last executing test programs: 16.351472993s ago: executing program 2 (id=8969): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x29, 0xfffffffe, 0x0, 0x0, 0x40, 0x2, 0x0, 0x0, 0x0, 0x10, 0x66}}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14008051}}, {{&(0x7f00000000c0)=@file={0x1, './file0/file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40080}}], 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000061107b00"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0xffffffff) lsetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000200)=@known='user.incfs.id\x00', 0x0, 0x0, 0x0) r5 = add_key$user(&(0x7f0000000400), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000480)='\n', 0x1, 0xffffffffffffffff) r6 = add_key$user(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)="f40fc24077021c9b084c60ffc26f26db12b9e78d629870bb26edb4a5e1cc0942ed8c58ca4fe84b94a0e31ea64089ee9ca1efb52945ffebbfea11dd3d0df936a10285eccab940ab5c96cb5d81dac1ad2243d878dde6cfd6ea08d5abcb00bb35436929ddabce530b63fab525337057438cf64a506d54d5c83e3e593d1d53ad0e6a44168fe8cfc6ad98b653d80636e4ddc1f2ab58762b3494250b9557f5b606a43e50874c90143034142cd5f7bd9b4dd876b97b7feb75b9138dde818a3c6b96dd80", 0xc0, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000440)={r5, r6, r5}, &(0x7f0000002380)=""/4102, 0x1060, 0x0) lsetxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) unlink(&(0x7f00000003c0)='./file0\x00') r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1038, 0x12b6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x20, r9, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_WOL_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x4000040) syz_usb_control_io(r7, &(0x7f0000000440)={0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="b23b3b"], 0x0, 0x0, 0x0, 0x0}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a68000000060a0b0400000000000000000200fffe3c000480380001800b00010064796e7365740000280002800800034000000001080004400000001108000940000000000900010073797a31000000004900010073797a30000000000900020073797a3200000000140000001100010000000000000000000500000a"], 0x90}, 0x1, 0x0, 0x0, 0x4040}, 0x0) close(0xffffffffffffffff) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000002c0)=@generic={&(0x7f0000000280)='./file0/file0\x00'}, 0x14) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000300)=@ethtool_link_settings={0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x300]}}) setns(0xffffffffffffffff, 0x24020000) syz_fuse_handle_req(r0, &(0x7f0000004280)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x90, 0x0, 0x8, {0x1, 0xfffffffffffffffd, 0x2000, 0x1ffff, 0x6, 0x84, {0x4, 0x25, 0x7, 0x80000000, 0x4, 0xffff, 0x7d59, 0x5, 0x4, 0x8000, 0x7f, r2, r3, 0xcb, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 13.729216085s ago: executing program 0 (id=8981): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x42) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x24004190) recvmmsg(r1, &(0x7f0000009a00)=[{{&(0x7f0000000140)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000040)=""/45, 0x2d}, {&(0x7f0000000680)=""/83, 0x53}, {&(0x7f0000000300)}, {&(0x7f0000009b40)=""/123, 0x7b}, {&(0x7f0000000780)=""/153, 0x99}, {&(0x7f00000003c0)=""/12, 0xc}, {&(0x7f0000000700)}, {&(0x7f0000000840)=""/60, 0x3c}, {&(0x7f00000008c0)=""/17, 0x11}], 0x9, &(0x7f0000000980)=""/90, 0x5a}, 0x3}, {{&(0x7f0000000a00)=@xdp, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000a80)=""/178, 0xb2}, {&(0x7f0000000b40)=""/191, 0xbf}, {&(0x7f0000000c00)=""/204, 0xcc}, {&(0x7f0000000d00)=""/239, 0xef}], 0x4, &(0x7f0000000e40)=""/37, 0x25}, 0x4}, {{&(0x7f0000000e80)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000f00)=""/84, 0x54}], 0x1, &(0x7f0000000fc0)=""/23, 0x17}, 0x2}, {{&(0x7f0000001000)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000001440)=[{&(0x7f0000001080)=""/208, 0xd0}, {&(0x7f0000001180)=""/206, 0xce}, {&(0x7f0000001280)=""/160, 0xa0}, {&(0x7f0000002040)=""/4096, 0x1000}, {&(0x7f0000003040)=""/4096, 0x1000}, {&(0x7f0000001340)=""/231, 0xe7}, {&(0x7f0000001500)=""/148, 0x94}, {&(0x7f00000015c0)=""/154, 0x9a}, {&(0x7f0000001680)=""/185, 0xb9}], 0x9, &(0x7f0000001740)=""/71, 0x47}, 0x5}, {{&(0x7f00000017c0)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000001840)=""/252, 0xfc}, {&(0x7f0000001940)=""/126, 0x7e}, {&(0x7f00000019c0)=""/233, 0xe9}], 0x3}, 0x8}, {{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000004040)=""/4096, 0x1000}, {&(0x7f0000001b00)=""/166, 0xa6}], 0x2}}, {{&(0x7f0000001c00)=@l2tp={0x2, 0x0, @private}, 0x80, &(0x7f0000005240)=[{&(0x7f0000001c80)=""/164, 0xa4}, {&(0x7f0000001d40)=""/178, 0xb2}, {&(0x7f0000001e00)=""/123, 0x7b}, {&(0x7f0000001e80)=""/128, 0x80}, {&(0x7f0000001f00)=""/54, 0x36}, {&(0x7f0000001f40)=""/30, 0x1e}, {&(0x7f0000005040)=""/202, 0xca}, {&(0x7f0000001f80)=""/124, 0x7c}, {&(0x7f0000005140)=""/228, 0xe4}], 0x9, &(0x7f00000052c0)=""/96, 0x60}, 0x2}, {{&(0x7f0000005340)=@ethernet={0x0, @random}, 0x80, &(0x7f00000064c0)=[{&(0x7f00000053c0)=""/4096, 0x1000}, {&(0x7f00000063c0)=""/225, 0xe1}], 0x2}, 0x4}, {{&(0x7f0000006500)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x80, &(0x7f0000009880)=[{&(0x7f0000006580)=""/31, 0x1f}, {&(0x7f00000065c0)=""/82, 0x52}, {&(0x7f0000006640)=""/216, 0xd8}, {&(0x7f0000006740)=""/4096, 0x1000}, {&(0x7f0000007740)=""/4096, 0x1000}, {&(0x7f0000008740)=""/4096, 0x1000}, {&(0x7f0000009740)=""/4, 0x4}, {&(0x7f0000009780)=""/65, 0x41}, {&(0x7f0000009800)=""/112, 0x70}], 0x9, &(0x7f0000009900)=""/230, 0xe6}, 0x8}], 0x9, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7040010000000f00000005002e000000000008000300", @ANYRES32=r3, @ANYBLOB="05002f00000000f1075d6f57eea30cf8baaf052a51dbcddfb9ea3000010000000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x18) sched_setattr(0x0, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r5 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x10000, 0x2000000}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000100)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x20, 0x2000, @fd=r5, 0x800000007, 0x0, 0x0, 0x4}) io_uring_enter(r5, 0x48e9, 0x0, 0x2, 0x0, 0x0) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000400)=""/110, &(0x7f00000001c0)=0x6e) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b06000000000000000800000000000000b07a1fe6d9dd6e5f36c3a4d042b7789158ef03db28c5446c8227394c0e574aaac57d6a20287989b3052f03385b7aa5fd586e196b19e1533f667e4c1e97be544320", @ANYRES32=0x1, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000100"/28], 0x50) r9 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) writev(r9, &(0x7f00000014c0)=[{0x0}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000009c40)=ANY=[@ANYRESOCT=r3, @ANYRES32=r8, @ANYRESOCT=r3, @ANYRESDEC=r4, @ANYRES32, @ANYBLOB="17f95f0035edfd48d1d97b745fe4d78500c99c39a8ea5167d33cdc63ac07a9e4d768e912719e48d3678675fed40c663f9e44cb609cfff57d0216e7a331891c702686b8d168f5978b3facee09266e71c9a7a8159c58987609f2d2bc71e13563f39cc278891297e8c5b834cf42c12645d6eef03f4dd899acd16ab5704223942076f81d2b9ff5986181c486460bfe5f0e2d"], 0x50) pipe2$watch_queue(0x0, 0x80) write$sysctl(0xffffffffffffffff, &(0x7f0000000580)='1\x00', 0x2) socket(0x10, 0x3, 0x0) r10 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) unshare(0x22020400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r11, &(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e) ioctl$IOCTL_VMCI_VERSION2(r10, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r10, 0x7a0, &(0x7f0000000000)={@my=0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r10, 0x7a5, &(0x7f0000000200)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r10, 0x7a5, &(0x7f00000000c0)={{@host}, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r10, 0x7a5, &(0x7f0000000240)={{@local, 0x1}, 0x1, 0x2, 0x8}) 13.642085257s ago: executing program 2 (id=8983): openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x20000023896) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$video4linux(0x0, 0x2, 0x0) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000100)={0x5, 0xc, 0x3b, 0x7fff, 0x14, "71feaf33432ed6fe90107884be157e88b3e578"}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000009, 0x8012, r7, 0x0) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f0000000040)=0x1) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f00000001c0)=0x1) connect$unix(r5, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e21, @remote}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xfffffdef}], 0x4000095, 0x401eb94) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x38, r9, 0x1, 0x0, 0x0, {0x54}, [{{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x38}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="170900000000000000d62454d0a2bb99dc7a8deb0000000000"], 0x14}}, 0x0) 13.52868888s ago: executing program 2 (id=8985): r0 = socket(0x40000000015, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x271c, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) 13.44695372s ago: executing program 2 (id=8986): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) io_setup(0x490, &(0x7f0000000000)=0x0) r2 = eventfd2(0x13af, 0x80000) io_submit(r1, 0x3, &(0x7f0000000840)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x9, r0, 0x0, 0x0, 0x4}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x8, r0, 0x0, 0x0, 0x6, 0x0, 0x2}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, r0, 0x0, 0x0, 0x9, 0x0, 0x1, r2}]) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x1c, 0x9, 0x0, 0x1, @tproxy={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xc}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x80}}, 0x0) 13.280711121s ago: executing program 2 (id=8989): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[], 0x118) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) mlock(&(0x7f0000f47000/0x3000)=nil, 0x3000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f0000006280)={0x2020, 0x0, 0x0}, 0x2020) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x800000}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000004280)="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", 0x2000, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x90, 0x0, 0x9, {0x1, 0x1, 0x0, 0x0, 0x237, 0x0, {0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xd, 0x10000, 0x1000, 0x2, 0x0, 0x1000, 0x5, 0x0, 0xee01}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$char_usb(r2, &(0x7f0000000080)='R', 0x1) syz_usb_disconnect(r1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x9, &(0x7f0000000040)=0x1fd, 0x4) 12.749884871s ago: executing program 0 (id=8991): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=ANY=[], 0x6c}}, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYBLOB, @ANYRES32=r0, @ANYRESOCT=0x0, @ANYRES16=r0, @ANYRES8=r1, @ANYRESOCT], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800b00010065787468647200002c0002800800034000000000080001400000000d08000740000000010800064000000002080004400000009dbefe6f82170900010073797a3000000000090002007379f5d4f9bce42c157a32000000001400000011000100000000000000000000000008d1b457c81ae895f22f7bda8700c1c21a85df4fa6a7701c311eafab330a60248ac4b4"], 0x94}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) fchdir(r4) exit(0x0) ioctl$VIDIOC_G_FMT(r3, 0xc0cc5604, &(0x7f00000000c0)={0x7, @pix={0x6, 0x7, 0x32314d4e, 0x9, 0x7fffffff, 0x81b, 0xc, 0x5, 0x0, 0x8, 0x2, 0x3}}) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socket$alg(0x26, 0x5, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="021600000a0000000200000000000000080012000007a18208"], 0x50}}, 0x0) 11.712793117s ago: executing program 0 (id=8995): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) timer_create(0x0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) timer_create(0x7, 0x0, &(0x7f0000000080)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24044040) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002880)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x2000}}, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) (async) timer_create(0x0, 0x0, 0x0) (async) timer_create(0x0, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) (async) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) (async) timer_create(0x7, 0x0, &(0x7f0000000080)) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24044040) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002880)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x2000}}, 0x0, 0x0, 0x0) (async) 11.339966024s ago: executing program 0 (id=8996): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x81c0, 0x0) execve(&(0x7f0000000140)='./file2\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000039c0), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201010200000010f304"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(0xffffffffffffffff, 0xc0884123, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000000, 0x1010, 0xffffffffffffffff, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x0, 'dh\x00', 0x11, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e22, @empty}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)={0x40, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @broadcast}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x5}]}]}, 0x40}}, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x0, 0x24048054, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) bind$alg(r0, 0x0, 0x0) 10.815007198s ago: executing program 2 (id=8998): mq_open(&(0x7f00000004c0)=' \x01 \x00\x00\x00\x00\x0f\x00\x00\x00\x00\xd0\xe3\xac\x88\xc1s\xc5\xec\xa5O\xa2\xf3\"\x88p\"k/K\x99\x147~H\x0f,\x86\xad\xa3\xc0J\v\x1a&\xf0\\\xb8\xcf\xad\xae\x93J\xe7\xcd,\xeb\xef\xee\x93\a\xc51\xd6\x98\x13\xf2\xe8\xe8hY\xd7\x03.\xac\x16H\xcb[,0\x8b\xa0\x83\x84\xb66\xff\xdc\xfe\xb9%\xf7\xdeQ\v\xbe$\xa1\xc8\x97\x9b\xba\n\xd1\x14*\xac\x84\t\xe93qE\x8f_\xcb\xeap\x0f\\;\xb7\x1c\x03\x03\xbc\xa3\xcc\xbe\x03\xb3$\x95\xb4\xd9\xca$%_\x1b{\xfa~y\xba\xf5I\xbar)\n\x93\xbe\a6\xf8&\xbe-\xb2\xf2\xa5|Jh\x15,\\(=t\xa8\xe3\xe3\xf8!B[\xa8\x1bz\x83i\xa2\x1e\xb4V\xc7\xc0\x00P,\x81x\x7f\xc6\x05~\x9e\xa9\x97<2C\x13\xc9\x01N\xfa\x97\\<\xbc\xb6<\xb5\xc4.\xcaX4%fn|\x00'/237, 0x40, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="f1ff00001000010000000000000000000000000a140000001100f00100"/40], 0x28}}, 0x0) r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x80, &(0x7f0000000040)}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@can_newroute={0x154, 0x18, 0x1, 0x70bd29, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_CS_CRC8={0x11e, 0x6, {0x0, 0xff, 0x3, 0x0, 0xff, "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", 0x0, "5c8d586b2a88d818b56d2a5e15c8a95d29e5b2ea"}}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xe, 0xf5, 0x2}}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x0, 0x1}, 0x0, 0x5, 0x0, 0x0, '\t\x00'}, 0x1}}]}, 0x154}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYRESOCT=r1], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x400000004000300}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r3) mkdir(&(0x7f0000000100)='./control\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000016c0)=@base={0x9, 0x4, 0x8, 0x8, 0x8}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, r4}, 0x38) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) r5 = openat$cgroup_freezer_state(r3, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_freezer_state(r5, &(0x7f00000000c0)='FROZEN\x00', 0x7) unshare(0x26020480) r6 = socket(0x2, 0x3, 0x1) getsockopt(r6, 0xff, 0x100000000000001, 0x0, &(0x7f0000000040)=0xfffffffffffffffe) 10.053644748s ago: executing program 4 (id=9000): r0 = syz_open_dev$radio(&(0x7f00000003c0), 0x3, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x6, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0cc5605, &(0x7f00000005c0)={0x1, @pix={0x3, 0x0, 0x38415262, 0x0, 0x1, 0x0, 0x3, 0x13}}) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0xfffffffc) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000080)={0x1, 0x12000, 0x1}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r8 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/config', 0x0, 0x0) fchown(r9, 0x0, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r8, 0xc0845657, &(0x7f0000000580)={0x0, @bt={0x6, 0xffffffff, 0x1, 0x1, 0x8, 0x4, 0xfff, 0xfffffffe, 0x4, 0x8000, 0x2, 0x6, 0x4, 0x48, 0x4, 0x20, {0x9b7f, 0x5}, 0xfd, 0x7f}}) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000040)={0x0, 0x7000, 0x1}) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0185647, &(0x7f00000000c0)={0x980000, 0x7, 0x3ff, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0xa30903, 0x8, '\x00', @ptr=0x1}}) socket$netlink(0x10, 0x3, 0x8) 8.126582145s ago: executing program 4 (id=9007): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2c, r0, 0x1, 0x0, 0xffefffff, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x3}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x10) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) r4 = syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8d, 0x1e, 0x50, 0x20, 0x1039, 0x2120, 0x2a7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xff, 0xc0, 0x0, [{{0x9, 0x4, 0x7d, 0xf6, 0x0, 0xe4, 0x40, 0x98, 0x2}}]}}]}}, 0x0) syz_usb_disconnect(r4) syz_usb_connect$uac1(0x4, 0xb7, &(0x7f0000000500)=ANY=[@ANYBLOB="12010102000000086b1d01014000010203010902a5000301ce40000904000000010100000a2401ffff04020102090401000001020000090401010101020000090501090800090009072501810407000904020000010200000904c7a852638f0aad0e3f7ef805020101010200000c2402010403019d4e8f7c270d240202050007000273d99fd80d2402020500000006ab95b095072401040001000d2402020100090004905fd3330c2402010004080e03a3b1f3090582090800ea070607250180800700"], 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r9) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b927, 0x25dfdc01, {0x0, 0x0, 0x0, r14, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x88c3, 0xb, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r9, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000011c0)=@gettaction={0x1c, 0x5a, 0x1, 0x70bd26, 0x4, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x1}]}, 0x1c}}, 0x444) 7.801434828s ago: executing program 3 (id=9008): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892", 0xc) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)={0x90, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_SEQ={0xf, 0xa, "433ed813f881642681c5ac"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "65f9def25dc4aa27c8d48c7ab8"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "3ccbbadd4b"}, @NL80211_ATTR_KEY_SEQ={0x5, 0xa, ']'}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "a21d63b93a4508bb268a8e28e8"}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 7.733851144s ago: executing program 3 (id=9009): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000000000040f30455070000000000010902240001000040b109040000010301010009210101000122050009058103"], 0x0) r1 = open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x100001) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0x6) syz_usb_control_io(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="08000000000000008a0400000000000006000000000000004909000000000000d2040000000000002c0900000000000003000000000000002a1c00c000000000710000000000000063090000f32b438808d7fc2d1cd21d2810aa280000000001000000000000001b0a00000000000010000000000000008802000000000000ffffffffffffffffa50b0000000000000f00000000000000"]) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000740)={0x2, @pix={0x100, 0xb6, 0x3436324d, 0x6, 0x6, 0x0, 0xa, 0x0, 0x0, 0x7, 0x2}}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x0}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000100)={@local, 0x0, r5}) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000140)={@mcast2, @mcast1, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0022}) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000240)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r5}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000100)={'veth1_to_bridge\x00'}) 7.475005011s ago: executing program 0 (id=9010): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x29, 0xfffffffe, 0x0, 0x0, 0x40, 0x2, 0x0, 0x0, 0x0, 0x10, 0x66}}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14008051}}, {{&(0x7f00000000c0)=@file={0x1, './file0/file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40080}}], 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000061107b00"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0xffffffff) lsetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000200)=@known='user.incfs.id\x00', 0x0, 0x0, 0x0) r5 = add_key$user(&(0x7f0000000400), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000480)='\n', 0x1, 0xffffffffffffffff) r6 = add_key$user(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)="f40fc24077021c9b084c60ffc26f26db12b9e78d629870bb26edb4a5e1cc0942ed8c58ca4fe84b94a0e31ea64089ee9ca1efb52945ffebbfea11dd3d0df936a10285eccab940ab5c96cb5d81dac1ad2243d878dde6cfd6ea08d5abcb00bb35436929ddabce530b63fab525337057438cf64a506d54d5c83e3e593d1d53ad0e6a44168fe8cfc6ad98b653d80636e4ddc1f2ab58762b3494250b9557f5b606a43e50874c90143034142cd5f7bd9b4dd876b97b7feb75b9138dde818a3c6b96dd80", 0xc0, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000440)={r5, r6, r5}, &(0x7f0000002380)=""/4102, 0x1060, 0x0) lsetxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) unlink(&(0x7f00000003c0)='./file0\x00') r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1038, 0x12b6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x20, r9, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_WOL_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x4000040) syz_usb_control_io(r7, &(0x7f0000000440)={0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="b23b3b"], 0x0, 0x0, 0x0, 0x0}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a68000000060a0b0400000000000000000200fffe3c000480380001800b00010064796e7365740000280002800800034000000001080004400000001108000940000000000900010073797a31000000004900010073797a30000000000900020073797a3200000000140000001100010000000000000000000500000a"], 0x90}, 0x1, 0x0, 0x0, 0x4040}, 0x0) close(0xffffffffffffffff) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000002c0)=@generic={&(0x7f0000000280)='./file0/file0\x00'}, 0x14) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000300)=@ethtool_link_settings={0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x300]}}) setns(0xffffffffffffffff, 0x24020000) syz_fuse_handle_req(r0, &(0x7f0000004280)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x90, 0x0, 0x8, {0x1, 0xfffffffffffffffd, 0x2000, 0x1ffff, 0x6, 0x84, {0x4, 0x25, 0x7, 0x80000000, 0x4, 0xffff, 0x7d59, 0x5, 0x4, 0x8000, 0x7f, r2, r3, 0xcb, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.703049083s ago: executing program 3 (id=9011): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) socket$inet6(0xa, 0x3, 0x84) socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000014000100000000000000000028000000"], 0x14}}, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x30, 0x1000, 0xbb3a, 0x2, 0x0, 0x100, {0x0, 0x40002000}, {0x3, 0x2, 0x1}, {0x4000000, 0x7}, {0x0, 0x8, 0x40000}, 0x0, 0x3f0, 0x0, 0x7, 0x0, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=@newqdisc={0x1a8, 0x24, 0x4ee4e6a52ff56541, 0x9, 0x2, {0x0, 0x0, 0x0, r11, {0x0, 0xffff}, {0xc, 0xffff}, {0x0, 0xf}}, [@TCA_STAB={0x50, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x3, 0x8, 0x4, 0x2, 0x6, 0x80, 0x5}}, {0xe, 0x2, [0x5, 0x0, 0xb, 0x81, 0xb2e0]}}, {{0x1c, 0x1, {0x7, 0xf7, 0x515b, 0x6, 0x1, 0x7, 0xff}}, {0x4}}]}, @TCA_STAB={0x134, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x8, 0x40, 0x8, 0x0, 0x6, 0xfffffff2, 0x5}}, {0xe, 0x2, [0x0, 0x2, 0x3, 0x7272, 0x724]}}, {{0x1c, 0x1, {0xa0, 0x3, 0x3, 0x9, 0x1, 0xa5cbfa6, 0xfffff631, 0x7}}, {0x12, 0x2, [0xa, 0x200, 0x200, 0x68, 0xfff, 0x2, 0x0]}}, {{0x1c, 0x1, {0x4, 0x2, 0x1, 0x1, 0x1, 0xc3bb, 0x9, 0x1}}, {0x6, 0x2, [0x7af3]}}, {{0x1c, 0x1, {0x3, 0x5, 0x7, 0xa, 0x2, 0x3, 0x5, 0x8}}, {0x14, 0x2, [0xbe, 0x2, 0x9e, 0x4, 0x1c2d, 0x3, 0x4, 0xc]}}, {{0x1c, 0x1, {0x7, 0x8e, 0x4b07, 0x3, 0x1, 0xd, 0x400, 0x4}}, {0xc, 0x2, [0x2, 0x6, 0x2ca4, 0x9]}}, {{0x1c, 0x1, {0x61, 0x1, 0x0, 0x1, 0x1, 0x7, 0xfffff801, 0x4}}, {0xc, 0x2, [0x9, 0x6, 0x81, 0x3]}}, {{0x1c, 0x1, {0x3, 0x3, 0x3, 0x4, 0x0, 0xf2f, 0x5, 0x7}}, {0x12, 0x2, [0x1, 0x3ff, 0x0, 0x3, 0x8, 0x3, 0x80]}}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x2400c8c0}, 0x8000) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000020180c000000008000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x8, 0x1009, &(0x7f0000001640)=""/4105, 0x0, 0x8}, 0x94) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x1, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) timerfd_create(0x0, 0x800) r12 = openat$vicodec0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r12, 0xc0185647, &(0x7f0000000100)={0xf030000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90f, 0x8000000, '\x00', @string=&(0x7f0000000340)=0xfe}}) 4.959771696s ago: executing program 4 (id=9012): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1}) (fail_nth: 3) 4.387999611s ago: executing program 4 (id=9014): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x169a82, 0x0) sendfile(r0, r0, 0x0, 0x30) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000040)={0x3, 0x10001, 0x5, 0x278bbc3, 0xfc, "5522fee47b618c9744d089ecbcc0bc1614bea3", 0x3, 0x8}) syz_io_uring_setup(0x4e1, &(0x7f0000000380)={0x0, 0x11ffffa, 0x10100, 0x3}, 0x0, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000980)={0x200, 0x0, 0x0, 0x0, {0x5}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2.377765564s ago: executing program 0 (id=9015): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x4, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x9}]}, &(0x7f00000002c0)=0xc) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000bc0)={{0x12, 0x1, 0x0, 0x44, 0x39, 0xdc, 0x40, 0x1660, 0x1921, 0x1f84, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x3, 0x0, 0x0, 0xf6, 0x62, 0x70}}]}}]}}, 0x0) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000280)={0x20, 0x0, 0x1, "f6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r5, 0x0, &(0x7f0000000340)={0x18, &(0x7f0000000140)={0x0, 0xf, 0xa, "2c8ddce754b6caafdb73"}, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000040)={r6, 0xffffffff}, &(0x7f0000000080)=0x8) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r2, {}, {0x2, 0xa}, {0x9, 0x4}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x10, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0x3e2e3c6fc38a2b0f}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c0e9}, 0x4008000) 2.274531591s ago: executing program 3 (id=9016): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x8042, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$P9_RSTATu(r0, &(0x7f0000000580)={0x208, 0x2, 0x0, {{0x500, 0xf8, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x1d, '\xd2\x99\x98\x80\x14\x98l\xe9\x82\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e\x97\xa5\x9ad', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x239) syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) unshare(0x2a060400) pselect6(0x40, &(0x7f0000000000)={0x8, 0x0, 0x200, 0x3, 0x2, 0x400, 0x1000, 0x5}, 0x0, 0x0, &(0x7f0000000140), 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r3, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002d80)=ANY=[@ANYBLOB="580000001000ffff25bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1414000021200000300012800c0001006d6163766c616e0020000280080003000000000008000100100000000a000400aaaaaaaaaaaa000008000500", @ANYRES32=r6, @ANYBLOB="bfd680f37955180500d43c4b88814441a655ba8cfb7abba7c5cb82972092c67f1b59ab640a43363dce29c0c5aed5c5f115701627babf40fd310b36bf18b3000019666520cf96c6677f26c5bc878ff93a471e32344b93e2d9fcd6a266b86be604cdcbe96ee12c90ddd7180c4e0f6fa78087ba52cab8b793784381b28556b0e5b6bcfea96579e31ca54ee4cabd5ce368bcc02f649afd117bddf1f5b934b829b62645fb23ac7db2883bacef99deaac6a05c3bf16db54481e7a9c06ba22acd7db471512c8f582138a738f5df9ea9a3f991d0bc419d83ea8e6e1f3bb251fcfd7da82a02e2d659cf818454d0b6af795865192060a52c30"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) openat$misdntimer(0xffffff9c, &(0x7f0000000000), 0x880, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1}) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000100)={'gretap0\x00', r6, 0x80, 0x10, 0x2, 0x441, {{0x6, 0x4, 0x0, 0x2, 0x18, 0x64, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@ra={0x94, 0x4}]}}}}}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r10, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f00000001c0)={@rand_addr, 0x0}, &(0x7f0000000200)=0x14) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000280)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x18d1, 0x5030, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7, 0x60, 0x1, [{{0x9, 0x4, 0x0, 0xb, 0x2, 0x3, 0x1, 0x3, 0x63, {0x9, 0x21, 0x5, 0x8, 0x1, {0x22, 0xbd6}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x10, 0x1, 0xac}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x65, 0x2, 0x80}}]}}}]}}]}}, &(0x7f0000000980)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x310, 0x83, 0x0, 0x9, 0x0, 0x8}, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="050f0c00f607100218890500"], 0x5, [{0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x41a}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x1c09}}, {0xb9, &(0x7f0000000880)=@string={0xb9, 0x3, "396a4d17ebe390207c89dedb8826158e8d21925427fb0dcae02728c4a5bf4855a637180aa22bc010305190d75da76d0d1b5b6e9d6b8f78eb5b9f2854c0282d42553c05b4f9c1c84da6f07d433cfce39cb4eb3c91da271571c12906c69362f127c73bdb8e5703cbd62a860f6e1c363949743c3a87832133aa21fd2a229357c751d97adec78e409ec8b7d4895f125f811cbd8c7e70289b48b00ab52d34f10de9ed1533a7b66b4aa8c29d7c3b883463f658ab0a66be2824ad"}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x423}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x2801}}]}) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010025bd7000fadbdf2500000000", @ANYRES32=r14, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800030005fa4db3"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="78010000", @ANYRES16=r7, @ANYBLOB="000226bd7000fbdbdf25190000002c0001801400020076657468305f6d6163767461700000001400020064766d727031000000000000000000003c0001801400020076657468315f746f5f6873720000000008000300020000000800030002000000140002006272696467655f736c6176655f3000004c000180080003000700000008000100", @ANYRES32=r6, @ANYBLOB="080003000100000014000200767863616e3100000000000000000000140002006970766c616e3000000000000000000008000300020000002800018014000200626f6e645f736c6176655f310000000008000100", @ANYRES32=r8, @ANYBLOB="080003000200000034000180140002006970365f76746930000000000000000008000100", @ANYRES32=r6, @ANYBLOB="1400020070696d367265673000000000000000004800018008000100", @ANYRES32=r6, @ANYBLOB="1400020076657468315f746f5f7465616d00000008000100", @ANYRES32=r10, @ANYBLOB="080003000100000008000100", @ANYRES32=r11, @ANYBLOB="08000100e676fea3c57dc3baa1d7bb3930279360de682a1e0977b063afaf9c552399011177e0d077c43340ffb18b1b73b4ca30e8293b1bda290e61a799306765ec", @ANYRES32=r14, @ANYBLOB="08000300030000000c0001800800030002000000"], 0x178}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 2.208112842s ago: executing program 1 (id=9017): mq_open(&(0x7f00000004c0)=' \x01 \x00\x00\x00\x00\x0f\x00\x00\x00\x00\xd0\xe3\xac\x88\xc1s\xc5\xec\xa5O\xa2\xf3\"\x88p\"k/K\x99\x147~H\x0f,\x86\xad\xa3\xc0J\v\x1a&\xf0\\\xb8\xcf\xad\xae\x93J\xe7\xcd,\xeb\xef\xee\x93\a\xc51\xd6\x98\x13\xf2\xe8\xe8hY\xd7\x03.\xac\x16H\xcb[,0\x8b\xa0\x83\x84\xb66\xff\xdc\xfe\xb9%\xf7\xdeQ\v\xbe$\xa1\xc8\x97\x9b\xba\n\xd1\x14*\xac\x84\t\xe93qE\x8f_\xcb\xeap\x0f\\;\xb7\x1c\x03\x03\xbc\xa3\xcc\xbe\x03\xb3$\x95\xb4\xd9\xca$%_\x1b{\xfa~y\xba\xf5I\xbar)\n\x93\xbe\a6\xf8&\xbe-\xb2\xf2\xa5|Jh\x15,\\(=t\xa8\xe3\xe3\xf8!B[\xa8\x1bz\x83i\xa2\x1e\xb4V\xc7\xc0\x00P,\x81x\x7f\xc6\x05~\x9e\xa9\x97<2C\x13\xc9\x01N\xfa\x97\\<\xbc\xb6<\xb5\xc4.\xcaX4%fn|\x00'/237, 0x40, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="f1ff00001000010000000000000000000000000a140000001100f00100"/40], 0x28}}, 0x0) r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x80, &(0x7f0000000040)}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@can_newroute={0x154, 0x18, 0x1, 0x70bd29, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_CS_CRC8={0x11e, 0x6, {0x0, 0xff, 0x3, 0x0, 0xff, "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", 0x0, "5c8d586b2a88d818b56d2a5e15c8a95d29e5b2ea"}}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xe, 0xf5, 0x2}}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x0, 0x1}, 0x0, 0x5, 0x0, 0x0, '\t\x00'}, 0x1}}]}, 0x154}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYRESOCT=r1], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x400000004000300}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r3) mkdir(&(0x7f0000000100)='./control\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000016c0)=@base={0x9, 0x4, 0x8, 0x8, 0x8}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, r4}, 0x38) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) unshare(0x26020480) r5 = socket(0x2, 0x3, 0x1) getsockopt(r5, 0xff, 0x100000000000001, 0x0, &(0x7f0000000040)=0xfffffffffffffffe) 1.785306219s ago: executing program 1 (id=9018): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892", 0xc) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)={0x90, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_SEQ={0xf, 0xa, "433ed813f881642681c5ac"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "65f9def25dc4aa27c8d48c7ab8"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "3ccbbadd4b"}, @NL80211_ATTR_KEY_SEQ={0x5, 0xa, ']'}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "a21d63b93a4508bb268a8e28e8"}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 1.681589921s ago: executing program 1 (id=9019): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000800)={0x28, 0x76, 0x800, 0x0, 0xfffffffd, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0xd, 0xd, 0x0, 0x1, [@generic="a9", @typed={0x8, 0x136, 0x0, 0x0, @ipv4=@broadcast}]}]}, 0x28}], 0x1, 0x0, 0x0, 0x4004000}, 0x200040c0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind(r1, &(0x7f0000000080)=@un=@abs={0x0, 0x0, 0x2000000}, 0x80) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x24, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xfff2}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) r4 = socket(0xa, 0x3, 0x3a) r5 = openat$pfkey(0xffffff9c, &(0x7f0000000080), 0x8000, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r5, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="020026bd7025510000000a000001000080000000000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x20004041}, 0x800) ioctl$SCSI_IOCTL_PROBE_HOST(r5, 0x5385, &(0x7f0000000100)={0x89, ""/137}) 1.560388544s ago: executing program 1 (id=9020): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @empty, 0x2}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, 0x0, 0x0) bind$rxrpc(r0, &(0x7f0000000100)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @rand_addr=0x4}, 0x3}}, 0x24) r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x717e, 0x100, 0x14, 0x150}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e24, 0x7f, @dev={0xfe, 0x80, '\x00', 0x29}, 0xa5e1}}, 0x24) 1.474599583s ago: executing program 4 (id=9021): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb4, 0x19, 0x1, 0x0, 0x25dfdbff, {{@in=@multicast2, @in=@remote, 0x0, 0xffff, 0x0, 0x0, 0xa, 0x20}, {0x8, 0x10, 0x100000002, 0x0, 0xfff, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x1, 0x0, 0x3}}, 0xb4}}, 0x4004) r2 = socket$netlink(0x10, 0x3, 0xe) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000400)) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2f, 0x0) sendmmsg$inet6(r3, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000000)='3', 0x1}], 0x1}}], 0x1, 0x20e8086) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000006000/0x4000)=nil) mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800030000000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000002000000", 0xfe60) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca4198914"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) lseek(r5, 0x6, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r9, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001240)=[{0x10, 0x110, 0x1, "dc"}], 0x10}, 0xc010) close_range(r8, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_MAP(r5, 0xc0186404, &(0x7f0000000180)={&(0x7f0000ffc000/0x3000)=nil}) r10 = openat$null(0xffffff9c, &(0x7f0000010b80), 0xb00, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={r5, 0x20, &(0x7f0000000240)={&(0x7f0000000540)=""/199, 0xc7, 0x0, &(0x7f0000000640)=""/216, 0xd8}}, 0x10) preadv(r10, &(0x7f0000011bc0)=[{&(0x7f0000010bc0)=""/4096, 0x1000}], 0x1, 0xff, 0x2) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb4, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x1000, 0x0, 0xa, 0x20}, {}, {0x1, 0x6, 0x0, 0xfffffffffffffffe}}}, 0xb4}, 0x1, 0x0, 0x0, 0x2404c830}, 0x0) 1.102037079s ago: executing program 3 (id=9022): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x24000040) (fail_nth: 2) 503.747388ms ago: executing program 3 (id=9023): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0x88, 0x5, 0x20, 0x8086, 0x9500, 0xb6d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x15, 0xcc, 0x1c}}]}}]}}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000a40)={&(0x7f00000000c0)=[{0x1e, 0x6000, 0x0, 0x0}, {0x6, 0x4001, 0x0, 0x0}], 0x2}) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @empty}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000380)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x20, 0xfc, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xff58}}}}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000080)={@broadcast, @private=0xa010100, 0x1, "34d5fdb244787aae1037b3cc0dfd25debc5e463e671f467a7381248bf19b3846", 0xe7, 0x9, 0x8, 0x8}, 0x3c) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=@newtfilter={0x38, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x6db6ec49e3ab5510, 0x4}, {0x0, 0xc}, {0xb, 0x4}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x400c084) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, r10, 0x18013, 0x5a0bb}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_LP_INTERVAL={0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000140)={@dev, 0x0}, &(0x7f0000000180)=0x14) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x80, r4, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) socketpair$unix(0x1, 0x3, 0x0, 0x0) r12 = socket(0xa, 0x3, 0x3a) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f0000000340)={'pim6reg\x00', 0x2}) setsockopt$MRT6_ADD_MIF(r12, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) 277.528946ms ago: executing program 1 (id=9024): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth0_vlan\x00', 0x10}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0xa0000, 0x0) close(r1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r4, 0x0, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="b40000001800090000000000000000001c140000fe0000010000000005001a0008"], 0xb4}}, 0x24040810) (async) close(r5) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r11, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r11, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r11, 0xc02064b6, &(0x7f00000001c0)={r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r11, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r13}) (async) ioctl$DRM_IOCTL_MODE_ATOMIC(r11, 0xc03864bc, &(0x7f00000004c0)={0x200, 0x1, &(0x7f0000000440)=[r13], &(0x7f0000000180)=[0xfb], &(0x7f0000000400), &(0x7f0000000300)=[0x0, 0x5dd09724]}) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x5}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20048089}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0x80000, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0x2, 0xb}, {0x7, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7f, 0x0, 0x5, 0x1, 0x8}, 0x47a, 0x0, 0x80008, 0x5, 0x8, 0x1, 0x9, 0xd, 0x9, 0x1, {0x7, 0xb9f, 0x1000, 0x80000000, 0x2, 0x2}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c860}, 0x4008000) (async) r14 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000008a020874200000000000109002d0001000030200904000102030001000921032006012205000905d95b4e2fa9820003050203200004ba9f"], 0x0) syz_usb_control_io(r14, 0x0, 0x0) (async) syz_usb_control_io$hid(r14, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@local=@item_012={0x2, 0x2, 0x9, "a39f"}, @main=@item_012={0x1, 0x0, 0x9, "ed"}]}}, 0x0}, 0x0) (async) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) 141.096715ms ago: executing program 4 (id=9025): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x29, 0xfffffffe, 0x0, 0x0, 0x40, 0x2, 0x0, 0x0, 0x0, 0x10, 0x66}}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14008051}}, {{&(0x7f00000000c0)=@file={0x1, './file0/file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40080}}], 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000061107b00000000000400"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0xffffffff) lsetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000200)=@known='user.incfs.id\x00', 0x0, 0x0, 0x0) r5 = add_key$user(&(0x7f0000000400), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000480)='\n', 0x1, 0xffffffffffffffff) r6 = add_key$user(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)="f40fc24077021c9b084c60ffc26f26db12b9e78d629870bb26edb4a5e1cc0942ed8c58ca4fe84b94a0e31ea64089ee9ca1efb52945ffebbfea11dd3d0df936a10285eccab940ab5c96cb5d81dac1ad2243d878dde6cfd6ea08d5abcb00bb35436929ddabce530b63fab525337057438cf64a506d54d5c83e3e593d1d53ad0e6a44168fe8cfc6ad98b653d80636e4ddc1f2ab58762b3494250b9557f5b606a43e50874c90143034142cd5f7bd9b4dd876b97b7feb75b9138dde818a3c6b96dd80", 0xc0, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000440)={r5, r6, r5}, &(0x7f0000002380)=""/4102, 0x1060, 0x0) lsetxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) unlink(&(0x7f00000003c0)='./file0\x00') r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1038, 0x12b6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x20, r9, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_WOL_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x4000040) syz_usb_control_io(r7, &(0x7f0000000440)={0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="b23b3b"], 0x0, 0x0, 0x0, 0x0}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a68000000060a0b0400000000000000000200fffe3c000480380001800b00010064796e7365740000280002800800034000000001080004400000001108000940000000000900010073797a31000000004900010073797a30000000000900020073797a3200000000140000001100010000000000000000000500000a"], 0x90}, 0x1, 0x0, 0x0, 0x4040}, 0x0) close(0xffffffffffffffff) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000002c0)=@generic={&(0x7f0000000280)='./file0/file0\x00'}, 0x14) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000300)=@ethtool_link_settings={0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x300]}}) setns(0xffffffffffffffff, 0x24020000) syz_fuse_handle_req(r0, &(0x7f0000004280)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x90, 0x0, 0x8, {0x1, 0xfffffffffffffffd, 0x2000, 0x1ffff, 0x6, 0x84, {0x4, 0x25, 0x7, 0x80000000, 0x4, 0xffff, 0x7d59, 0x5, 0x4, 0x8000, 0x7f, r2, r3, 0xcb, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 1 (id=9026): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) syz_open_procfs(0x0, &(0x7f00000005c0)='smaps_rollup\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) openat$iommufd(0xffffffffffffff9c, &(0x7f00000004c0), 0x101080, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x0, 0x3, 0x1, 0x1, 0x9, 0x8, 0x2, 0x3}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x405, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5}, @IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r4, 0x40085112, &(0x7f00000001c0)=@echo=0x8) r5 = io_uring_setup(0x20, &(0x7f00000000c0)={0x0, 0x0, 0x3000, 0x80000000, 0xfefffffd}) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000300)={0x10000008}) r7 = socket$rxrpc(0x21, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'pimreg1\x00'}) r8 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e20, 0x1, @loopback, 0x11}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @private2, 0x3ff}, 0x1c) getsockopt(0xffffffffffffffff, 0x200000000114, 0x271c, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) kernel console output (not intermixed with test programs): le Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2503.648573][ T5809] Call Trace: [ 2503.648582][ T5809] [ 2503.648591][ T5809] dump_stack_lvl+0x189/0x250 [ 2503.648617][ T5809] ? __pfx____ratelimit+0x10/0x10 [ 2503.648645][ T5809] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2503.648665][ T5809] ? __pfx__printk+0x10/0x10 [ 2503.648690][ T5809] ? __pfx___might_resched+0x10/0x10 [ 2503.648713][ T5809] ? fs_reclaim_acquire+0x7d/0x100 [ 2503.648740][ T5809] should_fail_ex+0x414/0x560 [ 2503.648772][ T5809] should_failslab+0xa8/0x100 [ 2503.648797][ T5809] kmem_cache_alloc_node_noprof+0x77/0x710 [ 2503.648817][ T5809] ? __alloc_skb+0x112/0x2d0 [ 2503.648846][ T5809] __alloc_skb+0x112/0x2d0 [ 2503.648874][ T5809] netlink_sendmsg+0x5c6/0xb30 [ 2503.648910][ T5809] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2503.648937][ T5809] ? __import_iovec+0x5d4/0x7f0 [ 2503.648958][ T5809] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2503.648981][ T5809] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2503.649003][ T5809] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2503.649028][ T5809] __sock_sendmsg+0x21c/0x270 [ 2503.649054][ T5809] ____sys_sendmsg+0x505/0x830 [ 2503.649085][ T5809] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2503.649127][ T5809] ___sys_sendmsg+0x21f/0x2a0 [ 2503.649148][ T5809] ? __pfx____sys_sendmsg+0x10/0x10 [ 2503.649199][ T5809] ? __fget_files+0x2a/0x420 [ 2503.649220][ T5809] ? __fget_files+0x3a0/0x420 [ 2503.649251][ T5809] __sys_sendmsg+0x164/0x220 [ 2503.649269][ T5809] ? __pfx___sys_sendmsg+0x10/0x10 [ 2503.649301][ T5809] ? __pfx_ksys_write+0x10/0x10 [ 2503.649320][ T5809] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2503.649341][ T5809] ? lockdep_hardirqs_on+0x9c/0x150 [ 2503.649360][ T5809] __do_fast_syscall_32+0xb6/0x2b0 [ 2503.649378][ T5809] ? lockdep_hardirqs_on+0x9c/0x150 [ 2503.649399][ T5809] do_fast_syscall_32+0x34/0x80 [ 2503.649418][ T5809] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2503.649439][ T5809] RIP: 0023:0xf7f41539 [ 2503.649456][ T5809] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2503.649472][ T5809] RSP: 002b:00000000f543655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2503.649492][ T5809] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 2503.649503][ T5809] RDX: 0000000004048010 RSI: 0000000000000000 RDI: 0000000000000000 [ 2503.649514][ T5809] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2503.649525][ T5809] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2503.649536][ T5809] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2503.649571][ T5809] [ 2503.926954][T28314] steelseries 0003:1038:12B6.0080: unknown main item tag 0x0 [ 2503.934668][T28314] steelseries 0003:1038:12B6.0080: unknown main item tag 0x0 [ 2503.942215][T28314] steelseries 0003:1038:12B6.0080: unknown main item tag 0x6 [ 2503.949713][T28314] steelseries 0003:1038:12B6.0080: item fetching failed at offset 4/7 [ 2503.960405][T28314] steelseries 0003:1038:12B6.0080: probe with driver steelseries failed with error -22 [ 2503.963613][ T5811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2504.015755][ T5829] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 2504.016032][ T5811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2504.022142][ T5829] input input515: Device does not respond to id packet M [ 2504.076056][ T5817] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8708'. [ 2504.136931][ T5829] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 2504.143186][ T5829] input input515: Device does not respond to id packet P [ 2504.150717][ T5829] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 2504.157337][ T5829] input input515: Device does not respond to id packet B [ 2504.167977][ T5829] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 2504.174245][ T5829] input input515: Device does not respond to id packet N [ 2504.182678][ T5829] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 2504.208291][ T5829] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 2504.217727][ T5829] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 2504.224502][ T5796] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8701'. [ 2504.229439][ T5829] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 2504.245932][ T5829] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input515 [ 2504.277380][ T5829] usb 2-1: USB disconnect, device number 35 [ 2504.325852][ T5822] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8709'. [ 2504.357438][ T5822] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 2504.400714][ T5825] FAULT_INJECTION: forcing a failure. [ 2504.400714][ T5825] name failslab, interval 1, probability 0, space 0, times 0 [ 2504.414999][ T5825] CPU: 0 UID: 0 PID: 5825 Comm: syz.2.8711 Not tainted syzkaller #0 PREEMPT(full) [ 2504.415025][ T5825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2504.415040][ T5825] Call Trace: [ 2504.415049][ T5825] [ 2504.415057][ T5825] dump_stack_lvl+0x189/0x250 [ 2504.415084][ T5825] ? __pfx____ratelimit+0x10/0x10 [ 2504.415110][ T5825] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2504.415129][ T5825] ? __pfx__printk+0x10/0x10 [ 2504.415151][ T5825] ? __pfx___might_resched+0x10/0x10 [ 2504.415172][ T5825] ? fs_reclaim_acquire+0x7d/0x100 [ 2504.415196][ T5825] should_fail_ex+0x414/0x560 [ 2504.415226][ T5825] should_failslab+0xa8/0x100 [ 2504.415250][ T5825] kmem_cache_alloc_node_noprof+0x77/0x710 [ 2504.415269][ T5825] ? __alloc_skb+0x112/0x2d0 [ 2504.415290][ T5825] __alloc_skb+0x112/0x2d0 [ 2504.415305][ T5825] netlink_sendmsg+0x5c6/0xb30 [ 2504.415324][ T5825] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2504.415338][ T5825] ? __import_iovec+0x5d4/0x7f0 [ 2504.415350][ T5825] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2504.415363][ T5825] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2504.415376][ T5825] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2504.415390][ T5825] __sock_sendmsg+0x21c/0x270 [ 2504.415404][ T5825] ____sys_sendmsg+0x505/0x830 [ 2504.415421][ T5825] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2504.415443][ T5825] ___sys_sendmsg+0x21f/0x2a0 [ 2504.415453][ T5825] ? __pfx____sys_sendmsg+0x10/0x10 [ 2504.415480][ T5825] ? __fget_files+0x2a/0x420 [ 2504.415491][ T5825] ? __fget_files+0x3a0/0x420 [ 2504.415514][ T5825] __sys_sendmsg+0x164/0x220 [ 2504.415525][ T5825] ? __pfx___sys_sendmsg+0x10/0x10 [ 2504.415544][ T5825] ? __pfx_ksys_write+0x10/0x10 [ 2504.415556][ T5825] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2504.415568][ T5825] ? lockdep_hardirqs_on+0x9c/0x150 [ 2504.415579][ T5825] __do_fast_syscall_32+0xb6/0x2b0 [ 2504.415591][ T5825] ? lockdep_hardirqs_on+0x9c/0x150 [ 2504.415602][ T5825] do_fast_syscall_32+0x34/0x80 [ 2504.415613][ T5825] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2504.415625][ T5825] RIP: 0023:0xf7fa6539 [ 2504.415635][ T5825] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2504.415645][ T5825] RSP: 002b:00000000f549655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2504.415657][ T5825] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000240 [ 2504.415664][ T5825] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2504.415670][ T5825] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2504.415676][ T5825] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2504.415682][ T5825] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2504.415697][ T5825] [ 2504.728398][ T5830] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8712'. [ 2504.862498][ T5834] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8714'. [ 2505.238530][ T5841] FAULT_INJECTION: forcing a failure. [ 2505.238530][ T5841] name failslab, interval 1, probability 0, space 0, times 0 [ 2505.269863][ T2954] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 2505.279110][ T5841] CPU: 0 UID: 0 PID: 5841 Comm: syz.1.8716 Not tainted syzkaller #0 PREEMPT(full) [ 2505.279137][ T5841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2505.279149][ T5841] Call Trace: [ 2505.279157][ T5841] [ 2505.279166][ T5841] dump_stack_lvl+0x189/0x250 [ 2505.279191][ T5841] ? __pfx____ratelimit+0x10/0x10 [ 2505.279218][ T5841] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2505.279238][ T5841] ? __pfx__printk+0x10/0x10 [ 2505.279263][ T5841] ? __pfx___might_resched+0x10/0x10 [ 2505.279285][ T5841] ? fs_reclaim_acquire+0x7d/0x100 [ 2505.279311][ T5841] should_fail_ex+0x414/0x560 [ 2505.279342][ T5841] should_failslab+0xa8/0x100 [ 2505.279366][ T5841] kmem_cache_alloc_node_noprof+0x77/0x710 [ 2505.279387][ T5841] ? __alloc_skb+0x112/0x2d0 [ 2505.279415][ T5841] ? netlink_autobind+0xdb/0x300 [ 2505.279443][ T5841] __alloc_skb+0x112/0x2d0 [ 2505.279471][ T5841] netlink_sendmsg+0x5c6/0xb30 [ 2505.279504][ T5841] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2505.279531][ T5841] ? __import_iovec+0x5d4/0x7f0 [ 2505.279552][ T5841] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2505.279575][ T5841] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2505.279597][ T5841] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2505.279624][ T5841] __sock_sendmsg+0x21c/0x270 [ 2505.279648][ T5841] ____sys_sendmsg+0x505/0x830 [ 2505.279680][ T5841] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2505.279728][ T5841] ___sys_sendmsg+0x21f/0x2a0 [ 2505.279747][ T5841] ? __pfx____sys_sendmsg+0x10/0x10 [ 2505.279800][ T5841] ? __fget_files+0x2a/0x420 [ 2505.279821][ T5841] ? __fget_files+0x3a0/0x420 [ 2505.279852][ T5841] __sys_sendmsg+0x164/0x220 [ 2505.279872][ T5841] ? __pfx___sys_sendmsg+0x10/0x10 [ 2505.279908][ T5841] ? __pfx_ksys_write+0x10/0x10 [ 2505.279930][ T5841] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2505.279951][ T5841] ? lockdep_hardirqs_on+0x9c/0x150 [ 2505.279972][ T5841] __do_fast_syscall_32+0xb6/0x2b0 [ 2505.279993][ T5841] ? lockdep_hardirqs_on+0x9c/0x150 [ 2505.280016][ T5841] do_fast_syscall_32+0x34/0x80 [ 2505.280036][ T5841] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2505.280058][ T5841] RIP: 0023:0xf7fc7539 [ 2505.280075][ T5841] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2505.280092][ T5841] RSP: 002b:00000000f54b655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2505.280113][ T5841] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000240 [ 2505.280127][ T5841] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 2505.280138][ T5841] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2505.280150][ T5841] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2505.280161][ T5841] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2505.280190][ T5841] [ 2505.564325][ T5829] usb 4-1: USB disconnect, device number 42 [ 2505.569162][ T5843] FAULT_INJECTION: forcing a failure. [ 2505.569162][ T5843] name failslab, interval 1, probability 0, space 0, times 0 [ 2505.583239][ T5843] CPU: 0 UID: 0 PID: 5843 Comm: syz.3.8717 Not tainted syzkaller #0 PREEMPT(full) [ 2505.583266][ T5843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2505.583277][ T5843] Call Trace: [ 2505.583286][ T5843] [ 2505.583294][ T5843] dump_stack_lvl+0x189/0x250 [ 2505.583317][ T5843] ? __pfx____ratelimit+0x10/0x10 [ 2505.583343][ T5843] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2505.583362][ T5843] ? __pfx__printk+0x10/0x10 [ 2505.583385][ T5843] ? __pfx___might_resched+0x10/0x10 [ 2505.583409][ T5843] ? fs_reclaim_acquire+0x7d/0x100 [ 2505.583434][ T5843] should_fail_ex+0x414/0x560 [ 2505.583463][ T5843] should_failslab+0xa8/0x100 [ 2505.583486][ T5843] kmem_cache_alloc_node_noprof+0x77/0x710 [ 2505.583505][ T5843] ? __alloc_skb+0x112/0x2d0 [ 2505.583528][ T5843] ? netlink_autobind+0xdb/0x300 [ 2505.583557][ T5843] __alloc_skb+0x112/0x2d0 [ 2505.583583][ T5843] netlink_sendmsg+0x5c6/0xb30 [ 2505.583616][ T5843] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2505.583643][ T5843] ? __import_iovec+0x5d4/0x7f0 [ 2505.583662][ T5843] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2505.583691][ T5843] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2505.583713][ T5843] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2505.583739][ T5843] __sock_sendmsg+0x21c/0x270 [ 2505.583763][ T5843] ____sys_sendmsg+0x505/0x830 [ 2505.583794][ T5843] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2505.583834][ T5843] ___sys_sendmsg+0x21f/0x2a0 [ 2505.583855][ T5843] ? __pfx____sys_sendmsg+0x10/0x10 [ 2505.583907][ T5843] ? __fget_files+0x2a/0x420 [ 2505.583927][ T5843] ? __fget_files+0x3a0/0x420 [ 2505.583959][ T5843] __sys_sendmsg+0x164/0x220 [ 2505.583978][ T5843] ? __pfx___sys_sendmsg+0x10/0x10 [ 2505.584014][ T5843] ? __pfx_ksys_write+0x10/0x10 [ 2505.584037][ T5843] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2505.584058][ T5843] ? lockdep_hardirqs_on+0x9c/0x150 [ 2505.584079][ T5843] __do_fast_syscall_32+0xb6/0x2b0 [ 2505.584100][ T5843] ? lockdep_hardirqs_on+0x9c/0x150 [ 2505.584120][ T5843] do_fast_syscall_32+0x34/0x80 [ 2505.584138][ T5843] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2505.584159][ T5843] RIP: 0023:0xf703d539 [ 2505.584176][ T5843] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2505.584192][ T5843] RSP: 002b:00000000f542d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2505.584212][ T5843] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000240 [ 2505.584224][ T5843] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 2505.584236][ T5843] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2505.584247][ T5843] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2505.584258][ T5843] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2505.584286][ T5843] [ 2505.900452][ T2954] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2505.910992][ T2954] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2505.922270][ T2954] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2505.952263][ T2954] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 2505.983562][ T2954] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 2506.023715][ T2954] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2506.033371][ T2954] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2506.042659][ T2954] usb 3-1: Product: syz [ 2506.052730][ T2954] usb 3-1: Manufacturer: syz [ 2506.086162][ T2954] cdc_wdm 3-1:1.0: skipping garbage [ 2506.101010][ T2954] cdc_wdm 3-1:1.0: skipping garbage [ 2506.130885][ T2954] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 2506.137080][ T2954] cdc_wdm 3-1:1.0: Unknown control protocol [ 2506.193185][ T2946] usb 1-1: USB disconnect, device number 93 [ 2506.290847][ T5839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2506.301804][ T5839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2506.654733][ C1] cdc_wdm 3-1:1.0: Unexpected error -71 [ 2506.660446][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 2506.667077][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 2506.673563][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 2506.680196][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 2506.686808][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 2506.693439][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 2506.700195][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 2506.706802][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 2506.713635][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 2506.720319][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 2506.727484][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 2506.734115][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 2506.741089][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 2506.747730][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 2506.754206][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 2506.760838][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 2506.767400][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 2506.774030][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 2506.780965][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 2506.787695][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 2506.795064][ T2954] usb 3-1: USB disconnect, device number 53 [ 2506.801124][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 2506.865590][ T5877] FAULT_INJECTION: forcing a failure. [ 2506.865590][ T5877] name failslab, interval 1, probability 0, space 0, times 0 [ 2506.878886][ T5877] CPU: 0 UID: 0 PID: 5877 Comm: syz.3.8729 Not tainted syzkaller #0 PREEMPT(full) [ 2506.878914][ T5877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2506.878926][ T5877] Call Trace: [ 2506.878935][ T5877] [ 2506.878944][ T5877] dump_stack_lvl+0x189/0x250 [ 2506.878968][ T5877] ? __pfx____ratelimit+0x10/0x10 [ 2506.878995][ T5877] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2506.879014][ T5877] ? __pfx__printk+0x10/0x10 [ 2506.879038][ T5877] ? __pfx___might_resched+0x10/0x10 [ 2506.879061][ T5877] ? fs_reclaim_acquire+0x7d/0x100 [ 2506.879087][ T5877] should_fail_ex+0x414/0x560 [ 2506.879117][ T5877] should_failslab+0xa8/0x100 [ 2506.879140][ T5877] kmem_cache_alloc_node_noprof+0x77/0x710 [ 2506.879154][ T5877] ? __alloc_skb+0x112/0x2d0 [ 2506.879169][ T5877] ? netlink_autobind+0xdb/0x300 [ 2506.879186][ T5877] __alloc_skb+0x112/0x2d0 [ 2506.879202][ T5877] netlink_sendmsg+0x5c6/0xb30 [ 2506.879220][ T5877] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2506.879235][ T5877] ? __import_iovec+0x5d4/0x7f0 [ 2506.879254][ T5877] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2506.879274][ T5877] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2506.879295][ T5877] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2506.879321][ T5877] __sock_sendmsg+0x21c/0x270 [ 2506.879339][ T5877] ____sys_sendmsg+0x505/0x830 [ 2506.879357][ T5877] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2506.879380][ T5877] ___sys_sendmsg+0x21f/0x2a0 [ 2506.879390][ T5877] ? __pfx____sys_sendmsg+0x10/0x10 [ 2506.879422][ T5877] ? __fget_files+0x2a/0x420 [ 2506.879434][ T5877] ? __fget_files+0x3a0/0x420 [ 2506.879451][ T5877] __sys_sendmsg+0x164/0x220 [ 2506.879462][ T5877] ? __pfx___sys_sendmsg+0x10/0x10 [ 2506.879481][ T5877] ? __pfx_ksys_write+0x10/0x10 [ 2506.879494][ T5877] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2506.879506][ T5877] ? lockdep_hardirqs_on+0x9c/0x150 [ 2506.879517][ T5877] __do_fast_syscall_32+0xb6/0x2b0 [ 2506.879529][ T5877] ? lockdep_hardirqs_on+0x9c/0x150 [ 2506.879541][ T5877] do_fast_syscall_32+0x34/0x80 [ 2506.879551][ T5877] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2506.879564][ T5877] RIP: 0023:0xf703d539 [ 2506.879574][ T5877] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2506.879584][ T5877] RSP: 002b:00000000f542d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2506.879597][ T5877] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 2506.879604][ T5877] RDX: 000000000000c000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2506.879610][ T5877] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2506.879616][ T5877] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2506.879622][ T5877] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2506.879637][ T5877] [ 2507.139438][ T2952] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 2507.341260][ T2952] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2507.352787][ T2952] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2507.402451][ T2952] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2507.429340][ T2952] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2507.453336][ T2952] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2507.463066][ T2952] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2507.473213][ T2952] usb 2-1: Manufacturer: syz [ 2507.491833][ T2952] usb 2-1: config 0 descriptor?? [ 2507.924333][ T2952] appleir 0003:05AC:8243.0081: unknown main item tag 0x0 [ 2507.940896][ T2952] appleir 0003:05AC:8243.0081: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 2509.526883][ T5917] __nla_validate_parse: 5 callbacks suppressed [ 2509.526902][ T5917] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8737'. [ 2509.564171][ T5917] input: syz1 as /devices/virtual/input/input516 [ 2509.576390][ T5919] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8738'. [ 2509.679394][ T2954] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 2509.891093][ T2954] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2509.902986][ T2954] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2509.912902][ T2954] usb 3-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 2509.922457][T28314] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 2510.016697][ T2968] usb 2-1: USB disconnect, device number 36 [ 2510.054946][ T5927] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8740'. [ 2510.076071][ T2954] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2510.086353][ T5927] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8740'. [ 2510.108034][ T2954] usb 3-1: config 0 descriptor?? [ 2510.118653][T28314] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 2510.138924][T28314] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 2510.223488][ T5929] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8741'. [ 2510.234600][T28314] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2510.296272][T28314] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2510.339080][T28314] usb 4-1: config 0 descriptor?? [ 2510.365562][T28314] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 2510.735000][ T2968] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 2510.761097][ T2954] steelseries 0003:1038:12B6.0082: unknown main item tag 0x0 [ 2510.768550][ T2954] steelseries 0003:1038:12B6.0082: unknown main item tag 0x0 [ 2510.798233][ T2954] steelseries 0003:1038:12B6.0082: unknown main item tag 0x0 [ 2510.829403][ T2954] steelseries 0003:1038:12B6.0082: unknown main item tag 0x0 [ 2510.836858][ T2954] steelseries 0003:1038:12B6.0082: unknown main item tag 0x0 [ 2510.869425][ T2954] steelseries 0003:1038:12B6.0082: unknown main item tag 0x0 [ 2510.876870][ T2954] steelseries 0003:1038:12B6.0082: unknown main item tag 0x0 [ 2510.911738][ T2968] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2510.934178][ T2954] steelseries 0003:1038:12B6.0082: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.2-1/input0 [ 2510.939352][ T2968] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2510.957967][ T5914] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8736'. [ 2511.037235][ T2968] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2511.070615][ T2968] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2511.074159][ T2954] steelseries 0003:1038:12B6.0082: hid_hw_raw_request() failed with -71 [ 2511.117957][ T2968] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2511.123004][ T2954] usb 3-1: USB disconnect, device number 54 [ 2511.153283][ T5937] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8743'. [ 2511.172607][ T5937] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8743'. [ 2511.174010][ T2968] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2511.208634][ T2968] usb 2-1: Manufacturer: syz [ 2511.221512][ T2968] usb 2-1: config 0 descriptor?? [ 2511.685264][ T2968] appleir 0003:05AC:8243.0083: unknown main item tag 0x0 [ 2511.714175][ T2968] appleir 0003:05AC:8243.0083: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 2512.527809][ T2968] usb 4-1: USB disconnect, device number 43 [ 2512.885814][ T5960] x_tables: duplicate underflow at hook 3 [ 2513.457176][ T5967] loop6: detected capacity change from 0 to 7 [ 2513.486620][ T5967] Dev loop6: unable to read RDB block 7 [ 2513.506101][ T5967] loop6: AHDI p2 [ 2513.514726][ T5967] loop6: partition table partially beyond EOD, truncated [ 2513.574869][ T5975] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8752'. [ 2513.585389][ T5975] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8752'. [ 2513.870839][ T2968] usb 2-1: USB disconnect, device number 37 [ 2514.099344][ T2946] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 2514.381340][ T2946] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2514.399475][ T2946] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2514.472186][ T2946] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2514.504022][ T2946] usb 1-1: config 0 descriptor?? [ 2514.543470][ T2946] pwc: Askey VC010 type 2 USB webcam detected. [ 2515.107125][ T2946] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2515.149982][ T2946] pwc: recv_control_msg error -32 req 02 val 2700 [ 2515.157477][ T2946] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2515.173317][ T2946] pwc: recv_control_msg error -32 req 04 val 1000 [ 2515.187862][ T2946] pwc: recv_control_msg error -32 req 04 val 1300 [ 2515.200519][ T2946] pwc: recv_control_msg error -32 req 04 val 1400 [ 2516.255102][ T2946] pwc: recv_control_msg error -71 req 02 val 2100 [ 2516.274808][ T2946] pwc: recv_control_msg error -71 req 04 val 1500 [ 2516.321971][ T2946] pwc: recv_control_msg error -71 req 02 val 2500 [ 2516.349784][ T2946] pwc: recv_control_msg error -71 req 02 val 2400 [ 2516.382506][ T2946] pwc: recv_control_msg error -71 req 02 val 2600 [ 2516.400032][ T2946] pwc: recv_control_msg error -71 req 02 val 2900 [ 2516.409846][ T2946] pwc: recv_control_msg error -71 req 02 val 2800 [ 2516.443724][ T2946] pwc: recv_control_msg error -71 req 04 val 1100 [ 2516.485870][ T2946] pwc: recv_control_msg error -71 req 04 val 1200 [ 2516.504838][ T2946] pwc: Registered as video103. [ 2516.537512][ T2946] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input517 [ 2516.578297][ T2946] usb 1-1: USB disconnect, device number 94 [ 2516.789070][ T6020] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8764'. [ 2516.801850][ T6020] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8764'. [ 2517.059505][T12045] usb 3-1: new full-speed USB device number 55 using dummy_hcd [ 2517.219403][T28314] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 2517.585249][T12045] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2517.596954][T12045] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2517.628414][T12045] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 2517.654181][T12045] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2517.680357][T28314] usb 1-1: Using ep0 maxpacket: 16 [ 2517.687286][T28314] usb 1-1: config 166 has an invalid interface number: 177 but max is 1 [ 2517.733902][T12045] usb 3-1: config 0 descriptor?? [ 2517.735278][T28314] usb 1-1: config 166 has an invalid interface number: 34 but max is 1 [ 2517.771029][T28314] usb 1-1: config 166 has no interface number 0 [ 2517.782457][T28314] usb 1-1: config 166 has no interface number 1 [ 2517.803578][T28314] usb 1-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 2517.855892][T28314] usb 1-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 2517.868813][T28314] usb 1-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 2517.900427][T28314] usb 1-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 2517.928537][T28314] usb 1-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 2518.094692][T28314] usb 1-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 2518.114105][T28314] usb 1-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 2518.139710][T28314] usb 1-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 2518.151580][T28314] usb 1-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 2518.165530][T28314] usb 1-1: config 166 interface 177 has no altsetting 0 [ 2518.173512][T28314] usb 1-1: config 166 interface 34 has no altsetting 0 [ 2518.213746][T28314] usb 1-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 2518.224966][T28314] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2518.243550][T28314] usb 1-1: Product: syz [ 2518.253685][T28314] usb 1-1: Manufacturer: syz [ 2518.279560][T28314] usb 1-1: SerialNumber: syz [ 2518.532414][T28314] ums-realtek 1-1:166.177: USB Mass Storage device detected [ 2518.666175][T12045] usbhid 3-1:0.0: can't add hid device: -71 [ 2518.701998][T12045] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2518.755542][T28314] ums-realtek 1-1:166.34: USB Mass Storage device detected [ 2518.779107][T12045] usb 3-1: USB disconnect, device number 55 [ 2518.854612][T28314] ums-realtek 1-1:166.34: probe with driver ums-realtek failed with error -5 [ 2518.870926][T28314] uvcvideo 1-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 2518.888779][T28314] uvcvideo 1-1:166.34: No valid video chain found. [ 2518.962073][T28314] usb 1-1: USB disconnect, device number 95 [ 2519.282208][ T6053] fuse: Bad value for 'fd' [ 2519.310894][T28314] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 2519.490122][T28314] usb 1-1: Using ep0 maxpacket: 16 [ 2519.498384][T28314] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2519.498416][T28314] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2519.498438][T28314] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2519.498476][T28314] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 2519.498494][T28314] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2519.523442][T28314] usb 1-1: config 0 descriptor?? [ 2520.000178][T28314] shield 0003:0955:7214.0084: unknown main item tag 0x0 [ 2520.016284][T28314] shield 0003:0955:7214.0084: item fetching failed at offset 2/5 [ 2520.032433][T28314] shield 0003:0955:7214.0084: Parse failed [ 2520.048645][T28314] shield 0003:0955:7214.0084: probe with driver shield failed with error -22 [ 2520.194253][ T2967] usb 1-1: USB disconnect, device number 96 [ 2521.186911][ T6077] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8779'. [ 2521.199004][ T6077] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8779'. [ 2521.474496][ T6081] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8781'. [ 2521.491079][ T6081] netlink: 100 bytes leftover after parsing attributes in process `syz.0.8781'. [ 2521.502246][ T6081] netlink: 100 bytes leftover after parsing attributes in process `syz.0.8781'. [ 2521.539371][T12045] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 2521.751023][T12045] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 2521.866020][T12045] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2521.885095][T12045] usb 3-1: config 0 descriptor?? [ 2523.688162][ T6106] netlink: 'syz.0.8786': attribute type 1 has an invalid length. [ 2523.793987][ T6108] bond1: (slave ip6gretap1): making interface the new active one [ 2523.803903][ T6108] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 2523.813641][ T6108] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 2523.822445][ T6108] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 2523.853885][ T6106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8786'. [ 2523.957062][ T6114] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8790'. [ 2523.982386][ T6114] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2523.989713][ T6114] IPv6: NLM_F_CREATE should be set when creating new route [ 2524.099446][T28314] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 2524.261819][T28314] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2524.276671][T28314] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2524.286543][T28314] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2524.289429][ T2967] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 2524.297794][T28314] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2524.320258][T28314] usb 4-1: Product: syz [ 2524.324839][T28314] usb 4-1: Manufacturer: syz [ 2524.329777][T28314] usb 4-1: SerialNumber: syz [ 2524.339028][T28314] usb 4-1: config 0 descriptor?? [ 2524.352995][T28314] usb 4-1: selecting invalid altsetting 0 [ 2524.491823][ T2967] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2524.503945][ T2967] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2524.518768][ T2967] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 2524.530016][ T2967] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2524.543166][ T2967] usb 2-1: config 0 descriptor?? [ 2524.705720][T28314] usb 4-1: USB disconnect, device number 44 [ 2524.920050][T12045] pegasus 3-1:0.0: setup Pegasus II specific registers [ 2524.958491][ T2967] steelseries 0003:1038:12B6.0085: unknown main item tag 0x0 [ 2524.966328][ T2967] steelseries 0003:1038:12B6.0085: unknown main item tag 0x0 [ 2525.006277][ T2967] steelseries 0003:1038:12B6.0085: unknown main item tag 0x0 [ 2525.027496][ T2967] steelseries 0003:1038:12B6.0085: unknown main item tag 0x0 [ 2525.042819][T12045] pegasus 3-1:0.0: can't locate MII phy, using default [ 2525.080512][ T2967] steelseries 0003:1038:12B6.0085: unknown main item tag 0x0 [ 2525.128124][T12045] pegasus 3-1:0.0: eth1, ELECOM USB Ethernet LD-USB20, b2:e1:e6:68:94:70 [ 2525.137038][ T2967] steelseries 0003:1038:12B6.0085: unknown main item tag 0x0 [ 2525.156469][ T6118] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8789'. [ 2525.176069][ T2967] steelseries 0003:1038:12B6.0085: unknown main item tag 0x0 [ 2525.184666][T12045] usb 3-1: USB disconnect, device number 56 [ 2525.196780][ T2967] steelseries 0003:1038:12B6.0085: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.1-1/input0 [ 2525.407144][ T2967] steelseries 0003:1038:12B6.0085: hid_hw_raw_request() failed with -71 [ 2525.450984][ T2967] usb 2-1: USB disconnect, device number 38 [ 2525.914085][ T6139] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2525.933105][ T6139] netlink: 116 bytes leftover after parsing attributes in process `syz.4.8793'. [ 2526.582226][ T6148] IPVS: ip_vs_add_dest(): server weight less than zero [ 2526.595984][ T2954] IPVS: starting estimator thread 0... [ 2526.719394][ T6149] IPVS: using max 49 ests per chain, 117600 per kthread [ 2528.029496][ T2967] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 2528.201097][ T2967] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 2528.209914][ T2967] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2528.221217][ T2967] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2528.231454][ T2967] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2528.239546][ T2946] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 2528.257817][ T2967] usb 4-1: Manufacturer: syz [ 2528.319098][ T2967] usb 4-1: config 0 descriptor?? [ 2528.411622][ T2946] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2528.439819][ T2946] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2528.451712][ T6184] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8802'. [ 2528.479381][ T2967] rc_core: IR keymap rc-hauppauge not found [ 2528.495523][ T2946] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 2528.513881][ T2967] Registered IR keymap rc-empty [ 2528.551549][ T2967] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 2528.567709][ T2946] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2528.597375][ T2967] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input518 [ 2528.610613][ T2946] usb 2-1: config 0 descriptor?? [ 2528.653319][ T2967] usb 4-1: USB disconnect, device number 45 [ 2528.719376][ T2954] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 2528.911554][ T2954] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2528.926992][ T2954] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2528.938643][ T2954] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2528.980035][ T2954] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2528.999643][ T2954] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2529.009007][ T2954] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2529.029445][ T2954] usb 3-1: Manufacturer: syz [ 2529.056518][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 2529.071408][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2529.078024][ T2954] usb 3-1: config 0 descriptor?? [ 2529.083751][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2529.098124][ T6193] fuse: Bad value for 'fd' [ 2529.156750][ T2946] usbhid 2-1:0.0: can't add hid device: -71 [ 2529.164609][ T2946] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2529.189694][ T2946] usb 2-1: USB disconnect, device number 39 [ 2529.485213][ T6202] IPVS: ip_vs_add_dest(): server weight less than zero [ 2529.530967][ T2954] appleir 0003:05AC:8243.0086: unknown main item tag 0x0 [ 2529.548682][ T2954] appleir 0003:05AC:8243.0086: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 2531.392243][ T6237] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8815'. [ 2531.600785][ T2946] usb 3-1: USB disconnect, device number 57 [ 2531.752259][ T6229] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8814'. [ 2531.923555][ T6246] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8818'. [ 2531.933714][ T6246] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8818'. [ 2532.250621][ T61] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2532.444102][ T6263] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8824'. [ 2532.486436][ T6263] input: syz1 as /devices/virtual/input/input519 [ 2532.582736][T12348] udevd[12348]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 2532.626831][ T6270] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8827'. [ 2532.715859][ T6268] netlink: 620 bytes leftover after parsing attributes in process `syz.1.8826'. [ 2532.889561][ T2946] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 2532.909827][ T6279] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8829'. [ 2532.919192][ T6279] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8829'. [ 2533.064021][ T2946] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 2533.079604][ T2946] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 2533.095903][ T2946] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2533.105673][ T2946] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2533.123178][ T2946] usb 1-1: config 0 descriptor?? [ 2533.136740][ T2946] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 2533.219361][ T2967] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 2533.369334][ T2967] usb 2-1: Using ep0 maxpacket: 32 [ 2533.380863][ T2967] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2533.392558][ T2967] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 2533.405039][ T2967] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2533.416255][ T2967] usb 2-1: Product: syz [ 2533.420742][ T2967] usb 2-1: Manufacturer: syz [ 2533.428140][ T2967] usb 2-1: SerialNumber: syz [ 2533.439911][ T2967] usb 2-1: config 0 descriptor?? [ 2534.329571][ T2946] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 2534.489891][ T2967] gs_usb 2-1:0.0: Couldn't send data format (err=-110) [ 2534.496837][ T2967] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -110 [ 2534.506591][ T2946] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 2534.522351][ T2946] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2534.536013][ T2946] usb 3-1: config 0 descriptor?? [ 2535.462349][T28314] usb 1-1: USB disconnect, device number 97 [ 2535.634554][ T6298] FAULT_INJECTION: forcing a failure. [ 2535.634554][ T6298] name failslab, interval 1, probability 0, space 0, times 0 [ 2535.648349][ T6298] CPU: 0 UID: 0 PID: 6298 Comm: syz.3.8837 Not tainted syzkaller #0 PREEMPT(full) [ 2535.648374][ T6298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2535.648384][ T6298] Call Trace: [ 2535.648392][ T6298] [ 2535.648399][ T6298] dump_stack_lvl+0x189/0x250 [ 2535.648434][ T6298] ? __pfx____ratelimit+0x10/0x10 [ 2535.648462][ T6298] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2535.648481][ T6298] ? __pfx__printk+0x10/0x10 [ 2535.648505][ T6298] ? __pfx___might_resched+0x10/0x10 [ 2535.648527][ T6298] ? fs_reclaim_acquire+0x7d/0x100 [ 2535.648554][ T6298] should_fail_ex+0x414/0x560 [ 2535.648585][ T6298] should_failslab+0xa8/0x100 [ 2535.648609][ T6298] kmem_cache_alloc_node_noprof+0x77/0x710 [ 2535.648629][ T6298] ? __alloc_skb+0x112/0x2d0 [ 2535.648651][ T6298] ? netlink_autobind+0xdb/0x300 [ 2535.648679][ T6298] __alloc_skb+0x112/0x2d0 [ 2535.648706][ T6298] netlink_sendmsg+0x5c6/0xb30 [ 2535.648739][ T6298] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2535.648765][ T6298] ? __import_iovec+0x5d4/0x7f0 [ 2535.648786][ T6298] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2535.648806][ T6298] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2535.648827][ T6298] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2535.648850][ T6298] __sock_sendmsg+0x21c/0x270 [ 2535.648874][ T6298] ____sys_sendmsg+0x505/0x830 [ 2535.648904][ T6298] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2535.648944][ T6298] ___sys_sendmsg+0x21f/0x2a0 [ 2535.648964][ T6298] ? __pfx____sys_sendmsg+0x10/0x10 [ 2535.649016][ T6298] ? __fget_files+0x2a/0x420 [ 2535.649037][ T6298] ? __fget_files+0x3a0/0x420 [ 2535.649067][ T6298] __sys_sendmsg+0x164/0x220 [ 2535.649087][ T6298] ? __pfx___sys_sendmsg+0x10/0x10 [ 2535.649122][ T6298] ? __pfx_ksys_write+0x10/0x10 [ 2535.649155][ T6298] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2535.649176][ T6298] ? lockdep_hardirqs_on+0x9c/0x150 [ 2535.649197][ T6298] __do_fast_syscall_32+0xb6/0x2b0 [ 2535.649217][ T6298] ? lockdep_hardirqs_on+0x9c/0x150 [ 2535.649239][ T6298] do_fast_syscall_32+0x34/0x80 [ 2535.649257][ T6298] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2535.649276][ T6298] RIP: 0023:0xf703d539 [ 2535.649303][ T6298] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2535.649318][ T6298] RSP: 002b:00000000f542d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2535.649345][ T6298] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 2535.649359][ T6298] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2535.649370][ T6298] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2535.649381][ T6298] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2535.649391][ T6298] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2535.649413][ T6298] [ 2535.970085][T12045] usb 2-1: USB disconnect, device number 40 [ 2536.146207][ T6302] syzkaller0: entered promiscuous mode [ 2536.184969][ T6302] syzkaller0: entered allmulticast mode [ 2536.502956][ T6320] netlink: 608 bytes leftover after parsing attributes in process `syz.1.8841'. [ 2537.262167][ T2946] pegasus 3-1:0.0: setup Pegasus II specific registers [ 2537.543781][ T2946] pegasus 3-1:0.0: can't locate MII phy, using default [ 2537.809568][T27270] cgroup: fork rejected by pids controller in /syz3 [ 2538.520115][ T6339] fuse: Bad value for 'fd' [ 2538.739511][T12045] usb 1-1: new full-speed USB device number 98 using dummy_hcd [ 2539.054005][T12045] usb 1-1: config 8 has an invalid interface number: 177 but max is 0 [ 2539.062453][T12045] usb 1-1: config 8 has no interface number 0 [ 2539.068615][T12045] usb 1-1: config 8 interface 177 altsetting 9 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 2539.081504][T12045] usb 1-1: config 8 interface 177 altsetting 9 endpoint 0x88 has invalid maxpacket 1023, setting to 64 [ 2539.094268][T12045] usb 1-1: config 8 interface 177 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0 [ 2539.104403][T12045] usb 1-1: config 8 interface 177 has no altsetting 0 [ 2539.112290][T12045] usb 1-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 2539.121387][T12045] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2539.150395][ T6338] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2540.989505][ T2946] pegasus 3-1:0.0: eth1, ELECOM USB Ethernet LD-USB20, 7a:f2:20:35:31:8e [ 2541.054375][ T2946] usb 3-1: USB disconnect, device number 58 [ 2541.076928][T32018] syz_tun (unregistering): left allmulticast mode [ 2541.087405][T32018] syz_tun (unregistering): left promiscuous mode [ 2541.103560][T32018] bridge0: port 4(syz_tun) entered disabled state [ 2541.165925][T12045] usb 1-1: string descriptor 0 read error: -71 [ 2541.196829][T12045] ir_toy 1-1:8.177: required endpoints not found [ 2541.224307][T12045] usb 1-1: USB disconnect, device number 98 [ 2541.352302][ T6347] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8851'. [ 2542.132997][T12574] macvlan2: left allmulticast mode [ 2542.149981][T12574] macvlan2: left promiscuous mode [ 2542.159678][T12574] bridge0: port 3(macvlan2) entered disabled state [ 2542.192578][T12574] bridge_slave_1: left allmulticast mode [ 2542.218601][T12574] bridge_slave_1: left promiscuous mode [ 2542.234665][T12574] bridge0: port 2(bridge_slave_1) entered disabled state [ 2542.439094][T12574] bridge_slave_0: left allmulticast mode [ 2542.466217][T12574] bridge_slave_0: left promiscuous mode [ 2542.479576][T12574] bridge0: port 1(bridge_slave_0) entered disabled state [ 2542.577156][T26541] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2542.593967][T26541] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2542.603093][T26541] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2542.611749][T26541] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2542.620267][T26541] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2542.689376][T12045] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 2542.841463][T12045] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2542.873842][T12574] erspan0 (unregistering): left promiscuous mode [ 2542.884718][T12045] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2542.926011][T12574] gretap0 (unregistering): left promiscuous mode [ 2542.932051][T12045] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 2542.972706][T12045] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2542.996846][T12045] usb 2-1: config 0 descriptor?? [ 2543.133166][ T6379] netlink: 100 bytes leftover after parsing attributes in process `syz.0.8855'. [ 2543.150664][ T6379] netlink: 100 bytes leftover after parsing attributes in process `syz.0.8855'. [ 2543.650388][ T2952] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 2543.743666][T12574] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2543.754351][T12574] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2543.764259][T12574] bond0 (unregistering): Released all slaves [ 2543.873290][ T2952] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 2543.882715][ T2952] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2543.905617][ T2952] usb 1-1: config 0 descriptor?? [ 2544.015605][T12574] bond1 (unregistering): Released all slaves [ 2544.141846][T12045] usbhid 2-1:0.0: can't add hid device: -71 [ 2544.155712][T12045] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2544.192086][T12045] usb 2-1: USB disconnect, device number 41 [ 2544.547366][ T6375] chnl_net:caif_netlink_parms(): no params data found [ 2544.616908][T12574] hsr_slave_0: left promiscuous mode [ 2544.623537][T12574] hsr_slave_1: left promiscuous mode [ 2544.631065][T12574] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2544.695444][T12574] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2544.743433][ T4167] Bluetooth: hci0: command tx timeout [ 2545.491934][ T6409] loop6: detected capacity change from 0 to 524287999 [ 2546.196637][ T6420] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8861'. [ 2547.059595][ T2952] pegasus 1-1:0.0: setup Pegasus II specific registers [ 2547.063406][ T4167] Bluetooth: hci0: command tx timeout [ 2547.184147][ T2952] pegasus 1-1:0.0: can't locate MII phy, using default [ 2547.196786][T12574] team_slave_1 (unregistering): left allmulticast mode [ 2547.204867][T12574] team0 (unregistering): Port device team_slave_1 removed [ 2547.263343][T12574] team_slave_0 (unregistering): left allmulticast mode [ 2547.272172][T12574] team0 (unregistering): Port device team_slave_0 removed [ 2548.029379][ T2952] pegasus 1-1:0.0: eth5, ELECOM USB Ethernet LD-USB20, ae:cb:58:fc:3f:d0 [ 2548.070807][ T2952] usb 1-1: USB disconnect, device number 99 [ 2548.225036][ T6375] bridge0: port 1(bridge_slave_0) entered blocking state [ 2548.246021][ T6375] bridge0: port 1(bridge_slave_0) entered disabled state [ 2548.255207][ T6375] bridge_slave_0: entered allmulticast mode [ 2548.258255][ T6433] netlink: 100 bytes leftover after parsing attributes in process `syz.4.8864'. [ 2548.263364][ T6375] bridge_slave_0: entered promiscuous mode [ 2548.271298][ T6433] netlink: 100 bytes leftover after parsing attributes in process `syz.4.8864'. [ 2548.290956][ T6375] bridge0: port 2(bridge_slave_1) entered blocking state [ 2548.307678][ T6375] bridge0: port 2(bridge_slave_1) entered disabled state [ 2548.316239][ T6375] bridge_slave_1: entered allmulticast mode [ 2548.330791][ T6375] bridge_slave_1: entered promiscuous mode [ 2548.499580][ T2952] usb 1-1: new full-speed USB device number 100 using dummy_hcd [ 2548.507305][ T6375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2548.522706][ T6375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2548.571383][ T6375] team0: Port device team_slave_0 added [ 2548.599238][ T6375] team0: Port device team_slave_1 added [ 2548.648083][ T6375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2548.655246][ T6375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2548.662682][ T2952] usb 1-1: config 8 has an invalid interface number: 177 but max is 0 [ 2548.682694][ T6375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2548.724955][ T2952] usb 1-1: config 8 has no interface number 0 [ 2548.746980][ T6375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2548.754261][ T2952] usb 1-1: config 8 interface 177 altsetting 9 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 2548.754296][ T2952] usb 1-1: config 8 interface 177 altsetting 9 endpoint 0x88 has invalid maxpacket 1023, setting to 64 [ 2548.754321][ T2952] usb 1-1: config 8 interface 177 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0 [ 2548.754342][ T2952] usb 1-1: config 8 interface 177 has no altsetting 0 [ 2548.754378][ T2952] usb 1-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 2548.754400][ T2952] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2548.762341][ T6429] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2548.829546][ T6375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2548.884507][ T6375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2549.130750][ T4167] Bluetooth: hci0: command tx timeout [ 2549.155041][ T2952] usb 1-1: string descriptor 0 read error: -71 [ 2549.210564][ T2952] ir_toy 1-1:8.177: required endpoints not found [ 2549.223125][ T6375] hsr_slave_0: entered promiscuous mode [ 2549.244403][ T6375] hsr_slave_1: entered promiscuous mode [ 2549.290536][ T6375] debugfs: 'hsr0' already exists in 'hsr' [ 2549.296719][ T6375] Cannot create hsr debugfs directory [ 2549.304052][ T2952] usb 1-1: USB disconnect, device number 100 [ 2550.011443][ T5895] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 2550.165512][ T5895] usb 3-1: device descriptor read/64, error -71 [ 2550.298346][ T6473] netlink: 608 bytes leftover after parsing attributes in process `syz.0.8870'. [ 2550.346346][T12574] IPVS: stop unused estimator thread 0... [ 2550.419550][ T5895] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 2550.567175][ T5895] usb 3-1: device descriptor read/64, error -71 [ 2550.720121][ T5895] usb usb3-port1: attempt power cycle [ 2550.751276][ T6484] netlink: 100 bytes leftover after parsing attributes in process `syz.0.8872'. [ 2550.761323][ T6484] netlink: 100 bytes leftover after parsing attributes in process `syz.0.8872'. [ 2550.894122][ T6375] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2550.985307][ T6375] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2551.028232][ T6375] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2551.073193][ T6375] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2551.089480][ T5895] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 2551.203689][ T5895] usb 3-1: device descriptor read/8, error -71 [ 2551.210828][ T4167] Bluetooth: hci0: command tx timeout [ 2551.302860][T28314] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 2551.450350][ T5895] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 2551.475590][ T6375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2551.490115][T28314] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 2551.499463][T28314] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2551.527742][ T5895] usb 3-1: device descriptor read/8, error -71 [ 2551.541031][T28314] usb 1-1: config 0 descriptor?? [ 2551.552430][ T6375] 8021q: adding VLAN 0 to HW filter on device team0 [ 2551.660531][ T5895] usb usb3-port1: unable to enumerate USB device [ 2551.707849][ T1224] bridge0: port 1(bridge_slave_0) entered blocking state [ 2551.715159][ T1224] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2551.818333][ T1224] bridge0: port 2(bridge_slave_1) entered blocking state [ 2551.825588][ T1224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2551.886726][ T6375] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2551.967407][ T6375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2552.141774][ T6375] veth0_vlan: entered promiscuous mode [ 2552.171763][ T6375] veth1_vlan: entered promiscuous mode [ 2552.322269][ T6375] veth0_macvtap: entered promiscuous mode [ 2552.342998][ T6375] veth1_macvtap: entered promiscuous mode [ 2552.371846][ T6519] FAULT_INJECTION: forcing a failure. [ 2552.371846][ T6519] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2552.386749][ T6375] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2552.386908][ T6519] CPU: 0 UID: 0 PID: 6519 Comm: syz.1.8876 Not tainted syzkaller #0 PREEMPT(full) [ 2552.386939][ T6519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2552.386948][ T6519] Call Trace: [ 2552.386955][ T6519] [ 2552.386964][ T6519] dump_stack_lvl+0x189/0x250 [ 2552.386989][ T6519] ? __pfx____ratelimit+0x10/0x10 [ 2552.387016][ T6519] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2552.387035][ T6519] ? __pfx__printk+0x10/0x10 [ 2552.387065][ T6519] should_fail_ex+0x414/0x560 [ 2552.387095][ T6519] strncpy_from_user+0x36/0x290 [ 2552.387124][ T6519] getname_flags+0xf3/0x540 [ 2552.387151][ T6519] do_sys_openat2+0xbc/0x1c0 [ 2552.387178][ T6519] ? __pfx_do_sys_openat2+0x10/0x10 [ 2552.387201][ T6519] ? exc_page_fault+0x82/0x100 [ 2552.387224][ T6519] __ia32_compat_sys_openat+0x131/0x160 [ 2552.387254][ T6519] __do_fast_syscall_32+0xb6/0x2b0 [ 2552.387274][ T6519] ? lockdep_hardirqs_on+0x9c/0x150 [ 2552.387296][ T6519] do_fast_syscall_32+0x34/0x80 [ 2552.387313][ T6519] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2552.387335][ T6519] RIP: 0023:0xf7fc7539 [ 2552.387352][ T6519] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2552.387368][ T6519] RSP: 002b:00000000f54b4460 EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 2552.387387][ T6519] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f72a69e0 [ 2552.387400][ T6519] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 00000000f7455ff4 [ 2552.387412][ T6519] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 2552.387422][ T6519] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2552.387434][ T6519] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2552.387461][ T6519] [ 2552.635251][ T6375] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2552.663249][ T1151] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2552.675015][ T1151] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2552.695576][ T1151] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2552.719968][ T1151] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2552.958819][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2553.000480][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2553.122669][ T6331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2553.149319][ T6331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2553.233324][ T6532] netlink: 100 bytes leftover after parsing attributes in process `syz.1.8878'. [ 2553.268053][ T6532] netlink: 100 bytes leftover after parsing attributes in process `syz.1.8878'. [ 2553.648994][ T6546] vcan0: tx drop: invalid sa for name 0xfffffffffffffffc [ 2553.687633][ T6546] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8850'. [ 2553.691849][ T6552] loop9: detected capacity change from 0 to 7 [ 2553.743785][ T6552] loop9: [POWERTEC] p1 p2 p3 [ 2553.804981][ T6552] loop9: p1 start 1600481121 is beyond EOD, truncated [ 2553.828539][ T6552] loop9: p2 size 1680801792 extends beyond EOD, truncated [ 2553.918002][ T6552] loop9: p3 start 1680801792 is beyond EOD, truncated [ 2554.140018][ T5835] udevd[5835]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 2554.152683][T28314] pegasus 1-1:0.0: setup Pegasus II specific registers [ 2554.329146][T28314] pegasus 1-1:0.0: can't locate MII phy, using default [ 2554.396338][T28314] pegasus 1-1:0.0: eth1, ELECOM USB Ethernet LD-USB20, 7a:9d:b6:c6:d0:02 [ 2554.462651][T28314] usb 1-1: USB disconnect, device number 101 [ 2554.771400][ T2952] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 2554.991698][ T2952] usb 2-1: config 8 has an invalid interface number: 177 but max is 0 [ 2555.000663][ T2952] usb 2-1: config 8 has no interface number 0 [ 2555.015198][ T2952] usb 2-1: config 8 interface 177 altsetting 9 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 2555.205311][ T2952] usb 2-1: config 8 interface 177 altsetting 9 endpoint 0x88 has invalid maxpacket 1023, setting to 64 [ 2555.255520][ T2952] usb 2-1: config 8 interface 177 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0 [ 2555.290529][ T2952] usb 2-1: config 8 interface 177 has no altsetting 0 [ 2555.306567][ T2952] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 2555.379095][ T2952] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2555.411657][ T6564] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2555.647110][ T2952] usb 2-1: string descriptor 0 read error: -71 [ 2555.672713][ T2952] ir_toy 2-1:8.177: required endpoints not found [ 2555.753867][ T2952] usb 2-1: USB disconnect, device number 42 [ 2556.113621][ T6597] FAULT_INJECTION: forcing a failure. [ 2556.113621][ T6597] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2556.141658][ T6597] CPU: 0 UID: 0 PID: 6597 Comm: syz.4.8889 Not tainted syzkaller #0 PREEMPT(full) [ 2556.141684][ T6597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2556.141695][ T6597] Call Trace: [ 2556.141703][ T6597] [ 2556.141712][ T6597] dump_stack_lvl+0x189/0x250 [ 2556.141737][ T6597] ? __pfx____ratelimit+0x10/0x10 [ 2556.141764][ T6597] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2556.141784][ T6597] ? __pfx__printk+0x10/0x10 [ 2556.141803][ T6597] ? __might_fault+0xb0/0x130 [ 2556.141834][ T6597] should_fail_ex+0x414/0x560 [ 2556.141873][ T6597] _copy_from_user+0x2d/0xb0 [ 2556.141897][ T6597] io_submit_one+0xc2/0x1310 [ 2556.141938][ T6597] ? __pfx_io_submit_one+0x10/0x10 [ 2556.141962][ T6597] ? __might_fault+0xb0/0x130 [ 2556.141989][ T6597] ? __might_fault+0xb0/0x130 [ 2556.142011][ T6597] __ia32_compat_sys_io_submit+0x1c7/0x330 [ 2556.142038][ T6597] ? __pfx___ia32_compat_sys_io_submit+0x10/0x10 [ 2556.142059][ T6597] ? ksys_write+0x22a/0x250 [ 2556.142087][ T6597] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2556.142108][ T6597] ? lockdep_hardirqs_on+0x9c/0x150 [ 2556.142130][ T6597] __do_fast_syscall_32+0xb6/0x2b0 [ 2556.142150][ T6597] ? lockdep_hardirqs_on+0x9c/0x150 [ 2556.142173][ T6597] do_fast_syscall_32+0x34/0x80 [ 2556.142192][ T6597] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2556.142214][ T6597] RIP: 0023:0xf7f41539 [ 2556.142230][ T6597] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2556.142246][ T6597] RSP: 002b:00000000f540455c EFLAGS: 00000206 ORIG_RAX: 00000000000000f8 [ 2556.142266][ T6597] RAX: ffffffffffffffda RBX: 00000000f5405000 RCX: 0000000000000002 [ 2556.142279][ T6597] RDX: 0000000080000780 RSI: 0000000000000000 RDI: 0000000000000000 [ 2556.142290][ T6597] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2556.142301][ T6597] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2556.142311][ T6597] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2556.142339][ T6597] [ 2556.195678][ T2954] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 2556.550280][ T2954] usb 1-1: device descriptor read/64, error -71 [ 2556.679416][ T2952] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 2556.809376][ T2952] usb 2-1: device descriptor read/64, error -71 [ 2556.815873][ T2954] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 2556.989393][ T2954] usb 1-1: device descriptor read/64, error -71 [ 2557.079387][ T2952] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 2557.087019][ T5895] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 2557.152188][ T2954] usb usb1-port1: attempt power cycle [ 2557.249486][ T2952] usb 2-1: device descriptor read/64, error -71 [ 2557.277071][ T5895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2557.288197][ T5895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2557.306021][ T5895] usb 4-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 2557.326123][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2557.343402][ T5895] usb 4-1: config 0 descriptor?? [ 2557.360974][ T2952] usb usb2-port1: attempt power cycle [ 2557.500867][ T2954] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 2557.560065][ T2954] usb 1-1: device descriptor read/8, error -71 [ 2557.709524][ T2952] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 2557.759038][ T5895] steelseries 0003:1038:12B6.0087: unknown main item tag 0x0 [ 2557.786586][ T5895] steelseries 0003:1038:12B6.0087: unknown main item tag 0x0 [ 2557.794466][ T5895] steelseries 0003:1038:12B6.0087: unknown main item tag 0x0 [ 2557.802223][ T2954] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 2557.810782][ T2952] usb 2-1: device descriptor read/8, error -71 [ 2557.818899][ T5895] steelseries 0003:1038:12B6.0087: unknown main item tag 0x0 [ 2557.832399][ T5895] steelseries 0003:1038:12B6.0087: unknown main item tag 0x0 [ 2557.840150][ T5895] steelseries 0003:1038:12B6.0087: unknown main item tag 0x0 [ 2557.848121][ T2954] usb 1-1: device descriptor read/8, error -71 [ 2557.855656][ T5895] steelseries 0003:1038:12B6.0087: unknown main item tag 0x0 [ 2557.866784][ T5895] steelseries 0003:1038:12B6.0087: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.3-1/input0 [ 2557.959912][ T6609] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8891'. [ 2557.981986][ T2954] usb usb1-port1: unable to enumerate USB device [ 2558.047228][ T5895] steelseries 0003:1038:12B6.0087: hid_hw_raw_request() failed with -71 [ 2558.059450][ T2952] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 2558.087267][ T5895] usb 4-1: USB disconnect, device number 46 [ 2558.108212][ T2952] usb 2-1: device descriptor read/8, error -71 [ 2558.276060][ T2952] usb usb2-port1: unable to enumerate USB device [ 2558.899604][ T5895] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 2558.958945][ T6645] netlink: 5 bytes leftover after parsing attributes in process `syz.2.8898'. [ 2559.060054][ T5895] usb 4-1: too many configurations: 193, using maximum allowed: 8 [ 2559.078680][ T5895] usb 4-1: New USB device found, idVendor=0547, idProduct=3e6d, bcdDevice=82.e9 [ 2559.087946][ T5895] usb 4-1: New USB device strings: Mfr=90, Product=22, SerialNumber=108 [ 2559.098459][ T5895] usb 4-1: Product: syz [ 2559.102697][ T5895] usb 4-1: Manufacturer: syz [ 2559.107285][ T5895] usb 4-1: SerialNumber: syz [ 2559.114710][ T5895] usb 4-1: config 0 descriptor?? [ 2559.382134][ T2960] usb 4-1: USB disconnect, device number 47 [ 2559.488946][ T6650] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8900'. [ 2559.973733][ T6654] netlink: 100 bytes leftover after parsing attributes in process `syz.0.8901'. [ 2559.999668][ T6654] netlink: 100 bytes leftover after parsing attributes in process `syz.0.8901'. [ 2560.153141][ T6661] vivid-004: disconnect [ 2560.191341][ T6661] vivid-004: reconnect [ 2560.319623][ T5895] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 2560.387336][ T6667] syzkaller0: entered promiscuous mode [ 2560.393321][ T6667] syzkaller0: entered allmulticast mode [ 2560.479486][ T5895] usb 4-1: Using ep0 maxpacket: 8 [ 2560.498421][ T5895] usb 4-1: config 0 has an invalid interface number: 56 but max is 0 [ 2560.508340][ T5895] usb 4-1: config 0 has no interface number 0 [ 2560.535453][ T5895] usb 4-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=c7.76 [ 2560.545079][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2560.576877][ T5895] usb 4-1: Product: syz [ 2560.664438][ T5895] usb 4-1: Manufacturer: syz [ 2560.669838][ T5895] usb 4-1: SerialNumber: syz [ 2560.677267][ T5895] usb 4-1: config 0 descriptor?? [ 2561.179648][ T2946] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 2561.394137][ T2946] usb 2-1: device descriptor read/64, error -71 [ 2561.639386][ T2946] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 2561.791230][ T2946] usb 2-1: device descriptor read/64, error -71 [ 2561.962251][ T2946] usb usb2-port1: attempt power cycle [ 2562.022529][ T6686] FAULT_INJECTION: forcing a failure. [ 2562.022529][ T6686] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2562.045067][ T6686] CPU: 0 UID: 0 PID: 6686 Comm: syz.4.8910 Not tainted syzkaller #0 PREEMPT(full) [ 2562.045092][ T6686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2562.045104][ T6686] Call Trace: [ 2562.045112][ T6686] [ 2562.045122][ T6686] dump_stack_lvl+0x189/0x250 [ 2562.045147][ T6686] ? __pfx____ratelimit+0x10/0x10 [ 2562.045174][ T6686] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2562.045194][ T6686] ? __pfx__printk+0x10/0x10 [ 2562.045227][ T6686] should_fail_ex+0x414/0x560 [ 2562.045259][ T6686] _copy_to_user+0x31/0xb0 [ 2562.045286][ T6686] simple_read_from_buffer+0xe1/0x170 [ 2562.045313][ T6686] proc_fail_nth_read+0x1b3/0x220 [ 2562.045343][ T6686] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2562.045373][ T6686] ? rw_verify_area+0x2a6/0x4d0 [ 2562.045392][ T6686] ? __lock_acquire+0xab9/0xd20 [ 2562.045420][ T6686] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2562.045448][ T6686] vfs_read+0x200/0xa30 [ 2562.045467][ T6686] ? fdget_pos+0x247/0x320 [ 2562.045493][ T6686] ? __pfx___mutex_lock+0x10/0x10 [ 2562.045514][ T6686] ? __pfx_vfs_read+0x10/0x10 [ 2562.045534][ T6686] ? __fget_files+0x2a/0x420 [ 2562.045559][ T6686] ? __fget_files+0x3a0/0x420 [ 2562.045578][ T6686] ? __fget_files+0x2a/0x420 [ 2562.045605][ T6686] ksys_read+0x145/0x250 [ 2562.045626][ T6686] ? __pfx_ksys_read+0x10/0x10 [ 2562.045649][ T6686] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2562.045671][ T6686] ? lockdep_hardirqs_on+0x9c/0x150 [ 2562.045693][ T6686] __do_fast_syscall_32+0xb6/0x2b0 [ 2562.045721][ T6686] do_fast_syscall_32+0x34/0x80 [ 2562.045742][ T6686] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2562.045764][ T6686] RIP: 0023:0xf7f41539 [ 2562.045781][ T6686] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2562.045797][ T6686] RSP: 002b:00000000f5436590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 2562.045818][ T6686] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f5436620 [ 2562.045831][ T6686] RDX: 000000000000000f RSI: 00000000f73d5ff4 RDI: 0000000000000000 [ 2562.045844][ T6686] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 2562.045855][ T6686] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2562.045866][ T6686] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2562.045896][ T6686] [ 2562.339383][ T2946] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 2562.380328][ T2946] usb 2-1: device descriptor read/8, error -71 [ 2562.619471][ T2946] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 2562.660607][ T2946] usb 2-1: device descriptor read/8, error -71 [ 2562.778328][ T2946] usb usb2-port1: unable to enumerate USB device [ 2564.386938][ T6702] netlink: 100 bytes leftover after parsing attributes in process `syz.3.8915'. [ 2564.396279][ T6702] netlink: 100 bytes leftover after parsing attributes in process `syz.3.8915'. [ 2565.140079][ T5895] peak_usb 4-1:0.56 can0: unable to request usb[type=0 value=1] err=-71 [ 2565.149153][ T5895] peak_usb 4-1:0.56: unable to read PCAN-USB X6 firmware info (err -71) [ 2565.171660][ T6716] tipc: Started in network mode [ 2565.176595][ T6716] tipc: Node identity 4e52e20d8451, cluster identity 4711 [ 2565.187354][ T6716] tipc: Enabled bearer , priority 0 [ 2565.199710][ T6717] syzkaller0: entered promiscuous mode [ 2565.205457][ T6717] syzkaller0: entered allmulticast mode [ 2565.263262][ T5895] peak_usb 4-1:0.56: probe with driver peak_usb failed with error -71 [ 2565.282610][ T6714] tipc: Resetting bearer [ 2565.299813][ T5895] usb 4-1: USB disconnect, device number 48 [ 2565.368155][ T6722] input: syz1 as /devices/virtual/input/input520 [ 2565.382110][ T6713] tipc: Resetting bearer [ 2565.428727][ T6713] tipc: Disabling bearer [ 2565.726043][ T6728] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8922'. [ 2565.746367][ T6733] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8924'. [ 2565.756716][ T6733] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8924'. [ 2565.834105][ T6738] input: syz1 as /devices/virtual/input/input521 [ 2565.871540][ T6738] FAULT_INJECTION: forcing a failure. [ 2565.871540][ T6738] name failslab, interval 1, probability 0, space 0, times 0 [ 2565.891287][ T6738] CPU: 0 UID: 0 PID: 6738 Comm: syz.3.8925 Not tainted syzkaller #0 PREEMPT(full) [ 2565.891313][ T6738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2565.891325][ T6738] Call Trace: [ 2565.891333][ T6738] [ 2565.891342][ T6738] dump_stack_lvl+0x189/0x250 [ 2565.891367][ T6738] ? __pfx____ratelimit+0x10/0x10 [ 2565.891395][ T6738] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2565.891416][ T6738] ? __pfx__printk+0x10/0x10 [ 2565.891442][ T6738] ? __pfx___might_resched+0x10/0x10 [ 2565.891473][ T6738] should_fail_ex+0x414/0x560 [ 2565.891507][ T6738] should_failslab+0xa8/0x100 [ 2565.891532][ T6738] __kmalloc_node_track_caller_noprof+0xcd/0x800 [ 2565.891556][ T6738] ? kasprintf+0xd4/0x120 [ 2565.891588][ T6738] kvasprintf+0xdc/0x190 [ 2565.891612][ T6738] ? uinput_ioctl_handler+0x758/0x1570 [ 2565.891635][ T6738] ? __ia32_compat_sys_ioctl+0x543/0x840 [ 2565.891653][ T6738] ? __do_fast_syscall_32+0xb6/0x2b0 [ 2565.891675][ T6738] ? __pfx_kvasprintf+0x10/0x10 [ 2565.891713][ T6738] kasprintf+0xd4/0x120 [ 2565.891742][ T6738] ? __pfx_kasprintf+0x10/0x10 [ 2565.891776][ T6738] ? __pfx_input_devnode+0x10/0x10 [ 2565.891794][ T6738] device_get_devnode+0x16b/0x2a0 [ 2565.891820][ T6738] devtmpfs_delete_node+0xcb/0x1d0 [ 2565.891845][ T6738] ? __pfx_devtmpfs_delete_node+0x10/0x10 [ 2565.891882][ T6738] ? __pfx_klist_children_put+0x10/0x10 [ 2565.891915][ T6738] ? _raw_spin_unlock+0x28/0x50 [ 2565.891940][ T6738] ? klist_del+0xc7/0x110 [ 2565.891963][ T6738] device_del+0x2cf/0x8e0 [ 2565.891995][ T6738] ? __pfx_device_del+0x10/0x10 [ 2565.892017][ T6738] ? lockdep_hardirqs_on+0x9c/0x150 [ 2565.892045][ T6738] cdev_device_del+0x27/0xf0 [ 2565.892071][ T6738] evdev_disconnect+0x4c/0xb0 [ 2565.892095][ T6738] __input_unregister_device+0x3a3/0x640 [ 2565.892127][ T6738] input_unregister_device+0x9b/0x100 [ 2565.892148][ T6738] uinput_destroy_device+0x6c1/0x8c0 [ 2565.892178][ T6738] uinput_ioctl_handler+0x758/0x1570 [ 2565.892204][ T6738] ? __pfx_uinput_ioctl_handler+0x10/0x10 [ 2565.892246][ T6738] ? __fget_files+0x2a/0x420 [ 2565.892278][ T6738] __ia32_compat_sys_ioctl+0x543/0x840 [ 2565.892302][ T6738] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 2565.892322][ T6738] ? __fget_files+0x3a0/0x420 [ 2565.892353][ T6738] ? fput+0xa0/0xd0 [ 2565.892378][ T6738] ? ksys_write+0x22a/0x250 [ 2565.892397][ T6738] ? exc_page_fault+0x82/0x100 [ 2565.892417][ T6738] ? __pfx_ksys_write+0x10/0x10 [ 2565.892441][ T6738] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2565.892463][ T6738] ? lockdep_hardirqs_on+0x9c/0x150 [ 2565.892486][ T6738] __do_fast_syscall_32+0xb6/0x2b0 [ 2565.892508][ T6738] ? lockdep_hardirqs_on+0x9c/0x150 [ 2565.892532][ T6738] do_fast_syscall_32+0x34/0x80 [ 2565.892552][ T6738] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2565.892575][ T6738] RIP: 0023:0xf70ad539 [ 2565.892593][ T6738] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2565.892608][ T6738] RSP: 002b:00000000f549d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 2565.892630][ T6738] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005502 [ 2565.892644][ T6738] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2565.892656][ T6738] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2565.892668][ T6738] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2565.892681][ T6738] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2565.892711][ T6738] [ 2566.494350][ T6740] netlink: 100 bytes leftover after parsing attributes in process `syz.2.8926'. [ 2566.505340][ T6740] netlink: 100 bytes leftover after parsing attributes in process `syz.2.8926'. [ 2566.639746][ T5895] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 2566.682945][ T6754] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8931'. [ 2566.739436][T12045] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 2566.801361][ T5895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2566.816192][ T5895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2566.826392][ T5895] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2566.840749][ T5895] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2566.849911][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2566.859839][ T5895] usb 4-1: config 0 descriptor?? [ 2566.890301][T12045] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 2566.901054][T12045] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2566.911072][T12045] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2566.923560][T12045] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2566.931527][T12045] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2566.941321][T12045] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2566.952521][T12045] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2566.960396][T12045] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2566.969413][T12045] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2566.980455][T12045] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2566.988194][T12045] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2566.997246][T12045] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2567.008176][T12045] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2567.016123][T12045] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2567.025171][ T2946] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 2567.033006][T12045] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2567.047730][T12045] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2567.056199][T12045] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2567.065537][T12045] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2567.076494][T12045] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2567.084256][T12045] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2567.093417][T12045] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2567.104345][T12045] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2567.112117][T12045] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2567.121591][T12045] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2567.132814][T12045] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2567.142554][T12045] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 2567.151933][T12045] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 2567.160331][T12045] usb 1-1: Product: syz [ 2567.164508][T12045] usb 1-1: Manufacturer: syz [ 2567.169106][T12045] usb 1-1: SerialNumber: syz [ 2567.176254][T12045] usb 1-1: config 0 descriptor?? [ 2567.186433][T12045] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 2567.201544][ T2946] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2567.212819][ T2946] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2567.222805][ T2946] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2567.236131][ T2946] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2567.246261][ T2946] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2567.257212][ T2946] usb 3-1: config 0 descriptor?? [ 2567.278324][ T5895] plantronics 0003:047F:FFFF.0088: unknown main item tag 0x0 [ 2567.286417][ T5895] plantronics 0003:047F:FFFF.0088: unknown main item tag 0x0 [ 2567.296066][ T5895] plantronics 0003:047F:FFFF.0088: unknown main item tag 0x0 [ 2567.304354][ T5895] plantronics 0003:047F:FFFF.0088: unknown main item tag 0x0 [ 2567.312368][ T5895] plantronics 0003:047F:FFFF.0088: unknown main item tag 0x0 [ 2567.319897][ T5895] plantronics 0003:047F:FFFF.0088: unknown main item tag 0x0 [ 2567.327322][ T5895] plantronics 0003:047F:FFFF.0088: unknown main item tag 0x0 [ 2567.335694][ T5895] plantronics 0003:047F:FFFF.0088: unknown main item tag 0x0 [ 2567.345191][ T5895] plantronics 0003:047F:FFFF.0088: unknown main item tag 0x0 [ 2567.352803][ T5895] plantronics 0003:047F:FFFF.0088: unknown main item tag 0x0 [ 2567.364752][ T5895] plantronics 0003:047F:FFFF.0088: hiddev1,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 2567.481160][ T5895] usb 4-1: USB disconnect, device number 49 [ 2567.508634][ C0] usb 1-1: yurex_control_callback - control failed: -71 [ 2567.513393][ T2954] usb 1-1: USB disconnect, device number 106 [ 2567.541119][ T2954] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 2567.640902][ T6764] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 2567.684033][ T2946] plantronics 0003:047F:FFFF.0089: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 2567.884437][ T6757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2567.894008][ T6757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2568.299542][ T5895] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 2568.370006][ T6785] netlink: 104 bytes leftover after parsing attributes in process `syz.0.8936'. [ 2568.480751][ T5895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2568.492009][ T5895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2568.502975][ T5895] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 2568.512496][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2568.522164][ T5895] usb 4-1: config 0 descriptor?? [ 2568.631232][ T2952] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 2568.705587][T28314] usb 3-1: USB disconnect, device number 63 [ 2568.802012][ T2952] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 2568.829461][ T2952] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2568.867951][ T2952] usb 2-1: config 0 descriptor?? [ 2569.081427][T12574] bridge0: port 2(bridge_slave_1) entered disabled state [ 2570.007138][ T5895] usbhid 4-1:0.0: can't add hid device: -71 [ 2570.035465][ T5895] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2570.084501][ T5895] usb 4-1: USB disconnect, device number 50 [ 2570.341813][ T6810] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8943'. [ 2570.869409][ T2954] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 2571.034347][ T2954] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 2571.044958][ T2954] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2571.083577][ T2954] usb 4-1: config 0 descriptor?? [ 2571.489368][ T2946] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 2571.651004][ T2946] usb 3-1: config 8 has an invalid interface number: 177 but max is 0 [ 2571.659216][ T2946] usb 3-1: config 8 has no interface number 0 [ 2571.666660][ T2946] usb 3-1: config 8 interface 177 altsetting 9 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 2571.678480][ T2946] usb 3-1: config 8 interface 177 altsetting 9 endpoint 0x88 has invalid maxpacket 1023, setting to 64 [ 2571.691376][ T2946] usb 3-1: config 8 interface 177 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0 [ 2571.701505][ T2946] usb 3-1: config 8 interface 177 has no altsetting 0 [ 2571.708317][ T2946] usb 3-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 2571.739345][ T2946] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2571.777470][ T6829] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 2572.049522][ T2946] usb 3-1: string descriptor 0 read error: -71 [ 2572.072074][ T2946] ir_toy 3-1:8.177: required endpoints not found [ 2572.095947][ T2946] usb 3-1: USB disconnect, device number 64 [ 2572.260477][ T2952] pegasus 2-1:0.0: setup Pegasus II specific registers [ 2572.371397][ T2952] pegasus 2-1:0.0: can't locate MII phy, using default [ 2572.389772][ T2952] pegasus 2-1:0.0: eth1, ELECOM USB Ethernet LD-USB20, 7e:64:0c:67:6f:e6 [ 2572.403374][ T2952] usb 2-1: USB disconnect, device number 51 [ 2573.211798][ T2952] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 2573.381553][ T2952] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2573.408549][ T2952] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2573.437429][ T2952] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 2573.461380][ T2952] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2573.502675][ T2952] usb 2-1: config 0 descriptor?? [ 2573.848581][ T6875] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8957'. [ 2573.981938][ T2952] usbhid 2-1:0.0: can't add hid device: -71 [ 2573.988017][ T2952] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2574.039581][ T2952] usb 2-1: USB disconnect, device number 52 [ 2574.178142][ T2954] pegasus 4-1:0.0: setup Pegasus II specific registers [ 2574.374024][ T2954] pegasus 4-1:0.0: can't locate MII phy, using default [ 2574.451360][ T2954] pegasus 4-1:0.0: eth1, ELECOM USB Ethernet LD-USB20, 5a:30:3c:52:36:bc [ 2574.479074][ T6883] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8957'. [ 2574.482717][ T2954] usb 4-1: USB disconnect, device number 51 [ 2574.499070][ T6885] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2575.764782][ T6918] program syz.2.8965 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2577.167445][ T6948] FAULT_INJECTION: forcing a failure. [ 2577.167445][ T6948] name failslab, interval 1, probability 0, space 0, times 0 [ 2577.193969][ T6948] CPU: 1 UID: 0 PID: 6948 Comm: syz.1.8967 Not tainted syzkaller #0 PREEMPT(full) [ 2577.194003][ T6948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2577.194015][ T6948] Call Trace: [ 2577.194023][ T6948] [ 2577.194031][ T6948] dump_stack_lvl+0x189/0x250 [ 2577.194056][ T6948] ? __pfx____ratelimit+0x10/0x10 [ 2577.194082][ T6948] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2577.194100][ T6948] ? __pfx__printk+0x10/0x10 [ 2577.194121][ T6948] ? __pfx___might_resched+0x10/0x10 [ 2577.194144][ T6948] ? fs_reclaim_acquire+0x7d/0x100 [ 2577.194170][ T6948] should_fail_ex+0x414/0x560 [ 2577.194200][ T6948] should_failslab+0xa8/0x100 [ 2577.194224][ T6948] kmem_cache_alloc_noprof+0x74/0x6e0 [ 2577.194241][ T6948] ? rcu_is_watching+0x15/0xb0 [ 2577.194265][ T6948] ? posix_lock_inode+0x232/0x3290 [ 2577.194282][ T6948] ? locks_get_lock_context+0xc7/0x3d0 [ 2577.194306][ T6948] posix_lock_inode+0x232/0x3290 [ 2577.194345][ T6948] ? __pfx_posix_lock_inode+0x10/0x10 [ 2577.194373][ T6948] fcntl_setlk+0xae2/0x1090 [ 2577.194392][ T6948] ? __lock_acquire+0xab9/0xd20 [ 2577.194425][ T6948] ? __pfx_fcntl_setlk+0x10/0x10 [ 2577.194459][ T6948] do_compat_fcntl64+0x583/0x720 [ 2577.194484][ T6948] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2577.194508][ T6948] ? __pfx_do_compat_fcntl64+0x10/0x10 [ 2577.194538][ T6948] ? fput+0xa0/0xd0 [ 2577.194562][ T6948] ? ksys_write+0x22a/0x250 [ 2577.194579][ T6948] ? exc_page_fault+0x82/0x100 [ 2577.194603][ T6948] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2577.194623][ T6948] ? lockdep_hardirqs_on+0x9c/0x150 [ 2577.194644][ T6948] __do_fast_syscall_32+0xb6/0x2b0 [ 2577.194665][ T6948] ? lockdep_hardirqs_on+0x9c/0x150 [ 2577.194686][ T6948] do_fast_syscall_32+0x34/0x80 [ 2577.194705][ T6948] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2577.194726][ T6948] RIP: 0023:0xf7fc7539 [ 2577.194743][ T6948] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2577.194758][ T6948] RSP: 002b:00000000f549555c EFLAGS: 00000206 ORIG_RAX: 0000000000000037 [ 2577.194778][ T6948] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000006 [ 2577.194792][ T6948] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2577.194803][ T6948] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2577.194814][ T6948] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2577.194825][ T6948] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2577.194853][ T6948] [ 2577.999925][ T2946] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 2578.161289][ T2946] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2578.170340][ T2946] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2578.180955][ T2946] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2578.189990][ T2946] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 2578.201528][ T2946] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 2578.215641][ T2946] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2578.225383][T12045] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 2578.233223][ T2946] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2578.242935][ T2946] usb 1-1: Product: syz [ 2578.247161][ T2946] usb 1-1: Manufacturer: syz [ 2578.257414][ T2946] cdc_wdm 1-1:1.0: skipping garbage [ 2578.262852][ T2946] cdc_wdm 1-1:1.0: skipping garbage [ 2578.269781][ T2946] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 2578.275683][ T2946] cdc_wdm 1-1:1.0: Unknown control protocol [ 2578.281720][ T2967] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 2578.360382][ T2952] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 2578.434525][T12045] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2578.446005][T12045] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2578.470281][ T2967] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2578.483295][T12045] usb 3-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 2578.507298][ T2967] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2578.511007][ T2952] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 2578.517638][T12045] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2578.529610][ T2952] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2578.535488][ T2967] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 2578.546295][ T2952] usb 4-1: config 0 descriptor?? [ 2578.559898][ T6958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2578.562742][ T2967] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2578.586142][T12045] usb 3-1: config 0 descriptor?? [ 2578.589833][ T6958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2578.703042][ T2967] usb 2-1: config 0 descriptor?? [ 2578.806619][ T6981] netlink: 104 bytes leftover after parsing attributes in process `syz.4.8976'. [ 2578.896810][ T6983] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2578.928993][ C0] cdc_wdm 1-1:1.0: Unexpected error -71 [ 2578.929366][ T5829] usb 1-1: USB disconnect, device number 107 [ 2578.934742][ C0] wdm_int_callback: 3 callbacks suppressed [ 2578.934764][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 2578.953009][ C0] wdm_int_callback: 3 callbacks suppressed [ 2578.953030][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 2578.964927][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 2578.974127][ C0] vkms_vblank_simulate: vblank timer overrun [ 2579.051723][T12045] hid_parser_main: 66 callbacks suppressed [ 2579.051747][T12045] steelseries 0003:1038:12B6.008A: unknown main item tag 0x0 [ 2579.065923][T12045] steelseries 0003:1038:12B6.008A: unknown main item tag 0x0 [ 2579.073734][T12045] steelseries 0003:1038:12B6.008A: unknown main item tag 0x6 [ 2579.081706][T12045] steelseries 0003:1038:12B6.008A: item fetching failed at offset 4/7 [ 2579.093181][T12045] steelseries 0003:1038:12B6.008A: probe with driver steelseries failed with error -22 [ 2579.154503][ T6985] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8978'. [ 2579.186698][ T2967] usbhid 2-1:0.0: can't add hid device: -71 [ 2579.193030][ T2967] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2579.205579][ T2967] usb 2-1: USB disconnect, device number 53 [ 2579.237965][ T6986] FAULT_INJECTION: forcing a failure. [ 2579.237965][ T6986] name failslab, interval 1, probability 0, space 0, times 0 [ 2579.251896][ T6986] CPU: 1 UID: 0 PID: 6986 Comm: syz.4.8978 Not tainted syzkaller #0 PREEMPT(full) [ 2579.251921][ T6986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2579.251946][ T6986] Call Trace: [ 2579.251955][ T6986] [ 2579.251963][ T6986] dump_stack_lvl+0x189/0x250 [ 2579.251988][ T6986] ? __pfx____ratelimit+0x10/0x10 [ 2579.252014][ T6986] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2579.252034][ T6986] ? __pfx__printk+0x10/0x10 [ 2579.252057][ T6986] ? __pfx___might_resched+0x10/0x10 [ 2579.252085][ T6986] should_fail_ex+0x414/0x560 [ 2579.252117][ T6986] should_failslab+0xa8/0x100 [ 2579.252141][ T6986] __kmalloc_noprof+0xcb/0x7f0 [ 2579.252159][ T6986] ? do_vfs_ioctl+0xbe8/0x1430 [ 2579.252175][ T6986] ? video_usercopy+0x18d/0x1450 [ 2579.252202][ T6986] video_usercopy+0x18d/0x1450 [ 2579.252231][ T6986] ? __pfx___video_do_ioctl+0x10/0x10 [ 2579.252250][ T6986] ? __pfx_video_usercopy+0x10/0x10 [ 2579.252286][ T6986] ? __fget_files+0x2a/0x420 [ 2579.252311][ T6986] v4l2_ioctl+0x18d/0x1e0 [ 2579.252333][ T6986] v4l2_compat_ioctl32+0x1d7/0x260 [ 2579.252362][ T6986] __ia32_compat_sys_ioctl+0x543/0x840 [ 2579.252381][ T6986] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 2579.252397][ T6986] ? __fget_files+0x3a0/0x420 [ 2579.252414][ T6986] ? fput+0xa0/0xd0 [ 2579.252428][ T6986] ? ksys_write+0x22a/0x250 [ 2579.252437][ T6986] ? exc_page_fault+0x82/0x100 [ 2579.252448][ T6986] ? __pfx_ksys_write+0x10/0x10 [ 2579.252460][ T6986] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2579.252471][ T6986] ? lockdep_hardirqs_on+0x9c/0x150 [ 2579.252483][ T6986] __do_fast_syscall_32+0xb6/0x2b0 [ 2579.252494][ T6986] ? lockdep_hardirqs_on+0x9c/0x150 [ 2579.252506][ T6986] do_fast_syscall_32+0x34/0x80 [ 2579.252516][ T6986] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2579.252528][ T6986] RIP: 0023:0xf7f41539 [ 2579.252538][ T6986] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2579.252548][ T6986] RSP: 002b:00000000f541555c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 2579.252559][ T6986] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000c0cc5604 [ 2579.252567][ T6986] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2579.252573][ T6986] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2579.252579][ T6986] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2579.252585][ T6986] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2579.252600][ T6986] [ 2579.525034][ T6968] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8969'. [ 2579.540043][ T5829] usb 3-1: USB disconnect, device number 65 [ 2579.909824][ T6991] FAULT_INJECTION: forcing a failure. [ 2579.909824][ T6991] name failslab, interval 1, probability 0, space 0, times 0 [ 2579.922802][ T6991] CPU: 0 UID: 0 PID: 6991 Comm: syz.1.8980 Not tainted syzkaller #0 PREEMPT(full) [ 2579.922834][ T6991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2579.922846][ T6991] Call Trace: [ 2579.922854][ T6991] [ 2579.922863][ T6991] dump_stack_lvl+0x189/0x250 [ 2579.922908][ T6991] ? __pfx____ratelimit+0x10/0x10 [ 2579.922934][ T6991] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2579.922952][ T6991] ? __pfx__printk+0x10/0x10 [ 2579.922975][ T6991] ? __pfx___might_resched+0x10/0x10 [ 2579.922995][ T6991] ? fs_reclaim_acquire+0x7d/0x100 [ 2579.923019][ T6991] should_fail_ex+0x414/0x560 [ 2579.923049][ T6991] should_failslab+0xa8/0x100 [ 2579.923073][ T6991] kmem_cache_alloc_node_noprof+0x77/0x710 [ 2579.923091][ T6991] ? __alloc_skb+0x112/0x2d0 [ 2579.923112][ T6991] ? netlink_autobind+0xdb/0x300 [ 2579.923142][ T6991] __alloc_skb+0x112/0x2d0 [ 2579.923167][ T6991] netlink_sendmsg+0x5c6/0xb30 [ 2579.923199][ T6991] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2579.923225][ T6991] ? __lock_acquire+0xab9/0xd20 [ 2579.923244][ T6991] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2579.923265][ T6991] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2579.923287][ T6991] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2579.923312][ T6991] __sock_sendmsg+0x21c/0x270 [ 2579.923337][ T6991] sock_write_iter+0x279/0x360 [ 2579.923360][ T6991] ? __pfx_sock_write_iter+0x10/0x10 [ 2579.923391][ T6991] ? bpf_lsm_file_permission+0x9/0x20 [ 2579.923412][ T6991] ? security_file_permission+0x75/0x290 [ 2579.923441][ T6991] vfs_write+0x5c9/0xb30 [ 2579.923464][ T6991] ? __pfx_sock_write_iter+0x10/0x10 [ 2579.923485][ T6991] ? __pfx_vfs_write+0x10/0x10 [ 2579.923510][ T6991] ? __fget_files+0x2a/0x420 [ 2579.923534][ T6991] ksys_write+0x145/0x250 [ 2579.923549][ T6991] ? exc_page_fault+0x82/0x100 [ 2579.923563][ T6991] ? __pfx_ksys_write+0x10/0x10 [ 2579.923580][ T6991] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2579.923596][ T6991] ? lockdep_hardirqs_on+0x9c/0x150 [ 2579.923614][ T6991] __do_fast_syscall_32+0xb6/0x2b0 [ 2579.923635][ T6991] ? lockdep_hardirqs_on+0x9c/0x150 [ 2579.923651][ T6991] do_fast_syscall_32+0x34/0x80 [ 2579.923666][ T6991] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2579.923683][ T6991] RIP: 0023:0xf7fc7539 [ 2579.923696][ T6991] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2579.923709][ T6991] RSP: 002b:00000000f54b655c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 2579.923725][ T6991] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080005c00 [ 2579.923735][ T6991] RDX: 0000000000000027 RSI: 0000000000000000 RDI: 0000000000000000 [ 2579.923744][ T6991] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2579.923752][ T6991] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2579.923763][ T6991] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2579.923786][ T6991] [ 2580.210842][ C0] vkms_vblank_simulate: vblank timer overrun [ 2580.313795][ T6995] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8982'. [ 2580.478207][ T6998] Failed to get privilege flags for destination (handle=0x2:0x0) [ 2580.548848][ T7005] netlink: 'syz.2.8986': attribute type 1 has an invalid length. [ 2580.564062][ T7005] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8986'. [ 2580.636464][ T7009] netlink: 104 bytes leftover after parsing attributes in process `syz.4.8988'. [ 2580.959386][ T2967] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 2581.110240][ T2967] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 2581.139236][ T2967] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2581.153253][ T2967] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2581.168290][ T2967] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2581.176703][ T2952] pegasus 4-1:0.0: setup Pegasus II specific registers [ 2581.182033][ T2967] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2581.210106][ T2967] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2581.221483][ T2967] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2581.231836][ T2967] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2581.249521][ T2967] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2581.272962][ T7016] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8991'. [ 2581.282271][ T2967] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2581.290749][ T2967] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2581.300077][ T2967] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2581.327864][ T2952] pegasus 4-1:0.0: can't locate MII phy, using default [ 2581.329477][ T2967] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2581.345212][ T2967] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2581.354609][ T2967] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2581.358363][ T2952] pegasus 4-1:0.0: eth1, ELECOM USB Ethernet LD-USB20, 76:7a:ca:61:1a:ea [ 2581.367122][ T2967] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2581.389864][ T2967] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2581.392840][ T2952] usb 4-1: USB disconnect, device number 52 [ 2581.407345][ T2967] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2581.423994][ T2967] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2581.432410][ T2967] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2581.472390][ T2967] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2581.519379][ T2967] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2581.544950][ T2967] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2581.559541][ T2967] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2581.589355][ T2967] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2581.602012][ T2967] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 2581.613385][ T2967] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 2581.635627][ T2967] usb 3-1: Product: syz [ 2581.644458][ T2967] usb 3-1: Manufacturer: syz [ 2581.654882][ T2967] usb 3-1: SerialNumber: syz [ 2581.671120][ T2967] usb 3-1: config 0 descriptor?? [ 2581.693426][ T2967] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 2582.185720][ C0] usb 3-1: yurex_control_callback - control failed: -71 [ 2582.195372][ T2967] usb 3-1: USB disconnect, device number 66 [ 2582.209409][ T2952] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 2582.213730][ T2967] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 2582.381439][ T2952] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2582.406711][ T2952] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2582.458889][ T2952] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 2582.499184][ T2952] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2582.554432][ T2952] usb 2-1: config 0 descriptor?? [ 2583.018710][ T2952] steelseries 0003:1038:12B6.008B: unknown main item tag 0x0 [ 2583.105945][ T2952] steelseries 0003:1038:12B6.008B: unknown main item tag 0x0 [ 2583.151146][ T2952] steelseries 0003:1038:12B6.008B: unknown main item tag 0x6 [ 2583.213096][ T2952] steelseries 0003:1038:12B6.008B: item fetching failed at offset 4/7 [ 2583.234693][ T2952] steelseries 0003:1038:12B6.008B: probe with driver steelseries failed with error -22 [ 2583.269380][ T5895] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 2583.288612][ T7040] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8993'. [ 2583.387824][ T2952] usb 2-1: USB disconnect, device number 54 [ 2583.476354][ T5895] usb 1-1: Using ep0 maxpacket: 16 [ 2584.529667][ T7087] vivid-004: ================= START STATUS ================= [ 2584.537436][ T7087] vivid-004: RDS Tx I/O Mode: Controls [ 2584.572854][ T7087] vivid-004: RDS Program ID: 32904 [ 2584.685778][ T7087] vivid-004: RDS Program Type: 3 [ 2584.711575][ T7087] vivid-004: RDS PS Name: VIVID-TX [ 2584.743360][ T7087] vivid-004: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 2584.782379][ T7089] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.9001'. [ 2584.808160][ T7087] vivid-004: RDS Stereo: true [ 2584.827530][ T7087] vivid-004: RDS Artificial Head: false [ 2584.900016][ T7087] vivid-004: RDS Compressed: false [ 2584.997870][ T7087] vivid-004: RDS Dynamic PTY: false [ 2585.130425][ T7087] vivid-004: RDS Traffic Announcement: false [ 2585.153521][ T7087] vivid-004: RDS Traffic Program: true [ 2585.159676][ T7087] vivid-004: RDS Music: true [ 2585.171467][ T7087] vivid-004: ================== END STATUS ================== [ 2585.372047][T26541] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2585.387901][T26541] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2585.397219][T26541] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2585.418307][T26541] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2585.428165][T26541] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2585.485390][ T7096] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9003'. [ 2585.759396][ T2952] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 2585.932098][ T2952] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 2585.941569][ T2952] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2585.968573][ T2952] usb 2-1: config 0 descriptor?? [ 2586.014204][ T6424] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2586.134770][ T6424] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2586.170496][ T7097] chnl_net:caif_netlink_parms(): no params data found [ 2586.219876][ T6424] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2586.311299][ T6424] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2586.400402][ T7097] bridge0: port 1(bridge_slave_0) entered blocking state [ 2586.407830][ T7097] bridge0: port 1(bridge_slave_0) entered disabled state [ 2586.415593][ T7097] bridge_slave_0: entered allmulticast mode [ 2586.423518][ T7097] bridge_slave_0: entered promiscuous mode [ 2586.466612][ T5895] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2586.489969][ T2967] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 2586.492960][ T7097] bridge0: port 2(bridge_slave_1) entered blocking state [ 2586.506091][ T5895] usb 1-1: no configurations [ 2586.510835][ T5895] usb 1-1: can't read configurations, error -22 [ 2586.518715][ T7097] bridge0: port 2(bridge_slave_1) entered disabled state [ 2586.526588][ T7097] bridge_slave_1: entered allmulticast mode [ 2586.535448][ T7097] bridge_slave_1: entered promiscuous mode [ 2586.622155][ T7097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2586.635982][ T7097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2586.670334][ T2967] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2586.683122][ T2967] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2586.705822][ T2967] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 2586.724690][ T2967] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2586.741760][ T2967] usb 4-1: config 0 descriptor?? [ 2586.756063][ T7097] team0: Port device team_slave_0 added [ 2586.770402][ T7097] team0: Port device team_slave_1 added [ 2586.821418][ T6424] bridge_slave_1: left allmulticast mode [ 2586.827318][ T6424] bridge_slave_1: left promiscuous mode [ 2586.833430][ T6424] bridge0: port 2(bridge_slave_1) entered disabled state [ 2586.845553][ T6424] bridge_slave_0: left allmulticast mode [ 2586.851747][ T6424] bridge_slave_0: left promiscuous mode [ 2586.857576][ T6424] bridge0: port 1(bridge_slave_0) entered disabled state [ 2587.089594][ T6424] erspan0 (unregistering): left promiscuous mode [ 2587.115916][ T6424] gretap0 (unregistering): left promiscuous mode [ 2587.149899][ T5895] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 2587.335569][ T5895] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2587.350031][ T5895] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2587.372855][ T5895] usb 1-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 2587.382695][ T5895] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2587.394203][ T5895] usb 1-1: config 0 descriptor?? [ 2587.521771][ T6424] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2587.530542][ T4167] Bluetooth: hci5: command tx timeout [ 2587.538947][ T6424] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2587.551049][ T6424] bond0 (unregistering): Released all slaves [ 2587.569151][ T7097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2587.576783][ T7097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2587.606041][ T7097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2587.627507][ T7097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2587.635153][ T7097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2587.661626][ T7097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2587.699633][ T2967] usbhid 4-1:0.0: can't add hid device: -71 [ 2587.705716][ T2967] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2587.716802][ T2967] usb 4-1: USB disconnect, device number 53 [ 2587.741502][ T6424] tipc: Left network mode [ 2587.818650][ T7097] hsr_slave_0: entered promiscuous mode [ 2587.827671][ T5895] steelseries 0003:1038:12B6.008C: unknown main item tag 0x0 [ 2587.835082][ T7097] hsr_slave_1: entered promiscuous mode [ 2587.836805][ T7097] debugfs: 'hsr0' already exists in 'hsr' [ 2587.847949][ T5895] steelseries 0003:1038:12B6.008C: unknown main item tag 0x0 [ 2587.856079][ T5895] steelseries 0003:1038:12B6.008C: unknown main item tag 0x6 [ 2587.863671][ T5895] steelseries 0003:1038:12B6.008C: item fetching failed at offset 4/7 [ 2587.864334][ T7097] Cannot create hsr debugfs directory [ 2587.874809][ T5895] steelseries 0003:1038:12B6.008C: probe with driver steelseries failed with error -22 [ 2588.058606][ T6424] hsr_slave_0: left promiscuous mode [ 2588.075736][ T7122] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9010'. [ 2588.085182][ T6424] hsr_slave_1: left promiscuous mode [ 2588.099233][ T6424] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2588.108981][ T6424] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2588.116938][ T6424] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2588.151990][ T6424] team0: left allmulticast mode [ 2588.157163][ T6424] team_slave_0: left allmulticast mode [ 2588.162948][ T6424] team_slave_1: left allmulticast mode [ 2588.168721][ T6424] team0: left promiscuous mode [ 2588.175966][ T6424] team_slave_0: left promiscuous mode [ 2588.182474][ T6424] team_slave_1: left promiscuous mode [ 2588.188654][ T6424] veth1_macvtap: left promiscuous mode [ 2588.209650][ T6424] veth0_macvtap: left promiscuous mode [ 2588.219497][ T6424] veth1_vlan: left promiscuous mode [ 2588.225011][ T6424] veth0_vlan: left promiscuous mode [ 2588.623261][ T2952] pegasus 2-1:0.0: setup Pegasus II specific registers [ 2588.779747][ T2952] pegasus 2-1:0.0: can't locate MII phy, using default [ 2589.098253][ T7162] FAULT_INJECTION: forcing a failure. [ 2589.098253][ T7162] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2589.145005][ T7162] CPU: 0 UID: 0 PID: 7162 Comm: syz.4.9012 Not tainted syzkaller #0 PREEMPT(full) [ 2589.145032][ T7162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2589.145045][ T7162] Call Trace: [ 2589.145054][ T7162] [ 2589.145063][ T7162] dump_stack_lvl+0x189/0x250 [ 2589.145089][ T7162] ? __pfx____ratelimit+0x10/0x10 [ 2589.145115][ T7162] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2589.145134][ T7162] ? __pfx__printk+0x10/0x10 [ 2589.145152][ T7162] ? __might_fault+0xb0/0x130 [ 2589.145188][ T7162] should_fail_ex+0x414/0x560 [ 2589.145220][ T7162] _copy_from_user+0x2d/0xb0 [ 2589.145244][ T7162] vhost_vring_ioctl+0x7fc/0x1850 [ 2589.145280][ T7162] ? __pfx_vhost_vring_ioctl+0x10/0x10 [ 2589.145299][ T7162] ? do_vfs_ioctl+0xbe8/0x1430 [ 2589.145327][ T7162] ? vhost_dev_ioctl+0x3ee/0xe00 [ 2589.145376][ T7162] vhost_vsock_dev_ioctl+0x256/0xdc0 [ 2589.145403][ T7162] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 2589.145427][ T7162] ? __fget_files+0x3a0/0x420 [ 2589.145452][ T7162] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 2589.145479][ T7162] __ia32_compat_sys_ioctl+0x543/0x840 [ 2589.145496][ T7162] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 2589.145506][ T7162] ? __fget_files+0x3a0/0x420 [ 2589.145521][ T7162] ? fput+0xa0/0xd0 [ 2589.145535][ T7162] ? ksys_write+0x22a/0x250 [ 2589.145545][ T7162] ? exc_page_fault+0x82/0x100 [ 2589.145556][ T7162] ? __pfx_ksys_write+0x10/0x10 [ 2589.145567][ T7162] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2589.145579][ T7162] ? lockdep_hardirqs_on+0x9c/0x150 [ 2589.145590][ T7162] __do_fast_syscall_32+0xb6/0x2b0 [ 2589.145602][ T7162] ? lockdep_hardirqs_on+0x9c/0x150 [ 2589.145614][ T7162] do_fast_syscall_32+0x34/0x80 [ 2589.145625][ T7162] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2589.145638][ T7162] RIP: 0023:0xf7f41539 [ 2589.145648][ T7162] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2589.145657][ T7162] RSP: 002b:00000000f543655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 2589.145670][ T7162] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000004008af20 [ 2589.145677][ T7162] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 2589.145684][ T7162] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2589.145689][ T7162] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2589.145695][ T7162] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2589.145711][ T7162] [ 2589.392571][ C0] vkms_vblank_simulate: vblank timer overrun [ 2589.689578][ T4167] Bluetooth: hci5: command tx timeout [ 2590.494509][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2590.501073][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2590.785025][ T6424] team0 (unregistering): Port device team_slave_1 removed [ 2590.856812][ T6424] team0 (unregistering): Port device team_slave_0 removed [ 2591.554511][T28314] usb 1-1: USB disconnect, device number 109 [ 2591.584125][ T2952] pegasus 2-1:0.0: eth5, ELECOM USB Ethernet LD-USB20, fa:fb:a4:86:b9:9c [ 2591.639650][ T2952] usb 2-1: USB disconnect, device number 55 [ 2591.769502][T26541] Bluetooth: hci5: command tx timeout [ 2591.940261][ T7185] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9016'. [ 2592.012509][ T7185] bond0: option miimon: invalid value (18446744072422816261) [ 2592.021031][ T7185] bond0: option miimon: allowed values 0 - 2147483647 [ 2592.109401][T28314] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 2592.296305][T28314] usb 1-1: config 0 has an invalid interface number: 3 but max is 0 [ 2592.304810][T28314] usb 1-1: config 0 has no interface number 0 [ 2592.327619][T28314] usb 1-1: New USB device found, idVendor=1660, idProduct=1921, bcdDevice=1f.84 [ 2592.348495][T28314] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2592.368675][T28314] usb 1-1: Product: syz [ 2592.378813][T28314] usb 1-1: Manufacturer: syz [ 2592.390064][T28314] usb 1-1: SerialNumber: syz [ 2592.405848][T28314] usb 1-1: config 0 descriptor?? [ 2592.570059][ T7178] Bluetooth: hci3: command 0x0406 tx timeout [ 2592.630896][T28314] dvb-usb: found a 'Medion CTX1921 DVB-T USB' in warm state. [ 2592.850800][T28314] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2592.869879][T28314] dvbdev: DVB: registering new adapter (Medion CTX1921 DVB-T USB) [ 2592.877832][T28314] usb 1-1: media controller created [ 2592.934444][T28314] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2592.954264][ T7208] FAULT_INJECTION: forcing a failure. [ 2592.954264][ T7208] name failslab, interval 1, probability 0, space 0, times 0 [ 2593.026597][ T7208] CPU: 0 UID: 0 PID: 7208 Comm: syz.3.9022 Not tainted syzkaller #0 PREEMPT(full) [ 2593.026624][ T7208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2593.026635][ T7208] Call Trace: [ 2593.026642][ T7208] [ 2593.026650][ T7208] dump_stack_lvl+0x189/0x250 [ 2593.026676][ T7208] ? __pfx____ratelimit+0x10/0x10 [ 2593.026701][ T7208] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2593.026719][ T7208] ? __pfx__printk+0x10/0x10 [ 2593.026743][ T7208] ? __pfx___might_resched+0x10/0x10 [ 2593.026766][ T7208] ? fs_reclaim_acquire+0x7d/0x100 [ 2593.026790][ T7208] should_fail_ex+0x414/0x560 [ 2593.026821][ T7208] should_failslab+0xa8/0x100 [ 2593.026845][ T7208] kmem_cache_alloc_node_noprof+0x77/0x710 [ 2593.026865][ T7208] ? __alloc_skb+0x112/0x2d0 [ 2593.026889][ T7208] ? netlink_autobind+0xdb/0x300 [ 2593.026918][ T7208] __alloc_skb+0x112/0x2d0 [ 2593.026947][ T7208] netlink_sendmsg+0x5c6/0xb30 [ 2593.026980][ T7208] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2593.027007][ T7208] ? __import_iovec+0x5d4/0x7f0 [ 2593.027034][ T7208] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2593.027058][ T7208] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2593.027080][ T7208] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2593.027105][ T7208] __sock_sendmsg+0x21c/0x270 [ 2593.027130][ T7208] ____sys_sendmsg+0x505/0x830 [ 2593.027161][ T7208] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2593.027203][ T7208] ___sys_sendmsg+0x21f/0x2a0 [ 2593.027224][ T7208] ? __pfx____sys_sendmsg+0x10/0x10 [ 2593.027275][ T7208] ? __fget_files+0x2a/0x420 [ 2593.027296][ T7208] ? __fget_files+0x3a0/0x420 [ 2593.027328][ T7208] __sys_sendmsg+0x164/0x220 [ 2593.027348][ T7208] ? __pfx___sys_sendmsg+0x10/0x10 [ 2593.027384][ T7208] ? __pfx_ksys_write+0x10/0x10 [ 2593.027406][ T7208] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2593.027427][ T7208] ? lockdep_hardirqs_on+0x9c/0x150 [ 2593.027448][ T7208] __do_fast_syscall_32+0xb6/0x2b0 [ 2593.027469][ T7208] ? lockdep_hardirqs_on+0x9c/0x150 [ 2593.027491][ T7208] do_fast_syscall_32+0x34/0x80 [ 2593.027510][ T7208] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2593.027532][ T7208] RIP: 0023:0xf70ad539 [ 2593.027548][ T7208] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2593.027563][ T7208] RSP: 002b:00000000f549d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2593.027587][ T7208] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000340 [ 2593.027600][ T7208] RDX: 0000000024000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 2593.027612][ T7208] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2593.027623][ T7208] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2593.027635][ T7208] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2593.027664][ T7208] [ 2593.301574][ C0] vkms_vblank_simulate: vblank timer overrun [ 2593.324767][T28314] DVB: Unable to find symbol dib7000p_attach() [ 2593.331092][T28314] dvb-usb: no frontend was attached by 'Medion CTX1921 DVB-T USB' [ 2593.469915][T28314] rc_core: IR keymap rc-dib0700-rc5 not found [ 2593.479446][T28314] Registered IR keymap rc-empty [ 2593.484613][T28314] dvb-usb: could not initialize remote control. [ 2593.522947][T28314] dvb-usb: Medion CTX1921 DVB-T USB successfully initialized and connected. [ 2593.695085][ T7217] netlink: 100 bytes leftover after parsing attributes in process `syz.4.9021'. [ 2593.717951][ T7222] tipc: Enabling of bearer rejected, failed to enable media [ 2593.727593][ T7217] netlink: 100 bytes leftover after parsing attributes in process `syz.4.9021'. [ 2593.813872][ T7097] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2593.841212][ T7097] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2593.846591][ T2952] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 2593.855618][ T4167] Bluetooth: hci5: command tx timeout [ 2593.867150][ T7097] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2593.930446][ T7097] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2594.030178][ T2952] usb 4-1: Using ep0 maxpacket: 32 [ 2594.037475][ T2952] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 2594.041123][ T6424] IPVS: stop unused estimator thread 0... [ 2594.047949][ T2952] usb 4-1: config 0 has no interface number 0 [ 2594.103203][ T2952] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 2594.131691][ T2952] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2594.148210][ T2952] usb 4-1: Product: syz [ 2594.152749][ T2952] usb 4-1: Manufacturer: syz [ 2594.157412][ T2952] usb 4-1: SerialNumber: syz [ 2594.194754][ T2952] usb 4-1: config 0 descriptor?? [ 2594.200454][ T7097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2594.203110][ T2952] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 2594.225309][ T2952] usb 4-1: selecting invalid altsetting 1 [ 2594.238196][ T2952] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 2594.238997][ T7097] 8021q: adding VLAN 0 to HW filter on device team0 [ 2594.295068][ T6424] bridge0: port 1(bridge_slave_0) entered blocking state [ 2594.302318][ T6424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2594.314567][ T2952] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2594.336339][ T6424] bridge0: port 2(bridge_slave_1) entered blocking state [ 2594.343609][ T6424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2594.356536][ T2952] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 2594.394851][ T7097] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2594.403568][ T7216] ------------[ cut here ]------------ [ 2594.410904][ T7216] usb 1-1: BOGUS control dir, pipe 80006e80 doesn't match bRequestType c0 [ 2594.412330][ T7097] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2594.451534][ T2952] usb 4-1: media controller created [ 2594.459934][ T7216] WARNING: CPU: 0 PID: 7216 at drivers/usb/core/urb.c:414 usb_submit_urb+0x114d/0x18b0 [ 2594.469888][ T7216] Modules linked in: [ 2594.474555][ T7216] CPU: 0 UID: 0 PID: 7216 Comm: syz.3.9023 Not tainted syzkaller #0 PREEMPT(full) [ 2594.484255][ T7216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2594.494613][ T7216] RIP: 0010:usb_submit_urb+0x114d/0x18b0 [ 2594.500288][ T7216] Code: df 0f b6 44 05 00 84 c0 0f 85 2a 06 00 00 45 0f b6 45 00 48 c7 c7 00 77 12 8c 48 8b 34 24 4c 89 fa 44 89 f1 e8 f4 41 89 fa 90 <0f> 0b 90 90 49 bf 00 00 00 00 00 fc ff df e9 95 f2 ff ff 89 e9 80 [ 2594.520134][ T7216] RSP: 0018:ffffc9000cadf660 EFLAGS: 00010246 [ 2594.526386][ T7216] RAX: 8e18f50d8b5ae300 RBX: ffff888058ecc600 RCX: 0000000000080000 [ 2594.534650][ T7216] RDX: ffffc9001707a000 RSI: 0000000000013734 RDI: 0000000000013735 [ 2594.543137][ T7216] RBP: 1ffff11006325fec R08: ffffffff8f9e1177 R09: 1ffffffff1f3c22e [ 2594.551538][ T7216] R10: dffffc0000000000 R11: fffffbfff1f3c22f R12: ffff888023cbc100 [ 2594.560060][ T7216] R13: ffff88803192ff60 R14: 0000000080006e80 R15: ffff88804e682520 [ 2594.568032][ T7216] FS: 0000000000000000(0000) GS:ffff888125d0c000(0063) knlGS:00000000f549db40 [ 2594.577341][ T7216] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 2594.584485][ T7216] CR2: 0000000080089000 CR3: 000000005a350000 CR4: 00000000003526f0 [ 2594.592711][ T7216] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2594.600775][ T7216] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2594.608747][ T7216] Call Trace: [ 2594.612061][ T7216] [ 2594.614994][ T7216] usb_start_wait_urb+0x114/0x4c0 [ 2594.620152][ T7216] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 2594.625705][ T7216] usb_control_msg+0x232/0x3e0 [ 2594.630655][ T7216] dib0700_i2c_xfer+0xba7/0xf70 [ 2594.635552][ T7216] __i2c_transfer+0x874/0x2170 [ 2594.640394][ T7216] ? lockdep_hardirqs_on+0x9c/0x150 [ 2594.645611][ T7216] ? __pfx___i2c_transfer+0x10/0x10 [ 2594.650940][ T7216] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 2594.656309][ T7216] ? i2c_transfer+0x120/0x3a0 [ 2594.661031][ T7216] i2c_transfer+0x25b/0x3a0 [ 2594.665532][ T7216] ? __pfx_i2c_transfer+0x10/0x10 [ 2594.670624][ T7216] ? _copy_from_user+0x94/0xb0 [ 2594.675383][ T7216] i2cdev_ioctl_rdwr+0x460/0x740 [ 2594.680421][ T7216] compat_i2cdev_ioctl+0x5a8/0x5c0 [ 2594.685754][ T7216] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 2594.691644][ T7216] ? __fget_files+0x3a0/0x420 [ 2594.696368][ T7216] ? __fget_files+0x2a/0x420 [ 2594.701052][ T7216] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 2594.706603][ T7216] __ia32_compat_sys_ioctl+0x543/0x840 [ 2594.712129][ T7216] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 2594.718103][ T7216] ? __se_sys_futex_time32+0x360/0x3e0 [ 2594.723617][ T7216] ? __pfx_do_sys_openat2+0x10/0x10 [ 2594.728820][ T7216] ? rcu_is_watching+0x15/0xb0 [ 2594.734029][ T7216] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2594.740864][ T7216] ? lockdep_hardirqs_on+0x9c/0x150 [ 2594.746068][ T7216] __do_fast_syscall_32+0xb6/0x2b0 [ 2594.751206][ T7216] ? lockdep_hardirqs_on+0x9c/0x150 [ 2594.756394][ T7216] do_fast_syscall_32+0x34/0x80 [ 2594.761434][ T7216] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2594.767753][ T7216] RIP: 0023:0xf70ad539 [ 2594.771886][ T7216] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2594.791835][ T7216] RSP: 002b:00000000f549d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 2594.800499][ T7216] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000707 [ 2594.808471][ T7216] RDX: 0000000080000a40 RSI: 0000000000000000 RDI: 0000000000000000 [ 2594.816540][ T7216] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2594.824636][ T7216] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2594.832684][ T7216] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2594.840724][ T7216] [ 2594.843829][ T7216] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2594.851180][ T7216] CPU: 0 UID: 0 PID: 7216 Comm: syz.3.9023 Not tainted syzkaller #0 PREEMPT(full) [ 2594.860469][ T7216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2594.870777][ T7216] Call Trace: [ 2594.874050][ T7216] [ 2594.876964][ T7216] dump_stack_lvl+0x99/0x250 [ 2594.881581][ T7216] ? __asan_memcpy+0x40/0x70 [ 2594.886169][ T7216] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2594.891378][ T7216] ? __pfx__printk+0x10/0x10 [ 2594.895988][ T7216] vpanic+0x237/0x6d0 [ 2594.899969][ T7216] ? __pfx_vpanic+0x10/0x10 [ 2594.904478][ T7216] panic+0xb9/0xc0 [ 2594.908191][ T7216] ? __pfx_panic+0x10/0x10 [ 2594.912606][ T7216] __warn+0x31b/0x4b0 [ 2594.916581][ T7216] ? usb_submit_urb+0x114d/0x18b0 [ 2594.921595][ T7216] ? usb_submit_urb+0x114d/0x18b0 [ 2594.926614][ T7216] report_bug+0x2be/0x4f0 [ 2594.930967][ T7216] ? usb_submit_urb+0x114d/0x18b0 [ 2594.935995][ T7216] ? usb_submit_urb+0x114d/0x18b0 [ 2594.941013][ T7216] ? usb_submit_urb+0x114f/0x18b0 [ 2594.946032][ T7216] handle_bug+0x84/0x160 [ 2594.950265][ T7216] exc_invalid_op+0x1a/0x50 [ 2594.954755][ T7216] asm_exc_invalid_op+0x1a/0x20 [ 2594.959631][ T7216] RIP: 0010:usb_submit_urb+0x114d/0x18b0 [ 2594.965272][ T7216] Code: df 0f b6 44 05 00 84 c0 0f 85 2a 06 00 00 45 0f b6 45 00 48 c7 c7 00 77 12 8c 48 8b 34 24 4c 89 fa 44 89 f1 e8 f4 41 89 fa 90 <0f> 0b 90 90 49 bf 00 00 00 00 00 fc ff df e9 95 f2 ff ff 89 e9 80 [ 2594.984905][ T7216] RSP: 0018:ffffc9000cadf660 EFLAGS: 00010246 [ 2594.991062][ T7216] RAX: 8e18f50d8b5ae300 RBX: ffff888058ecc600 RCX: 0000000000080000 [ 2594.999044][ T7216] RDX: ffffc9001707a000 RSI: 0000000000013734 RDI: 0000000000013735 [ 2595.007099][ T7216] RBP: 1ffff11006325fec R08: ffffffff8f9e1177 R09: 1ffffffff1f3c22e [ 2595.015066][ T7216] R10: dffffc0000000000 R11: fffffbfff1f3c22f R12: ffff888023cbc100 [ 2595.023028][ T7216] R13: ffff88803192ff60 R14: 0000000080006e80 R15: ffff88804e682520 [ 2595.031006][ T7216] usb_start_wait_urb+0x114/0x4c0 [ 2595.036025][ T7216] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 2595.041584][ T7216] usb_control_msg+0x232/0x3e0 [ 2595.046340][ T7216] dib0700_i2c_xfer+0xba7/0xf70 [ 2595.051190][ T7216] __i2c_transfer+0x874/0x2170 [ 2595.055944][ T7216] ? lockdep_hardirqs_on+0x9c/0x150 [ 2595.061361][ T7216] ? __pfx___i2c_transfer+0x10/0x10 [ 2595.066568][ T7216] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 2595.071940][ T7216] ? i2c_transfer+0x120/0x3a0 [ 2595.076628][ T7216] i2c_transfer+0x25b/0x3a0 [ 2595.081122][ T7216] ? __pfx_i2c_transfer+0x10/0x10 [ 2595.086136][ T7216] ? _copy_from_user+0x94/0xb0 [ 2595.090910][ T7216] i2cdev_ioctl_rdwr+0x460/0x740 [ 2595.095847][ T7216] compat_i2cdev_ioctl+0x5a8/0x5c0 [ 2595.100988][ T7216] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 2595.106619][ T7216] ? __fget_files+0x3a0/0x420 [ 2595.111305][ T7216] ? __fget_files+0x2a/0x420 [ 2595.115931][ T7216] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 2595.121472][ T7216] __ia32_compat_sys_ioctl+0x543/0x840 [ 2595.126934][ T7216] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 2595.132915][ T7216] ? __se_sys_futex_time32+0x360/0x3e0 [ 2595.138360][ T7216] ? __pfx_do_sys_openat2+0x10/0x10 [ 2595.143549][ T7216] ? rcu_is_watching+0x15/0xb0 [ 2595.148300][ T7216] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 2595.154955][ T7216] ? lockdep_hardirqs_on+0x9c/0x150 [ 2595.160151][ T7216] __do_fast_syscall_32+0xb6/0x2b0 [ 2595.165245][ T7216] ? lockdep_hardirqs_on+0x9c/0x150 [ 2595.170423][ T7216] do_fast_syscall_32+0x34/0x80 [ 2595.175263][ T7216] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2595.181590][ T7216] RIP: 0023:0xf70ad539 [ 2595.185647][ T7216] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2595.205247][ T7216] RSP: 002b:00000000f549d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 2595.213825][ T7216] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000707 [ 2595.221783][ T7216] RDX: 0000000080000a40 RSI: 0000000000000000 RDI: 0000000000000000 [ 2595.229741][ T7216] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2595.237699][ T7216] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2595.245658][ T7216] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2595.253696][ T7216] [ 2595.256991][ T7216] Kernel Offset: disabled [ 2595.261333][ T7216] Rebooting in 86400 seconds..