d98b8429e63f9679cc3880b56fb6fd6e64f442e8289cc1a6cc484e36bf8395a3e4e507304f6532b02218eddcf6ef22d3dad0a09a883f7d81a521e657ddc7205dcf5e39314809561b46793c19cb684a2a0eb2c03a18f9b8299acf5318ca6acf8ac1b7cc54de571b64604c00566e336d43a416b14284fb3b951e7dfd72e3cdac37164a07bef9cfdccb3a9107216479a956068416a869fc903c53d2688da63ffb8e5a0a3ba99df7c9fc515ca0bb22679cc4faef1ce1df48892cfade40460f68b8b08812e9d214c80ab815a71b7023e9bfa195071d213cbb8a5755f902327c4feead6c3e11b83cd38c872677bb7bdd491a71209eacd7c4428bb9ee8796c8ea8fd690d74233989f7393e6af5a29fc42096652c4127a3f98b5b4488c371966f5e238f893c11b8df56679ee7d6b234972f498c04e165c8cead1c11a3d0da21d60637bf000d81d6325b6568276de889a8d83138df710fc676bcebc3b33e168b8464fcd8074c4f0b945e3f32513e88fc9cca64b42a2714fc04b57431b3e77e2417d090098100b009cc6204cc5edf03462ede3d1e99a140d5fd808694da8d7cf7a6ebbc954fc19581bb87a36a56f43a8061c27db78f58eee4c80f707ac56e129ba10dcd4b9adafd4cb6aca763ea179136acbafe31dde416197a5fc9a72c97b30a073337af43d75e2f8d6c20a70cd6a3cf9e2b88ad4e309b1d6ae613db83cdb688c4af59f62a58776572baa6563c55cccc6ea2f2ee680fd9d804008122deac7ed8fe766bf87f8f13812da206e6c75190afff375b64ed42b48847b133fd49bc9c1fe4817fdc38cffecc781da01b5e5e92e65ad0d8577c1526d0a9ed1c8530ecb5e7f3c9205ec187c3ae3a601478873b396d76f44bd3175b7ac19560689c06d621e4e4c624a2f27aaa29e267e0765342b54d931a0ddda69b1a589dc43a1f2e6d44811290d41a047d34656682f24afc6e5f19be2b8e5d806bd53711471a3d075c25b7270ebb19d30c2e2cca39b5b68f9573897ed7e2079cf5ef159c6a56095bc9febf73778e6f967e6005a6782c8d403d19c951a1c898178531d4cf566fe5e4335f7e338de46e4de1eb24fcd785e8f15dd968bf4e6ba9951c169569fb4d7604105a2dc2ea2dfb6f869cfb2494bc128d505381179a608558e161374ce6578c366784b864fe123228ce6e48458089b664c57459e4762881d6138d7b0090d94f03d7bb118f5839e5db9f4ea0d7d31b777ae38c7a089a3e5c9ff92bbd2985a49d4c08d1a8cb9a73c51f39044a280cff5062b91ac9142e522994683368c70e7994472d749b53dad90ddb28614cb4033c617d06f6ed5953c9a39b1433bb125246a57912f9d38eab039599cf77798540896b7b9048c2819bb2e530e7f822e23e6b79ae0dc98b6a1ed173185d0fbb779126b4d85f001d9db0861800e7545d863d0cf70acd34b0a50e471869ad16ed6c62b0c6da1eb3b130a14563b72cd6b3246d525b4703e97a767c99f6749258cd32015f378d9556f6e8b11c0bef75a0174afe3bd8ba306a6ab44f49b45cb710eea37d8d6452ea3712e3ed9b6062c3ebc92e695c0d841b4e48f94e6c42ea5d88f025b6f70594c0a419c4723691e5a57752b15905fa23f9cc8af07492adeba37a596f207c7beedca8d0d026ff6107d3b15c0b5bfa391d0ec8ff4a83fa8ae98334bb767719d7e2ea03cf6c2c224522f2091b39c0887d4e32fefab689a29b3b5eb27e1b26cadde0b27060c7ca8e2ae104811cd9fdec80419d853d98a64eb55feb01ea9ad2a4cebc634b5ca567ec881e22b5ad7fb1b045222ce022ae71ca8a85455cbad07878096559e6e2ec335bc7844ee4283476afc8230fc5eacffbbb187fe55990ecea23d1e0ba8d6852688436fc63a7e527980abb017c54da6e7710b27a4f7b468f677b8c05c409bc1c8ce751399e9bd045035361a7a2587aa0c85be9525de8d8a0a4425d6b6d83fd9754e8016f00e2e2eb732cfb25eefe6703f27d962882909be76d7b834a877ad41550f9eb9f4ceac73fc6acb2e363950dcee269283f661c06ec85126f0e8158bd757315d0ae770e355c5fb61daf9dfb932796020de471a2d0ee55480350daad0784e4d63284671bdbf3bfc406d6b25b4c0b4b9f9d63f55ea919d94e5f495c56996bfacfd32d9343d8e90466fbec30feaf377e75b7b07f7f69a0ac133d5c191a39767825559ec8f06f0d272df11", 0x0, 0x1}, {0x0, 0x21, &(0x7f00000039c0)="b586bd2578682d0fc0068184bcf4853c1efba45f77733db9c840c1f2f865e5ce30"}]}) ioctl$SNDCTL_TMR_STOP(r2, 0x5403) setsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000003b00)={0x77359400}, 0x10) r12 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCDELDLCI(r12, 0x8981, &(0x7f0000003b40)={'vlan0\x00', 0x3848}) r13 = syz_genetlink_get_family_id$tipc(&(0x7f0000003bc0), r7) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000003c80)={&(0x7f0000003b80), 0xc, &(0x7f0000003c40)={&(0x7f0000003c00)={0x1c, r13, 0x4, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) 232.041322ms ago: executing program 2 (id=1046): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000280)={r0, 0x7, 0x104, 0x7ff}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) 0s ago: executing program 2 (id=1047): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x4a243) set_mempolicy(0x5, &(0x7f0000000000)=0x2, 0x6) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x4000040) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) close(r0) kernel console output (not intermixed with test programs): 1 but max is 0 [ 271.093311][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 271.104875][ T24] usb 2-1: config 0 has no interface number 0 [ 271.111160][ T24] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 271.125145][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.140647][ T24] usb 2-1: config 0 descriptor?? [ 271.159630][ T24] iowarrior 2-1:0.1: no interrupt-in endpoint found [ 271.190344][T11014] 8021q: adding VLAN 0 to HW filter on device bond2 [ 271.315902][T11069] bond2: (slave geneve3): making interface the new active one [ 271.365840][T11069] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 271.415533][ T24] usb 2-1: USB disconnect, device number 58 [ 271.542429][ T5767] usb 5-1: selecting invalid altsetting 0 [ 271.665017][ T5767] usb 5-1: USB disconnect, device number 27 [ 271.890615][ T9569] udevd[9569]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 272.212659][ T24] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 272.311416][T11146] netlink: 20 bytes leftover after parsing attributes in process `syz.3.629'. [ 272.390136][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 272.427087][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 272.473465][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 272.513764][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 272.559928][ T24] usb 3-1: New USB device found, idVendor=1235, idProduct=9012, bcdDevice= 0.40 [ 272.608749][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.654075][ T24] usb 3-1: Product: syz [ 272.675228][ T24] usb 3-1: Manufacturer: syz [ 272.700738][ T24] usb 3-1: SerialNumber: syz [ 272.981675][ T5719] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 273.088072][ T24] usb 3-1: USB disconnect, device number 44 [ 273.152115][ T5719] usb 5-1: Using ep0 maxpacket: 32 [ 273.164842][T10747] udevd[10747]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 273.197442][ T5719] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 273.206992][ T5719] usb 5-1: config 0 has no interface number 0 [ 273.219164][ T5719] usb 5-1: config 0 interface 184 has no altsetting 0 [ 273.250044][ T5719] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 273.269558][ T5719] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.287994][ T5719] usb 5-1: Product: syz [ 273.295791][ T5719] usb 5-1: Manufacturer: syz [ 273.302323][ T5719] usb 5-1: SerialNumber: syz [ 273.331397][T11180] FAULT_INJECTION: forcing a failure. [ 273.331397][T11180] name failslab, interval 1, probability 0, space 0, times 0 [ 273.345424][ T5719] usb 5-1: config 0 descriptor?? [ 273.365422][T11180] CPU: 1 UID: 0 PID: 11180 Comm: syz.3.634 Tainted: G L syzkaller #0 PREEMPT(full) [ 273.365454][T11180] Tainted: [L]=SOFTLOCKUP [ 273.365463][T11180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 273.365479][T11180] Call Trace: [ 273.365487][T11180] [ 273.365496][T11180] dump_stack_lvl+0xe8/0x150 [ 273.365526][T11180] should_fail_ex+0x412/0x560 [ 273.365561][T11180] should_failslab+0xa8/0x100 [ 273.365592][T11180] ? skb_clone+0x212/0x3a0 [ 273.365623][T11180] kmem_cache_alloc_noprof+0x87/0x650 [ 273.365657][T11180] skb_clone+0x212/0x3a0 [ 273.365691][T11180] __netlink_deliver_tap+0x404/0x850 [ 273.365735][T11180] ? netlink_deliver_tap+0x2e/0x1b0 [ 273.365766][T11180] netlink_deliver_tap+0x19c/0x1b0 [ 273.365797][T11180] netlink_sendskb+0x68/0x140 [ 273.365825][T11180] nlmsg_notify+0x12e/0x1a0 [ 273.365863][T11180] nf_tables_commit+0x9263/0xa7c0 [ 273.365909][T11180] ? nft_pernet+0x23/0x240 [ 273.365941][T11180] ? __pfx_nf_tables_commit+0x10/0x10 [ 273.365965][T11180] ? nft_delrule+0x90e/0xba0 [ 273.366006][T11180] ? nf_tables_delrule+0x107e/0x1270 [ 273.366041][T11180] ? __pfx_nf_tables_delrule+0x10/0x10 [ 273.366085][T11180] nfnetlink_rcv+0x1c19/0x27b0 [ 273.366169][T11180] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 273.366214][T11180] ? ref_tracker_free+0x693/0x840 [ 273.366276][T11180] ? __netlink_deliver_tap+0x807/0x850 [ 273.366317][T11180] ? netlink_deliver_tap+0x2e/0x1b0 [ 273.366346][T11180] ? netlink_deliver_tap+0x2e/0x1b0 [ 273.366383][T11180] netlink_unicast+0x75c/0x8e0 [ 273.366422][T11180] netlink_sendmsg+0x813/0xb40 [ 273.366464][T11180] ? __pfx_netlink_sendmsg+0x10/0x10 [ 273.366498][T11180] ? aa_sock_msg_perm+0xf1/0x1b0 [ 273.366528][T11180] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 273.366574][T11180] ____sys_sendmsg+0x972/0x9f0 [ 273.366604][T11180] ? __might_fault+0xaf/0x130 [ 273.366638][T11180] ? __pfx_____sys_sendmsg+0x10/0x10 [ 273.366679][T11180] ? import_iovec+0x73/0xa0 [ 273.366714][T11180] ___sys_sendmsg+0x2a5/0x360 [ 273.366744][T11180] ? __lock_acquire+0x6b5/0x2cf0 [ 273.366771][T11180] ? __pfx____sys_sendmsg+0x10/0x10 [ 273.366849][T11180] ? __fget_files+0x2a/0x420 [ 273.366881][T11180] ? __fget_files+0x3a0/0x420 [ 273.366918][T11180] __x64_sys_sendmsg+0x1bd/0x2a0 [ 273.366953][T11180] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 273.366996][T11180] ? __pfx_ksys_write+0x10/0x10 [ 273.367036][T11180] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.367059][T11180] do_syscall_64+0x15f/0xf80 [ 273.367089][T11180] ? trace_irq_disable+0x3b/0x140 [ 273.367120][T11180] ? clear_bhb_loop+0x40/0x90 [ 273.367146][T11180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.367167][T11180] RIP: 0033:0x7ffb56b9ce59 [ 273.367187][T11180] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.367205][T11180] RSP: 002b:00007ffb579f1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 273.367227][T11180] RAX: ffffffffffffffda RBX: 00007ffb56e15fa0 RCX: 00007ffb56b9ce59 [ 273.367242][T11180] RDX: 0000000000040000 RSI: 0000200000000080 RDI: 0000000000000003 [ 273.367255][T11180] RBP: 00007ffb579f1090 R08: 0000000000000000 R09: 0000000000000000 [ 273.367268][T11180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 273.367279][T11180] R13: 00007ffb56e16038 R14: 00007ffb56e15fa0 R15: 00007ffb56f3fa48 [ 273.367313][T11180] [ 273.851154][T11156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.860279][T11156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.870348][T11156] capability: warning: `syz.4.632' uses deprecated v2 capabilities in a way that may be insecure [ 274.194672][ T5719] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 274.219143][ T5719] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 274.288043][ T5719] usb 5-1: USB disconnect, device number 28 [ 275.086635][T11187] netlink: 4 bytes leftover after parsing attributes in process `syz.3.635'. [ 275.581898][ T24] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 275.700989][T11224] netlink: 40 bytes leftover after parsing attributes in process `syz.1.641'. [ 275.710085][ T5719] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 275.751666][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 275.768722][ T24] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 275.780974][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.790643][ T24] usb 3-1: Product: syz [ 275.795279][ T24] usb 3-1: Manufacturer: syz [ 275.799963][ T24] usb 3-1: SerialNumber: syz [ 275.809832][ T24] usb 3-1: config 0 descriptor?? [ 275.865162][ T5719] usb 4-1: config 253 has an invalid interface number: 82 but max is 0 [ 275.873894][ T5719] usb 4-1: config 253 has no interface number 0 [ 275.882920][ T5719] usb 4-1: config 253 interface 82 has no altsetting 0 [ 275.893028][ T5719] usb 4-1: New USB device found, idVendor=0586, idProduct=401a, bcdDevice=ec.7d [ 275.902393][ T5719] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.915129][ T5719] usb 4-1: Product: syz [ 275.925767][ T5719] usb 4-1: Manufacturer: syz [ 275.931408][ T5719] usb 4-1: SerialNumber: syz [ 276.042587][ T24] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: version d4.15 found at bus 003 address 045 [ 276.265322][T11213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.302301][T11213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.362591][T11213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.408400][T11213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.460816][ T5719] rtl8150 4-1:253.82: couldn't find required endpoints [ 276.480814][T11213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.500995][ T5719] rtl8150 4-1:253.82: probe with driver rtl8150 failed with error -5 [ 276.527530][T11213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.537854][T11250] netlink: 4 bytes leftover after parsing attributes in process `syz.4.643'. [ 276.550038][ T5719] usb 4-1: USB disconnect, device number 33 [ 276.586128][T11250] netlink: 8 bytes leftover after parsing attributes in process `syz.4.643'. [ 276.624850][T11250] netlink: 8 bytes leftover after parsing attributes in process `syz.4.643'. [ 276.998040][ T5719] usb 3-1: USB disconnect, device number 45 [ 277.034098][T11262] i2c i2c-1: failure sending STOP [ 277.269138][T11276] netdevsim netdevsim4 : renamed from netdevsim0 (while UP) [ 277.966450][T11296] 8021q: adding VLAN 0 to HW filter on device bond1 [ 278.017309][T11296] A link change request failed with some changes committed already. Interface geneve4 may have been left with an inconsistent configuration, please check. [ 278.034417][T11314] netlink: 40 bytes leftover after parsing attributes in process `syz.0.652'. [ 278.099506][ T5940] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 278.138927][ T5940] bond1: (slave veth3): making interface the new active one [ 278.187846][ T5940] bond1: active interface up! [ 279.701797][ T5767] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 279.861688][ T5767] usb 5-1: Using ep0 maxpacket: 32 [ 279.876703][ T5767] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 279.887066][ T5767] usb 5-1: config 0 has no interface number 0 [ 279.897111][ T5767] usb 5-1: too many endpoints for config 0 interface 89 altsetting 157: 129, using maximum allowed: 30 [ 279.909939][ T5767] usb 5-1: config 0 interface 89 altsetting 157 endpoint 0x82 has an invalid bInterval 56, changing to 9 [ 279.923448][ T5767] usb 5-1: config 0 interface 89 altsetting 157 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 279.938710][ T5767] usb 5-1: config 0 interface 89 has no altsetting 0 [ 279.958229][ T5767] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 279.967967][ T5767] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.979087][ T5767] usb 5-1: Product: syz [ 279.983722][ T5767] usb 5-1: Manufacturer: syz [ 279.990351][ T5767] usb 5-1: SerialNumber: syz [ 280.015431][ T5767] usb 5-1: config 0 descriptor?? [ 280.037472][ T5767] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 280.058412][ T5767] em28xx 5-1:0.89: Video interface 89 found: [ 280.400322][T11368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.442745][T11368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.452491][ T9] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 280.625728][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 280.640347][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.659929][ T9] usb 2-1: config 0 descriptor?? [ 280.677299][ T9] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 280.982137][ T10] usb 4-1: new low-speed USB device number 34 using dummy_hcd [ 281.182124][ T5767] em28xx 5-1:0.89: unknown em28xx chip ID (0) [ 281.188307][ T10] usb 4-1: Invalid ep0 maxpacket: 64 [ 281.307719][ T5767] em28xx 5-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 281.333622][ T5767] em28xx 5-1:0.89: board has no eeprom [ 281.348643][ T10] usb 4-1: new low-speed USB device number 35 using dummy_hcd [ 281.422464][ T5767] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 281.447607][ T5767] em28xx 5-1:0.89: analog set to bulk mode. [ 281.466119][ T24] em28xx 5-1:0.89: Registering V4L2 extension [ 281.541694][ T10] usb 4-1: Invalid ep0 maxpacket: 64 [ 281.554835][ T10] usb usb4-port1: attempt power cycle [ 281.693205][ T24] em28xx 5-1:0.89: reading from i2c device at 0x4a failed (error=-5) [ 281.745270][ T24] em28xx 5-1:0.89: reading from i2c device at 0x48 failed (error=-5) [ 281.775654][ T24] em28xx 5-1:0.89: reading from i2c device at 0x42 failed (error=-5) [ 281.805400][ T24] em28xx 5-1:0.89: reading from i2c device at 0x40 failed (error=-5) [ 281.840782][ T24] em28xx 5-1:0.89: Config register raw data: 0xfffffffb [ 281.871020][ T24] em28xx 5-1:0.89: AC97 chip type couldn't be determined [ 281.894399][ T24] em28xx 5-1:0.89: No AC97 audio processor [ 281.922205][T11394] netlink: 40 bytes leftover after parsing attributes in process `syz.2.663'. [ 281.943385][ T10] usb 4-1: new low-speed USB device number 36 using dummy_hcd [ 281.969883][ T24] usb 5-1: Decoder not found [ 281.988054][ T24] em28xx 5-1:0.89: failed to create media graph [ 282.008907][ T10] usb 4-1: Invalid ep0 maxpacket: 64 [ 282.017753][ T24] em28xx 5-1:0.89: V4L2 device video103 deregistered [ 282.105399][ T24] em28xx 5-1:0.89: Registering snapshot button... [ 282.162297][ T10] usb 4-1: new low-speed USB device number 37 using dummy_hcd [ 282.236797][ T10] usb 4-1: Invalid ep0 maxpacket: 64 [ 282.249053][T11401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.257933][ T24] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input14 [ 282.309841][ T10] usb usb4-port1: unable to enumerate USB device [ 282.328030][T11401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.371571][ T0] NOHZ tick-stop error: local softirq work is pending, handler #280!!! [ 282.504244][ T24] em28xx 5-1:0.89: Remote control support is not available for this card. [ 282.552064][ T1221] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 282.713887][ T1221] usb 3-1: device descriptor read/64, error -71 [ 282.869957][ T10] usb 5-1: USB disconnect, device number 29 [ 282.889403][ T10] em28xx 5-1:0.89: Disconnecting em28xx [ 282.897251][ T10] em28xx 5-1:0.89: Closing input extension [ 282.910058][ T10] em28xx 5-1:0.89: Deregistering snapshot button [ 282.981687][ T1221] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 283.015191][ T10] em28xx 5-1:0.89: Freeing device [ 283.123886][ T1221] usb 3-1: device descriptor read/64, error -71 [ 283.243461][ T1221] usb usb3-port1: attempt power cycle [ 283.581702][ T1221] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 283.602498][ T1221] usb 3-1: device descriptor read/8, error -71 [ 283.842689][ T1221] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 283.872611][ T1221] usb 3-1: device descriptor read/8, error -71 [ 283.994251][ T1221] usb usb3-port1: unable to enumerate USB device [ 284.111391][ T9] gspca_stv06xx: I2C: Read error writing address: -71 [ 284.169359][ T9] usb 2-1: USB disconnect, device number 59 [ 284.551662][ T1221] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 284.713601][ T1221] usb 5-1: config index 0 descriptor too short (expected 1068, got 27) [ 284.723732][ T1221] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 284.735917][ T1221] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 284.749480][ T1221] usb 5-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=7d.f9 [ 284.761744][ T1221] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.770104][ T1221] usb 5-1: Product: syz [ 284.774774][ T1221] usb 5-1: Manufacturer: syz [ 284.779485][ T1221] usb 5-1: SerialNumber: syz [ 284.790299][ T1221] usb 5-1: config 0 descriptor?? [ 285.011789][ T9] usb 5-1: USB disconnect, device number 30 [ 285.071739][ T1221] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 285.224281][ T1221] usb 4-1: Using ep0 maxpacket: 8 [ 285.242754][ T1221] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 285.260762][ T1221] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 285.271140][ T1221] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 285.281297][ T1221] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 285.295177][ T1221] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 285.314905][ T1221] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 285.324294][ T1221] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.386722][T11492] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 285.407393][T11492] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 285.546503][ T1221] usb 4-1: GET_CAPABILITIES returned 0 [ 285.559322][ T1221] usbtmc 4-1:16.0: can't read capabilities [ 285.578589][T11505] [U]  [ 285.706503][T11521] FAULT_INJECTION: forcing a failure. [ 285.706503][T11521] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 285.733033][T11521] CPU: 1 UID: 0 PID: 11521 Comm: syz.1.676 Tainted: G L syzkaller #0 PREEMPT(full) [ 285.733065][T11521] Tainted: [L]=SOFTLOCKUP [ 285.733073][T11521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 285.733084][T11521] Call Trace: [ 285.733093][T11521] [ 285.733101][T11521] dump_stack_lvl+0xe8/0x150 [ 285.733130][T11521] should_fail_ex+0x412/0x560 [ 285.733162][T11521] _copy_from_user+0x2d/0xb0 [ 285.733194][T11521] ___sys_recvmsg+0x175/0x590 [ 285.733231][T11521] ? __pfx____sys_recvmsg+0x10/0x10 [ 285.733267][T11521] ? __fget_files+0x2a/0x420 [ 285.733308][T11521] ? __fget_files+0x3a0/0x420 [ 285.733342][T11521] do_recvmmsg+0x334/0x800 [ 285.733381][T11521] ? __pfx_do_recvmmsg+0x10/0x10 [ 285.733424][T11521] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 285.733475][T11521] __x64_sys_recvmmsg+0x198/0x250 [ 285.733510][T11521] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 285.733569][T11521] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.733592][T11521] do_syscall_64+0x15f/0xf80 [ 285.733621][T11521] ? trace_irq_disable+0x3b/0x140 [ 285.733653][T11521] ? clear_bhb_loop+0x40/0x90 [ 285.733679][T11521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.733700][T11521] RIP: 0033:0x7fe4a499ce59 [ 285.733725][T11521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.733744][T11521] RSP: 002b:00007fe4a57c4028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 285.733766][T11521] RAX: ffffffffffffffda RBX: 00007fe4a4c15fa0 RCX: 00007fe4a499ce59 [ 285.733781][T11521] RDX: 0000000000000001 RSI: 0000200000002f80 RDI: 0000000000000004 [ 285.733794][T11521] RBP: 00007fe4a57c4090 R08: 0000000000000000 R09: 0000000000000000 [ 285.733811][T11521] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 285.733823][T11521] R13: 00007fe4a4c16038 R14: 00007fe4a4c15fa0 R15: 00007fe4a4d3fa48 [ 285.733856][T11521] [ 285.940339][ T24] usb 4-1: USB disconnect, device number 38 [ 286.071658][ T1221] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 286.163986][T11538] Context (ID=0x0) not attached to queue pair (handle=0x1:0x1ff) [ 286.233392][ T1221] usb 5-1: config 0 has an invalid interface number: 70 but max is 0 [ 286.242257][ T1221] usb 5-1: config 0 has no interface number 0 [ 286.248461][ T1221] usb 5-1: config 0 interface 70 altsetting 5 has a duplicate endpoint with address 0x6, skipping [ 286.259548][ T1221] usb 5-1: config 0 interface 70 altsetting 5 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 286.271658][ T1221] usb 5-1: config 0 interface 70 altsetting 5 endpoint 0x83 has invalid maxpacket 42809, setting to 64 [ 286.284238][ T1221] usb 5-1: config 0 interface 70 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 286.297668][ T1221] usb 5-1: config 0 interface 70 has no altsetting 0 [ 286.306567][ T1221] usb 5-1: New USB device found, idVendor=110a, idProduct=1150, bcdDevice=55.9e [ 286.315885][ T1221] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.326524][ T1221] usb 5-1: Product: syz [ 286.330753][ T1221] usb 5-1: Manufacturer: syz [ 286.335521][ T1221] usb 5-1: SerialNumber: syz [ 286.343011][ T1221] usb 5-1: config 0 descriptor?? [ 286.349777][T11515] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 286.411777][ T5719] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 286.564352][ T5719] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 286.574761][ T5719] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 286.585476][ T5719] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 286.597680][ T5719] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 286.606017][ T5719] usb 2-1: SerialNumber: syz [ 286.667492][ T1221] ti_usb_3410_5052 5-1:0.70: TI USB 3410 1 port adapter converter detected [ 286.684560][ T1221] usb 5-1: TI USB 3410 1 port adapter converter now attached to ttyUSB0 [ 286.704205][ T1221] usb 5-1: USB disconnect, device number 31 [ 286.726888][ T1221] ti_usb_3410_5052_1 ttyUSB0: TI USB 3410 1 port adapter converter now disconnected from ttyUSB0 [ 286.740275][ T1221] ti_usb_3410_5052 5-1:0.70: device disconnected [ 286.752242][ T9] usb 4-1: new low-speed USB device number 39 using dummy_hcd [ 286.830674][ T5719] usb 2-1: 0:2 : does not exist [ 286.871329][ T5719] usb 2-1: USB disconnect, device number 60 [ 286.907153][T10747] udevd[10747]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 286.935282][ T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 286.948016][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.960245][ T9] usb 4-1: config 0 has no interface number 0 [ 286.975267][ T9] usb 4-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 286.988352][ T9] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 286.997665][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.008569][ T9] usb 4-1: config 0 descriptor?? [ 287.019206][ T9] iowarrior 4-1:0.1: no interrupt-in endpoint found [ 287.224474][ T5719] usb 4-1: USB disconnect, device number 39 [ 287.668446][T11622] loop6: detected capacity change from 0 to 2640 [ 287.680066][T11622] Buffer I/O error on dev loop6, logical block 0, async page read [ 287.688334][ T5719] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 287.698805][T11622] Buffer I/O error on dev loop6, logical block 0, async page read [ 287.707481][T11622] Buffer I/O error on dev loop6, logical block 0, async page read [ 287.715921][T11622] Buffer I/O error on dev loop6, logical block 0, async page read [ 287.724360][T11622] Buffer I/O error on dev loop6, logical block 0, async page read [ 287.732680][T11622] Buffer I/O error on dev loop6, logical block 0, async page read [ 287.761172][T11622] Buffer I/O error on dev loop6, logical block 0, async page read [ 287.770640][T11622] Buffer I/O error on dev loop6, logical block 0, async page read [ 287.780789][T11622] ldm_validate_partition_table(): Disk read failed. [ 287.788028][T11622] Buffer I/O error on dev loop6, logical block 0, async page read [ 287.796557][T11622] Buffer I/O error on dev loop6, logical block 0, async page read [ 287.807979][T11622] Dev loop6: unable to read RDB block 0 [ 287.823170][T11622] loop6: unable to read partition table [ 287.838287][T11627] FAULT_INJECTION: forcing a failure. [ 287.838287][T11627] name failslab, interval 1, probability 0, space 0, times 0 [ 287.849228][T11622] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 287.853589][T11627] CPU: 0 UID: 0 PID: 11627 Comm: syz.3.687 Tainted: G L syzkaller #0 PREEMPT(full) [ 287.853678][T11627] Tainted: [L]=SOFTLOCKUP [ 287.853698][T11627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 287.853732][T11627] Call Trace: [ 287.853754][T11627] [ 287.853776][T11627] dump_stack_lvl+0xe8/0x150 [ 287.853862][T11627] should_fail_ex+0x412/0x560 [ 287.853947][T11627] should_failslab+0xa8/0x100 [ 287.854048][T11627] __kmalloc_noprof+0xe8/0x760 [ 287.854135][T11627] ? sock_kmalloc+0xd6/0x160 [ 287.854235][T11627] ? hash_recvmsg+0x130/0x840 [ 287.854321][T11627] sock_kmalloc+0xd6/0x160 [ 287.854406][T11627] hash_recvmsg+0x1d4/0x840 [ 287.854500][T11627] ? __pfx_hash_recvmsg+0x10/0x10 [ 287.854588][T11627] sock_recvmsg+0x172/0x1b0 [ 287.854667][T11627] ____sys_recvmsg+0x1e6/0x4a0 [ 287.854774][T11627] ? __pfx_____sys_recvmsg+0x10/0x10 [ 287.854901][T11627] ? import_iovec+0x73/0xa0 [ 287.854992][T11627] ___sys_recvmsg+0x215/0x590 [ 287.855092][T11627] ? __pfx____sys_recvmsg+0x10/0x10 [ 287.855179][T11627] ? __fget_files+0x2a/0x420 [ 287.855288][T11627] ? __fget_files+0x3a0/0x420 [ 287.855382][T11627] do_recvmmsg+0x334/0x800 [ 287.855485][T11627] ? __pfx_do_recvmmsg+0x10/0x10 [ 287.855655][T11627] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 287.855759][T11627] __x64_sys_recvmmsg+0x198/0x250 [ 287.855857][T11627] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 287.855963][T11627] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.856025][T11627] do_syscall_64+0x15f/0xf80 [ 287.856098][T11627] ? trace_irq_disable+0x3b/0x140 [ 287.856182][T11627] ? clear_bhb_loop+0x40/0x90 [ 287.856246][T11627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.856310][T11627] RIP: 0033:0x7ffb56b9ce59 [ 287.856364][T11627] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.856405][T11627] RSP: 002b:00007ffb579f1028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 287.856467][T11627] RAX: ffffffffffffffda RBX: 00007ffb56e15fa0 RCX: 00007ffb56b9ce59 [ 287.856507][T11627] RDX: 0000000000000001 RSI: 0000200000002f80 RDI: 0000000000000004 [ 287.856539][T11627] RBP: 00007ffb579f1090 R08: 0000000000000000 R09: 0000000000000000 [ 287.856577][T11627] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 287.856608][T11627] R13: 00007ffb56e16038 R14: 00007ffb56e15fa0 R15: 00007ffb56f3fa48 [ 287.856691][T11627] [ 288.125363][ T5719] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 288.149082][ T5719] usb 5-1: config 1 has no interface number 0 [ 288.156393][ T5719] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 288.170761][ T5719] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 288.182034][ T5719] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 8 [ 288.192187][ T5719] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.203435][ T5719] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.217038][T11629] program syz.3.688 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 288.230352][ T5719] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 288.241326][ T5719] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.271882][ T5719] usb 5-1: Product: syz [ 288.278969][ T5719] usb 5-1: Manufacturer: syz [ 288.286120][ T5719] usb 5-1: SerialNumber: syz [ 288.309125][T11602] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 288.320531][T11602] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 288.391343][T11630] loop5: detected capacity change from 0 to 7 [ 288.479408][T11630] Dev loop5: unable to read RDB block 7 [ 288.513003][T11630] loop5: unable to read partition table [ 288.547073][T11630] loop5: partition table beyond EOD, truncated [ 288.567755][ T5719] usb 5-1: Error in usbnet_get_endpoints (-71) [ 288.588795][T11630] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 288.643792][ T5719] usb 5-1: USB disconnect, device number 32 [ 288.760941][T11661] netlink: 4 bytes leftover after parsing attributes in process `syz.0.692'. [ 288.922043][ T1221] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 289.091842][ T1221] usb 3-1: Using ep0 maxpacket: 16 [ 289.118212][ T1221] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 289.154262][ T1221] usb 3-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 289.214971][ T1221] usb 3-1: config 0 interface 0 has no altsetting 0 [ 289.249563][ T1221] usb 3-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 289.290490][ T1221] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.329718][ T1221] usb 3-1: Product: syz [ 289.362826][ T1221] usb 3-1: Manufacturer: syz [ 289.383970][ T1221] usb 3-1: SerialNumber: syz [ 289.417091][ T1221] usb 3-1: config 0 descriptor?? [ 289.425837][T11694] FAULT_INJECTION: forcing a failure. [ 289.425837][T11694] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 289.507817][T11694] CPU: 0 UID: 0 PID: 11694 Comm: syz.3.698 Tainted: G L syzkaller #0 PREEMPT(full) [ 289.507850][T11694] Tainted: [L]=SOFTLOCKUP [ 289.507858][T11694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 289.507869][T11694] Call Trace: [ 289.507877][T11694] [ 289.507885][T11694] dump_stack_lvl+0xe8/0x150 [ 289.507914][T11694] should_fail_ex+0x412/0x560 [ 289.507946][T11694] _copy_to_user+0x31/0xb0 [ 289.507993][T11694] simple_read_from_buffer+0xe1/0x170 [ 289.508026][T11694] proc_fail_nth_read+0x1bb/0x230 [ 289.508055][T11694] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 289.508087][T11694] ? rw_verify_area+0x2a6/0x4d0 [ 289.508108][T11694] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 289.508127][T11694] vfs_read+0x20c/0xa70 [ 289.508175][T11694] ? __pfx___mutex_lock+0x10/0x10 [ 289.508196][T11694] ? __pfx_vfs_read+0x10/0x10 [ 289.508226][T11694] ? __fget_files+0x2a/0x420 [ 289.508254][T11694] ? __fget_files+0x3a0/0x420 [ 289.508271][T11694] ? __fget_files+0x2a/0x420 [ 289.508305][T11694] ksys_read+0x150/0x270 [ 289.508338][T11694] ? __pfx_ksys_read+0x10/0x10 [ 289.508374][T11694] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.508399][T11694] do_syscall_64+0x15f/0xf80 [ 289.508422][T11694] ? trace_irq_disable+0x3b/0x140 [ 289.508445][T11694] ? clear_bhb_loop+0x40/0x90 [ 289.508481][T11694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.508501][T11694] RIP: 0033:0x7ffb56b5d68e [ 289.508520][T11694] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 289.508537][T11694] RSP: 002b:00007ffb579f0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 289.508558][T11694] RAX: ffffffffffffffda RBX: 00007ffb579f16c0 RCX: 00007ffb56b5d68e [ 289.508569][T11694] RDX: 000000000000000f RSI: 00007ffb579f10a0 RDI: 0000000000000005 [ 289.508578][T11694] RBP: 00007ffb579f1090 R08: 0000000000000000 R09: 0000000000000000 [ 289.508587][T11694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.508595][T11694] R13: 00007ffb56e16038 R14: 00007ffb56e15fa0 R15: 00007ffb56f3fa48 [ 289.508636][T11694] [ 289.874246][ T1221] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 289.898403][ T1221] imon 3-1:0.0: unable to initialize intf0, err -19 [ 289.919852][ T1221] imon:imon_probe: failed to initialize context! [ 289.935583][ T1221] imon 3-1:0.0: unable to register, err -19 [ 289.991491][ T1221] usb 3-1: USB disconnect, device number 50 [ 290.561652][ T9] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 290.731639][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 290.745542][ T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 290.753584][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 290.765540][ T9] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 290.772286][ T1221] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 290.778983][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 290.796483][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 290.851660][ T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 290.860362][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 290.891304][ T9] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 290.924560][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 290.964336][ T1221] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 290.972359][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 290.976909][ T1221] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 291.004623][ T1221] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=fb.9d [ 291.013955][ T1221] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.029898][T11727] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 291.039365][ T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 291.050276][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 291.064143][ T9] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 291.078032][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 291.093875][ T1221] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 291.099958][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 291.116478][ T1221] usb 3-1: invalid MIDI in EP 0 [ 291.133726][ T9] usb 5-1: string descriptor 0 read error: -22 [ 291.147798][ T9] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 291.174493][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.253684][ T9] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 291.398839][ T1221] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 291.511629][ T5691] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 292.638323][ T5691] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 292.661635][ T5691] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 292.718998][ T5691] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 293.381124][ T5691] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 293.535073][ T5691] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 293.546238][ T1221] usb 5-1: USB disconnect, device number 33 [ 293.561683][ T5691] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 293.571221][ T5691] usb 4-1: SerialNumber: syz [ 293.658543][ T5719] usb 3-1: USB disconnect, device number 51 [ 294.061484][T11819] netlink: 32 bytes leftover after parsing attributes in process `syz.0.710'. [ 294.085486][ T5691] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -12 [ 294.174929][ T5691] usb 4-1: USB disconnect, device number 40 [ 294.374791][T11832] netlink: 28 bytes leftover after parsing attributes in process `syz.1.712'. [ 294.400234][T11832] netlink: 28 bytes leftover after parsing attributes in process `syz.1.712'. [ 294.595820][T11832] sctp: [Deprecated]: syz.1.712 (pid 11832) Use of int in max_burst socket option deprecated. [ 294.595820][T11832] Use struct sctp_assoc_value instead [ 295.127239][T11868] netlink: 'syz.4.717': attribute type 4 has an invalid length. [ 295.171175][T11868] netlink: 'syz.4.717': attribute type 2 has an invalid length. [ 295.182031][T11874] netlink: 12 bytes leftover after parsing attributes in process `syz.2.718'. [ 295.195045][T11868] netlink: 132 bytes leftover after parsing attributes in process `syz.4.717'. [ 295.241783][ T5767] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 295.416073][T11882] loop2: detected capacity change from 0 to 7 [ 295.426578][ T5767] usb 2-1: too many configurations: 36, using maximum allowed: 8 [ 295.438766][T11882] Dev loop2: unable to read RDB block 7 [ 295.446989][T11882] loop2: unable to read partition table [ 295.458288][T11882] loop2: partition table beyond EOD, truncated [ 295.478559][T11882] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 295.503113][ T5767] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 295.531520][ T5767] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.564840][ T5767] usb 2-1: Product: syz [ 295.579022][ T5767] usb 2-1: Manufacturer: syz [ 295.600110][ T5767] usb 2-1: SerialNumber: syz [ 295.646047][ T5767] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 295.760044][ T5719] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 295.806031][T11903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.844978][T11903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.882709][T11903] fuse: Bad value for 'fd' [ 296.882160][ T5719] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 296.900547][ T5719] ath9k_htc: Failed to initialize the device [ 297.054851][ T5719] usb 2-1: ath9k_htc: USB layer deinitialized [ 297.896292][ T5691] usb 2-1: USB disconnect, device number 61 [ 298.301833][T11943] syzkaller0: entered promiscuous mode [ 298.331094][T11943] syzkaller0: entered allmulticast mode [ 298.581669][ T5719] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 298.611831][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 298.786124][ T5719] usb 2-1: unable to get BOS descriptor or descriptor too short [ 298.836538][ T5719] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 298.910296][ T5719] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 298.966098][ T5719] usb 2-1: string descriptor 0 read error: -22 [ 298.992244][ T5719] usb 2-1: New USB device found, idVendor=0e41, idProduct=4159, bcdDevice= 0.40 [ 299.022415][ T5719] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.075599][ T5719] usb 2-1: 0:1 : does not exist [ 299.089214][ T5719] usb 2-1: 0:2 : does not exist [ 299.243687][ T5691] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 299.351835][ T5719] snd_usb_podhd 2-1:1.0: Line 6 POD HD500X found [ 299.380809][ T5719] usb 2-1: selecting invalid altsetting 1 [ 299.399888][ T5719] snd_usb_podhd 2-1:1.0: set_interface failed [ 299.416499][ T5719] snd_usb_podhd 2-1:1.0: Line 6 POD HD500X now disconnected [ 299.436583][ T5719] snd_usb_podhd 2-1:1.0: probe with driver snd_usb_podhd failed with error -22 [ 299.437886][ T5691] usb 4-1: Using ep0 maxpacket: 8 [ 299.496484][ T5691] usb 4-1: config 6 has an invalid interface number: 2 but max is 0 [ 299.517817][ T5691] usb 4-1: config 6 has no interface number 0 [ 299.544028][ T5691] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 299.577018][ T5691] usb 4-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 299.614714][ T5691] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 299.641507][ T5691] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 299.667499][ T5691] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 299.691612][ T5691] usb 4-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 299.711183][ T5691] usb 4-1: Product: syz [ 299.732531][ T5691] usb 4-1: Manufacturer: syz [ 299.753246][ T5691] usb 4-1: SerialNumber: syz [ 299.793043][ T5691] hso 4-1:6.2: Failed to find BULK eps [ 299.896982][T11949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.915570][T11949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.992631][T12009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.028418][T12009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.067491][ T5719] usb 4-1: USB disconnect, device number 41 [ 300.181678][ T5691] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 300.378441][ T5691] usb 3-1: config 0 has an invalid interface number: 205 but max is 0 [ 300.404875][ T5691] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 300.432007][ T5691] usb 3-1: config 0 has no interface number 0 [ 300.446319][ T5691] usb 3-1: config 0 interface 205 has no altsetting 0 [ 300.461399][ T5719] usb 2-1: USB disconnect, device number 62 [ 300.525742][ T5691] usb 3-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 300.539904][ T5691] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.548947][ T5691] usb 3-1: Product: syz [ 300.554692][ T5691] usb 3-1: Manufacturer: syz [ 300.561266][ T5691] usb 3-1: SerialNumber: syz [ 300.616011][ T5691] usb 3-1: config 0 descriptor?? [ 300.641482][ T5691] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 300.654935][ T5691] dvb-usb: bulk message failed: -22 (3/0) [ 300.769454][ T5691] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 300.792835][ T5691] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 300.821691][ T5767] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 300.829553][ T5691] usb 3-1: media controller created [ 300.846109][ T5691] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 300.902532][ T5691] dvb-usb: bulk message failed: -22 (6/0) [ 300.910778][ T5691] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 300.930193][ T5691] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input15 [ 300.953097][ T5691] dvb-usb: schedule remote query interval to 150 msecs. [ 300.968874][ T5691] dvb-usb: bulk message failed: -22 (3/0) [ 301.003876][ T5767] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 301.012969][ T5691] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 301.029446][ T5767] usb 5-1: config 0 has no interface number 0 [ 301.049945][ T5767] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 301.073048][ T5767] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.121853][ T5767] usb 5-1: Product: syz [ 301.134913][ T5691] dvb-usb: bulk message failed: -22 (1/0) [ 301.136006][ T5767] usb 5-1: Manufacturer: syz [ 301.178657][ T5691] dvb-usb: error while querying for an remote control event. [ 301.180709][ T5767] usb 5-1: SerialNumber: syz [ 301.224121][ T5767] usb 5-1: config 0 descriptor?? [ 301.383230][ T5691] dvb-usb: bulk message failed: -22 (1/0) [ 301.396147][ T5691] dvb-usb: error while querying for an remote control event. [ 301.452391][ T5767] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state [ 301.494021][ T5767] usb 5-1: Direct firmware load for dvb-usb-ec168.fw failed with error -2 [ 301.512411][ T5767] usb 5-1: Falling back to sysfs fallback for: dvb-usb-ec168.fw [ 301.581893][ T5691] dvb-usb: bulk message failed: -22 (1/0) [ 301.595448][ T5691] dvb-usb: error while querying for an remote control event. [ 301.656053][T12032] dvb-usb: bulk message failed: -22 (4/0) [ 301.771716][ T5720] dvb-usb: bulk message failed: -22 (1/0) [ 301.778481][ T5720] dvb-usb: error while querying for an remote control event. [ 301.952108][ T5720] dvb-usb: bulk message failed: -22 (1/0) [ 301.967989][ T5720] dvb-usb: error while querying for an remote control event. [ 302.141670][ T5691] dvb-usb: bulk message failed: -22 (1/0) [ 302.164268][ T5691] dvb-usb: error while querying for an remote control event. [ 302.361641][ T5720] dvb-usb: bulk message failed: -22 (1/0) [ 302.387281][ T5720] dvb-usb: error while querying for an remote control event. [ 302.572297][ T5720] dvb-usb: bulk message failed: -22 (1/0) [ 302.587870][ T5720] dvb-usb: error while querying for an remote control event. [ 302.774356][ T5720] dvb-usb: bulk message failed: -22 (1/0) [ 302.796735][ T5720] dvb-usb: error while querying for an remote control event. [ 302.997120][ T5720] dvb-usb: bulk message failed: -22 (1/0) [ 303.025461][ T5720] dvb-usb: error while querying for an remote control event. [ 303.215391][ T5720] dvb-usb: bulk message failed: -22 (1/0) [ 303.238680][ T5720] dvb-usb: error while querying for an remote control event. [ 303.409098][ T5719] usb 3-1: USB disconnect, device number 52 [ 303.436502][ T5720] dvb-usb: bulk message failed: -22 (1/0) [ 303.475229][ T5720] dvb-usb: error while querying for an remote control event. [ 303.709140][ T5719] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 304.118608][T12140] netlink: 24 bytes leftover after parsing attributes in process `syz.2.747'. [ 304.501659][ T1221] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 304.589817][T12152] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 304.681840][ T1221] usb 2-1: Using ep0 maxpacket: 32 [ 304.697334][ T1221] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 304.718404][ T1221] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 304.750242][ T1221] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 304.775233][ T1221] usb 2-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 304.784736][ T1221] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.805145][ T1221] usb 2-1: Product: syz [ 304.809466][ T1221] usb 2-1: Manufacturer: syz [ 304.815039][ T1221] usb 2-1: SerialNumber: syz [ 304.828753][ T1221] usb 2-1: config 0 descriptor?? [ 304.855486][ T1221] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input16 [ 304.918148][ C1] xpad 2-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 305.089198][ C1] xpad 2-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 305.157988][T12142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.194840][T12142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.231048][ C1] xpad 2-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 305.246361][ T5720] usb 2-1: USB disconnect, device number 63 [ 305.246532][ C1] xpad 2-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 305.570970][T12186] netlink: 'syz.0.752': attribute type 1 has an invalid length. [ 305.626906][T12186] bond2: entered promiscuous mode [ 305.639156][T12186] 8021q: adding VLAN 0 to HW filter on device bond2 [ 305.690143][T12186] 8021q: adding VLAN 0 to HW filter on device bond2 [ 305.704961][T12186] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 305.725814][T12186] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 305.754337][T12186] bond2: (slave ip6gre1): making interface the new active one [ 305.769061][T12186] ip6gre1: entered promiscuous mode [ 305.786190][T12186] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 305.941855][T12226] fuse: Bad value for 'rootmode' [ 306.192026][ T5720] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 306.341712][ T5720] usb 2-1: Using ep0 maxpacket: 16 [ 306.349000][ T5720] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 306.359345][ T5720] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 306.368655][ T5720] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 306.378795][ T5720] usb 2-1: config 1 interface 1 has no altsetting 0 [ 306.387818][ T5720] usb 2-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 306.397695][ T5720] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.406425][ T5720] usb 2-1: Product: syz [ 306.410663][ T5720] usb 2-1: Manufacturer: syz [ 306.416587][ T5720] usb 2-1: SerialNumber: syz [ 306.501096][T12239] netlink: 20 bytes leftover after parsing attributes in process `syz.0.755'. [ 306.544435][T12241] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 306.632914][T12226] netlink: 'syz.1.753': attribute type 1 has an invalid length. [ 306.716771][T12226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.814626][T12274] bond0: (slave geneve2): making interface the new active one [ 306.878673][T12274] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 306.917859][ T5720] usb 2-1: selecting invalid altsetting 0 [ 307.088247][ T5720] usb 2-1: USB disconnect, device number 64 [ 307.267244][ T9603] udevd[9603]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 307.428029][T12274] syz.1.753 (12274) used greatest stack depth: 18336 bytes left [ 307.593088][T12343] netlink: 12 bytes leftover after parsing attributes in process `syz.1.759'. [ 307.646276][T12343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.759'. [ 308.767001][T12387] netlink: 20 bytes leftover after parsing attributes in process `syz.0.763'. [ 308.813694][T12387] netlink: 20 bytes leftover after parsing attributes in process `syz.0.763'. [ 308.898572][T12392] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.1 [ 308.932633][T12392] PKCS7: Only support pkcs7_signedData type [ 309.346004][T12407] netlink: 20 bytes leftover after parsing attributes in process `syz.2.767'. [ 309.812994][T12414] loop2: detected capacity change from 0 to 7 [ 309.841275][T12414] Dev loop2: unable to read RDB block 7 [ 309.856340][T12414] loop2: unable to read partition table [ 309.868487][T12414] loop2: partition table beyond EOD, truncated [ 309.888565][T12414] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 309.947450][ T4993] Dev loop2: unable to read RDB block 7 [ 309.956393][ T4993] loop2: unable to read partition table [ 309.971938][ T4993] loop2: partition table beyond EOD, truncated [ 310.602092][ T5720] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 310.763046][ T5720] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 310.793342][ T5720] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 310.807403][ T29] kauditd_printk_skb: 126 callbacks suppressed [ 310.807417][ T29] audit: type=1326 audit(1779261912.472:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12436 comm="syz.0.774" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fa619ce59 code=0x7ffc0000 [ 310.846217][ T5720] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 310.887638][ T5720] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 310.920047][ T5720] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.930783][ T29] audit: type=1326 audit(1779261912.472:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12436 comm="syz.0.774" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fa619ce59 code=0x7ffc0000 [ 310.972663][ T5720] usb 3-1: Product: syz [ 310.980784][ T5720] usb 3-1: Manufacturer: syz [ 310.991165][ T5720] usb 3-1: SerialNumber: syz [ 311.028086][ T5720] hub 3-1:1.0: bad descriptor, ignoring hub [ 311.035570][ T29] audit: type=1326 audit(1779261912.472:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12436 comm="syz.0.774" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7fa619ce59 code=0x7ffc0000 [ 311.067472][ T5720] hub 3-1:1.0: probe with driver hub failed with error -5 [ 311.101815][T12450] netlink: 4 bytes leftover after parsing attributes in process `syz.1.776'. [ 311.113418][ T29] audit: type=1326 audit(1779261912.472:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12436 comm="syz.0.774" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fa619ce59 code=0x7ffc0000 [ 311.165317][ T29] audit: type=1326 audit(1779261912.472:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12436 comm="syz.0.774" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fa619ce59 code=0x7ffc0000 [ 311.227662][ T29] audit: type=1326 audit(1779261912.472:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12436 comm="syz.0.774" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f7fa619ce59 code=0x7ffc0000 [ 311.260212][ T5720] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 53 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 311.341648][ T1221] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 311.350076][ T29] audit: type=1326 audit(1779261912.472:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12436 comm="syz.0.774" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fa619ce59 code=0x7ffc0000 [ 311.575718][ T1221] usb 4-1: Using ep0 maxpacket: 16 [ 311.580688][T12460] CUSE: unknown device info "€" [ 311.601994][ T1221] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 311.617709][T12460] CUSE: unknown device info "Ö" [ 311.651922][ T1221] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 311.655623][T12460] CUSE: unknown device info "" [ 311.703267][ T1221] usb 4-1: config 0 interface 0 has no altsetting 0 [ 311.723964][ T1221] usb 4-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 311.751794][ T1221] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.758699][T12460] CUSE: unknown device info "€" [ 311.778697][T12460] CUSE: unknown device info "ðÿÿÿ" [ 311.780864][ T1221] usb 4-1: Product: syz [ 311.794510][ T1221] usb 4-1: Manufacturer: syz [ 311.794518][T12460] CUSE: unknown device info "" [ 311.794532][T12460] CUSE: unknown device info "" [ 311.825635][ T1221] usb 4-1: SerialNumber: syz [ 311.844781][ T1221] usb 4-1: config 0 descriptor?? [ 311.852955][T12460] CUSE: unknown device info "" [ 311.892277][T12460] CUSE: zero length info key specified [ 312.037394][ T5720] usb 3-1: USB disconnect, device number 53 [ 312.072204][ T5720] usblp0: removed [ 312.119449][ T1221] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 312.132982][T12475] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.140715][T12475] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.167066][ T1221] imon 4-1:0.0: unable to initialize intf0, err -19 [ 312.182468][T12475] bridge0: entered allmulticast mode [ 312.184973][ T1221] imon:imon_probe: failed to initialize context! [ 312.203286][ T1221] imon 4-1:0.0: unable to register, err -19 [ 312.210230][T12475] bridge_slave_1: left allmulticast mode [ 312.220255][ T1221] usb 4-1: USB disconnect, device number 42 [ 312.227308][T12475] bridge_slave_1: left promiscuous mode [ 312.241879][T12475] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.280062][T12475] bridge_slave_0: left allmulticast mode [ 312.289136][T12475] bridge_slave_0: left promiscuous mode [ 312.298296][T12475] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.765610][T12534] loop2: detected capacity change from 0 to 7 [ 312.775428][T12534] Dev loop2: unable to read RDB block 7 [ 312.782698][T12534] loop2: unable to read partition table [ 312.788631][T12534] loop2: partition table beyond EOD, truncated [ 312.804657][T12534] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 312.889007][T12545] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 313.370608][T12554] KVM: debugfs: duplicate directory 12554-8 [ 313.980497][T12577] netlink: 8 bytes leftover after parsing attributes in process `syz.4.787'. [ 313.992089][T12573] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 314.022066][T12577] netlink: 12 bytes leftover after parsing attributes in process `syz.4.787'. [ 314.049899][T12579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.787'. [ 315.021821][ T5719] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 315.191966][ T5719] usb 4-1: Using ep0 maxpacket: 16 [ 315.227089][ T5719] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.306677][ T5719] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 315.350610][ T5719] usb 4-1: config 0 interface 0 has no altsetting 0 [ 315.389545][ T5719] usb 4-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 315.450595][ T5719] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.505372][ T5719] usb 4-1: Product: syz [ 315.539650][ T5719] usb 4-1: Manufacturer: syz [ 315.569699][ T5719] usb 4-1: SerialNumber: syz [ 315.616146][ T5719] usb 4-1: config 0 descriptor?? [ 315.881349][ T5719] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 315.909185][ T5719] imon 4-1:0.0: unable to initialize intf0, err -19 [ 315.948638][ T5719] imon:imon_probe: failed to initialize context! [ 315.976099][ T5719] imon 4-1:0.0: unable to register, err -19 [ 316.014382][ T5719] usb 4-1: USB disconnect, device number 43 [ 316.547929][ T29] audit: type=1326 audit(1779261918.212:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12635 comm="syz.1.798" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4a499ce59 code=0x7ffc0000 [ 316.630987][ T29] audit: type=1326 audit(1779261918.212:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12635 comm="syz.1.798" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7fe4a499ce59 code=0x7ffc0000 [ 316.704217][ T29] audit: type=1326 audit(1779261918.282:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12635 comm="syz.1.798" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4a499ce59 code=0x7ffc0000 [ 316.772071][ T29] audit: type=1326 audit(1779261918.292:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12635 comm="syz.1.798" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fe4a499ce59 code=0x7ffc0000 [ 316.869160][ T29] audit: type=1326 audit(1779261918.292:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12635 comm="syz.1.798" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4a499ce59 code=0x7ffc0000 [ 316.971332][ T29] audit: type=1326 audit(1779261918.292:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12635 comm="syz.1.798" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe4a499ce59 code=0x7ffc0000 [ 316.999355][ T5720] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 317.041426][ T29] audit: type=1326 audit(1779261918.292:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12635 comm="syz.1.798" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4a499ce59 code=0x7ffc0000 [ 317.114645][ T29] audit: type=1326 audit(1779261918.292:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12635 comm="syz.1.798" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe4a499ce59 code=0x7ffc0000 [ 317.156237][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.163085][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.184131][ T5626] usb 1-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 317.203736][ T5720] usb 4-1: Using ep0 maxpacket: 32 [ 317.222603][ T5720] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.249551][ T5720] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.263143][ T29] audit: type=1326 audit(1779261918.482:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12635 comm="syz.1.798" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4a499ce59 code=0x7ffc0000 [ 317.291999][ T5626] dvb_usb_az6007 1-1:0.0: probe with driver dvb_usb_az6007 failed with error -110 [ 317.309437][ T5720] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 317.338025][ T5720] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.353073][ T5626] usb 1-1: USB disconnect, device number 29 [ 317.402605][ T29] audit: type=1326 audit(1779261918.482:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12635 comm="syz.1.798" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4a499ce59 code=0x7ffc0000 [ 317.451442][ T5720] usb 4-1: config 0 descriptor?? [ 317.903721][ T5720] ft260 0003:0403:6030.0009: unknown main item tag 0x0 [ 317.929215][ T5720] ft260 0003:0403:6030.0009: unknown main item tag 0x0 [ 318.056123][T12696] Cannot find add_set index 1 as target [ 318.078809][ T5720] ft260 0003:0403:6030.0009: chip code: 0000 0000 [ 318.268653][T12696] kvm: user requested TSC rate below hardware speed [ 318.286103][ T5720] ft260 0003:0403:6030.0009: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 318.332096][T12696] kvm: vcpu 2: requested 148514 ns lapic timer period limited to 200000 ns [ 318.364405][T12696] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 318.480486][ T5720] ft260 0003:0403:6030.0009: failed to retrieve status: -32, no wakeup [ 318.531687][ T1221] usb 3-1: new full-speed USB device number 54 using dummy_hcd [ 318.709404][ T1221] usb 3-1: unable to get BOS descriptor or descriptor too short [ 318.741465][ T1221] usb 3-1: not running at top speed; connect to a high speed hub [ 318.782610][ T1221] usb 3-1: config 1 has an invalid descriptor of length 242, skipping remainder of the config [ 318.821415][ T1221] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 318.872761][ T1221] usb 3-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 318.891405][ T5720] usb 4-1: USB disconnect, device number 44 [ 318.915723][ T1221] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.943150][ T1221] usb 3-1: Product: syz [ 318.967641][ T1221] usb 3-1: Manufacturer: syz [ 318.979080][ T1221] usb 3-1: SerialNumber: syz [ 319.475871][ T1221] usb 3-1: 3:0: failed to get current value for ch 0 (-71) [ 319.516240][ T1221] usb 3-1: 3:0: cannot get min/max values for control 2 (id 3) [ 319.545418][ T1221] usb 3-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 319.576388][ T1221] usb 3-1: [3] FU [LFE Playback Volume] ch = 1, val = 0/1/1 [ 319.612484][ T1221] usb 3-1: 3:0: cannot get min/max values for control 3 (id 3) [ 319.647401][ T1221] usb 3-1: 3:0: cannot get min/max values for control 4 (id 3) [ 319.685806][ T1221] usb 3-1: 3:0: cannot get min/max values for control 5 (id 3) [ 319.716871][ T1221] usb 3-1: 3:0: failed to get current value for ch 0 (-71) [ 319.754846][ T1221] usb 3-1: 3:0: cannot get min/max values for control 8 (id 3) [ 319.779106][ T1221] usb 3-1: 3:0: cannot get min/max values for control 11 (id 3) [ 319.799295][ T1221] usb 3-1: 3:0: cannot get min/max values for control 12 (id 3) [ 319.822426][ T1221] usb 3-1: 3:0: failed to get current value for ch 0 (-71) [ 319.901871][ T1221] usb 3-1: 3:0: cannot get min/max values for control 3 (id 3) [ 319.924718][ T1221] usb 3-1: 3:0: cannot get min/max values for control 5 (id 3) [ 319.971844][ T5704] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 320.011149][ T1221] usb 3-1: USB disconnect, device number 54 [ 320.095593][T10747] udevd[10747]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 320.152028][ T5704] usb 2-1: Using ep0 maxpacket: 16 [ 320.168752][ T5704] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.203205][ T5704] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.223556][ T5704] usb 2-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 320.236892][ T5704] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.252316][ T24] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 320.263667][ T5704] usb 2-1: config 0 descriptor?? [ 320.431659][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 320.443632][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 320.462255][ T24] usb 1-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 320.486908][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 320.507048][ T24] usb 1-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 320.538094][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.555411][ T5704] usbhid 2-1:0.0: can't add hid device: -71 [ 320.570871][ T24] usb 1-1: Product: syz [ 320.579836][ T5704] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 320.589709][ T24] usb 1-1: Manufacturer: syz [ 320.595291][ T24] usb 1-1: SerialNumber: syz [ 320.612906][ T5704] usb 2-1: USB disconnect, device number 65 [ 320.630553][ T24] usb 1-1: config 0 descriptor?? [ 320.786497][T12789] netlink: 76 bytes leftover after parsing attributes in process `syz.2.813'. [ 320.894534][ T24] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 320.936635][ T24] imon 1-1:0.0: unable to initialize intf0, err -19 [ 320.947671][ T24] imon:imon_probe: failed to initialize context! [ 320.978053][ T24] imon 1-1:0.0: unable to register, err -19 [ 321.014542][ T24] usb 1-1: USB disconnect, device number 30 [ 322.271805][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 323.117723][T12860] netlink: 'syz.1.821': attribute type 16 has an invalid length. [ 323.142169][T12860] netlink: 'syz.1.821': attribute type 17 has an invalid length. [ 323.251894][ T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 323.275573][T12841] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.332468][T12841] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.662189][ T5704] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 323.728323][T12860] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.735542][T12860] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.796277][T12860] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.805104][T12860] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.095496][T12860] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 324.163128][T12860] bond1: left promiscuous mode [ 324.181647][T12860] dummy0: left promiscuous mode [ 324.201692][ T5720] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 324.227204][T12860] team1: left promiscuous mode [ 324.244184][T12860] team1: left allmulticast mode [ 324.384739][ T5720] usb 4-1: Using ep0 maxpacket: 16 [ 324.407011][ T5720] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 241, changing to 11 [ 324.441614][ T5720] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 324.467442][ T5720] usb 4-1: language id specifier not provided by device, defaulting to English [ 324.499370][ T5720] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 324.515193][ T5720] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.540070][ T5720] usb 4-1: Product: ñ«‘› [ 324.555225][T12893] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 324.566317][T12893] syzkaller0: linktype set to 1 [ 324.596600][T12877] syzkaller0: tun_chr_ioctl cmd 3222836083 [ 324.606053][T12877] netlink: 'syz.0.825': attribute type 29 has an invalid length. [ 324.618791][T12877] syzkaller0: tun_chr_ioctl cmd 1074812118 [ 324.642210][ T1221] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 325.072450][ T5720] cdc_ncm 4-1:1.0: bind() failure [ 325.093043][ T5720] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 325.100400][ T5720] cdc_ncm 4-1:1.1: bind() failure [ 325.119918][ T5720] usb 4-1: USB disconnect, device number 45 [ 325.126450][T12914] fuse: Bad value for 'rootmode' [ 325.415374][ T1221] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 325.432098][ T24] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 325.572063][ T1221] usb 1-1: Using ep0 maxpacket: 16 [ 325.581489][ T1221] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 325.593036][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 325.599962][ T1221] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 325.612570][ T1221] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 325.623039][ T1221] usb 1-1: config 1 interface 1 has no altsetting 0 [ 325.632038][ T24] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 325.643171][ T1221] usb 1-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 325.653365][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.670502][ T1221] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.689415][ T24] usb 2-1: Product: syz [ 325.695795][ T1221] usb 1-1: Product: syz [ 325.702270][ T24] usb 2-1: Manufacturer: syz [ 325.709822][ T1221] usb 1-1: Manufacturer: syz [ 325.723243][ T24] usb 2-1: SerialNumber: syz [ 325.729500][ T1221] usb 1-1: SerialNumber: syz [ 325.744754][ T24] usb 2-1: config 0 descriptor?? [ 325.960641][T12914] netlink: 'syz.0.828': attribute type 1 has an invalid length. [ 326.031698][ T5704] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 326.073587][T12914] 8021q: adding VLAN 0 to HW filter on device bond3 [ 326.119480][T12977] bond3: (slave geneve3): making interface the new active one [ 326.143915][T12977] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 326.175986][ T24] airspy 2-1:0.0: Board ID: 00 [ 326.207041][ T24] airspy 2-1:0.0: Firmware version: [ 326.218306][ T1221] usb 1-1: selecting invalid altsetting 0 [ 326.231080][ T5704] usb 4-1: config 0 has an invalid interface number: 230 but max is 0 [ 326.273872][ T5704] usb 4-1: config 0 has no interface number 0 [ 326.306188][ T5704] usb 4-1: too many endpoints for config 0 interface 230 altsetting 255: 65, using maximum allowed: 30 [ 326.355397][ T5704] usb 4-1: config 0 interface 230 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 326.419790][ T5704] usb 4-1: config 0 interface 230 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 326.484916][ T5704] usb 4-1: config 0 interface 230 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 326.504371][ T1221] usb 1-1: USB disconnect, device number 31 [ 326.528740][ T5704] usb 4-1: config 0 interface 230 has no altsetting 0 [ 326.537850][ T5704] usb 4-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 326.577096][ T5704] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.619054][ T5704] usb 4-1: config 0 descriptor?? [ 326.631136][ T9610] udevd[9610]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 326.658858][T13029] netlink: 4 bytes leftover after parsing attributes in process `syz.4.837'. [ 326.790663][T12929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.804580][T12929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.090652][ T5704] uclogic 0003:5543:0781.000A: item fetching failed at offset 2/5 [ 327.125524][ T5704] uclogic 0003:5543:0781.000A: parse failed [ 327.144246][ T5704] uclogic 0003:5543:0781.000A: probe with driver uclogic failed with error -22 [ 327.277223][T12929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.297742][ T808] usb 4-1: USB disconnect, device number 46 [ 327.327369][T12929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.447411][ T24] airspy 2-1:0.0: usb_control_msg() failed -71 request 10 [ 327.505596][ T24] airspy 2-1:0.0: Registered as swradio24 [ 327.525301][ T24] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 327.568375][ T24] usb 2-1: USB disconnect, device number 66 [ 328.035264][T13081] netlink: 16 bytes leftover after parsing attributes in process `syz.3.843'. [ 328.270448][T13095] netlink: 830 bytes leftover after parsing attributes in process `syz.3.846'. [ 328.381864][ T5684] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 328.421624][ T24] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 328.551917][ T5684] usb 3-1: Using ep0 maxpacket: 32 [ 328.571134][ T5684] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.592471][ T24] usb 2-1: config 2 has an invalid interface number: 79 but max is 0 [ 328.608898][ T5684] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.634378][ T24] usb 2-1: config 2 has no interface number 0 [ 328.660221][ T24] usb 2-1: config 2 interface 79 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64 [ 328.674251][ T5684] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 328.702838][ T24] usb 2-1: config 2 interface 79 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 1023 [ 328.713658][ T5684] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.748345][ T24] usb 2-1: config 2 interface 79 has no altsetting 0 [ 328.756861][ T5684] usb 3-1: config 0 descriptor?? [ 328.788992][ T24] usb 2-1: New USB device found, idVendor=0ab4, idProduct=0011, bcdDevice=ca.fb [ 328.806401][ T5684] hub 3-1:0.0: USB hub found [ 328.823211][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.848659][ T24] usb 2-1: Product: syz [ 328.862704][ T24] usb 2-1: Manufacturer: syz [ 328.876561][ T24] usb 2-1: SerialNumber: syz [ 328.906856][T13087] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 328.922620][T13087] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 328.998672][T13085] netlink: 428 bytes leftover after parsing attributes in process `syz.2.845'. [ 329.069868][T13145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.087698][T13085] netlink: 32 bytes leftover after parsing attributes in process `syz.2.845'. [ 329.114681][T13145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.137920][ T5684] hub 3-1:0.0: 13 ports detected [ 329.151255][ T5684] hub 3-1:0.0: insufficient power available to use all downstream ports [ 329.180593][T13087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.215760][T13087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.264314][ T24] esd_usb 2-1:2.79: sending version message failed [ 329.285491][ T24] esd_usb 2-1:2.79: probe with driver esd_usb failed with error -71 [ 329.316182][ T24] usb 2-1: USB disconnect, device number 67 [ 329.350604][ T5684] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 329.373175][ T5684] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 329.396752][ T5684] usbhid 3-1:0.0: can't add hid device: -71 [ 329.412026][ T5684] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 329.452440][ T5684] usb 3-1: USB disconnect, device number 55 [ 330.191845][T13201] netlink: 16 bytes leftover after parsing attributes in process `syz.3.856'. [ 330.284084][T13205] loop2: detected capacity change from 0 to 7 [ 330.302693][ T24] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 330.303548][T13205] Dev loop2: unable to read RDB block 7 [ 330.318751][T13205] loop2: unable to read partition table [ 330.325996][T13205] loop2: partition table beyond EOD, truncated [ 330.341654][T13205] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 330.369233][ T4993] Dev loop2: unable to read RDB block 7 [ 330.383298][ T4993] loop2: unable to read partition table [ 330.396329][ T4993] loop2: partition table beyond EOD, truncated [ 330.471955][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 330.496830][ T24] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 330.529755][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.549268][ T24] usb 3-1: Product: syz [ 330.557924][ T24] usb 3-1: Manufacturer: syz [ 330.572096][ T24] usb 3-1: SerialNumber: syz [ 330.592585][ T24] usb 3-1: config 0 descriptor?? [ 330.927833][T13246] loop2: detected capacity change from 0 to 7 [ 330.970240][T13246] Dev loop2: unable to read RDB block 7 [ 331.004228][T13246] loop2: AHDI p1 p2 p3 [ 331.019679][ T24] airspy 3-1:0.0: Board ID: 00 [ 331.039091][T13246] loop2: partition table partially beyond EOD, truncated [ 331.047897][ T24] airspy 3-1:0.0: Firmware version: [ 331.060437][T13246] loop2: p1 start 1818582900 is beyond EOD, truncated [ 331.078432][T13246] loop2: p3 start 335544320 is beyond EOD, truncated [ 331.633051][T13189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.669138][T13189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.176590][T13189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.177866][T13275] netlink: 16 bytes leftover after parsing attributes in process `syz.0.867'. [ 332.222131][T13189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.362588][ T24] airspy 3-1:0.0: usb_control_msg() failed -71 request 10 [ 332.428903][ T24] airspy 3-1:0.0: Registered as swradio24 [ 332.449764][ T24] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 332.522409][ T24] usb 3-1: USB disconnect, device number 56 [ 333.021886][ T808] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 333.211747][ T808] usb 1-1: Using ep0 maxpacket: 8 [ 333.230449][ T808] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 333.286266][ T808] usb 1-1: config 0 interface 0 has no altsetting 0 [ 333.307851][ T808] usb 1-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 333.343187][ T808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.372932][ T808] usb 1-1: config 0 descriptor?? [ 333.571692][ T5691] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 333.588486][T13329] netlink: 52 bytes leftover after parsing attributes in process `syz.2.876'. [ 333.742334][ T5691] usb 4-1: Using ep0 maxpacket: 32 [ 333.760779][ T5691] usb 4-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 333.794094][ T5691] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.828339][ T5691] usb 4-1: Product: syz [ 333.847931][ T5691] usb 4-1: Manufacturer: syz [ 333.875441][ T5691] usb 4-1: SerialNumber: syz [ 334.007637][T13344] netlink: 16 bytes leftover after parsing attributes in process `syz.4.878'. [ 334.116476][ T5691] usb 4-1: palm_os_4_probe - error -71 getting connection info [ 334.151593][ T5691] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 334.218363][ T5691] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 334.291168][ T5691] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 334.351565][ T5691] usb 4-1: USB disconnect, device number 47 [ 334.413674][ T5691] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 334.487755][ T5691] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 334.518297][ T5691] visor 4-1:1.0: device disconnected [ 335.061711][ T5684] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 335.233594][ T5684] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 335.262485][ T5684] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 335.294735][ T5684] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 335.323682][ T5684] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 255, setting to 64 [ 335.354606][ T5684] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 335.410000][ T5684] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 335.437065][ T5684] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.456489][ T5684] usb 4-1: Product: syz [ 335.466003][ T5684] usb 4-1: Manufacturer: syz [ 335.474195][ T5684] usb 4-1: SerialNumber: syz [ 335.496847][ T5684] usb 4-1: config 0 descriptor?? [ 335.507440][T13379] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 335.534221][ T5684] input: KB Gear Tablet as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input17 [ 335.683930][ T5691] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 335.718295][ T808] usbhid 1-1:0.0: can't add hid device: -71 [ 335.750005][ T808] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 335.783019][T13379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.802806][T13379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.838386][ T808] usb 1-1: USB disconnect, device number 32 [ 335.853156][ T5684] usb 4-1: USB disconnect, device number 48 [ 335.853196][ C0] kbtab 4-1:0.0: kbtab_irq - usb_submit_urb failed with result -19 [ 335.879160][ T5691] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 335.924720][ T5691] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 335.945222][ T5691] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.956446][ T5691] usb 3-1: Product: syz [ 335.963447][ T5691] usb 3-1: Manufacturer: syz [ 335.970043][ T5691] usb 3-1: SerialNumber: syz [ 336.266753][ T5691] usb 3-1: USB disconnect, device number 57 [ 336.610335][T13440] loop2: detected capacity change from 0 to 7 [ 336.618834][T13440] Dev loop2: unable to read RDB block 7 [ 336.627421][T13440] loop2: unable to read partition table [ 336.633675][T13440] loop2: partition table beyond EOD, truncated [ 336.641850][T13440] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 336.718112][T13438] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.725917][T13438] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.804221][T13451] fuse: Bad value for 'rootmode' [ 336.956576][T13438] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 336.968944][T13438] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 337.141444][T13474] netlink: 'syz.2.892': attribute type 10 has an invalid length. [ 337.180501][T13474] syz_tun: entered promiscuous mode [ 337.188288][T13474] syz_tun: left allmulticast mode [ 337.193430][ T5720] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 337.238101][T13474] syz_tun: entered allmulticast mode [ 337.260982][T13474] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 337.308996][ T5936] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.339526][ T5936] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.355738][ T5720] usb 1-1: Using ep0 maxpacket: 16 [ 337.361391][ T5936] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.378756][ T5720] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 337.384635][ T5936] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.403913][T13474] netlink: 'syz.2.892': attribute type 10 has an invalid length. [ 337.425541][ T5720] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 337.450279][T13474] bond0: left allmulticast mode [ 337.455629][ T5720] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 337.488882][ T5720] usb 1-1: config 1 interface 1 has no altsetting 0 [ 337.516419][ T5720] usb 1-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 337.541482][ T5720] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.566753][T13474] syz_tun: left allmulticast mode [ 337.574855][ T5720] usb 1-1: Product: syz [ 337.586055][ T5720] usb 1-1: Manufacturer: syz [ 337.598060][ T5720] usb 1-1: SerialNumber: syz [ 337.667191][T13474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.706669][T13474] bond0: entered allmulticast mode [ 337.732692][T13474] syz_tun: entered allmulticast mode [ 337.744448][T13474] team0: Port device bond0 added [ 337.834445][T13451] netlink: 'syz.0.890': attribute type 1 has an invalid length. [ 337.959727][T13451] 8021q: adding VLAN 0 to HW filter on device bond4 [ 338.038204][ T5720] usb 1-1: selecting invalid altsetting 0 [ 338.131393][ T5720] usb 1-1: USB disconnect, device number 33 [ 338.274972][ T9567] udevd[9567]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 338.481942][ T5754] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 338.644497][ T5754] usb 2-1: Using ep0 maxpacket: 16 [ 338.670283][ T5754] usb 2-1: unable to get BOS descriptor or descriptor too short [ 338.694846][ T5754] usb 2-1: config 1 has an invalid interface number: 34 but max is 1 [ 338.703561][ T5754] usb 2-1: config 1 has an invalid interface number: 129 but max is 1 [ 338.713541][ T5754] usb 2-1: config 1 has no interface number 0 [ 338.721702][ T5754] usb 2-1: config 1 has no interface number 1 [ 338.733240][ T5754] usb 2-1: config 1 interface 129 altsetting 9 endpoint 0xE has an invalid bInterval 255, changing to 11 [ 338.748030][ T5754] usb 2-1: config 1 interface 129 altsetting 9 bulk endpoint 0x9 has invalid maxpacket 8 [ 338.759790][ T5754] usb 2-1: config 1 interface 34 has no altsetting 0 [ 338.766934][ T5754] usb 2-1: config 1 interface 129 has no altsetting 0 [ 338.778057][ T5754] usb 2-1: New USB device found, idVendor=06e0, idProduct=f115, bcdDevice=f9.56 [ 338.788143][ T5754] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.797815][ T5754] usb 2-1: Product: syz [ 338.802415][ T5754] usb 2-1: Manufacturer: syz [ 338.807209][ T5754] usb 2-1: SerialNumber: syz [ 339.047302][T13574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.082324][T13574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.126732][ T5754] ti_usb_3410_5052 2-1:1.34: required endpoints missing [ 339.153310][ T5754] ti_usb_3410_5052 2-1:1.129: TI USB 3410 1 port adapter converter detected [ 339.180769][ T5754] usb 2-1: USB disconnect, device number 68 [ 339.387521][T13639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.912'. [ 339.398838][T13639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.912'. [ 339.411336][T13639] fuse: Bad value for 'fd' [ 339.813265][T13666] fuse: Bad value for 'rootmode' [ 339.843639][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 339.843658][ T29] audit: type=1326 audit(1779261941.512:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13651 comm="syz.4.915" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f658d19ce59 code=0x7ffc0000 [ 339.928016][ T29] audit: type=1326 audit(1779261941.512:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13651 comm="syz.4.915" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f658d19ce59 code=0x7ffc0000 [ 339.972576][ T29] audit: type=1326 audit(1779261941.512:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13651 comm="syz.4.915" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f658d19ce59 code=0x7ffc0000 [ 340.006887][ T29] audit: type=1326 audit(1779261941.512:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13651 comm="syz.4.915" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f658d19ce59 code=0x7ffc0000 [ 340.053981][ T29] audit: type=1326 audit(1779261941.512:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13651 comm="syz.4.915" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f658d19ce59 code=0x7ffc0000 [ 340.079244][ T29] audit: type=1326 audit(1779261941.532:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13651 comm="syz.4.915" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f658d19ce59 code=0x7ffc0000 [ 340.106599][ T29] audit: type=1326 audit(1779261941.532:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13651 comm="syz.4.915" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f658d19ce59 code=0x7ffc0000 [ 340.137756][T13453] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 340.162636][ T29] audit: type=1326 audit(1779261941.532:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13651 comm="syz.4.915" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f658d19ce59 code=0x7ffc0000 [ 340.188487][ T29] audit: type=1326 audit(1779261941.532:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13651 comm="syz.4.915" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f658d19ce59 code=0x7ffc0000 [ 340.212976][ T5714] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 340.224889][ T29] audit: type=1326 audit(1779261941.532:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13651 comm="syz.4.915" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f658d19ce59 code=0x7ffc0000 [ 340.301613][T13453] usb 2-1: Using ep0 maxpacket: 16 [ 340.308958][T13453] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 340.323447][T13453] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 340.333761][T13453] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 340.343998][T13453] usb 2-1: config 1 interface 1 has no altsetting 0 [ 340.357184][T13453] usb 2-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 340.367419][T13453] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.376944][ T5714] usb 1-1: Using ep0 maxpacket: 32 [ 340.382410][T13453] usb 2-1: Product: syz [ 340.400827][ T5714] usb 1-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 340.413805][ T5714] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.422292][T13453] usb 2-1: Manufacturer: syz [ 340.427459][T13453] usb 2-1: SerialNumber: syz [ 340.432409][ T5714] usb 1-1: Product: syz [ 340.438794][ T5714] usb 1-1: Manufacturer: syz [ 340.458503][ T5714] usb 1-1: SerialNumber: syz [ 340.480430][ T5714] usb 1-1: config 0 descriptor?? [ 340.503717][ T5714] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 340.650444][T13666] netlink: 'syz.1.918': attribute type 1 has an invalid length. [ 340.738370][T13666] 8021q: adding VLAN 0 to HW filter on device bond2 [ 340.776429][T13453] usb 2-1: selecting invalid altsetting 0 [ 340.877288][T13453] usb 2-1: USB disconnect, device number 69 [ 340.985452][ T9569] udevd[9569]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 341.059731][T13774] fuse: Bad value for 'rootmode' [ 341.123378][ T5714] gspca_topro: reg_w err -71 [ 341.141416][T13763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.151844][ T5714] gspca_topro: Sensor soi763a [ 341.159240][T13763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.185510][ T5714] usb 1-1: USB disconnect, device number 34 [ 341.331935][ T5754] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 341.501609][ T5754] usb 4-1: Using ep0 maxpacket: 16 [ 341.508565][ T5754] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 341.519749][ T5754] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 341.522443][ T5714] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 341.530146][ T5754] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 341.546338][ T5754] usb 4-1: config 1 interface 1 has no altsetting 0 [ 341.555021][ T5754] usb 4-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 341.565002][ T5754] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.574309][ T5754] usb 4-1: Product: syz [ 341.578584][ T5754] usb 4-1: Manufacturer: syz [ 341.583280][ T5754] usb 4-1: SerialNumber: syz [ 341.696569][ T5714] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 341.712211][ T5714] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.729606][ T5714] usb 1-1: Product: syz [ 341.739078][ T5714] usb 1-1: Manufacturer: syz [ 341.749042][ T5714] usb 1-1: SerialNumber: syz [ 341.796326][T13774] netlink: 'syz.3.924': attribute type 1 has an invalid length. [ 341.868455][T13774] 8021q: adding VLAN 0 to HW filter on device bond2 [ 341.949111][ T5754] usb 4-1: selecting invalid altsetting 0 [ 342.141032][ T5754] usb 4-1: USB disconnect, device number 49 [ 342.313574][ T9569] udevd[9569]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 342.538095][ T5714] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 342.601139][ T5714] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 342.637806][ T5714] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 342.684180][ T5714] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 342.745926][ T5714] usb 1-1: USB disconnect, device number 35 [ 343.192321][ T5714] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 343.378627][ T5714] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 343.399600][ T5714] usb 1-1: config 0 has no interface number 0 [ 343.417234][ T5714] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 343.449749][ T5714] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 343.471730][ T5714] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.490003][ T5714] usb 1-1: Product: syz [ 343.496302][ T5714] usb 1-1: Manufacturer: syz [ 343.501789][ T5754] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 343.509902][ T5714] usb 1-1: SerialNumber: syz [ 343.534547][ T5714] usb 1-1: config 0 descriptor?? [ 343.558478][ T5714] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 343.683850][ T5754] usb 2-1: Using ep0 maxpacket: 32 [ 343.697471][ T5754] usb 2-1: config 123 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 343.733611][ T5754] usb 2-1: config 123 interface 0 has no altsetting 0 [ 343.752614][ T5754] usb 2-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 343.777518][ T5754] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.797172][T13893] netlink: 20 bytes leftover after parsing attributes in process `syz.0.932'. [ 343.799494][ T5754] usb 2-1: Product: syz [ 343.824716][ T5754] usb 2-1: Manufacturer: syz [ 343.840881][ T5754] usb 2-1: SerialNumber: syz [ 343.929593][ T5714] usb 1-1: USB disconnect, device number 36 [ 343.961142][ T5714] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 343.967627][T13453] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 344.104006][ T5754] usb 2-1: dvb_usb_v2: found a 'Hauppauge 126xxx' in warm state [ 344.131672][T13453] usb 4-1: Using ep0 maxpacket: 32 [ 344.141318][T13453] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 344.166365][ T5754] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 344.175876][T13453] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.199333][ T5754] dvbdev: DVB: registering new adapter (Hauppauge 126xxx) [ 344.199631][T13453] usb 4-1: Product: syz [ 344.218223][ T5754] usb 2-1: media controller created [ 344.225442][T13453] usb 4-1: Manufacturer: syz [ 344.237186][T13453] usb 4-1: SerialNumber: syz [ 344.265818][T13453] usb 4-1: config 0 descriptor?? [ 344.272737][ T5754] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 344.356126][ T5754] set interface failed [ 344.356536][ T5754] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 344.381587][ T5754] error writing reg: 0xff, val: 0x00 [ 344.465829][ T5754] dvb_usb_mxl111sf 2-1:123.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 344.509896][ T5754] usb 2-1: USB disconnect, device number 70 [ 344.689172][T13453] airspy 4-1:0.0: Board ID: 00 [ 344.700379][T13453] airspy 4-1:0.0: Firmware version: [ 345.044348][T13998] netlink: 'syz.1.944': attribute type 46 has an invalid length. [ 345.095874][T14002] loop8: detected capacity change from 0 to 8 [ 345.112583][T14002] Dev loop8: unable to read RDB block 8 [ 345.121443][T14002] loop8: unable to read partition table [ 345.127478][T14002] loop8: partition table beyond EOD, truncated [ 345.135501][T14002] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 345.293015][T13937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.315759][T13937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.622710][T14019] syzkaller0: entered promiscuous mode [ 345.628459][T14019] syzkaller0: entered allmulticast mode [ 345.792100][T13937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.805277][T13937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.906973][T13453] airspy 4-1:0.0: usb_control_msg() failed -71 request 10 [ 345.948350][T13453] airspy 4-1:0.0: Registered as swradio24 [ 345.972055][T13453] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 346.008830][T13453] usb 4-1: USB disconnect, device number 50 [ 346.168970][ T5629] Bluetooth: hci3: unexpected event for opcode 0x0c14 [ 347.188443][T14138] fuse: Bad value for 'fd' [ 348.813330][T14093] syzkaller0: entered promiscuous mode [ 348.819075][T14093] syzkaller0: entered allmulticast mode [ 349.161392][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 349.161406][ T29] audit: type=1326 audit(1779261950.822:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14161 comm="syz.0.965" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fa619ce59 code=0x7ffc0000 [ 349.255579][ T29] audit: type=1326 audit(1779261950.862:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14161 comm="syz.0.965" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f7fa619ce59 code=0x7ffc0000 [ 349.338439][ T29] audit: type=1326 audit(1779261950.862:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14161 comm="syz.0.965" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fa619ce59 code=0x7ffc0000 [ 349.376198][ T29] audit: type=1326 audit(1779261950.862:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14161 comm="syz.0.965" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fa619ce59 code=0x7ffc0000 [ 349.403793][ T29] audit: type=1326 audit(1779261950.862:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14161 comm="syz.0.965" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f7fa619ce59 code=0x7ffc0000 [ 349.430161][ T29] audit: type=1326 audit(1779261950.862:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14161 comm="syz.0.965" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fa619ce59 code=0x7ffc0000 [ 349.479525][ T29] audit: type=1326 audit(1779261950.862:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14161 comm="syz.0.965" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fa619ce59 code=0x7ffc0000 [ 349.509844][ T29] audit: type=1326 audit(1779261950.862:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14161 comm="syz.0.965" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7fa619ce59 code=0x7ffc0000 [ 349.567223][ T29] audit: type=1326 audit(1779261950.862:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14161 comm="syz.0.965" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fa619ce59 code=0x7ffc0000 [ 349.616094][ T29] audit: type=1326 audit(1779261950.862:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14161 comm="syz.0.965" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7fa619ce59 code=0x7ffc0000 [ 349.725477][ T5714] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 349.882021][ T5714] usb 3-1: Using ep0 maxpacket: 32 [ 349.895505][ T5714] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 349.911829][ T5714] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.929592][ T5714] usb 3-1: Product: syz [ 349.935942][ T5714] usb 3-1: Manufacturer: syz [ 349.940784][ T5714] usb 3-1: SerialNumber: syz [ 349.951685][ T5714] usb 3-1: config 0 descriptor?? [ 350.002771][T13466] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 350.171822][T13466] usb 4-1: Using ep0 maxpacket: 16 [ 350.187571][T13466] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 350.202717][T13466] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.216432][T13466] usb 4-1: Product: syz [ 350.227228][T13466] usb 4-1: Manufacturer: syz [ 350.235778][T13466] usb 4-1: SerialNumber: syz [ 350.291698][T13454] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 350.382345][ T5714] airspy 3-1:0.0: Board ID: 00 [ 350.387514][ T5714] airspy 3-1:0.0: Firmware version: [ 350.444124][T13454] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 350.457090][T13454] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.473456][T13454] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.487030][T13454] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 350.504501][T13454] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 350.515275][T13454] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 350.524742][T13454] usb 2-1: Manufacturer: syz [ 350.551959][T13454] usb 2-1: config 0 descriptor?? [ 350.994836][T14172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.014988][T14172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.540002][T14172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.565234][T14172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.685581][ T5714] airspy 3-1:0.0: usb_control_msg() failed -71 request 10 [ 351.740005][ T5714] airspy 3-1:0.0: Registered as swradio24 [ 351.761435][ T5714] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 351.809759][ T5714] usb 3-1: USB disconnect, device number 58 [ 351.889187][T14185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.928324][T14185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.966100][T13466] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 351.984470][T13466] usb 4-1: MIDIStreaming interface descriptor not found [ 352.221262][T13466] usb 4-1: USB disconnect, device number 51 [ 352.380715][T14219] netlink: 'syz.1.972': attribute type 33 has an invalid length. [ 352.391838][T14219] netlink: 152 bytes leftover after parsing attributes in process `syz.1.972'. [ 352.432283][T14219] `: renamed from team0 (while UP) [ 352.559312][ T9827] udevd[9827]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 353.049188][T13454] usbhid 2-1:0.0: can't add hid device: -71 [ 353.062034][T13454] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 353.099965][T13454] usb 2-1: USB disconnect, device number 71 [ 353.387758][T14296] netlink: 48 bytes leftover after parsing attributes in process `syz.0.979'. [ 353.422494][T14299] netlink: 48 bytes leftover after parsing attributes in process `syz.0.979'. [ 353.432331][T14296] netlink: 48 bytes leftover after parsing attributes in process `syz.0.979'. [ 353.458581][T14299] netlink: 48 bytes leftover after parsing attributes in process `syz.0.979'. [ 354.163603][T13453] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 354.332201][T13453] usb 4-1: device descriptor read/64, error -71 [ 354.593677][T13453] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 354.752962][T13453] usb 4-1: device descriptor read/64, error -71 [ 354.872441][T13453] usb usb4-port1: attempt power cycle [ 354.996574][T14357] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 355.211759][T13453] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 355.245640][T13453] usb 4-1: device descriptor read/8, error -71 [ 355.491978][T13453] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 355.532915][T13453] usb 4-1: device descriptor read/8, error -71 [ 355.672677][T13453] usb usb4-port1: unable to enumerate USB device [ 357.268066][T14400] fuse: Bad value for 'rootmode' [ 357.561985][T13453] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 357.732503][T13453] usb 2-1: Using ep0 maxpacket: 16 [ 357.771078][T13453] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 357.811491][T13453] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 357.844255][T13453] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 357.881965][T13453] usb 2-1: config 1 interface 1 has no altsetting 0 [ 357.926554][T13453] usb 2-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 357.955006][T13453] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.979673][T13453] usb 2-1: Product: syz [ 358.000649][T13453] usb 2-1: Manufacturer: syz [ 358.016898][T13453] usb 2-1: SerialNumber: syz [ 358.143803][T13466] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 358.254038][T14400] netlink: 'syz.1.1002': attribute type 1 has an invalid length. [ 358.335040][T13466] usb 1-1: config 0 has an invalid interface number: 205 but max is 0 [ 358.395189][T13466] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 358.481341][T13466] usb 1-1: config 0 has no interface number 0 [ 358.517368][T13466] usb 1-1: config 0 interface 205 has no altsetting 0 [ 358.530984][T14400] 8021q: adding VLAN 0 to HW filter on device bond3 [ 358.579437][T14470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.600509][T13466] usb 1-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 358.647132][T14470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.658098][T13453] usb 2-1: selecting invalid altsetting 0 [ 358.672526][T13466] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.692024][T13466] usb 1-1: Product: syz [ 358.704453][T13466] usb 1-1: Manufacturer: syz [ 358.717333][T13466] usb 1-1: SerialNumber: syz [ 358.768008][T13466] usb 1-1: config 0 descriptor?? [ 358.804796][T13466] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 358.848913][T13466] dvb-usb: bulk message failed: -22 (3/0) [ 358.903090][T13466] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 358.932794][T13466] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 358.973155][T13466] usb 1-1: media controller created [ 359.014541][T13453] usb 2-1: USB disconnect, device number 72 [ 359.032413][T13466] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 359.130459][T13466] dvb-usb: bulk message failed: -22 (6/0) [ 359.197898][T13466] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 359.210968][ T9569] udevd[9569]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 359.238736][T13466] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input18 [ 359.338278][T13466] dvb-usb: schedule remote query interval to 150 msecs. [ 359.365076][T13466] dvb-usb: bulk message failed: -22 (3/0) [ 359.403011][T13466] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 359.534789][T13466] dvb-usb: bulk message failed: -22 (1/0) [ 359.560928][T13466] dvb-usb: error while querying for an remote control event. [ 359.761739][T13466] dvb-usb: bulk message failed: -22 (1/0) [ 359.774810][T13466] dvb-usb: error while querying for an remote control event. [ 359.962425][T13466] dvb-usb: bulk message failed: -22 (1/0) [ 359.979670][T13466] dvb-usb: error while querying for an remote control event. [ 360.185519][T13466] dvb-usb: bulk message failed: -22 (1/0) [ 360.201116][T13466] dvb-usb: error while querying for an remote control event. [ 360.371842][T13454] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 360.399345][T13466] dvb-usb: bulk message failed: -22 (1/0) [ 360.422231][T13466] dvb-usb: error while querying for an remote control event. [ 360.523794][T14532] netlink: 'syz.2.1011': attribute type 13 has an invalid length. [ 360.561781][T13454] usb 4-1: Using ep0 maxpacket: 8 [ 360.586519][T13454] usb 4-1: unable to get BOS descriptor or descriptor too short [ 360.601857][T13466] dvb-usb: bulk message failed: -22 (1/0) [ 360.604004][T13454] usb 4-1: config 4 has an invalid interface number: 163 but max is 0 [ 360.619162][T13454] usb 4-1: config 4 has no interface number 0 [ 360.636255][T13466] dvb-usb: error while querying for an remote control event. [ 360.662152][T13454] usb 4-1: config 4 interface 163 has no altsetting 0 [ 360.695328][T13454] usb 4-1: New USB device found, idVendor=106c, idProduct=caa3, bcdDevice=49.b0 [ 360.727662][T13454] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.749182][T13454] usb 4-1: Product: syz [ 360.754678][T13454] usb 4-1: Manufacturer: syz [ 360.762856][T13454] usb 4-1: SerialNumber: syz [ 360.842472][ T5754] dvb-usb: bulk message failed: -22 (1/0) [ 360.860728][ T5754] dvb-usb: error while querying for an remote control event. [ 361.032005][ T5754] dvb-usb: bulk message failed: -22 (1/0) [ 361.046982][ T5754] dvb-usb: error while querying for an remote control event. [ 361.052268][T13453] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 361.241633][ T5754] dvb-usb: bulk message failed: -22 (1/0) [ 361.257695][T13453] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 361.268199][ T5754] dvb-usb: error while querying for an remote control event. [ 361.303642][T13466] usb 1-1: USB disconnect, device number 37 [ 361.342182][T13453] usb 3-1: config 0 interface 0 has no altsetting 0 [ 361.387119][T13453] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 361.421245][T13453] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 361.467950][T13453] usb 3-1: Product: syz [ 361.484640][T13453] usb 3-1: Manufacturer: syz [ 361.501369][T13453] usb 3-1: SerialNumber: syz [ 361.530009][T13466] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 361.547535][T13453] usb 3-1: config 0 descriptor?? [ 361.623600][T13453] usb 3-1: selecting invalid altsetting 0 [ 361.791111][T14532] tipc: Enabling of bearer rejected, failed to enable media [ 361.899340][T13453] usb 3-1: USB disconnect, device number 59 [ 361.971815][T13466] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 362.050357][ T9827] udevd[9827]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 362.131978][T13466] usb 1-1: device descriptor read/64, error -71 [ 362.392544][T13466] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 362.559781][T13466] usb 1-1: device descriptor read/64, error -71 [ 362.632344][T14603] netlink: 'syz.2.1016': attribute type 1 has an invalid length. [ 362.656582][T14603] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 362.673027][T13466] usb usb1-port1: attempt power cycle [ 362.921644][ T5720] usb 3-1: new low-speed USB device number 60 using dummy_hcd [ 363.022572][T13466] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 363.066164][T13466] usb 1-1: device descriptor read/8, error -71 [ 363.084416][ T5720] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 363.105982][ T5720] usb 3-1: config 0 has no interface number 0 [ 363.127487][ T5720] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 363.162576][ T5720] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 363.197340][ T5720] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 363.237299][ T5720] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.274692][ T5720] usb 3-1: config 0 descriptor?? [ 363.294344][T14603] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 363.312089][T13466] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 363.352429][T13466] usb 1-1: device descriptor read/8, error -71 [ 363.366839][ T5720] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 363.434025][ T5767] usb 5-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 363.482580][ T5767] dvb_usb_ec168 5-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 363.492087][T13466] usb usb1-port1: unable to enumerate USB device [ 363.556421][ T5767] usb 5-1: USB disconnect, device number 34 [ 364.122899][ T5767] usb 3-1: USB disconnect, device number 60 [ 364.387542][T13454] qmi_wwan 4-1:4.163: bogus CDC Union: master=0, slave=0 [ 364.423333][T13454] qmi_wwan 4-1:4.163: probe with driver qmi_wwan failed with error -22 [ 364.448315][T13454] usb 4-1: USB disconnect, device number 56 [ 365.171667][T13454] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 365.336862][T13454] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 365.358921][T13454] usb 1-1: config 1 has no interface number 0 [ 365.380245][T13454] usb 1-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 365.422962][T13454] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 365.458929][T13454] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 365.504707][T13454] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 365.535055][T13454] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.574504][T13454] usb 1-1: Product: syz [ 365.588112][T13454] usb 1-1: Manufacturer: syz [ 365.604691][T13454] usb 1-1: SerialNumber: syz [ 365.631158][T14685] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 365.843903][T14685] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 365.877370][T13454] usb 1-1: Incompatible driver and firmware versions [ 365.887845][T14705] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1025'. [ 365.967737][T14707] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1025'. [ 366.070037][T13454] usb 1-1: USB disconnect, device number 42 [ 366.468825][ T5629] Bluetooth: hci4: Malformed MSFT vendor event: 0x02 [ 366.880647][T14752] loop2: detected capacity change from 0 to 7 [ 366.890970][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 366.891001][ T29] audit: type=1326 audit(1779261968.562:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14753 comm="syz.1.1035" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4a499ce59 code=0x7ffc0000 [ 366.962570][T14752] Dev loop2: unable to read RDB block 7 [ 366.991652][T14752] loop2: unable to read partition table [ 367.013148][ T29] audit: type=1326 audit(1779261968.562:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14753 comm="syz.1.1035" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4a499ce59 code=0x7ffc0000 [ 367.023773][T14752] loop2: partition table beyond EOD, truncated [ 367.070492][T14752] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 367.100815][ T29] audit: type=1326 audit(1779261968.592:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14753 comm="syz.1.1035" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4a499ce59 code=0x7ffc0000 [ 367.178880][ T29] audit: type=1326 audit(1779261968.592:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14753 comm="syz.1.1035" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4a499ce59 code=0x7ffc0000 [ 367.204864][T13453] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 367.213538][ T29] audit: type=1326 audit(1779261968.592:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14753 comm="syz.1.1035" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fe4a499ce59 code=0x7ffc0000 [ 367.327666][ T29] audit: type=1326 audit(1779261968.592:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14753 comm="syz.1.1035" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4a499ce59 code=0x7ffc0000 [ 367.371781][T13453] usb 2-1: Using ep0 maxpacket: 32 [ 367.425377][T13453] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 367.444104][ T29] audit: type=1326 audit(1779261968.592:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14753 comm="syz.1.1035" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4a499ce59 code=0x7ffc0000 [ 367.468503][T13453] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.482096][T14767] tipc: Failed to remove unknown binding: 66,1,1/0:2137679814/2137679816 [ 367.501662][T13453] usb 2-1: Product: syz [ 367.505930][T13453] usb 2-1: Manufacturer: syz [ 367.510561][T13453] usb 2-1: SerialNumber: syz [ 367.528693][ T29] audit: type=1326 audit(1779261968.592:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14753 comm="syz.1.1035" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4a499ce59 code=0x7ffc0000 [ 367.566004][T13453] usb 2-1: config 0 descriptor?? [ 367.587336][T13453] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 367.610253][ T29] audit: type=1326 audit(1779261968.602:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14753 comm="syz.1.1035" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7fe4a499ce59 code=0x7ffc0000 [ 367.721366][ T29] audit: type=1326 audit(1779261968.602:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14753 comm="syz.1.1035" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4a499ce59 code=0x7ffc0000 [ 367.951652][ T5754] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 368.131669][ T5754] usb 1-1: Using ep0 maxpacket: 16 [ 368.290404][ T5754] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 368.330831][ T5754] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 368.367172][T14792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.377679][ T5754] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 368.387252][T14792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.571904][ T5720] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 368.721793][T13473] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 368.753916][ T5720] usb 5-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 368.766028][ T5720] usb 5-1: config 0 interface 0 has no altsetting 0 [ 368.780244][ T5720] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 368.789820][ T5720] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 368.798280][ T5720] usb 5-1: Product: syz [ 368.803576][ T5720] usb 5-1: Manufacturer: syz [ 368.808428][ T5720] usb 5-1: SerialNumber: syz [ 368.818382][ T5720] usb 5-1: config 0 descriptor?? [ 368.827207][T14791] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 368.851124][ T5720] usb 5-1: selecting invalid altsetting 0 [ 368.894775][T13473] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 368.928969][T13473] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 368.956080][T13473] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.988219][T13473] usb 4-1: config 0 descriptor?? [ 369.045679][ T5720] usb 5-1: USB disconnect, device number 35 [ 369.220370][T13473] usbhid 4-1:0.0: can't add hid device: -71 [ 369.238607][T13473] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 369.294449][T13473] usb 4-1: USB disconnect, device number 57 [ 369.793379][T13473] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 369.961659][T13473] usb 4-1: Using ep0 maxpacket: 16 [ 369.997765][T13473] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 370.040315][T13473] usb 4-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.40 [ 370.065364][T13473] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.097028][T13453] gspca_ov534_9: reg_r err -71 [ 370.116907][T13473] usb 4-1: config 0 descriptor?? [ 370.139736][T13473] input: USB Pegasus Device 0e20:0101 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input19 [ 370.321873][T13453] gspca_ov534_9: Unknown sensor 0000 [ 370.321973][T13453] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 370.335497][ C0] usb 4-1: unknown answer from device [ 370.341218][ C0] input input19: Pen battery low [ 370.346198][ C0] [ 370.348534][ C0] ======================================================== [ 370.355742][ C0] WARNING: possible irq lock inversion dependency detected [ 370.362945][ C0] syzkaller #0 Tainted: G L [ 370.368948][ C0] -------------------------------------------------------- [ 370.376155][ C0] klogd/4982 just changed the state of lock: [ 370.382145][ C0] ffff88807a902230 (&dev->event_lock#2){..-.}-{3:3}, at: input_event+0x71/0xc0 [ 370.391207][ C0] but this lock took another, SOFTIRQ-READ-unsafe lock in the past: [ 370.399193][ C0] (tasklist_lock){.+.+}-{3:3} [ 370.399239][ C0] [ 370.399239][ C0] [ 370.399239][ C0] and interrupts could create inverse lock ordering between them. [ 370.399239][ C0] [ 370.418329][ C0] [ 370.418329][ C0] other info that might help us debug this: [ 370.426410][ C0] Chain exists of: [ 370.426410][ C0] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 370.426410][ C0] [ 370.440018][ C0] Possible interrupt unsafe locking scenario: [ 370.440018][ C0] [ 370.448347][ C0] CPU0 CPU1 [ 370.453735][ C0] ---- ---- [ 370.459111][ C0] lock(tasklist_lock); [ 370.463387][ C0] local_irq_disable(); [ 370.470145][ C0] lock(&dev->event_lock#2); [ 370.477366][ C0] lock(&client->buffer_lock); [ 370.484775][ C0] [ 370.488246][ C0] lock(&dev->event_lock#2); [ 370.493145][ C0] [ 370.493145][ C0] *** DEADLOCK *** [ 370.493145][ C0] [ 370.501295][ C0] no locks held by klogd/4982. [ 370.506077][ C0] [ 370.506077][ C0] the shortest dependencies between 2nd lock and 1st lock: [ 370.515472][ C0] -> (tasklist_lock){.+.+}-{3:3} { [ 370.520981][ C0] HARDIRQ-ON-R at: [ 370.525334][ C0] lock_acquire+0x106/0x350 [ 370.532205][ C0] _raw_read_lock+0x36/0x50 [ 370.539106][ C0] __do_wait+0xde/0x740 [ 370.545645][ C0] do_wait+0x1e7/0x510 [ 370.552102][ C0] kernel_wait+0xd6/0x1c0 [ 370.558827][ C0] call_usermodehelper_exec_work+0xbe/0x230 [ 370.567100][ C0] process_scheduled_works+0xb5d/0x1860 [ 370.575023][ C0] worker_thread+0xa53/0xfc0 [ 370.581988][ C0] kthread+0x389/0x470 [ 370.588439][ C0] ret_from_fork+0x514/0xb70 [ 370.595395][ C0] ret_from_fork_asm+0x1a/0x30 [ 370.602516][ C0] SOFTIRQ-ON-R at: [ 370.606846][ C0] lock_acquire+0x106/0x350 [ 370.613700][ C0] _raw_read_lock+0x36/0x50 [ 370.620578][ C0] __do_wait+0xde/0x740 [ 370.627094][ C0] do_wait+0x1e7/0x510 [ 370.633533][ C0] kernel_wait+0xd6/0x1c0 [ 370.640225][ C0] call_usermodehelper_exec_work+0xbe/0x230 [ 370.648465][ C0] process_scheduled_works+0xb5d/0x1860 [ 370.656360][ C0] worker_thread+0xa53/0xfc0 [ 370.663303][ C0] kthread+0x389/0x470 [ 370.669725][ C0] ret_from_fork+0x514/0xb70 [ 370.676658][ C0] ret_from_fork_asm+0x1a/0x30 [ 370.683769][ C0] INITIAL USE at: [ 370.688176][ C0] lock_acquire+0x106/0x350 [ 370.694958][ C0] _raw_write_lock_irq+0x3d/0x50 [ 370.702173][ C0] copy_process+0x2b4c/0x4440 [ 370.709115][ C0] kernel_clone+0x284/0x8f0 [ 370.715886][ C0] user_mode_thread+0x110/0x180 [ 370.723006][ C0] rest_init+0x23/0x300 [ 370.729428][ C0] start_kernel+0x38a/0x3e0 [ 370.736217][ C0] x86_64_start_reservations+0x24/0x30 [ 370.744115][ C0] x86_64_start_kernel+0x143/0x1c0 [ 370.751485][ C0] common_startup_64+0x13e/0x147 [ 370.758737][ C0] INITIAL READ USE at: [ 370.763424][ C0] lock_acquire+0x106/0x350 [ 370.770636][ C0] _raw_read_lock+0x36/0x50 [ 370.777849][ C0] __do_wait+0xde/0x740 [ 370.784712][ C0] do_wait+0x1e7/0x510 [ 370.791484][ C0] kernel_wait+0xd6/0x1c0 [ 370.798590][ C0] call_usermodehelper_exec_work+0xbe/0x230 [ 370.807205][ C0] process_scheduled_works+0xb5d/0x1860 [ 370.815466][ C0] worker_thread+0xa53/0xfc0 [ 370.822769][ C0] kthread+0x389/0x470 [ 370.829535][ C0] ret_from_fork+0x514/0xb70 [ 370.836817][ C0] ret_from_fork_asm+0x1a/0x30 [ 370.844291][ C0] } [ 370.847135][ C0] ... key at: [] tasklist_lock+0x18/0x40 [ 370.855206][ C0] ... acquired at: [ 370.859360][ C0] _raw_read_lock+0x36/0x50 [ 370.864067][ C0] send_sigurg+0x12b/0x420 [ 370.868667][ C0] sk_send_sigurg+0x6c/0x2e0 [ 370.873435][ C0] queue_oob+0x42c/0x4f0 [ 370.877862][ C0] unix_stream_sendmsg+0xcb1/0xe80 [ 370.883147][ C0] ____sys_sendmsg+0x972/0x9f0 [ 370.888101][ C0] ___sys_sendmsg+0x2a5/0x360 [ 370.892961][ C0] __sys_sendmmsg+0x27c/0x4e0 [ 370.897819][ C0] __x64_sys_sendmmsg+0xa0/0xc0 [ 370.902851][ C0] do_syscall_64+0x15f/0xf80 [ 370.907637][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.913710][ C0] [ 370.916036][ C0] -> (&f_owner->lock){....}-{3:3} { [ 370.921539][ C0] INITIAL USE at: [ 370.925805][ C0] lock_acquire+0x106/0x350 [ 370.932427][ C0] _raw_write_lock_irq+0x3d/0x50 [ 370.939456][ C0] __f_setown+0x67/0x370 [ 370.945808][ C0] do_fcntl+0x171c/0x1a20 [ 370.952231][ C0] __se_sys_fcntl+0xc8/0x150 [ 370.958905][ C0] do_syscall_64+0x15f/0xf80 [ 370.965585][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.973564][ C0] INITIAL READ USE at: [ 370.978174][ C0] lock_acquire+0x106/0x350 [ 370.985199][ C0] _raw_read_lock_irqsave+0x48/0x60 [ 370.992923][ C0] send_sigurg+0x55/0x420 [ 370.999782][ C0] sk_send_sigurg+0x6c/0x2e0 [ 371.006894][ C0] queue_oob+0x42c/0x4f0 [ 371.013867][ C0] unix_stream_sendmsg+0xcb1/0xe80 [ 371.021525][ C0] ____sys_sendmsg+0x972/0x9f0 [ 371.028838][ C0] ___sys_sendmsg+0x2a5/0x360 [ 371.036041][ C0] __sys_sendmmsg+0x27c/0x4e0 [ 371.043332][ C0] __x64_sys_sendmmsg+0xa0/0xc0 [ 371.050725][ C0] do_syscall_64+0x15f/0xf80 [ 371.057859][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.066307][ C0] } [ 371.069061][ C0] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 371.078168][ C0] ... acquired at: [ 371.082230][ C0] _raw_read_lock_irqsave+0x48/0x60 [ 371.087615][ C0] send_sigio+0x38/0x370 [ 371.092153][ C0] kill_fasync+0x24d/0x4d0 [ 371.096755][ C0] sock_wake_async+0x137/0x160 [ 371.101696][ C0] sk_send_sigurg+0x1f1/0x2e0 [ 371.106547][ C0] queue_oob+0x42c/0x4f0 [ 371.111051][ C0] unix_stream_sendmsg+0xcb1/0xe80 [ 371.116341][ C0] ____sys_sendmsg+0x972/0x9f0 [ 371.121284][ C0] ___sys_sendmsg+0x2a5/0x360 [ 371.126145][ C0] __sys_sendmmsg+0x27c/0x4e0 [ 371.131003][ C0] __x64_sys_sendmmsg+0xa0/0xc0 [ 371.136042][ C0] do_syscall_64+0x15f/0xf80 [ 371.140820][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.146912][ C0] [ 371.149235][ C0] -> (&new->fa_lock){....}-{3:3} { [ 371.154539][ C0] INITIAL USE at: [ 371.158603][ C0] lock_acquire+0x106/0x350 [ 371.165024][ C0] _raw_write_lock_irq+0x3d/0x50 [ 371.171884][ C0] fasync_remove_entry+0xf1/0x1c0 [ 371.178830][ C0] sock_fasync+0x85/0xf0 [ 371.184987][ C0] __fput+0x890/0xa60 [ 371.190888][ C0] task_work_run+0x1d9/0x270 [ 371.197405][ C0] do_exit+0x70f/0x22c0 [ 371.203508][ C0] do_group_exit+0x21b/0x2d0 [ 371.210136][ C0] get_signal+0x1284/0x1330 [ 371.216551][ C0] arch_do_signal_or_restart+0xbc/0x840 [ 371.224020][ C0] exit_to_user_mode_loop+0x8c/0x4d0 [ 371.231213][ C0] do_syscall_64+0x33e/0xf80 [ 371.237725][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.245531][ C0] INITIAL READ USE at: [ 371.250035][ C0] lock_acquire+0x106/0x350 [ 371.256883][ C0] _raw_read_lock_irqsave+0x48/0x60 [ 371.264527][ C0] kill_fasync+0x199/0x4d0 [ 371.271305][ C0] sock_wake_async+0x137/0x160 [ 371.278440][ C0] sk_send_sigurg+0x1f1/0x2e0 [ 371.285496][ C0] queue_oob+0x42c/0x4f0 [ 371.292099][ C0] unix_stream_sendmsg+0xcb1/0xe80 [ 371.299567][ C0] ____sys_sendmsg+0x972/0x9f0 [ 371.306779][ C0] ___sys_sendmsg+0x2a5/0x360 [ 371.313811][ C0] __sys_sendmmsg+0x27c/0x4e0 [ 371.320856][ C0] __x64_sys_sendmmsg+0xa0/0xc0 [ 371.328077][ C0] do_syscall_64+0x15f/0xf80 [ 371.335042][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.343293][ C0] } [ 371.345985][ C0] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 371.354842][ C0] ... acquired at: [ 371.359031][ C0] _raw_read_lock_irqsave+0x48/0x60 [ 371.364417][ C0] kill_fasync+0x199/0x4d0 [ 371.369024][ C0] evdev_pass_values+0x627/0xbd0 [ 371.374136][ C0] evdev_events+0x1e6/0x340 [ 371.378813][ C0] input_pass_values+0x288/0x890 [ 371.383930][ C0] input_event_dispose+0x330/0x6b0 [ 371.389224][ C0] input_inject_event+0x1dc/0x330 [ 371.394427][ C0] evdev_write+0x325/0x4c0 [ 371.399023][ C0] vfs_write+0x29a/0xb90 [ 371.403473][ C0] ksys_write+0x150/0x270 [ 371.408001][ C0] do_syscall_64+0x15f/0xf80 [ 371.412774][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.418850][ C0] [ 371.421178][ C0] -> (&client->buffer_lock){....}-{3:3} { [ 371.427350][ C0] INITIAL USE at: [ 371.431334][ C0] lock_acquire+0x106/0x350 [ 371.437576][ C0] _raw_spin_lock+0x2e/0x40 [ 371.443931][ C0] evdev_pass_values+0xb9/0xbd0 [ 371.450540][ C0] evdev_events+0x1e6/0x340 [ 371.456779][ C0] input_pass_values+0x288/0x890 [ 371.463466][ C0] input_event_dispose+0x330/0x6b0 [ 371.470320][ C0] input_inject_event+0x1dc/0x330 [ 371.477102][ C0] evdev_write+0x325/0x4c0 [ 371.483263][ C0] vfs_write+0x29a/0xb90 [ 371.489281][ C0] ksys_write+0x150/0x270 [ 371.495365][ C0] do_syscall_64+0x15f/0xf80 [ 371.501709][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.509342][ C0] } [ 371.511938][ C0] ... key at: [] evdev_open.__key.27+0x0/0x20 [ 371.520214][ C0] ... acquired at: [ 371.524113][ C0] _raw_spin_lock+0x2e/0x40 [ 371.528831][ C0] evdev_pass_values+0xb9/0xbd0 [ 371.533886][ C0] evdev_events+0x1e6/0x340 [ 371.538566][ C0] input_pass_values+0x288/0x890 [ 371.543698][ C0] input_event_dispose+0x330/0x6b0 [ 371.548991][ C0] input_inject_event+0x1dc/0x330 [ 371.554192][ C0] evdev_write+0x325/0x4c0 [ 371.558782][ C0] vfs_write+0x29a/0xb90 [ 371.563198][ C0] ksys_write+0x150/0x270 [ 371.567726][ C0] do_syscall_64+0x15f/0xf80 [ 371.572507][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.578589][ C0] [ 371.580912][ C0] -> (&dev->event_lock#2){..-.}-{3:3} { [ 371.586572][ C0] IN-SOFTIRQ-W at: [ 371.590563][ C0] lock_acquire+0x106/0x350 [ 371.596727][ C0] _raw_spin_lock_irqsave+0x40/0x60 [ 371.603586][ C0] input_event+0x71/0xc0 [ 371.609496][ C0] pegasus_irq+0x26f/0x5a0 [ 371.615570][ C0] __usb_hcd_giveback_urb+0x376/0x540 [ 371.622621][ C0] dummy_timer+0xbc0/0x4650 [ 371.629390][ C0] __hrtimer_run_queues+0x3c0/0xa20 [ 371.636254][ C0] hrtimer_run_softirq+0x17a/0x240 [ 371.643036][ C0] handle_softirqs+0x22a/0x840 [ 371.649450][ C0] do_softirq+0x76/0xd0 [ 371.655264][ C0] __local_bh_enable_ip+0xf8/0x130 [ 371.662033][ C0] __alloc_skb+0x1aa/0x7d0 [ 371.668107][ C0] alloc_skb_with_frags+0xc8/0x760 [ 371.675053][ C0] sock_alloc_send_pskb+0x878/0x990 [ 371.681923][ C0] unix_dgram_sendmsg+0x460/0x18d0 [ 371.688690][ C0] __sys_sendto+0x672/0x710 [ 371.694856][ C0] __x64_sys_sendto+0xde/0x100 [ 371.701297][ C0] do_syscall_64+0x15f/0xf80 [ 371.707548][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.715091][ C0] INITIAL USE at: [ 371.719000][ C0] lock_acquire+0x106/0x350 [ 371.725085][ C0] _raw_spin_lock_irqsave+0x40/0x60 [ 371.731892][ C0] input_inject_event+0xa4/0x330 [ 371.738423][ C0] kbd_led_trigger_activate+0xbc/0x100 [ 371.745476][ C0] led_trigger_set+0x535/0x960 [ 371.751806][ C0] led_trigger_set_default+0x260/0x2a0 [ 371.758850][ C0] led_classdev_register_ext+0x787/0x9c0 [ 371.766061][ C0] input_leds_connect+0x517/0x790 [ 371.772693][ C0] input_register_device+0xce0/0x1140 [ 371.779642][ C0] atkbd_connect+0x71e/0xa10 [ 371.785797][ C0] serio_driver_probe+0x82/0xb0 [ 371.792232][ C0] really_probe+0x267/0xaf0 [ 371.798319][ C0] __driver_probe_device+0x1ef/0x380 [ 371.805257][ C0] driver_probe_device+0x4f/0x240 [ 371.811878][ C0] __driver_attach+0x34c/0x640 [ 371.818214][ C0] bus_for_each_dev+0x23b/0x2c0 [ 371.824630][ C0] serio_handle_event+0x1af/0xf80 [ 371.831234][ C0] process_scheduled_works+0xb5d/0x1860 [ 371.838350][ C0] worker_thread+0xa53/0xfc0 [ 371.844515][ C0] kthread+0x389/0x470 [ 371.850152][ C0] ret_from_fork+0x514/0xb70 [ 371.856302][ C0] ret_from_fork_asm+0x1a/0x30 [ 371.862634][ C0] } [ 371.865133][ C0] ... key at: [] input_allocate_device.__key.7+0x0/0x20 [ 371.874160][ C0] ... acquired at: [ 371.877968][ C0] mark_lock+0x115/0x190 [ 371.882389][ C0] __lock_acquire+0x689/0x2cf0 [ 371.887348][ C0] lock_acquire+0x106/0x350 [ 371.892059][ C0] _raw_spin_lock_irqsave+0x40/0x60 [ 371.897435][ C0] input_event+0x71/0xc0 [ 371.901855][ C0] pegasus_irq+0x26f/0x5a0 [ 371.906444][ C0] __usb_hcd_giveback_urb+0x376/0x540 [ 371.911995][ C0] dummy_timer+0xbc0/0x4650 [ 371.916676][ C0] __hrtimer_run_queues+0x3c0/0xa20 [ 371.922068][ C0] hrtimer_run_softirq+0x17a/0x240 [ 371.927356][ C0] handle_softirqs+0x22a/0x840 [ 371.932357][ C0] do_softirq+0x76/0xd0 [ 371.936687][ C0] __local_bh_enable_ip+0xf8/0x130 [ 371.941968][ C0] __alloc_skb+0x1aa/0x7d0 [ 371.946561][ C0] alloc_skb_with_frags+0xc8/0x760 [ 371.951855][ C0] sock_alloc_send_pskb+0x878/0x990 [ 371.957224][ C0] unix_dgram_sendmsg+0x460/0x18d0 [ 371.962508][ C0] __sys_sendto+0x672/0x710 [ 371.967179][ C0] __x64_sys_sendto+0xde/0x100 [ 371.972119][ C0] do_syscall_64+0x15f/0xf80 [ 371.976887][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.982955][ C0] [ 371.985296][ C0] [ 371.985296][ C0] stack backtrace: [ 371.991192][ C0] CPU: 0 UID: 0 PID: 4982 Comm: klogd Tainted: G L syzkaller #0 PREEMPT(full) [ 371.991214][ C0] Tainted: [L]=SOFTLOCKUP [ 371.991220][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 371.991236][ C0] Call Trace: [ 371.991245][ C0] [ 371.991252][ C0] dump_stack_lvl+0xe8/0x150 [ 371.991271][ C0] print_irq_inversion_bug+0x1d2/0x1e0 [ 371.991293][ C0] mark_lock_irq+0x3d2/0x420 [ 371.991314][ C0] mark_lock+0x115/0x190 [ 371.991332][ C0] __lock_acquire+0x689/0x2cf0 [ 371.991351][ C0] ? __pfx_dev_printk_emit+0x10/0x10 [ 371.991372][ C0] ? __dev_printk+0x131/0x190 [ 371.991393][ C0] ? input_event+0x71/0xc0 [ 371.991412][ C0] lock_acquire+0x106/0x350 [ 371.991426][ C0] ? input_event+0x71/0xc0 [ 371.991446][ C0] ? __pfx__dev_warn+0x10/0x10 [ 371.991463][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 371.991488][ C0] _raw_spin_lock_irqsave+0x40/0x60 [ 371.991535][ C0] ? input_event+0x71/0xc0 [ 371.991562][ C0] input_event+0x71/0xc0 [ 371.991591][ C0] pegasus_irq+0x26f/0x5a0 [ 371.991609][ C0] __usb_hcd_giveback_urb+0x376/0x540 [ 371.991635][ C0] dummy_timer+0xbc0/0x4650 [ 371.991677][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 371.991699][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 371.991721][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 371.991744][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 371.991765][ C0] __hrtimer_run_queues+0x3c0/0xa20 [ 371.991792][ C0] hrtimer_run_softirq+0x17a/0x240 [ 371.991815][ C0] handle_softirqs+0x22a/0x840 [ 371.991831][ C0] ? do_softirq+0x76/0xd0 [ 371.991847][ C0] ? __alloc_skb+0x186/0x7d0 [ 371.991866][ C0] ? __alloc_skb+0x186/0x7d0 [ 371.991885][ C0] do_softirq+0x76/0xd0 [ 371.991904][ C0] [ 371.991909][ C0] [ 371.991914][ C0] __local_bh_enable_ip+0xf8/0x130 [ 371.991929][ C0] __alloc_skb+0x1aa/0x7d0 [ 371.991950][ C0] alloc_skb_with_frags+0xc8/0x760 [ 371.991971][ C0] ? kasan_save_track+0x3e/0x80 [ 371.991993][ C0] ? __kasan_slab_free+0x5c/0x80 [ 371.992013][ C0] ? kfree+0x1c5/0x640 [ 371.992030][ C0] ? syslog_print+0x57c/0x610 [ 371.992048][ C0] ? do_syslog+0x583/0x7d0 [ 371.992065][ C0] ? __x64_sys_syslog+0x7c/0x90 [ 371.992082][ C0] ? do_syscall_64+0x15f/0xf80 [ 371.992105][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.992122][ C0] sock_alloc_send_pskb+0x878/0x990 [ 371.992142][ C0] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 371.992160][ C0] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 371.992185][ C0] unix_dgram_sendmsg+0x460/0x18d0 [ 371.992207][ C0] ? kfree+0x1c5/0x640 [ 371.992224][ C0] ? syslog_print+0x57c/0x610 [ 371.992244][ C0] ? syslog_print+0x57c/0x610 [ 371.992262][ C0] ? __pfx_syslog_print+0x10/0x10 [ 371.992282][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 371.992304][ C0] ? aa_sock_msg_perm+0xda/0x1b0 [ 371.992325][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 371.992346][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 371.992365][ C0] __sys_sendto+0x672/0x710 [ 371.992386][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 371.992417][ C0] ? rcu_is_watching+0x15/0xb0 [ 371.992437][ C0] __x64_sys_sendto+0xde/0x100 [ 371.992458][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.992473][ C0] do_syscall_64+0x15f/0xf80 [ 371.992497][ C0] ? clear_bhb_loop+0x40/0x90 [ 371.992514][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.992529][ C0] RIP: 0033:0x7f8a8c482407 [ 371.992544][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 371.992558][ C0] RSP: 002b:00007ffd3fb43610 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 371.992574][ C0] RAX: ffffffffffffffda RBX: 00007f8a8c332c80 RCX: 00007f8a8c482407 [ 371.992586][ C0] RDX: 0000000000000054 RSI: 00007ffd3fb43750 RDI: 0000000000000003 [ 371.992595][ C0] RBP: 00007ffd3fb43b80 R08: 0000000000000000 R09: 0000000000000000 [ 371.992605][ C0] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffd3fb43b98 [ 371.992615][ C0] R13: 00007ffd3fb43750 R14: 0000000000000039 R15: 00007ffd3fb43750 [ 371.992631][ C0] [ 372.416569][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 372.423892][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 372.431182][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 372.438636][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 372.446721][ T4978] usb 4-1: control msg error: -71 [ 372.446901][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 372.458954][ C0] usb 4-1: pegasus_irq - usb_submit_urb failed with result -1 [ 372.495891][T13473] usb 4-1: USB disconnect, device number 58 [ 372.552561][T13453] usb 2-1: USB disconnect, device number 73 [ 372.611611][ T5720] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 372.773962][ T5720] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 372.785031][ T5720] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 372.794902][ T5720] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 372.804793][ T5720] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.822098][T14872] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 372.834489][ T5754] usb 1-1: string descriptor 0 read error: -71 [ 372.840849][ T5754] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 372.851204][ T5754] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.869617][ T5720] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 372.880389][ T5754] usb 1-1: rejected 1 configuration due to insufficient available bus power [ 372.890180][ T5754] usb 1-1: no configuration chosen from 1 choice [ 372.899900][ T5754] usb 1-1: USB disconnect, device number 43 [ 373.217425][ T5754] usb 3-1: USB disconnect, device number 61 [ 378.562663][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.563067][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 378.569903][ T1314] ieee802154 phy1 wpan1: encryption failed: -22