last executing test programs: 14.00223062s ago: executing program 4 (id=2769): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000240)={0x40, 0x34325241, 0x3, @discrete={0x40610f3e, 0xffffffff}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket(0x10, 0x803, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000ec0)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xfff2}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_ACT={0x34, 0x3, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000340)) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="680000000001010400000000141a000002000010240001801400016608000100e000060000000200e00000010c0002800500010000000000240002801400018008000100ac1414aa080002007f0000010c0002800500010000000019080007400000000104001640"], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000001280)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x259, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xfe, 0xa0, 0xab, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x2, 0x3, {0x9, 0x21, 0x80, 0x8e, 0x1, {0x22, 0x71}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xa4, 0x8, 0x84}}}}}]}}]}}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) ioctl$int_in(r1, 0x40000000af01, 0x0) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) ioctl$VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000240)={0x40, 0x34325241, 0x3, @discrete={0x40610f3e, 0xffffffff}}) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) socket(0x10, 0x803, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket$unix(0x1, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) socket(0x400000000010, 0x3, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000ec0)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xfff2}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_ACT={0x34, 0x3, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000340)) (async) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="680000000001010400000000141a000002000010240001801400016608000100e000060000000200e00000010c0002800500010000000000240002801400018008000100ac1414aa080002007f0000010c0002800500010000000019080007400000000104001640"], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000001280)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x259, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xfe, 0xa0, 0xab, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x2, 0x3, {0x9, 0x21, 0x80, 0x8e, 0x1, {0x22, 0x71}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xa4, 0x8, 0x84}}}}}]}}]}}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0}) (async) 10.885325866s ago: executing program 4 (id=2785): socket$netlink(0x10, 0x3, 0x8) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) accept4$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000300)=0x1c, 0x80000) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f00000000c0)=[{0x0, 0x1, 0x2}, {0x64}, {0x81}, {0x6, 0x0, 0xfd, 0x7a1f}]}) socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r6, 0x0, 0x2e, &(0x7f0000000140)={0x24, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) close(0x3) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) unshare(0x22020600) unshare(0x26020480) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r8 = fanotify_init(0x200, 0x0) fanotify_mark(r8, 0x2d, 0x1001, r7, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r3, 0x5a00, 0xbc03, 0x6, &(0x7f00000000c0)={[0x10000]}, 0x8) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 8.736789023s ago: executing program 0 (id=2791): r0 = socket$inet(0x2, 0x3, 0x6) fcntl$getflags(0xffffffffffffffff, 0x401) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, &(0x7f0000000040)={0x3, "257beb"}, 0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x2100, 0x700, 0x10000, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x60, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote}}}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd00"], 0xfdef) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140affffffff00000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a010100000000000000000000000a14000000110001"], 0x70}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) syz_emit_ethernet(0x2e, &(0x7f0000002ac0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0xff}, @dev={0xac, 0x14, 0x14, 0x16}, {[@end, @ssrr={0x89, 0x3, 0xbc}]}}, {0x0, 0x0, 0x8}}}}}, 0x0) syz_clone3(&(0x7f00000001c0)={0x2000000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000000)={'tunl0\x00', r1, 0x20, 0x40, 0x1001000, 0x6, {{0x5, 0x4, 0x2, 0x6, 0x14, 0x64, 0x0, 0xf9, 0x2f, 0x0, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x2, 0x0}}}}}) 8.662895551s ago: executing program 3 (id=2792): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f00000000c0)={0x0, 0xaee2, 0x20000, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) socket$packet(0x11, 0x3, 0x300) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000600)=ANY=[@ANYRESHEX=r1, @ANYRES32=r0], 0x0, 0x401, 0x0, 0x0, 0x40f00, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x56}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYRES64=r3], 0x50) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000800)={0x0, 0x84, &(0x7f0000000880)=[@in={0x2, 0x4e24, @private=0xa010102}, @in={0x2, 0x4e21, @local}, @in={0x2, 0x4e20, @rand_addr=0x64010102}, @in6={0xa, 0x4e22, 0x6, @dev={0xfe, 0x80, '\x00', 0x20}, 0x8}, @in6={0xa, 0x4e24, 0x5, @local, 0xca}, @in6={0xa, 0x4e21, 0x1, @private1, 0xc3}]}, &(0x7f0000000840)=0x10) setsockopt$sock_int(r6, 0x1, 0x2a, &(0x7f0000000100)=0x7, 0x4) r7 = io_uring_setup(0x2ca3, &(0x7f0000000740)={0x0, 0x42db, 0x2, 0x8, 0xc1}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r5}, 0x8) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_MADVISE={0x19, 0x8, 0x0, 0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x13}) connect$inet(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect(0x5, 0x2d, &(0x7f00000006c0)=ANY=[@ANYBLOB="12015002d2cfa00863110001badcb5e7126ad84dd88d1cb20102030109021b0001050590010904d70301ff03040409050f8300020db305"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) write(r9, &(0x7f0000000340), 0x11000) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_GET_FPU(r8, 0x81a0ae8c, &(0x7f0000000440)) r10 = socket$inet(0x2, 0x3, 0x5) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r10, 0x89f3, &(0x7f0000000300)={'gre0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x20, 0x8, 0x1000, 0x756, {{0x5, 0x4, 0x2, 0x37, 0x14, 0x66, 0x0, 0xe9, 0x2f, 0x0, @private, @empty}}}}) syz_io_uring_setup(0x770d, &(0x7f0000000180)={0x0, 0x2a1d, 0x80, 0x1, 0x369, 0x0, r2}, &(0x7f0000000040), &(0x7f0000000200)) syz_usb_connect(0x1, 0x5d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cd0361086d040e0ab55f0102030109024b0001020000000904be0001030000200905030400"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) 8.585185001s ago: executing program 4 (id=2794): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100007856bb40da0b53813de20102030109021200010000000009040000000206"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}]}}]}, 0x44}}, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000280)={0x60, 0x0, 0x4, "83d838f2"}, 0x0, 0x0}) 7.437075712s ago: executing program 0 (id=2797): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f0000000440)) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003100)=@newchain={0x43c, 0x64, 0x100, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xfff1}, {0xc, 0xe}}, [@f_rsvp={{0x9}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0xfffffffb, 0x4, 0xdde, 0x8, 0x7, 0x809a, 0x4, 0x3, 0x5, 0x2, 0x200, 0x7, 0x2, 0x2, 0x1000, 0x6, 0x4, 0x2, 0x3, 0x1c4, 0x6, 0x94, 0x4, 0x8, 0x0, 0xb236, 0x5, 0x1, 0x8000, 0x7, 0x4, 0xc, 0x0, 0x9f8, 0x7fff, 0x8001, 0x8, 0x1, 0xa1, 0x7fffffff, 0x7, 0x8001, 0x200, 0x500000, 0x8, 0x1, 0xa000000, 0x1, 0x401, 0x7, 0xb, 0x9, 0x3, 0xe, 0x9, 0x9, 0x9, 0x8, 0x2, 0xf, 0x4, 0x9, 0x6, 0x1ff, 0xff, 0xffffffff, 0xfff, 0x10, 0x3, 0x80000001, 0x8, 0x38000, 0x9, 0x3, 0x8, 0xffffffb9, 0xb, 0x4, 0x80000000, 0x4, 0x6a1, 0x9, 0x8, 0x7, 0xffff, 0xffff60d6, 0xccff, 0x5, 0x7, 0x6, 0xf730, 0x1ff, 0xfff, 0x94, 0x6, 0x1, 0x1, 0x6, 0x7, 0x5, 0x40, 0x49, 0xf, 0x3, 0x10, 0xb, 0x6, 0xffff0000, 0x7, 0x2, 0x3, 0x4, 0x2a8b, 0x4, 0x8, 0x5, 0x1, 0x2, 0xf, 0xe98d, 0x0, 0x8, 0x7, 0x80000000, 0x2, 0x9caa, 0x5, 0x4, 0x10, 0x9, 0x8, 0x8, 0xfcf, 0x9, 0x6, 0x7, 0x1, 0x0, 0xffff, 0xb19, 0x10000, 0x2, 0x354, 0x101, 0x1, 0x7, 0x1, 0x1000, 0x2, 0x4e, 0xc0, 0x6ae, 0xc889, 0x8, 0x3, 0xae33, 0x8, 0x9, 0xfffffff9, 0x9, 0x6, 0x8, 0xe, 0xfff, 0x10001, 0x5, 0x2, 0x80000001, 0x7, 0x7f6, 0x5, 0x7, 0x473, 0x401, 0x3ab, 0x7, 0x6, 0x5, 0xfffffff9, 0x6, 0x4ce, 0xf72a, 0x8, 0x7ff, 0x7, 0x1, 0x5, 0x7ff, 0x8, 0x1, 0x3, 0x0, 0x0, 0x8, 0x1, 0x1, 0xf9ae, 0x80000000, 0xd, 0x1, 0x40, 0x6, 0x7a8, 0x7, 0x6, 0x2, 0x9, 0x0, 0x6, 0x8, 0xc5f8, 0xca83, 0x3, 0xa0000000, 0x9, 0x2, 0x6, 0x8, 0x8, 0x3, 0x6, 0x7, 0x81, 0xffffffee, 0x3, 0x8, 0xa, 0x98, 0x3, 0xc3, 0xfffffffa, 0xf4, 0x86, 0xaca, 0x8001, 0x7, 0x200000, 0x80000001, 0x0, 0x10001, 0x2, 0xfffffffe, 0xfe6, 0x2, 0x1ff, 0x7fffffff, 0x5, 0xbdfd, 0x8, 0x7, 0x1, 0x1, 0x8, 0x5a, 0x0, 0x1]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x40881) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x9}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000240)={r4, 0x2c, &(0x7f0000000200)=[@in6={0xa, 0x4e23, 0x3c000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, @in={0x2, 0x4e20, @empty}]}, &(0x7f0000000300)=0x10) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r6 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r6, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r7, 0x60b, 0x0) write$char_usb(r7, 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(r7, 0xc0104811, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000002100010000000000000000000a000040000000000000000005001600001b000008001700", @ANYRESOCT=r8], 0x2c}, 0x1, 0x0, 0x0, 0x20004894}, 0x0) syz_usb_control_io(r6, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000007f00)=ANY=[@ANYBLOB="280000003d0007012dbd7000f9dbdf25037c00000400fc800c0001800600060008"], 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) r10 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r10, 0x84, 0x12, &(0x7f0000000140), 0x4) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x4, r3, 0x80000}) ioctl$DMA_BUF_IOCTL_SYNC(r11, 0x40086200, &(0x7f0000000080)=0x3) recvmmsg(r2, &(0x7f0000006fc0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000d80)=""/247, 0xf7}, {&(0x7f00000004c0)=""/245, 0xf5}], 0x2}, 0x3}], 0x1, 0x1, 0x0) 7.171053509s ago: executing program 2 (id=2798): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000280)="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", 0x400}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6, 0x0, 0x0, 0x400c0}, 0x10) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sched_setattr(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="8011000042000701feffffff00000020017c000004004680681101"], 0x1180}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) (fail_nth: 32) 6.468932283s ago: executing program 2 (id=2799): r0 = syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x18, &(0x7f00000001c0)={0x0, 0x0, 0x4, '2s8/'}, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = syz_clone(0x8011, 0x0, 0xfffffffffffffdd0, 0x0, 0x0, 0x0) ptrace(0x10, r2) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 6.115585727s ago: executing program 4 (id=2800): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x100000000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000240)={0xe, 0x1, 0x0, "005a03f073e22f00000000002000fffe00009a0300000000000000000400", 0x50313459}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8983, &(0x7f0000000000)={0x8, 'pimreg0\x00', {'veth1_virt_wifi\x00'}, 0x436}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201a6551eb9431135be01b0293df400100109021b000124a8e4d7c6c2417f7d04000000090503"], 0x0) 5.952722177s ago: executing program 1 (id=2801): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x4, 0x84) shutdown(r1, 0x0) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$pokeuser(0x6, r6, 0x358, 0xffff8880b870dfff) r7 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r10 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000480), 0x84400) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0xc, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r11}}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000180), 0x7fff, 0x800) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r7, 0x627, 0x4c1, 0x43, 0x0, 0x30) sendmsg$NFT_BATCH(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4010}, 0x4008050) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000020000000a3c000000120a09000000000000000000020000000900020073797a320000000008000440040000000900010073797a30000000000800"], 0x64}, 0x1, 0x0, 0x0, 0x44800}, 0x0) syz_usb_connect$uac1(0x2, 0xa6, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106b1d01010000000003010902940003010040000904000000010100000a240100", @ANYBLOB="e96f8c5eac54794848890b97f71195fa71544d7ec3eb5e3e2d2ac4", @ANYRESHEX, @ANYRES32=r3, @ANYBLOB="aa4ddd3eb4cbdc32fd72d87a51fabe239138756bef733bdcd0c4", @ANYRESHEX, @ANYRES16=r3], 0x0) openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2040, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) 5.808850595s ago: executing program 0 (id=2802): unshare(0x66000080) (async) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xfefc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r1, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r2, &(0x7f0000000780)=[{&(0x7f00000003c0)="0e000000", 0x4}], 0x1) (async) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYRESHEX=r1, @ANYRES16=r1, @ANYRES32=r1, @ANYRESOCT=r0, @ANYRES32=r0, @ANYRESDEC=r1, @ANYRES64=r2], 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', 0x0}) (async) r4 = gettid() (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x10) (async) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r3, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r4], 0x28}}, 0x0) 4.684564665s ago: executing program 3 (id=2803): ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)=0x2) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c0000001000190026bd7000feffffff00000000", @ANYRES32=0x0, @ANYBLOB="a4250100000000001400030076657468315f746f5f7465616d000000140014006970365f7674693000000000001f000014001680100001800c0009"], 0x5c}}, 0x80) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f00000083097855000b93bf"], 0x0}, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f00000005c0)={&(0x7f0000000180), 0x10, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="050000000200"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRESDEC=r1, @ANYBLOB="040000000100f2fffffffffff201000073ba991910f2dfa9"], 0x48}, 0x2}, 0x20000080) (async) sendmsg$can_bcm(r2, &(0x7f00000005c0)={&(0x7f0000000180), 0x10, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="050000000200"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRESDEC=r1, @ANYBLOB="040000000100f2fffffffffff201000073ba991910f2dfa9"], 0x48}, 0x2}, 0x20000080) r3 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGES(r3, 0xd01c4813, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) eventfd2(0x70000000, 0x800) socket(0x400000000010, 0x3, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) (async) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r4, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x2) (async) r5 = fsmount(0xffffffffffffffff, 0x1, 0x2) write$binfmt_misc(r5, &(0x7f0000000700)="9790878e39b7dcff83904b1924ff45423755dbea01b261e19c26cb77457f18bc0cab98b3f53ec6dd21ec8ae60b62826d8dbbfa513b4a978ea7d7e23d99281f1c5c216441bb7a418a8d6894991c4e83e9bdfbfaa014967c6eb72ea840883429b95a94b24825ca75959c061b53338d48fe34eb276d006663ff23c227e65f01980ecf4de0827615df9a1b7b3b15aacc848dd9116cc7f97a39d446e1417111c5deb1b55aecb9ea38fd6403f85232efae804e2b8f8de6eb8762fc4550", 0xba) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r6 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r6, 0x0, 0x8000) (async) sendmsg$nl_route(r6, 0x0, 0x8000) clock_gettime(0x0, &(0x7f00000025c0)) clock_gettime(0x0, &(0x7f0000000580)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000002580)=[{{&(0x7f00000005c0)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)=""/180, 0xb4}, {&(0x7f00000001c0)=""/236, 0xec}, {&(0x7f0000000640)=""/129, 0x81}, {&(0x7f0000000340)=""/227, 0xe3}, {&(0x7f00000002c0)=""/112, 0x70}, {&(0x7f0000003640)=""/4107, 0x100b}], 0x6, &(0x7f0000002640)=""/4096, 0x1000}, 0x6}], 0x1, 0x40000021, &(0x7f0000002600)={r7, r8+60000000}) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r9, 0x84, 0x10, &(0x7f00000007c0)=@sack_info={r11, 0x81, 0xa}, 0xc) 4.200583966s ago: executing program 0 (id=2804): gettid() (async) gettid() move_pages(0x0, 0x10, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x0) 4.04769428s ago: executing program 0 (id=2805): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, 0x0, &(0x7f0000000000)=0x34) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000080)={{0xf, 0x1}, 0x1, 0x2, 0x2, {0x0, 0xb}, 0x6, 0x6}) 4.02312041s ago: executing program 2 (id=2806): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x11, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000400000000000000feffffff18acb600", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085200000010000008520000003000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], 0x0, 0x9491426, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x6, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0x4, 0x7, 0x6}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000300), &(0x7f0000000340)=[{0x2, 0x2, 0xf, 0x3}, {0x0, 0x5, 0xf, 0x9}]}, 0x94) mount$fuse(0x0, 0x0, 0x0, 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB=',roo', @ANYBLOB=',gro']) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getpeername$qrtr(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000500)=0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x54, 0x10, 0x19, 0x8070bd2c, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x42b36, 0x79369}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}]}}}, @IFLA_IFNAME={0x14, 0x3, 'ip6gretap0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0xcc93f1266b7358bf}, 0x8040) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a14", 0x9) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.740871528s ago: executing program 3 (id=2807): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x1086a}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004080}, 0x8ae257a062cc3564) getgid() r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000008000000cf1000000000000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x8}, 0x94) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfc, 0x40000}, 0xc) syz_extract_tcp_res$synack(&(0x7f0000000080), 0x1, 0x0) 3.553844944s ago: executing program 0 (id=2808): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) (async) r1 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) pwritev(r1, &(0x7f00000002c0)=[{&(0x7f0000001180)="2d361238fbdf8cd39fa9db8b95dc720c5c00badf51c4acde7c04dc06d6d30339be5f57198d4fb57b8495d2e381b75de73c7a1053799a58d47142b2fd19a25524b3ff00d6c3b1a5ef3bfdeef3224aff4b923d654f01e7cef3c343dc7715fb3fcb8aeec9f51d6657086c59ea27d3b7c2e7307317d47a75cda211d8da18765dc493f65b07cc9f8ec5c7cc2384dd36b5d97f8393189a6d49592b991cf684da11e71031e173ca92d5b8e31f5026e0c2e8324873", 0xb1}, {&(0x7f0000001280)="99d50807eafc00", 0x7}], 0x2, 0x10001, 0x100000c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x548, 0x0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x478, 0xffffffff, 0xffffffff, 0x478, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x1, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xff, 0xffffffff, 0xff000000], 'netpci0\x00', 'ipvlan0\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3, 0x1, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000300)={0x18, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x3}, @release], 0xffffffffffffff5d, 0x0, 0x0}) 3.521642101s ago: executing program 3 (id=2809): r0 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x0, 0x3}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000140), 0x4, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x2003, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x34, 0x2, [@TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x6}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x1}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x6}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x1}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x7}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0xaa}]}}]}, 0x68}}, 0x4000010) r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r6, &(0x7f0000000780)=[{&(0x7f0000000100)="452e2e7c8bd8018d531b71", 0xb}], 0x1) ioctl$EVIOCSKEYCODE(r3, 0x40084504, &(0x7f0000000400)=[0x5, 0x2ff]) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r0, 0x48e9, 0x0, 0x2, 0x0, 0x0) 3.438094733s ago: executing program 2 (id=2810): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000240)=ANY=[@ANYBLOB="60000000240001002abd7000fedbdf25440000004c000e8048"], 0x60}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 3.280175424s ago: executing program 2 (id=2811): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) ioprio_get$pid(0x0, r2) r3 = socket(0x28, 0x5, 0x0) r4 = syz_io_uring_setup(0x4f6, &(0x7f0000000200)={0x0, 0x80fd, 0x1000, 0x1, 0x2cf}, &(0x7f0000000080)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0xffffffff, @my=0x1}, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x47bc, 0xf5, 0x0, 0x0, 0x0) 2.985921042s ago: executing program 4 (id=2813): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/address_bits', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = add_key$user(&(0x7f0000000200), 0x0, 0x0, 0x0, 0xfffffffffffffffd) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000200), 0x0, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) ioctl$DRM_IOCTL_MODE_GETENCODER(r6, 0xc01464a6, &(0x7f0000000180)={r7}) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) keyctl$dh_compute(0x17, &(0x7f0000000380)={r3}, 0x0, 0x0, 0x0) socket(0x1d, 0x2, 0x6) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) fchmod(r0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2.575890133s ago: executing program 1 (id=2814): r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000440)={'wlan0\x00', &(0x7f00000007c0)=@ethtool_drvinfo={0x3, "712a47568b2c402e2c5792b5adbbb82e0c1f8ee15ff7a4373a68eb060d768899", "4a3eb3768515948dfab2e1f39f58465d11fafea228a4086797ceab4b73313c93", "2a9b70e21ec29d05eb89d11e2ed69c5ab4272fac74fcaab9925fabaa303bac61", "38e51009894cae17d2b361d9fedae469737f49b6a39d85a1ca87cbbb9b8e4809", "f16f995bdf5e1d0f32a39b81f061d8cf37f3a57c678b2356afda00", "87e20d1a690faf456b2d5369", 0x7afc, 0x3, 0x4, 0x6fa, 0x7ff}}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 64) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7ffeffff}}}}]}, 0x44}}, 0x20040084) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x4, 0x30, 0x2}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400dc}, 0x24000080) (async) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r5, 0xffffffffffffffff, 0x0) 2.168609617s ago: executing program 1 (id=2815): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x11, 0x4, 0x4, 0x5}, 0x50) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'erspan0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000200)="0b032200eb1025120212475400f6a13bb1000000080086dd48035abb605e841eadcbd808b457fd941a0a31cc8a98411768dbac8a59b39d9237d16afc53c99b1e73471254ed8a29153a971a", 0x4b, 0x0, &(0x7f00000001c0)={0x11, 0x0, r3}, 0x14) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2e0, 0x100, 0xffffffff, 0xffffffff, 0x100, 0xffffffff, 0x210, 0xffffffff, 0xffffffff, 0x210, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00', [0xff, 0xff, 0xffffffff, 0xff000000], [0xff000000, 0xff0000ff, 0xff, 0xff], 'macsec0\x00', 'rose0\x00', {0xff}, {0xff}, 0x2f, 0xfd, 0x5, 0x1}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x4, 0x9, 0x9d97, 0x2}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}, [0xff, 0xffffffff, 0x0, 0xffffff00], [0xff000000, 0x0, 0xff000000, 0xff], 'team_slave_0\x00', 'gre0\x00', {}, {}, 0x33, 0x0, 0x4, 0x56}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x782, 0x8, 0x80000000, 'pptp\x00', 'syz0\x00', {0x9}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x340) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0x1, 0x7, 0xfffb, 0xffd, 0x4, "3f3c5e0000ff61dcff34fffff903ffee00", 0xb1, 0x3fe}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x40890}, 0x44080) r4 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) syz_io_uring_setup(0x49b, &(0x7f0000000400)={0x0, 0xcc90, 0x100, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) unshare(0x28000600) r7 = syz_open_dev$evdev(&(0x7f00000002c0), 0x0, 0x0) ioctl$EVIOCGABS20(r7, 0x40044591, 0x0) ppoll(&(0x7f00000000c0)=[{r7, 0x40}], 0x1, 0x0, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITE={0x17, 0x0, 0x4004, @fd=r4, 0xb, 0x0, 0x0, 0x4, 0x1}) syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x1, 0x100002cf}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r8, r9, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) r10 = syz_io_uring_setup(0x3e00, &(0x7f0000000400)={0x0, 0x100002, 0x10300, 0x2, 0xffffffff}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) syz_io_uring_submit(r11, r12, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x23456, {0x0, r13}}) syz_io_uring_submit(r5, r9, &(0x7f0000000300)=@IORING_OP_SYMLINKAT={0x26, 0x48, 0x0, r1, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x1, {0x0, r13}}) r14 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r14, &(0x7f0000000040), 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) 1.738621589s ago: executing program 3 (id=2816): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x400002, 0x0) (async) syz_io_uring_setup(0x5ce, &(0x7f00000000c0)={0x0, 0x7734, 0x80, 0x3, 0x34f}, &(0x7f0000000000), &(0x7f0000000080)) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x82e, 0x0, 0x0, 0x4}]}, 0x10) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) io_uring_enter(0xffffffffffffffff, 0x238d, 0x0, 0x8, 0x0, 0x0) (async) socket(0x2, 0x805, 0x0) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) (async, rerun: 32) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, r2, {0x7, 0x2b, 0x0, 0x40080000, 0x0, 0x0, 0x7, 0x7f, 0x0, 0x0, 0x4}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0/file0\x00', 0x62) (async) syz_fuse_handle_req(r1, &(0x7f0000004200)="0aca6c6a1bafd2989666a6014bd5e9e63945bda64c1239d970f0d349110c18fe029ac3e29dc9ff9ead2ed3cef0fe77ef8348a82d3da186ce2140d53dfeb34dc1e128dca5a5225db8052bd348c2d1a3de224233032fff8b85c85885c90e9d0c205001db3dfc55d17a7dab1761c1733c465113c056d3bcbaf6a52dbda820a1db5e7d777f6c716e5f60b04cc1c6a362d891cb08fa109c5a00e427f8636059d934f255021cf13d2bc9cff93f049018b8e48f6480d324f08eb83655d3eb5a379ec18c861f596db17bcc23ada65f26a02c4c0c9e3167cc582e93661cdd0dc7581ac1958d9cd08104af251d87d8b5d82150b8cc4ca6d23475f259a8b7d69839cf728a6c478eec56135bdfc6428a318cf2b838d16984d0498d33ac41fe67361bdf5752db6a5ae32979463b60ad6b99527affdcb2b4a0f23b2f140c981b00c99cd25d563ff6c3308b048371eb2e599880a2b67ef9a2282947dbb23a3f1944193a801187f206587a52ee7a33032a842b31fcc0db079c554c97a09e3812aea45702099ab648888d08ae48a187a5acee7b9a2edbc320c64514554e540286053dd2acb9f9ec83435f43193b45b324c8406cdf976bc7607cf9385e99bf5f5205110d0c27abcac49e7ec7deef560f953d2c64bfd014ddcb1b2cbccbe401a312436799235807f4fdf52a9f894656fcbe1e971163e8d743450c49875379522df77d5e8910df837701d135f4589d4d15355e1638eff568a18a0d6217a11acf8fdf0fed0216635215d248aff37d85b62edbc989bc6d4757e6347ec971ae2b1e0d194e6c11dd8f7c108219569e157eceb7c14a288aad98a24de9a81f9ba1dd5271c17adfdf41f3393789c30f9345f6ad4ad1a6bf46640f69f7c038c4fec6652853a3f4fece3c3d15bfdea15f37e961a03de54181724801808a3a9030ba4650ce6fa9e6822c794d7b9da548a2eab977ab0c08b2d985957d5cd70ec677637219c6ca7c7c4d0a7a7ca38c1862583735b46b3addfd1c72cf7f63f11bd85ed59b9ba94db5c2fbd48461ab735b439a992e3a4462545e042e3c863199c006ef3a3be4473b24b782f86a3c1dca9848283bc47f4322273681efa1c8c413dc81a459e4e755846a094971708eb7f428aa67d0c81ce7f33d856e13a342b05eb403af7b4cab191c4ab9d650158808ec74d04f4b765e513b94f10345322e48485d29eb8b1408d7776f98e3625a20220e94789476affdbd19b44bac6bd2fa2b0ba10e93582178a3ef4938dcda25bc6245621b1ced780ca089010e8e51493c1ac7747e949b67fe6e3858e60a1e45a657c080fdc0bcbfcac2ba9d027f02ce30cc7440ce71eac66bb2eb264dcb1306a6054fde6640ca51ec4ccaf500a87f073b58ab286daeefd8d3ec7ee882551f7b6a36ab79a8e10d1d3c234ffaa33e95026025cc39a057efe7823dcb689131b1e83572b4dd1f49097580976c046424618fd6047d46928087d483df952738448d164c9288b15a4982493bf7ebc1976d0942846c8310556732b4cabff937a51e926caa37ae54dea339c2a2a8d73be2ca3a39edcb4ef8bd58a3c4c98c48b9f37a1424b6a54919921d4429611d0dd585d1d357c3c1ad1cf68f36907f8d9c28a14ec2cf2510fe54510111ddd7a67fb8d2f449227da397c32b8dca19971ab9d76e1f6ce0c54c9de1cb1daa1936b62f838170b8b6e7f34168a099619a113c83347ce2c0f6086855385062b6e074b68391e59430236f9ec687a265072f7a40efbef3cfe5bc1cfb364d87a597507811d2bf6af59e20fcf4703caa63285decabcc367ccfb8e27efecb14db8b1167938f457d4117c62f440d807b5482bb223b4b14e9526f9ede33631cdf9fcab53b3fbebc9344ab130d793dad610f2fe41ef388acaebd6cf26aedf7c7c6aaee956cf92c14583bd45b189d43f7b44419df1e0adecc8fbedb357656b7649721f81c2207ebb37e3ae21bdce8c982cbbdec012c7fe587161ff741610fb8ea5883c758527873ca2197b5f1058083c40203cc4dbdf7f4f1388f2309d22a6a1767137703296ad3aeabdbb3529a290da9c6cc5631b2f1ad25c766e3cbd8d9f588bafd17495f572bf1cfe1e8b5bb22130963cca8832f846300bb6dc0baec85b500e1a48fdd14cf0442fe4d441821d7e46fb5e2220c96bfb16ab8ca883a4477bc756dfc6622f320a648cfb57f9de9aef33f9986c6517d1a7eb59348541d6d3494ebe7bc1ed4a86f06411491d176da36de8c8a8d8ea28928bda63fe863277e4325b756421d4d2042428250ed526e538fb930671e9ad517aac494a58aecbc908b512016fe4d8f60b576e230b3206a0c7bd4fef717a8cda0029d13ecc3c8f8686f717adc1440353c236aa71f842839c5ce92c83fbfb57b221271aa6f4029219c3c2ed7a3a53d8ff065ce30d403c95cf69e7963d5bfb63bccb5b28ca125f0d7094072273ce3108093d0ff83ab98393b8e9a87117f4933a8c8ecf353931da3b8dacb20685a65dd865bd6031cd2b0b7e237901c782c6e6ea8742e89dbb01eb925dd6e74c53bd28d3c424cee35eb29823f2138b92516075e00342fa4dbc5b27675a651032c8ffb3da6c5349d0f9b2779778d0cfa1c8d4cc34d4fe95fc435e4768e93d56d2c142f25df1b9afa7d103486842372b36261b96b7b3acc0e78ff20a535ed515ace0cf3300168a7ef42d6bd511c019d0ccd7599ba70cbabc95f34a052fe9d6f97b49dc1cde40d5ebf305797d7d572a61cd38a0cf85f28c5d018648b769327bd9559722d5422754f26c9e5439b42bedf34e31bbc845b99ce315eeeb0383fb3ae021084cedcd843b86831c78441ccc0d2c23de528e53cff785816a3a3d99b4a4684df9546a285203bb615eb480fa8385e90226b27b39a7d50c83babf5ba890da1a8848ba372971347dc34b76370544feb183b9292043f2ef072b69bcff45b1917c073222d50bd585f2173bdae673198b95b67f8387f6d2b2934597c5ce165fd420ddcc01d29d71d532b5d127afc98657845230e363cbb9ecc05b247996ecbfce0e8215ec7dc5e9be115de2e7ebe8fe3e191f455d244ad1ce75c828a2adbbe509589f389936e62dfd1ecdef105162d357cfb22412b64570dcb04fe18bbbe5518985d7316a75a19a16a482105b7fac923e1eefd780d036ccc39e3cc53d2002ccd10004be1694be4110fb062110e1a44ba88acfa282d9c7cdae0cb55f48f7caa3c324d9f52265d21606a20779accdc9f69dd0fc49e4bc2c49891e526561569abe5673533c8a9b6a3004c809d3f7452b02787047d4442df3f4cc5d47e5aa73b7994c113541ea312970f2e741d4fd50a83f5a0293fbd56d619aa4bb3b491606642fcb922b5ccd6bedb442e450609343e18f61abb3a4b2fc69e06a72edc7bcba0da06da3e80f59b737f088d01f0dbcad89003b505fe29bdc8118e3fbcdb90a4f464e0e70d20f093790ae1b9f6f8a904a268cb4bb116404de1bd4c3f9522c36893a902a3a90f52670b7ff2074815329f3fe2c8ccfabe2d812394e6b0e34741abece71b7db0fbf0a80e6c13bc7bba89a4ee01cad9dd76e49cd91690db6fe402640db8b3523c49bcf611a9da991123edcb64ef505906d8ab4b8586e631828402105f045cff3681f2f36e3713be5bcb6af157278b194a51f04d04507231aa6f4d77b4065f2a97894c201b23f7b5f79b029c74fc4c57fff87c03e01210674417c1297155ca7a7fbe855fdcf65561619ffca0099fa08ddc8ddd7f713b2b0c6af0fcc4bd4cba9e9f47debdc6d9e6e2dce63fec20efc51e15d013fadba2707a449dbfd025f1a7c329282c797b2071afb37a89f8d58c1e3b4f06586f00a433161373548b699fabd92771346a25ff10789ca89cbf00f92248c6b8468f22aa4cf7ba90aea16a3cc2b1ee598609dfbe75fb8e11c5003ad0c9ac7205cd35552a53703f06e465633f9653cd670952feb9e77db960ea18914235af757e75204d1f74de9829dfac217d87aecc1c80066426f12e52883bfcd982e54bfdae8ef55f3b70f78bae9e6a1e24388c642cba3b3215602294bb7d68bb6f8e0b24c0b6e99df504c30beb2a7f47b02f9af6511eda25407c30dfdee39ec8db32d93e1e09472474883a87b7b4664bef06d5c0a43793237187acaaa9654f74e5d3bf1ce389befc139fba61378e7b66b4b0d87334732592ebd0e4989373ca541b92d003e67e0292256c256344dbf03ad24540f11cdc174b45d3781c1da793a460ba671373a0fa082ba63f5418733c9907d360c9bc54ba0e2b374de7965a87316df1c7af17164e1b6dfe32d71fb5ba641bb8d6cd6299473f37e44a69e90a87cd2f8a486a0db4eb104bf87d9f7cc87dc294e6debec7e5819f3f26bdf4cac91f8ee94a826df99da39a4bd6d476943428e3f5009546ee569d6273f7ecb115538c6ce8fe150249c89452c2f0cf0796208a216fc2cb55e1b6c892778f15e7f8b78e6e97093572a29ca3600c72feb4e1ef42a225da695b3111777f3833e306f2a90b8ed6095127b0f13be495a3321bf8201955d40f6b486904a4e1f4c9965563d30277b30cb0d1ef375338a25314fc5abce41f1e95118e89455af9e786cdc460e4e48fda5f21cece9b4e5276523d6919e165df5efe59aff13067d3ef0e82259305942b5f25e831dcb72f5c7fa67ceba7678078d8311aefdc91916f8c1db2ac61188b46825707dd26d29aec734df8bebd7474277908b2ba9e77daea20c395253b3cc876e5dcac960556072bec36e14da26c335b509a38dbf3037d620f4765e63b946ef8ada1729b1323acc8b5e436f3967ab7cc033ccb7d0c9cc74d3a3faa2ff2afb1cd571e3749cb0203e70756273fc6a4d80cf646d551f3a801ca513ac587f0ddc8c58870d817ea2671b2ef30be91a45dc730c6636e7de2ec235044b837ed9861dc89e4df342cff52a29ae6b8d5817fe31bb3a74d0202efca5d94b4d232f3dff885bf52f8d43097d069ce81220e8578c630d496b01fc60562bfbfda22fce6ce68564ab31d1a3d38af2d7b73a970b9b30f6c48dc38991da402491b2d643e0f5e71bb9c0aa834006ddf24b7dbb180f68751535d8cc34823ba3d1ddfbfeb6a15655118d4e1e11b255b998006906017ad9978d6cf4a45a669eabf653363391e77a82a9da14d184a50f1421eeb61411e859cf6f98ab0846ed5345b63e3ad004d1ffd1e48e6574ba7d832f7ad1345b8df27f7707245b335ddff2e4ca1430ec44af208e633c25678b3cfee96424ca026b159bb18c1bdc51db6c66e8788e5aadce1d3e531c9b02edc65b846763ee64113c0cd0d23824c4baf3516e2c8e5192afb9fcd390e51b3bcdcc0a49f932a6907b38713e2229aaa9abc5305420f50a2016429012e835407dee7d8d0b8404655620c3df407e7be2a5a1e668341dd91224509ffd48db6861f558d098954f83aeb6e426099cc4291da311c37bd46c8d80c3ea975e0db6ce12dbdae9116bf08909431fd5483f7cb3076d33a900d56c26d6f151386abb32ea335f5337683201a1ce5d9df25c5df29a375d2680827e182b1aa0813ee7f9d273d7ce1b86194a8cf48d630a5be0b947245c1ee0a0645500ce2ced6dade1b63c0e7572260cce25636778d79ef11ed5e3c42835c8e53a6d26cf85293050cedee2a116e5f38b9cae91a503ec9e0cf784d9cfdccedf95971540ec37926eb43b27cbff1d96b83f80018e6afec70523b6672111a47f9922db34da15d7ca3cc3a77f1abe7221b72d43d2cb4c23fd2bff6cd5ef6b31b6a4c65babcdc918b0d99fad656e471a20a8f4b66d6e37877da1a8b7fb7a8692d6d578ff953b18deebea1353f915102e4d2064dcf8eb0965a2f4c2eeda70b4177dedd7597797ec76bb72ee422ec4d16e494ed77c9bd843ee01885cc3aba1f77806e8f501b856935494918ef83379ac5ae1e06697606053a8c5c880975d1f085c93f2adb1bd2c6ae07c29bbb245cac4726a20a2f61ded013722eee8878933a90319cc8cab7a2bc69dbc79767ba18fcdd8f9ba7de44e9f0575994b28aa9e3e7b4c1f2ce0eee264dfefe3e1600cd969683551894d28b690122093105133b22ee04a50f4883274cb929beb1bb45444ca5d470c0ac611c4990eefea25526f590b269ad40d23842c5b5996c1cb393dbff28a7e2f7cf04ac30fbc2d29ece6708fad830bc523fa52d2ebbfda27379e8c48d085b260a2dfc2e8d7e1a94a245b518612bfc9ca0260c8fdede5298bf584e5d71fc131f5eb6ad2dd7bfd42a77f523eb0aaa787003fb71b9a64fa783e918595af0413fcc0d7818a514c055a48ba9b1bbc6c974f7cb55c3af3edf117835d169e5e2b31e4278d0419b23625ae004171eb2ef8c231a61331886234b402886b4993ca6376f8664134cead1bea142bbed5d46e3bb71b0f8a4cec0c79a9b5f6c823128d02063967a5363b6bd6e242fa3fd21953fdb57725f1eda22984bcff8e40f2076fc0a462706dc2bd95dc447a2aec2a8a4808f2930ff1353348942e28204af42141fa120c8e5fa9c225d16f3624deb2ce178fdf594db504159bbf475e8bee281e3c8ebb29b404b3fbd13dea76df5aee05ad6a85054b838e149d0ebfabe61dcbda6c3494e170e75633843a01e2458b526ac5424177d6bc4706a09694be1c372cc79cf7c4d82ff4e62489d1fc7819d749710035a6fac239d716b57a1af1346c1e8420dc8ae46fd18245160d43a40c564bf11f0232bfd1fed67ba1aebce120ee93a0a000570b808d9fcd60b622c59ad53ef535c1db7de15b52ed2540708eb5baa7195e1a86990b6611ad5c50127f7e876f8031856e9a2c0566f357d6c75e6ca5f217d428602fa7c8f7fb9f3abbefee76d88b3b08c3be2f0d093ce96c6a00f3a157dc0a05e1fc5d8de583c25e09c77348f5825fcd4631396f3e8c26f5c1432784eb8c377fb520d28aedcaa5addfda6eed11da4d2cc91c2e3c3728c763c9d58283af32d00aa1910011a552adabee99d1387d14e582cf68fea46b729eddd0d3ad8eb9125d5fb060f4d6f70a166cc3ce9b02a7bc65200399fc2a47b90039ac23afb853925195e8079da20cbffea72365158fbd94a6e0a654f6c09a8032fb26df99913c2300e03428ab3cd1b3f7aee15460732d445b4797673b47a93a325b2e5157106ade0959be9c4562d5a4292a9ac94940c66375e559f34e57a1158b5d77a5dc9515bdab63799627301f19398d84c7afde812100a65a1642e9515a30434d344b380a92eeb2013a0f63cba648c37095bfd985c607b120f1769a79f1fd7c03f09f966b72945606ade67f9aaa631948bb82f9ae3f89ecf6db12c02d174f62ad6e1b60f4819ae19f4979e0f9dcf51bedf4b1bd1de73bc2adb1923544ede6dbd40ed4c559cf1f079f5dc8986691540e13f5a2505cc0923ca8fe2608ec92b95dbb5facc320e43b2049b79eb02618f6fab08b7e9dbe00fcd69b338b1bb6a9beae531972e16a19d94bd2273c4d042eca34dd7c5aebfbf16552681ad4e243824a9c5d0d8b8d3aba4c102fb76c216c230c2ec34838a0817b03a04480c61c899b2e442bcf2567d4e73000d9c9d4d0acb712df0183fc288634cfde234b94fdbbc0b7e66ea5b6437f312167b1ea93e2a6b2105308d8198a2d4054ba2ff2855250e0e6c952364056e2d3d09e5a2c578837d6521ffb82780f169d07f2f032b34d62f2712a77a56175017257ea1caea41acbbc520b429bd4e3ec3f9a6eafce46731dd3396f1ce1a6198927fd2dbefb3f77c9173be0934747ca47b98c6548c8cd07249d9715414b8a8ddc8430575d8b8903d3923089282a3ccead6e11044c67f3d5d8ed8cc0c0331f2dc09e1bae77ab55307e6445ad382451eff64faca8a4c0cba7cfa2fc9b087afb040e594115c35ce1dbec69ef1e5af8003339afda5faa1be1a3da7c5cb84273009c32d300fba7d222d2dc783241a9414ee30c8bd7e655c09a7f50dfb249ae9b15284b971503f6ce8866a1b36f993acf28d387da88c8defd323d1cd91d4eb46ff87458269a134675556b067a1b71829b7706ba58c93a919884089dc333c9b5d8279dbcc20071991762d2569c8ff5f21783e2961228b2006f8805750c0f9f4f9dc3df86dae1ab98af22122966a6ba04ccbb2bdf90e91e1f2595b979b6934fe132eda34cec0f83132f3867a197a6dfd0d43528bd56613732704bb62b12f4ede7439b2150384fa04db658fda2ddf97ab571f02d150c50c95009d0aa2e553019ac1cf9bbaf15474bf66d69224913b11080badb47d4a085fa13e965de6e95b7aa6e07bb212774d0240738cc07ccc1670d33c100cead3fb99c3f32fdd97c9b16956b1c22a90cd5c7aa0d920dae9e2b149fb5f9870129a0e97d1edba0dbf8fc4fcca6c65c639dd3eaa8803b1e9e601907e086ed1079ff6bc6de941c91df0634ce3730b8035bfdfa699304666920bfb092354da1f0bdd28c9023bd2e152e931e82eeabb86b0323c789daac94422eb7855f18775917e12feb85019e2e017303002ff8e04513ae0fb03f334a76addd8fcbd69ed25931f44044eeffb5d66cab5a22b21e85324946ab15408dd5d68b17727d2e4779bc378750eaa6ef6e943966c0dc4d066c6b8b8945023a0fc49f81a9c15a35d350e3d741652b8a8014b3649dcfd028f25c0b38b7cc14f7e375acfd3960af2eefc49ac6589f38791c9c0b0ea4e55992274052eed15cb8de213794636c4db2385eb9bcfc28f8a97e7c7ac949cd519ab62d1ab10d855a7ac6acda00b78d35d80a9ab4b7099603782384c461dee90abcc14a539779435cf0677eb0b6ff7e47488667788f9b0fd7d5e0cf53aee5ca0071fa30c062da3c44e79096e24594c6e202b7cdbdc49be2ddac8058c7ded15f07d4c413886fdd7017b9fedb86e39917fd1e81b294675bde06c8fac0dbce7f4b90b3859c66f9f6fec640c6781728a8b347da28b4360924ef68c3c740ed5ddbf013720c6de54d9bce5232864f9e80a652cd778641c327876b2a3e1049355a58fb5054aa17064e97142d64be9daf5d1b162566a009c69133f60e3d4c2a53c153185c659d16236fcc1690eed8c6c2e4f8b172eec457a9407003ddad723e3b183e81b17ddbe46ba368ab3e3ff574d9e3fb82e102ab46d7f608e235d064ea963fdf1622ed7278a27fd8210ad39c3acd9069abba71ca051b64561683068ca6a1be906c196ddde1839b3897d5af8fee51614d73e51511b03a5763f3ed3e64bf7293118dc321cf5e940a2829c6b8550083d66d31680fb55af098d9ccebde9882f818c29f4cbb55c26a97c359d8606bff3744ff3efc22e8d34e67b7c97b567483963c574bd1dac8c46c911c48b6e29e73e52f8c9385729a73b70d2ebba9e744247d9003a962fd607686e6c5972b59616acfe327d8b736f38c703832d7690c6474641bf87538e785353c1fd7df1b5ecb1200eed8c5857abd16c26ae72d0147de475b0c4bc98dbff530b334c9c50607bd46ddbcb1ffebf7513cc842e4cdd6c8c00a284e81cb531a04f75210add4f73db3da9783694fc541cd470368c8776973f02835dc355ef54ca90a580a45a2df6137c43b151ade1e51bc879e7fb43141541bfab79b3eaf0eab323c7147ecce6eb3eb3eb02a204755cdcc7405ad903b91fa4d297262cf77fe395a18e269ec36bd534d4939e78719d7c312ce5205979b2fb92fbf9e1d1effb0f663b9361893fcb11bfd66c92af3394e899876990883e9f5374b5642c68e8468498612e3848d367598c2cb0806b7f0c7f4b004dde2b4cc50161a4d293f2ec89c4cd35a767736f9282f848b9d1cdf405f61abcb3e50ff4092d2afb86fdceeec4791d892546e29495f97876cd8015f193113f1b8584a9ff3f32650e29126b81254961e677b6f67023295567f574364b7320313db988616ac123368179beaabb5a56257f0b6df8f6956324ac31d3e8db83dc994425ad80e235051af62ec79a6dc4bfa36283af72af26136c8f5eeb32e1fa1b9e21a228a2a12aed39e717e8f404334d8367ef3edceab1f3e250ab9dc1e89f9b84e658d38806f4d4a09ff07ca539077a5a496699a9d7d4aafa78120eb90f404c2a6ae00aa1c813b25cb6ff9dab8b66b1dd83c80c1225aa24a47df3cbff7f6842d9486bbcd4179150e1bcad3caa604ac1db71aac913c9d3cbc154182187e2aeb852011b22e40b25f9cb31ab7f458a11b1836085c4a99a633215684e7fc70646ee2158faf8329c320a3bc050cdbbac216a18a88af2dd1bb4d648110c5c90f7f5948128eafbe36c01ea709ca8b5fb8ad9eb7384feb7055220aed45690664b0312052792a5b9dfc90a1248995cf68f80b7822fa577724ad143b1d987d2fae7992d3ad270e6b1fc4f1bb3130f134607e8129a6b1442ac05f114062be3604d7cf1595022f49e7cc55282f0f666ad6ff3b03d692c2a66fc2eb5fd0751e4514229861e2343d43162dcbdec156aa5f2c5f9aafaf470f17e5ed688b3516647b9a1a220e843791ddda20fcc444ef63ba31fc27e62fee4676f097f3fecc625755b26ad48dc7ceec1920443c6c466c7bb36e91082f115f4e563a562af1ce5cf37c45bb2da72ab39ecf00e0349eed7e87994b6670e8bde4f4f9142cb99f6bf36eb41bb4dc72b6c6a6686b63fa21c167b1ba5ff481abcc2ca29905d6b75eff932296d75a90080f3a727690eab0e804aa95b545f55107d308f4cd9884d75c28388151a72e82291f79eb52921718903a8bf029a3e7c0ce28f204926dc221f78711a08834a917a0843d8249ca317c7154b88a5a10a09d7477fcf2d6296725bb6a69c2739964a768cd6ae51d7e7de63bb17fe7fabebb0ee46c285c683a41203d059a5c89024a7f3c59915121921000075ed397d30ada6d56e6caa685cb98cc0bf279fa2d96408611ae7e43c3bf70f73148c6615f20060b5c337c6555a3bdb1870bededac9eff951cf1c7fd4f0046d7661789bcfd56fe6198b502e01f90333ad6e9354db449435d0506526bb0c65595dead87be428eb1b988906de152f9a7f126ede6b933c2de1f7d20ec3e64c7468906fba2bdea8b300bab203542dec13a90e4195b3f7da1b669bfe9e8989440b24807ffd44d9e3d61e098caaa029a7063d25604cbacc5f2b3671a163b80a440948230ae90dc3bd7fd46b667cc7d6dba2f53775e9a2180ced0e1cdc6e1275e741607d6dfe40f91ec81602f9bc7c26c322b82114949fd17a9284dd2918326b7880f42db6e468b80f980db98e31ad57be1f131407a0d099cbad9eff25916048e4210c0eb0b68d4d11cc1545cb46114b3969ad0d7a6570b7571c877ed8060cf8b736f8c82ddb64d19fc29af3453f0efe33c68c21c7c8c054707790cf5c056d0ba408d077fb65cef8fb071398ce35cc95c48ba546230f4dd60ad633f81478c87019736044783599a17d4dafd30cc6f4278cae2384763ff2ef395b8e7265ebf0453cef5c98e62a0e48ad422af17a4eee1acc10a51a3fb6e98594309e4976f71027dfe7a9593cdb6860cba745f2346c8d4868b07f381d3c137b396780545e0ea331e586b176821e45f67761fd8b4c6cbbecfd34b72201f6145a6b06eaa8fa9872a54734acbccad497390ff69f676c496258479aa06d9fd1ecec02a01216fd66554afbd5e728608f4572a4d485e57ff5bfc3df", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x90, 0x0, 0xfffffffffffffffd, {0x0, 0x2, 0x0, 0x0, 0x3, 0x0, {0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3fffb, 0x1000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) close(0x3) (async) syz_io_uring_setup(0x564, &(0x7f00000000c0)={0x0, 0x400beac, 0x8, 0x40000002, 0x29}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2200, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async, rerun: 32) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 32) socket$alg(0x26, 0x5, 0x0) socket(0x400000000010, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 1.694220502s ago: executing program 1 (id=2817): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f00000011c0)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x6, @private2={0xfc, 0x2, '\x00', 0x6}, 0xfffffffa}, 0x1c, &(0x7f0000000e80)=[{&(0x7f0000000980)="d9", 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00', 0x5}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000fc0)="9e", 0x1}], 0x1}}], 0x2, 0x40000c5) (async, rerun: 32) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) (rerun: 32) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f0000000280)={0x0, 0x6, 0x0, 0x4, 0x20, 0x1e, 0x100000e}) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x40000, 0x6) close(r2) (async, rerun: 32) syz_clone3(&(0x7f0000000700)={0x200800000, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) (rerun: 32) shutdown(r0, 0x1) (async) r3 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@migrate={0xa0, 0x21, 0x1, 0x70bd27, 0x25dfdbfb, {{@in6=@mcast1, @in6=@remote, 0x4e21, 0x0, 0x4e21, 0x9ffd, 0x7, 0x180, 0x0, 0x1d}, 0x6e6ba8, 0x4b75cd6ef3e93cb3}, [@migrate={0x50, 0x11, [{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@loopback, @in=@broadcast, @in6=@empty, 0x6c, 0x1, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000840}, 0x20004040) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000f80)=@mangle={'mangle\x00', 0x2, 0x6, 0x5f8, 0x408, 0x318, 0xd0, 0x200, 0x200, 0x528, 0x528, 0x528, 0x528, 0x528, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [0x0, 0xff], [0xff], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21, 0x6, 0x0, 0x14}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @HL={0x28}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@ipv6header={{0x28}, {0x0, 0x1c, 0x1}}, @common=@hl={{0x28}, {0x1, 0x1}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0xffffffffffffffff}, 0xfffffffc}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x8, 0x0}, [0xffffffff], [0xffffffff, 0x0, 0xffffff00], 'dummy0\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0x118, 0x48000000}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1ff, 0x8, 0x4, 0x0, 0x0, "52146ee9ae44b62f269737ed481b837e8196a5702a25a4409e992b2c65fd4ce47d5510261c8694c511bcdcbca881691621e9e9f5a9cc6d7b009686f0fdb6fdc2"}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x4b}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x658) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f00000000c0)) (async) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000600)={0x2, @pix={0xffffffff, 0xbb46, 0x34324241}}) 1.332862085s ago: executing program 3 (id=2818): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'geneve0\x00', 0x0}) (async, rerun: 32) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (rerun: 32) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "88e834a1", {0x3, 0x107, 0x0, 0x3, 0x2, 0xf, 0x5}}) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@ipv4_deladdr={0x30, 0x15, 0x300, 0x70bd26, 0x25dfdbff, {0x2, 0x1, 0x1, 0x0, r2}, [@IFA_BROADCAST={0x8, 0x4, @local}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x3}, @IFA_BROADCAST={0x8, 0x4, @broadcast}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x240040d4) (async) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000000)=0xa, 0x4) 1.201599377s ago: executing program 1 (id=2819): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x2, 0x3, 0xfffffff9, 0x9, 0x101, 0x2, 0xffff}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000026c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r2, {0xe, 0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x10, 0x5}}]}}]}, 0x3c}}, 0x4000) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x800, 0x80) symlinkat(&(0x7f0000000080)='./file0\x00', r4, &(0x7f0000000240)='./file0\x00') ioctl$FS_IOC_GETFSUUID(0xffffffffffffffff, 0x80111500, &(0x7f0000000040)) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="40000600000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 763.538153ms ago: executing program 2 (id=2820): socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x4}, 0x80) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) (async) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r4 = openat$sndtimer(0xffffff9c, &(0x7f0000000080), 0x8040) ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0xc0f85403, &(0x7f0000000440)={{0x3, 0x3, 0x1, 0x1, 0xe}, 0x101, 0xdf, 'id0\x00', 'timer1\x00', 0x0, 0xdf46, 0xfffffffffffffffd, 0x80000000, 0x1}) (async) r5 = dup(r3) (async) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0xa, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240), 0x8, 0x0, 0xfbfbfbfb}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r5, 0xc04064aa, &(0x7f0000000340)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000dc0)=[{}, {}, {}], r9, 0x0, '\x00', 0x4, 0x3}) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r10, 0xff, 0x1, 0x0, 0x0) (async) getpeername$inet(r10, &(0x7f0000000040)={0x2, 0x0, @broadcast}, &(0x7f00000000c0)=0x10) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r7, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) (async) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000d80)={'veth1\x00', 0x7121}) (async) socket(0x400000000010, 0x3, 0x0) (async) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x60040, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 392.901708ms ago: executing program 4 (id=2821): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') getdents64(r2, &(0x7f0000000fc0)=""/224, 0xe0) r3 = syz_clone(0x20802000, &(0x7f0000000000)="71d64a681fec9fefceb11368f9abb4b902b46ebac2b73663af21e4e24bdcf2bfaa922b8ba56d4cd0f8a640d0342396093daeed4f2c14f85653b6a9fb93bb4104a282dfe0", 0x44, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a0000000000fa82a3fa211411fa0008000a40000000000900020073797a310000000009000100"], 0x6c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340"], 0xec}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000001180)={{0x2, 0x1, 0x7fffffff, 0x8f2, '\x00', 0x964a}, 0x4, 0x1, 0x9, r3, 0x4, 0x5, 'syz1\x00', &(0x7f0000001140)=['&\x00', '\x00', '\x00', '\x00'], 0x5}) remap_file_pages(&(0x7f0000e39000/0x3000)=nil, 0x3000, 0x0, 0x4, 0x100) 0s ago: executing program 1 (id=2822): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mincore(&(0x7f0000617000/0x2000)=nil, 0x2000, &(0x7f0000000080)=""/69) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0x8}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_LEARNING={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044080}, 0x4040) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x41) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e1f, 0x3, 'lc\x00', 0x4, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e26, 0x10003, 0xcb, 0x12d5c, 0x12d5c}}, 0x44) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) kernel console output (not intermixed with test programs): as an invalid bInterval 0, changing to 7 [ 661.527530][ T9] usb 5-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 661.575440][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.613517][ T9] usb 5-1: config 0 descriptor?? [ 662.028708][ T9] holtek 0003:1241:5015.0025: unbalanced collection at end of report description [ 662.039390][ T9] holtek 0003:1241:5015.0025: parse failed [ 662.054327][ T9] holtek 0003:1241:5015.0025: probe with driver holtek failed with error -22 [ 662.202590][ T10] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 662.226848][ T9] usb 5-1: USB disconnect, device number 20 [ 662.228431][T17674] syz_tun: entered allmulticast mode [ 662.277155][T17675] batman_adv: batadv0: Adding interface: gretap1 [ 662.284240][T17675] batman_adv: batadv0: The MTU of interface gretap1 is too small (1382) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 662.309952][T17675] batman_adv: batadv0: Interface activated: gretap1 [ 662.332890][ T24] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 662.356312][ T10] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 662.367637][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.382224][ T10] usb 4-1: Product: syz [ 662.388991][ T10] usb 4-1: Manufacturer: syz [ 662.394103][ T10] usb 4-1: SerialNumber: syz [ 662.401212][ T10] usb 4-1: config 0 descriptor?? [ 662.411865][ T10] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 662.428150][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 662.439488][ T10] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 662.449423][ T10] usb 4-1: media controller created [ 662.477400][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 662.513318][ T24] usb 3-1: too many configurations: 113, using maximum allowed: 8 [ 662.545850][ T10] DVB: Unable to find symbol mt352_attach() [ 662.560157][ T24] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 662.588179][ T24] usb 3-1: can't read configurations, error -61 [ 662.608606][ T10] DVB: Unable to find symbol nxt6000_attach() [ 662.615878][ T10] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 662.630402][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input65 [ 662.665446][ T10] dvb-usb: schedule remote query interval to 1000 msecs. [ 662.688771][T17702] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2412'. [ 662.698919][ T10] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 662.715344][ T10] dvb-usb: bulk message failed: -22 (7/0) [ 662.723059][ T10] dvb-usb: bulk message failed: -22 (7/0) [ 662.733539][ T10] usb 4-1: USB disconnect, device number 19 [ 662.802604][ T24] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 662.874739][ T10] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 662.882994][T17702] team1: entered promiscuous mode [ 662.896389][T17702] team1: entered allmulticast mode [ 662.929613][ T6742] udevd[6742]: setting owner of /dev/bus/usb/004/019 to uid=0, gid=0 failed: No such file or directory [ 662.975543][ T24] usb 3-1: too many configurations: 113, using maximum allowed: 8 [ 662.993995][ T24] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 663.021468][ T24] usb 3-1: can't read configurations, error -61 [ 663.044927][ T24] usb usb3-port1: attempt power cycle [ 663.152647][ T940] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 663.400201][ T940] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 663.411510][ T940] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 663.463148][ T24] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 663.513757][ T24] usb 3-1: too many configurations: 113, using maximum allowed: 8 [ 663.521788][ T940] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 663.544225][ T24] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 663.567285][ T24] usb 3-1: can't read configurations, error -61 [ 663.573504][ T940] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 663.600777][ T940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.641855][ T940] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 663.716389][ T24] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 663.735841][ T6742] udevd[6742]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 663.737762][ T940] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 663.783439][ T24] usb 3-1: too many configurations: 113, using maximum allowed: 8 [ 663.792647][ T10] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 663.807147][ T24] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 663.832457][ T24] usb 3-1: can't read configurations, error -61 [ 663.846719][ T940] usb 5-1: USB disconnect, device number 21 [ 663.861353][ T24] usb usb3-port1: unable to enumerate USB device [ 663.945633][ T10] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 663.959829][ T10] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 663.979332][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.992595][ T10] usb 4-1: Product: syz [ 663.997895][ T10] usb 4-1: Manufacturer: syz [ 664.008029][ T10] usb 4-1: SerialNumber: syz [ 664.028706][ T10] usb 4-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 664.053625][ C0] bridge0: port 3(bond0) entered forwarding state [ 664.060124][ C0] bridge0: topology change detected, propagating [ 664.160246][T17794] fuse: Bad value for 'group_id' [ 664.170124][T17794] fuse: Bad value for 'group_id' [ 664.438000][T17767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 664.453169][T17767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 664.463301][ T10] usb 4-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 664.523613][ T10] usb 4-1: USB disconnect, device number 20 [ 665.681834][T17862] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2427'. [ 667.032199][ T5892] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 667.072971][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 667.202587][ T5892] usb 5-1: device descriptor read/64, error -32 [ 667.442910][ T5892] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 667.862752][ T5892] usb 5-1: Using ep0 maxpacket: 16 [ 668.014757][T17931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 668.025350][T17931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 668.038828][T17931] loop6: detected capacity change from 0 to 7 [ 668.079444][T17931] Dev loop6: unable to read RDB block 7 [ 668.085906][T17931] loop6: unable to read partition table [ 668.093793][T17931] loop6: partition table beyond EOD, truncated [ 668.100190][T17931] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 668.350131][T17944] vivid-000: disconnect [ 669.502494][ T10] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 669.635151][ T5892] usb 5-1: unable to get BOS descriptor or descriptor too short [ 669.668706][ T5892] usb 5-1: no configurations [ 669.721538][ T5892] usb 5-1: can't read configurations, error -22 [ 669.740093][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 669.763535][ T5892] usb usb5-port1: attempt power cycle [ 669.781003][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 669.828893][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 669.878054][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 669.928905][ T10] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 669.965091][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.993059][T17970] binder: 17965:17970 ioctl c0045005 200000000140 returned -22 [ 670.012629][ T10] usb 4-1: Product: syz [ 670.016983][ T10] usb 4-1: Manufacturer: syz [ 670.021687][ T10] usb 4-1: SerialNumber: syz [ 670.038437][ T10] usb 4-1: config 0 descriptor?? [ 670.050827][ T10] garmin_gps 4-1:0.0: Garmin GPS usb/tty converter detected [ 670.064528][ T10] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 670.076362][ T10] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 670.088246][T17970] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2443'. [ 670.300987][ T5819] usb 4-1: USB disconnect, device number 21 [ 670.340880][ T5819] garmin_gps 4-1:0.0: device disconnected [ 670.872450][ T5819] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 671.055961][ T5819] usb 4-1: Using ep0 maxpacket: 8 [ 671.079010][ T5819] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 671.132096][ T5819] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 671.182429][ T5819] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 671.205256][T17925] vivid-000: reconnect [ 671.220481][ T5819] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 671.266407][ T5819] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 671.266440][ T5819] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.535965][ T5819] usb 4-1: usb_control_msg returned -32 [ 671.591365][ T5819] usbtmc 4-1:16.0: can't read capabilities [ 671.975472][ C0] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 672.347677][T18051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 672.362186][T18051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 672.406562][T18056] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2452'. [ 672.452638][T18050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 672.461677][T18050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 673.162664][ T5892] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 673.378775][ T5892] usb 3-1: config 0 has no interfaces? [ 673.399205][ T5892] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 673.416457][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.443185][ T5892] usb 3-1: Product: syz [ 673.577033][ T5892] usb 3-1: Manufacturer: syz [ 673.589366][ T5892] usb 3-1: SerialNumber: syz [ 673.619354][ T5892] usb 3-1: config 0 descriptor?? [ 673.655557][ T5892] usb 4-1: USB disconnect, device number 22 [ 673.905453][T18086] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2457'. [ 674.023477][T18086] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 674.116859][T18065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 674.132846][T18065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 674.240711][T18091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 674.267856][T18091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 674.831384][ T30] audit: type=1326 audit(1760430100.981:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18100 comm="syz.4.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57a998eec9 code=0x7ffc0000 [ 674.867224][T18106] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2459'. [ 674.876563][ T30] audit: type=1326 audit(1760430101.011:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18100 comm="syz.4.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57a998eec9 code=0x7ffc0000 [ 674.971986][ T30] audit: type=1326 audit(1760430101.011:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18100 comm="syz.4.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f57a998eec9 code=0x7ffc0000 [ 675.009044][ T30] audit: type=1326 audit(1760430101.011:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18100 comm="syz.4.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57a998eec9 code=0x7ffc0000 [ 675.155047][ T30] audit: type=1326 audit(1760430101.011:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18100 comm="syz.4.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57a998eec9 code=0x7ffc0000 [ 675.234538][ T30] audit: type=1326 audit(1760430101.011:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18100 comm="syz.4.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f57a998eec9 code=0x7ffc0000 [ 675.365880][ T30] audit: type=1326 audit(1760430101.011:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18100 comm="syz.4.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57a998eec9 code=0x7ffc0000 [ 675.425643][ T30] audit: type=1326 audit(1760430101.011:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18100 comm="syz.4.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57a998eec9 code=0x7ffc0000 [ 675.473919][ T30] audit: type=1326 audit(1760430101.011:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18100 comm="syz.4.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f57a9990de7 code=0x7ffc0000 [ 675.580397][ T30] audit: type=1326 audit(1760430101.011:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18100 comm="syz.4.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57a998eec9 code=0x7ffc0000 [ 676.063445][T18117] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2461'. [ 676.225844][T18117] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2461'. [ 676.313854][T18118] netlink: 'syz.0.2461': attribute type 8 has an invalid length. [ 676.324153][ T10] usb 3-1: USB disconnect, device number 114 [ 676.393289][T18118] netlink: zone id is out of range [ 676.398771][T18118] netlink: zone id is out of range [ 676.407357][T18118] netlink: zone id is out of range [ 676.472964][T18118] netlink: zone id is out of range [ 676.506614][T18118] netlink: zone id is out of range [ 676.525500][T18118] netlink: zone id is out of range [ 676.532212][T18118] netlink: zone id is out of range [ 676.537777][T18118] netlink: zone id is out of range [ 676.725392][T18135] binfmt_misc: register: failed to install interpreter file ./file0 [ 676.953794][T18118] netlink: zone id is out of range [ 677.022759][ T5892] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 677.232522][T18118] netlink: zone id is out of range [ 677.489202][ T5892] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 677.523058][ T5892] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 677.675409][ T5892] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 677.690197][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 677.705726][ T5892] usb 5-1: SerialNumber: syz [ 677.737698][T18159] vivid-000: kernel_thread() failed [ 677.757168][ T5892] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 677.766139][ T5892] usb-storage 5-1:1.0: USB Mass Storage device detected [ 677.780545][ T5892] usb-storage 5-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 677.789016][ T5892] scsi host1: usb-storage 5-1:1.0 [ 677.861575][T18176] CIFS: VFS: Malformed UNC in devname [ 677.878615][T18176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 677.977951][T18176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 678.542178][ T24] usb 4-1: new low-speed USB device number 23 using dummy_hcd [ 678.622166][T18233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 678.636643][T18233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 678.667768][T18233] tipc: Enabled bearer , priority 0 [ 678.685070][T18233] syzkaller0: entered promiscuous mode [ 678.690734][T18233] syzkaller0: entered allmulticast mode [ 678.704580][ T24] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 678.726801][ T24] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 678.788350][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 678.813233][ T24] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 678.841170][T18242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 678.851039][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 678.853133][T18242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 678.871414][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 678.890046][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 678.908567][ T24] usb 4-1: string descriptor 0 read error: -22 [ 678.916102][ T24] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 678.925761][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.942087][ T24] usb 4-1: config 0 descriptor?? [ 678.952655][ T24] hub 4-1:0.0: bad descriptor, ignoring hub [ 678.965511][ T24] hub 4-1:0.0: probe with driver hub failed with error -5 [ 679.010050][ T24] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input66 [ 679.029130][T18231] tipc: Resetting bearer [ 679.089396][T18231] tipc: Disabling bearer [ 679.366983][T18260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 679.407556][T18260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 679.806259][T18282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 679.818414][T18282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 679.839421][T18282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 679.850095][T18282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 679.930184][T18288] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2484'. [ 680.461604][T18305] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2487'. [ 680.489067][T18305] netlink: 'syz.2.2487': attribute type 1 has an invalid length. [ 680.511873][T18307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 680.536733][T18305] input: syz1 as /devices/virtual/input/input67 [ 680.541312][T18307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 680.830740][T18322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 680.845068][T18322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 680.952820][ T24] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 681.069864][ T10] usb 5-1: USB disconnect, device number 25 [ 681.097246][ T5819] usb 4-1: USB disconnect, device number 23 [ 681.113637][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 681.141001][ T24] usb 3-1: config 0 has an invalid interface number: 236 but max is 0 [ 681.176076][ T24] usb 3-1: config 0 has no interface number 0 [ 681.258570][ T24] usb 3-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=84.33 [ 681.286300][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.320430][ T24] usb 3-1: Product: syz [ 681.336212][ T24] usb 3-1: Manufacturer: syz [ 681.356440][ T24] usb 3-1: SerialNumber: syz [ 681.369439][ T24] usb 3-1: config 0 descriptor?? [ 681.385343][ T24] usb-storage 3-1:0.236: USB Mass Storage device detected [ 681.411938][ T24] usb-storage 3-1:0.236: device ignored [ 681.522934][T18363] syz.1.2491 (18363): drop_caches: 4 [ 681.581231][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 681.581251][ T30] audit: type=1326 audit(1760430107.731:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18361 comm="syz.1.2491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f052258eec9 code=0x7ffc0000 [ 681.648214][ T5892] usb 3-1: USB disconnect, device number 115 [ 681.670334][ T30] audit: type=1326 audit(1760430107.781:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18361 comm="syz.1.2491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f052258eec9 code=0x7ffc0000 [ 681.711577][ T30] audit: type=1326 audit(1760430107.781:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18361 comm="syz.1.2491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f052258eec9 code=0x7ffc0000 [ 681.748412][ T30] audit: type=1326 audit(1760430107.781:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18361 comm="syz.1.2491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f052258eec9 code=0x7ffc0000 [ 681.781085][ T30] audit: type=1326 audit(1760430107.781:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18361 comm="syz.1.2491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f052258eec9 code=0x7ffc0000 [ 681.818813][ T30] audit: type=1326 audit(1760430107.791:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18361 comm="syz.1.2491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7f052258eec9 code=0x7ffc0000 [ 681.844022][ T30] audit: type=1326 audit(1760430107.791:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18361 comm="syz.1.2491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f052258eec9 code=0x7ffc0000 [ 681.868017][ T30] audit: type=1326 audit(1760430107.791:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18361 comm="syz.1.2491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f052258eec9 code=0x7ffc0000 [ 681.895021][ T30] audit: type=1326 audit(1760430107.791:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18361 comm="syz.1.2491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f052258eec9 code=0x7ffc0000 [ 681.918479][ T30] audit: type=1326 audit(1760430107.791:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18361 comm="syz.1.2491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f052258eec9 code=0x7ffc0000 [ 682.008043][ T24] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 682.079401][T18386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 682.089973][T18386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 682.109279][T18391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 682.123339][T18391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 682.167815][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 682.193017][ T24] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 682.202130][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.290434][ T24] usb 5-1: config 0 descriptor?? [ 682.335503][T18402] syzkaller0: entered promiscuous mode [ 682.341523][T18402] syzkaller0: entered allmulticast mode [ 682.361324][T18401] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2495'. [ 682.518231][ T24] usb 5-1: USB disconnect, device number 26 [ 682.736828][T18437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 682.749496][T18437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 682.772762][ T5912] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 682.868756][T18441] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2498'. [ 682.877824][ T5892] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 682.970791][ T5912] usb 3-1: Using ep0 maxpacket: 16 [ 683.027579][ T5912] usb 3-1: config 166 has an invalid interface number: 177 but max is 1 [ 683.047281][ T5892] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 683.072422][ T5912] usb 3-1: config 166 has an invalid interface number: 34 but max is 1 [ 683.080840][ T5912] usb 3-1: config 166 has no interface number 0 [ 683.087355][ T5912] usb 3-1: config 166 has no interface number 1 [ 683.089406][ T5892] usb 4-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=70.54 [ 683.093724][ T5912] usb 3-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 683.093751][ T5912] usb 3-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 683.093794][ T5912] usb 3-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 683.093821][ T5912] usb 3-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 683.093848][ T5912] usb 3-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 683.093875][ T5912] usb 3-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 683.170986][ T5912] usb 3-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 683.182472][ T5912] usb 3-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 683.194094][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=34, SerialNumber=7 [ 683.194101][ T5912] usb 3-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 683.225136][ T5912] usb 3-1: config 166 interface 177 has no altsetting 0 [ 683.232996][ T5912] usb 3-1: config 166 interface 34 has no altsetting 0 [ 683.283069][ T5892] usb 4-1: Product: syz [ 683.287310][ T5892] usb 4-1: Manufacturer: syz [ 683.298424][ T5892] usb 4-1: SerialNumber: syz [ 683.313031][ T5912] usb 3-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 683.322469][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.331870][ T5892] usb 4-1: config 0 descriptor?? [ 683.344107][ T5912] usb 3-1: Product: syz [ 683.348456][ T5912] usb 3-1: Manufacturer: syz [ 683.362257][ T5912] usb 3-1: SerialNumber: syz [ 683.413361][ T5892] gspca_main: conex-2.14.0 probing 0572:0041 [ 683.577577][ T5912] ums-realtek 3-1:166.177: USB Mass Storage device detected [ 683.665995][ T5912] ums-realtek 3-1:166.34: USB Mass Storage device detected [ 683.765110][ T5912] ums-realtek 3-1:166.34: probe with driver ums-realtek failed with error -5 [ 683.777880][ T5912] uvcvideo 3-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 683.789119][ T5912] uvcvideo 3-1:166.34: No valid video chain found. [ 683.827559][ T5912] usb 3-1: USB disconnect, device number 116 [ 683.989415][ T5892] usb 4-1: USB disconnect, device number 24 [ 685.040195][T18544] syz_tun: entered allmulticast mode [ 685.265908][T18548] netlink: 23 bytes leftover after parsing attributes in process `syz.2.2506'. [ 685.507512][T18556] Cannot find set identified by id 65534 to match [ 685.823010][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.839219][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.309669][T18584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2514'. [ 686.319186][T18584] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2514'. [ 686.331826][T18584] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2514'. [ 686.514493][T18590] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2513'. [ 686.636298][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 686.636317][ T30] audit: type=1326 audit(1760430112.791:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18558 comm="syz.3.2508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f11a978eec9 code=0x7ffc0000 [ 686.698847][ T30] audit: type=1326 audit(1760430112.851:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18558 comm="syz.3.2508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11a978eec9 code=0x7ffc0000 [ 686.731875][ T30] audit: type=1326 audit(1760430112.851:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18558 comm="syz.3.2508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11a978eec9 code=0x7ffc0000 [ 686.762573][ T30] audit: type=1326 audit(1760430112.911:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18558 comm="syz.3.2508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f11a978d710 code=0x7ffc0000 [ 686.836021][T18568] sch_tbf: burst 0 is lower than device veth1 mtu (1514) ! [ 686.852731][ T30] audit: type=1326 audit(1760430112.911:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18558 comm="syz.3.2508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11a978eec9 code=0x7ffc0000 [ 686.875762][ T30] audit: type=1326 audit(1760430112.911:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18558 comm="syz.3.2508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11a978eec9 code=0x7ffc0000 [ 686.898747][ T30] audit: type=1326 audit(1760430112.971:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18558 comm="syz.3.2508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f11a978eec9 code=0x7ffc0000 [ 686.920927][ C1] vkms_vblank_simulate: vblank timer overrun [ 686.928513][ T30] audit: type=1326 audit(1760430112.981:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18558 comm="syz.3.2508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11a978eec9 code=0x7ffc0000 [ 686.950871][ C1] vkms_vblank_simulate: vblank timer overrun [ 686.960643][ T30] audit: type=1326 audit(1760430112.981:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18558 comm="syz.3.2508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11a978eec9 code=0x7ffc0000 [ 686.982467][ T5892] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 686.984171][ T30] audit: type=1326 audit(1760430112.981:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18558 comm="syz.3.2508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f11a978eec9 code=0x7ffc0000 [ 687.162505][ T5892] usb 3-1: device descriptor read/64, error -71 [ 687.432601][ T5892] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 687.562523][ T5892] usb 3-1: device descriptor read/64, error -71 [ 687.597927][T18607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 687.607810][T18607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 687.673960][ T5892] usb usb3-port1: attempt power cycle [ 687.742542][ T10] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 687.902989][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 687.910186][T18612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 687.928550][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 687.944307][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 687.967739][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 687.991562][T18612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 688.007767][ T10] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 688.017217][ T5892] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 688.034645][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.053355][ T5892] usb 3-1: device descriptor read/8, error -71 [ 688.131900][ T10] usb 5-1: config 0 descriptor?? [ 688.302457][ T5892] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 688.548017][T18602] random: crng reseeded on system resumption [ 688.783732][ T10] input: HID 0955:7214 Haptics as /devices/virtual/input/input68 [ 688.798734][ T5892] usb 3-1: device descriptor read/8, error -71 [ 688.917309][ T5892] usb usb3-port1: unable to enumerate USB device [ 688.975065][ T10] shield 0003:0955:7214.0026: Registered Thunderstrike controller [ 688.992976][ T10] shield 0003:0955:7214.0026: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 689.068874][ T5892] shield 0003:0955:7214.0026: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 689.105961][ T5892] shield 0003:0955:7214.0026: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 689.124580][ T5892] shield 0003:0955:7214.0026: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 689.136514][ T5892] shield 0003:0955:7214.0026: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 689.206253][ T10] usb 5-1: USB disconnect, device number 27 [ 690.432686][ T10] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 690.633665][ T5892] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 690.683496][T18708] PM: Enabling pm_trace changes system date and time during resume. [ 690.683496][T18708] PM: Correct system time has to be restored manually after resume. [ 690.725974][ T10] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 690.748591][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.781965][ T10] usb 3-1: Product: syz [ 690.787134][ T10] usb 3-1: Manufacturer: syz [ 690.791753][ T10] usb 3-1: SerialNumber: syz [ 690.805347][T18711] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2529'. [ 690.817748][ T10] usb 3-1: config 0 descriptor?? [ 690.844872][ T10] ch341 3-1:0.0: ch341-uart converter detected [ 690.928253][ T5892] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 690.942174][ T5892] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 690.976462][ T5892] usb 4-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.40 [ 690.986120][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.121746][ T5892] usb 4-1: Product: syz [ 691.178474][ T5892] usb 4-1: Manufacturer: syz [ 691.192281][ T5892] usb 4-1: SerialNumber: syz [ 691.779834][T18701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 691.794102][T18701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 691.840217][ T5892] usbhid 4-1:1.0: can't add hid device: -71 [ 691.864485][ T10] usb 3-1: ch341-uart converter now attached to ttyUSB0 [ 691.877229][ T5892] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 691.952472][ T5892] usb 4-1: USB disconnect, device number 25 [ 692.066021][ T24] usb 3-1: USB disconnect, device number 121 [ 692.084994][ T24] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 692.108788][ T24] ch341 3-1:0.0: device disconnected [ 692.203916][T18758] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 692.220752][T18758] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 692.232812][T18758] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2534'. [ 692.642638][ T5892] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 692.722466][ T24] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 692.814050][ T5892] usb 5-1: Using ep0 maxpacket: 32 [ 692.861500][ T5892] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 692.917495][ T5892] usb 5-1: config 0 has no interface number 0 [ 692.924508][ T24] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 692.948056][ T24] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 692.973770][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 692.993991][ T5892] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 692.997252][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 693.035840][ T24] usb 4-1: config 1 has no interface number 0 [ 693.049087][T18818] FAULT_INJECTION: forcing a failure. [ 693.049087][T18818] name failslab, interval 1, probability 0, space 0, times 0 [ 693.054505][ T24] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 693.097514][T18818] CPU: 0 UID: 0 PID: 18818 Comm: syz.2.2540 Not tainted syzkaller #0 PREEMPT(full) [ 693.097544][T18818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 693.097559][T18818] Call Trace: [ 693.097568][T18818] [ 693.097579][T18818] dump_stack_lvl+0x189/0x250 [ 693.097608][T18818] ? __pfx____ratelimit+0x10/0x10 [ 693.097642][T18818] ? __pfx_dump_stack_lvl+0x10/0x10 [ 693.097676][T18818] ? __pfx__printk+0x10/0x10 [ 693.097704][T18818] ? __pfx___might_resched+0x10/0x10 [ 693.097732][T18818] ? fs_reclaim_acquire+0x7d/0x100 [ 693.097763][T18818] should_fail_ex+0x414/0x560 [ 693.097804][T18818] should_failslab+0xa8/0x100 [ 693.097834][T18818] __kmalloc_cache_noprof+0x6f/0x6f0 [ 693.097860][T18818] ? ovs_ct_limit_cmd_set+0x2f7/0xb00 [ 693.097894][T18818] ? genlmsg_put+0x137/0x2e0 [ 693.097922][T18818] ovs_ct_limit_cmd_set+0x2f7/0xb00 [ 693.097950][T18818] ? __nla_parse+0x40/0x60 [ 693.097979][T18818] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 693.098005][T18818] ? genl_family_rcv_msg_attrs_parse+0x212/0x2a0 [ 693.098037][T18818] genl_family_rcv_msg_doit+0x215/0x300 [ 693.098071][T18818] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 693.098110][T18818] ? bpf_lsm_capable+0x9/0x20 [ 693.098130][T18818] ? security_capable+0x7e/0x2e0 [ 693.098160][T18818] genl_rcv_msg+0x60e/0x790 [ 693.098190][T18818] ? __pfx_genl_rcv_msg+0x10/0x10 [ 693.098213][T18818] ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10 [ 693.098244][T18818] ? __asan_memcpy+0x40/0x70 [ 693.098266][T18818] ? __pfx_ref_tracker_free+0x10/0x10 [ 693.098297][T18818] netlink_rcv_skb+0x208/0x470 [ 693.098326][T18818] ? __lock_acquire+0xab9/0xd20 [ 693.098355][T18818] ? __pfx_genl_rcv_msg+0x10/0x10 [ 693.098381][T18818] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 693.098432][T18818] ? down_read+0x1ad/0x2e0 [ 693.098460][T18818] genl_rcv+0x28/0x40 [ 693.098482][T18818] netlink_unicast+0x82f/0x9e0 [ 693.098519][T18818] ? __pfx_netlink_unicast+0x10/0x10 [ 693.098549][T18818] ? netlink_sendmsg+0x642/0xb30 [ 693.098578][T18818] ? skb_put+0x11b/0x210 [ 693.098632][T18818] netlink_sendmsg+0x805/0xb30 [ 693.098676][T18818] ? __pfx_netlink_sendmsg+0x10/0x10 [ 693.098713][T18818] ? aa_sock_msg_perm+0xf1/0x1d0 [ 693.098741][T18818] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 693.098769][T18818] ? __pfx_netlink_sendmsg+0x10/0x10 [ 693.098804][T18818] __sock_sendmsg+0x21c/0x270 [ 693.098835][T18818] ____sys_sendmsg+0x505/0x830 [ 693.098894][T18818] ? __pfx_____sys_sendmsg+0x10/0x10 [ 693.098942][T18818] ? import_iovec+0x74/0xa0 [ 693.098994][T18818] ___sys_sendmsg+0x21f/0x2a0 [ 693.099020][T18818] ? __pfx____sys_sendmsg+0x10/0x10 [ 693.099097][T18818] ? __fget_files+0x2a/0x420 [ 693.099125][T18818] ? __fget_files+0x3a0/0x420 [ 693.099164][T18818] __x64_sys_sendmsg+0x19b/0x260 [ 693.099190][T18818] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 693.099231][T18818] ? do_syscall_64+0xbe/0xfa0 [ 693.099259][T18818] do_syscall_64+0xfa/0xfa0 [ 693.099280][T18818] ? lockdep_hardirqs_on+0x9c/0x150 [ 693.099302][T18818] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.099325][T18818] ? clear_bhb_loop+0x60/0xb0 [ 693.099353][T18818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.099376][T18818] RIP: 0033:0x7f1d2738eec9 [ 693.099396][T18818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 693.099417][T18818] RSP: 002b:00007f1d28152038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 693.099441][T18818] RAX: ffffffffffffffda RBX: 00007f1d275e5fa0 RCX: 00007f1d2738eec9 [ 693.099458][T18818] RDX: 000000000000c000 RSI: 0000200000000040 RDI: 0000000000000007 [ 693.099473][T18818] RBP: 00007f1d28152090 R08: 0000000000000000 R09: 0000000000000000 [ 693.099487][T18818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 693.099500][T18818] R13: 00007f1d275e6038 R14: 00007f1d275e5fa0 R15: 00007f1d2770fa28 [ 693.099537][T18818] [ 693.488016][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.496164][ T5892] usb 5-1: config 0 interface 85 has no altsetting 0 [ 693.518031][ T24] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 693.563401][T18820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2539'. [ 693.731270][T18827] IPVS: set_ctl: invalid protocol: 50 127.0.0.1:20001 [ 693.743751][ T24] snd_usb_pod 4-1:1.1: endpoint not available, using fallback values [ 693.752621][ T24] snd_usb_pod 4-1:1.1: invalid control EP [ 693.758389][ T24] snd_usb_pod 4-1:1.1: cannot start listening: -22 [ 693.921682][ T5892] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 693.938272][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.950881][ T5892] usb 5-1: Product: syz [ 693.962411][ T5892] usb 5-1: Manufacturer: syz [ 693.967031][ T5892] usb 5-1: SerialNumber: syz [ 693.991403][ T24] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 694.003439][ T5892] usb 5-1: config 0 descriptor?? [ 694.043377][ T24] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 694.099931][ T24] usb 4-1: USB disconnect, device number 26 [ 694.722167][ T5892] appletouch 5-1:0.85: Geyser mode initialized. [ 694.742524][T18860] usb usb8: usbfs: interface 0 claimed by hub while 'syz.1.2545' sets config #2227 [ 694.742617][ T5892] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input69 [ 694.768774][T18860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 694.791361][T18860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 695.007817][T18864] bond4: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 695.043269][ T10] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 695.072107][T18864] bond4 (unregistering): Released all slaves [ 695.198671][ T10] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 695.236020][ T24] usb 5-1: USB disconnect, device number 28 [ 695.280262][ T24] appletouch 5-1:0.85: input: appletouch disconnected [ 695.306494][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.345654][ T10] usb 3-1: Product: syz [ 695.355150][ T10] usb 3-1: Manufacturer: syz [ 695.359794][ T10] usb 3-1: SerialNumber: syz [ 695.491667][ T30] audit: type=1326 audit(1760430121.641:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18943 comm="syz.0.2548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc89c98eec9 code=0x7ffc0000 [ 695.543602][ T30] audit: type=1326 audit(1760430121.641:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18943 comm="syz.0.2548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc89c98eec9 code=0x7ffc0000 [ 695.575360][ T30] audit: type=1326 audit(1760430121.661:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18943 comm="syz.0.2548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7fc89c98eec9 code=0x7ffc0000 [ 695.619628][ T30] audit: type=1326 audit(1760430121.661:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18943 comm="syz.0.2548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc89c98eec9 code=0x7ffc0000 [ 695.673030][ T30] audit: type=1326 audit(1760430121.661:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18943 comm="syz.0.2548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc89c98eec9 code=0x7ffc0000 [ 695.741379][ T30] audit: type=1326 audit(1760430121.661:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18943 comm="syz.0.2548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc89c98eec9 code=0x7ffc0000 [ 695.794169][ T30] audit: type=1326 audit(1760430121.661:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18943 comm="syz.0.2548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc89c98eec9 code=0x7ffc0000 [ 695.917608][ T30] audit: type=1326 audit(1760430121.661:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18943 comm="syz.0.2548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc89c98eec9 code=0x7ffc0000 [ 695.960006][ T30] audit: type=1326 audit(1760430121.661:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18943 comm="syz.0.2548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fc89c98eec9 code=0x7ffc0000 [ 696.006016][ T10] net_ratelimit: 84 callbacks suppressed [ 696.006042][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 696.036839][ T30] audit: type=1326 audit(1760430121.661:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18943 comm="syz.0.2548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc89c98eec9 code=0x7ffc0000 [ 696.077104][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 696.098992][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 696.127944][ T10] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 696.146227][T18991] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2551'. [ 696.166634][ T10] usb 3-1: USB disconnect, device number 122 [ 696.505701][T19025] netlink: 'syz.1.2557': attribute type 3 has an invalid length. [ 696.525603][T19027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 696.557035][T19027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 696.593227][T19027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 696.614184][T19027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 696.633695][T19027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 696.654414][T19027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 696.667360][T19027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 696.681657][T19027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 696.682601][ T10] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 696.697111][T19027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 696.705578][T19027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 696.717967][T19027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 696.735025][T19027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 696.882828][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 696.890144][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 696.902682][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 696.913122][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 696.925130][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 696.939363][ T10] usb 5-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 696.971669][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.980082][ T10] usb 5-1: Product: syz [ 696.984996][ T10] usb 5-1: Manufacturer: syz [ 696.989793][ T10] usb 5-1: SerialNumber: syz [ 697.007101][ T10] usb 5-1: config 0 descriptor?? [ 697.175725][T19084] fuse: Bad value for 'user_id' [ 697.196048][T19084] fuse: Bad value for 'user_id' [ 697.223505][ T24] usb 5-1: USB disconnect, device number 29 [ 697.743141][T19125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 697.756165][T19125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 697.863150][ T10] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 698.024567][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 698.074733][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 698.097475][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 698.124995][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 698.157454][ T10] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 698.179777][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.200856][ T10] usb 4-1: Product: syz [ 698.211020][ T10] usb 4-1: Manufacturer: syz [ 698.223155][ T10] usb 4-1: SerialNumber: syz [ 698.242255][ T10] usb 4-1: config 0 descriptor?? [ 698.252658][ T24] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 698.492842][T19119] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2564'. [ 698.530625][ T10] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 698.712504][T19149] syzkaller0: entered promiscuous mode [ 698.718094][T19149] syzkaller0: entered allmulticast mode [ 698.731039][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 698.760605][ T24] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 494 [ 698.810501][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 698.819964][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.828805][ T24] usb 5-1: Product: syz [ 698.833634][ T24] usb 5-1: Manufacturer: syz [ 698.838498][ T24] usb 5-1: SerialNumber: syz [ 698.890421][T19133] raw-gadget.9 gadget.4: fail, usb_ep_enable returned -22 [ 699.124596][ T24] usblp 5-1:1.0: usblp1: USB Unidirectional printer dev 30 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 699.231289][T19164] pim6reg: entered allmulticast mode [ 699.256224][T19175] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2570'. [ 699.356609][T19133] usb 4-1: Couldn't submit interrupt_out_urb -90 [ 699.385442][ T24] usb 5-1: USB disconnect, device number 30 [ 699.470662][ T24] usblp1: removed [ 700.592764][ T10] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 700.622500][ T24] usb 3-1: new full-speed USB device number 124 using dummy_hcd [ 700.625043][ T5892] usb 4-1: USB disconnect, device number 27 [ 700.774616][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 700.774870][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 700.805705][ T10] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=29.00 [ 700.833734][ T24] usb 3-1: not running at top speed; connect to a high speed hub [ 700.844982][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.854783][ T24] usb 3-1: config 9 has an invalid interface number: 198 but max is 0 [ 700.872397][ T24] usb 3-1: config 9 has no interface number 0 [ 700.892817][ T10] usb 5-1: Product: syz [ 700.897121][ T10] usb 5-1: Manufacturer: syz [ 700.899159][ T24] usb 3-1: config 9 interface 198 has no altsetting 0 [ 700.901758][ T10] usb 5-1: SerialNumber: syz [ 700.935339][ T24] usb 3-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=6f.2b [ 700.946425][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.962428][ T24] usb 3-1: Product: syz [ 700.977954][ T10] usb 5-1: config 0 descriptor?? [ 700.987608][ T24] usb 3-1: Manufacturer: syz [ 700.992243][ T24] usb 3-1: SerialNumber: syz [ 701.008868][ T10] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 701.026441][ T10] usb 5-1: Detected FT4233HP [ 701.241158][T19276] kvm: user requested TSC rate below hardware speed [ 701.484072][ T10] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 701.515987][ T10] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 701.535727][ T24] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 701.554335][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 701.584749][ T24] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 701.634152][ T24] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 error while loading driver (-19) [ 701.643716][ T10] usb 5-1: USB disconnect, device number 31 [ 701.677964][ T24] dvb_usb_umt_010 3-1:9.198: probe with driver dvb_usb_umt_010 failed with error -22 [ 701.697095][ T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 701.754052][ T10] ftdi_sio 5-1:0.0: device disconnected [ 701.762841][ T24] usb 3-1: USB disconnect, device number 124 [ 702.256852][T19322] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 702.416586][ T24] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 702.442806][ T5892] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 702.592764][ T5892] usb 3-1: device descriptor read/64, error -71 [ 702.602038][ T24] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 702.614743][T19342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 702.624486][ T24] usb 5-1: config 1 has no interface number 0 [ 702.633978][T19342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 702.641885][ T24] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 702.656330][ T24] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 702.680247][ T24] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 702.713719][ T24] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 702.732378][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.750767][ T24] usb 5-1: Product: syz [ 702.760891][ T24] usb 5-1: Manufacturer: syz [ 702.771050][ T24] usb 5-1: SerialNumber: syz [ 702.787289][T19315] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 702.832476][ T5892] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 702.982495][ T5892] usb 3-1: device descriptor read/64, error -71 [ 703.008109][T19315] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 703.029778][ T24] usb 5-1: No status endpoint found [ 703.093158][ T5892] usb usb3-port1: attempt power cycle [ 703.099633][T19338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 703.123940][T19338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 703.229342][ T24] usb 5-1: USB disconnect, device number 32 [ 703.584756][ T5892] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 703.613309][ T5892] usb 3-1: device descriptor read/8, error -71 [ 703.852456][ T5892] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 703.882485][T19376] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2587'. [ 703.883738][ T5892] usb 3-1: device descriptor read/8, error -71 [ 704.042708][ T5892] usb usb3-port1: unable to enumerate USB device [ 704.137674][T19382] vim2m vim2m.0: vidioc_s_fmt queue busy [ 704.431819][T19377] bridge0: port 3(dummy0) entered disabled state [ 704.438785][T19377] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.447060][T19377] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.538469][T19377] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 704.834292][T19403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 704.844718][T19403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 705.471219][T19411] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 705.811454][T19423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 705.877480][T19423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 706.122729][ T24] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 706.318540][ T24] usb 5-1: device descriptor read/64, error -71 [ 706.610147][T19446] netlink: 'syz.1.2596': attribute type 37 has an invalid length. [ 706.623078][ T24] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 706.631677][T19446] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2596'. [ 706.802584][ T24] usb 5-1: device descriptor read/64, error -71 [ 706.914083][ T24] usb usb5-port1: attempt power cycle [ 707.272451][ T940] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 707.272854][ T24] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 707.316065][ T24] usb 5-1: device descriptor read/8, error -71 [ 707.442703][ T940] usb 4-1: Using ep0 maxpacket: 16 [ 707.451231][ T940] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 707.474374][ T940] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 707.514539][ T940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.567866][ T940] usb 4-1: config 0 descriptor?? [ 707.603722][ T24] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 707.740282][ T24] usb 5-1: device descriptor read/8, error -71 [ 707.781718][T19482] input: syz0 as /devices/virtual/input/input71 [ 707.852843][ T24] usb usb5-port1: unable to enumerate USB device [ 707.966408][ T940] usbhid 4-1:0.0: can't add hid device: -71 [ 707.973200][ T940] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 708.052177][ T940] usb 4-1: USB disconnect, device number 28 [ 708.470701][T19512] SET target dimension over the limit! [ 708.531324][T19512] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 708.622539][ T940] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 708.762653][ T940] usb 4-1: device descriptor read/64, error -71 [ 709.002529][ T940] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 709.148280][ T940] usb 4-1: device descriptor read/64, error -71 [ 709.273434][ T940] usb usb4-port1: attempt power cycle [ 709.662566][ T940] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 709.882470][ T940] usb 4-1: device descriptor read/8, error -71 [ 710.142550][ T940] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 710.163102][ T940] usb 4-1: device descriptor read/8, error -71 [ 710.210896][T19575] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 710.272807][ T940] usb usb4-port1: unable to enumerate USB device [ 710.485775][T19593] program syz.1.2617 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 711.145045][T19607] binder_alloc: binder_alloc_mmap_handler: 19606 200000ffc000-200001000000 already mapped failed -16 [ 711.402612][ T24] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 711.585517][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 711.614432][ T24] usb 3-1: config 63 has an invalid interface number: 66 but max is 0 [ 711.632522][ T940] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 711.642378][ T24] usb 3-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 711.671122][ T24] usb 3-1: config 63 has no interface number 0 [ 711.688285][ T24] usb 3-1: config 63 interface 66 has no altsetting 0 [ 711.708140][ T24] usb 3-1: New USB device found, idVendor=174f, idProduct=8a31, bcdDevice=39.f4 [ 711.727504][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.758065][ T24] usb 3-1: Product: syz [ 711.762290][ T24] usb 3-1: Manufacturer: syz [ 711.783069][ T24] usb 3-1: SerialNumber: syz [ 711.804300][ T940] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 711.829035][ T940] usb 4-1: config 0 has no interface number 0 [ 711.843756][T19638] vcan0: tx drop: invalid sa for name 0xfffffffffffffffc [ 711.886210][ T940] usb 4-1: config 0 interface 214 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 711.921759][ T940] usb 4-1: config 0 interface 214 has no altsetting 0 [ 711.941267][ T940] usb 4-1: New USB device found, idVendor=07c9, idProduct=000e, bcdDevice=5d.4f [ 711.952642][ T940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.964180][ T940] usb 4-1: Product: syz [ 711.968393][ T940] usb 4-1: Manufacturer: syz [ 711.983503][ T940] usb 4-1: SerialNumber: syz [ 712.001210][ T940] usb 4-1: config 0 descriptor?? [ 712.009920][T19617] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 712.234554][ T940] ax88179_178a 4-1:0.214: probe with driver ax88179_178a failed with error -71 [ 712.270287][ T940] usb 4-1: USB disconnect, device number 33 [ 712.442995][ T24] uvcvideo 3-1:63.66: probe with driver uvcvideo failed with error -22 [ 712.483509][ T24] usb 3-1: USB disconnect, device number 3 [ 713.604084][ T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 713.772681][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 713.799511][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 713.815619][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 713.832503][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 713.856314][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 713.870108][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 713.884889][ T24] usb 3-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 713.895546][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.905578][ T24] usb 3-1: Product: syz [ 713.909759][ T24] usb 3-1: Manufacturer: syz [ 713.940111][ T24] usb 3-1: SerialNumber: syz [ 713.996453][ T24] usb 3-1: config 0 descriptor?? [ 714.043584][ T24] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input72 [ 714.570044][T19725] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2631'. [ 715.177217][T19730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 715.266796][T19730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 716.540404][T19743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 716.658746][T19743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 717.349699][T19761] netlink: zone id is out of range [ 717.357512][T19761] netlink: zone id is out of range [ 717.366494][T19761] netlink: zone id is out of range [ 717.374074][T19761] netlink: zone id is out of range [ 717.385352][T19761] netlink: zone id is out of range [ 717.392884][T19761] netlink: zone id is out of range [ 717.401600][T19761] netlink: zone id is out of range [ 717.408293][T19761] netlink: zone id is out of range [ 717.424492][T19761] netlink: zone id is out of range [ 717.430116][T19761] netlink: zone id is out of range [ 717.445641][ T10] usb 3-1: USB disconnect, device number 4 [ 717.642044][T19780] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2643'. [ 717.773582][T19799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 717.832776][T19799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 717.841936][T19805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 717.871601][T19809] random: crng reseeded on system resumption [ 717.922534][ T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 717.942465][T19805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 718.042506][T19805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 718.090701][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 718.097786][ T10] usb 3-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 718.146108][ T10] usb 3-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 718.168414][ T10] usb 3-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 718.196702][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 718.217513][ T10] usb 3-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 718.234535][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.252962][T19805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 718.314791][ T10] usb 3-1: config 0 descriptor?? [ 718.560285][T19836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 718.574717][T19836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 718.602292][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 718.629441][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 718.664107][ T10] usb 3-1: USB disconnect, device number 5 [ 719.312414][ T24] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 719.464510][ T24] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 719.772785][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.879021][ T24] usb 3-1: config 0 descriptor?? [ 720.308931][T19895] netlink: 4400 bytes leftover after parsing attributes in process `syz.3.2656'. [ 720.382142][T19895] debugfs: 'Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç+`²iF=' already exists in 'ieee80211' [ 720.995569][ T24] pegasus 3-1:0.0: probe with driver pegasus failed with error -121 [ 721.198199][ T10] usb 3-1: USB disconnect, device number 6 [ 721.433779][T19942] netlink: 'syz.1.2662': attribute type 13 has an invalid length. [ 721.487766][T19945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 721.556728][T19945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 722.604612][T19996] netlink: 'syz.3.2666': attribute type 7 has an invalid length. [ 722.604655][T19996] netlink: 'syz.3.2666': attribute type 8 has an invalid length. [ 722.926501][T19986] tty tty23: ldisc open failed (-12), clearing slot 22 [ 723.110700][T20008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 723.121523][T20008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 723.132503][ T24] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 723.203841][T20011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 723.222285][T20011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 723.282511][ T24] usb 3-1: device descriptor read/64, error -71 [ 723.542544][ T24] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 723.702556][ T24] usb 3-1: device descriptor read/64, error -71 [ 723.824224][ T24] usb usb3-port1: attempt power cycle [ 723.882598][ T5912] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 724.032410][ T5912] usb 4-1: Using ep0 maxpacket: 16 [ 724.043744][ T5912] usb 4-1: New USB device found, idVendor=0458, idProduct=704a, bcdDevice=3a.55 [ 724.053460][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.061483][ T5912] usb 4-1: Product: syz [ 724.065911][ T5912] usb 4-1: Manufacturer: syz [ 724.070530][ T5912] usb 4-1: SerialNumber: syz [ 724.078620][ T5912] usb 4-1: config 0 descriptor?? [ 724.088223][ T5912] gspca_main: gspca_sn9c20x-2.14.0 probing 0458:704a [ 724.113022][ T10] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 724.172629][ T24] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 724.214542][ T24] usb 3-1: device descriptor read/8, error -71 [ 724.281674][ T10] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 724.300620][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.329380][ T10] usb 5-1: Product: syz [ 724.329861][T20030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 724.345108][T20030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 724.353636][ T10] usb 5-1: Manufacturer: syz [ 724.356768][T20030] netlink: 372 bytes leftover after parsing attributes in process `syz.1.2671'. [ 724.358267][ T10] usb 5-1: SerialNumber: syz [ 724.369683][ T10] usb 5-1: config 0 descriptor?? [ 724.383616][T20030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 724.394027][T20030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 724.472490][ T24] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 724.505402][ T24] usb 3-1: device descriptor read/8, error -71 [ 724.612814][ T24] usb usb3-port1: unable to enumerate USB device [ 724.818141][T20023] tipc: Enabled bearer , priority 0 [ 724.827964][ T5912] gspca_sn9c20x: Write register 1001 failed -110 [ 724.840866][ T5912] gspca_sn9c20x: Device initialization failed [ 724.849889][T20023] tipc: Resetting bearer [ 724.861617][ T5912] gspca_sn9c20x 4-1:0.0: probe with driver gspca_sn9c20x failed with error -110 [ 724.882468][ T10] usb 5-1: Firmware version (0.0) predates our first public release. [ 724.901614][ T10] usb 5-1: Please update to version 0.2 or newer [ 724.914217][T20022] tipc: Disabling bearer [ 725.102189][ T10] usb 5-1: USB disconnect, device number 37 [ 725.150973][T20066] tipc: Enabling of bearer rejected, already enabled [ 725.645137][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 725.645156][ T30] audit: type=1326 audit(1760430151.801:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20085 comm="syz.4.2676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57a998eec9 code=0x7ffc0000 [ 725.673621][ C0] vkms_vblank_simulate: vblank timer overrun [ 725.728064][T20088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 725.743267][ T30] audit: type=1326 audit(1760430151.801:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20085 comm="syz.4.2676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57a998eec9 code=0x7ffc0000 [ 725.772917][ T30] audit: type=1326 audit(1760430151.801:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20085 comm="syz.4.2676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f57a998eec9 code=0x7ffc0000 [ 725.801958][ T30] audit: type=1326 audit(1760430151.801:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20085 comm="syz.4.2676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57a998eec9 code=0x7ffc0000 [ 725.824354][ C0] vkms_vblank_simulate: vblank timer overrun [ 725.838061][ T30] audit: type=1326 audit(1760430151.801:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20085 comm="syz.4.2676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57a998eec9 code=0x7ffc0000 [ 725.874406][ T30] audit: type=1326 audit(1760430151.801:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20085 comm="syz.4.2676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f57a998eec9 code=0x7ffc0000 [ 725.903244][T20088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 725.936548][ T30] audit: type=1326 audit(1760430151.801:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20085 comm="syz.4.2676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57a998eec9 code=0x7ffc0000 [ 725.967383][T20099] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2678'. [ 726.014331][ T30] audit: type=1326 audit(1760430151.801:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20085 comm="syz.4.2676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57a998eec9 code=0x7ffc0000 [ 726.036714][ C0] vkms_vblank_simulate: vblank timer overrun [ 726.145362][ T30] audit: type=1326 audit(1760430151.841:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20085 comm="syz.4.2676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f57a998eec9 code=0x7ffc0000 [ 726.173341][ T10] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 726.185590][ T30] audit: type=1326 audit(1760430151.841:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20085 comm="syz.4.2676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57a998eec9 code=0x7ffc0000 [ 726.207924][ C0] vkms_vblank_simulate: vblank timer overrun [ 726.334344][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB9, changing to 0x89 [ 726.346817][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 16103, setting to 64 [ 726.410736][ T10] usb 3-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 726.438926][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.454072][ T10] usb 3-1: config 0 descriptor?? [ 726.460819][T20092] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 726.689849][ T5892] usb 4-1: USB disconnect, device number 34 [ 726.799904][T20135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 726.837755][T20135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 726.911039][ T10] chicony 0003:04F2:1236.0027: unknown main item tag 0x0 [ 726.940735][ T10] chicony 0003:04F2:1236.0027: unknown main item tag 0x0 [ 726.963226][T20141] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2684'. [ 727.006377][ T10] chicony 0003:04F2:1236.0027: unknown main item tag 0x0 [ 727.097690][ T10] chicony 0003:04F2:1236.0027: unknown main item tag 0x0 [ 727.215520][T20146] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2684'. [ 727.227267][ T10] chicony 0003:04F2:1236.0027: unknown main item tag 0x0 [ 727.329269][ T10] chicony 0003:04F2:1236.0027: hidraw0: USB HID v1.01 Device [HID 04f2:1236] on usb-dummy_hcd.2-1/input0 [ 727.422874][ T10] usb 3-1: USB disconnect, device number 11 [ 727.791095][T20157] fido_id[20157]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 729.008232][T20201] FAULT_INJECTION: forcing a failure. [ 729.008232][T20201] name failslab, interval 1, probability 0, space 0, times 0 [ 729.095323][T20201] CPU: 0 UID: 0 PID: 20201 Comm: syz.0.2691 Not tainted syzkaller #0 PREEMPT(full) [ 729.095357][T20201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 729.095372][T20201] Call Trace: [ 729.095381][T20201] [ 729.095389][T20201] dump_stack_lvl+0x189/0x250 [ 729.095415][T20201] ? __pfx____ratelimit+0x10/0x10 [ 729.095441][T20201] ? __pfx_dump_stack_lvl+0x10/0x10 [ 729.095458][T20201] ? __pfx__printk+0x10/0x10 [ 729.095478][T20201] ? __pfx___might_resched+0x10/0x10 [ 729.095499][T20201] ? fs_reclaim_acquire+0x7d/0x100 [ 729.095522][T20201] should_fail_ex+0x414/0x560 [ 729.095551][T20201] should_failslab+0xa8/0x100 [ 729.095571][T20201] __kmalloc_cache_noprof+0x6f/0x6f0 [ 729.095589][T20201] ? kvfree_call_rcu+0x3e9/0x4c0 [ 729.095605][T20201] ? ovs_ct_limit_cmd_set+0x2f7/0xb00 [ 729.095630][T20201] ovs_ct_limit_cmd_set+0x2f7/0xb00 [ 729.095661][T20201] genl_family_rcv_msg_doit+0x215/0x300 [ 729.095686][T20201] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 729.095713][T20201] ? bpf_lsm_capable+0x9/0x20 [ 729.095727][T20201] ? security_capable+0x7e/0x2e0 [ 729.095747][T20201] genl_rcv_msg+0x60e/0x790 [ 729.095769][T20201] ? __pfx_genl_rcv_msg+0x10/0x10 [ 729.095785][T20201] ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10 [ 729.095810][T20201] ? __asan_memcpy+0x40/0x70 [ 729.095825][T20201] ? __pfx_ref_tracker_free+0x10/0x10 [ 729.095848][T20201] netlink_rcv_skb+0x208/0x470 [ 729.095868][T20201] ? __lock_acquire+0xab9/0xd20 [ 729.095895][T20201] ? __pfx_genl_rcv_msg+0x10/0x10 [ 729.095917][T20201] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 729.095957][T20201] ? down_read+0x1ad/0x2e0 [ 729.095991][T20201] genl_rcv+0x28/0x40 [ 729.096015][T20201] netlink_unicast+0x82f/0x9e0 [ 729.096054][T20201] ? __pfx_netlink_unicast+0x10/0x10 [ 729.096090][T20201] ? netlink_sendmsg+0x642/0xb30 [ 729.096121][T20201] ? skb_put+0x11b/0x210 [ 729.096164][T20201] netlink_sendmsg+0x805/0xb30 [ 729.096212][T20201] ? __pfx_netlink_sendmsg+0x10/0x10 [ 729.096249][T20201] ? aa_sock_msg_perm+0xf1/0x1d0 [ 729.096277][T20201] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 729.096310][T20201] ? __pfx_netlink_sendmsg+0x10/0x10 [ 729.096343][T20201] __sock_sendmsg+0x21c/0x270 [ 729.096378][T20201] ____sys_sendmsg+0x505/0x830 [ 729.096420][T20201] ? __pfx_____sys_sendmsg+0x10/0x10 [ 729.096471][T20201] ? import_iovec+0x74/0xa0 [ 729.096506][T20201] ___sys_sendmsg+0x21f/0x2a0 [ 729.096536][T20201] ? __pfx____sys_sendmsg+0x10/0x10 [ 729.096616][T20201] ? __fget_files+0x2a/0x420 [ 729.096644][T20201] ? __fget_files+0x3a0/0x420 [ 729.096689][T20201] __x64_sys_sendmsg+0x19b/0x260 [ 729.096714][T20201] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 729.096747][T20201] ? __pfx_ksys_write+0x10/0x10 [ 729.096781][T20201] ? do_syscall_64+0xbe/0xfa0 [ 729.096808][T20201] do_syscall_64+0xfa/0xfa0 [ 729.096828][T20201] ? lockdep_hardirqs_on+0x9c/0x150 [ 729.096858][T20201] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.096886][T20201] ? clear_bhb_loop+0x60/0xb0 [ 729.096915][T20201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.096941][T20201] RIP: 0033:0x7fc89c98eec9 [ 729.096962][T20201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 729.096982][T20201] RSP: 002b:00007fc89d76c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 729.097011][T20201] RAX: ffffffffffffffda RBX: 00007fc89cbe5fa0 RCX: 00007fc89c98eec9 [ 729.097028][T20201] RDX: 000000000000c000 RSI: 0000200000000040 RDI: 0000000000000007 [ 729.097043][T20201] RBP: 00007fc89d76c090 R08: 0000000000000000 R09: 0000000000000000 [ 729.097057][T20201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 729.097071][T20201] R13: 00007fc89cbe6038 R14: 00007fc89cbe5fa0 R15: 00007fc89cd0fa28 [ 729.097106][T20201] [ 730.086794][T20223] netlink: 'syz.1.2693': attribute type 4 has an invalid length. [ 730.121077][T20223] netlink: 'syz.1.2693': attribute type 4 has an invalid length. [ 730.773150][T20238] binder: 20234:20238 ioctl c0306201 200000000040 returned -22 [ 731.258479][T20257] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 731.373707][T20248] x_tables: ip_tables: osf match: only valid for protocol 6 [ 731.393144][ T5892] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 731.595673][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 731.623276][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 4 [ 731.639385][T20270] trusted_key: syz.1.2702 sent an empty control message without MSG_MORE. [ 731.667714][ T5892] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 731.696016][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.739396][ T5892] usb 4-1: config 0 descriptor?? [ 731.986499][ T5892] ath6kl: Failed to submit usb control message: -71 [ 732.015632][ T5892] ath6kl: unable to send the bmi data to the device: -71 [ 732.040073][ T5892] ath6kl: Unable to send get target info: -71 [ 732.078092][ T5892] ath6kl: Failed to init ath6kl core: -71 [ 732.111793][ T5892] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 732.255335][ T5892] usb 4-1: USB disconnect, device number 35 [ 732.823397][ T5892] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 732.990066][ T5892] usb 3-1: Using ep0 maxpacket: 32 [ 733.002539][ T5892] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 17 [ 733.002547][ T24] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 733.002594][ T5892] usb 3-1: config 0 interface 0 has no altsetting 0 [ 733.101426][ T5892] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 733.111240][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.151889][ T5892] usb 3-1: Product: syz [ 733.177020][ T5892] usb 3-1: Manufacturer: syz [ 733.181684][ T5892] usb 3-1: SerialNumber: syz [ 733.187097][T20315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 733.204922][ T5892] usb 3-1: config 0 descriptor?? [ 733.208572][ T24] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 733.271338][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.281647][ T5892] gs_usb 3-1:0.0: Required endpoints not found [ 733.300755][ T24] usb 4-1: Product: syz [ 733.310934][ T24] usb 4-1: Manufacturer: syz [ 733.331209][ T24] usb 4-1: SerialNumber: syz [ 733.386869][T20315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 734.306540][T20329] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2711'. [ 734.344819][T20329] vlan4: entered promiscuous mode [ 734.349979][T20329] batadv0: entered promiscuous mode [ 734.499926][T20336] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 734.613219][T20346] net_ratelimit: 77 callbacks suppressed [ 734.613233][T20346] netlink: zone id is out of range [ 734.634335][T20346] netlink: zone id is out of range [ 734.639949][T20346] netlink: zone id is out of range [ 734.645673][T20346] netlink: zone id is out of range [ 734.651081][T20346] netlink: zone id is out of range [ 734.657710][T20346] netlink: zone id is out of range [ 734.663527][T20346] netlink: zone id is out of range [ 734.668699][T20346] netlink: zone id is out of range [ 734.674349][T20346] netlink: zone id is out of range [ 734.679509][T20346] netlink: zone id is out of range [ 734.832471][ T10] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 734.988858][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 735.005896][ T10] usb 5-1: not running at top speed; connect to a high speed hub [ 735.019870][ T10] usb 5-1: config 5 has 1 interface, different from the descriptor's value: 2 [ 735.039168][ T10] usb 5-1: config 5 interface 0 has no altsetting 1 [ 735.050274][ T10] usb 5-1: New USB device found, idVendor=0582, idProduct=0074, bcdDevice=2a.70 [ 735.066503][T20351] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2708'. [ 735.075708][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.084319][ T10] usb 5-1: Product: syz [ 735.096139][T20353] netlink: 'syz.1.2715': attribute type 10 has an invalid length. [ 735.108572][ T10] usb 5-1: Manufacturer: syz [ 735.116428][ T10] usb 5-1: SerialNumber: syz [ 735.130549][T20353] team0: Port device netdevsim0 added [ 735.349525][T20347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 735.369722][T20347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 735.501931][ T10] usb 5-1: USB disconnect, device number 38 [ 735.595388][T13917] udevd[13917]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:5.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 735.712228][ T10] usb 3-1: USB disconnect, device number 12 [ 736.222806][ T5912] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 736.394363][ T24] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 736.433379][T20377] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 736.445107][ T5912] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 736.456895][ T24] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 736.466374][ T5912] usb 3-1: config 0 interface 0 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 736.502057][ T24] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 736.510551][ T5912] usb 3-1: config 0 interface 0 has no altsetting 0 [ 736.530634][ T5912] usb 3-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 736.573028][ T24] usb 4-1: USB disconnect, device number 36 [ 736.579093][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.596160][ T5912] usb 3-1: Product: syz [ 736.617105][ T5912] usb 3-1: Manufacturer: syz [ 736.621765][ T5912] usb 3-1: SerialNumber: syz [ 736.622667][T20377] usb 5-1: Using ep0 maxpacket: 32 [ 736.666521][T20377] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 736.694703][ T5912] usb 3-1: config 0 descriptor?? [ 736.725011][T20377] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 736.750408][T20377] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 736.769854][T20377] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.796314][T20377] usb 5-1: config 0 descriptor?? [ 736.968384][T20405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 736.979175][T20405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 736.989132][T20404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 737.011793][T20404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 737.233044][ T10] usb 3-1: USB disconnect, device number 13 [ 737.240328][T20377] ft260 0003:0403:6030.0028: unknown main item tag 0x7 [ 737.423432][T20376] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 737.432670][T20377] ft260 0003:0403:6030.0028: chip code: 6424 8183 [ 737.582532][T20376] usb 4-1: device descriptor read/64, error -71 [ 737.639232][T20377] ft260 0003:0403:6030.0028: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 737.712438][ T5925] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 737.732973][T20477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 737.750752][T20477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 737.851726][T20377] ft260 0003:0403:6030.0028: failed to retrieve status: -32, no wakeup [ 737.917049][ T5925] usb 3-1: Using ep0 maxpacket: 32 [ 737.941821][ T5925] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 737.972638][T20376] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 737.976471][ T5925] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=8a.0a [ 738.003543][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.033307][ T5925] usb 3-1: Product: syz [ 738.051441][ T5925] usb 3-1: Manufacturer: syz [ 738.096158][T20487] ft260 0003:0403:6030.0028: ft260_hid_output_report_check_status: failed to start transfer, ret -38 [ 738.112938][ T5925] usb 3-1: SerialNumber: syz [ 738.150019][ T5925] usb 3-1: config 0 descriptor?? [ 738.212532][T20376] usb 4-1: device descriptor read/64, error -71 [ 738.333188][T20376] usb usb4-port1: attempt power cycle [ 738.386680][T20466] tipc: Enabled bearer , priority 0 [ 738.394348][T20466] syzkaller0: entered allmulticast mode [ 738.400708][T20487] ft260 0003:0403:6030.0028: failed to reset I2C controller: -108 [ 738.433383][T20466] tipc: Resetting bearer [ 738.465059][ T5925] usb 3-1: USB disconnect, device number 14 [ 738.477283][T20465] tipc: Disabling bearer [ 738.792495][T20376] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 738.816895][T20376] usb 4-1: device descriptor read/8, error -71 [ 739.062562][T20376] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 739.186763][T20375] usb 5-1: USB disconnect, device number 39 [ 739.198842][T20376] usb 4-1: device descriptor read/8, error -71 [ 739.324993][T20376] usb usb4-port1: unable to enumerate USB device [ 739.628607][T20514] net_ratelimit: 246 callbacks suppressed [ 739.628631][T20514] netlink: zone id is out of range [ 739.663185][T20514] netlink: zone id is out of range [ 739.675247][T20514] netlink: zone id is out of range [ 739.686072][T20514] netlink: zone id is out of range [ 739.722432][T20514] netlink: zone id is out of range [ 739.728861][T20514] netlink: zone id is out of range [ 739.739055][T20514] netlink: zone id is out of range [ 739.748400][T20514] netlink: zone id is out of range [ 739.754840][T20514] netlink: zone id is out of range [ 739.794151][T20514] netlink: zone id is out of range [ 741.030648][T20573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2730'. [ 741.057938][T20573] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2730'. [ 741.202927][ T5925] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 741.392522][ T5925] usb 4-1: Using ep0 maxpacket: 32 [ 741.423660][ T5925] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 741.475998][ T5925] usb 4-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 741.486169][T20591] usb usb8: usbfs: process 20591 (syz.4.2733) did not claim interface 0 before use [ 741.495785][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.495813][ T5925] usb 4-1: Product: syz [ 741.495830][ T5925] usb 4-1: Manufacturer: syz [ 741.495847][ T5925] usb 4-1: SerialNumber: syz [ 741.506772][ T5925] usb 4-1: config 0 descriptor?? [ 741.548210][ T5925] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 741.682561][ T10] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 741.806032][ T5925] gspca_sunplus: reg_r err -32 [ 741.970113][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 741.978903][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 742.018821][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 742.029371][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 742.032739][ T24] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 742.084456][ T10] usb 3-1: string descriptor 0 read error: -22 [ 742.090807][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 742.100642][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.168258][ T10] usb 3-1: 0:2 : does not exist [ 742.282535][ T24] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 742.297709][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 742.318470][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 742.330012][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 742.343453][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 742.372526][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 742.388846][T20618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 742.398106][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 742.411908][T20618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 742.428521][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 742.442018][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 742.456462][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 742.469240][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 742.480773][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 742.516951][T20623] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2736'. [ 742.529626][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 742.545763][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 742.555229][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 742.567252][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 742.588128][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 742.599666][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 742.610745][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 742.619709][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 742.629150][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 742.641302][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 742.651076][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 742.660878][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 742.672182][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 742.681723][ T24] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 742.691543][ T24] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 742.712921][ T24] usb 5-1: Product: syz [ 742.717138][ T24] usb 5-1: Manufacturer: syz [ 742.723021][ T24] usb 5-1: SerialNumber: syz [ 742.754415][ T24] usb 5-1: config 0 descriptor?? [ 742.768351][ T24] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 742.903242][ T5925] sunplus 4-1:0.0: probe with driver sunplus failed with error -32 [ 742.997469][ T5925] usb 5-1: USB disconnect, device number 40 [ 743.026527][ T5925] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 743.833167][ T10] usb 3-1: Warning! Unlikely big volume range (=4294967294), cval->res is probably wrong. [ 743.864290][ T10] usb 3-1: [5] FU [Mic Capture Volume] ch = 1, val = 0/20196/-8016 [ 743.910935][ T10] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 743.933144][ T10] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 743.975824][ T10] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 744.018386][ T10] usb 3-1: USB disconnect, device number 15 [ 744.243436][ T5925] usb 4-1: USB disconnect, device number 41 [ 744.913217][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 744.913237][ T30] audit: type=1326 audit(1760430171.071:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20702 comm="syz.3.2740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11a978eec9 code=0x7ffc0000 [ 744.941676][ C0] vkms_vblank_simulate: vblank timer overrun [ 745.175710][ T30] audit: type=1326 audit(1760430171.071:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20702 comm="syz.3.2740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11a978eec9 code=0x7ffc0000 [ 745.226905][ T30] audit: type=1326 audit(1760430171.111:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20702 comm="syz.3.2740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f11a978eec9 code=0x7ffc0000 [ 745.292771][T20710] loop6: detected capacity change from 0 to 1 [ 745.331880][T20710] Dev loop6: unable to read RDB block 1 [ 745.412939][T20710] loop6: unable to read partition table [ 745.418960][T20710] loop6: partition table beyond EOD, truncated [ 745.507183][T20710] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 745.547799][ T30] audit: type=1326 audit(1760430171.111:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20702 comm="syz.3.2740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11a978eec9 code=0x7ffc0000 [ 745.645120][ T30] audit: type=1326 audit(1760430171.111:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20702 comm="syz.3.2740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11a978eec9 code=0x7ffc0000 [ 745.743832][ T30] audit: type=1326 audit(1760430171.121:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20702 comm="syz.3.2740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f11a978eec9 code=0x7ffc0000 [ 745.757504][T20716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 745.784812][T20716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 745.837527][ T30] audit: type=1326 audit(1760430171.141:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20702 comm="syz.3.2740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11a978eec9 code=0x7ffc0000 [ 745.860192][ T30] audit: type=1326 audit(1760430171.141:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20702 comm="syz.3.2740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11a978eec9 code=0x7ffc0000 [ 745.911602][ T30] audit: type=1326 audit(1760430171.151:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20702 comm="syz.3.2740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f11a978eec9 code=0x7ffc0000 [ 746.006601][ T30] audit: type=1326 audit(1760430171.151:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20702 comm="syz.3.2740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11a978eec9 code=0x7ffc0000 [ 746.243631][T20731] usb usb8: usbfs: process 20731 (syz.2.2744) did not claim interface 0 before use [ 746.340263][T20741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2746'. [ 746.391956][T20741] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2746'. [ 746.502498][ T5925] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 746.662424][ T5925] usb 4-1: Using ep0 maxpacket: 8 [ 746.669728][ T5925] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 746.682502][ T5925] usb 4-1: config 0 has no interface number 0 [ 746.688637][ T5925] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 746.706154][ T5925] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 746.742584][ T5925] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 746.773972][ T5925] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 746.828610][ T5925] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 746.870827][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.911492][ T5925] usb 4-1: config 0 descriptor?? [ 746.948902][ T5925] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 747.255755][T20375] usb 4-1: USB disconnect, device number 42 [ 747.255946][ C1] ldusb 4-1:0.55: usb_submit_urb failed (-19) [ 747.269049][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.278264][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.294730][T20375] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 747.422755][ T10] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 747.570275][T20778] ldusb: No device or device unplugged -19 [ 747.582842][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 747.756126][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 747.799396][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 747.835282][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 747.853825][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 747.863318][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.875388][ T10] usb 3-1: config 0 descriptor?? [ 747.882798][T20762] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 747.897872][ T10] hub 3-1:0.0: USB hub found [ 748.096316][ T10] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 748.429577][T20461] net_ratelimit: 80 callbacks suppressed [ 748.429594][T20461] Set syz1 is full, maxelem 65536 reached [ 748.548671][ T10] hid-generic 0003:046D:C314.0029: hidraw0: USB HID v8.00 Device [HID 046d:c314] on usb-dummy_hcd.2-1/input0 [ 748.716818][T20762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 748.728198][T20762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 748.843124][T20376] usb 3-1: USB disconnect, device number 16 [ 748.961291][T20795] fido_id[20795]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 748.972193][T20815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 749.090960][T20815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 749.636773][T20825] kvm: vcpu 0: requested 1664 ns lapic timer period limited to 200000 ns [ 750.035119][T20846] usb usb8: usbfs: process 20846 (syz.4.2756) did not claim interface 0 before use [ 750.325414][ T24] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 750.376183][T20860] ======================================================= [ 750.376183][T20860] WARNING: The mand mount option has been deprecated and [ 750.376183][T20860] and is ignored by this kernel. Remove the mand [ 750.376183][T20860] option from the mount to silence this warning. [ 750.376183][T20860] ======================================================= [ 750.548281][ T24] usb 3-1: not running at top speed; connect to a high speed hub [ 750.583620][ T24] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 750.602664][ T24] usb 3-1: config 0 has no interface number 0 [ 750.691897][ T24] usb 3-1: config 0 interface 64 altsetting 13 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 750.722571][ T10] usb 4-1: new low-speed USB device number 43 using dummy_hcd [ 750.750319][ T24] usb 3-1: config 0 interface 64 altsetting 13 has an invalid descriptor for endpoint zero, skipping [ 750.791248][T20867] netlink: 'syz.4.2761': attribute type 32 has an invalid length. [ 750.804589][ T24] usb 3-1: config 0 interface 64 altsetting 13 endpoint 0xC has invalid maxpacket 511, setting to 64 [ 750.821678][T20867] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2761'. [ 750.841341][ T24] usb 3-1: config 0 interface 64 altsetting 13 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 750.873349][ T10] usb 4-1: Invalid ep0 maxpacket: 32 [ 750.892153][ T24] usb 3-1: config 0 interface 64 altsetting 13 has an invalid descriptor for endpoint zero, skipping [ 750.951173][ T24] usb 3-1: config 0 interface 64 altsetting 13 has an invalid descriptor for endpoint zero, skipping [ 750.978453][ T24] usb 3-1: config 0 interface 64 has no altsetting 0 [ 751.003562][ T24] usb 3-1: Dual-Role OTG device on HNP port [ 751.012894][ T10] usb 4-1: new low-speed USB device number 44 using dummy_hcd [ 751.029059][ T24] usb 3-1: New USB device found, idVendor=19d2, idProduct=1567, bcdDevice=bb.3f [ 751.051162][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.077284][ T24] usb 3-1: Product: syz [ 751.095889][ T24] usb 3-1: Manufacturer: syz [ 751.128390][ T24] usb 3-1: SerialNumber: syz [ 751.149369][ T24] usb 3-1: config 0 descriptor?? [ 751.159088][T20848] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 751.172924][ T10] usb 4-1: Invalid ep0 maxpacket: 32 [ 751.187288][ T10] usb usb4-port1: attempt power cycle [ 751.242532][ T5925] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 751.378600][ T24] option 3-1:0.64: GSM modem (1-port) converter detected [ 751.427400][ T5925] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 751.449609][ T5925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.458070][ T24] usb 3-1: USB disconnect, device number 17 [ 751.509873][ T5925] usb 5-1: config 0 descriptor?? [ 751.516170][ T24] option 3-1:0.64: device disconnected [ 751.543546][ T10] usb 4-1: new low-speed USB device number 45 using dummy_hcd [ 751.577837][ T10] usb 4-1: Invalid ep0 maxpacket: 32 [ 751.650475][T20892] : entered promiscuous mode [ 751.712537][ T10] usb 4-1: new low-speed USB device number 46 using dummy_hcd [ 751.774016][ T10] usb 4-1: Invalid ep0 maxpacket: 32 [ 751.781344][ T10] usb usb4-port1: unable to enumerate USB device [ 752.120115][ T5925] ath6kl: Unsupported hardware version: 0x0 [ 752.182444][ T5925] ath6kl: Failed to init ath6kl core: -22 [ 752.188787][ T5925] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 752.215096][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 752.215114][ T30] audit: type=1326 audit(1760430178.351:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20901 comm="syz.2.2764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d2738eec9 code=0x7ffc0000 [ 752.248142][ T30] audit: type=1326 audit(1760430178.351:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20901 comm="syz.2.2764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d2738eec9 code=0x7ffc0000 [ 752.272558][ T30] audit: type=1326 audit(1760430178.351:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20901 comm="syz.2.2764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f1d2738eec9 code=0x7ffc0000 [ 752.296360][ T30] audit: type=1326 audit(1760430178.351:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20901 comm="syz.2.2764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d2738eec9 code=0x7ffc0000 [ 752.319468][ T30] audit: type=1326 audit(1760430178.351:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20901 comm="syz.2.2764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d2738eec9 code=0x7ffc0000 [ 752.353004][ T5925] usb 5-1: USB disconnect, device number 41 [ 752.371266][ T30] audit: type=1326 audit(1760430178.351:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20901 comm="syz.2.2764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1d2738d710 code=0x7ffc0000 [ 752.396958][ T30] audit: type=1326 audit(1760430178.351:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20901 comm="syz.2.2764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d2738eec9 code=0x7ffc0000 [ 752.434400][ T30] audit: type=1326 audit(1760430178.351:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20901 comm="syz.2.2764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d2738eec9 code=0x7ffc0000 [ 752.457908][ T30] audit: type=1326 audit(1760430178.351:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20901 comm="syz.2.2764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1d2738d710 code=0x7ffc0000 [ 752.487993][ T30] audit: type=1326 audit(1760430178.351:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20901 comm="syz.2.2764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d2738eec9 code=0x7ffc0000 [ 752.557403][T20908] netlink: 'syz.2.2764': attribute type 21 has an invalid length. [ 752.567706][T20908] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2764'. [ 752.588061][T20908] netlink: 'syz.2.2764': attribute type 5 has an invalid length. [ 752.596542][T20908] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2764'. [ 753.276202][ T24] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 753.302611][T20946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 753.318720][T20946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 753.386506][T20946] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 753.465094][ T24] usb 5-1: device descriptor read/64, error -71 [ 753.512899][T20946] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 753.561971][T20956] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2772'. [ 753.594335][T20946] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 753.601775][T20946] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 753.817971][T20963] sctp: [Deprecated]: syz.3.2773 (pid 20963) Use of int in max_burst socket option. [ 753.817971][T20963] Use struct sctp_assoc_value instead [ 753.843633][T20946] bond0: (slave batadv0): Releasing backup interface [ 753.852385][ T24] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 753.883957][T20965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 753.926593][T20965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 754.002531][ T24] usb 5-1: device descriptor read/64, error -71 [ 754.113495][ T24] usb usb5-port1: attempt power cycle [ 754.322484][T20376] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 754.352632][T20991] trusted_key: encrypted_key: insufficient parameters specified [ 754.464276][ T24] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 754.472553][T20376] usb 3-1: Using ep0 maxpacket: 16 [ 754.480195][T20376] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 754.497792][T20376] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 754.512986][ T24] usb 5-1: device descriptor read/8, error -71 [ 754.591955][T20376] usb 3-1: config 0 has no interface number 0 [ 754.641293][T20997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 754.655889][T20997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 754.665773][T20376] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 754.685422][T20376] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.701807][T20376] usb 3-1: Product: syz [ 754.713069][T20376] usb 3-1: Manufacturer: syz [ 754.719351][T20376] usb 3-1: SerialNumber: syz [ 754.741539][T20376] usb 3-1: config 0 descriptor?? [ 754.752405][ T24] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 754.756827][T20376] uvcvideo 3-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 754.773628][ T24] usb 5-1: device descriptor read/8, error -71 [ 754.799584][T20376] uvcvideo 3-1:0.105: No valid video chain found. [ 754.838446][T21005] program syz.1.2778 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 754.882878][ T24] usb usb5-port1: unable to enumerate USB device [ 754.972156][T20376] usb 3-1: USB disconnect, device number 18 [ 755.236665][T20997] geneve3: entered promiscuous mode [ 755.257548][ T12] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 51467 - 0 [ 755.291640][ T12] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 51467 - 0 [ 755.306085][ T12] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 51467 - 0 [ 755.317440][ T12] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 51467 - 0 [ 755.913466][T21042] netlink: 184 bytes leftover after parsing attributes in process `syz.1.2783'. [ 756.111594][T21044] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 756.143579][T21044] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2781'. [ 756.537219][T21073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 756.568797][T21073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 756.883779][T21076] netlink: 696 bytes leftover after parsing attributes in process `syz.3.2782'. [ 756.910925][T21076] netlink: 124 bytes leftover after parsing attributes in process `syz.3.2782'. [ 758.712435][ T5925] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 758.766258][T21123] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2791'. [ 758.886372][ T5925] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 758.892851][T20375] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 758.981132][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.054093][T20375] usb 4-1: Using ep0 maxpacket: 8 [ 759.063506][ T5925] usb 5-1: Product: syz [ 759.070917][ T5925] usb 5-1: Manufacturer: syz [ 759.081029][ T5925] usb 5-1: SerialNumber: syz [ 759.087442][T20375] usb 4-1: unable to get BOS descriptor or descriptor too short [ 759.109477][T20375] usb 4-1: too many configurations: 106, using maximum allowed: 8 [ 759.115884][ T5925] r8152-cfgselector 5-1: Unknown version 0x0000 [ 759.149561][ T5925] r8152-cfgselector 5-1: config 0 descriptor?? [ 759.174405][T20375] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 759.206496][T20375] usb 4-1: can't read configurations, error -61 [ 759.247620][T21138] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 759.352459][T20375] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 759.532548][T20375] usb 4-1: Using ep0 maxpacket: 8 [ 759.548345][T20375] usb 4-1: unable to get BOS descriptor or descriptor too short [ 759.561183][T20375] usb 4-1: too many configurations: 106, using maximum allowed: 8 [ 759.587672][T20375] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 759.596832][T20375] usb 4-1: can't read configurations, error -61 [ 759.621655][T20375] usb usb4-port1: attempt power cycle [ 759.662170][T21159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 759.686638][T21159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 759.728863][ T5925] r8152-cfgselector 5-1: USB disconnect, device number 46 [ 759.827474][T21159] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2797'. [ 759.861791][T21169] FAULT_INJECTION: forcing a failure. [ 759.861791][T21169] name failslab, interval 1, probability 0, space 0, times 0 [ 759.903553][T21169] CPU: 0 UID: 0 PID: 21169 Comm: syz.2.2798 Not tainted syzkaller #0 PREEMPT(full) [ 759.903585][T21169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 759.903599][T21169] Call Trace: [ 759.903608][T21169] [ 759.903618][T21169] dump_stack_lvl+0x189/0x250 [ 759.903649][T21169] ? __pfx____ratelimit+0x10/0x10 [ 759.903676][T21169] ? __pfx_dump_stack_lvl+0x10/0x10 [ 759.903693][T21169] ? __pfx__printk+0x10/0x10 [ 759.903713][T21169] ? __pfx___might_resched+0x10/0x10 [ 759.903734][T21169] ? fs_reclaim_acquire+0x7d/0x100 [ 759.903757][T21169] should_fail_ex+0x414/0x560 [ 759.903786][T21169] should_failslab+0xa8/0x100 [ 759.903807][T21169] __kmalloc_cache_noprof+0x6f/0x6f0 [ 759.903824][T21169] ? kvfree_call_rcu+0x3e9/0x4c0 [ 759.903841][T21169] ? ovs_ct_limit_cmd_set+0x2f7/0xb00 [ 759.903866][T21169] ovs_ct_limit_cmd_set+0x2f7/0xb00 [ 759.903897][T21169] genl_family_rcv_msg_doit+0x215/0x300 [ 759.903922][T21169] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 759.903949][T21169] ? bpf_lsm_capable+0x9/0x20 [ 759.903963][T21169] ? security_capable+0x7e/0x2e0 [ 759.903983][T21169] genl_rcv_msg+0x60e/0x790 [ 759.904005][T21169] ? __pfx_genl_rcv_msg+0x10/0x10 [ 759.904021][T21169] ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10 [ 759.904043][T21169] ? __asan_memcpy+0x40/0x70 [ 759.904058][T21169] ? __pfx_ref_tracker_free+0x10/0x10 [ 759.904079][T21169] netlink_rcv_skb+0x208/0x470 [ 759.904100][T21169] ? __lock_acquire+0xab9/0xd20 [ 759.904120][T21169] ? __pfx_genl_rcv_msg+0x10/0x10 [ 759.904138][T21169] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 759.904174][T21169] ? down_read+0x1ad/0x2e0 [ 759.904194][T21169] genl_rcv+0x28/0x40 [ 759.904208][T21169] netlink_unicast+0x82f/0x9e0 [ 759.904235][T21169] ? __pfx_netlink_unicast+0x10/0x10 [ 759.904256][T21169] ? netlink_sendmsg+0x642/0xb30 [ 759.904277][T21169] ? skb_put+0x11b/0x210 [ 759.904302][T21169] netlink_sendmsg+0x805/0xb30 [ 759.904331][T21169] ? __pfx_netlink_sendmsg+0x10/0x10 [ 759.904356][T21169] ? aa_sock_msg_perm+0xf1/0x1d0 [ 759.904383][T21169] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 759.904404][T21169] ? __pfx_netlink_sendmsg+0x10/0x10 [ 759.904427][T21169] __sock_sendmsg+0x21c/0x270 [ 759.904449][T21169] ____sys_sendmsg+0x505/0x830 [ 759.904478][T21169] ? __pfx_____sys_sendmsg+0x10/0x10 [ 759.904510][T21169] ? import_iovec+0x74/0xa0 [ 759.904534][T21169] ___sys_sendmsg+0x21f/0x2a0 [ 759.904551][T21169] ? __pfx____sys_sendmsg+0x10/0x10 [ 759.904602][T21169] ? __fget_files+0x2a/0x420 [ 759.904622][T21169] ? __fget_files+0x3a0/0x420 [ 759.904649][T21169] __x64_sys_sendmsg+0x19b/0x260 [ 759.904666][T21169] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 759.904689][T21169] ? __pfx_ksys_write+0x10/0x10 [ 759.904709][T21169] ? do_syscall_64+0xbe/0xfa0 [ 759.904727][T21169] do_syscall_64+0xfa/0xfa0 [ 759.904741][T21169] ? lockdep_hardirqs_on+0x9c/0x150 [ 759.904757][T21169] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.904772][T21169] ? clear_bhb_loop+0x60/0xb0 [ 759.904790][T21169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.904806][T21169] RIP: 0033:0x7f1d2738eec9 [ 759.904821][T21169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 759.904836][T21169] RSP: 002b:00007f1d28152038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 759.904853][T21169] RAX: ffffffffffffffda RBX: 00007f1d275e5fa0 RCX: 00007f1d2738eec9 [ 759.904865][T21169] RDX: 000000000000c000 RSI: 0000200000000040 RDI: 0000000000000007 [ 759.904875][T21169] RBP: 00007f1d28152090 R08: 0000000000000000 R09: 0000000000000000 [ 759.904885][T21169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 759.904894][T21169] R13: 00007f1d275e6038 R14: 00007f1d275e5fa0 R15: 00007f1d2770fa28 [ 759.904918][T21169] [ 760.334811][T20375] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 760.363409][T20375] usb 4-1: Using ep0 maxpacket: 8 [ 760.371376][T20375] usb 4-1: unable to get BOS descriptor or descriptor too short [ 760.379150][T20375] usb 4-1: too many configurations: 106, using maximum allowed: 8 [ 760.390141][T20375] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 760.398747][T20375] usb 4-1: can't read configurations, error -61 [ 760.532612][T20375] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 760.561580][T20375] usb 4-1: Using ep0 maxpacket: 8 [ 760.571426][T20375] usb 4-1: unable to get BOS descriptor or descriptor too short [ 760.579339][T20375] usb 4-1: too many configurations: 106, using maximum allowed: 8 [ 760.591428][T20375] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 760.599224][T20375] usb 4-1: can't read configurations, error -61 [ 760.606689][T20375] usb usb4-port1: unable to enumerate USB device [ 761.322500][ T5819] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 761.352444][ T5925] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 761.487085][ T5819] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 761.497193][ T5925] usb 5-1: device descriptor read/64, error -71 [ 761.507041][ T5819] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 761.530056][T21184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 761.542799][ T5819] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 761.556344][T21184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 761.569147][ T5819] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 761.591342][ T5819] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 761.601147][ T5819] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.609351][ T5819] usb 3-1: Product: syz [ 761.615230][ T5819] usb 3-1: Manufacturer: syz [ 761.622210][ T5819] usb 3-1: SerialNumber: syz [ 761.651094][ T5819] usb 3-1: config 0 descriptor?? [ 761.720246][ T5819] ums-isd200 3-1:0.0: USB Mass Storage device detected [ 761.742761][ T5925] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 761.882471][ T5925] usb 5-1: device descriptor read/64, error -71 [ 762.019312][ T5925] usb usb5-port1: attempt power cycle [ 762.093908][ T5819] ums-isd200 3-1:0.0: probe with driver ums-isd200 failed with error -22 [ 762.273136][T21182] ptrace attach of "./syz-executor exec"[21247] was attempted by "./syz-executor exec"[21182] [ 762.300652][T20376] usb 3-1: USB disconnect, device number 19 [ 762.372632][ T5925] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 762.395447][T21263] veth1_to_team: entered promiscuous mode [ 762.421291][ T5925] usb 5-1: device descriptor read/8, error -71 [ 762.422079][T21263] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 762.722385][ T5925] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 762.773260][ T5925] usb 5-1: device descriptor read/8, error -71 [ 762.923944][ T5925] usb usb5-port1: unable to enumerate USB device [ 763.815108][ T10] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 763.992462][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 764.018697][ T10] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 764.061349][ T10] usb 4-1: config 0 has no interface number 0 [ 764.086129][ T10] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 764.116869][ T10] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 764.170552][ T10] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 764.211216][ T10] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 764.229464][ T10] usb 4-1: Product: syz [ 764.239410][ T10] usb 4-1: SerialNumber: syz [ 764.258119][ T10] usb 4-1: config 0 descriptor?? [ 764.280397][ T10] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 764.289639][ T10] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input74 [ 764.599684][ C0] cm109_urb_ctl_callback: 112 callbacks suppressed [ 764.599709][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 764.601239][ T5912] usb 4-1: USB disconnect, device number 51 [ 764.606274][ C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 764.825095][ T5912] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 764.996665][T21344] xt_CT: You must specify a L4 protocol and not use inversions on it [ 765.204839][ T5147] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 765.230290][ T5147] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 765.242534][ T5147] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 765.260541][ T5147] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 765.272487][ T5147] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 765.913795][ T10] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 765.969761][T21442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 766.005365][T21442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 766.095144][ T10] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 766.113136][T21442] lo: Caught tx_queue_len zero misconfig [ 766.139706][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.203711][ T10] usb 4-1: Product: syz [ 766.223364][ T10] usb 4-1: Manufacturer: syz [ 766.239777][ T10] usb 4-1: SerialNumber: syz [ 766.259195][ T10] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 766.407169][T20375] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 766.426818][T21363] chnl_net:caif_netlink_parms(): no params data found [ 766.630037][T21385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 766.655815][T20376] usb 1-1: USB disconnect, device number 23 [ 766.686118][T21385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 766.787581][T21385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 766.869034][T21385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 766.917151][T21385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 766.966449][T21385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 767.004727][T21385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 767.043099][T21385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 767.115476][T21363] bridge0: port 1(bridge_slave_0) entered blocking state [ 767.133926][T21385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 767.158658][ T4558] ================================================================== [ 767.162693][T21363] bridge0: port 1(bridge_slave_0) entered disabled state [ 767.166773][ T4558] BUG: KASAN: slab-use-after-free in nf_hook_entry_head+0x1f1/0x2c0 [ 767.181845][ T4558] Read of size 8 at addr ffff88804a04c108 by task kworker/u8:8/4558 [ 767.189868][ T4558] [ 767.192213][ T4558] CPU: 1 UID: 0 PID: 4558 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) [ 767.192240][ T4558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 767.192256][ T4558] Workqueue: netns cleanup_net [ 767.192287][ T4558] Call Trace: [ 767.192296][ T4558] [ 767.192306][ T4558] dump_stack_lvl+0x189/0x250 [ 767.192331][ T4558] ? rcu_is_watching+0x15/0xb0 [ 767.192361][ T4558] ? __kasan_check_byte+0x12/0x40 [ 767.192389][ T4558] ? __pfx_dump_stack_lvl+0x10/0x10 [ 767.192411][ T4558] ? rcu_is_watching+0x15/0xb0 [ 767.192441][ T4558] ? lock_release+0x4b/0x3e0 [ 767.192471][ T4558] ? __virt_addr_valid+0x1c8/0x5c0 [ 767.192494][ T4558] ? __virt_addr_valid+0x4a5/0x5c0 [ 767.192514][ T4558] print_report+0xca/0x240 [ 767.192535][ T4558] ? nf_hook_entry_head+0x1f1/0x2c0 [ 767.192563][ T4558] kasan_report+0x118/0x150 [ 767.192586][ T4558] ? nf_hook_entry_head+0x1f1/0x2c0 [ 767.192617][ T4558] nf_hook_entry_head+0x1f1/0x2c0 [ 767.192645][ T4558] __nf_unregister_net_hook+0x74/0x700 [ 767.192674][ T4558] ? __pfx_nf_flow_table_offload_setup+0x10/0x10 [ 767.192703][ T4558] __nft_release_hook+0x180/0x350 [ 767.192725][ T4558] nf_tables_pre_exit_net+0xa7/0x110 [ 767.192744][ T4558] ops_undo_list+0x187/0x990 [ 767.192772][ T4558] ? __pfx_ops_undo_list+0x10/0x10 [ 767.192804][ T4558] ? do_raw_spin_unlock+0x122/0x240 [ 767.192825][ T4558] cleanup_net+0x4d8/0x820 [ 767.192850][ T4558] ? __pfx_cleanup_net+0x10/0x10 [ 767.192875][ T4558] ? _raw_spin_unlock_irq+0x23/0x50 [ 767.192902][ T4558] ? process_scheduled_works+0x9ef/0x17b0 [ 767.192927][ T4558] ? process_scheduled_works+0x9ef/0x17b0 [ 767.192951][ T4558] process_scheduled_works+0xae1/0x17b0 [ 767.192987][ T4558] ? __pfx_process_scheduled_works+0x10/0x10 [ 767.193018][ T4558] worker_thread+0x8a0/0xda0 [ 767.193046][ T4558] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 767.193076][ T4558] ? __kthread_parkme+0x7b/0x200 [ 767.193106][ T4558] kthread+0x711/0x8a0 [ 767.193124][ T4558] ? __pfx_worker_thread+0x10/0x10 [ 767.193149][ T4558] ? __pfx_kthread+0x10/0x10 [ 767.193167][ T4558] ? _raw_spin_unlock_irq+0x23/0x50 [ 767.193193][ T4558] ? lockdep_hardirqs_on+0x9c/0x150 [ 767.193210][ T4558] ? __pfx_kthread+0x10/0x10 [ 767.193227][ T4558] ret_from_fork+0x4bc/0x870 [ 767.193252][ T4558] ? __pfx_ret_from_fork+0x10/0x10 [ 767.193278][ T4558] ? __switch_to_asm+0x39/0x70 [ 767.193299][ T4558] ? __switch_to_asm+0x33/0x70 [ 767.193319][ T4558] ? __pfx_kthread+0x10/0x10 [ 767.193336][ T4558] ret_from_fork_asm+0x1a/0x30 [ 767.193364][ T4558] [ 767.193371][ T4558] [ 767.439984][ T4558] Allocated by task 5186: [ 767.444329][ T4558] kasan_save_track+0x3e/0x80 [ 767.449053][ T4558] __kasan_kmalloc+0x93/0xb0 [ 767.453659][ T4558] __kmalloc_node_track_caller_noprof+0x568/0x800 [ 767.460090][ T4558] kmalloc_reserve+0x136/0x290 [ 767.464882][ T4558] __alloc_skb+0x142/0x2d0 [ 767.469330][ T4558] alloc_skb_with_frags+0xca/0x890 [ 767.474464][ T4558] sock_alloc_send_pskb+0x84d/0x980 [ 767.479673][ T4558] unix_dgram_sendmsg+0x461/0x1850 [ 767.484799][ T4558] __sock_sendmsg+0x21c/0x270 [ 767.489493][ T4558] __sys_sendto+0x3bd/0x520 [ 767.494023][ T4558] __x64_sys_sendto+0xde/0x100 [ 767.498805][ T4558] do_syscall_64+0xfa/0xfa0 [ 767.503323][ T4558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.509238][ T4558] [ 767.511575][ T4558] Freed by task 5179: [ 767.515581][ T4558] kasan_save_track+0x3e/0x80 [ 767.520279][ T4558] __kasan_save_free_info+0x46/0x50 [ 767.525504][ T4558] __kasan_slab_free+0x5c/0x80 [ 767.530283][ T4558] kfree+0x19a/0x6d0 [ 767.534201][ T4558] skb_release_data+0x62d/0x7c0 [ 767.539085][ T4558] consume_skb+0x9e/0xf0 [ 767.543349][ T4558] __unix_dgram_recvmsg+0x9f9/0xd60 [ 767.548569][ T4558] sock_recvmsg+0x22c/0x270 [ 767.553078][ T4558] sock_read_iter+0x231/0x2f0 [ 767.557763][ T4558] vfs_read+0x55a/0xa30 [ 767.561928][ T4558] ksys_read+0x145/0x250 [ 767.566178][ T4558] do_syscall_64+0xfa/0xfa0 [ 767.570691][ T4558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.576591][ T4558] [ 767.578919][ T4558] The buggy address belongs to the object at ffff88804a04c000 [ 767.578919][ T4558] which belongs to the cache kmalloc-cg-512 of size 512 [ 767.593232][ T4558] The buggy address is located 264 bytes inside of [ 767.593232][ T4558] freed 512-byte region [ffff88804a04c000, ffff88804a04c200) [ 767.607032][ T4558] [ 767.609369][ T4558] The buggy address belongs to the physical page: [ 767.615787][ T4558] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4a04c [ 767.624566][ T4558] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 767.633075][ T4558] memcg:ffff888068bf5601 [ 767.637331][ T4558] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 767.644888][ T4558] page_type: f5(slab) [ 767.648884][ T4558] raw: 00fff00000000040 ffff88813ffb0140 dead000000000122 0000000000000000 [ 767.657477][ T4558] raw: 0000000000000000 0000000000100010 00000000f5000000 ffff888068bf5601 [ 767.666076][ T4558] head: 00fff00000000040 ffff88813ffb0140 dead000000000122 0000000000000000 [ 767.674763][ T4558] head: 0000000000000000 0000000000100010 00000000f5000000 ffff888068bf5601 [ 767.683444][ T4558] head: 00fff00000000002 ffffea0001281301 00000000ffffffff 00000000ffffffff [ 767.692124][ T4558] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 767.700801][ T4558] page dumped because: kasan: bad access detected [ 767.707230][ T4558] page_owner tracks the page as allocated [ 767.712950][ T4558] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5186, tgid 5186 (klogd), ts 760346397865, free_ts 759653352045 [ 767.733887][ T4558] post_alloc_hook+0x240/0x2a0 [ 767.738665][ T4558] get_page_from_freelist+0x2365/0x2440 [ 767.744227][ T4558] __alloc_frozen_pages_noprof+0x181/0x370 [ 767.750044][ T4558] alloc_pages_mpol+0x232/0x4a0 [ 767.754911][ T4558] allocate_slab+0x96/0x3a0 [ 767.759435][ T4558] ___slab_alloc+0xe94/0x18a0 [ 767.764121][ T4558] __slab_alloc+0x65/0x100 [ 767.768547][ T4558] __kmalloc_node_track_caller_noprof+0x5c7/0x800 [ 767.774965][ T4558] kmalloc_reserve+0x136/0x290 [ 767.779745][ T4558] __alloc_skb+0x142/0x2d0 [ 767.784199][ T4558] alloc_skb_with_frags+0xca/0x890 [ 767.789326][ T4558] sock_alloc_send_pskb+0x84d/0x980 [ 767.794526][ T4558] unix_dgram_sendmsg+0x461/0x1850 [ 767.799659][ T4558] __sock_sendmsg+0x21c/0x270 [ 767.804354][ T4558] __sys_sendto+0x3bd/0x520 [ 767.808869][ T4558] __x64_sys_sendto+0xde/0x100 [ 767.813645][ T4558] page last free pid 21144 tgid 21144 stack trace: [ 767.820149][ T4558] __free_frozen_pages+0xbc4/0xd30 [ 767.825277][ T4558] free_large_kmalloc+0x13a/0x1f0 [ 767.830306][ T4558] device_release+0x9c/0x1c0 [ 767.834913][ T4558] kobject_put+0x22b/0x480 [ 767.839338][ T4558] netdev_run_todo+0xd2e/0xea0 [ 767.844106][ T4558] tun_chr_close+0x13c/0x1c0 [ 767.848705][ T4558] __fput+0x44c/0xa70 [ 767.852712][ T4558] task_work_run+0x1d4/0x260 [ 767.857310][ T4558] do_exit+0x6b5/0x2300 [ 767.861471][ T4558] __pfx___ia32_sys_exit+0x0/0x10 [ 767.866498][ T4558] x64_sys_call+0x21da/0x2200 [ 767.871188][ T4558] do_syscall_64+0xfa/0xfa0 [ 767.875715][ T4558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.881615][ T4558] [ 767.883942][ T4558] Memory state around the buggy address: [ 767.889575][ T4558] ffff88804a04c000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 767.897639][ T4558] ffff88804a04c080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 767.905702][ T4558] >ffff88804a04c100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 767.913761][ T4558] ^ [ 767.918086][ T4558] ffff88804a04c180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 767.926153][ T4558] ffff88804a04c200: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 767.934218][ T4558] ================================================================== [ 767.942388][ C1] vkms_vblank_simulate: vblank timer overrun [ 767.951850][T21385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 767.975194][ T4558] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 767.982448][ T4558] CPU: 1 UID: 0 PID: 4558 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) [ 767.991930][ T4558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 768.002021][ T4558] Workqueue: netns cleanup_net [ 768.006844][ T4558] Call Trace: [ 768.010143][ T4558] [ 768.013115][ T4558] dump_stack_lvl+0x99/0x250 [ 768.017752][ T4558] ? __asan_memcpy+0x40/0x70 [ 768.022372][ T4558] ? __pfx_dump_stack_lvl+0x10/0x10 [ 768.027598][ T4558] ? __pfx__printk+0x10/0x10 [ 768.032231][ T4558] vpanic+0x237/0x6d0 [ 768.036257][ T4558] ? __pfx_vpanic+0x10/0x10 [ 768.040802][ T4558] ? preempt_schedule+0xae/0xc0 [ 768.045678][ T4558] ? __pfx_preempt_schedule+0x10/0x10 [ 768.051104][ T4558] panic+0xb9/0xc0 [ 768.054853][ T4558] ? __pfx_panic+0x10/0x10 [ 768.059302][ T4558] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 768.065234][ T4558] ? nf_hook_entry_head+0x1f1/0x2c0 [ 768.070457][ T4558] check_panic_on_warn+0x89/0xb0 [ 768.075431][ T4558] ? nf_hook_entry_head+0x1f1/0x2c0 [ 768.080672][ T4558] end_report+0x78/0x160 [ 768.084946][ T4558] kasan_report+0x129/0x150 [ 768.089480][ T4558] ? nf_hook_entry_head+0x1f1/0x2c0 [ 768.094721][ T4558] nf_hook_entry_head+0x1f1/0x2c0 [ 768.099787][ T4558] __nf_unregister_net_hook+0x74/0x700 [ 768.105273][ T4558] ? __pfx_nf_flow_table_offload_setup+0x10/0x10 [ 768.111668][ T4558] __nft_release_hook+0x180/0x350 [ 768.116725][ T4558] nf_tables_pre_exit_net+0xa7/0x110 [ 768.122038][ T4558] ops_undo_list+0x187/0x990 [ 768.126669][ T4558] ? __pfx_ops_undo_list+0x10/0x10 [ 768.131832][ T4558] ? do_raw_spin_unlock+0x122/0x240 [ 768.137059][ T4558] cleanup_net+0x4d8/0x820 [ 768.141509][ T4558] ? __pfx_cleanup_net+0x10/0x10 [ 768.146481][ T4558] ? _raw_spin_unlock_irq+0x23/0x50 [ 768.151713][ T4558] ? process_scheduled_works+0x9ef/0x17b0 [ 768.157449][ T4558] ? process_scheduled_works+0x9ef/0x17b0 [ 768.163189][ T4558] process_scheduled_works+0xae1/0x17b0 [ 768.168791][ T4558] ? __pfx_process_scheduled_works+0x10/0x10 [ 768.174806][ T4558] worker_thread+0x8a0/0xda0 [ 768.179432][ T4558] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 768.185796][ T4558] ? __kthread_parkme+0x7b/0x200 [ 768.190753][ T4558] kthread+0x711/0x8a0 [ 768.194861][ T4558] ? __pfx_worker_thread+0x10/0x10 [ 768.200010][ T4558] ? __pfx_kthread+0x10/0x10 [ 768.204614][ T4558] ? _raw_spin_unlock_irq+0x23/0x50 [ 768.209836][ T4558] ? lockdep_hardirqs_on+0x9c/0x150 [ 768.215053][ T4558] ? __pfx_kthread+0x10/0x10 [ 768.219668][ T4558] ret_from_fork+0x4bc/0x870 [ 768.224280][ T4558] ? __pfx_ret_from_fork+0x10/0x10 [ 768.229426][ T4558] ? __switch_to_asm+0x39/0x70 [ 768.234220][ T4558] ? __switch_to_asm+0x33/0x70 [ 768.239030][ T4558] ? __pfx_kthread+0x10/0x10 [ 768.243638][ T4558] ret_from_fork_asm+0x1a/0x30 [ 768.248447][ T4558] [ 768.251848][ T4558] Kernel Offset: disabled [ 768.256181][ T4558] Rebooting in 86400 seconds..