last executing test programs: 11.421343992s ago: executing program 1 (id=2230): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) (async) syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1a010c005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99080805", @ANYRES16], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) readv(r2, &(0x7f0000000440)=[{0x0}, {&(0x7f00000002c0)=""/129, 0x81}], 0x2) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="000000008b2f00001c00128009000100626f6e64000000000c00028008000500ffedffff08000300cf"], 0x44}}, 0x0) 9.090588292s ago: executing program 3 (id=2238): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x44000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xfff9}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 9.052365001s ago: executing program 1 (id=2239): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000a17000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000080)="f20f11dbba2100ed650f2015260f01c86ebaf80c66b802a3558e66efbafc0cec0fc77cecba4000b8e11fef0f0f87b300962e050000", 0x35}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x9}}, './file0\x00'}) ioctl$KVM_CAP_DISABLE_QUIRKS(r3, 0x4068aea3, &(0x7f00000000c0)={0x74, 0x0, 0x4}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x2000) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0x1, 0xfa14, 0xffffffff}, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) 8.681829358s ago: executing program 3 (id=2241): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0xd0ff}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}, {0x95, 0x0, 0x0, 0x6000000}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8.613160384s ago: executing program 1 (id=2242): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000006000/0x2000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x1, 0x20002f5}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@deltfilter={0xe, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x3}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x0) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) epoll_create1(0x0) sendmsg(0xffffffffffffffff, 0x0, 0x4010) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c41f4040110f0010020000e8ff010902120001000000000904"], 0x0) r3 = socket(0x10, 0x803, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="5378b5c20266aaaaaaaaaaaa810016000805017109d07bb4bd45e993ab28716438ec578813191ca00f3b2f00d77a9875bc2ea9a65a39d4984c0d24a340dfc36cc3c94456cb7aed00bff68ff2047389d04e5335d9cd36ee1d28e26cc117c2681450e3a67e378484f54d95"], &(0x7f0000000080)={0x0, 0x4, [0x141, 0x213, 0x6f9, 0x7f]}) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c00000010000104fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000808000002c00128009000100626f6e641a0000001c00028008000a0001000000050010"], 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) 8.560138326s ago: executing program 4 (id=2243): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0) socketpair(0x6, 0x80000, 0x9e8d, &(0x7f0000000000)) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB="400a2e0000004e261153b615030f7a9f8c8b93ee8b8e484866d0ef333ba826585e849c0977d2ce968a0c672f83130bb56e23bb86"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 8.426843768s ago: executing program 3 (id=2244): ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000340)="adddf4c37a3a61408a828be766c0f7551c0bc204000000db47161ca00347cf1a27a629d6a64aec92c1ed46b35a68f719ee89a712be11b2ba8703617cb9ea9e3af42be600100000000000009a2eb9d4ccb8e96589ce02a86a7b6f07550523a730bef4f38e948a20c50000bd60ed61506d37ce85d4317a90642b61298b5d23c9f59494e6e62afe06c11fa81921c887", 0x8e}], 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000080), 0x0}, 0x20) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/notes', 0x541b02, 0x40) write$cgroup_int(r3, &(0x7f0000000000)=0x800, 0x12) lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000200)='./file0\x00', 0x8, 0x1) r4 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, 0x0) poll(&(0x7f00000000c0)=[{r4, 0x201}], 0x1, 0x4) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r8, 0xffffe000) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) r9 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) 8.295108056s ago: executing program 0 (id=2246): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) (async, rerun: 32) socket(0x18, 0x5, 0x2) (async, rerun: 32) r0 = syz_open_dev$vbi(&(0x7f00000006c0), 0x3, 0x2) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000300)=@multiplanar_mmap={0x101, 0xb, 0x4, 0x4000, 0x80000001, {}, {0x3, 0x0, 0x53, 0x7, 0x99, 0x75, "b986bfb6"}, 0x1, 0x1, {0x0}, 0x101}) (async, rerun: 32) pipe2$watch_queue(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (rerun: 32) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x3ff, &(0x7f0000000100)=0x6) (async) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x1f, 0x23d, 0xffffffffe4100f4d, 0x6, 0x88, 0x80000001, 0xffeffffc, 0x0, 0x0, 0x10, 0x10ff}}, 0x50) (async) r2 = syz_open_dev$amidi(&(0x7f0000000140), 0xfffffffffffffff8, 0x2900) pwritev2(r2, &(0x7f0000000480)=[{&(0x7f0000000880)="3fc30f343e124b9f19d9feba4c6ca2af09eb2bff714d29e3b7a7bd592949f63fa75674160ff77b56a4ada639e03a99401647da1fb40779acbce04b0b136d45e97c9860e0c7a617191f3a39aa82e858c59e9e633b779515d4672f09f6c1ae5f3cc9ece0ab70d66a1843054ad0fe12cfff5d9ddcc4c58886c319f9d27d827787fecb07c7766487ce7622a355dc5c1d029afafe67080e515e6748aa4af44a7474e7592a6fad57ede217bb682b9685d2bfad4cfecc3f986e078a8313b0caafe9836937c1d88750d087467a4376e3497fa4c0c5eb3d559305c1309ec1d88704fd9cad35571ba3fa239fdaefa193ececc1d6949f2faa41dff0e59d8a91764e4115d1c9b7bdcdc3b1da5f5fdad87121607a4af09502214868e2733a687206276c628ebfbf740976841f30e37e74457e8c452896c940db689f94765a9774b027339dd1cf91e6ffae946658ff930f2806e14d340799066a67aa0681843f165504beb0d99f4216b8eaccd24f560bf9047f95e576b39b5993095463be6efba8ab5cfa2fc26701bbe719f18aafe35b789cadd0b2c5c15617ca0395b4a7fd446eee5bbc669ddb5f0bae006e2837d699c541aeec000ca8128456fbeff542bc7d42f5d0d801a1cec88368ce80ac800cfd02a07bff829355d0da66f458e8a3646214e0fdfe1c88fba815174d01d8defd64c9d33568ce52eda6deb6b92a241b3481a5e3687b10969b3893e1585a04a68fdb63b2f500912b1ab7b362496211c0f5d91a1cd10232ad23bf15624d0bf4b73b7fdf1b6c52463ca9ae92cb1173fcb42f2d93a16ddf3fa8164a89fb95d7ce0373701c3557279b58244fdca305c9a4c2787dea60d70ded5b73caa83ba97af5a59a5e3ed0a1716060e28a6e162938f6b606fec9532ec88c241d09106fa201cfba631ba2e18b96936fd9afdcda9c216a366cc4a684b01b169b4159b6f891aaadcdc6377e197143142c3b79c346259584fd9e05a2bc025c4b3dd694f32fc6d15a0d85c2c812f4e3a801fe6ca5472e5707709a06cf8022f387805f5d9751cb7b265fc608b7f03c1a00b782f9101d259e5f4026a8aebd1eaaddb5ac18168c0ea70d3cd69dac3c683b3abee39905d27ac7618f2aa38b2d62df84fb62db8f3bb219ea573a394ffe6650a7f3730efc6af553cd2455fd58671f69eff47100ca36c53513d6a3d0c17f8d2fb5d44745f4cbda85bc6b8d05e66a766df86510e11da054df29049c51ef0cc05257ddf175ecf1a38bed2f0d0d64653d04ff201f5693e49a4968da357a4347df73f023ee5de5790f37772a51d8ccc91429676201c0ae8a6f027a6aca7becad65fd4f1d3448c41ea2982c310ddc8d82d7211cb36e5231ad13f7e4da0898092251e7d2ffd82f28fc842a90c9092d6d240c23a61002b953bf39b806ebcb13a37d51d4b848d676279be77f2223a334f612ada2b8dc178da7108c4ed635daebe95daa1fb685c8306e117b03e9cab919927d1469dc08876601d45327486d8c2c43072de472d9cb3d4284939bbd4eba4f194dfc82d9a29b88264a6cce31cb881ed18dcfeebcdd9a50b78361e950475849b32afa9ec5510cda274d25de2b4b47f1b7dc6b0898121cc4436602659f1edeb76ec10ef3007b9d06d73afc984229aeed29d1b78340a8cfb221a45796fe9707c81bb1261f1c066d78587a50de3beb9b6e0d24f0b0828bb2de63b45313c5f3e8b4dbc4ba5259c3e8dd836d98983dc78f4bad2ff33882ff3ddd685be509aeebd9d2eb38eade0cf009e89ecbfd54e4f3e5ac0ef9bba0937fbfde93f0e1a4ef72af72975399676ffaa28d6fb946944de95b214d6756c2cff455dad4cca6104b753b7da7ecb9f65c8d1abb6035e3d6116f8c822b8660bd6bda742cae2f2b5b97e2735cad65fbb564d237638e0dffbafa835671405568fd3a5b9baba64be8cc0f577437dcef38ada468f5b1dcc52a6e2526e504851c65355ca8ea12ada114876e56eed21f1abbef03faeeacfff680edbdda572db5d411b6e673899a71cd8dcabc98260654493aa778b1a999e9e7d96b6da268c947a9e0dcf3644c624433000c4ac9f181d88491e815926dcf7eb8937d186244d7c09c1712304a38d4ce27f986c74bd4f4b0ea33f358a156d1c102a44ee3e3651d19cbabda01fb4dee61ad02757e36ccb2752323230394406e6902f25b0eb9ed9c1ffc51e985a44267ab115172c65bc5e8a4258973753d468788e7c48aeb540d459ff9d48cf534bc43b8e460739f1b9cfaa638a907cd6e93c8ece7e8314663f516dafe39b3fd3b495efe758d22de9eb84d84edf820d951e942bc329abf02e9425e95860fef326d9964c258c81438df3f77819a86423de30fece601c85cf4fb8331da4cfe2ec9ce38313093913d3b7729707bb257ea5881fcafe4de9bbe9545b7f8942437f6841302601d4ad029b3c5eb1cf34247a62d003f74af6a122c5891baa85d448c2afb3157b136811d329bf619b298cf8f178dcd51100ecbc03caf7638fec5686e739b275478761999a2e6ebab81ce40ebc8e16f74a669b18b3e6119a4d9d665d3a5afb573a322bc16b74ef76ec961da4fabac6d81c6d544aa8e3956a77317975d0b72b31aafe26df17276c427f97d89d8e17cfe1d5b0eb638446684c7abf462d93c878d4d27b8cd8cd7a4f6d68c6a7365a9aea0c9b818440adb0b39bf05b4daafc7152f2bbd0f6242e6343d67ea4a4f7c6b7c4d29f99aa52fda83c5616bfee257f11db210be1c115c603f68583097d50263000031c63e2f4d8bc192e969c5e3af9146f42da2fbcdaaaa16097d93e7cdd1dc5e7ac4de2648b9f65098ca70395977a34f1812ed16c4f180824764dac219338f25e9de56a7b66edb0df324cf87aa85768b1767c3dd9c957dd4d67d8c47000fe62544c13d5f4f8407454eb5f32aaf1cde2c2ed1b8da69bed607529b7d5d684ee8381c85f15bb53a2f1a93cf2f6678ec7ff6e5414feececa72da0e4b575e4a8ab6adc885dcb187bcd555dbe140c42964dadccaed7f09112cb77b33373ccf1785dcd1c7fbb62aab299b909192f588bc5cea4df10774ca69b7d036d122642a3e4e25055cb6b3a5d3ed2e3b428207e31fdb729f3990e1defa19cef520bf08a4a8e9255fb17afda60443a3c4347f322ed089009f495e2f3ccc522c2a79df6d57bd0388e22f37e9d4958cac945967131af7bc0349f8df8737ee5df2d690104c0bbf9cb4875e05f9eedf21e67c05783e26c147fc5d5d1a0ee939f4aa5236639f81de95def887c74ca1785b2ac38bce12b07ff693f927a5df87307937cd306ba93571564adf6ba28122ec951667c1fbf9c1ea92491a8fcebb7279e8d525334668fef68f7a4d47f5501bae0b79e8120c11c0cdbe26de0141fbf54b2aa2c0015cb081b0f1454950715631954f8dd11f0c0da1a2bd3492446b1e7341637892ff5bf3cfd8670857cfb8ddb974f8f026dd4539fb884ac0d8200b9921964663f2623bff90bb005871bd949e98173f8053bcccb36b7de570b2acd932cb32dce7999ac1e9a5947937a06802767446a75e65ea7f9448068519b70eed464c177cc1eafb43b2629762385172f1792d66c9e0b738fc0e2e63b0b966971d220b4a40604ed4350f14292447fc8e23593e37c5b63c3ba02983306fdbd2252ac2194c237234401fb6df825b550dbe06cb284126cad097a1a402ac15a563f258b946146d185dcb9bbe12f479b733f8e67572e055f5c94a02cd12846c1a92b50bd2edb02bdf50669e5311cfb4e36ba03ea04a7a526ff176f487609e8f1d741b094bc0ef6b56df6c9d6a76ef8af6511736c7d4ad707d0c612ec16bbc575ded991fa6ab83e6d2ff7235a384863ef7895efcbd20de6b9c3fd4a30029f595dd235e3c9db0c4cfbab38af89bcbf059b638ae6203def4cd6d792c904aa5027fc728a8ddcce02b17de2f884eaad3962c8a756ec292193945b7036d0227d23e0a0271e154d0744635be017741a0b61888106ae194c3264eed0595ce0664e09d29c4915bbe60259063ef2f1ca9f7e787b9520b090fff58a6f9b7cb9c533aad9b86a54dec453eba8533fd5ae0e3ac639f609c0469eb469867fae91ed60ac27f59f1d7144e06cfaf668aa72c2dea84aba86264a25901ad4b48daee6b1e784fd30763ae0b107fc6d0c4b11f9f5c1f29f9b6e96e89169c2b375606d218da655e540839a5861fd2a840bc8396b052c92cb7fb37a5a5e3ea3a55b7fdcfe40b83f57043ac1df8ca59f2084b802c9d9c8524b01a3bdf2e95b56d32ff51a0dac0989a3d8925ebfba3ccd545416d5f6cd41f60220c0bd796e0859641d91c3dbc74c249321d5705aa8007e429609c38193e6d93e3d2977bbf0680ede7b3c6887ace2bac1d9b883bbd43145ff5033687a056b7acf95ad5c92c93d233a6cdeec9d9afb0f1fe6ca07061f84f5b16d467e3b30f4fb6d20fd4d7183f6672a48366ea3657ee12101458c734218bf691d9c849bd54e61eeba4a0ed6638a74407741cc7e3cd566db41b84358acc1c1bf96eba0f2f8bd458d22f5c716c12dca807f78f81b7410122d50e5c4c60e2d0e33fa46f649db4987853cec06c9e6c95458996b24ce0b31fdcb12316c95bb0b5d7ea81964d35835f94c5242717bd376ba46c5bba72a39123e6c23f38affa37e0765d9d56310c772a0e8ac8807603316aa183b5be79c19a958b1c7a69f970b587311927ab1baff11846d07114e163a63d28c295fcdc0dbc3e968878b0badafba330b1b66e79137369f69d7752c0e92047f254c270afb330a05daf7822fe72095fb25fbdab1e51275984882af615de248b69955c8c6a50b53621f4dc1146b86d0fdab9d942686277f7a52a9925c3a8c9e5b2457fde5d17c4b8c7bb146832492499cdd56a634ce38dc53ef46d6e8f3f99cb74c1f32586ab83c681f458d4aa5eb150972e3af4e9629bee64c136ab60b64c29694a3a8e8d3aa77618d144a5d5baa43c44ab133ddf79cb37ca841488b8225c5d001fc570026caed3329b28d232283dfd3b681e7b5acec2bb1c9cabaec2c6976318cc63706e0b72d67f17c46e0696d6daab5e064b6fcb8ac74d87531f0fdc5befdde817f6902733e7888a7c8e0dacbc98467343c1997893e1eeb0c458df4f8f69d63003574939ac0ea780c2634e64b6f68c33c122dd83d390c26aba50b8dff8a0a08b7bfb679313718ca1df2fa196e609b4c93295a5a8bd4919f48b58d14c395af78e7f62bc368d231441b2d4e207bd28dab57b067eb3cf70b12191de95c51b583f9ac4333dfb947fc4ab95decf888ff5e24928d6d895fa3a9891c82fece9c424f41b95252a4050adfe791afedf824142bb4213834be121c662bd72320b0e62e943b9c8db21add038ece6084912853e78576edad4a08e4006a661f89a3e4505e50432f7a0339bd0e4912bf8f80ea4967aa3bd3bc70d22a4eb294dd8300c732b1b634110522c23eb6778719d1c7abf9232da5f7f652c1487c7acadb1944b45176005a22eb5652b9b79a32ee97352163006c773863464c064ba99700039667fcf577942f23be377195fac3cd4b3c16e6629b9c83797ab59ab5a41fdb6c19247d40ecb49c50ea262e754d292a44632cdf06a0baefdf976309f83c18b9373be024faf7d9d262bb9ae532c1f2a438f519f25cdb7fd46e28465551807efa2aabcf414f88a3fd593278ecc1c2e75a30fe859f99fddce5dfd87a238f6d7979fdea7a867f3883a20709b1099e8817726a47b30a72fbfae1d15bfaf730e2d5a549888ac50b3394a9460802454c2fbfe36a3f8f0959c143f27e102ce8a35a6c8d659ae5bceff", 0x1000}, {&(0x7f0000000280)="c802b599bdbc6ef2aeebb1af70c7777ff0cbf75bb5eb8cf9563fd71d92529fcf82d1dbe8b963d57fe4bd894352c9231d888427e6b8154fdcab39ea7a49d22ae3f440d697e3d25dde06cf3c", 0x4b}, {&(0x7f0000000300)="7f8d62076e3f66e6005ce3901c5e4412d1bfc8bede4033e4be8cc46d4fe01b810f0b5f863543d60496ea8396c236c69a0f054632223f470483efe1d874f8dce33fc003ae8c3f1696da7afc6e493fc65933f9ad7597d6e1bae71e4341a3fdc8c2bcd47b3ce5d8e610bacd745c22b4f12e5c311a3314c64c37896b81e664d141a904409f246a814b0a1256bb6a9688e7ca83e15a11532e37bac238232117a133fd62216df67b5eed54c32e228dbd158ab7a964522253", 0xb5}, {&(0x7f00000003c0)="c0c6b6dbf09e8942d86197aa237bfb7a2fa0febc4d9bf3298f52a19e9b30489bf4d60bdb7e4f74012c73701012e18e1b5c6fbe29c26e4785c1c45024540c78e30e48eb50cf641e060ef2f117e4c2c131ab8eeb79fb58bdbcc6d1ba85f2d5b7d7841dd7a2224e38a39236ecdc46a6ece19553d80984afe6bdb0c4708a21aee704ee093d9ac7c8fd3a2143690797ddd8b704bc5561a7cc721ed57aa37bc8ebec536a8e3b6bd572f98f90caa50621f1", 0xae}], 0x4, 0x5735c61a, 0x1, 0x1) r3 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$IPSET_CMD_SWAP(r3, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async, rerun: 32) syz_open_dev$video4linux(&(0x7f0000000080), 0xffffffffffffffff, 0x0) (async, rerun: 32) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0x40, &(0x7f0000000080)=ANY=[]) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9c0000000206050000000000000000000000000005000100070000000900020073797a0008001340000000010d000300686173683a6e657400000000050005000200000048000780050014000700000008000640000000051800028014000240ff010000000000000000000000000001080012400000000908001340000001010c0001800800014064010101"], 0x9c}}, 0x0) (async, rerun: 32) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) (rerun: 32) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r8, 0xc0405519, &(0x7f0000000000)={0x8, 0x4, 0x3, 0x4d95, '\x00', 0x3}) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (rerun: 64) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) (async) r10 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000080e372208c106801b2840102030109022c0001000010000904020002f8fd00000905060200020d00060905828200027f0110"], 0x0) syz_usb_control_io$cdc_ecm(r10, &(0x7f00000013c0)={0x14, 0x0, &(0x7f0000001380)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x95, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201d10e020000202505a1a440000102030109028300010106700609040003020206000005240600000524000f000d240f0102000000070005000512240704b4da0100060097ef00008100ffff1524120500a317a88b045e4f01a607c0ffcb90392a07240a08010b0708241c0010010600042402000e2407fb03004e08ff000700050009058202080000b7030905030240000b0705"], &(0x7f0000001900)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x300, 0x0, 0xdb, 0x4, 0x8, 0x40}, 0x5, &(0x7f0000000680)={0x5, 0xf, 0x5}, 0x4, [{0x52, &(0x7f0000000700)=@string={0x52, 0x3, "87ea78de48c266bd74e77107570a86f040a602bc17003a35cf2933366b2b443e9ab052eee39c8e72735b09ff2d4ba0d35e89764e48130f7a1fa662d3a0c71d0d7c6aef30cd09434ea6727ae197092cb6"}}, {0x3d, &(0x7f0000000780)=@string={0x3d, 0x3, "3e83c4fdf0af2897c6f62bc54add115cb3bd2c55687f225c482fad7bc6f018b7a53179ad9842804bd9b654bae67f635d59fe50e5fdc90564b270b6"}}, {0x4, &(0x7f0000001980)=@lang_id={0x4, 0x3, 0x406}}, {0x68, &(0x7f0000001880)=@string={0x68, 0x3, "ec58861175cf85ca0b6c744c5a91c5252020bd82ec51794592c0dc53992e67e43fcb34437a95e30d87f34c5a3f778bee86e06d659acf6133531b09dc944a0c27562a763a75130ae2b62f698011b7dd0b818fd1b43e1eaef309ad1aff5f179e1ca9b6d8316735"}}]}) (async) syz_kvm_setup_cpu$x86(r8, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x72, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) 7.698785041s ago: executing program 0 (id=2248): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0x1c, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x4a3b450b207339c8}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x33) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0xe, 0x0, &(0x7f0000000340)="b8000005000000003b974f58bd2b", 0x0, 0x4ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffc}, 0x4d) 7.43323104s ago: executing program 0 (id=2249): mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x58}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/mem_sleep', 0xa0502, 0x49) io_setup(0x1, &(0x7f00000016c0)) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x40010) sendmmsg$inet(r1, &(0x7f0000000b00)=[{{&(0x7f0000000100)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000300)}, {&(0x7f0000000440)="ec2795a51677975067161cd21531c57f6a1506eee2bfed36334025c28b0e2dd4ac6da428b42e6ec6930863de5c136e2902a53b730b2cb4b4a6f2053817b24a6db33afb4989a62e", 0x47}, {&(0x7f0000000500)="7f0545478791604f5c2acabcf0c6c2", 0xf}], 0x4, &(0x7f0000000800)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1}}], 0x18}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000840)="81ef5108ef6a32b31a034a00935e753631576ba5273e4c5f21f9e092a7e94eeee2cb1c6da251f55c4476ec39ba572f3b9b7d47c1dfb073b6905a", 0x3a}, {&(0x7f0000000940)="cffbe8b77c07517094ff595ce2e6fc7df39bb1cd2b7b54ceb65f93f33461c79e4beeb23b829ecd342ea42deea38c0339f3d9e13ba7fce45912512546f2711e635111a891667849bd71ff049977a124893473e6e79a4af60dd15aaeedf0cb49da847591e4a5", 0x65}, {&(0x7f00000009c0)}], 0x3, &(0x7f0000000a40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x28}, @remote}}}, @ip_retopts={{0x38, 0x0, 0x7, {[@rr={0x7, 0x27, 0xd, [@remote, @multicast2, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @dev={0xac, 0x14, 0x14, 0x3a}, @local, @remote, @broadcast]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x99a}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @remote}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @local, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0xb0}}], 0x2, 0x8080) r7 = socket$inet6(0x2d, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000000)={0x2d, 0x4e20, 0xfd9, @local, 0xb4d0}, 0x1c) sendfile(r2, r3, 0x0, 0x20000023896) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c0100001a00130700000000fcdbde252001000000000000000000000000000120010000000000000000000000000001000000004e210002020000003b0001", @ANYRES32=0xee00, @ANYBLOB], 0x14c}, 0x1, 0x0, 0x0, 0x880}, 0x0) 6.722045379s ago: executing program 2 (id=2250): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) r2 = syz_open_dev$vbi(&(0x7f0000000380), 0x0, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205649, &(0x7f00000001c0)={0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f90e, 0xdfffbfff, '\x00', @p_u8=&(0x7f0000000240)=0x1}}) r3 = fsopen(&(0x7f0000000100)='mqueue\x00', 0x1) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f0000000180)=0x80000000) 6.202890105s ago: executing program 4 (id=2251): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x44000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xfff9}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6.033978383s ago: executing program 2 (id=2252): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000004300)=[{0x0}], 0x1, 0x78, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x161042, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="02030003120000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a00000000000000000000000000000000000000000000010b0000000000000002000100000004000000070c0000000005000500000000000a00000000000000fc0100000000000000000000000000010700000000000000010014"], 0x90}, 0x1, 0x7}, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) 5.656280797s ago: executing program 4 (id=2253): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x25, 0x8, @val=@netkit}, 0x1c) syz_io_uring_setup(0x3a65, &(0x7f0000000700)={0x0, 0xa011, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x1, 0x12, r2, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000800), 0x48080, 0x0) ioctl$TIOCPKT(r5, 0x5420, &(0x7f00000000c0)=0x1) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000080)={0x4, 0x80, 0x2, 0xfffffffd, 0xfd, "05b5b89fc402332832c74804fbff0000008000"}) splice(r5, 0x0, r4, 0x0, 0x7ffff000, 0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x1ad103, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r8, 0x4068aea3, &(0x7f0000000300)={0xc9, 0x0, 0xc}) ioctl$KVM_RUN(r9, 0xae80, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x20010014) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800}, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB=';'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x2a, 0x0, r6, 0x0, 0x0, 0x0, 0x12001, 0x1}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)=ANY=[@ANYRES32=r6, @ANYRES32, @ANYBLOB="220000000400000000000000", @ANYRES32, @ANYBLOB="5caa06b031faf7d0262203b673c2a2e76a735242b047ca4a46adcca7ec4422aeb9c07ef65092b7f870a58ce639d413355c7ed9edd057d451fe55aa26a4927a1a9a1ab4c015e478f42925cb253d11b1b229618be492cc0a4caf3ddf5e2689c9192e3e8e5bdc70d9d143841adb92dc71b3e213e0e9e7", @ANYRES64=0x0], 0x20) syz_open_dev$video(&(0x7f00000002c0), 0x20000000005, 0x8100) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') lseek(r10, 0xbce0, 0x0) getdents64(r10, 0xffffffffffffffff, 0x43) 4.749974556s ago: executing program 0 (id=2254): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pwrite64(r0, 0x0, 0xeffd, 0x3) r1 = socket$inet6(0xa, 0x80002, 0x0) sendmsg$sock(r1, &(0x7f0000000780)={&(0x7f0000000300)=@in6={0xa, 0x4e23, 0x41d, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[@mark={{0x14, 0x1, 0x51, 0x1}}], 0x18}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412b", 0xf}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c4", 0x66}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) munmap(&(0x7f0000c00000/0x400000)=nil, 0x400000) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x4000)=nil) 4.699713808s ago: executing program 1 (id=2255): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r2, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}, @IFLA_GRE_REMOTE={0x8, 0x7, @remote}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv4_newrule={0x24, 0x20, 0x1, 0x70bd2b, 0x25dfdbfd, {0x2, 0x10, 0x20, 0x6, 0x3, 0x0, 0x0, 0x6, 0x10008}, [@FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x3}]}, 0x24}}, 0x4040000) 4.573214735s ago: executing program 0 (id=2256): r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) pwritev(r0, &(0x7f0000000500)=[{&(0x7f0000000380)="9e", 0x1}], 0x1, 0x5, 0xfffffff9) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) remap_file_pages(&(0x7f0000299000/0x2000)=nil, 0x2000, 0x0, 0x5, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) recvmmsg$unix(r3, &(0x7f0000002380)=[{{0x0, 0x3f, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000440)={r7, 0x2, 0x0, 0x0, 0x0, [0x0], [0x0, 0x5, 0x0, 0x546], [0xfff, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x3fe]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000080)={r8, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000280)={r7, 0x0, 0x0, 0x0, 0x0, [0x0], [], [0x0, 0x0, 0x8, 0x8000], [0x0, 0x3, 0x400000006, 0xfffffffffffffffe]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000100)={r10}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000340)={r7, 0x0, 0x0, 0x0, 0x0, [], [0xffffffff], [], [0xfffffffffffffffc]}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r9}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 4.463819629s ago: executing program 4 (id=2257): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) modify_ldt$write(0x1, &(0x7f0000000040)={0x0, 0x0, 0x4000}, 0x10) r1 = syz_open_dev$vcsa(&(0x7f0000000140), 0x100000001, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@ipv4_delrule={0x54, 0x21, 0x1, 0x70bd26, 0x25dfdbfd, {0x2, 0x80, 0x80, 0x4, 0x6, 0x0, 0x0, 0x5, 0x1}, [@FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0xfffffffe}, @FRA_SRC={0x8, 0x2, @remote}, @FRA_DST={0x8, 0x1, @loopback}, @FRA_DST={0x8, 0x1, @multicast1}, @FRA_FLOW={0x8, 0xb, 0x7}, @FRA_DST={0x8, 0x1, @loopback}, @FRA_DST={0x8, 0x1, @rand_addr=0x64010100}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000111}, 0x4c401) modify_ldt$write2(0x11, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x12, 0x5, 0x0, 0x29, 0x0, 0x7, 0x0, 0xbdb], 0xffff1001}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080200000", @ANYRES32=0x0, @ANYRES32=r4], 0x24}}, 0x0) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000380)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd25, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0x2, 0x6}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa], 0x0, [0x8, 0x4, 0x2, 0x80, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xb], [0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xa}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x9}]}}]}, 0xa4}}, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x5, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0xa7c, 0x68ff, 0x5, 0x9, 0x2d1e, 0x0, 0x401], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0xeeee0000, 0x8, 0x9, 0xb, 0xe6, 0x40, 0xff, 0x2, 0x81, 0x80}, {0x5000, 0xf000, 0xb, 0x0, 0x42, 0x5, 0x7d, 0x6, 0x16, 0x0, 0x2, 0x87}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa3, 0x5, 0x5}, {0x1, 0xeeea0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0x6, 0x9, 0xf7, 0x97}, {0xeeefa000, 0xdddd0000, 0x0, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x3000, 0x3000, 0x4, 0x5, 0x7, 0xd, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xd000, 0xc000, 0xa, 0x5, 0xcd, 0x7, 0x0, 0x9, 0x2, 0xc, 0xb0, 0x9}, {0xeeef0000, 0x30}, {0x8000000, 0x7}, 0x80000031, 0x0, 0x0, 0x2024, 0x2, 0x0, 0x100000, [0x6800000000000000, 0x4, 0x3, 0x8]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)) 4.149858315s ago: executing program 1 (id=2258): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) socket$kcm(0x2, 0xa, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900050073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) 3.714428006s ago: executing program 4 (id=2259): r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000400)={0x3, 0x1, 0x1, 0x5, 0xf7}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000900)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000480)={0x40c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x134, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1d, 0x2, [{0x0, 0x4}, {0x3, 0x5}, {0x0, 0x3}, {0x6, 0xa}, {0x4, 0x8}, {0x1, 0x1}, {0x3}, {0x0, 0x7}, {0x4, 0x8}, {0x0, 0x6}, {0x1, 0xa}, {0x7, 0x3}, {0x4, 0x7}, {0x0, 0x7}, {0x3, 0x4}, {0x4, 0x7}, {0x0, 0x1}, {}, {0x0, 0x5}, {0x0, 0x6}, {0x1, 0x8}, {0x7, 0x3}, {0x1, 0x9}, {0x3, 0x6}, {0x4, 0x1}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x6, 0x2, 0x16, 0x1b, 0x4, 0x1b, 0x24, 0x0, 0x12, 0x5, 0x18, 0x5]}]}, @NL80211_BAND_6GHZ={0x1c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0xbc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x51, 0x2, [{0x7, 0x4}, {0x6, 0x9}, {0x6}, {0x0, 0x4}, {0x5, 0x8}, {0x7, 0x4}, {0x0, 0x9}, {0x7, 0x3}, {0x2, 0xa}, {0x2, 0x4}, {0x7, 0x2}, {0x1, 0x7}, {0x4, 0x4}, {0x5, 0x2}, {0x0, 0x5}, {0x6, 0x8}, {0x0, 0x4}, {0x4, 0x2}, {0x1, 0x4}, {0x3}, {0x0, 0x3}, {}, {0x0, 0x9}, {0x5, 0x5}, {0x5, 0x6}, {0x5, 0xa}, {0x2, 0x9}, {0x2, 0x9}, {0x0, 0x4}, {0x1, 0x8}, {0x7, 0x5}, {0x5, 0x6}, {0x6, 0x8}, {0x2, 0x2}, {0x1, 0x2}, {0x6, 0x3}, {0x4, 0x9}, {0x0, 0x8}, {0x5}, {0x2, 0x8}, {0x0, 0x5}, {0x5, 0x5}, {0x4, 0x1}, {0x7, 0x8}, {0x0, 0x6}, {0x1, 0x2}, {0x6}, {0x1, 0x1}, {0x5, 0x4}, {0x3}, {0x0, 0xa}, {0x0, 0x3}, {0x1, 0x2}, {0x4, 0x5}, {0x1, 0xa}, {}, {0x1, 0x1}, {0x4, 0x6}, {0x5, 0x7}, {0x2, 0x2}, {0x6, 0x5}, {0x1, 0x7}, {0x5, 0x3}, {0x6, 0x4}, {0x0, 0xa}, {0x2}, {0x0, 0xa}, {0x5, 0x4}, {0x4, 0x7}, {0x3, 0x5}, {0x1, 0x7}, {0x2}, {0x1, 0x9}, {0x7, 0x2}, {0x2, 0x3}, {0x2, 0x8}, {0x3, 0x7}]}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x2, 0x3}, {0x0, 0x6}, {0x7, 0x6}, {0x7, 0x6}, {0x7, 0xc}, {0x1, 0x8}, {0x4, 0x9}, {0x2, 0x7}, {0x6, 0xa}, {0x5, 0x4}, {0x4, 0xa}, {0x2, 0x2}, {0x5, 0x7}, {0x4, 0x5}, {0x1, 0x3}, {0x6, 0x5}, {0x6, 0x6}, {0x2, 0x4}, {0x0, 0x1}, {0x2, 0xa}, {0x1, 0xa}, {0x4, 0x7}, {0x4, 0x5}, {0x7}, {0x5, 0x17}, {0x7, 0x7}, {0x0, 0x5}, {0x2, 0x3}, {0x0, 0x3}, {0x3, 0x1}, {0x3, 0x3}, {0x2, 0x6}, {0x0, 0x6}, {0x4, 0x3}, {0x5, 0x8}, {0x7, 0x2}, {0x7, 0x9}, {0x6, 0x7}, {0x4, 0x8}, {0x2, 0x2}, {0x5, 0x8}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x2}, {0x6}, {0x5, 0x4}, {0x6, 0x6}, {0x1, 0x1}, {0x0, 0x8}, {0x3, 0x8}, {0x6, 0x3}, {0x2}, {0x5, 0xa}, {0x4, 0xa}, {0x5, 0x4}, {0x5, 0xa}, {0x2, 0x3}, {0x2, 0x6}, {0x0, 0xa}, {0x0, 0x2}, {0x0, 0x3}, {0x6, 0x3}, {0x1, 0x7}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x8}, {0x2, 0x2}, {0x2, 0x4}, {0x7}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_ATTR_BSS_BASIC_RATES={0x14, 0x24, [{0x2}, {0x16, 0x1}, {0x3}, {0x48, 0x1}, {0xc}, {0x1, 0x1}, {0x74, 0x1}, {0xc, 0x1}, {0x16, 0x1}, {0x1b, 0x1}, {0x36, 0x1}, {0x16}, {0x30, 0x1}, {0x9}, {0x2}, {0x48, 0x1}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6}, @NL80211_ATTR_TX_RATES={0x234, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x5a, 0x6, 0x50, 0x48, 0x1b, 0x36, 0x16]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x7f, 0x0, 0x3, 0x4, 0x1f, 0xffff, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x16a, 0x3ff, 0x40, 0x80, 0x3, 0x4, 0x0, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x528c, 0x3, 0x7, 0x2, 0x0, 0x6, 0x5]}}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x6, 0x6c, 0xc, 0x3, 0x5, 0x4, 0x6c, 0x1b, 0x30, 0x18, 0x6c, 0x2, 0x36, 0x36, 0x6, 0x6c, 0x5]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x3, 0x4, 0x101, 0x6, 0x800, 0x5, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2d}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x1, 0x6}, {0x0, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x6, 0x200, 0x8, 0x7, 0x9, 0x0, 0x8000]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0xa0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x4}, {0x6, 0x1}, {0x5, 0x9}, {0x5, 0x1}, {0x0, 0x6}, {0x0, 0x7}, {0x5}, {0x4, 0x2}, {0x0, 0x3}, {0x5, 0x1}, {0x4, 0x5}, {0x3, 0x7}, {0x3, 0x3}, {0x2, 0x8}, {0x5, 0x9}, {0x0, 0x4}, {0x5, 0x1}, {0x7, 0x2}, {0x2, 0x5}, {0x0, 0x7}, {0x4, 0x4}, {0x0, 0x9}, {0x2, 0x5}, {0x1, 0x2}, {0x3, 0x1}, {0x1, 0x6}, {0x5, 0x3}, {0x0, 0x1}, {0x6, 0x1}, {0x5, 0x8}, {0x6, 0x2}, {0x6, 0xa}, {0x4}, {0x3, 0x9}, {0x4, 0x1}, {0x0, 0x5}, {0x4, 0x1}]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x2, 0x7}, {0x1, 0x5}, {0x6}, {0x5, 0x7}, {0x5, 0x1}, {0x1, 0x2}, {0x7, 0x4}, {0x1, 0x6}, {0x0, 0x2}, {0x5, 0x8}, {0x1, 0x7}, {0x1, 0x2}, {0x4, 0x5}, {0x4, 0x5}, {0x3, 0x8}, {0x0, 0x4}, {0x2}, {0x7, 0x4}, {0x5, 0x4}, {0x2, 0x5}, {0x1, 0x6}, {0x0, 0x9}, {0x3, 0x6}, {0x1, 0x2}, {0x3, 0x5}, {0x6, 0x8}, {0x7, 0x6}, {0x2, 0x2}, {0x5, 0xa}, {0x7, 0x2}, {0x3, 0x9}, {0x6, 0x2}, {0x0, 0x3}, {0x1, 0x8}, {0x2, 0x1}, {0x0, 0x4}, {0x0, 0x4}, {0x7, 0x3}, {0x3}, {0x1, 0x9}, {0x5, 0x2}, {0x5, 0x3}, {0x2}, {0x6, 0x4}, {0x3, 0x7}, {0x1}, {0x6}, {0x0, 0x1}, {0x4, 0x1}, {0x5, 0x2}, {0x6}, {0x1, 0x9}, {0x7, 0x5}, {0x2, 0xa}, {0x7, 0x8}, {0x4, 0x7}, {0x1}, {0x6, 0x1}, {0x0, 0x6}, {0x6, 0x7}, {0x1, 0x7}, {0x6, 0x7}, {0x4, 0x1}, {0x0, 0x5}, {}, {0x6, 0x1}, {0x3, 0x1}, {0x2}, {0x3, 0xa}, {0x5}, {0x5, 0x9}, {0x5, 0x4}]}]}, @NL80211_BAND_5GHZ={0x7c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8d90, 0x300, 0x8, 0x2, 0x8000, 0x6, 0x3]}}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x5, 0x3}, {0x0, 0x7}, {}, {0x1, 0x6}, {0x5, 0x7}, {0x7, 0x5}, {0x6}, {}, {0x0, 0x8}, {0x7, 0xa}, {0x5, 0x7}, {0x1}, {0x7, 0x1}, {0x1, 0x2}, {0x2, 0x8}, {0x6, 0x6}, {0x7, 0x8}, {0x3, 0x5}, {0x5, 0x5}, {0x0, 0x7}, {0x2, 0x2}, {0x1, 0x3}, {0x2, 0x9}, {0x2, 0x8}, {0x1, 0x3}, {0x0, 0x7}, {0x6, 0x5}, {0x7, 0x6}, {0x6, 0x4}, {0x1, 0x5}, {}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x7, 0x8}, {0x2, 0x7}, {0x1, 0x3}, {0x2, 0x6}, {0x1, 0x9}, {0x6, 0x5}, {0x4, 0x6}, {0x1, 0x5}, {0x4}, {0x5, 0x3}, {0x0, 0x3}, {0x7, 0x1}, {0x1, 0xa}, {0x1, 0x9}, {0x6, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x3ff, 0x4, 0x0, 0x1, 0x2, 0x9f, 0x9]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x36, 0x3, 0x24, 0x5, 0x16, 0x9, 0x48, 0x9, 0x6, 0x16, 0x3, 0x3, 0x5, 0x4a, 0x3, 0x0, 0x6c, 0x60, 0x30]}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x3, 0x9, 0x8, 0x3, 0x6, 0x8, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x4, 0x16, 0x1b, 0xb, 0x5, 0x12, 0x1b, 0x48, 0x6, 0x30, 0x9, 0x2, 0x19, 0x24, 0x30, 0x6, 0x12, 0x0, 0x60, 0x36, 0x2, 0x12, 0x48, 0x30, 0x5, 0x6, 0x9, 0x30]}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x2, 0x9}, {0x2, 0x9}, {0x7, 0x6}, {0x5, 0x3}, {0x5, 0x2}, {0x2, 0x3}, {0x1, 0x7}, {}, {0x6, 0x2}, {0x2, 0x4}, {0x5, 0x3}, {0x1, 0x4}, {0x4}, {0x6, 0x5}, {0x0, 0x2}]}]}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x3}, @NL80211_ATTR_MESH_SETUP={0x60, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_IE={0x55, 0x3, "e801cf1d5a690018570506d3dc25a51ba5524d1208df4854b4a24f779f13d1edbd62e425ae716c5b0bc707cc81ace41a63902406079eb07ef9dfef80dcf31d8451b2156960d6acc11bf8b1bda08b61ab1b"}]}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x40c}, 0x1, 0x0, 0x0, 0x4c804}, 0xc014) getpeername$packet(0xffffffffffffffff, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000980)=0x14) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f00000009c0)=r2) ioctl$FIONCLEX(r1, 0x5450) r3 = syz_open_dev$dri(&(0x7f0000000a00), 0x9b, 0x8080) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000b80), 0xb3d18d0d7f63d03, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000b40)={@map=r4, 0x32, 0x0, 0x8, &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000ac0)=[0x0, 0x0], &(0x7f0000000b00)=[0x0, 0x0, 0x0]}, 0x40) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000bc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETFB(r3, 0xc01c64ad, &(0x7f0000000c40)={r5}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r4) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x2c, r6, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8151}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000050}, 0x8000) socket$tipc(0x1e, 0x2, 0x0) getpid() r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000dc0), 0x480, 0x0) ioctl$TCSBRK(r7, 0x5409, 0x8) read(r1, &(0x7f0000000e00)=""/151, 0x97) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r4, 0x80045301, &(0x7f0000000ec0)) r8 = syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000f00)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io(r8, &(0x7f00000010c0)={0x2c, &(0x7f0000000f40)={0x20, 0x4, 0x28, {0x28, 0xf, "212c7c1b7b854442035404363d5183db39520ce6b18e9c56034c5b0b9550d51dbd6f17aecde2"}}, &(0x7f0000000f80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1809}}, &(0x7f0000000fc0)={0x0, 0xf, 0x5d, {0x5, 0xf, 0x5d, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "2c87713894fc7c7640ca426dc45bc33e"}, @generic={0x3a, 0x10, 0x4, "9596ed26aed911bbc10e54b3e9e856811bec6233a571987675bee683567644c8f86e0458474f08aaf4414dda2eea5ea398e30316b71a1c"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x31, 0x77, 0x4}]}}, &(0x7f0000001040)={0x20, 0x29, 0xf, {0xf, 0x29, 0xdc, 0x62, 0xfd, 0x7f, "cafeb9cd", "34bc2539"}}, &(0x7f0000001080)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xd, 0x3, 0xbb, 0x1, 0x9, 0xf000, 0x5}}}, &(0x7f0000001580)={0x84, &(0x7f0000001100)={0x40, 0x14, 0xa6, "b5fa2f0dbd91d9d3043334d58b7fe5a9b718de5051f17f297f52006e0aa4fb23c9706ac8f4ea6d2dbf6e5099f02648111eea5b9c42eb7c2be614ac8195cd200705d552cd784437d70ad22bc3551084fb7061675f0e78f1d4b3f93935afaeab7cd26665835c212bdecac9436ecad7c05298a381dbc203e9e0cb53a6f6d205bd2a58c8ab3e5dc19e4b981dd85ca4ff7ac30f99e6f4daee7d6a990cee7ee3faf4cc6a93e7fd74d9"}, &(0x7f00000011c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000001200)={0x0, 0x8, 0x1, 0xe9}, &(0x7f0000001240)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000001280)={0x20, 0x0, 0x4, {0x40, 0x20}}, &(0x7f00000012c0)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000001300)={0x40, 0x9, 0x1, 0x7f}, &(0x7f0000001340)={0x40, 0xb, 0x2, "7283"}, &(0x7f0000001380)={0x40, 0xf, 0x2, 0x1}, &(0x7f00000013c0)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000001400)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, &(0x7f0000001440)={0x40, 0x19, 0x2, "134a"}, &(0x7f0000001480)={0x40, 0x1a, 0x2}, &(0x7f00000014c0)={0x40, 0x1c, 0x1, 0xfa}, &(0x7f0000001500)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000001540)={0x40, 0x21, 0x1, 0x7}}) bind$packet(r4, &(0x7f0000001640)={0x11, 0x17, r2, 0x1, 0xf, 0x6, @local}, 0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000001680)=0x102, 0x4) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001700), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000001800)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001740)={0x6c, r9, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_RULES={0x30, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1ff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1f43fa20}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x2}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xd}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), r4) sendmsg$NL80211_CMD_CONNECT(r10, &(0x7f0000001b40)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001b00)={&(0x7f00000018c0)={0x220, r11, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x59}}}}, [@NL80211_ATTR_IE={0x29, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x4, 0xb6, 0x2}}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @ht={0x2d, 0x1a, {0x300, 0x1, 0x4, 0x0, {0x0, 0x2, 0x0, 0xe, 0x0, 0x0, 0x1, 0x3, 0x1}, 0x400, 0xf2, 0xff}}]}, @NL80211_ATTR_KEYS={0x144, 0x51, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x14, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "023302d3c8"}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DEFAULT_TYPES={0x1c, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_TYPE={0x8}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_SEQ={0x14, 0x4, "643eb9bc3de50132b5a710cc23fb2d98"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "069b72ab12ed0b08fb8b4340e5"}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x4}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_SEQ={0x8, 0x4, "749eddee"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "e35c261213ffbe2155c16781be"}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "6dea6b6e63"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEYS={0x34, 0x51, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}]}]}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x70000, {0x81, 0x72cb, 0x0, 0x8001}}}, @NL80211_ATTR_PREV_BSSID={0xa}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x8000, 0x1, 0x3, 0x0, {0x416, 0x182e, 0x0, 0x81, 0x0, 0x1, 0x1, 0x1}, 0x800, 0x6, 0xf}}]}, 0x220}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 3.606947198s ago: executing program 3 (id=2260): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="6c0000001a00010029bd70000000000002200000000000000020000008001900ac1414bb05001b"], 0x6c}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x8, 0x4, 0x4, 0xbf25}, 0x50) getitimer(0x2, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) io_setup(0x30, &(0x7f0000000600)=0x0) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r5, 0x1, &(0x7f00000001c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x60a, r6, 0x0}]) 3.286519013s ago: executing program 2 (id=2261): connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000000) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) io_uring_setup(0x6839, 0x0) dup(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.numa_stat\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000000000000000fe0100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 2.991094262s ago: executing program 2 (id=2262): unshare(0x2a020480) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r1, &(0x7f0000000340)="cc", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c) recvfrom(r1, 0x0, 0x0, 0x40, &(0x7f0000000080)=@nl=@kern={0x10, 0x0, 0x0, 0x100}, 0x80) setns(0xffffffffffffffff, 0x24020000) 2.243407621s ago: executing program 3 (id=2263): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x44000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xfff9}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.221894812s ago: executing program 2 (id=2264): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r2, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) (async) r3 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xfffffffd, 0x4, 0xb, 0x8001}}) r4 = open(0x0, 0x64842, 0x389b0d52417bb201) pwritev2(r4, &(0x7f0000000240), 0x0, 0x7000, 0x0, 0x3) (async) r5 = socket$qrtr(0x2a, 0x2, 0x0) (async) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) r7 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) pread64(r7, &(0x7f0000001600)=""/4081, 0x7, 0x12) (async, rerun: 64) r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (rerun: 64) ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa1cc590d3c04000000296bab028deda501809bdeffa500"}) (async) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/tty/drivers\x00', 0x0, 0x0) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000240)={"0000bced01eb1400000000000000000000c900", r9, 0xffffffffffffffff}) ppoll(&(0x7f0000000000)=[{r10, 0x1084}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$SYNC_IOC_FILE_INFO(r10, 0xc0383e04, &(0x7f00000000c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="40000000100001042cbd7000fedbdf25000000001f6bd0b07425afe2d20a63598d723330bfcc4d669bac3fcfa2f37b4ab02c710540b4451b5c2a580f63b051e8ec016509a6d303370c824ad31a4e09174124e989338dbc41e620d45ea701c4211151ad563624ac8a27be312fcdf61b3f2315ae8531aa1bf6c8f572054494fe95ac6e60a293ae8234ca039d5fe6ccd3958a025bfef6b5dfe9d02cf2747ded1aa2a0f5ed8e62418393752c8e8b145055c0", @ANYRES32=0x0, @ANYBLOB="7b13000001c0000020001280080001006774700014000280050006000700000008000300fbffffff"], 0x40}}, 0x20000844) ioctl$CEC_TRANSMIT(r4, 0xc0386105, &(0x7f00000001c0)={0x68db, 0x0, 0x4, 0x6d39f9f5, 0x200, 0x2, "94168d759c92ed24736ed885ff22ce92", 0x4, 0x7, 0x5, 0x81, 0x7f, 0x45, 0x9b}) (async, rerun: 32) r12 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0), 0x92e82) (rerun: 32) write$binfmt_aout(r12, 0x0, 0xc8) (async) sendmsg$sock(r5, &(0x7f0000001540)={&(0x7f0000000140)=@pppoe={0x2a, 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, 'lo\x00'}}, 0x80, 0x0}, 0x40000c0) 1.953980146s ago: executing program 0 (id=2265): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000006000/0x2000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x1, 0x20002f5}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@deltfilter={0xe, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x3}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x0) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) epoll_create1(0x0) sendmsg(0xffffffffffffffff, 0x0, 0x4010) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c41f4040110f0010020000e8ff010902120001000000000904"], 0x0) r3 = socket(0x10, 0x803, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="5378b5c20266aaaaaaaaaaaa810016000805017109d07bb4bd45e993ab28716438ec578813191ca00f3b2f00d77a9875bc2ea9a65a39d4984c0d24a340dfc36cc3c94456cb7aed00bff68ff2047389d04e5335d9cd36ee1d28e26cc117c2681450e3a67e378484f54d95"], &(0x7f0000000080)={0x0, 0x4, [0x141, 0x213, 0x6f9, 0x7f]}) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c00000010000104fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000808000002c00128009000100626f6e641a0000001c00028008000a000100000005001000090000000500"], 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) 1.780278092s ago: executing program 3 (id=2266): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) shutdown(r0, 0x1) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x81) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) unshare(0x2a020400) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) 785.504512ms ago: executing program 1 (id=2267): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a3100000000080005"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r1 = socket(0xa, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="2072dc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r4, 0x707, &(0x7f00000003c0)={&(0x7f0000000400)=[{0x0, 0x4201, 0x0, 0x0}, {0x6, 0x1201, 0x0, 0x0}, {0xfff, 0x9801, 0x0, 0x0}], 0x3}) ioctl$SIOCSIFMTU(r2, 0x8922, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r5, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xc, 0x74}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "5b9fcaae62cd3a09307f91e43658d22d"}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x8800) sendto$packet(r0, &(0x7f0000000080), 0x0, 0x40008c1, 0x0, 0x0) 312.177293ms ago: executing program 4 (id=2268): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="63da090080460000002ec587e8110fc95064", @ANYRES32=r1], 0x0) ioctl$HIDIOCGFIELDINFO(0xffffffffffffffff, 0xc038480a, 0x0) syz_usb_control_io(r2, &(0x7f0000000200)={0x2c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003140000001403030084ff"], 0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 2 (id=2269): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_io_uring_setup(0x1238, &(0x7f0000000380)={0x0, 0x80fd, 0x80, 0x2, 0xab9}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) socketpair(0x2b, 0xa, 0x9, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffff4, 0x0, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000080)=@l2tp={0x2, 0x0, @local, 0x3}}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) dup2(r4, r0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet_smc(0x2b, 0x1, 0x0) r8 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xb0c4, 0x10000, 0x2, 0x5c}, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r8, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r7, 0x6, 0x21, &(0x7f0000000040)='W\x00', 0x10) setsockopt$inet_tcp_int(r7, 0x6, 0x19, &(0x7f0000000240)=0x3, 0x4) connect$unix(r5, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x15, 0x5, 0x0) r11 = epoll_create1(0x80000) r12 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x4]}, 0x8, 0x800) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r12, &(0x7f0000000180)={0x90000009}) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x0) kernel console output (not intermixed with test programs): erratec Grabster AV400 [ 546.063046][ T795] pvrusb2: ********** [ 546.073795][ T795] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 546.087641][ T795] pvrusb2: Important functionality might not be entirely working. [ 546.114808][ T795] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 546.153803][ T795] pvrusb2: ********** [ 546.159697][ T795] usb 1-1: selecting invalid altsetting 0 [ 546.175480][ T795] usb 1-1: USB disconnect, device number 78 [ 546.185555][ T2345] pvrusb2: Invalid write control endpoint [ 546.314849][ T2345] pvrusb2: Invalid write control endpoint [ 546.322547][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 546.415835][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 546.495896][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 546.537788][ T2345] pvrusb2: Device being rendered inoperable [ 546.587591][ T2345] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 546.595139][ T2345] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 546.710974][ T2345] pvrusb2: Attached sub-driver cx25840 [ 546.726749][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 546.789292][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 547.008613][ T9] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 547.167681][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 547.180702][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 547.209001][ T9] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 547.219226][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 547.231703][ T9] usb 5-1: SerialNumber: syz [ 547.598627][T12231] FAULT_INJECTION: forcing a failure. [ 547.598627][T12231] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 547.613114][T12231] CPU: 0 UID: 0 PID: 12231 Comm: syz.0.1771 Tainted: G L syzkaller #0 PREEMPT(full) [ 547.613149][T12231] Tainted: [L]=SOFTLOCKUP [ 547.613156][T12231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 547.613175][T12231] Call Trace: [ 547.613183][T12231] [ 547.613192][T12231] dump_stack_lvl+0x189/0x250 [ 547.613233][T12231] ? __pfx____ratelimit+0x10/0x10 [ 547.613260][T12231] ? __pfx_dump_stack_lvl+0x10/0x10 [ 547.613286][T12231] ? __pfx__printk+0x10/0x10 [ 547.613317][T12231] ? __might_fault+0xb0/0x130 [ 547.613362][T12231] should_fail_ex+0x414/0x560 [ 547.613393][T12231] _copy_from_user+0x2d/0xb0 [ 547.613426][T12231] ___bpf_copy_key+0xaa/0x120 [ 547.613450][T12231] map_update_elem+0x213/0x6a0 [ 547.613488][T12231] __sys_bpf+0x619/0x860 [ 547.613519][T12231] ? __pfx___sys_bpf+0x10/0x10 [ 547.613562][T12231] ? ksys_write+0x1e1/0x250 [ 547.613584][T12231] ? __pfx_ksys_write+0x10/0x10 [ 547.613605][T12231] __x64_sys_bpf+0x7c/0x90 [ 547.613627][T12231] do_syscall_64+0xfa/0xf80 [ 547.613649][T12231] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.613666][T12231] ? clear_bhb_loop+0x60/0xb0 [ 547.613685][T12231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.613701][T12231] RIP: 0033:0x7fd89378f749 [ 547.613717][T12231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 547.613731][T12231] RSP: 002b:00007fd8919b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 547.613750][T12231] RAX: ffffffffffffffda RBX: 00007fd8939e6180 RCX: 00007fd89378f749 [ 547.613762][T12231] RDX: 0000000000000020 RSI: 00002000000000c0 RDI: 0000000000000002 [ 547.613773][T12231] RBP: 00007fd8919b4090 R08: 0000000000000000 R09: 0000000000000000 [ 547.613783][T12231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 547.613793][T12231] R13: 00007fd8939e6218 R14: 00007fd8939e6180 R15: 00007fd893b0fa28 [ 547.613820][T12231] [ 548.039548][ T9] usb 5-1: 0:2 : does not exist [ 548.058945][ T9] usb 5-1: USB disconnect, device number 88 [ 548.094641][ T5841] udevd[5841]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 548.408007][ T5833] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 548.568047][ T5833] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 548.594401][ T5833] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 548.624144][ T5833] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.675899][ T5833] usb 2-1: Product: syz [ 548.685818][ T5833] usb 2-1: Manufacturer: syz [ 548.690664][ T5833] usb 2-1: SerialNumber: syz [ 548.717648][ T5833] usb 2-1: config 0 descriptor?? [ 550.801997][ T795] usb 2-1: USB disconnect, device number 85 [ 551.269366][T12280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.311512][T12280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.335846][ T981] usb 2-1: new full-speed USB device number 86 using dummy_hcd [ 551.510090][ T981] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 551.560616][ T981] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 551.591621][ T981] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.954049][ T981] usb 2-1: config 0 descriptor?? [ 551.989251][T12273] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 552.329834][T12289] xt_TCPMSS: Only works on TCP SYN packets [ 552.681504][ T981] elan 0003:04F3:0755.001C: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 552.910296][T12272] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1783'. [ 553.096231][ T5833] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 553.256250][ T5833] usb 5-1: Using ep0 maxpacket: 32 [ 553.280124][ T5833] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 553.301746][ T5833] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 553.354842][ T5833] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 553.392447][ T5833] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 553.447060][ T5833] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 553.456541][ T5833] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.469330][ T5833] usb 5-1: Product: syz [ 553.487074][ T5833] usb 5-1: Manufacturer: syz [ 553.514200][ T5833] usb 5-1: SerialNumber: syz [ 553.879011][T12295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 553.895920][T12304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 553.896802][T12295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.915868][ T981] usb 2-1: reset full-speed USB device number 86 using dummy_hcd [ 553.936423][T12304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.009444][ T30] audit: type=1326 audit(1765113824.486:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12303 comm="syz.3.1793" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbee158f749 code=0x0 [ 555.038017][ T5839] usb 2-1: USB disconnect, device number 86 [ 555.202716][T12324] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1799'. [ 555.212045][T12324] netlink: 'syz.1.1799': attribute type 5 has an invalid length. [ 555.221923][T12324] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1799'. [ 555.243282][T12324] geneve2: entered promiscuous mode [ 555.250146][T12324] geneve2: entered allmulticast mode [ 555.327882][ T5949] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 555.373163][ T5949] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 555.394550][ T5949] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 555.425572][ T5949] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 556.766065][ T5833] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 556.773614][ T5833] usb 5-1: 2:1 : invalid channels 0 [ 556.933852][ T5833] usb 5-1: USB disconnect, device number 89 [ 557.103376][ T5841] udevd[5841]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 557.528507][T12351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 557.706389][T12351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 557.738782][T12351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 557.767640][T12351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 557.821967][T12351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 557.845395][T12351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.676552][ T795] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 558.866671][ T795] usb 2-1: Using ep0 maxpacket: 16 [ 558.967893][ T30] audit: type=1326 audit(1765113829.426:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12367 comm="syz.4.1810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f230c38f749 code=0x7ffc0000 [ 558.991360][ T795] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 559.051546][ T795] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 559.179454][ T795] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 559.219768][ T30] audit: type=1326 audit(1765113829.426:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12367 comm="syz.4.1810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f230c38f749 code=0x7ffc0000 [ 559.256104][ T795] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 559.273164][ T795] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.296065][ T795] usb 2-1: config 0 descriptor?? [ 559.373923][ T30] audit: type=1326 audit(1765113829.426:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12367 comm="syz.4.1810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f230c38f749 code=0x7ffc0000 [ 559.534290][ T30] audit: type=1326 audit(1765113829.426:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12367 comm="syz.4.1810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f230c38f749 code=0x7ffc0000 [ 559.711321][ T795] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.001D/input/input34 [ 559.789882][T12379] ip6gretap0: entered promiscuous mode [ 559.808804][T12379] macsec0: entered promiscuous mode [ 559.814568][T12379] macsec0: entered allmulticast mode [ 559.823122][T12379] ip6gretap0: entered allmulticast mode [ 559.850210][ T795] microsoft 0003:045E:07DA.001D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 559.885818][ T5833] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 559.925827][ T30] audit: type=1326 audit(1765113829.426:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12367 comm="syz.4.1810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f230c38f749 code=0x7ffc0000 [ 559.960821][T12379] ip6gretap0: left allmulticast mode [ 559.968189][T12379] ip6gretap0: left promiscuous mode [ 560.028319][ T30] audit: type=1326 audit(1765113829.436:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12367 comm="syz.4.1810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f230c38f749 code=0x7ffc0000 [ 560.075902][ T5833] usb 3-1: device descriptor read/64, error -71 [ 560.125931][ T795] usb 5-1: new full-speed USB device number 90 using dummy_hcd [ 560.133549][ T30] audit: type=1326 audit(1765113829.436:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12367 comm="syz.4.1810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f230c38f749 code=0x7ffc0000 [ 560.225936][ T30] audit: type=1326 audit(1765113829.436:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12367 comm="syz.4.1810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f230c38f749 code=0x7ffc0000 [ 560.335838][ T5833] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 560.345873][ T30] audit: type=1326 audit(1765113829.436:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12367 comm="syz.4.1810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f230c38f749 code=0x7ffc0000 [ 560.357989][ T795] usb 5-1: unable to get BOS descriptor or descriptor too short [ 560.405861][ T30] audit: type=1326 audit(1765113829.436:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12367 comm="syz.4.1810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f230c38f749 code=0x7ffc0000 [ 560.435497][ T795] usb 5-1: not running at top speed; connect to a high speed hub [ 560.495833][ T5833] usb 3-1: device descriptor read/64, error -71 [ 560.519975][ T795] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 560.535297][ T30] audit: type=1326 audit(1765113829.436:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12367 comm="syz.4.1810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f230c38f749 code=0x7ffc0000 [ 560.609828][ T5833] usb usb3-port1: attempt power cycle [ 560.671914][ T795] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 560.772733][ T795] usb 5-1: string descriptor 0 read error: -22 [ 560.804255][ T795] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 560.882835][ T795] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.949953][ T795] usb 5-1: 0:2 : does not exist [ 560.956146][ T9] usb 2-1: reset high-speed USB device number 87 using dummy_hcd [ 560.997260][ T5833] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 561.047689][ T5833] usb 3-1: device descriptor read/8, error -71 [ 561.262305][T12360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 561.306847][T12360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 561.307316][T12414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 561.320785][T12360] netlink: 'syz.1.1809': attribute type 10 has an invalid length. [ 561.333359][T12360] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 561.342094][ T5833] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 561.351140][T12414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 561.362604][ T5833] usb 3-1: device descriptor read/8, error -71 [ 561.413367][T12414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 561.450359][T12414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 561.498042][ T5833] usb usb3-port1: unable to enumerate USB device [ 561.562666][ T795] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 561.577022][T12422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 561.591481][ T795] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 561.609712][T12422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 561.627213][ T795] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 561.761644][ T795] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 561.808002][ T795] usb 5-1: USB disconnect, device number 90 [ 561.965980][ T5833] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 562.150991][ T5833] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 562.204644][ T5833] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 562.247412][ T5833] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.284411][ T5833] usb 1-1: Product: syz [ 562.331345][ T5833] usb 1-1: Manufacturer: syz [ 562.340136][ T5833] usb 1-1: SerialNumber: syz [ 562.383373][ T5833] usb 1-1: config 0 descriptor?? [ 562.657583][ T5943] usb 2-1: USB disconnect, device number 87 [ 563.102204][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.166234][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.268156][T12435] loop2: detected capacity change from 0 to 7 [ 563.278090][T12435] Dev loop2: unable to read RDB block 7 [ 563.289222][T12435] loop2: AHDI p2 p3 [ 563.297756][T12435] loop2: partition table partially beyond EOD, truncated [ 563.331418][T12435] loop2: p3 start 335544320 is beyond EOD, truncated [ 564.175865][ T9] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 564.345914][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 564.355281][ T9] usb 3-1: config 0 has an invalid interface number: 109 but max is 0 [ 564.364183][ T9] usb 3-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 564.401607][ T9] usb 3-1: config 0 has no interface number 0 [ 564.472514][ T9] usb 3-1: New USB device found, idVendor=0421, idProduct=0094, bcdDevice=28.8e [ 564.505110][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.525840][ T5833] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 564.556853][ T9] usb 3-1: Product: syz [ 564.574247][ T9] usb 3-1: Manufacturer: syz [ 564.590727][ T9] usb 3-1: SerialNumber: syz [ 564.630165][ T9] usb 3-1: config 0 descriptor?? [ 564.689088][ T5833] usb 5-1: config 0 has an invalid interface number: 78 but max is 0 [ 564.708725][ T5833] usb 5-1: config 0 has no interface number 0 [ 564.716487][ T5833] usb 5-1: config 0 interface 78 altsetting 60 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 564.747725][ T5839] usb 1-1: USB disconnect, device number 79 [ 564.767132][ T5833] usb 5-1: config 0 interface 78 has no altsetting 0 [ 564.779261][ T5833] usb 5-1: New USB device found, idVendor=0411, idProduct=0158, bcdDevice=4f.85 [ 564.805148][ T5833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.844225][ T5833] usb 5-1: config 0 descriptor?? [ 564.968659][T12441] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1823'. [ 565.067990][ T5833] usb 5-1: string descriptor 0 read error: -71 [ 565.110824][ T5833] usb 5-1: USB disconnect, device number 91 [ 565.206149][T12459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 565.238123][T12459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 565.588110][T12462] syzkaller0: entered promiscuous mode [ 565.593760][T12462] syzkaller0: entered allmulticast mode [ 565.690110][T12465] loop2: detected capacity change from 0 to 7 [ 565.698933][T12465] Dev loop2: unable to read RDB block 7 [ 565.723333][T12465] loop2: AHDI p2 p3 [ 565.806069][T12465] loop2: partition table partially beyond EOD, truncated [ 565.813872][T12465] loop2: p3 start 335544320 is beyond EOD, truncated [ 565.974844][ T5943] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 566.126449][ T5943] usb 2-1: Using ep0 maxpacket: 8 [ 566.148290][ T5943] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 566.187337][ T5943] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 566.224355][ T5943] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.249511][ T5943] usb 2-1: Product: syz [ 566.303502][ T5943] usb 2-1: Manufacturer: syz [ 566.318380][ T5943] usb 2-1: SerialNumber: syz [ 566.357999][ T5943] usb 2-1: config 0 descriptor?? [ 566.421340][ T5943] streamzap 2-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 566.472188][T12471] kvm: pic: single mode not supported [ 566.472329][T12471] kvm: pic: level sensitive irq not supported [ 566.668697][T12474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.720992][T12474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 566.818755][ T5943] usb 2-1: USB disconnect, device number 88 [ 567.476481][ T9] rndis_host 3-1:0.109: More than one union descriptor, skipping ... [ 567.514391][ T9] usb 3-1: bad CDC descriptors [ 567.535345][ T9] cdc_acm 3-1:0.109: More than one union descriptor, skipping ... [ 567.606193][ T9] usb 3-1: USB disconnect, device number 67 [ 567.737258][T12486] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1837'. [ 568.126554][ T5943] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 568.285803][ T5943] usb 3-1: Using ep0 maxpacket: 32 [ 568.306045][ T5943] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 568.317239][ T5943] usb 3-1: config 0 has no interface number 0 [ 568.349727][ T5943] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 568.367888][ T5943] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.390405][ T5943] usb 3-1: Product: syz [ 568.399115][ T5943] usb 3-1: Manufacturer: syz [ 568.412446][ T5943] usb 3-1: SerialNumber: syz [ 568.490347][ T5943] usb 3-1: config 0 descriptor?? [ 568.500762][ T5943] smsc95xx v2.0.0 [ 568.865927][ T5833] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 568.872111][T12499] loop2: detected capacity change from 0 to 7 [ 568.894512][ T5832] Dev loop2: unable to read RDB block 7 [ 568.900585][ T5832] loop2: AHDI p2 p3 [ 568.910636][ T5832] loop2: partition table partially beyond EOD, truncated [ 568.916519][ T5943] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 568.925989][ T5832] loop2: p3 start 335544320 is beyond EOD, truncated [ 568.951336][ T5943] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 568.977097][ T5943] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 568.990969][ T5943] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -32 [ 569.004714][T12499] Dev loop2: unable to read RDB block 7 [ 569.021627][T12499] loop2: AHDI p2 p3 [ 569.031552][T12499] loop2: partition table partially beyond EOD, truncated [ 569.059826][ T5833] usb 5-1: config 0 has an invalid interface number: 78 but max is 0 [ 569.068541][ T5833] usb 5-1: config 0 has no interface number 0 [ 569.075806][ T5833] usb 5-1: config 0 interface 78 altsetting 60 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 569.262847][ T5833] usb 5-1: config 0 interface 78 has no altsetting 0 [ 569.263809][T12499] loop2: p3 start 335544320 is beyond EOD, [ 569.290406][ T5833] usb 5-1: New USB device found, idVendor=0411, idProduct=0158, bcdDevice=4f.85 [ 569.293385][T12499] truncated [ 569.293409][ T5833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.323439][ T5833] usb 5-1: config 0 descriptor?? [ 569.534070][ T5833] usb 5-1: string descriptor 0 read error: -71 [ 569.549197][ T5833] usb 5-1: USB disconnect, device number 92 [ 569.677807][T12507] loop5: detected capacity change from 0 to 7 [ 569.689737][T12507] Dev loop5: unable to read RDB block 7 [ 569.695576][T12507] loop5: unable to read partition table [ 569.701860][T12507] loop5: partition table beyond EOD, truncated [ 569.711676][ T9] usb 3-1: USB disconnect, device number 68 [ 569.783565][T12507] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 570.750351][ T9] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 570.935811][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 571.180478][ T9] usb 2-1: config 0 has an invalid interface number: 109 but max is 0 [ 571.275937][ T5839] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 571.334840][ T9] usb 2-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 571.368258][ T9] usb 2-1: config 0 has no interface number 0 [ 571.425976][ T5839] usb 3-1: device descriptor read/64, error -71 [ 571.508110][ T9] usb 2-1: New USB device found, idVendor=0421, idProduct=0094, bcdDevice=28.8e [ 571.529563][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.587420][ T9] usb 2-1: Product: syz [ 571.622290][ T9] usb 2-1: Manufacturer: syz [ 571.670047][ T9] usb 2-1: SerialNumber: syz [ 571.675902][ T5839] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 571.729926][ T9] usb 2-1: config 0 descriptor?? [ 571.870897][ T5839] usb 3-1: device descriptor read/64, error -71 [ 571.986524][ T5839] usb usb3-port1: attempt power cycle [ 572.002232][T12528] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1849'. [ 572.455934][ T5839] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 572.606852][ T5839] usb 3-1: device descriptor read/8, error -71 [ 572.875954][ T5839] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 573.371676][ T5839] usb 3-1: device descriptor read/8, error -71 [ 573.493589][ T5839] usb usb3-port1: unable to enumerate USB device [ 574.127094][T12554] i2c i2c-0: Invalid block write size 255 [ 574.475411][T12561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 574.519056][ T9] rndis_host 2-1:0.109: More than one union descriptor, skipping ... [ 574.535277][T12561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 574.560687][ T9] usb 2-1: bad CDC descriptors [ 574.581964][ T9] cdc_acm 2-1:0.109: More than one union descriptor, skipping ... [ 574.664836][ T9] usb 2-1: USB disconnect, device number 89 [ 575.748563][T12572] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 576.166921][ T795] usb 1-1: new full-speed USB device number 80 using dummy_hcd [ 576.315792][ T5943] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 576.817456][ T795] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 576.828755][ T5943] usb 2-1: device descriptor read/64, error -71 [ 576.859118][ T795] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 576.883649][ T795] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.913974][ T795] usb 1-1: Product: syz [ 576.925795][ T795] usb 1-1: Manufacturer: syz [ 576.935889][ T795] usb 1-1: SerialNumber: syz [ 576.963205][T12580] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 577.115985][ T5943] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 577.171208][T12585] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 577.286097][ T5943] usb 2-1: device descriptor read/64, error -71 [ 577.406366][ T5943] usb usb2-port1: attempt power cycle [ 577.432383][ T795] cdc_ncm 1-1:1.0: bind() failure [ 577.495405][ T795] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 577.513456][ T795] cdc_ncm 1-1:1.1: bind() failure [ 577.531244][ T795] usb 1-1: USB disconnect, device number 80 [ 577.755873][ T5943] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 577.929108][T12596] kernel read not supported for file / N7âW)s!Qfsl{Tr)rO2:">͟v|ղDvc֠6xc: (pid: 12596 comm: syz.2.1866) [ 577.970455][ T5943] usb 2-1: device not accepting address 92, error -71 [ 577.988623][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 577.988644][ T30] audit: type=1800 audit(1765113848.476:400): pid=12596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1866" name=20019C4EFC1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C03E95CD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=48188 res=0 errno=0 [ 578.250586][T12607] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.258202][T12607] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.695923][ T795] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 578.805013][ T5839] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 578.980650][ T795] usb 3-1: config 0 has an invalid interface number: 78 but max is 0 [ 578.994586][ T795] usb 3-1: config 0 has no interface number 0 [ 579.087308][ T795] usb 3-1: config 0 interface 78 altsetting 60 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 579.163196][ T5839] usb 1-1: Using ep0 maxpacket: 16 [ 579.189332][ T5839] usb 1-1: config 0 has an invalid interface number: 109 but max is 0 [ 579.198963][ T5839] usb 1-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 579.220944][ T5839] usb 1-1: config 0 has no interface number 0 [ 579.227270][ T795] usb 3-1: config 0 interface 78 has no altsetting 0 [ 579.270408][ T795] usb 3-1: New USB device found, idVendor=0411, idProduct=0158, bcdDevice=4f.85 [ 579.287587][ T5839] usb 1-1: New USB device found, idVendor=0421, idProduct=0094, bcdDevice=28.8e [ 579.300201][ T5839] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.399656][ T5839] usb 1-1: Product: syz [ 579.405516][ T795] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.420352][ T5839] usb 1-1: Manufacturer: syz [ 579.425185][ T5839] usb 1-1: SerialNumber: syz [ 579.432025][ T795] usb 3-1: config 0 descriptor?? [ 579.483301][ T5839] usb 1-1: config 0 descriptor?? [ 579.712739][ T795] usb 3-1: string descriptor 0 read error: -71 [ 579.789170][ T795] usb 3-1: USB disconnect, device number 74 [ 579.828500][T12609] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1869'. [ 581.450922][T12644] fuse: Unknown parameter '' [ 581.725830][ T5943] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 581.769923][ T5839] rndis_host 1-1:0.109: More than one union descriptor, skipping ... [ 581.803203][ T5839] usb 1-1: bad CDC descriptors [ 581.817673][ T5839] cdc_acm 1-1:0.109: More than one union descriptor, skipping ... [ 581.863348][ T5839] usb 1-1: USB disconnect, device number 81 [ 581.918354][ T5943] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 581.960897][ T5943] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 581.984375][ T5943] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 582.000774][ T5943] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.050835][T12653] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1881'. [ 582.053374][ T5943] usb 5-1: config 0 descriptor?? [ 582.373956][T12668] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1885'. [ 582.412228][T12668] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1885'. [ 582.717539][ T5943] usbhid 5-1:0.0: can't add hid device: -32 [ 582.725565][ T5943] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 582.745367][T12646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.792991][T12646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 584.285961][ T5943] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 584.289047][ T981] usb 5-1: USB disconnect, device number 93 [ 584.456073][ T5943] usb 2-1: Using ep0 maxpacket: 16 [ 584.464027][ T5943] usb 2-1: config 0 has an invalid interface number: 109 but max is 0 [ 584.482965][ T5943] usb 2-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 584.545278][ T5943] usb 2-1: config 0 has no interface number 0 [ 584.660543][ T5943] usb 2-1: New USB device found, idVendor=0421, idProduct=0094, bcdDevice=28.8e [ 584.675944][ T5943] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.710368][ T5943] usb 2-1: Product: syz [ 584.714601][ T5943] usb 2-1: Manufacturer: syz [ 584.738376][T12696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1893'. [ 584.760863][ T5943] usb 2-1: SerialNumber: syz [ 584.781146][T12696] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1893'. [ 584.866584][ T5943] usb 2-1: config 0 descriptor?? [ 585.112947][T12705] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1896'. [ 585.184562][T12693] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1892'. [ 585.215967][ T981] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 585.430488][ T981] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 585.441166][T12709] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1897'. [ 585.445838][ T981] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.456878][T12709] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1897'. [ 585.458709][ T30] audit: type=1326 audit(1765113855.936:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12708 comm="syz.3.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbee158f749 code=0x7ffc0000 [ 585.500556][ T981] usb 1-1: Product: syz [ 585.504863][ T981] usb 1-1: Manufacturer: syz [ 585.521850][ T981] usb 1-1: SerialNumber: syz [ 585.600886][ T30] audit: type=1326 audit(1765113855.936:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12708 comm="syz.3.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbee158f749 code=0x7ffc0000 [ 585.624464][ T981] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 585.710738][ T5839] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 585.901936][ T30] audit: type=1326 audit(1765113855.936:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12708 comm="syz.3.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbee158f749 code=0x7ffc0000 [ 585.947296][T12698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 585.972018][T12698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 586.137882][ T30] audit: type=1326 audit(1765113855.936:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12708 comm="syz.3.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbee158f749 code=0x7ffc0000 [ 586.275950][ T30] audit: type=1326 audit(1765113855.936:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12708 comm="syz.3.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fbee158f749 code=0x7ffc0000 [ 586.306020][ T30] audit: type=1326 audit(1765113855.936:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12708 comm="syz.3.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbee158f749 code=0x7ffc0000 [ 586.413687][T12720] bond1: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 586.487283][ T5833] usb 1-1: USB disconnect, device number 82 [ 586.763260][T12720] bond1 (unregistering): Released all slaves [ 586.769352][ T30] audit: type=1326 audit(1765113855.936:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12708 comm="syz.3.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7fbee158f749 code=0x7ffc0000 [ 586.840751][ T5839] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 586.870553][ T5839] ath9k_htc: Failed to initialize the device [ 586.932398][ T30] audit: type=1326 audit(1765113855.956:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12708 comm="syz.3.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbee158f749 code=0x7ffc0000 [ 586.959936][ T5833] usb 1-1: ath9k_htc: USB layer deinitialized [ 586.985928][ T30] audit: type=1326 audit(1765113855.956:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12708 comm="syz.3.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fbee158f749 code=0x7ffc0000 [ 587.032592][ T30] audit: type=1326 audit(1765113855.956:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12708 comm="syz.3.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbee158f749 code=0x7ffc0000 [ 587.098464][ T5943] rndis_host 2-1:0.109: More than one union descriptor, skipping ... [ 587.138440][ T5943] usb 2-1: bad CDC descriptors [ 587.153436][ T5943] cdc_acm 2-1:0.109: More than one union descriptor, skipping ... [ 587.208339][ T5943] usb 2-1: USB disconnect, device number 95 [ 587.265823][ T981] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 587.591238][ T981] usb 5-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.02 [ 587.600605][ T981] usb 5-1: New USB device strings: Mfr=0, Product=232, SerialNumber=255 [ 587.609552][ T981] usb 5-1: Product: syz [ 587.623206][ T981] usb 5-1: SerialNumber: syz [ 587.938357][ T981] usb 5-1: config 0 descriptor?? [ 589.631540][T12757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 589.655536][T12757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 589.697455][ T981] ldusb 5-1:0.0: Interrupt in endpoint not found [ 589.714787][T12759] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1911'. [ 589.743316][T12760] tipc: Enabled bearer , priority 0 [ 589.750686][T12760] syzkaller0: entered promiscuous mode [ 589.756704][T12760] syzkaller0: entered allmulticast mode [ 589.790158][T12759] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1911'. [ 589.825009][T12760] tipc: Resetting bearer [ 589.846118][ T981] usb 5-1: USB disconnect, device number 94 [ 590.295827][ T981] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 590.449166][ T981] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 590.572391][ T981] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 590.622516][ T981] usb 1-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 590.641939][ T981] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.671508][ T981] usb 1-1: config 0 descriptor?? [ 590.765816][ T9] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 590.837243][ T5943] tipc: Node number set to 2215705821 [ 590.915918][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 590.929091][ T9] usb 2-1: config 0 has an invalid interface number: 109 but max is 0 [ 590.939142][ T9] usb 2-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 590.950638][ T9] usb 2-1: config 0 has no interface number 0 [ 590.965832][ T9] usb 2-1: New USB device found, idVendor=0421, idProduct=0094, bcdDevice=28.8e [ 590.979827][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.003258][ T9] usb 2-1: Product: syz [ 591.017956][ T9] usb 2-1: Manufacturer: syz [ 591.026886][ T9] usb 2-1: SerialNumber: syz [ 591.050164][ T9] usb 2-1: config 0 descriptor?? [ 591.124343][ T981] lenovo 0003:17EF:60EE.001E: hidraw0: USB HID v0.00 Device [HID 17ef:60ee] on usb-dummy_hcd.0-1/input0 [ 591.282253][T12770] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1914'. [ 591.325295][ T981] usb 1-1: USB disconnect, device number 83 [ 591.355618][T12773] fido_id[12773]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 592.427177][ T981] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 592.609482][ T981] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 592.621177][ T981] usb 3-1: config 1 has no interface number 0 [ 592.628776][ T981] usb 3-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 592.640951][ T981] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 592.665284][ T981] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 592.682327][ T981] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 592.693211][ T981] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.701605][ T981] usb 3-1: Product: syz [ 592.712223][ T981] usb 3-1: Manufacturer: syz [ 592.717515][ T981] usb 3-1: SerialNumber: syz [ 592.733872][T12785] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 592.888541][ T24] usb 1-1: new full-speed USB device number 84 using dummy_hcd [ 592.954240][T12785] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 593.075435][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 13629, setting to 64 [ 593.155940][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 593.178487][ T981] usb 3-1: Incompatible driver and firmware versions [ 593.188456][ T24] usb 1-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 593.201056][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.222387][ T24] usb 1-1: config 0 descriptor?? [ 593.231874][T12797] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 593.399415][ T10] usb 3-1: USB disconnect, device number 75 [ 593.522252][ T9] rndis_host 2-1:0.109: More than one union descriptor, skipping ... [ 593.543277][ T9] usb 2-1: bad CDC descriptors [ 593.567111][ T9] cdc_acm 2-1:0.109: More than one union descriptor, skipping ... [ 593.594880][ T9] usb 2-1: USB disconnect, device number 96 [ 593.657581][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 593.681054][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 593.700805][ T24] usb 1-1: USB disconnect, device number 84 [ 593.765538][T12802] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1923'. [ 595.141250][ T9] IPVS: starting estimator thread 0... [ 595.307220][T12819] IPVS: using max 48 ests per chain, 115200 per kthread [ 595.370050][T12757] tipc: Resetting bearer [ 595.686223][T12757] tipc: Disabling bearer [ 595.765783][ T10] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 595.940560][T12827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 595.963986][T12827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 595.993951][ T10] usb 2-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.02 [ 596.034302][ T10] usb 2-1: New USB device strings: Mfr=0, Product=232, SerialNumber=255 [ 596.055564][ T10] usb 2-1: Product: syz [ 596.068265][T12827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 596.086400][T12827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 596.106398][ T10] usb 2-1: SerialNumber: syz [ 596.148670][ T10] usb 2-1: config 0 descriptor?? [ 596.478862][T12833] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1929'. [ 596.755864][ T24] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 596.806744][T12839] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1931'. [ 596.857313][T12839] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1931'. [ 596.883730][T12842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 596.892654][ T24] usb 5-1: device descriptor read/64, error -71 [ 596.914267][T12842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.010365][T12842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 597.022417][T12842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.045491][T12842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 597.066633][T12842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.135854][ T24] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 597.265944][ T24] usb 5-1: device descriptor read/64, error -71 [ 597.377393][ T24] usb usb5-port1: attempt power cycle [ 597.514887][T12851] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1933'. [ 597.555977][ T981] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 597.765846][ T24] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 597.786102][ T981] usb 1-1: Using ep0 maxpacket: 32 [ 597.793515][ T981] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 597.805258][ T24] usb 5-1: device descriptor read/8, error -71 [ 597.820152][ T981] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 597.847032][ T981] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 597.865586][ T981] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.898012][ T981] usb 1-1: config 0 descriptor?? [ 598.055961][ T24] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 598.088252][ T24] usb 5-1: device descriptor read/8, error -71 [ 598.155222][ T10] ldusb 2-1:0.0: Interrupt in endpoint not found [ 598.219606][ T24] usb usb5-port1: unable to enumerate USB device [ 598.255828][ T10] usb 2-1: USB disconnect, device number 97 [ 598.343621][ T981] savu 0003:1E7D:2D5A.001F: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 598.590228][ T981] usb 1-1: USB disconnect, device number 85 [ 598.679442][T12862] loop2: detected capacity change from 0 to 7 [ 598.710552][T12862] Dev loop2: unable to read RDB block 7 [ 598.740870][T12862] loop2: AHDI p2 p3 [ 598.761908][T12862] loop2: partition table partially beyond EOD, truncated [ 598.800070][T12862] loop2: p3 start 335544320 is beyond EOD, truncated [ 599.177411][ T981] usb 1-1: new full-speed USB device number 86 using dummy_hcd [ 599.235823][ T5833] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 599.371294][ T981] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 599.418698][ T981] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 599.436899][ T981] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 599.452241][ T5833] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 599.463923][ T5833] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 599.513626][ T981] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.523954][ T5833] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 599.584351][ T5833] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 599.597819][ T981] usb 1-1: config 0 descriptor?? [ 599.634389][ T5833] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 599.671555][ T5833] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 599.681269][ T5833] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 599.690440][ T5833] usb 3-1: Product: syz [ 599.695127][ T5833] usb 3-1: Manufacturer: syz [ 599.726672][ T5833] cdc_wdm 3-1:1.0: skipping garbage [ 599.734467][ T5833] cdc_wdm 3-1:1.0: skipping garbage [ 599.851712][T12873] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1940'. [ 599.870585][ T981] usbhid 1-1:0.0: can't add hid device: -71 [ 599.889685][ T5833] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 599.896614][ T981] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 599.913422][ T5833] cdc_wdm 3-1:1.0: Unknown control protocol [ 600.009295][ T981] usb 1-1: USB disconnect, device number 86 [ 600.055163][ T5833] usb 3-1: USB disconnect, device number 76 [ 600.971243][T12883] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1943'. [ 603.252530][T12916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 603.283065][T12916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 603.476069][ T5833] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 603.545833][ T981] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 603.677181][ T5833] usb 5-1: config 0 has an invalid interface number: 78 but max is 0 [ 603.695791][ T5833] usb 5-1: config 0 has no interface number 0 [ 603.705165][ T5833] usb 5-1: config 0 interface 78 altsetting 60 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 603.716541][ T981] usb 3-1: Using ep0 maxpacket: 8 [ 603.756322][ T5833] usb 5-1: config 0 interface 78 has no altsetting 0 [ 603.778822][ T5833] usb 5-1: New USB device found, idVendor=0411, idProduct=0158, bcdDevice=4f.85 [ 603.818593][ T981] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 603.849080][ T5833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.857331][ T981] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.877194][ T981] usb 3-1: Product: syz [ 603.890721][ T5833] usb 5-1: config 0 descriptor?? [ 603.905766][ T981] usb 3-1: Manufacturer: syz [ 603.923750][ T981] usb 3-1: SerialNumber: syz [ 603.946319][ T981] usb 3-1: config 0 descriptor?? [ 604.147673][ T5833] usb 5-1: string descriptor 0 read error: -71 [ 604.181287][ T981] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 604.283820][ T5833] usb 5-1: USB disconnect, device number 99 [ 604.365906][T12926] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1955'. [ 604.408121][T12918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1953'. [ 604.623433][T12918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1953'. [ 604.696379][T12930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 604.746472][T12930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 605.238812][ T981] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 605.283894][ T981] usb 3-1: USB disconnect, device number 77 [ 605.561960][T12942] syzkaller0: entered promiscuous mode [ 605.570001][T12942] syzkaller0: entered allmulticast mode [ 605.666880][T12944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 605.785530][T12944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 606.214318][T12954] @: entered allmulticast mode [ 606.397818][T12951] @: left allmulticast mode [ 606.766628][ T981] usb 2-1: new full-speed USB device number 98 using dummy_hcd [ 606.976266][ T981] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 607.009406][ T981] usb 2-1: config 0 has no interface number 0 [ 607.136095][ T981] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 607.165834][ T981] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.173875][ T981] usb 2-1: Product: syz [ 607.195819][ T981] usb 2-1: Manufacturer: syz [ 607.206126][ T981] usb 2-1: SerialNumber: syz [ 607.234631][T12969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 607.245059][ T981] usb 2-1: config 0 descriptor?? [ 607.270591][ T981] hub 2-1:0.132: bad descriptor, ignoring hub [ 607.277510][T12969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 607.306984][ T981] hub 2-1:0.132: probe with driver hub failed with error -5 [ 607.350845][ T981] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.132/input/input35 [ 607.456277][T12972] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1968'. [ 607.816642][T12976] fuse: Unknown parameter '' [ 608.526284][ T9] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 608.681861][T12991] Invalid logical block size (65445) [ 608.710459][ T9] usb 1-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.02 [ 608.730077][ T9] usb 1-1: New USB device strings: Mfr=0, Product=232, SerialNumber=255 [ 608.781470][ T9] usb 1-1: Product: syz [ 608.796876][ T9] usb 1-1: SerialNumber: syz [ 608.808205][ T9] usb 1-1: config 0 descriptor?? [ 609.213130][ T5943] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 609.422781][T13008] syzkaller0: entered promiscuous mode [ 609.457880][T13008] syzkaller0: entered allmulticast mode [ 609.475841][ T5943] usb 5-1: Using ep0 maxpacket: 16 [ 609.497985][ T5943] usb 5-1: config 0 has an invalid interface number: 109 but max is 0 [ 609.557524][T12967] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1966'. [ 609.579491][ T5943] usb 5-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 609.607538][ T5943] usb 5-1: config 0 has no interface number 0 [ 609.919154][ T5943] usb 5-1: New USB device found, idVendor=0421, idProduct=0094, bcdDevice=28.8e [ 610.049173][ T10] usb 2-1: USB disconnect, device number 98 [ 610.055340][ T5943] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.094016][ T5943] usb 5-1: Product: syz [ 610.143899][ T5943] usb 5-1: Manufacturer: syz [ 610.182385][ T5943] usb 5-1: SerialNumber: syz [ 610.211064][ T5943] usb 5-1: config 0 descriptor?? [ 610.306298][ T10] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 610.495892][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 610.504604][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 610.529965][ T10] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 610.539956][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.554138][ T10] usb 2-1: Product: syz [ 610.576934][ T10] usb 2-1: Manufacturer: syz [ 610.600945][ T10] usb 2-1: SerialNumber: syz [ 610.624696][ T10] usb 2-1: config 0 descriptor?? [ 610.651784][ T10] streamzap 2-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 610.723904][T12999] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1973'. [ 610.897822][ T5958] usb 2-1: USB disconnect, device number 99 [ 611.056618][ T9] ldusb 1-1:0.0: Interrupt in endpoint not found [ 611.093218][ T9] usb 1-1: USB disconnect, device number 87 [ 611.605813][ T9] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 611.777835][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 611.868511][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 611.895996][ T9] usb 1-1: too many configurations: 89, using maximum allowed: 8 [ 612.006882][ T9] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 612.014622][ T9] usb 1-1: can't read configurations, error -61 [ 612.176168][ T5958] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 612.195962][ T9] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 612.252206][T13024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 612.320423][T13024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 612.369785][ T5958] usb 2-1: config 0 has an invalid interface number: 78 but max is 0 [ 612.389774][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 612.395565][ T5958] usb 2-1: config 0 has no interface number 0 [ 612.407916][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 612.451152][ T5958] usb 2-1: config 0 interface 78 altsetting 60 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 612.469869][ T9] usb 1-1: too many configurations: 89, using maximum allowed: 8 [ 612.496129][ T5958] usb 2-1: config 0 interface 78 has no altsetting 0 [ 612.504931][ T9] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 612.515997][ T5958] usb 2-1: New USB device found, idVendor=0411, idProduct=0158, bcdDevice=4f.85 [ 612.532677][ T9] usb 1-1: can't read configurations, error -61 [ 612.563167][ T5958] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.572166][ T9] usb usb1-port1: attempt power cycle [ 612.615277][ T5958] usb 2-1: config 0 descriptor?? [ 612.726811][ T5943] rndis_host 5-1:0.109: More than one union descriptor, skipping ... [ 612.735901][ T5943] usb 5-1: bad CDC descriptors [ 612.742421][ T5943] cdc_acm 5-1:0.109: More than one union descriptor, skipping ... [ 612.796888][ T5943] usb 5-1: USB disconnect, device number 100 [ 612.824306][ T5958] usb 2-1: string descriptor 0 read error: -71 [ 612.848828][ T5958] usb 2-1: USB disconnect, device number 100 [ 612.899134][T13030] Invalid logical block size (65446) [ 612.916195][ T9] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 612.948978][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 612.969900][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 612.986536][ T9] usb 1-1: too many configurations: 89, using maximum allowed: 8 [ 613.003078][ T9] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 613.011030][ T9] usb 1-1: can't read configurations, error -61 [ 613.087193][T13039] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1986'. [ 613.207623][ T9] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 613.247158][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 613.258507][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 613.267376][ T9] usb 1-1: too many configurations: 89, using maximum allowed: 8 [ 613.285232][ T9] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 613.304875][ T9] usb 1-1: can't read configurations, error -61 [ 613.325360][ T9] usb usb1-port1: unable to enumerate USB device [ 614.182685][T13051] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1990'. [ 614.365823][ T981] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 614.672423][ T981] usb 2-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.02 [ 614.694868][ T981] usb 2-1: New USB device strings: Mfr=0, Product=232, SerialNumber=255 [ 614.728899][ T981] usb 2-1: Product: syz [ 614.730562][T13056] input: syz0 as /devices/virtual/input/input36 [ 614.737238][ T981] usb 2-1: SerialNumber: syz [ 614.761491][ T981] usb 2-1: config 0 descriptor?? [ 615.005175][T13047] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1989'. [ 615.041015][T13059] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 615.041420][ T5943] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 615.084318][T13059] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 615.105242][T13059] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 615.127628][T13059] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 615.145188][T13059] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 615.229889][ T5943] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 615.241325][ T5943] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 615.254499][ T5943] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 615.268469][ T5943] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 615.299597][ T5943] usb 1-1: SerialNumber: syz [ 615.710656][T13056] sctp: [Deprecated]: syz.0.1991 (pid 13056) Use of int in max_burst socket option deprecated. [ 615.710656][T13056] Use struct sctp_assoc_value instead [ 616.951814][ T981] ldusb 2-1:0.0: Interrupt in endpoint not found [ 617.015929][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 617.074568][ T981] usb 2-1: USB disconnect, device number 101 [ 617.167424][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 617.173639][ T52] Bluetooth: hci4: command 0x0c1a tx timeout [ 617.174610][ T5844] Bluetooth: hci3: command 0x0c1a tx timeout [ 617.179917][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 617.198661][T13081] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1997'. [ 617.213313][T13081] fuse: Bad value for 'group_id' [ 617.218708][T13081] fuse: Bad value for 'group_id' [ 617.637428][ T5943] usb 1-1: 0:2 : does not exist [ 617.642358][ T5943] usb 1-1: unit 5 not found! [ 617.752108][ T5943] usb 1-1: USB disconnect, device number 92 [ 617.854604][ T5841] udevd[5841]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 617.986236][ T5958] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 618.125812][ T5958] usb 2-1: device descriptor read/64, error -71 [ 618.386321][ T5958] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 618.475914][ T981] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 618.535896][ T5958] usb 2-1: device descriptor read/64, error -71 [ 618.686279][ T5958] usb usb2-port1: attempt power cycle [ 618.745844][ T981] usb 1-1: Using ep0 maxpacket: 16 [ 618.759459][ T981] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 618.780097][ T981] usb 1-1: config 0 has no interface number 0 [ 618.792070][ T981] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 618.817899][ T981] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 618.843084][ T981] usb 1-1: config 0 interface 41 has no altsetting 0 [ 618.872455][ T981] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 618.893784][ T981] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.915590][T13094] netlink: 'syz.4.2003': attribute type 10 has an invalid length. [ 618.924081][ T981] usb 1-1: Product: syz [ 618.942959][ T981] usb 1-1: Manufacturer: syz [ 618.948057][T13094] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 618.955743][ T981] usb 1-1: SerialNumber: syz [ 618.973382][ T981] usb 1-1: config 0 descriptor?? [ 618.993508][T13088] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 619.006173][T13088] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 619.046063][ T5958] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 619.077647][ T5958] usb 2-1: device descriptor read/8, error -71 [ 619.267693][T13088] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 619.275100][T13088] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 619.335810][ T5958] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 619.357344][ T5958] usb 2-1: device descriptor read/8, error -71 [ 619.466416][ T5958] usb usb2-port1: unable to enumerate USB device [ 619.698092][ T981] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -22 [ 620.652680][T13125] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 620.661010][T13125] batadv_slave_0: entered promiscuous mode [ 620.728728][T13123] tipc: Enabling of bearer rejected, failed to enable media [ 621.029063][T13119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 621.038608][T13119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 621.048265][T13119] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2008'. [ 621.456248][T13140] Invalid logical block size (65481) [ 621.499767][ T5958] usb 1-1: USB disconnect, device number 93 [ 622.009573][ T5958] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 622.290050][ T5958] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 622.412864][ T5958] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 622.422403][ T5958] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.468873][ T5958] usb 2-1: Product: syz [ 622.482361][ T5958] usb 2-1: Manufacturer: syz [ 622.491802][ T5958] usb 2-1: SerialNumber: syz [ 622.585395][ T5958] usb 2-1: config 0 descriptor?? [ 624.040636][T13166] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2019'. [ 624.474978][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.481534][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.875896][ T5958] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 624.937885][T13175] Invalid logical block size (65508) [ 625.052216][ T5958] usb 3-1: Using ep0 maxpacket: 8 [ 625.061141][ T5958] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 625.069581][ T5958] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 625.107341][ T5958] usb 3-1: config 0 has no interface number 0 [ 625.148796][ T5958] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 625.172203][ T5958] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.192013][ T5958] usb 3-1: Product: syz [ 625.203093][ T5958] usb 3-1: Manufacturer: syz [ 625.213930][ T5958] usb 3-1: SerialNumber: syz [ 625.244287][ T5958] usb 3-1: config 0 descriptor?? [ 625.265608][ T5958] uvcvideo 3-1:0.31: Found UVC 0.00 device syz (046d:08c3) [ 625.284625][ T5958] uvcvideo 3-1:0.31: No valid video chain found. [ 625.356372][ T5943] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 625.471490][ T981] usb 2-1: USB disconnect, device number 106 [ 625.505882][ T5943] usb 1-1: device descriptor read/64, error -71 [ 625.612898][T13178] netlink: 'syz.2.2023': attribute type 4 has an invalid length. [ 625.714562][T13171] netlink: 'syz.2.2023': attribute type 4 has an invalid length. [ 625.745872][ T5943] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 625.835041][T13183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2027'. [ 625.876890][ T5943] usb 1-1: device descriptor read/64, error -71 [ 625.901113][T13183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2027'. [ 626.016960][ T5943] usb usb1-port1: attempt power cycle [ 626.378212][ T5943] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 626.416334][ T5943] usb 1-1: device descriptor read/8, error -71 [ 626.705797][ T5943] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 627.534361][ T5943] usb 1-1: device descriptor read/8, error -71 [ 627.615922][ T981] usb 3-1: USB disconnect, device number 78 [ 627.646202][ T5943] usb usb1-port1: unable to enumerate USB device [ 627.835955][ T5833] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 628.002991][ T5833] usb 5-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.02 [ 628.052978][ T5833] usb 5-1: New USB device strings: Mfr=0, Product=232, SerialNumber=255 [ 628.076283][ T5833] usb 5-1: Product: syz [ 628.098008][ T5833] usb 5-1: SerialNumber: syz [ 628.159045][ T5833] usb 5-1: config 0 descriptor?? [ 628.198709][T13210] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 628.247044][T13210] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 628.367920][T13195] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2030'. [ 628.557913][T13210] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 628.570234][T13210] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2035'. [ 628.655816][ T5943] usb 1-1: new full-speed USB device number 98 using dummy_hcd [ 629.128125][ T5943] usb 1-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=e4.fb [ 629.139113][ T5943] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.274079][ T5943] usb 1-1: config 0 descriptor?? [ 629.691840][ T5943] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state. [ 629.798562][ T5943] dvb-usb: bulk message failed: -22 (3/0) [ 629.820827][ T5943] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 629.831951][T13212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 629.858227][T13212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 629.925600][ T10] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 630.330123][ T5943] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2) [ 630.344250][ T5833] ldusb 5-1:0.0: Interrupt in endpoint not found [ 630.367711][T13212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 630.392889][ T5943] usb 1-1: media controller created [ 630.425850][ T5943] dvb-usb: bulk message failed: -22 (5/0) [ 630.431674][ T5943] dvb-usb: MAC address reading failed. [ 630.464406][ T5943] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 630.577308][T13212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 630.598568][ T5943] dvb-usb: bulk message failed: -22 (6/0) [ 630.605011][ T5943] dvb-usb: bulk message failed: -22 (6/0) [ 630.646464][ T10] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 630.706423][ T10] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 630.720038][ T5943] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2' [ 630.720680][ T5833] usb 5-1: USB disconnect, device number 101 [ 630.743714][T13212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 630.765457][ T10] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 630.805547][ T5943] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input37 [ 630.808820][T13228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 630.847475][T13228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 630.859624][ T10] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 630.898935][ T5943] dvb-usb: schedule remote query interval to 100 msecs. [ 630.918192][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.938969][ T5943] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected. [ 630.962088][T13212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 631.010955][ T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 631.071623][ T5943] dvb-usb: bulk message failed: -22 (2/0) [ 631.093069][ T5839] usb 1-1: USB disconnect, device number 98 [ 631.153804][ T5943] dvb-usb: error while querying for an remote control event. [ 631.175918][ T5833] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 631.417857][ T5833] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 631.445359][ T5839] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected. [ 631.475280][T13234] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2040'. [ 631.542821][T13221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 631.553976][T13221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 631.573416][T13221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 631.584816][T13221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 631.612021][ T5833] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 631.631171][T13234] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2040'. [ 631.634558][ T10] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 631.705969][ T5841] udevd[5841]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 631.738329][ T5833] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 631.768664][ T5833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.878618][T13231] raw-gadget.7 gadget.4: fail, usb_ep_enable returned -22 [ 631.986084][ T5833] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 632.298935][ T5833] usb 5-1: USB disconnect, device number 102 [ 632.547497][T13247] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 632.784995][T13247] tipc: Resetting bearer [ 632.793568][T13247] tipc: Resetting bearer [ 633.430324][T13261] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2048'. [ 633.556044][ T10] usb 2-1: USB disconnect, device number 107 [ 635.345005][T13291] FAULT_INJECTION: forcing a failure. [ 635.345005][T13291] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 635.385884][ T5839] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 635.437132][T13291] CPU: 0 UID: 0 PID: 13291 Comm: syz.0.2056 Tainted: G L syzkaller #0 PREEMPT(full) [ 635.437169][T13291] Tainted: [L]=SOFTLOCKUP [ 635.437177][T13291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 635.437190][T13291] Call Trace: [ 635.437200][T13291] [ 635.437210][T13291] dump_stack_lvl+0x189/0x250 [ 635.437243][T13291] ? __pfx____ratelimit+0x10/0x10 [ 635.437271][T13291] ? __pfx_dump_stack_lvl+0x10/0x10 [ 635.437296][T13291] ? __pfx__printk+0x10/0x10 [ 635.437326][T13291] ? __might_fault+0xb0/0x130 [ 635.437370][T13291] should_fail_ex+0x414/0x560 [ 635.437401][T13291] _copy_from_user+0x2d/0xb0 [ 635.437433][T13291] ___sys_recvmsg+0x12e/0x510 [ 635.437472][T13291] ? __pfx____sys_recvmsg+0x10/0x10 [ 635.437531][T13291] ? __fget_files+0x3a0/0x420 [ 635.437570][T13291] do_recvmmsg+0x307/0x770 [ 635.437600][T13291] ? __pfx_do_recvmmsg+0x10/0x10 [ 635.437635][T13291] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 635.437684][T13291] __x64_sys_recvmmsg+0x190/0x240 [ 635.437708][T13291] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 635.437733][T13291] ? do_syscall_64+0xbe/0xf80 [ 635.437765][T13291] do_syscall_64+0xfa/0xf80 [ 635.437793][T13291] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.437814][T13291] ? clear_bhb_loop+0x60/0xb0 [ 635.437840][T13291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.437860][T13291] RIP: 0033:0x7fd89378f749 [ 635.437880][T13291] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 635.437898][T13291] RSP: 002b:00007fd8919d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 635.437931][T13291] RAX: ffffffffffffffda RBX: 00007fd8939e6090 RCX: 00007fd89378f749 [ 635.437947][T13291] RDX: 0000000000000001 RSI: 0000200000004a80 RDI: 0000000000000003 [ 635.437960][T13291] RBP: 00007fd8919d5090 R08: 0000000000000000 R09: 0000000000000000 [ 635.437974][T13291] R10: 45833af92e4b39ff R11: 0000000000000246 R12: 0000000000000001 [ 635.437988][T13291] R13: 00007fd8939e6128 R14: 00007fd8939e6090 R15: 00007fd893b0fa28 [ 635.438023][T13291] [ 635.842998][T13301] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2061'. [ 635.868943][ T5839] usb 2-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.02 [ 635.935377][ T5839] usb 2-1: New USB device strings: Mfr=0, Product=232, SerialNumber=255 [ 635.954260][ T5839] usb 2-1: Product: syz [ 635.962038][ T5839] usb 2-1: SerialNumber: syz [ 635.995194][ T5839] usb 2-1: config 0 descriptor?? [ 636.258741][T13268] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2049'. [ 636.714160][T13307] Invalid logical block size (16777216) [ 637.445983][ T9] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 637.606217][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 637.615839][ T9] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 637.678258][ T9] usb 1-1: config 0 has no interface number 0 [ 637.706343][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 637.737524][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.784827][ T9] usb 1-1: Product: syz [ 637.810030][ T9] usb 1-1: Manufacturer: syz [ 637.844694][ T9] usb 1-1: SerialNumber: syz [ 637.886875][ T9] usb 1-1: config 0 descriptor?? [ 638.115970][ T9] uvcvideo 1-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 638.138258][ T9] uvcvideo 1-1:0.31: Failed to initialize entity for entity 6 [ 638.140030][ T5839] ldusb 2-1:0.0: Interrupt in endpoint not found [ 638.195949][ T9] uvcvideo 1-1:0.31: Failed to register entities (-22). [ 638.290623][ T5839] usb 2-1: USB disconnect, device number 108 [ 638.527186][T13330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 638.577697][T13330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 638.842730][ T9] usb 2-1: new full-speed USB device number 109 using dummy_hcd [ 638.956132][T13344] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2072'. [ 639.021985][ T9] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 639.049043][ T9] usb 2-1: config 1 has no interface number 0 [ 639.067023][ T9] usb 2-1: config 1 interface 105 has no altsetting 0 [ 639.086907][ T9] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=31.6d [ 639.096399][ T9] usb 2-1: New USB device strings: Mfr=107, Product=102, SerialNumber=146 [ 639.104987][ T9] usb 2-1: Product: syz [ 639.115140][ T9] usb 2-1: Manufacturer: syz [ 639.120917][ T9] usb 2-1: SerialNumber: syz [ 639.338394][T13353] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2075'. [ 639.390570][T13353] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2075'. [ 639.751440][T13368] netlink: 'syz.4.2079': attribute type 27 has an invalid length. [ 639.776366][ T9] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 639.825980][ T9] aqc111 2-1:1.105: probe with driver aqc111 failed with error -71 [ 639.967519][ T9] usb 2-1: USB disconnect, device number 109 [ 640.249853][ T5839] usb 1-1: USB disconnect, device number 99 [ 640.766967][ T5839] usb 1-1: new low-speed USB device number 100 using dummy_hcd [ 640.987924][ T5839] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 640.997817][ T5839] usb 1-1: config 0 has no interface number 0 [ 641.004880][ T5839] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 641.083655][ T5839] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 641.185746][ T5839] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 641.248364][ T5839] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 641.285897][ T5839] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 641.308613][ T5839] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 641.340096][ T5839] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 641.602396][ T5839] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.625856][ T5839] usb 1-1: config 0 descriptor?? [ 641.683167][T13377] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 641.692704][T13377] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 641.717612][ T5839] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 641.778881][T13368] batadv_slave_0: left promiscuous mode [ 641.791267][T13368] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 641.955105][ T5943] usb 1-1: USB disconnect, device number 100 [ 641.955171][ C0] ldusb 1-1:0.55: usb_submit_urb failed (-19) [ 641.999540][ T5943] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 642.216556][T13377] ldusb: No device or device unplugged -19 [ 642.314239][T13368] sit1: left allmulticast mode [ 642.354953][ T6368] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 642.368395][ T6368] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.387694][ T6368] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 642.437069][ T6368] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.691881][ T6368] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 642.754876][ T6368] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.784965][ T6368] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 642.830236][ T6368] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.984008][T13396] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2089'. [ 643.013997][T13396] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2089'. [ 643.024999][T13398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 643.054715][T13398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 643.058814][T13400] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2091'. [ 643.064396][ T5943] usb 5-1: new full-speed USB device number 103 using dummy_hcd [ 643.248467][ T5943] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 643.288363][ T5943] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 643.343204][ T5943] usb 5-1: config 0 interface 0 has no altsetting 0 [ 643.371194][ T5943] usb 5-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 643.384304][ T5943] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.403876][ T5943] usb 5-1: config 0 descriptor?? [ 643.496940][T13417] netlink: 'syz.1.2094': attribute type 10 has an invalid length. [ 643.539505][T13417] batman_adv: batadv0: Adding interface: netdevsim0 [ 643.658579][T13417] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 644.025870][T13417] batman_adv: batadv0: Interface activated: netdevsim0 [ 644.055777][ T5943] usbhid 5-1:0.0: can't add hid device: -71 [ 644.061927][ T5943] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 644.110869][ T5943] usb 5-1: USB disconnect, device number 103 [ 644.430338][T13422] binder_alloc: 13421: pid 13421 spamming oneway? 1 buffers allocated for a total size of 4096 [ 644.491846][T13427] binder_alloc: 13421: pid 13421 spamming oneway? 2 buffers allocated for a total size of 5120 [ 644.851997][T13440] ip6tnl0: Caught tx_queue_len zero misconfig [ 644.881514][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 644.881534][ T30] audit: type=1800 audit(1765113915.366:419): pid=13441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2101" name="bus" dev="tmpfs" ino=2273 res=0 errno=0 [ 645.053987][T13445] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2102'. [ 645.094554][T13445] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2102'. [ 645.476867][ T10] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 645.545885][ T5943] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 645.659898][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 645.672032][ T10] usb 1-1: config 162 has an invalid interface number: 166 but max is 0 [ 645.685907][ T10] usb 1-1: config 162 has an invalid descriptor of length 0, skipping remainder of the config [ 645.701342][ T10] usb 1-1: config 162 has no interface number 0 [ 645.734875][ T10] usb 1-1: config 162 interface 166 altsetting 1 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 645.747766][ T5943] usb 2-1: Using ep0 maxpacket: 16 [ 645.760394][ T5943] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 645.774621][ T10] usb 1-1: config 162 interface 166 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 645.787289][ T5943] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 645.804967][ T10] usb 1-1: config 162 interface 166 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 645.821804][ T5943] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 645.852766][ T10] usb 1-1: config 162 interface 166 has no altsetting 0 [ 645.863595][ T5943] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 645.883504][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=921d, bcdDevice=d3.ea [ 645.906728][ T5943] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.926922][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.951543][ T5943] usb 2-1: config 0 descriptor?? [ 645.967448][ T10] usb 1-1: Product: syz [ 645.975520][ T10] usb 1-1: Manufacturer: syz [ 646.000291][ T10] usb 1-1: SerialNumber: syz [ 646.079991][T13469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 646.126750][T13469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 646.300133][ T10] appledisplay 1-1:162.166: Could not find int-in endpoint [ 646.317416][ T10] usbhid 1-1:162.166: couldn't find an input interrupt endpoint [ 646.349821][ T10] usb 1-1: USB disconnect, device number 101 [ 646.423703][T13454] random: crng reseeded on system resumption [ 646.590365][T13454] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2104'. [ 646.599788][T13454] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 646.650642][ T5943] usbhid 2-1:0.0: can't add hid device: -71 [ 646.659202][ T5943] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 646.692773][ T5943] usb 2-1: USB disconnect, device number 110 [ 647.816589][ T10] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 648.029330][T13493] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2116'. [ 648.038694][T13493] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2116'. [ 648.123006][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 648.144826][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 648.169858][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.200533][ T10] usb 2-1: Product: syz [ 648.215912][ T10] usb 2-1: Manufacturer: syz [ 648.232724][ T10] usb 2-1: SerialNumber: syz [ 648.273431][ T10] usb 2-1: config 0 descriptor?? [ 650.270839][T13525] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 650.305779][ T30] audit: type=1326 audit(1765113920.776:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13494 comm="syz.2.2117" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f097b98f749 code=0x0 [ 651.229038][T13546] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2129'. [ 651.257265][ T10] usb 2-1: USB disconnect, device number 111 [ 651.685821][ T10] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 651.849717][ T10] usb 2-1: config 124 has an invalid interface number: 9 but max is 1 [ 651.858817][ T10] usb 2-1: config 124 has an invalid interface number: 199 but max is 1 [ 651.867877][ T10] usb 2-1: config 124 has no interface number 0 [ 651.874504][ T10] usb 2-1: config 124 has no interface number 1 [ 651.881828][ T10] usb 2-1: config 124 interface 9 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 651.895131][ T9] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 651.907243][ T10] usb 2-1: config 124 interface 9 has no altsetting 0 [ 651.918200][ T10] usb 2-1: New USB device found, idVendor=19d2, idProduct=ff85, bcdDevice=90.ec [ 651.930767][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.939290][ T10] usb 2-1: Product: ъ [ 651.943568][ T10] usb 2-1: Manufacturer: ဇ [ 651.951181][ T10] usb 2-1: SerialNumber: Ф [ 651.985965][ T5943] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 652.068796][ T9] usb 3-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid wMaxPacketSize 0 [ 652.080328][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 652.100833][ T9] usb 3-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 652.120220][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.143137][ T9] usb 3-1: config 0 descriptor?? [ 652.148788][ T5943] usb 1-1: Using ep0 maxpacket: 16 [ 652.158501][ T5943] usb 1-1: config 0 interface 0 has no altsetting 0 [ 652.165569][ T5943] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 652.176824][T13552] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2132'. [ 652.203487][ T5943] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.225940][T13552] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2132'. [ 652.238218][ T5943] usb 1-1: config 0 descriptor?? [ 652.313753][ T10] option 2-1:124.9: GSM modem (1-port) converter detected [ 652.352829][ T10] usb 2-1: USB disconnect, device number 112 [ 652.372199][ T10] option 2-1:124.9: device disconnected [ 652.493520][ T5943] usbhid 1-1:0.0: can't add hid device: -71 [ 652.501291][ T5943] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 652.526372][ T5943] usb 1-1: USB disconnect, device number 102 [ 652.603802][ T9] uclogic 0003:5543:0781.0020: item fetching failed at offset 2/5 [ 652.627109][ T9] uclogic 0003:5543:0781.0020: parse failed [ 652.636464][ T9] uclogic 0003:5543:0781.0020: probe with driver uclogic failed with error -22 [ 652.806445][ T9] usb 3-1: USB disconnect, device number 79 [ 653.306448][ T5943] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 653.325447][T13597] loop2: detected capacity change from 0 to 7 [ 653.339530][T13597] Dev loop2: unable to read RDB block 7 [ 653.369259][T13597] loop2: unable to read partition table [ 653.388604][T13597] loop2: partition table beyond EOD, truncated [ 653.413961][T13597] loop_reread_partitions: partition scan of loop2 (被x, ) failed (rc=-5) [ 653.488626][ T5943] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 653.531016][ T5943] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 653.558919][ T5943] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 653.582165][ T5943] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 653.643599][ T5943] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.868979][ T5943] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 653.949006][ T5841] udevd[5841]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 653.978016][ T5943] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 654.080108][T13588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 654.102823][T13588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 654.121023][T13588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 654.179907][T13588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 654.253378][ T5943] usb 5-1: USB disconnect, device number 104 [ 655.565834][ T5943] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 655.812962][ T5943] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 655.825966][ T5943] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 655.836290][ T5943] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 655.853603][ T5943] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.863921][ T5943] usb 1-1: config 0 descriptor?? [ 656.310544][ T5943] hid-steam 0003:28DE:1142.0021: unknown main item tag 0x0 [ 656.338842][ T5943] hid-steam 0003:28DE:1142.0021: unknown main item tag 0x0 [ 656.360240][ T5943] hid-steam 0003:28DE:1142.0021: unknown main item tag 0x0 [ 656.400009][ T5943] hid-steam 0003:28DE:1142.0021: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 656.510675][T13638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 656.647535][ T5943] usb 1-1: USB disconnect, device number 103 [ 656.705928][ T5833] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 656.714304][ C1] raw-gadget.2 gadget.1: ignoring, device is not running [ 656.749165][T13644] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2161'. [ 656.756049][T13638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 656.866805][ T5833] usb 2-1: device descriptor read/64, error -32 [ 656.987505][ T24] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 657.125958][ T5833] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 657.166039][ T24] usb 3-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.02 [ 657.185457][ T24] usb 3-1: New USB device strings: Mfr=0, Product=232, SerialNumber=255 [ 657.238767][ T24] usb 3-1: Product: syz [ 657.243045][ T24] usb 3-1: SerialNumber: syz [ 657.301701][ T24] usb 3-1: config 0 descriptor?? [ 657.694636][T13667] FAULT_INJECTION: forcing a failure. [ 657.694636][T13667] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 657.708779][T13667] CPU: 0 UID: 0 PID: 13667 Comm: syz.4.2170 Tainted: G L syzkaller #0 PREEMPT(full) [ 657.708813][T13667] Tainted: [L]=SOFTLOCKUP [ 657.708821][T13667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 657.708832][T13667] Call Trace: [ 657.708841][T13667] [ 657.708849][T13667] dump_stack_lvl+0x189/0x250 [ 657.708881][T13667] ? __pfx____ratelimit+0x10/0x10 [ 657.708907][T13667] ? __pfx_dump_stack_lvl+0x10/0x10 [ 657.708932][T13667] ? __pfx__printk+0x10/0x10 [ 657.708976][T13667] should_fail_ex+0x414/0x560 [ 657.709007][T13667] _copy_to_user+0x31/0xb0 [ 657.709040][T13667] simple_read_from_buffer+0xe1/0x170 [ 657.709072][T13667] proc_fail_nth_read+0x1b3/0x220 [ 657.709099][T13667] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 657.709125][T13667] ? rw_verify_area+0x2a6/0x4d0 [ 657.709144][T13667] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 657.709168][T13667] vfs_read+0x200/0xa30 [ 657.709188][T13667] ? fdget_pos+0x247/0x320 [ 657.709219][T13667] ? __pfx___mutex_lock+0x10/0x10 [ 657.709249][T13667] ? __pfx_vfs_read+0x10/0x10 [ 657.709271][T13667] ? __fget_files+0x2a/0x420 [ 657.709302][T13667] ? __fget_files+0x3a0/0x420 [ 657.709326][T13667] ? __fget_files+0x2a/0x420 [ 657.709361][T13667] ksys_read+0x145/0x250 [ 657.709386][T13667] ? __pfx_ksys_read+0x10/0x10 [ 657.709411][T13667] ? do_syscall_64+0xbe/0xf80 [ 657.709441][T13667] do_syscall_64+0xfa/0xf80 [ 657.709475][T13667] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.709505][T13667] ? clear_bhb_loop+0x60/0xb0 [ 657.709531][T13667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.709551][T13667] RIP: 0033:0x7f230c38e15c [ 657.709570][T13667] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 657.709599][T13667] RSP: 002b:00007f230d262030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 657.709624][T13667] RAX: ffffffffffffffda RBX: 00007f230c5e5fa0 RCX: 00007f230c38e15c [ 657.709641][T13667] RDX: 000000000000000f RSI: 00007f230d2620a0 RDI: 0000000000000004 [ 657.709655][T13667] RBP: 00007f230d262090 R08: 0000000000000000 R09: 0000000000000000 [ 657.709668][T13667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 657.709682][T13667] R13: 00007f230c5e6038 R14: 00007f230c5e5fa0 R15: 00007f230c70fa28 [ 657.709716][T13667] [ 658.266328][ T5943] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 658.436727][ T5943] usb 1-1: device descriptor read/64, error -71 [ 658.686180][ T5943] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 658.745839][ T5839] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 658.880661][ T5943] usb 1-1: device descriptor read/64, error -71 [ 658.973341][ T5839] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 658.988145][ T5839] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 659.024893][ T5839] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 659.026354][ T5943] usb usb1-port1: attempt power cycle [ 659.127810][ T5839] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 659.286113][ T5839] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.391576][ T5839] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 659.415802][ T5943] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 659.508978][ T5943] usb 1-1: device descriptor read/8, error -71 [ 659.616439][ T24] ldusb 3-1:0.0: Interrupt in endpoint not found [ 659.656903][T13676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 659.672592][ T24] usb 3-1: USB disconnect, device number 80 [ 659.788666][T13676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 659.806145][ T5943] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 659.919857][ T5839] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 659.936676][ T5943] usb 1-1: device descriptor read/8, error -71 [ 659.961842][T13676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 659.979820][T13676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 659.997099][ T5854] udevd[5854]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 660.120598][ T5943] usb usb1-port1: unable to enumerate USB device [ 661.425807][ T5839] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 661.588536][ T5839] usb 3-1: config 0 has an invalid interface number: 197 but max is 0 [ 661.597343][ T5839] usb 3-1: config 0 has no interface number 0 [ 661.604669][ T5839] usb 3-1: config 0 interface 197 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 661.626618][ T5839] usb 3-1: config 0 interface 197 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 661.661976][ T5839] usb 3-1: config 0 interface 197 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 0 [ 661.698096][ T5839] usb 3-1: config 0 interface 197 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 661.786786][ T5839] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=bb.42 [ 661.796294][ T5839] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.814662][ T5839] usb 3-1: Product: syz [ 661.824756][ T5839] usb 3-1: Manufacturer: syz [ 661.849918][ T5839] usb 3-1: SerialNumber: syz [ 661.885163][ T5839] usb 3-1: config 0 descriptor?? [ 662.055567][ T5839] usb 5-1: USB disconnect, device number 105 [ 662.281806][T13706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 662.316810][T13706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 662.407577][ T5943] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 662.785988][ T5943] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 662.809623][ T5943] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 662.816257][ T5839] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 662.825829][ T5943] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 662.939092][ T5943] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 662.955807][ T5943] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.997325][ T5943] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 663.005788][ T5839] usb 5-1: Using ep0 maxpacket: 8 [ 663.013878][ T5839] usb 5-1: unable to get BOS descriptor or descriptor too short [ 663.090056][ T5839] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 663.258768][ T5839] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 663.468187][T13705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 663.490472][ T5839] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 663.506745][ T5839] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 663.521518][T13705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 663.545560][ T5943] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 663.603681][T13705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 663.651994][ T5839] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 663.678535][T13705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 663.694764][ T5839] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 663.715859][ T5839] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 663.741864][ T5839] usb 5-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 663.752069][ T5839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.788123][ T981] usb 2-1: USB disconnect, device number 115 [ 663.811981][ T5839] usb 5-1: Product: syz [ 663.825109][ T5839] usb 5-1: Manufacturer: syz [ 663.830358][ T5839] usb 5-1: SerialNumber: syz [ 663.874555][ T5839] usb 5-1: config 0 descriptor?? [ 663.887216][T13708] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 663.929676][ T5839] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 664.114358][ T5943] usb 3-1: USB disconnect, device number 81 [ 664.240751][ T5839] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 664.311280][ T5839] usb 5-1: USB disconnect, device number 106 [ 664.364389][ T5832] udevd[5832]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 664.746204][ T5943] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 664.916315][ T5943] usb 3-1: Using ep0 maxpacket: 16 [ 664.925950][ T5943] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 664.936688][ T5943] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 665.000949][ T5943] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 665.010611][ T5943] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.024796][ T5943] usb 3-1: Product: syz [ 665.030354][ T5943] usb 3-1: Manufacturer: syz [ 665.038990][ T5943] usb 3-1: SerialNumber: syz [ 665.627301][ T5943] usb 3-1: 0:2 : does not exist [ 666.082592][ T10] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 666.106109][ T5943] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 666.321748][ T5943] usb 3-1: USB disconnect, device number 82 [ 666.338187][ T10] usb 5-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.02 [ 666.352448][ T10] usb 5-1: New USB device strings: Mfr=0, Product=232, SerialNumber=255 [ 666.378939][ T10] usb 5-1: Product: syz [ 666.425790][ T10] usb 5-1: SerialNumber: syz [ 666.749578][ T10] usb 5-1: config 0 descriptor?? [ 666.765993][ T5841] udevd[5841]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 667.291048][T13747] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2190'. [ 668.665895][ T5958] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 668.765842][ T10] ldusb 5-1:0.0: Interrupt in endpoint not found [ 668.804793][ T10] usb 5-1: USB disconnect, device number 107 [ 669.067654][T13763] use of bytesused == 0 is deprecated and will be removed in the future, [ 669.115891][ T795] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 669.286197][ T795] usb 3-1: Using ep0 maxpacket: 32 [ 669.318576][T13763] use the actual size instead. [ 669.506594][ T795] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 669.531334][ T795] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.583622][ T795] usb 3-1: config 0 descriptor?? [ 669.833147][ T795] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 669.897149][ T795] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 669.963465][ T795] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 670.002932][ T795] usb 3-1: media controller created [ 670.089238][ T795] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 670.498049][ T5839] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 670.722820][ T5839] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 670.780989][ T5839] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 670.859512][ T5839] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 670.928780][ T5839] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 670.984467][ T5839] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.065005][ T5839] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 671.181220][T13781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 671.205869][ T10] usb 5-1: new full-speed USB device number 108 using dummy_hcd [ 671.271180][T13781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 671.298857][T13775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 671.309951][T13775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 671.321415][ T5839] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 671.408946][ T10] usb 5-1: not running at top speed; connect to a high speed hub [ 671.420094][T13775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 671.429389][T13775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 671.491060][ T5839] usb 2-1: USB disconnect, device number 116 [ 671.538934][ T10] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 671.559460][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 671.585052][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 671.640492][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 671.650353][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.659116][ T10] usb 5-1: Product: ꊝ⑚䊤㑮낟‍䱡扂紨䊹쐟嵫ؽ═靻럀㷨閱쩎枦瑀쀵쬏幦জ⯐鉄䇫㴢聞㋘򬹺钤봩୧䪁䓼逷崈蛳䬔ꝿꊧꢲ⽚幂⧣ॴ縱띱ꊎȿᤓจ簭Ȑ⌞渗젝螻ᰦᮺ⚍䬗鹛槦ሪవꀮь꬧蔦䔪晃✠㷇웨晐喵䕪苍㣍켻᷐跌铌ꯠ죇基쐁幅矯ﱃ벁唝딭뜸偤纓剤ꓢ曜嵑뻸ຎ斧ᘌ룀놤 [ 671.727781][ T10] usb 5-1: Manufacturer:  [ 671.734336][ T10] usb 5-1: SerialNumber: ㈼℆禷읆溷⚓璜︱쒈䨟낖냺ೕ䅣똆䜹矈␠喞鿝큾댴ꥠ㄂꼁듭聿ݡ쵦훑⹊쏘沲ꚬ㯍⸏ڣⴐ黪梫銲⃉뷅ꐥ餅ơ暳붉촍땏鯨쮓ᄪ脡䒬镱᫑㣰嬼⑖രꥐ䄫⃳兪鐄뽟瀠넷馮⼑腻ﯟ懋䳯꧊ꌻ鮡篚Ệ霭쬭鴃큫홿䘎訪뚾ࢻ䓋ᛃﰭḹ [ 671.871129][ T795] az6027: usb out operation failed. (-71) [ 671.986531][ T795] az6027: usb out operation failed. (-71) [ 671.995846][ T795] stb0899_attach: Driver disabled by Kconfig [ 672.001977][ T795] az6027: no front-end attached [ 672.001977][ T795] [ 672.026367][ T795] az6027: usb out operation failed. (-71) [ 672.041156][ T795] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 672.063872][ T795] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input39 [ 672.110851][ T10] usb 5-1: 0:2 : does not exist [ 672.118380][ T795] dvb-usb: schedule remote query interval to 400 msecs. [ 672.127224][ T795] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 672.234529][ T795] usb 3-1: USB disconnect, device number 83 [ 672.249104][ T10] usb 5-1: USB disconnect, device number 108 [ 672.442143][ T5841] udevd[5841]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 672.528535][ T795] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 672.944008][T13801] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2203'. [ 674.176080][ T795] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 674.526042][ T795] usb 5-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.02 [ 674.568453][ T795] usb 5-1: New USB device strings: Mfr=0, Product=232, SerialNumber=255 [ 674.601825][ T795] usb 5-1: Product: syz [ 674.615937][ T795] usb 5-1: SerialNumber: syz [ 674.686903][ T795] usb 5-1: config 0 descriptor?? [ 676.896772][ T795] ldusb 5-1:0.0: Interrupt in endpoint not found [ 676.960712][T13831] rtc_cmos 00:00: Alarms can be up to one day in the future [ 677.096089][ T795] usb 5-1: USB disconnect, device number 109 [ 679.287656][T13857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2218'. [ 680.464128][T13874] syzkaller0: entered promiscuous mode [ 680.476041][T13874] syzkaller0: entered allmulticast mode [ 680.936844][T13882] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 680.944845][T13882] batadv_slave_0: entered promiscuous mode [ 680.978134][ T795] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 681.455813][ T795] usb 3-1: Using ep0 maxpacket: 8 [ 681.500030][ T795] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 681.567191][ T795] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 681.597787][T13872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 681.675731][ T795] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.693958][ T795] usb 3-1: Product: syz [ 681.739630][ T795] usb 3-1: Manufacturer: syz [ 681.745952][T13872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 681.774111][ T795] usb 3-1: SerialNumber: syz [ 681.784885][ T795] usb 3-1: config 0 descriptor?? [ 681.859372][ T795] streamzap 3-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 682.078469][ T981] usb 3-1: USB disconnect, device number 84 [ 682.275874][ T5839] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 682.427426][ T5839] usb 2-1: config 0 has an invalid interface number: 78 but max is 0 [ 682.435533][ T5839] usb 2-1: config 0 has no interface number 0 [ 682.445810][ T5839] usb 2-1: config 0 interface 78 altsetting 60 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 682.458689][ T5839] usb 2-1: config 0 interface 78 has no altsetting 0 [ 682.477909][ T5839] usb 2-1: New USB device found, idVendor=0411, idProduct=0158, bcdDevice=4f.85 [ 682.502407][ T5839] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.536499][ T5839] usb 2-1: config 0 descriptor?? [ 682.779344][ T5839] usb 2-1: string descriptor 0 read error: -71 [ 682.799758][ T5839] usb 2-1: USB disconnect, device number 117 [ 682.956222][T13908] pim6reg1: entered promiscuous mode [ 682.961566][T13908] pim6reg1: entered allmulticast mode [ 683.226079][ T30] audit: type=1326 audit(1765113953.446:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13891 comm="syz.4.2226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f230c38f749 code=0x7ffc0000 [ 683.277987][ T30] audit: type=1326 audit(1765113953.446:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13891 comm="syz.4.2226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f230c38f749 code=0x7ffc0000 [ 683.801994][ T30] audit: type=1326 audit(1765113953.456:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13891 comm="syz.4.2226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f230c38f749 code=0x7ffc0000 [ 684.005424][T13920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 684.025896][ T795] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 684.035843][ T30] audit: type=1326 audit(1765113953.456:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13891 comm="syz.4.2226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f230c38f749 code=0x7ffc0000 [ 684.094330][T13920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 684.203367][ T30] audit: type=1326 audit(1765113953.456:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13891 comm="syz.4.2226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f230c38f749 code=0x7ffc0000 [ 684.241704][ T30] audit: type=1326 audit(1765113953.456:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13891 comm="syz.4.2226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f230c38f749 code=0x7ffc0000 [ 684.251118][T13914] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 684.304703][ T30] audit: type=1326 audit(1765113953.456:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13891 comm="syz.4.2226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f230c38f749 code=0x7ffc0000 [ 684.336164][ T795] usb 2-1: Using ep0 maxpacket: 8 [ 684.354615][T13914] bond1 (unregistering): Released all slaves [ 684.418198][ T30] audit: type=1326 audit(1765113953.456:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13891 comm="syz.4.2226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f230c38f749 code=0x7ffc0000 [ 684.444651][ T795] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 684.452588][ T10] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 684.456614][ T30] audit: type=1326 audit(1765113953.476:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13891 comm="syz.4.2226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f230c38f749 code=0x7ffc0000 [ 684.485038][ T30] audit: type=1326 audit(1765113953.496:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13891 comm="syz.4.2226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f230c38f749 code=0x7ffc0000 [ 684.516121][ T795] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 684.562768][ T795] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 684.585805][ T795] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 684.624703][ T795] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 684.646030][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 684.653013][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 684.667064][ T795] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 684.674523][ T795] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 684.690002][ T981] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 684.716049][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 684.747751][ T795] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 684.760345][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 684.772707][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.783154][ T795] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 684.798548][ T10] usb 3-1: config 0 descriptor?? [ 684.814643][ T795] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 684.828132][ T10] hub 3-1:0.0: USB hub found [ 684.842095][ T5839] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 684.843006][ T795] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 684.855761][ T981] usb 5-1: Using ep0 maxpacket: 32 [ 684.860251][T13933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 684.877926][ T795] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 684.892821][T13933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 684.897441][ T981] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 684.901597][ T795] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 684.928596][ T795] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 684.936967][ T981] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 684.940227][ T795] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 684.965091][ T795] usb 2-1: string descriptor 0 read error: -22 [ 684.965792][ T981] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 684.971998][ T795] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 684.994120][ T795] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.005574][ T981] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 685.024350][ T981] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 685.043393][ T981] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 685.045337][ T10] hub 3-1:0.0: 1 port detected [ 685.054331][ T981] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.066230][ T5839] usb 1-1: Using ep0 maxpacket: 8 [ 685.073032][ T981] usb 5-1: Product: syz [ 685.082863][ T5839] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 685.094532][ T5839] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 685.097870][ T795] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 685.104824][ T981] usb 5-1: Manufacturer: syz [ 685.117257][ T5839] usb 1-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 685.130943][T13931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 685.141005][ T5839] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.150594][ T981] usb 5-1: SerialNumber: syz [ 685.158000][T13931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 685.169309][ T5839] usb 1-1: config 0 descriptor?? [ 685.179132][ T981] usb 5-1: config 0 descriptor?? [ 685.283008][T12729] usb 2-1: USB disconnect, device number 118 [ 685.643864][ T10] hub 3-1:0.0: activate --> -90 [ 685.867528][ T5839] usbhid 1-1:0.0: can't add hid device: -71 [ 685.890358][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.902146][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.927938][ T5839] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 685.963863][ T5839] usb 1-1: USB disconnect, device number 109 [ 686.035201][ T981] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 686.052797][T12729] usb 3-1: USB disconnect, device number 85 [ 686.069588][ T981] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 686.109746][ T981] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 686.118988][ T981] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 686.128471][ T981] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 686.135078][ T981] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 686.142637][ T981] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 686.149683][ T981] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 686.161807][ T981] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 686.168901][ T981] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 686.177815][ T981] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 686.184333][ T981] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 686.191013][ T981] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 686.203087][ T981] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 686.215583][ T981] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 686.226197][ T981] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 686.232792][ T981] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 686.243896][ T981] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 686.250980][ T981] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 686.257553][ T981] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 686.288558][ T981] input input40: Timeout waiting for response from device. [ 686.334959][ T981] usb 5-1: USB disconnect, device number 110 [ 686.491842][T13956] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2245'. [ 686.775846][ T981] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 686.927138][T13968] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2247'. [ 687.047087][ T981] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 687.081918][ T981] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 687.097861][ T981] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 687.115891][ T981] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 687.125844][ T981] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 687.155928][ T981] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.397980][ T981] usb 5-1: config 0 descriptor?? [ 687.687368][ T981] hdpvr 5-1:0.0: firmware version 0x26 dated SzHHf3;&X^ wΖ g/ n# [ 687.698131][ T981] hdpvr 5-1:0.0: untested firmware, the driver might not work. [ 687.797112][ T795] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 688.135851][ T795] usb 2-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.02 [ 688.139080][ T981] hdpvr 5-1:0.0: Could not setup controls [ 688.169604][ T795] usb 2-1: New USB device strings: Mfr=0, Product=232, SerialNumber=255 [ 688.176738][ T981] hdpvr 5-1:0.0: registering videodev failed [ 688.228530][ T795] usb 2-1: Product: syz [ 688.228718][ T981] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -71 [ 688.269529][ T795] usb 2-1: SerialNumber: syz [ 688.308937][ T795] usb 2-1: config 0 descriptor?? [ 688.311723][ T981] usb 5-1: USB disconnect, device number 111 [ 690.165616][ T795] ldusb 2-1:0.0: Interrupt in endpoint not found [ 690.284567][ T795] usb 2-1: USB disconnect, device number 119 [ 691.418063][T14011] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2260'. [ 691.712956][T14016] loop2: detected capacity change from 0 to 7 [ 691.729768][T14016] Dev loop2: unable to read RDB block 7 [ 691.745994][T14016] loop2: AHDI p2 p3 [ 691.760033][T14016] loop2: partition table partially beyond EOD, truncated [ 691.782677][T14016] loop2: p3 start 335544320 is beyond EOD, truncated [ 691.835807][ T5833] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 692.001393][ T5833] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 692.241013][ T5833] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.260919][ T5833] usb 5-1: Product: syz [ 692.265140][ T5833] usb 5-1: Manufacturer: syz [ 692.281533][ T5833] usb 5-1: SerialNumber: syz [ 692.381594][T14021] netlink: 'syz.1.2258': attribute type 5 has an invalid length. [ 694.185793][ T795] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 694.446360][ T795] usb 1-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.02 [ 694.461782][ T795] usb 1-1: New USB device strings: Mfr=0, Product=232, SerialNumber=255 [ 694.490859][ T795] usb 1-1: Product: syz [ 694.495128][ T795] usb 1-1: SerialNumber: syz [ 694.511964][ T5833] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 694.554109][ T5833] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 694.565850][ T10] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 694.596815][ T5833] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 694.596903][ T795] usb 1-1: config 0 descriptor?? [ 694.658395][ T5833] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 694.696360][ T5833] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 694.736450][ T5833] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 694.759538][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 694.767381][ T10] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 694.785800][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.810503][ T5833] usb 5-1: USB disconnect, device number 112 [ 694.897219][ T10] usb 2-1: config 0 descriptor?? [ 695.129032][ T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 695.146082][ T5833] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 695.172580][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 695.206116][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 695.222735][ T10] usb 2-1: media controller created [ 695.276451][ T5833] usb 5-1: device descriptor read/64, error -71 [ 695.366855][T14042] ------------[ cut here ]------------ [ 695.372751][T14042] usb 4-1: BOGUS control dir, pipe 80004d80 doesn't match bRequestType c0 [ 695.381503][T14042] WARNING: drivers/usb/core/urb.c:414 at 0x0, CPU#1: syz.1.2267/14042 [ 695.389898][T14042] Modules linked in: [ 695.394243][T14042] CPU: 1 UID: 0 PID: 14042 Comm: syz.1.2267 Tainted: G L syzkaller #0 PREEMPT(full) [ 695.405420][T14042] Tainted: [L]=SOFTLOCKUP [ 695.409827][T14042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 695.420085][T14042] RIP: 0010:usb_submit_urb+0x111c/0x18d0 [ 695.425805][T14042] Code: b8 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 a7 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 20 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 b7 f2 ff ff 89 e9 [ 695.445511][T14042] RSP: 0018:ffffc9000461f820 EFLAGS: 00010246 [ 695.451672][T14042] RAX: 0000000000000000 RBX: ffff88814c9b2500 RCX: 0000000080004d80 [ 695.459713][T14042] RDX: ffff888043a042e0 RSI: ffffffff8c13a100 RDI: ffffffff8f8e33d0 [ 695.467835][T14042] RBP: 1ffff11005c8599c R08: 00000000000000c0 R09: 0000000000000000 [ 695.475948][T14042] R10: ffffc9000461f920 R11: fffff520008c3f30 R12: ffff88807a7d1100 [ 695.483933][T14042] R13: ffff88802e42cce0 R14: 0000000080004d80 R15: ffff888043a042e0 [ 695.492298][T14042] FS: 00007f8be422e6c0(0000) GS:ffff888125f44000(0000) knlGS:0000000000000000 [ 695.501307][T14042] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 695.508231][T14042] CR2: 00002000002e5030 CR3: 0000000031a58000 CR4: 00000000003526f0 [ 695.516486][T14042] Call Trace: [ 695.519889][T14042] [ 695.522937][T14042] ? __init_swait_queue_head+0xa9/0x150 [ 695.528601][T14042] usb_start_wait_urb+0x115/0x4f0 [ 695.533689][T14042] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 695.539409][T14042] usb_control_msg+0x232/0x3e0 [ 695.544315][T14042] dib0700_i2c_xfer+0xba7/0xf70 [ 695.549249][T14042] __i2c_transfer+0x871/0x2110 [ 695.554027][T14042] ? lockdep_hardirqs_on+0x98/0x140 [ 695.560725][T14042] ? __pfx___i2c_transfer+0x10/0x10 [ 695.566031][T14042] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 695.571434][T14042] ? i2c_transfer+0x120/0x3a0 [ 695.576223][T14042] i2c_transfer+0x25b/0x3a0 [ 695.580737][T14042] ? __pfx_i2c_transfer+0x10/0x10 [ 695.585876][T14042] ? _copy_from_user+0x94/0xb0 [ 695.590666][T14042] i2cdev_ioctl_rdwr+0x460/0x740 [ 695.595642][T14042] i2cdev_ioctl+0x64b/0x820 [ 695.600244][T14042] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 695.605305][T14042] ? __fget_files+0x3a0/0x420 [ 695.610036][T14042] ? __fget_files+0x2a/0x420 [ 695.614639][T14042] ? bpf_lsm_file_ioctl+0x9/0x20 [ 695.619652][T14042] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 695.624703][T14042] __se_sys_ioctl+0xfc/0x170 [ 695.629475][T14042] do_syscall_64+0xfa/0xf80 [ 695.634003][T14042] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.640277][T14042] ? clear_bhb_loop+0x60/0xb0 [ 695.644979][T14042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.650979][T14042] RIP: 0033:0x7f8be338f749 [ 695.655418][T14042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 695.675331][T14042] RSP: 002b:00007f8be422e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 695.683923][T14042] RAX: ffffffffffffffda RBX: 00007f8be35e5fa0 RCX: 00007f8be338f749 [ 695.691978][T14042] RDX: 00002000000003c0 RSI: 0000000000000707 RDI: 0000000000000007 [ 695.700596][T14042] RBP: 00007f8be3413f91 R08: 0000000000000000 R09: 0000000000000000 [ 695.708774][T14042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 695.716834][T14042] R13: 00007f8be35e6038 R14: 00007f8be35e5fa0 R15: 00007f8be370fa28 [ 695.724874][T14042] [ 695.728020][T14042] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 695.735320][T14042] CPU: 1 UID: 0 PID: 14042 Comm: syz.1.2267 Tainted: G L syzkaller #0 PREEMPT(full) [ 695.746268][T14042] Tainted: [L]=SOFTLOCKUP [ 695.750611][T14042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 695.760672][T14042] Call Trace: [ 695.763971][T14042] [ 695.766909][T14042] dump_stack_lvl+0x99/0x250 [ 695.771524][T14042] ? __asan_memcpy+0x40/0x70 [ 695.776141][T14042] ? __pfx_dump_stack_lvl+0x10/0x10 [ 695.781368][T14042] ? __pfx__printk+0x10/0x10 [ 695.785979][T14042] vpanic+0x237/0x6d0 [ 695.789959][T14042] ? __pfx_vpanic+0x10/0x10 [ 695.794490][T14042] ? is_bpf_text_address+0x292/0x2b0 [ 695.799794][T14042] ? is_bpf_text_address+0x26/0x2b0 [ 695.805022][T14042] panic+0xb9/0xc0 [ 695.808773][T14042] ? __pfx_panic+0x10/0x10 [ 695.813222][T14042] __warn+0x317/0x4b0 [ 695.817259][T14042] __report_bug+0x288/0x500 [ 695.821802][T14042] ? __pfx___report_bug+0x10/0x10 [ 695.826856][T14042] ? stack_depot_save_flags+0x422/0x850 [ 695.832418][T14042] report_bug_entry+0x16a/0x220 [ 695.837384][T14042] ? usb_submit_urb+0x111c/0x18d0 [ 695.842418][T14042] ? usb_submit_urb+0x1121/0x18d0 [ 695.847459][T14042] handle_bug+0xca/0x200 [ 695.851717][T14042] exc_invalid_op+0x1a/0x50 [ 695.856238][T14042] asm_exc_invalid_op+0x1a/0x20 [ 695.861092][T14042] RIP: 0010:usb_submit_urb+0x111c/0x18d0 [ 695.867090][T14042] Code: b8 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 a7 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 20 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 b7 f2 ff ff 89 e9 [ 695.886894][T14042] RSP: 0018:ffffc9000461f820 EFLAGS: 00010246 [ 695.892970][T14042] RAX: 0000000000000000 RBX: ffff88814c9b2500 RCX: 0000000080004d80 [ 695.901027][T14042] RDX: ffff888043a042e0 RSI: ffffffff8c13a100 RDI: ffffffff8f8e33d0 [ 695.909022][T14042] RBP: 1ffff11005c8599c R08: 00000000000000c0 R09: 0000000000000000 [ 695.917096][T14042] R10: ffffc9000461f920 R11: fffff520008c3f30 R12: ffff88807a7d1100 [ 695.925161][T14042] R13: ffff88802e42cce0 R14: 0000000080004d80 R15: ffff888043a042e0 [ 695.933188][T14042] ? __init_swait_queue_head+0xa9/0x150 [ 695.938747][T14042] usb_start_wait_urb+0x115/0x4f0 [ 695.943795][T14042] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 695.949373][T14042] usb_control_msg+0x232/0x3e0 [ 695.954174][T14042] dib0700_i2c_xfer+0xba7/0xf70 [ 695.959064][T14042] __i2c_transfer+0x871/0x2110 [ 695.963874][T14042] ? lockdep_hardirqs_on+0x98/0x140 [ 695.969191][T14042] ? __pfx___i2c_transfer+0x10/0x10 [ 695.974445][T14042] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 695.979861][T14042] ? i2c_transfer+0x120/0x3a0 [ 695.984663][T14042] i2c_transfer+0x25b/0x3a0 [ 695.989185][T14042] ? __pfx_i2c_transfer+0x10/0x10 [ 695.994262][T14042] ? _copy_from_user+0x94/0xb0 [ 695.999055][T14042] i2cdev_ioctl_rdwr+0x460/0x740 [ 696.004018][T14042] i2cdev_ioctl+0x64b/0x820 [ 696.008643][T14042] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 696.013682][T14042] ? __fget_files+0x3a0/0x420 [ 696.018377][T14042] ? __fget_files+0x2a/0x420 [ 696.022971][T14042] ? bpf_lsm_file_ioctl+0x9/0x20 [ 696.027931][T14042] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 696.032961][T14042] __se_sys_ioctl+0xfc/0x170 [ 696.037559][T14042] do_syscall_64+0xfa/0xf80 [ 696.042060][T14042] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.048118][T14042] ? clear_bhb_loop+0x60/0xb0 [ 696.052836][T14042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.058745][T14042] RIP: 0033:0x7f8be338f749 [ 696.063165][T14042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 696.082979][T14042] RSP: 002b:00007f8be422e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 696.091415][T14042] RAX: ffffffffffffffda RBX: 00007f8be35e5fa0 RCX: 00007f8be338f749 [ 696.099619][T14042] RDX: 00002000000003c0 RSI: 0000000000000707 RDI: 0000000000000007 [ 696.107606][T14042] RBP: 00007f8be3413f91 R08: 0000000000000000 R09: 0000000000000000 [ 696.115681][T14042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 696.123951][T14042] R13: 00007f8be35e6038 R14: 00007f8be35e5fa0 R15: 00007f8be370fa28 [ 696.132047][T14042] [ 696.135288][T14042] Kernel Offset: disabled [ 696.139625][T14042] Rebooting in 86400 seconds..