last executing test programs: 8.357588338s ago: executing program 0 (id=3693): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)={0x3c, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xc51da8eeb5ae2f11}]}]}, @ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44}, 0x4000000) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xd27, 0x870b525, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x8, 0xc}, {}, {0xa, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xfff7}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2204403c}, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="d80302b10000000b5a6eb40da45cb9e01915cf532af4867c3ee955b503e19e4f4d2f934d50797000cbd0c3b5441627ac540289bf61c4c78f21a82793fa559b0c52867b8d78dd4cd1d364fc69ef0a06c286764ac7899cd4466ad5a679496a830b2d819974d3680fb582dbeb8c99bd29", @ANYRESOCT, @ANYRES8, @ANYRESHEX, @ANYRESOCT=r3, @ANYBLOB="b3a10995510690deb0f9d94cffc108e5046ee50d8ddadf0a088eb7453c23efe6689c630ac2addc8dc7cd97eb8799596787a931b0b4a0af7451d131f0290f0dd7b6751e59fa914012404be414347ec4234a51c1a7d4ab8c9aeb016ed9bdb5ec292df28a13af7c311fd85a76feba0c86f5edacd4f7908732400f8b0fbcb5870db63cae094e91186eeac103c6935fdafe0506a0e662edd062c422c9915a530f0c949016ed854570542bf4cf854159f48b9bedd5a82cba63b46498c616e007b4ecca0f9e8665b3c5aa989920ead51c0b887097457d6e01c5983eac624f86df8e5b55337fa731d21d"]}, 0x0) syz_usb_connect$uac1(0x4, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xc07}}]}) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r5, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) umount2(&(0x7f00000021c0)='./file0\x00', 0x4) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000780)=ANY=[]) syz_usb_control_io(r4, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0xe22, 0x0, @rand_addr, 0xe000}, 0x1c) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x3, @empty, 0x2}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff810000400e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000c80)={0x2c, &(0x7f0000000e80)=ANY=[@ANYBLOB="0004f9"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r4, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x20, 0x23, 0xb5, {0xb5, 0x0, "78f87cdac310c3408b47dacce015c4915a85db65f750479a1abc1be3dcedc32349120d957b5035e9ef6eef47d5edab6ba02839d90c0a931c4284ecfa8d3fadb2529a469657c82205626ee6b3782a654899ed9989650f9908a2f5ff6c2eb95c631ce08066300619dc94202641bbf8abab319e8e59763a01627b0dc9fcba97f9cb962a991c73f6082a11e11b607e42d5440600c6635a6e3e8cb6b9d157c6fdb4652165669d9dae09abb5ed44f4efa22b236ceb26"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40b}}}, &(0x7f00000006c0)={0x44, &(0x7f00000002c0)={0x20, 0x30, 0xdf, "a5530903e9c3479aecc151bb67def0f0139f28f041bf84537cd24adbb529c8437a293cc368a581536e68f5e1280faff1cf85f5ca20cf7518c1025b8b0d1fffba4a85e3426d432bf36e4ad3ba5c15456acf771136c451f3168cbc6d6f33be55bb6594f81e0222ccf72bc437c0d8bc85eafaa96fab4ca21a8f01e265bb8c64ea668046e730836b8647b435e1bc8c9b8193c231fc7022b90b5c517b4f3376408af2452fbaa658df9193e95486f51347602229448cb70ba0c26112d465f146485705bf2600eee6b16b7b36a73b1f48026258f5476c44b76f762f5a14292b4c0491"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000580)={0x20, 0x81, 0x3, "d7cdfd"}, &(0x7f00000005c0)={0x20, 0x82, 0x1, "ab"}, &(0x7f0000000600)={0x20, 0x83, 0x2, "8a78"}, &(0x7f0000000640)={0x20, 0x84, 0x4, "c92571ef"}, &(0x7f0000000680)={0x20, 0x85, 0x3, "58c65b"}}) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r8, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2, {0x14000000}}, './file0\x00'}) syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f0000000140)={0x14, &(0x7f0000000240)=ANY=[], 0x0}, 0x0) 5.330897913s ago: executing program 3 (id=3710): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x17, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000150001"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000080) setsockopt$inet_int(r2, 0x0, 0x18, &(0x7f0000000080)=0x800, 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0x8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r6 = fsopen(&(0x7f0000000140)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) ioctl$TCXONC(0xffffffffffffffff, 0x4b63, 0x3) write$binfmt_script(r5, &(0x7f0000000200), 0xfffffd9d) munlockall() sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f00009c0000/0x1000)=nil, 0x1000, 0xc) syz_usb_connect(0x2, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009fef7f2099043910760c010203010902450001000010000904b00002a1e0d800052406000105240006000d24020100000000060091008106241a00002f0424020009050402ffe7ff0000090582021800"], 0x0) 5.086341082s ago: executing program 0 (id=3711): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0xc70, 0xf001, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x40, 0x1, "", [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x1, 0x2, 0xb9, {0x9, 0x21, 0x5, 0x55, 0x1, {0x22, 0xff8}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x9, 0x5, 0x2}}}}}]}}]}}, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)="64b1de932e628eee8a0a89a94e5f750f399c7b1c35ac914dd6fc80d007beda93780f095b542decee786afeec8991e630bd7ebe6cdd3df5c82a54b9ba0f7e6f7cdd6729eb18e61f5296ad1df8ead0378b1cee4f7f6fef15d2b4b38d1e028e32d5584c080fcbe799a4eedfef7cbf95cb8435bf921ea828aaff4d73a74a44076e29eea4eab04413f2cc2081a0f05bec00b2ef34bd524f004ef0740ff6bc880b284742db25", 0xa3}, {&(0x7f0000000700)="6731a9da84a7f1d212561a21cd729eb4a2e7f2c859d2682f4601b2befc6bfd956ab32128d13f450ac5ef76ffcf2a43f71d5011ad9e4fd63b3648cb51d902fcd1b342c28ea583d0c1bf65a670b2911e63cdc6d7ed06f73cfff3675832fce4151730f7ef2c8becc88720661c5013e176dca9141e3db9acc3293f66963645623733b0f3b11aec36f59f89b36e0236a31d63e7", 0x91}], 0x2}}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f00000008c0)="1a4327465638b8670e9ef99039dc0f60eb2cde85b2639882576537b3beb8b09ca7dd2c4972f132eb493ac7a3dd19bf1a9b8aacd86b333646a9e5342d840708bcd9aa55104cfedd028566dffeaf06fdb5f2d372c586b0b89c64700b3d9abd", 0x5e}, {&(0x7f0000000980)="70c12f0fa84f4fcbfdb9e33365085ad18b6b869d3b7d05d8f7610180cb11c7f13b66eeb4156bfbb3f635a7dfde1719e1f90fe56dbf21f901857a7eafcf9fde47342a2d78eeb82a302413a3bfdb1c939d405fa6a8234f082b80073226b42969805f104a28759b329d3b6afc406f0d36cbc7d0a61ccbfb631af8416206c4c57c76bd167a93d23cf3783c3febaf24be3685637891f8380306980cd8505739f0", 0x9e}, {0x0}, {0x0}], 0x4, &(0x7f0000000e00)=ANY=[@ANYBLOB="d8000000"], 0xd8}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) writev(0xffffffffffffffff, &(0x7f0000003940)=[{0x0}, {&(0x7f0000002100)="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", 0x775}], 0x2) write(r0, &(0x7f0000001e00)="39270725d93c4ab6cb559938ef75d3d7fd5c06a228a59b717b6934bdefb8b8e2dfca955f26b8cab29bdfdce27e4f9cb112fe41e0a6799578f252519cd4a289985be050d209b4c9617cfb94f1bed81696b0c741f6d366efd7ad3dc7cef66647abaf4108076fdffecb7457f5b6b01835a3c79b873f6ebbcb5ee659861a7b4cce43711bbd6b13c941fbb38ef7e1fe0c70fa4aa49b98b43615605d51cc4d742b364a4e7a2f3dee73b86af3fa4ca8f616eaaedcf155820e1767f7d66ecd818ece03f32c3367bbd9ce6656123f394b7f26f1e0420a9ac4cb25638c75fc3c487ba76fd64c26da6d7ce7f1ee8f49d6e9cc95f5c94bf93183ebf8e6be081e0b9f34bd6c2fe5f895dc1cc01e3018cef11ad9e2e1baf35254258efbaf3e8898f561bdb5c4c49f9d3146503df48e194ea3d06396e970ea9fc7c47eb9988477ed1a7e8641dfeea7b57b5a9967c58762574262efde8795f20f2d45e964ede39c7a6502c03f863e6a21a33ba324e6474d4f0495054745f3a80e6554d4d1fd5ddbca11c5e3e6f9087ca1981a14baa3a2956faa8f6b1652e8cf30d7c37a060bc6c836862451c4e76fc9cb221db8d4b449c27aa44564cb33ef144ed0c51bdd66675302692d979297f30e2d9523f85afbbf54c5b5e2261f8b792f83b33cca78c44a5c4e6ff96273979acbb447d49c0502cc9f8991e9bc784a2e978912d8102d867b631d54269936f54bb20ee57e2b4ba4b6c44e767aef24f6c3a8bb5a3b2084d793082e4c5e517694b220e35ac140913e0e55257af03c4dcf376f24773642c14279e2b55906b0b8a4a34fa4d73f37a5feeca1cf93395b998ddcc557d0e2ae112cf1566f7097e7acb6c0bdf9350781341bb83936b355779417839a70c3cbe13e9561b0820df44dbd2a24bd3d6d8b0d9e83983cb7ad8f147f980b06be823e93a93395f5e60b7f31f5aeadc81f02e177446888c15d2845fd675b98360ac2f584a8ab618789499babac77e3311c563fa519a8dbbe49b91a46cc355f8e956c04dfc3b8e218dbe0302ff463fc94eceec7050b7477d9542f6d05d36ee13e664dfc0bb165601e6bd70615f3c299a9c7c7004cc9987a76afc54b3c83e5d23c0790f39593437b2592cf0548f21823f61076340a87dae9d3427acc844357d6bdbba726e7a41eb30a916df698ab241b5e4991f41d34afd2c2b99f259ca582f09c8027c3381e64070aad6ec7f7c7c973d55a33eca3cc4245bf488a497ac966aa13111ec3033172", 0x377) 4.70981297s ago: executing program 2 (id=3713): sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000b68b010188a6000000000000000a000005300002802c00018014000300ff010000000000000000000000000001"], 0x44}, 0x1, 0x0, 0x0, 0x40d0}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000100)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010004b0401800000000000007a000000", @ANYRES32=0x0, @ANYBLOB="4800000000000000240012"], 0x44}}, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a14000000000a050000000000000000000a00fffe38000000090a010300000000000000000700000008000f40000000020900010073797a310000000008000a400000000008000f400000000114"], 0x74}, 0x1, 0x0, 0x0, 0x88000}, 0x20000000) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="8800000010000104000000000000120000000000", @ANYRES32=0x0, @ANYBLOB="2b03000000000000600012800b00010067656e65766500005000028005000800000000000400380205000900010000000500"], 0x88}}, 0x0) 4.490192125s ago: executing program 2 (id=3714): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) quotactl_fd$Q_QUOTAOFF(r2, 0xffffffff80000300, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x8}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x4004010}, 0x4008094) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000580)='\x00\x00\x00\x00\x00\x00\xc4n\xed\xac\x98Nt\x9a- 3\xbe\vr\x93\xe2D\x96\xa3W\xb2GRJ\r\x85\n\x18a\"\xa2t\xb8\x85\xce[\xa8\xe9\x1d\x1b8\x9b\xfb\xae\n\x83\x13\xfdlv2\xb7S\x16C\x02\xc6\a\x94\xd4\xe1\xcb\xf5ia\xf2G\xd8\xae\x12;\xf6\xba\x9f\x92\xbf\x18\xc6\x8b3\xf3\x06\xbe\x94\xb7<\xd2ke\xf0\xc6\xd2\x06\x1f>\xd2', &(0x7f00000003c0)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000002c0)='s\xefurce', &(0x7f0000000300)='\xb0\xfb\xd9\x9a\xbe\r\xcc:\x9b\xd0}\xe8\xff\xff\xff\xff\xff\xff\xff\x7f\xce\xf5\x1a\x01\xd6\a\xfe\xb8\x92~wS\x87\xd9\x9e0y\xc9\x8cw-zu(ht\xa1~\x9a\x8d^+\x9f\xee\x9a(&W\\\xbb\xd5W\xeb\x06\x9dva\x06\xe3\x97\xa1\x88\x83W{\x00\xff\xff\xff\xff\xff\xff\xff\xe9\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00)o\b~\xe3t`\xc9=;o\xe5\xb4T)\x04\xf9k\xfb%t\xa7\x80c\xbb\xeb\x10\xb8\x01', 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120120029ee0a508f00a57d105fe0102030109021b00010700a002"], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) userfaultfd(0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2, 0x3, 0x2) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x8, @mcast1={0xff, 0x7}, 0x6}}, {{0xa, 0x0, 0x10000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}}}, 0x108) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2a, &(0x7f0000000080)={0x24, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108) 4.390293139s ago: executing program 1 (id=3715): syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(0xffffffffffffffff, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x121800, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_MP_STATE(r7, 0x4004ae99, &(0x7f0000000180)=0x7) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001580)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0xd, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x2, 0x7ed53619, 0x1, 0x2, 0x9644, 0x4, 0x58b, 0x852, 0xffffffff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x5, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x1, 0x6, 0x7, 0x8, 0x6, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x863c, 0xff, 0x24, 0x5, 0x7, 0x6, 0x6, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x26, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x7, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x8, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x9, 0x6, 0x8000, 0x1, 0x8, 0x80000001, 0x0, 0x74, 0x6, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x200, 0x9, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab2, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x4, 0x1, 0x6, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x8004b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1080, 0x4, 0x80000ec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x4, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x5, 0x4, 0x0, 0x3, 0x0, 0xd, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x140, 0xec0, 0xffff, 0x4, 0x2, 0xffff, 0x3e, 0xb827, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x92, 0x0, 0xb, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0x1, 0x3, 0x9, 0xc, 0x5, 0x3, 0xb, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0xe, 0x0, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x5, 0x4, 0x3, 0xc, 0x9, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x3, 0x0, 0x881, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x8, 0x4, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x4, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x9, 0x1000040, 0x2, 0xfff, 0x8, 0x3, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x3, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x8, 0x8, 0xbb99, 0xff, 0x8, 0x84a, 0xc0a1, 0x8, 0x8, 0xa, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x6, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0x40d, 0x5, 0x7, 0x5}, {0x6, 0x1, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=@gettaction={0x28, 0x32, 0x301, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}]}, 0x28}}, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)="e2", 0x1}], 0x1) r12 = syz_open_procfs(0x0, &(0x7f0000000280)='net\x00') symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') r13 = inotify_init1(0x0) sysfs$1(0x1, &(0x7f0000000140)='/dev/i2c-#\x00') inotify_add_watch(r13, &(0x7f0000000180)='./file0\x00', 0xe00008da) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./bus\x00') openat(r12, &(0x7f0000000340)='rpc/nfsd.fh/channel\x00', 0x1, 0x0) 4.21726082s ago: executing program 4 (id=3716): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f0000000080)=[{0x50, 0x0, 0x7, 0x4}, {0x6, 0xfc}]}) write(r0, &(0x7f00000001c0)="3357e044e3d589207314d803becf29fd4ac3e2699737752502572b96f5c989c7eee45a1570bd5398f99101146487fa4d5b82e1fb56cc8e19b11083fc0385887d762f0bdd0b2f0131334378ed30357b0fad98cb14cefdef58c17c3828623b8329f19e58c8a114a9e1455c6eb49d207f11b4c6e006cbc80080e52ff2d7e5f576692d8c5f9ef3d1cf05164105eec31e24015f44e95ad5566bbb145cc784660c3e4546", 0xa1) 3.942900997s ago: executing program 4 (id=3717): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000008eb97382e1c6a4a676d62b0000000000000000000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000050900010073797a30000000000900030073797a320000000068000000060a010400000000000000000100000008000b4000000000400004803c0001800b00010065787468647200002c000280080001400000000c080003400000000e0800044000000022050002000700000008000640000000020900010073797a3000000000140000001100010000000000000000000100000a"], 0xdc}}, 0x0) r1 = semget$private(0x0, 0x6, 0x100) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r4, 0x0) ioctl$KVM_CAP_X2APIC_API(r3, 0x4068aea3, &(0x7f00000000c0)={0x81, 0x0, 0x1}) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x5, 0x54}, 0x2c) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r7 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r7, &(0x7f0000000280)={0xa, 0x4e23, 0x200197, @private1, 0x7}, 0x1c) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x1, 0x3}, 0x10) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/bus/input/devices\x00', 0x0, 0x0) sync_file_range(r4, 0x68, 0x100, 0x5) poll(&(0x7f0000000040)=[{r8, 0x808a}, {r8, 0x408}], 0x2, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) semtimedop(r1, &(0x7f0000000140)=[{0x0, 0x4}], 0x1, 0x0) semop(r1, &(0x7f0000000000)=[{0x3, 0x7, 0x800}, {0x2, 0x0, 0x1000}, {0x0, 0x100, 0x1800}], 0x3) semop(r1, &(0x7f0000000080), 0x0) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000040)) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000200)={0x8000, {0x0, 0x3e, 0x4, 0x6bd, 0xffffffffffffffff}}) signalfd(r8, &(0x7f0000000080)={[0x80000000]}, 0x8) 2.849173044s ago: executing program 4 (id=3718): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000700)="cf1a7a60b269e900"/20, 0x14) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000380)={0x1, 0x3, 0x1000, 0xd2, &(0x7f0000000140)="be9bb19c1b03c69f5f9b21545dbc3f2419a28ac5a5979c969a70fb88e7ba47b04d976b53bd844199c9d26879518b5d676605adbbf73f66e5d0ca35882e47d2981a6c61cc38ac8be29aae9fdfba9a01ef3c4d8c9b544adaea907144e46e901b0d178eccdab5b1798944c382bae0b34459bada9d34e39e32dea73a6ad228fa2317df80459d2aa4ff7497bf304bf9fa74c136212b166ac38e4bcd83c01a3e17540650a42a1c8d4113152a0d04ce6466255661842bb582ce3d64b82e8a9e517f7bcaeb6a5c6b30f576fa78bb5813d16ac93ac9ff", 0x0, 0x0, 0x0}) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c55080000000c547d03d8a0f4bd2200", [0x0, 0x6]}}) 2.658024907s ago: executing program 4 (id=3719): syz_usb_connect(0x2, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb100000000102000905", @ANYBLOB="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"], 0x0) 2.034351322s ago: executing program 3 (id=3720): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfe}}, 0x7ffe}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b294a0fa62d", 0x11}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) syz_mount_image$fuse(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x1cf600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x1300000000000000, 0x2000000000001]}}) 1.871900811s ago: executing program 0 (id=3721): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x0, 0x0, 0xfff, 0x9}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x7000002, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x109) mremap(&(0x7f00000f1000/0x1000)=nil, 0x1000, 0x3000, 0x4, &(0x7f0000ffd000/0x3000)=nil) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) fremovexattr(r1, &(0x7f0000000000)=@known='system.posix_acl_default\x00') creat(&(0x7f00000005c0)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) 1.840476124s ago: executing program 1 (id=3722): socket(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001640)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x0, 0x5, 0x1, 'O'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000280)={0x60, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x8) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r5, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r7 = syz_io_uring_setup(0x11f7, &(0x7f00000012c0)={0x0, 0x7071, 0x80000, 0x0, 0x2f6}, &(0x7f0000001240), &(0x7f0000001180), &(0x7f0000001200)) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f0000002300)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x3100) io_uring_register$IORING_UNREGISTER_BUFFERS(r7, 0x1, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0x5, 0x0}, 0x8) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x0, 0x0, &(0x7f0000000440)='syzkaller\x00', 0xe2, 0xe8, &(0x7f0000000480)=""/232, 0x41000, 0x65, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000580)={0x6, 0x4}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x8, 0x0, 0x7}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000600)=[0xffffffffffffffff], &(0x7f0000000640)=[{0x4, 0x2, 0x5}, {0x0, 0x2, 0x3, 0x1}, {0x5, 0x5, 0xf, 0xa}, {0x4, 0x5, 0x7, 0x1}, {0x1, 0x4, 0x1, 0x5}, {0x0, 0x1, 0x0, 0xc}, {0x1, 0x1, 0xf}, {0x4, 0x1, 0x1, 0x5}], 0x10, 0xffffffff}, 0x94) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r10 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r10, 0x84, 0xd, &(0x7f0000000000), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xe, 0x9, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, [@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffa}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000100)='GPL\x00', 0xc909, 0x60, &(0x7f00000002c0)=""/96, 0x41100, 0x48, '\x00', 0x0, @sk_skb=0x4, r2, 0x8, &(0x7f0000000340)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0xe, 0x9f6, 0x7f}, 0x10, r8, r9, 0x2, &(0x7f0000000780)=[r1], &(0x7f00000007c0)=[{0x3, 0x5, 0x10, 0x3}, {0x0, 0x3, 0xa, 0xa}], 0x10, 0x5}, 0x94) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) 1.775270867s ago: executing program 3 (id=3723): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000010140)={0x3b, 0x1, 0x2, "6040a7190200002000000000000000ff1057e31e94000000000000000006ff00", 0x42303159}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_emit_ethernet(0x2a, &(0x7f00000000c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000008004d"], 0x0) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000000)={0x0, 0x4d7}, 0x8) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000020000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000050000000060a01040000000000000000010000f908000b40000000000900010073797a300000000028000480240001800b0001006f626a726566000014000280080003"], 0xc4}}, 0x4008800) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb4}}, 0x0) 1.561936448s ago: executing program 3 (id=3724): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000000200081dcfcffffff03000000020000000080000000000000050016000400000008000200ac1414bb080017004e214e22"], 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x44004) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000000)={{r0}, 0x2, 0x7, 0x1000}) 1.334988702s ago: executing program 4 (id=3725): unshare(0x200) r0 = fanotify_init(0x20, 0x80000) io_setup(0x7, &(0x7f0000000000)=0x0) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000040)=""/4096) io_getevents(r1, 0x3, 0x4, &(0x7f0000001040)=[{}, {}, {}, {}], 0x0) r2 = socket$alg(0x26, 0x5, 0x0) shutdown(r2, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000010c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r3, 0x80184151, &(0x7f0000001200)={0x0, &(0x7f0000001100)="815e5edb0d348d2101e5b235bb85c7cf7667d97969c34a5b3577d55ec623cb3aefe2c717af8b89c485bda8421d3e643ceba1a6b6dfae478ef6676cfeb4bb54f95e57285ca2ba8226b05529ef62e41467ea9b5d3befac94c8ae3c5d801dc0bec32b4f2430666ac2078c7e643427d1af71fa5c9132cf2a4e09a0bf913d306e015f0469d3e143d159674b006c6df5f353adc81847d4661b582a80594409d2538e68b98db0ee52740224382e8f97409a905dc6c234c29b36149fe4a1307138942ebcdfcd1b0279b721aafd", 0xc9}) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) clock_nanosleep(0x6, 0x0, &(0x7f0000001280)={r4, r5+10000000}, &(0x7f00000012c0)) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001300)=0x0) capset(&(0x7f0000001340)={0x20071026, r6}, &(0x7f0000001380)={0xd58, 0x5, 0x5, 0x0, 0x1, 0x8}) unshare(0x800) userfaultfd(0x80800) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000013c0)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f0000001400)={0x1d, r7}, 0x10) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001440), 0x94800, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r8, 0xc0189374, &(0x7f0000001480)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) r10 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000014c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r10, 0x8008f511, &(0x7f0000001500)) connect$inet6(r9, &(0x7f0000001540)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @local}, 0x7}, 0x1c) open(&(0x7f0000001580)='./file0\x00', 0x105000, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f00000015c0)=@assoc_value={0x0}, &(0x7f0000001600)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r9, 0x84, 0x6, &(0x7f0000001640)={r11, @in={{0x2, 0x4e22, @broadcast}}}, &(0x7f0000001700)=0x84) ioctl$MEDIA_IOC_REQUEST_ALLOC(r9, 0x80047c05, &(0x7f00000017c0)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_QBUF(r9, 0xc058560f, &(0x7f0000001800)=@multiplanar_fd={0x3646, 0x1, 0x4, 0x20, 0xbf6, {0x77359400}, {0x1, 0x0, 0x80, 0x91, 0x7, 0x3, "d37ecb63"}, 0x8001, 0x4, {&(0x7f0000001740)=[{0x6, 0x8, {}, 0xdb}, {0x3, 0x8, {r3}, 0xc}]}, 0x4b6ffa21, 0x0, r12}) prctl$PR_SCHED_CORE(0x3e, 0x0, r6, 0x1, &(0x7f0000001880)) r13 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r13, 0x65, 0x4, &(0x7f00000018c0), 0x4) 1.137632559s ago: executing program 2 (id=3726): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000040)={&(0x7f0000001440)=[{0x4000, 0x0, 0x0, 0x0}], 0x1}) 1.012334332s ago: executing program 3 (id=3727): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x271e, 0x0, &(0x7f0000000040)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x4c, 0x3, 0x3, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffff595}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x20003}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x64}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1000}, @NFQA_MARK={0xffffffffffffffeb, 0x3, 0x1, 0x0, 0x200}]}, 0x4c}}, 0x20000010) 814.901441ms ago: executing program 3 (id=3728): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r2 = socket(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'lo\x00'}) (async, rerun: 32) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (rerun: 32) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000280)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x20000000007, 0xb, 0x0, 0x9, 0xf, 0x18, "362dcaec559ae654c4442e237d1f4b55678e31743dc8b7f7a8e04aeeaab90a34597d6f3ccdf75580b3ef06baf5d38bf003cb8392c0dcb30274adf2eb8c1828b9", "0810a978900b34c25865e9f9e462b81fbadf950c98bcf19cda8abfcc2a097b9453f5639cb33586968a2d51079ea982ffb122411090d9ee33485d139d87471527", "3e1a451844565535d87d01a4b12005df5dda3fae0aa06df925c22299206ccc58", [0xd9f, 0xc]}}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x14, 0x39, 0x9, 0x70bd27, 0xffffffff, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x20006805}, 0x8800) (async) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040da0b528111300102030109022700010100a0fa0904000003ff"], 0x0) (async) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x1) (async) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f0000000180), 0x3, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000040)={[0x9, 0x4, 0xe9b, 0x22, 0x20000008, 0x7, 0x911d, 0x7, 0x8, 0xafa, 0x5, 0x1006, 0x10, 0x8, 0x8000, 0xffffffffffffffff], 0x4000, 0xc2102}) (async) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x20005, 0xfffffff7, 0x0, 0xff, 0xff}) r5 = syz_usb_connect$cdc_ncm(0x4, 0x72, &(0x7f0000000440)=ANY=[@ANYRES64=r2, @ANYBLOB="f7", @ANYRESDEC], 0x0) (async) r6 = socket$inet_sctp(0x2, 0x5, 0x84) (async, rerun: 32) r7 = socket(0x2, 0x805, 0x0) (rerun: 32) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000080)={r8}, 0x8) (async) syz_usb_disconnect(r5) (async, rerun: 32) syz_usb_control_io(r5, &(0x7f0000000580)={0x2c, &(0x7f00000005c0)=ANY=[@ANYBLOB="200c250000003c0e0b10d5a6841f13f3a13f8dce092372ed0aea97ae4bd3ce06ab8240cbf981706229152be7fd772ba59259fa4187fcbc0b66782f2742bf5c0ea1375be8649677488ca0975c89ed8ff4e14ac94b582a1b1f0176310306e7e686fe79ff52cca67c0ca2650a3e1e453e2d8629df8e8828"], &(0x7f0000000980)=ANY=[@ANYRES64=0x0], &(0x7f00000004c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x3, 0x7f, 0x5, "69beee14", "0d93ba85"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x80, 0x0, 0x2, 0xf8, 0xfbff, 0x4}}}, &(0x7f0000000a80)={0x84, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x39}, &(0x7f0000000740)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000c80)=ANY=[@ANYBLOB="20000800000060004000000000007992bd61568fba82dde4efd18ce1597053a3eb0a3d6cf05fedf52c4ee0ec44309b190e857a03e6b4c812d16a6c3c082600c3c1a53d15b67680e2d6f939cdc9c3d759a527333beeeaf51e8936e6dacf75ff2a80705a6edb1491bdde8d3a5cacf6cd6276df56d92fba8ee2b9a492e11822d7fe49659be514a411c9a65ab6fc4a950e9e90159388bb68a3a762f10021276149724b9a945d70f41297ba8cf83a084ba8b34355a27aaa49656e109707afad4ee3fcfd5f031144bdffcea9d72eea7e1bc224915a0b4e8dbfe003d7ff2ab9110a6a8d31c1e8e6d69bb544c7e598faa242037783347959d7190cb63485e4262e4bab5f75f8edbdd187ae487bc4022c41"], &(0x7f00000007c0)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000800)={0x40, 0x9, 0x1, 0xcc}, &(0x7f0000000840)={0x40, 0xb, 0x2, '*p'}, &(0x7f0000000880)={0x40, 0xf, 0x2, 0x2}, &(0x7f00000008c0)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000000900)={0x40, 0x17, 0xfffffffffffffd61, @broadcast}, &(0x7f0000000940)={0x40, 0x19, 0x2, "66f5"}, &(0x7f0000000480)={0x40, 0x1a, 0x2, 0x6}, &(0x7f00000009c0)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000a00)={0x40, 0x1e, 0x0, 0x7}, &(0x7f0000000a40)={0x40, 0x21, 0x1, 0x6}}) (rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$FE_DISEQC_RECV_SLAVE_REPLY(0xffffffffffffffff, 0x800c6f40, &(0x7f00000000c0)={""/4, 0x4}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 814.495848ms ago: executing program 0 (id=3729): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="7c02000021000100000000000100000000000000000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/564], 0x27c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x14, r2, 0x301, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x24000005}, 0x4800) socket$kcm(0x29, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000480)='net/kcm\x00') preadv(r3, &(0x7f00000014c0)=[{&(0x7f0000000340)=""/191, 0xfffffd90}], 0x1, 0x182, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r4, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x100) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x6, &(0x7f0000000100)=[{&(0x7f0000000380)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00e517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb000011d600a0680d4bbd6df1db6f1078bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0x29, 0x2, 0x0) 659.875623ms ago: executing program 0 (id=3730): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f0000000080)=[{0x50, 0x0, 0x7, 0x4}, {0x6, 0xfc}]}) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000340)=0x1) 579.669628ms ago: executing program 0 (id=3731): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340), 0x8000, 0x0) (async) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340), 0x8000, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000380)=@s={0x5, @generic, 0x14, 0x5}) (async) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000380)=@s={0x5, @generic, 0x14, 0x5}) r2 = getpid() syz_pidfd_open(r2, 0x0) (async) r3 = syz_pidfd_open(r2, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0xc040ff0b, &(0x7f0000000180)) (async) ioctl$FS_IOC_GETVERSION(r3, 0xc040ff0b, &(0x7f0000000180)) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/167, 0xa7}, {&(0x7f00000000c0)=""/122, 0x7a}, {&(0x7f0000000a40)=""/4082, 0xff2}, {&(0x7f0000000280)=""/65, 0x41}, {&(0x7f0000000080)=""/8, 0x8}], 0x5}, 0xd}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x3ff}, {{0x0, 0x0, 0x0}}], 0x4, 0x40000102, 0x0) r4 = syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) (async) syz_usb_control_io$hid(r4, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r5 = gettid() r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r5, r6, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r7 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r7, &(0x7f00000021c0)={0x2020}, 0x2020) (async) read$FUSE(r7, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r7, 0x0, 0x0, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x7ff, {0x5, 0x3, 0xdc, 0x5, 0x2, 0x6, {0x5, 0x638, 0xfffffffffffffff8, 0x8, 0x3, 0x7, 0xfffffffe, 0x1, 0x1, 0x8000, 0x4, r8, r9, 0x7, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r7, &(0x7f0000008e80)="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", 0x2000, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x90, 0x0, 0x4, {0x1, 0x3, 0x0, 0x4000000000008, 0xfffffffd, 0x800006, {0x2, 0x6, 0x8, 0x100000000000, 0x7, 0x93, 0x8, 0x6, 0x2006, 0x2000, 0xe44, r8, r9, 0x40005, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYRESOCT=r11, @ANYBLOB=',rootmode=0000000000000000040000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000e480)=[{{&(0x7f0000000740)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000800)=[{&(0x7f00000007c0)="7886d05879960b0fcd8d75925080888147c627fc8e43777f3a64b3278118c6d5d9d1b33de20b5afcb070be481e66", 0x2e}], 0x1, &(0x7f0000000980)=[@cred={{0x1c, 0x1, 0x2, {r5, r8}}}, @cred={{0x1c, 0x1, 0x2, {r6, r8, r9}}}], 0x40, 0x40000}}, {{&(0x7f0000000880)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000001b40), 0x0, &(0x7f0000000900)=[@cred={{0x1c, 0x1, 0x2, {r10, 0x0, r9}}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r11, r11, r0, r11, r1, r0, r0, r0]}}], 0x58, 0x80}}, {{&(0x7f0000001bc0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001c80)=[{&(0x7f0000001c40)="a1249ac378b244dfb0f3", 0xa}], 0x1, &(0x7f0000001e40)=[@rights={{0x20, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @rights={{0x30, 0x1, 0x1, [r11, r7, 0xffffffffffffffff, r11, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r11, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, r1, 0xffffffffffffffff, r7, r0]}}, @rights={{0x2c, 0x1, 0x1, [r0, r1, 0xffffffffffffffff, 0xffffffffffffffff, r7, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [r1, r1, 0xffffffffffffffff, r7, r0, r7, r1, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r6, r8}}}], 0x120, 0x4084}}], 0x3, 0x8000) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000140)={0x0, 0x4}, 0x8) setsockopt$SO_ATTACH_FILTER(r13, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x8, 0xfffff038}, {0x28, 0xf, 0x0, 0xffffefff}, {0x6}]}, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmmsg(r12, &(0x7f0000000180), 0x4000190, 0xc03e) (async) sendmmsg(r12, &(0x7f0000000180), 0x4000190, 0xc03e) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r0) 497.333991ms ago: executing program 2 (id=3732): set_tid_address(0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @mcast2, 0x0, 0x0, 0x0, 0x1004}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000040)={'syztnl0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, @private1, @empty, 0x0, 0x40}}) 362.057335ms ago: executing program 2 (id=3733): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfe}}, 0x7ffe}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b294a0fa62d", 0x11}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) syz_mount_image$fuse(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x1cf600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x2200000000000000, 0x2000000000001]}}) 355.542099ms ago: executing program 1 (id=3734): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000010140)={0x3b, 0x1, 0x2, "6040a7190200002000000000000000ff1057e31e94000000000000000006ff00", 0x42303159}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_emit_ethernet(0x2a, &(0x7f00000000c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000008004d"], 0x0) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000000)={0x0, 0x4d7}, 0x8) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000020000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000050000000060a01040000000000000000010000f908000b40000000000900010073797a300000000028000480240001800b0001006f626a726566000014000280080003"], 0xc4}}, 0x4008800) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb4}}, 0x0) 313.1964ms ago: executing program 4 (id=3735): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x2, 0x80, 0x0, 0x1, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x24000000) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x2, 0x80, 0x0, 0x1, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x24000000) sendto$inet(r1, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) (async) recvfrom$inet(r1, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) socket$inet6_sctp(0xa, 0x801, 0x84) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x801d) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffd) (async) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffd) r6 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r6, 0xc00864c0, &(0x7f0000000040)) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) (async) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_SREGS2(r7, 0x4140aecd, &(0x7f0000000140)={{0xc000, 0x3000, 0xf000, 0x9, 0x0, 0xe3, 0x81, 0x1, 0x40, 0x85, 0x0, 0xb}, {0x26000, 0xd000, 0xc, 0x3, 0x3, 0x7, 0x5, 0x6, 0x1, 0x4, 0xfa, 0x5}, {0xf000, 0x8000000, 0x4, 0x4, 0x11, 0x81, 0xe, 0x5, 0x5, 0x4, 0x92, 0x9}, {0x58000, 0x58000, 0x1b, 0x7, 0x1, 0x40, 0x4, 0x0, 0xfa, 0x29, 0x6, 0x29}, {0xeeee8000, 0x4000, 0x4, 0x9, 0x5, 0x2, 0x87, 0xf1, 0x2, 0x9, 0x0, 0x8}, {0x4000, 0x58000, 0xb, 0x2, 0xad, 0x2, 0x5, 0x4, 0x1, 0xe, 0x6, 0x8a}, {0x3d0178791b53fadb, 0x10000, 0x4, 0x0, 0xcd, 0x5, 0x5, 0xf, 0x24, 0x6, 0xff, 0x6}, {0xc000, 0x6000, 0xb, 0xe, 0x13, 0x1e, 0x3, 0x0, 0x7f, 0x5, 0x2, 0x96}, {0x70000, 0x405}, {0x80a0000, 0xff81}, 0x7237efa2c7a3a116, 0x0, 0x6000, 0x61, 0x5, 0xa800, 0x6000, 0x1, [0x6, 0x400, 0x8000000000000003, 0x1]}) syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1608e2) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000280), 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080003006400000008000200c8"], 0x2c}}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$loop(0x0, 0x5, 0x0) (async) r9 = syz_open_dev$loop(0x0, 0x5, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f0000000400)={r10, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c5500000000004000f0f9ffff0000000000ffff00", [0x80000000006, 0x6]}}) 148.444413ms ago: executing program 2 (id=3736): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010103}]}, &(0x7f0000000380)=0x10) setsockopt(r3, 0x84, 0x7f, &(0x7f0000000140)="010000000980ffff", 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000040)={r4, 0x1}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000180)={r4, 0x5, 0x7, 0x1ff, 0x7, 0x1ff, 0x4, 0x9, {0x0, @in={{0x2, 0x7, @remote}}, 0xf0, 0x1, 0x7, 0x61e, 0x8}}, &(0x7f0000000240)=0xb0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0xb, 0xfffff034}, {0x20, 0x81, 0x0, 0xfffff024}, {0x6, 0x0, 0x0, 0x2000000}]}, 0x10) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x509400, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0x6, 0x8000, 0x3, 0x10, 0x0}, &(0x7f00000000c0)=0x10) r7 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000100)={0x20002005}) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000040)={0xf0f046}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000100)={r6, 0x0, 0x10}, 0x8) 147.025234ms ago: executing program 1 (id=3737): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000000c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 11.250994ms ago: executing program 1 (id=3738): r0 = getpid() r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r1, &(0x7f0000000080)=""/1, 0x1) write$cgroup_pid(r1, &(0x7f00000000c0)=r0, 0x12) close(r1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0) bind(r1, &(0x7f0000000240)=@l2={0x1f, 0x2, @none, 0x4}, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/devices.allow\x00', 0x38b402, 0x139) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/cgroup.procs\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/devices.allow\x00', 0x1, 0x0) 0s ago: executing program 1 (id=3739): rseq(&(0x7f0000000040), 0x7b, 0x0, 0x0) unshare(0x6a040000) unshare(0x10200) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) unshare(0x40100) syz_clone(0x900000, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): ltsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 928.493958][ T9969] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 928.493991][ T9969] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 928.494041][ T9969] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 928.529839][T20731] udevd[20731]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 928.560699][ T9969] usb 5-1: config 0 descriptor?? [ 928.619661][T18356] usb 4-1: new low-speed USB device number 109 using dummy_hcd [ 928.640080][T18356] usb 4-1: device descriptor read/8, error -71 [ 928.790929][ T9969] plantronics 0003:047F:FFFF.002C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 928.889540][T18356] usb 4-1: new low-speed USB device number 110 using dummy_hcd [ 928.908596][T23470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 928.909801][T23470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 928.918753][T18356] usb 4-1: device descriptor read/8, error -71 [ 929.020696][T18356] usb usb4-port1: unable to enumerate USB device [ 929.440831][T18356] usb 2-1: new full-speed USB device number 86 using dummy_hcd [ 929.486585][T23504] random: crng reseeded on system resumption [ 929.603455][T18356] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 929.616044][T18356] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 929.616106][T18356] usb 2-1: config 0 has no interfaces? [ 929.616144][T18356] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 929.648274][T18356] usb 2-1: config 0 descriptor?? [ 929.861609][T18356] usb 2-1: USB disconnect, device number 86 [ 930.119362][T18875] usb 5-1: reset high-speed USB device number 98 using dummy_hcd [ 930.365704][T23522] xt_hashlimit: size too large, truncated to 1048576 [ 930.512070][T23530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 930.523939][T23530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 930.530623][T23531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 930.531150][T23531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 931.159917][T23562] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3387'. [ 931.184410][T23565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 931.194911][T23565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 931.772609][T18356] usb 5-1: USB disconnect, device number 98 [ 931.799867][T23579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 931.818139][T23579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 932.271018][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.271107][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.289035][ T9970] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 932.444207][ T9970] usb 5-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 932.457112][ T9970] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 932.457152][ T9970] usb 5-1: config 0 has no interface number 0 [ 932.457214][ T9970] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 932.457241][ T9970] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 932.457262][ T9970] usb 5-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 932.457302][ T9970] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.486888][ T9970] usb 5-1: config 0 descriptor?? [ 932.888443][T23616] nvme_fabrics: unknown parameter or missing value '#! »›¦1ÝÖæ³R¹Û?¾Ó&nâ¶õ%²ßõƒºë“~ˆÜì[6=pÍŠyz\UÔj@5NãfåWÎrs„)ìq²‰' in ctrl creation request [ 932.905823][T23615] nvme_fabrics: unknown parameter or missing value '#! »›¦1ÝÖæ³R¹Û?¾Ó&nâ¶õ%²ßõƒºë“~ˆÜì[6=pÍŠyz\UÔj@5NãfåWÎrs„)ìq²‰' in ctrl creation request [ 932.926261][ T9970] usbhid 5-1:0.1: can't add hid device: -71 [ 932.926387][ T9970] usbhid 5-1:0.1: probe with driver usbhid failed with error -71 [ 932.948979][ T9970] usb 5-1: USB disconnect, device number 99 [ 932.949639][ T31] audit: type=1804 audit(1788067249.729:3940): pid=23614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3397" name="bus" dev="ramfs" ino=96976 res=1 errno=0 [ 933.037734][T23614] fuse: Bad value for 'fd' [ 933.407967][T23636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 933.419637][T23636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 933.504468][T23635] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3399'. [ 933.612287][T23615] nvme nvme0: failed to connect socket: -512 [ 933.788897][ T9970] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 933.922574][T23616] nvme nvme0: failed to connect socket: -512 [ 934.337747][T23658] loop3: detected capacity change from 0 to 7 [ 934.348095][T23658] Dev loop3: unable to read RDB block 7 [ 934.348163][T23658] loop3: unable to read partition table [ 934.348432][T23658] loop3: partition table beyond EOD, truncated [ 934.348519][T23658] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 934.526288][T23666] fuse: Unknown parameter '0x0000000000000006' [ 934.863724][T23690] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3406'. [ 934.873544][T23690] netlink: 'syz.3.3406': attribute type 10 has an invalid length. [ 934.884165][T23690] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3406'. [ 934.902350][T23690] geneve2: entered promiscuous mode [ 934.907991][T23690] geneve2: entered allmulticast mode [ 934.949286][T18356] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 934.989752][T18875] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 935.110013][T18356] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 935.113105][T18356] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.113131][T18356] usb 5-1: Product: syz [ 935.113172][T18356] usb 5-1: Manufacturer: syz [ 935.113186][T18356] usb 5-1: SerialNumber: syz [ 935.153596][T18875] usb 2-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 935.164157][T18875] usb 2-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 935.164200][T18875] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 935.165015][T23702] batman_adv: batadv0: Adding interface: dummy0 [ 935.165031][T23702] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 935.165060][T23702] batman_adv: batadv0: Interface activated: dummy0 [ 935.197121][T23702] batadv0: mtu less than device minimum [ 935.199674][T23702] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 935.202255][T23702] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 935.203714][T23702] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 935.205088][T23702] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 935.206455][T23702] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 935.207825][T23702] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 935.209246][T23702] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 935.210624][T23702] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 935.211998][T23702] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 935.260516][T18875] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.260545][T18875] usb 2-1: Product: syz [ 935.260559][T18875] usb 2-1: Manufacturer: syz [ 935.260574][T18875] usb 2-1: SerialNumber: syz [ 935.265841][T18875] usb 2-1: config 0 descriptor?? [ 935.280155][T18875] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 935.527335][T18356] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 935.584919][T23679] netlink: 'syz.4.3404': attribute type 10 has an invalid length. [ 935.585484][T23733] netlink: 'syz.4.3404': attribute type 10 has an invalid length. [ 935.618105][T23708] ALSA: mixer_oss: invalid OSS volume '' [ 935.742996][T18356] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 935.745559][T18356] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 935.754231][T18356] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 935.784190][T18356] usb 5-1: USB disconnect, device number 100 [ 936.521384][T23749] kvm: pic: non byte write [ 936.659267][T18356] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 936.809195][T18356] usb 4-1: Using ep0 maxpacket: 16 [ 936.810660][T18356] usb 4-1: New USB device found, idVendor=056a, idProduct=0336, bcdDevice= 0.00 [ 936.811861][T18356] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 936.811890][T18356] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 936.811939][T18356] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 936.811962][T18356] usb 4-1: config 0 interface 0 has no altsetting 0 [ 936.811994][T18356] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 936.819648][T18356] usb 4-1: config 0 descriptor?? [ 937.258308][T23753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 937.260300][T23753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 937.270452][T18356] usbhid 4-1:0.0: can't add hid device: -71 [ 937.270556][T18356] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 937.274285][T18356] usb 4-1: USB disconnect, device number 112 [ 937.363392][T23782] loop3: detected capacity change from 0 to 7 [ 937.376880][T23782] Dev loop3: unable to read RDB block 7 [ 937.383257][T23782] loop3: unable to read partition table [ 937.393803][T23782] loop3: partition table beyond EOD, truncated [ 937.393851][T23782] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 937.620269][T23797] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3416'. [ 937.633084][T23798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3417'. [ 937.642560][T23798] netlink: 'syz.0.3417': attribute type 10 has an invalid length. [ 937.650748][T23798] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3417'. [ 937.669557][T23798] geneve2: entered promiscuous mode [ 937.675045][T23798] geneve2: entered allmulticast mode [ 937.754012][T23804] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:5 [ 938.143014][T18875] usb 2-1: USB disconnect, device number 87 [ 938.403883][T23830] netlink: 'syz.1.3422': attribute type 1 has an invalid length. [ 938.431657][T23830] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3422'. [ 938.431718][T23830] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3422'. [ 939.594973][T23864] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3428'. [ 939.661254][ T9970] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 939.746600][T23868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 939.755961][T23868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 939.809415][T18363] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 939.819761][ T9970] usb 4-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 939.830006][ T9970] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 939.830038][ T9970] usb 4-1: config 1 has no interface number 0 [ 939.847159][ T9970] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.855503][ T9970] usb 4-1: Product: syz [ 939.860103][ T9970] usb 4-1: Manufacturer: syz [ 939.860128][ T9970] usb 4-1: SerialNumber: syz [ 939.896472][ T9970] usb 4-1: 3:1 : does not exist [ 939.902891][ T9970] usb 4-1: 3:2 : does not exist [ 939.944049][T23868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 939.962529][T18363] usb 5-1: Using ep0 maxpacket: 8 [ 939.965828][T18363] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 939.967852][T23868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 939.970554][T18363] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 939.970585][T18363] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 939.970622][T18363] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 939.986813][T18363] usb 5-1: config 0 descriptor?? [ 940.032518][T23868] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3429'. [ 940.239379][T18363] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 940.276345][T18363] usb 5-1: USB disconnect, device number 101 [ 940.724116][T23915] fuse: Bad value for 'fd' [ 940.869805][T23926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 940.895040][T23926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 940.919186][T23930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 940.934592][T23930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 941.403836][T23944] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3439'. [ 941.640950][T23946] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3440'. [ 941.877614][T23953] syzkaller1: entered promiscuous mode [ 941.883994][T23953] syzkaller1: entered allmulticast mode [ 942.310085][ T9970] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 942.418923][ T9966] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 942.432594][ T31] audit: type=1326 audit(1788067259.219:3941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23981 comm="syz.2.3445" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149799e159 code=0x7ffc0000 [ 942.451367][T23984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 942.451809][T23984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 942.455919][T23983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 942.456391][T23983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 942.459749][ T31] audit: type=1326 audit(1788067259.219:3942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23981 comm="syz.2.3445" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149799e159 code=0x7ffc0000 [ 942.459803][ T31] audit: type=1326 audit(1788067259.219:3943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23981 comm="syz.2.3445" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f149799e159 code=0x7ffc0000 [ 942.459877][ T31] audit: type=1326 audit(1788067259.219:3944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23981 comm="syz.2.3445" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149799e159 code=0x7ffc0000 [ 942.459922][ T31] audit: type=1326 audit(1788067259.219:3945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23981 comm="syz.2.3445" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149799e159 code=0x7ffc0000 [ 942.459967][ T31] audit: type=1326 audit(1788067259.219:3946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23981 comm="syz.2.3445" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f149795e98e code=0x7ffc0000 [ 942.460039][ T31] audit: type=1326 audit(1788067259.219:3947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23981 comm="syz.2.3445" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f149799ddeb code=0x7ffc0000 [ 942.460086][ T31] audit: type=1326 audit(1788067259.219:3948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23981 comm="syz.2.3445" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f149799ddeb code=0x7ffc0000 [ 942.460129][ T31] audit: type=1326 audit(1788067259.219:3949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23981 comm="syz.2.3445" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149799e159 code=0x7ffc0000 [ 942.460202][ T31] audit: type=1326 audit(1788067259.219:3950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23981 comm="syz.2.3445" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149799e159 code=0x7ffc0000 [ 942.467746][T23983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 942.469354][ T9970] usb 2-1: device descriptor read/64, error -71 [ 942.469713][T23983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 942.731141][ T9966] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 942.734329][ T9966] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 942.734388][ T9966] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 942.743466][ T9966] usb 5-1: config 0 descriptor?? [ 942.779116][ T9970] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 942.909206][ T9970] usb 2-1: device descriptor read/64, error -71 [ 942.956716][T23965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 942.966719][T23965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 943.021013][ T9970] usb usb2-port1: attempt power cycle [ 943.123092][T24000] kvm: pic: non byte write [ 943.359016][ T9970] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 943.380623][ T9970] usb 2-1: device descriptor read/8, error -71 [ 943.383927][ T9966] ath6kl: mismatched byte count 0 vs. expected 12 [ 943.387349][ T9966] ath6kl: Failed to init ath6kl core: -22 [ 943.388032][ T9966] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 943.602760][ T9966] usb 5-1: USB disconnect, device number 102 [ 943.629235][ T9970] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 943.650141][ T9970] usb 2-1: device descriptor read/8, error -71 [ 943.759649][ T9970] usb usb2-port1: unable to enumerate USB device [ 945.123329][T24091] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3450'. [ 945.261416][ T9966] usb 4-1: USB disconnect, device number 113 [ 945.618639][T24123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 945.631350][T24123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 945.789507][ T9966] usb 4-1: new low-speed USB device number 114 using dummy_hcd [ 945.941110][ T9966] usb 4-1: unable to get BOS descriptor or descriptor too short [ 945.941175][ T9966] usb 4-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 945.942306][ T9966] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 945.942328][ T9966] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 945.945069][ T9966] usb 4-1: string descriptor 0 read error: -22 [ 945.945202][ T9966] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.058988][ T9970] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 946.212437][ T9970] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 946.216755][ T9970] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD2, changing to 0x82 [ 946.216789][ T9970] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 946.216831][ T9970] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.250662][ T9970] usb 5-1: config 0 descriptor?? [ 946.366981][T18875] usb 4-1: USB disconnect, device number 114 [ 946.523849][ T9970] ath6kl: Failed to submit usb control message: -71 [ 946.523961][ T9970] ath6kl: unable to send the bmi data to the device: -71 [ 946.523979][ T9970] ath6kl: Unable to send get target info: -71 [ 946.553634][ T9970] ath6kl: Failed to init ath6kl core: -71 [ 946.555026][ T9970] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 946.566404][ T9970] usb 5-1: USB disconnect, device number 103 [ 946.660421][ T9966] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 946.756416][T24200] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3457'. [ 946.756462][T24200] netlink: 'syz.4.3457': attribute type 10 has an invalid length. [ 946.756889][T24200] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3457'. [ 946.768983][T24200] geneve2: entered promiscuous mode [ 946.769008][T24200] geneve2: entered allmulticast mode [ 946.818893][ T9966] usb 2-1: Using ep0 maxpacket: 8 [ 946.819647][ T9966] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 946.820781][ T9966] usb 2-1: config 1 has an invalid descriptor of length 191, skipping remainder of the config [ 946.820826][ T9966] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xA7, changing to 0x87 [ 946.820878][ T9966] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 225, changing to 7 [ 946.820902][ T9966] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 34649, setting to 1024 [ 946.820927][ T9966] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 946.823014][ T9966] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.823036][ T9966] usb 2-1: Product: syz [ 946.823049][ T9966] usb 2-1: Manufacturer: syz [ 946.823063][ T9966] usb 2-1: SerialNumber: syz [ 946.841706][ T9966] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 946.842625][ T9966] usbtest 2-1:1.0: Linux user mode ISO test driver [ 946.842642][ T9966] usbtest 2-1:1.0: high-speed {control iso-in} tests (+alt) [ 947.042893][T24206] loop6: detected capacity change from 0 to 2640 [ 947.050639][T24206] buffer_io_error: 8 callbacks suppressed [ 947.057518][T24206] Buffer I/O error on dev loop6, logical block 0, async page read [ 947.057597][T24206] Buffer I/O error on dev loop6, logical block 0, async page read [ 947.057644][T24206] Buffer I/O error on dev loop6, logical block 0, async page read [ 947.057677][T24206] Buffer I/O error on dev loop6, logical block 0, async page read [ 947.057709][T24206] Buffer I/O error on dev loop6, logical block 0, async page read [ 947.057766][T24206] Buffer I/O error on dev loop6, logical block 0, async page read [ 947.057812][T24206] Buffer I/O error on dev loop6, logical block 0, async page read [ 947.057845][T24206] Buffer I/O error on dev loop6, logical block 0, async page read [ 947.057863][T24206] ldm_validate_partition_table(): Disk read failed. [ 947.057893][T24206] Buffer I/O error on dev loop6, logical block 0, async page read [ 947.057925][T24206] Buffer I/O error on dev loop6, logical block 0, async page read [ 947.057973][T24206] Dev loop6: unable to read RDB block 0 [ 947.058160][T24206] loop6: unable to read partition table [ 947.109606][T24206] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 947.179215][T24211] loop6: detected capacity change from 2640 to 524288000 [ 947.668067][T24229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 947.679668][T24229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 947.697492][T24233] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3463'. [ 947.697864][T24235] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3463'. [ 948.136751][T24248] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3466'. [ 948.521907][T24250] fuse: Bad value for 'fd' [ 948.527371][T24250] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3467'. [ 948.540760][T24250] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3467'. [ 948.541114][T24251] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3467'. [ 949.091967][T24274] binder: 24273:24274 ioctl c0306201 0 returned -14 [ 949.211593][ T9966] usb 2-1: USB disconnect, device number 92 [ 949.223743][T24278] binder: 24273:24278 ioctl c0306201 0 returned -14 [ 949.636344][T24309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 949.636896][T24309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 950.103017][T24319] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3476'. [ 950.429103][ T9966] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 950.477310][T24344] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3479'. [ 950.477363][T24344] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3479'. [ 950.477875][T24344] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3479'. [ 950.478169][T24344] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3479'. [ 950.478418][T24344] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3479'. [ 950.481047][T24344] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3479'. [ 950.481369][T24344] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3479'. [ 950.481641][T24344] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3479'. [ 950.483463][T24344] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3479'. [ 950.484539][T24344] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3479'. [ 950.578830][ T9966] usb 5-1: Using ep0 maxpacket: 16 [ 950.585377][ T9966] usb 5-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 950.597600][ T9966] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 950.597681][ T9966] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 950.626455][ T9966] usb 5-1: config 0 descriptor?? [ 951.538150][T24376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 951.552406][T24376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 952.272912][T24405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 952.282809][T24405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 953.380086][ T9966] usbhid 5-1:0.0: can't add hid device: -71 [ 953.380220][ T9966] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 953.408344][ T9966] usb 5-1: USB disconnect, device number 104 [ 953.460374][T24424] bridge: RTM_NEWNEIGH with unconfigured vlan 46 on bridge0 [ 953.547970][T24408] syz.1.3485 (24408): drop_caches: 1 [ 953.607643][ T31] kauditd_printk_skb: 24 callbacks suppressed [ 953.615980][ T31] audit: type=1326 audit(1788067270.389:3975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24443 comm="syz.4.3490" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f65b8f9e159 code=0x0 [ 953.687022][T24409] syz.1.3485 (24409): drop_caches: 1 [ 953.845117][T24408] syz.1.3485 (24408): drop_caches: 1 [ 954.246021][T24464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 954.246591][T24464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 954.259382][T18363] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 954.410961][T18363] usb 2-1: Using ep0 maxpacket: 32 [ 954.419058][T18363] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 954.421109][T18363] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 954.421135][T18363] usb 2-1: config 0 has no interface number 0 [ 954.423633][T18363] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 954.423657][T18363] usb 2-1: Product: syz [ 954.423671][T18363] usb 2-1: Manufacturer: syz [ 954.423684][T18363] usb 2-1: SerialNumber: syz [ 954.437246][T18363] usb 2-1: config 0 descriptor?? [ 954.464212][T24464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 954.468431][T24464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 954.505345][T24464] veth1_to_hsr: entered allmulticast mode [ 954.883196][T18363] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 954.883255][T18363] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 955.109406][T18363] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 955.109707][T18363] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -32 [ 955.265610][ T31] audit: type=1326 audit(1788067272.049:3976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24499 comm="syz.3.3499" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f649679e159 code=0x0 [ 955.469186][ T9966] usb 5-1: new full-speed USB device number 105 using dummy_hcd [ 955.621539][ T9966] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 955.623381][ T9966] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 955.623418][ T9966] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 955.623486][ T9966] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 955.636204][ T9966] usb 5-1: config 0 descriptor?? [ 955.645776][ T9966] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 955.645830][ T9966] dvb-usb: bulk message failed: -22 (3/0) [ 955.665738][ T9966] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 955.669929][ T9966] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 955.677203][ T9966] usb 5-1: media controller created [ 955.681913][ T9966] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 955.712181][ T9966] dvb-usb: bulk message failed: -22 (6/0) [ 955.712270][ T9966] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 955.733108][ T9966] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input78 [ 955.739983][ T9966] dvb-usb: schedule remote query interval to 150 msecs. [ 955.740010][ T9966] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 955.808218][T24516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 955.818444][T24516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 955.825844][T24516] ALSA: seq fatal error: cannot create timer (-22) [ 955.853428][T18363] usb 5-1: USB disconnect, device number 105 [ 955.886942][T18363] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 956.292781][T24557] __nla_validate_parse: 140 callbacks suppressed [ 956.292834][T24557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3504'. [ 956.538872][ T9969] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 956.616146][T24568] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3505'. [ 956.689931][ T9969] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 956.704680][ T9969] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 956.704758][ T9969] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.754915][T24565] syz.4.3505 (24565): drop_caches: 1 [ 957.036014][T18363] usb 2-1: USB disconnect, device number 93 [ 957.145972][ T9969] lg-g15 0003:046D:C222.002D: hidraw0: USB HID v1.11 Device [HID 046d:c222] on usb-dummy_hcd.3-1/input0 [ 957.368292][ T9969] input: Logitech Gaming Keyboard Gaming Keys as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/0003:046D:C222.002D/input/input79 [ 957.558181][ T9969] lg-g15 0003:046D:C222.002D: Error getting LED brightness: -71 [ 957.590789][ T9969] lg-g15 0003:046D:C222.002D: Error getting LED brightness: -71 [ 957.611569][ T9969] lg-g15 0003:046D:C222.002D: Error getting LED brightness: -71 [ 957.651121][ T9969] lg-g15 0003:046D:C222.002D: Error getting LED brightness: -71 [ 957.667183][ T9969] lg-g15 0003:046D:C222.002D: Error getting LED brightness: -71 [ 957.687110][ T9969] lg-g15 0003:046D:C222.002D: Error getting LED brightness: -71 [ 957.706235][ T9969] usb 4-1: USB disconnect, device number 115 [ 958.186191][T24636] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3508'. [ 958.270831][T18363] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 958.411660][T24641] binder: 24639:24641 ioctl c0306201 0 returned -14 [ 958.449797][T18363] usb 2-1: Using ep0 maxpacket: 32 [ 958.453780][T18363] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 958.460388][T18363] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 958.460426][T18363] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 958.460467][T18363] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 958.476543][T18363] usb 2-1: config 0 descriptor?? [ 958.497628][T18363] hub 2-1:0.0: USB hub found [ 958.549176][T24652] binder: 24639:24652 ioctl c0306201 0 returned -14 [ 958.662546][T24652] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3511'. [ 958.691285][T18363] hub 2-1:0.0: config failed, can't read hub descriptor (err -90) [ 958.896752][T24661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 958.911111][T24661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 959.105073][T18363] usbhid 2-1:0.0: can't add hid device: -71 [ 959.105205][T18363] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 959.140827][T18363] usb 2-1: USB disconnect, device number 94 [ 959.309698][ T9984] usb 4-1: new full-speed USB device number 116 using dummy_hcd [ 959.471089][ T9984] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 959.474265][ T9984] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 959.474289][ T9984] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 959.474337][ T9984] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 959.490247][ T9984] usb 4-1: config 0 descriptor?? [ 959.502312][ T9984] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 959.502364][ T9984] dvb-usb: bulk message failed: -22 (3/0) [ 959.534792][ T9984] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 959.537924][ T9984] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 959.537982][ T9984] usb 4-1: media controller created [ 959.550255][ T9984] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 959.598312][ T9984] dvb-usb: bulk message failed: -22 (6/0) [ 959.598432][ T9984] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 959.612358][ T9984] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input80 [ 959.639877][ T9984] dvb-usb: schedule remote query interval to 150 msecs. [ 959.639937][ T9984] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 959.783696][ T9984] usb 4-1: USB disconnect, device number 116 [ 959.828514][T24691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 959.841108][T24691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 959.917742][ T9984] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 960.278951][ T1780] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 960.389208][ T9984] usb 2-1: new full-speed USB device number 95 using dummy_hcd [ 960.438959][ T1780] usb 5-1: Using ep0 maxpacket: 8 [ 960.450830][ T1780] usb 5-1: unable to get BOS descriptor or descriptor too short [ 960.462453][ T1780] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.40 [ 960.473341][ T1780] usb 5-1: config 1 interface 0 has no altsetting 0 [ 960.486335][ T1780] usb 5-1: string descriptor 0 read error: -22 [ 960.494574][ T1780] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 960.580832][ T9984] usb 2-1: New USB device found, idVendor=0499, idProduct=1039, bcdDevice= c.76 [ 960.617404][ T9984] usb 2-1: config 0 has an invalid interface number: 176 but max is 0 [ 960.617457][ T9984] usb 2-1: config 0 has no interface number 0 [ 960.617521][ T9984] usb 2-1: config 0 interface 176 altsetting 0 endpoint 0x4 has invalid maxpacket 59391, setting to 64 [ 960.670821][ T9984] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 960.670871][ T9984] usb 2-1: Product: syz [ 960.670945][ T9984] usb 2-1: Manufacturer: syz [ 960.670960][ T9984] usb 2-1: SerialNumber: syz [ 960.695547][ T9984] usb 2-1: config 0 descriptor?? [ 960.715128][T24726] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 960.725394][T24726] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 960.785069][ T9984] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 960.881676][T24789] syzkaller0: entered promiscuous mode [ 960.881709][T24789] syzkaller0: entered allmulticast mode [ 960.935461][T24792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 960.967748][T24792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 960.995987][ T1780] kone 0003:1E7D:2CED.002E: unknown main item tag 0x0 [ 960.997200][ T1780] kone 0003:1E7D:2CED.002E: unknown main item tag 0x0 [ 960.997257][ T1780] kone 0003:1E7D:2CED.002E: unknown main item tag 0x0 [ 960.997289][ T1780] kone 0003:1E7D:2CED.002E: unknown main item tag 0x0 [ 960.997320][ T1780] kone 0003:1E7D:2CED.002E: unknown main item tag 0x0 [ 960.997352][ T1780] kone 0003:1E7D:2CED.002E: unknown main item tag 0x0 [ 960.997382][ T1780] kone 0003:1E7D:2CED.002E: unknown main item tag 0x0 [ 960.997414][ T1780] kone 0003:1E7D:2CED.002E: unknown main item tag 0x0 [ 960.997445][ T1780] kone 0003:1E7D:2CED.002E: unknown main item tag 0x0 [ 960.997475][ T1780] kone 0003:1E7D:2CED.002E: unknown main item tag 0x0 [ 961.193877][T24810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 961.217215][T24810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 961.234210][ T1780] kone 0003:1E7D:2CED.002E: hidraw0: USB HID v0.ff Device [HID 1e7d:2ced] on usb-dummy_hcd.4-1/input0 [ 961.693792][ T1780] kone 0003:1E7D:2CED.002E: couldn't init struct kone_device [ 961.693877][ T1780] kone 0003:1E7D:2CED.002E: couldn't install mouse [ 961.723639][ T1780] kone 0003:1E7D:2CED.002E: probe with driver kone failed with error -5 [ 961.744061][ T1780] usb 5-1: USB disconnect, device number 106 [ 962.235860][T24836] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3524'. [ 962.263487][T24836] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 962.569184][ T1780] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 962.584919][T24852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 962.601477][T24852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 962.718932][ T1780] usb 5-1: Using ep0 maxpacket: 16 [ 962.725322][ T1780] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 962.737636][ T1780] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 962.747935][ T1780] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 962.747965][ T1780] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 962.772710][ T1780] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 962.782404][ T1780] usb 5-1: Product: syz [ 962.787649][ T1780] usb 5-1: Manufacturer: syz [ 962.793047][ T1780] usb 5-1: SerialNumber: syz [ 962.844148][ T1780] usb 5-1: 0:2 : does not exist [ 962.933307][ T9984] usb 2-1: USB disconnect, device number 95 [ 963.099477][T24886] usb usb8: usbfs: process 24886 (syz.1.3529) did not claim interface 0 before use [ 963.670219][T24840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 963.686777][T24840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 963.742070][ T1780] usb 5-1: 1:0: failed to get current value for ch 0 (-22) [ 963.851631][ T1780] usb 5-1: USB disconnect, device number 107 [ 964.122963][T20731] udevd[20731]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 964.252312][T24889] ALSA: mixer_oss: invalid OSS volume '' [ 964.319340][ T9984] usb 2-1: new full-speed USB device number 96 using dummy_hcd [ 964.473031][ T9984] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 964.474653][ T9984] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 964.474678][ T9984] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 964.474723][ T9984] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 964.559857][ T9984] usb 2-1: config 0 descriptor?? [ 964.571806][ T9984] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 964.571870][ T9984] dvb-usb: bulk message failed: -22 (3/0) [ 964.606781][ T9984] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 964.615503][ T9984] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 964.615579][ T9984] usb 2-1: media controller created [ 964.627884][ T9984] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 964.823107][ T9984] dvb-usb: bulk message failed: -22 (6/0) [ 964.823216][ T9984] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 964.837968][ T9984] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input81 [ 964.894147][ T9984] dvb-usb: schedule remote query interval to 150 msecs. [ 964.894214][ T9984] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 964.915233][ T9984] usb 2-1: USB disconnect, device number 96 [ 965.037434][ T9984] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 965.051290][T24988] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3536'. [ 965.228409][T24986] fuse: root generation should be zero [ 965.449195][ T1780] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 965.602830][ T1780] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 965.617078][ T1780] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 965.617113][ T1780] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 965.642788][ T1780] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 965.642823][ T1780] usb 4-1: SerialNumber: syz [ 965.910513][ T1780] usb 4-1: 0:2 : does not exist [ 965.999127][ T9969] usb 2-1: new full-speed USB device number 97 using dummy_hcd [ 966.024507][ T1780] usb 4-1: USB disconnect, device number 117 [ 966.151464][T20731] udevd[20731]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 966.171016][ T9969] usb 2-1: New USB device found, idVendor=0499, idProduct=1039, bcdDevice= c.76 [ 966.186678][ T9969] usb 2-1: config 0 has an invalid interface number: 176 but max is 0 [ 966.186723][ T9969] usb 2-1: config 0 has no interface number 0 [ 966.186777][ T9969] usb 2-1: config 0 interface 176 altsetting 0 endpoint 0x4 has invalid maxpacket 59391, setting to 64 [ 966.235711][ T9969] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.235760][ T9969] usb 2-1: Product: syz [ 966.235799][ T9969] usb 2-1: Manufacturer: syz [ 966.235819][ T9969] usb 2-1: SerialNumber: syz [ 966.267035][ T9969] usb 2-1: config 0 descriptor?? [ 966.281016][T25017] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 966.288614][T25017] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 966.319024][ T9969] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 966.618983][T25068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 966.619592][T25068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 966.641167][T25068] xt_hashlimit: max too large, truncated to 1048576 [ 966.934756][ T1780] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 967.089532][ T1780] usb 4-1: Using ep0 maxpacket: 32 [ 967.096316][ T1780] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 967.118239][ T1780] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 967.118296][ T1780] usb 4-1: Product: syz [ 967.118339][ T1780] usb 4-1: Manufacturer: syz [ 967.118360][ T1780] usb 4-1: SerialNumber: syz [ 967.147051][ T1780] usb 4-1: config 0 descriptor?? [ 967.522676][T25113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 967.534770][T25113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 967.572970][T25077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 967.577384][T25077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 967.591513][ T1780] peak_usb 4-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 967.591574][ T1780] peak_usb 4-1:0.0 can0: sending command failure: -22 [ 967.591708][ T1780] peak_usb 4-1:0.0 can0: sending command failure: -22 [ 967.701099][ T1780] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -22 [ 967.792805][ T9984] usb 4-1: USB disconnect, device number 118 [ 968.227133][T25134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3550'. [ 968.227186][T25134] netlink: 'syz.2.3550': attribute type 10 has an invalid length. [ 968.227206][T25134] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3550'. [ 968.274777][T25134] geneve2: entered promiscuous mode [ 968.274815][T25134] geneve2: entered allmulticast mode [ 968.438665][T25141] FAULT_INJECTION: forcing a failure. [ 968.438665][T25141] name failslab, interval 1, probability 0, space 0, times 0 [ 968.473009][T25141] CPU: 1 UID: 0 PID: 25141 Comm: syz.3.3551 Tainted: G L syzkaller #0 PREEMPT(full) [ 968.473047][T25141] Tainted: [L]=SOFTLOCKUP [ 968.473056][T25141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 968.473069][T25141] Call Trace: [ 968.473079][T25141] [ 968.473090][T25141] dump_stack_lvl+0xe8/0x150 [ 968.473141][T25141] should_fail_ex+0x410/0x560 [ 968.473182][T25141] should_failslab+0xa8/0x100 [ 968.473212][T25141] __kvmalloc_node_noprof+0x176/0x820 [ 968.473239][T25141] ? __kvmalloc_node_noprof+0x345/0x820 [ 968.473259][T25141] ? bpf_compute_scc+0xa26/0xb10 [ 968.473292][T25141] ? bpf_compute_scc+0xa26/0xb10 [ 968.473332][T25141] bpf_compute_scc+0xa26/0xb10 [ 968.473386][T25141] bpf_check+0x25c9/0x2e10 [ 968.473423][T25141] ? ktime_get_with_offset+0x93/0x2d0 [ 968.473453][T25141] ? __pfx_bpf_check+0x10/0x10 [ 968.473480][T25141] ? bpf_obj_name_cpy+0x194/0x1e0 [ 968.473514][T25141] bpf_prog_load+0x14d6/0x1c20 [ 968.473554][T25141] ? __pfx_bpf_prog_load+0x10/0x10 [ 968.473605][T25141] __sys_bpf+0xd0d/0xd90 [ 968.473638][T25141] ? __pfx___sys_bpf+0x10/0x10 [ 968.473675][T25141] ? __fget_files+0x2a/0x420 [ 968.473726][T25141] ? ksys_write+0x242/0x270 [ 968.473765][T25141] ? __pfx_ksys_write+0x10/0x10 [ 968.473802][T25141] __x64_sys_bpf+0xba/0xd0 [ 968.473827][T25141] do_syscall_64+0x166/0x520 [ 968.473860][T25141] ? trace_irq_disable+0x3b/0x140 [ 968.473881][T25141] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 968.473905][T25141] ? clear_bhb_loop+0x70/0xc0 [ 968.473932][T25141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 968.473955][T25141] RIP: 0033:0x7f649679e159 [ 968.473978][T25141] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 968.473997][T25141] RSP: 002b:00007f64975d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 968.474024][T25141] RAX: ffffffffffffffda RBX: 00007f6496a25fa0 RCX: 00007f649679e159 [ 968.474040][T25141] RDX: 0000000000000094 RSI: 0000200000000000 RDI: 0000000000000005 [ 968.474054][T25141] RBP: 00007f64975d4090 R08: 0000000000000000 R09: 0000000000000000 [ 968.474069][T25141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 968.474083][T25141] R13: 00007f6496a26038 R14: 00007f6496a25fa0 R15: 00007f6496b4fa48 [ 968.474126][T25141] [ 968.774626][T18363] usb 2-1: USB disconnect, device number 97 [ 969.297335][T25176] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3554'. [ 969.298954][T25176] bond2: left allmulticast mode [ 969.305301][T25176] bond2: left promiscuous mode [ 969.305697][T25176] bridge0: port 3(bond2) entered disabled state [ 969.319440][T18363] usb 2-1: new full-speed USB device number 98 using dummy_hcd [ 969.360068][T25176] bridge_slave_1: left allmulticast mode [ 969.366800][T25176] bridge_slave_1: left promiscuous mode [ 969.373387][T25176] bridge0: port 2(bridge_slave_1) entered disabled state [ 969.431104][T25176] bridge_slave_0: left allmulticast mode [ 969.431189][T25176] bridge_slave_0: left promiscuous mode [ 969.448008][T25176] bridge0: port 1(bridge_slave_0) entered disabled state [ 969.490272][T18363] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 969.501427][T18363] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 969.501459][T18363] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 969.501510][T18363] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.541694][T18363] usb 2-1: config 0 descriptor?? [ 969.553989][T25187] loop5: detected capacity change from 0 to 7 [ 969.567633][T18363] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 969.568507][T18363] dvb-usb: bulk message failed: -22 (3/0) [ 969.580952][T25187] loop5: [ 969.580994][T25187] loop5: partition table partially beyond EOD, truncated [ 969.601305][T18363] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 969.611115][T18363] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 969.611188][T18363] usb 2-1: media controller created [ 969.624710][T18363] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 969.723895][T18363] dvb-usb: bulk message failed: -22 (6/0) [ 969.724021][T18363] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 969.757713][T18363] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input82 [ 969.771618][T18363] dvb-usb: schedule remote query interval to 150 msecs. [ 969.771640][T18363] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 969.849406][T25211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 969.880233][T25211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 969.929183][T18363] dvb-usb: bulk message failed: -22 (1/0) [ 969.929234][T18363] dvb-usb: error while querying for an remote control event. [ 969.968762][T18363] usb 2-1: USB disconnect, device number 98 [ 970.033772][T18363] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 970.066317][T25225] net_ratelimit: 12 callbacks suppressed [ 970.066367][T25225] netlink: Conntrack attr has 8 unknown bytes [ 970.066403][T25225] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 970.319608][ T9984] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 970.480176][ T9984] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 970.481342][ T9984] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 970.481366][ T9984] usb 5-1: config 1 has no interface number 0 [ 970.483523][ T9984] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.483546][ T9984] usb 5-1: Product: syz [ 970.483559][ T9984] usb 5-1: Manufacturer: syz [ 970.483573][ T9984] usb 5-1: SerialNumber: syz [ 970.512987][ T9984] usb 5-1: 3:1 : does not exist [ 970.513012][ T9984] usb 5-1: 3:2 : does not exist [ 970.702603][T25267] FAULT_INJECTION: forcing a failure. [ 970.702603][T25267] name failslab, interval 1, probability 0, space 0, times 0 [ 970.716299][T25267] CPU: 1 UID: 0 PID: 25267 Comm: syz.2.3564 Tainted: G L syzkaller #0 PREEMPT(full) [ 970.716336][T25267] Tainted: [L]=SOFTLOCKUP [ 970.716344][T25267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 970.716357][T25267] Call Trace: [ 970.716368][T25267] [ 970.716378][T25267] dump_stack_lvl+0xe8/0x150 [ 970.716415][T25267] should_fail_ex+0x410/0x560 [ 970.716452][T25267] should_failslab+0xa8/0x100 [ 970.716480][T25267] __kvmalloc_node_noprof+0x176/0x820 [ 970.716505][T25267] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 970.716542][T25267] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 970.716573][T25267] bpf_compute_live_registers+0x14f/0x1ff0 [ 970.716597][T25267] ? kfree+0x1c5/0x650 [ 970.716630][T25267] ? bpf_compute_scc+0xab6/0xb10 [ 970.716676][T25267] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 970.716712][T25267] bpf_check+0x25ed/0x2e10 [ 970.716746][T25267] ? ktime_get_with_offset+0x93/0x2d0 [ 970.716771][T25267] ? __pfx_bpf_check+0x10/0x10 [ 970.716796][T25267] ? bpf_obj_name_cpy+0x194/0x1e0 [ 970.716827][T25267] bpf_prog_load+0x14d6/0x1c20 [ 970.716864][T25267] ? __pfx_bpf_prog_load+0x10/0x10 [ 970.716915][T25267] __sys_bpf+0xd0d/0xd90 [ 970.716947][T25267] ? __pfx___sys_bpf+0x10/0x10 [ 970.716981][T25267] ? __fget_files+0x2a/0x420 [ 970.717028][T25267] ? ksys_write+0x242/0x270 [ 970.717060][T25267] ? __pfx_ksys_write+0x10/0x10 [ 970.717094][T25267] __x64_sys_bpf+0xba/0xd0 [ 970.717118][T25267] do_syscall_64+0x166/0x520 [ 970.717147][T25267] ? trace_irq_disable+0x3b/0x140 [ 970.717166][T25267] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.717187][T25267] ? clear_bhb_loop+0x70/0xc0 [ 970.717211][T25267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.717233][T25267] RIP: 0033:0x7f149799e159 [ 970.717255][T25267] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 970.717278][T25267] RSP: 002b:00007f14988f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 970.717302][T25267] RAX: ffffffffffffffda RBX: 00007f1497c25fa0 RCX: 00007f149799e159 [ 970.717318][T25267] RDX: 0000000000000094 RSI: 0000200000000000 RDI: 0000000000000005 [ 970.717332][T25267] RBP: 00007f14988f8090 R08: 0000000000000000 R09: 0000000000000000 [ 970.717346][T25267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 970.717359][T25267] R13: 00007f1497c26038 R14: 00007f1497c25fa0 R15: 00007f1497d4fa48 [ 970.717390][T25267] [ 970.807061][T25215] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3561'. [ 970.901693][T25238] ALSA: mixer_oss: invalid OSS volume '' [ 970.903980][ T9984] usb 5-1: USB disconnect, device number 108 [ 971.217769][T20731] udevd[20731]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 971.396984][T25281] could not allocate digest TFM handle michael_mic [ 971.678236][ T9984] usb 4-1: new full-speed USB device number 119 using dummy_hcd [ 971.762980][T25298] bridge0: port 2(bridge_slave_1) entered disabled state [ 971.763657][T25298] bridge0: port 1(bridge_slave_0) entered disabled state [ 971.840948][ T9984] usb 4-1: New USB device found, idVendor=0499, idProduct=1039, bcdDevice= c.76 [ 971.854534][ T9984] usb 4-1: config 0 has an invalid interface number: 176 but max is 0 [ 971.854589][ T9984] usb 4-1: config 0 has no interface number 0 [ 971.854659][ T9984] usb 4-1: config 0 interface 176 altsetting 0 endpoint 0x4 has invalid maxpacket 59391, setting to 64 [ 971.896214][ T9984] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.896268][ T9984] usb 4-1: Product: syz [ 971.896318][ T9984] usb 4-1: Manufacturer: syz [ 971.896335][ T9984] usb 4-1: SerialNumber: syz [ 971.900012][ T9984] usb 4-1: config 0 descriptor?? [ 971.909935][ T9966] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 971.936088][T25277] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 971.944358][T25277] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 971.971156][ T9984] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 971.980554][T25315] loop5: detected capacity change from 0 to 7 [ 971.992498][T25315] loop5: [ 971.992552][T25315] loop5: partition table partially beyond EOD, truncated [ 972.069769][ T9966] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 972.081781][ T9966] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 972.081830][ T9966] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 972.104325][ T9966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 972.112873][ T9966] usb 2-1: SerialNumber: syz [ 972.405264][ T9966] usb 2-1: 0:2 : does not exist [ 972.493168][T25298] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 972.543377][T25298] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 972.558836][ T9969] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 972.604665][T25298] veth1_to_hsr: left allmulticast mode [ 972.665380][ T9966] usb 2-1: USB disconnect, device number 99 [ 972.688940][ T9969] usb 5-1: device descriptor read/64, error -71 [ 972.793405][T20731] udevd[20731]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 972.938807][ T9969] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 972.950215][ T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.950272][ T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.950313][ T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.950345][ T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.069304][ T9969] usb 5-1: device descriptor read/64, error -71 [ 973.183478][ T9969] usb usb5-port1: attempt power cycle [ 973.218632][T25391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 973.221276][T25391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 973.252176][T25397] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3574'. [ 973.262159][T25397] netlink: 'syz.1.3574': attribute type 1 has an invalid length. [ 973.333456][T25397] bond1: (slave geneve4): making interface the new active one [ 973.342262][T25397] bond1: (slave geneve4): Enslaving as an active interface with an up link [ 973.350375][T24289] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 973.350422][T24289] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 973.350455][T24289] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 973.350486][T24289] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 973.357982][T25397] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3574'. [ 973.375786][T25397] 8021q: adding VLAN 0 to HW filter on device bond1 [ 973.538884][ T9969] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 973.559936][ T9969] usb 5-1: device descriptor read/8, error -71 [ 973.798916][ T9969] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 973.811002][T25434] bond1: option all_slaves_active: invalid value (9) [ 973.822183][ T9969] usb 5-1: device descriptor read/8, error -71 [ 973.824132][T25434] bond1 (unregistering): Released all slaves [ 973.929579][ T9969] usb usb5-port1: unable to enumerate USB device [ 973.940175][T25434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 973.942675][T25434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 974.032918][T25504] FAULT_INJECTION: forcing a failure. [ 974.032918][T25504] name failslab, interval 1, probability 0, space 0, times 0 [ 974.032970][T25504] CPU: 0 UID: 0 PID: 25504 Comm: syz.1.3577 Tainted: G L syzkaller #0 PREEMPT(full) [ 974.032998][T25504] Tainted: [L]=SOFTLOCKUP [ 974.033006][T25504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 974.033017][T25504] Call Trace: [ 974.033025][T25504] [ 974.033033][T25504] dump_stack_lvl+0xe8/0x150 [ 974.033065][T25504] should_fail_ex+0x410/0x560 [ 974.033098][T25504] should_failslab+0xa8/0x100 [ 974.033123][T25504] __kvmalloc_node_noprof+0x176/0x820 [ 974.033145][T25504] ? __kvmalloc_node_noprof+0x345/0x820 [ 974.033164][T25504] ? bpf_compute_scc+0xec/0xb10 [ 974.033201][T25504] ? bpf_compute_scc+0xec/0xb10 [ 974.033233][T25504] bpf_compute_scc+0xec/0xb10 [ 974.033279][T25504] bpf_check+0x25c9/0x2e10 [ 974.033310][T25504] ? ktime_get_with_offset+0x93/0x2d0 [ 974.033334][T25504] ? __pfx_bpf_check+0x10/0x10 [ 974.033356][T25504] ? bpf_obj_name_cpy+0x194/0x1e0 [ 974.033384][T25504] bpf_prog_load+0x14d6/0x1c20 [ 974.033417][T25504] ? __pfx_bpf_prog_load+0x10/0x10 [ 974.033462][T25504] __sys_bpf+0xd0d/0xd90 [ 974.033494][T25504] ? __pfx___sys_bpf+0x10/0x10 [ 974.033525][T25504] ? __fget_files+0x2a/0x420 [ 974.033565][T25504] ? ksys_write+0x242/0x270 [ 974.033593][T25504] ? __pfx_ksys_write+0x10/0x10 [ 974.033623][T25504] __x64_sys_bpf+0xba/0xd0 [ 974.033644][T25504] do_syscall_64+0x166/0x520 [ 974.033669][T25504] ? trace_irq_disable+0x3b/0x140 [ 974.033686][T25504] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.033706][T25504] ? clear_bhb_loop+0x70/0xc0 [ 974.033728][T25504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.033747][T25504] RIP: 0033:0x7fb081f9e159 [ 974.033766][T25504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 974.033782][T25504] RSP: 002b:00007fb082e75028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 974.033804][T25504] RAX: ffffffffffffffda RBX: 00007fb082225fa0 RCX: 00007fb081f9e159 [ 974.033818][T25504] RDX: 0000000000000094 RSI: 0000200000000000 RDI: 0000000000000005 [ 974.033830][T25504] RBP: 00007fb082e75090 R08: 0000000000000000 R09: 0000000000000000 [ 974.033843][T25504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 974.033854][T25504] R13: 00007fb082226038 R14: 00007fb082225fa0 R15: 00007fb08234fa48 [ 974.033884][T25504] [ 974.306743][ T9980] usb 4-1: USB disconnect, device number 119 [ 974.391423][T18363] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 974.506991][T25535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 974.511806][T25535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 974.517069][T25531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 974.524622][T25531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 974.541629][T25531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 974.542078][T25531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 974.569805][T18363] usb 2-1: Using ep0 maxpacket: 32 [ 974.575106][T18363] usb 2-1: unable to get BOS descriptor or descriptor too short [ 974.575613][T18363] usb 2-1: New USB device found, idVendor=0921, idProduct=1000, bcdDevice=e7.cf [ 974.576876][T18363] usb 2-1: config 14 has an invalid interface number: 64 but max is 0 [ 974.576899][T18363] usb 2-1: config 14 has no interface number 0 [ 974.576926][T18363] usb 2-1: config 14 interface 64 has no altsetting 0 [ 974.579956][T18363] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.579979][T18363] usb 2-1: Product: syz [ 974.579993][T18363] usb 2-1: Manufacturer: syz [ 974.580007][T18363] usb 2-1: SerialNumber: syz [ 975.173609][T25555] loop5: detected capacity change from 0 to 7 [ 975.197953][T25555] loop5: [ 975.198020][T25555] loop5: partition table partially beyond EOD, truncated [ 975.540672][T25571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 975.542102][T25571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 975.830135][T25581] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3583'. [ 975.885829][T25590] FAULT_INJECTION: forcing a failure. [ 975.885829][T25590] name failslab, interval 1, probability 0, space 0, times 0 [ 975.885916][T25590] CPU: 0 UID: 0 PID: 25590 Comm: syz.4.3588 Tainted: G L syzkaller #0 PREEMPT(full) [ 975.885942][T25590] Tainted: [L]=SOFTLOCKUP [ 975.885950][T25590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 975.885962][T25590] Call Trace: [ 975.885970][T25590] [ 975.885979][T25590] dump_stack_lvl+0xe8/0x150 [ 975.886012][T25590] should_fail_ex+0x410/0x560 [ 975.886050][T25590] should_failslab+0xa8/0x100 [ 975.886073][T25590] __kvmalloc_node_noprof+0x176/0x820 [ 975.886095][T25590] ? __kvmalloc_node_noprof+0x345/0x820 [ 975.886113][T25590] ? bpf_compute_scc+0xa26/0xb10 [ 975.886140][T25590] ? bpf_compute_scc+0xa26/0xb10 [ 975.886172][T25590] bpf_compute_scc+0xa26/0xb10 [ 975.886217][T25590] bpf_check+0x25c9/0x2e10 [ 975.886248][T25590] ? ktime_get_with_offset+0x93/0x2d0 [ 975.886272][T25590] ? __pfx_bpf_check+0x10/0x10 [ 975.886294][T25590] ? bpf_obj_name_cpy+0x194/0x1e0 [ 975.886322][T25590] bpf_prog_load+0x14d6/0x1c20 [ 975.886355][T25590] ? __pfx_bpf_prog_load+0x10/0x10 [ 975.886434][T25590] __sys_bpf+0xd0d/0xd90 [ 975.886463][T25590] ? __pfx___sys_bpf+0x10/0x10 [ 975.886494][T25590] ? __fget_files+0x2a/0x420 [ 975.886534][T25590] ? ksys_write+0x242/0x270 [ 975.886563][T25590] ? __pfx_ksys_write+0x10/0x10 [ 975.886593][T25590] __x64_sys_bpf+0xba/0xd0 [ 975.886615][T25590] do_syscall_64+0x166/0x520 [ 975.886648][T25590] ? trace_irq_disable+0x3b/0x140 [ 975.886665][T25590] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 975.886685][T25590] ? clear_bhb_loop+0x70/0xc0 [ 975.886708][T25590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 975.886726][T25590] RIP: 0033:0x7f65b8f9e159 [ 975.886745][T25590] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 975.886762][T25590] RSP: 002b:00007f65b9dd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 975.886783][T25590] RAX: ffffffffffffffda RBX: 00007f65b9225fa0 RCX: 00007f65b8f9e159 [ 975.886798][T25590] RDX: 0000000000000094 RSI: 0000200000000000 RDI: 0000000000000005 [ 975.886810][T25590] RBP: 00007f65b9dd5090 R08: 0000000000000000 R09: 0000000000000000 [ 975.886823][T25590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 975.886834][T25590] R13: 00007f65b9226038 R14: 00007f65b9225fa0 R15: 00007f65b934fa48 [ 975.886865][T25590] [ 975.990302][ T9969] usb 4-1: new full-speed USB device number 120 using dummy_hcd [ 976.120104][T18363] belkin_sa 2-1:14.64: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 976.130293][T18363] usb 2-1: bcdDevice: e7cf, bfc: 0 [ 976.144631][T18363] usb 2-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 976.165532][T18363] usb 2-1: USB disconnect, device number 100 [ 976.196321][T18363] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 976.203350][T18363] belkin_sa 2-1:14.64: device disconnected [ 976.240138][ T9969] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 976.252793][ T9969] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 976.252842][ T9969] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 976.252918][ T9969] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 976.289124][ T9969] usb 4-1: config 0 descriptor?? [ 976.312725][ T9969] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 976.322321][ T9969] dvb-usb: bulk message failed: -22 (3/0) [ 976.348326][ T9969] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 976.361255][ T9969] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 976.361336][ T9969] usb 4-1: media controller created [ 976.379827][ T9969] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 976.422473][ T9969] dvb-usb: bulk message failed: -22 (6/0) [ 976.429418][ T9969] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 976.454468][ T9969] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input83 [ 976.468769][ T9969] dvb-usb: schedule remote query interval to 150 msecs. [ 976.468815][ T9969] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 976.525880][ T9969] usb 4-1: USB disconnect, device number 120 [ 976.642010][ T9969] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 976.960567][T25649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3592'. [ 977.129360][T18356] usb 2-1: new full-speed USB device number 101 using dummy_hcd [ 977.155779][T25652] loop5: detected capacity change from 0 to 7 [ 977.161241][T25652] loop5: [ 977.161268][T25652] loop5: partition table partially beyond EOD, truncated [ 977.292412][T18356] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 977.295552][T18356] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 977.295578][T18356] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 977.295624][T18356] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 977.304862][T18356] usb 2-1: config 0 descriptor?? [ 977.344752][T18356] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 977.344838][T18356] dvb-usb: bulk message failed: -22 (3/0) [ 977.377338][T18356] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 977.387137][T18356] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 977.396807][T18356] usb 2-1: media controller created [ 977.404398][T18356] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 977.466554][T18356] dvb-usb: bulk message failed: -22 (6/0) [ 977.466682][T18356] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 977.491826][T18356] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input84 [ 977.501985][T18356] dvb-usb: schedule remote query interval to 150 msecs. [ 977.502013][T18356] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 977.590266][T25644] dvb-usb: bulk message failed: -22 (2/0) [ 977.592968][T25668] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3595'. [ 977.638371][ T9980] usb 2-1: USB disconnect, device number 101 [ 977.699323][T25644] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3591'. [ 977.764130][ T9980] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 978.004213][T25727] binder_alloc: binder_alloc_mmap_handler: 25725 200000ffd000-200000fff000 already mapped failed -16 [ 978.151277][T25741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 978.153892][T25741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 978.815800][T25783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 978.831414][T25783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 978.878896][ T9969] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 978.939412][ T9980] usb 5-1: new full-speed USB device number 113 using dummy_hcd [ 979.031919][ T9969] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 979.050037][ T9969] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 979.050112][ T9969] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 979.050169][ T9969] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 979.050199][ T9969] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 979.050247][ T9969] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 979.111558][ T9980] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 979.113144][ T9980] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 979.113170][ T9980] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 979.113492][ T9980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 979.118665][ T9980] usb 5-1: config 0 descriptor?? [ 979.132807][ T9980] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 979.134545][ T9980] dvb-usb: bulk message failed: -22 (3/0) [ 979.140388][ T9980] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 979.141873][ T9980] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 979.141932][ T9980] usb 5-1: media controller created [ 979.143791][ T9980] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 979.166242][ T9980] dvb-usb: bulk message failed: -22 (6/0) [ 979.166332][ T9980] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 979.171562][ T9980] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input85 [ 979.176000][ T9980] dvb-usb: schedule remote query interval to 150 msecs. [ 979.176026][ T9980] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 979.329746][T18356] dvb-usb: bulk message failed: -22 (1/0) [ 979.330659][T18356] dvb-usb: error while querying for an remote control event. [ 979.395481][T18356] usb 5-1: USB disconnect, device number 113 [ 979.639634][T18356] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 979.925828][T25836] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 980.428592][T25895] Cannot find add_set index 0 as target [ 982.088318][T25931] kvm [25930]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x100000000 [ 982.089135][T25931] kvm [25930]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x80 [ 982.154527][T25931] kvm [25930]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xc978 [ 982.159380][T25931] kvm [25930]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 982.163323][T25931] kvm [25930]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xfe00 [ 982.165003][T25931] kvm [25930]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 982.165087][T25931] kvm [25930]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 982.200004][ T9969] usb 4-1: USB disconnect, device number 121 [ 982.701565][T25949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 982.730026][T25949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 983.621844][T25984] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3622'. [ 983.879260][ T9969] usb 5-1: new full-speed USB device number 114 using dummy_hcd [ 984.029747][ T9969] usb 5-1: New USB device found, idVendor=0499, idProduct=1039, bcdDevice= c.76 [ 984.030956][ T9969] usb 5-1: config 0 has an invalid interface number: 176 but max is 0 [ 984.030983][ T9969] usb 5-1: config 0 has no interface number 0 [ 984.031023][ T9969] usb 5-1: config 0 interface 176 altsetting 0 endpoint 0x4 has invalid maxpacket 59391, setting to 64 [ 984.056508][ T9969] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.056540][ T9969] usb 5-1: Product: syz [ 984.056556][ T9969] usb 5-1: Manufacturer: syz [ 984.056570][ T9969] usb 5-1: SerialNumber: syz [ 984.059918][ T9969] usb 5-1: config 0 descriptor?? [ 984.063801][T25982] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 984.063944][T25982] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 984.100543][ T9980] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 984.106309][ T9969] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 984.189011][ T1780] usb 2-1: new full-speed USB device number 102 using dummy_hcd [ 984.340894][ T1780] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 984.355231][ T9980] usb 4-1: unable to get BOS descriptor or descriptor too short [ 984.355303][ T9980] usb 4-1: New USB device found, idVendor=0c70, idProduct=f001, bcdDevice= 0.40 [ 984.373928][ T9980] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 984.373975][ T9980] usb 4-1: can't read configurations, error -71 [ 984.387347][ T1780] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 984.425155][ T1780] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.425199][ T1780] usb 2-1: Product: syz [ 984.425236][ T1780] usb 2-1: Manufacturer: syz [ 984.425253][ T1780] usb 2-1: SerialNumber: syz [ 984.459532][ T1780] usb 2-1: config 0 descriptor?? [ 984.486813][ T1780] streamzap 2-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 985.123362][T18356] usb 2-1: USB disconnect, device number 102 [ 985.548256][T26037] loop5: detected capacity change from 0 to 7 [ 985.562021][T26037] Dev loop5: unable to read RDB block 7 [ 985.571735][T26037] loop5: unable to read partition table [ 985.579449][T26037] loop5: partition table beyond EOD, truncated [ 985.579518][T26037] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 985.838864][ T9980] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 985.969267][ T9980] usb 4-1: device descriptor read/64, error -71 [ 986.009381][T18363] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 986.051406][ T1780] usb 5-1: USB disconnect, device number 114 [ 986.169118][T26069] FAULT_INJECTION: forcing a failure. [ 986.169118][T26069] name failslab, interval 1, probability 0, space 0, times 0 [ 986.183581][T18363] usb 2-1: Using ep0 maxpacket: 16 [ 986.199766][T18363] usb 2-1: unable to get BOS descriptor or descriptor too short [ 986.199843][T18363] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice= 0.40 [ 986.216001][T26069] CPU: 1 UID: 0 PID: 26069 Comm: syz.4.3629 Tainted: G L syzkaller #0 PREEMPT(full) [ 986.216036][T26069] Tainted: [L]=SOFTLOCKUP [ 986.216044][T26069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 986.216056][T26069] Call Trace: [ 986.216065][T26069] [ 986.216074][T26069] dump_stack_lvl+0xe8/0x150 [ 986.216108][T26069] should_fail_ex+0x410/0x560 [ 986.216140][T26069] should_failslab+0xa8/0x100 [ 986.216165][T26069] __kvmalloc_node_noprof+0x176/0x820 [ 986.216187][T26069] ? __kvmalloc_node_noprof+0x345/0x820 [ 986.216206][T26069] ? analyze_subprog+0x8ac/0x9e00 [ 986.216226][T26069] ? analyze_subprog+0x8ac/0x9e00 [ 986.216252][T26069] analyze_subprog+0x8ac/0x9e00 [ 986.216272][T26069] ? is_bpf_text_address+0x292/0x2b0 [ 986.216299][T26069] ? kernel_text_address+0xa5/0xe0 [ 986.216344][T26069] ? __pfx_stack_trace_save+0x10/0x10 [ 986.216387][T26069] ? call_instance+0x263/0x560 [ 986.216407][T26069] ? bpf_compute_subprog_arg_access+0x2a3/0x14d0 [ 986.216427][T26069] ? bpf_compute_live_registers+0x8d3/0x1ff0 [ 986.216450][T26069] ? __pfx_analyze_subprog+0x10/0x10 [ 986.216469][T26069] ? __x64_sys_bpf+0xba/0xd0 [ 986.216486][T26069] ? do_syscall_64+0x166/0x520 [ 986.216512][T26069] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 986.216567][T26069] ? call_instance+0x263/0x560 [ 986.216586][T26069] ? rcu_is_watching+0x16/0xb0 [ 986.216607][T26069] ? call_instance+0x263/0x560 [ 986.216625][T26069] ? trace_kmalloc+0x2a/0xf0 [ 986.216652][T26069] ? call_instance+0x263/0x560 [ 986.216670][T26069] ? __kvmalloc_node_noprof+0x52f/0x820 [ 986.216691][T26069] ? __kvmalloc_node_noprof+0x345/0x820 [ 986.216710][T26069] ? call_instance+0x263/0x560 [ 986.216736][T26069] ? call_instance+0x263/0x560 [ 986.216762][T26069] ? call_instance+0x42e/0x560 [ 986.216789][T26069] bpf_compute_subprog_arg_access+0x2c9/0x14d0 [ 986.216809][T26069] ? bpf_base_func_proto+0x22c/0xb00 [ 986.216832][T26069] ? __pfx_sk_filter_func_proto+0x10/0x10 [ 986.216976][T26069] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 986.217002][T26069] ? __kvmalloc_node_noprof+0x345/0x820 [ 986.217020][T26069] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 986.217040][T26069] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 986.217067][T26069] bpf_compute_live_registers+0x8d3/0x1ff0 [ 986.217105][T26069] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 986.217137][T26069] bpf_check+0x25ed/0x2e10 [ 986.217167][T26069] ? ktime_get_with_offset+0x93/0x2d0 [ 986.217191][T26069] ? __pfx_bpf_check+0x10/0x10 [ 986.217213][T26069] ? bpf_obj_name_cpy+0x194/0x1e0 [ 986.217241][T26069] bpf_prog_load+0x14d6/0x1c20 [ 986.217274][T26069] ? __pfx_bpf_prog_load+0x10/0x10 [ 986.217318][T26069] __sys_bpf+0xd0d/0xd90 [ 986.217346][T26069] ? __pfx___sys_bpf+0x10/0x10 [ 986.217377][T26069] ? __fget_files+0x2a/0x420 [ 986.217417][T26069] ? ksys_write+0x242/0x270 [ 986.217445][T26069] ? __pfx_ksys_write+0x10/0x10 [ 986.217475][T26069] __x64_sys_bpf+0xba/0xd0 [ 986.217497][T26069] do_syscall_64+0x166/0x520 [ 986.217521][T26069] ? trace_irq_disable+0x3b/0x140 [ 986.217538][T26069] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 986.217556][T26069] ? clear_bhb_loop+0x70/0xc0 [ 986.217580][T26069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 986.217600][T26069] RIP: 0033:0x7f65b8f9e159 [ 986.217621][T26069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 986.217639][T26069] RSP: 002b:00007f65b9dd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 986.217662][T26069] RAX: ffffffffffffffda RBX: 00007f65b9225fa0 RCX: 00007f65b8f9e159 [ 986.217678][T26069] RDX: 0000000000000094 RSI: 0000200000000000 RDI: 0000000000000005 [ 986.217692][T26069] RBP: 00007f65b9dd5090 R08: 0000000000000000 R09: 0000000000000000 [ 986.217705][T26069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 986.217716][T26069] R13: 00007f65b9226038 R14: 00007f65b9225fa0 R15: 00007f65b934fa48 [ 986.217759][T26069] [ 986.236080][T18363] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 986.236123][T18363] usb 2-1: can't read configurations, error -71 [ 986.236441][ T9980] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 986.404231][ T9980] usb 4-1: device descriptor read/64, error -71 [ 986.526530][ T9980] usb usb4-port1: attempt power cycle [ 986.792262][T26087] loop3: detected capacity change from 0 to 7 [ 986.810914][T26087] Dev loop3: unable to read RDB block 7 [ 986.810975][T26087] loop3: unable to read partition table [ 986.811184][T26087] loop3: partition table beyond EOD, truncated [ 986.824889][T26087] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 986.949378][ T9980] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 986.970677][ T9980] usb 4-1: device descriptor read/8, error -71 [ 987.211138][ T9980] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 987.242185][ T9980] usb 4-1: device descriptor read/8, error -71 [ 987.319770][T18363] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 987.360059][ T9980] usb usb4-port1: unable to enumerate USB device [ 987.482002][T18363] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 987.493884][T18363] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 987.493952][T18363] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 987.493979][T18363] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 987.494040][T18363] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 987.494070][T18363] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 987.540973][ T9984] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 987.563375][T18363] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 987.563427][T18363] usb 2-1: Product: syz [ 987.563478][T18363] usb 2-1: Manufacturer: syz [ 987.593748][T18363] cdc_wdm 2-1:1.0: skipping garbage [ 987.599492][T18363] cdc_wdm 2-1:1.0: skipping garbage [ 987.608466][T18363] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 987.608524][T18363] cdc_wdm 2-1:1.0: Unknown control protocol [ 987.719702][ T9984] usb 5-1: unable to get BOS descriptor or descriptor too short [ 987.719791][ T9984] usb 5-1: New USB device found, idVendor=0c70, idProduct=f001, bcdDevice= 0.40 [ 987.740433][ T9984] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 987.740508][ T9984] usb 5-1: can't read configurations, error -71 [ 987.909419][T26107] ALSA: mixer_oss: invalid OSS volume '' [ 987.964528][T26105] ALSA: mixer_oss: invalid OSS volume '' [ 988.414431][ T9966] usb 2-1: USB disconnect, device number 104 [ 988.506556][T26174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3638'. [ 988.506632][T26174] netlink: 'syz.2.3638': attribute type 10 has an invalid length. [ 988.506650][T26174] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3638'. [ 988.707180][T26174] geneve2: entered promiscuous mode [ 988.707253][T26174] geneve2: entered allmulticast mode [ 988.801281][T26195] FAULT_INJECTION: forcing a failure. [ 988.801281][T26195] name failslab, interval 1, probability 0, space 0, times 0 [ 988.801326][T26195] CPU: 1 UID: 0 PID: 26195 Comm: syz.0.3640 Tainted: G L syzkaller #0 PREEMPT(full) [ 988.801355][T26195] Tainted: [L]=SOFTLOCKUP [ 988.801364][T26195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 988.801376][T26195] Call Trace: [ 988.801384][T26195] [ 988.801393][T26195] dump_stack_lvl+0xe8/0x150 [ 988.801424][T26195] should_fail_ex+0x410/0x560 [ 988.801456][T26195] should_failslab+0xa8/0x100 [ 988.801480][T26195] __kvmalloc_node_noprof+0x176/0x820 [ 988.801503][T26195] ? bpf_compute_subprog_arg_access+0x509/0x14d0 [ 988.801524][T26195] ? bpf_compute_subprog_arg_access+0x509/0x14d0 [ 988.801556][T26195] bpf_compute_subprog_arg_access+0x509/0x14d0 [ 988.801576][T26195] ? bpf_base_func_proto+0x22c/0xb00 [ 988.801598][T26195] ? __pfx_sk_filter_func_proto+0x10/0x10 [ 988.801657][T26195] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 988.801683][T26195] ? __kvmalloc_node_noprof+0x345/0x820 [ 988.801701][T26195] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 988.801720][T26195] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 988.801747][T26195] bpf_compute_live_registers+0x8d3/0x1ff0 [ 988.801786][T26195] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 988.801817][T26195] bpf_check+0x25ed/0x2e10 [ 988.801847][T26195] ? ktime_get_with_offset+0x93/0x2d0 [ 988.801871][T26195] ? __pfx_bpf_check+0x10/0x10 [ 988.801893][T26195] ? bpf_obj_name_cpy+0x194/0x1e0 [ 988.801922][T26195] bpf_prog_load+0x14d6/0x1c20 [ 988.801953][T26195] ? __pfx_bpf_prog_load+0x10/0x10 [ 988.801998][T26195] __sys_bpf+0xd0d/0xd90 [ 988.802026][T26195] ? __pfx___sys_bpf+0x10/0x10 [ 988.802057][T26195] ? __fget_files+0x2a/0x420 [ 988.802097][T26195] ? ksys_write+0x242/0x270 [ 988.802125][T26195] ? __pfx_ksys_write+0x10/0x10 [ 988.802155][T26195] __x64_sys_bpf+0xba/0xd0 [ 988.802177][T26195] do_syscall_64+0x166/0x520 [ 988.802201][T26195] ? trace_irq_disable+0x3b/0x140 [ 988.802218][T26195] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 988.802237][T26195] ? clear_bhb_loop+0x70/0xc0 [ 988.802260][T26195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 988.802278][T26195] RIP: 0033:0x7f8fec19e159 [ 988.802297][T26195] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 988.802314][T26195] RSP: 002b:00007f8fecfeb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 988.802336][T26195] RAX: ffffffffffffffda RBX: 00007f8fec425fa0 RCX: 00007f8fec19e159 [ 988.802350][T26195] RDX: 0000000000000094 RSI: 0000200000000000 RDI: 0000000000000005 [ 988.802363][T26195] RBP: 00007f8fecfeb090 R08: 0000000000000000 R09: 0000000000000000 [ 988.802375][T26195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 988.802387][T26195] R13: 00007f8fec426038 R14: 00007f8fec425fa0 R15: 00007f8fec54fa48 [ 988.802417][T26195] [ 989.352081][T26218] program syz.1.3644 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 989.409030][ T1780] usb 5-1: new full-speed USB device number 117 using dummy_hcd [ 989.539344][ T9984] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 989.560622][ T1780] usb 5-1: New USB device found, idVendor=0499, idProduct=1039, bcdDevice= c.76 [ 989.574741][ T1780] usb 5-1: config 0 has an invalid interface number: 176 but max is 0 [ 989.574804][ T1780] usb 5-1: config 0 has no interface number 0 [ 989.574849][ T1780] usb 5-1: config 0 interface 176 altsetting 0 endpoint 0x4 has invalid maxpacket 59391, setting to 64 [ 989.610342][ T1780] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.610401][ T1780] usb 5-1: Product: syz [ 989.610438][ T1780] usb 5-1: Manufacturer: syz [ 989.610455][ T1780] usb 5-1: SerialNumber: syz [ 989.639732][ T1780] usb 5-1: config 0 descriptor?? [ 989.646896][T26191] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 989.655754][T26191] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 989.672432][ T1780] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 989.689775][ T9984] usb 4-1: Using ep0 maxpacket: 32 [ 989.695763][ T9984] usb 4-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 989.697776][ T9984] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 989.721904][ T9984] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.721951][ T9984] usb 4-1: Product: syz [ 989.721983][ T9984] usb 4-1: Manufacturer: syz [ 989.722003][ T9984] usb 4-1: SerialNumber: syz [ 989.752802][ T9984] usb 4-1: config 0 descriptor?? [ 989.768638][ T9984] usb 4-1: expecting 3 got 0 endpoints! Bailing out. [ 989.990766][T26210] netlink: 'syz.3.3642': attribute type 14 has an invalid length. [ 989.990810][T26210] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3642'. [ 990.031353][T26210] netlink: 'syz.3.3642': attribute type 14 has an invalid length. [ 990.031390][T26210] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3642'. [ 990.039991][ T6457] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 990.040048][ T6457] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 990.040081][ T6457] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 990.043109][T26210] netlink: 'syz.3.3642': attribute type 1 has an invalid length. [ 990.195228][T24296] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 990.226648][T26253] fuse: Unknown parameter 'fd0x0000000000000003' [ 990.286231][ T1780] usb 4-1: USB disconnect, device number 2 [ 990.814297][T26301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3647'. [ 991.083569][T26290] ALSA: mixer_oss: invalid OSS volume '' [ 991.209420][ T9984] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 991.385091][ T9984] usb 4-1: unable to get BOS descriptor or descriptor too short [ 991.385145][ T9984] usb 4-1: New USB device found, idVendor=0c70, idProduct=f001, bcdDevice= 0.40 [ 991.405094][ T9984] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 991.405138][ T9984] usb 4-1: can't read configurations, error -71 [ 991.590944][ T9966] usb 5-1: USB disconnect, device number 117 [ 991.817162][T26352] FAULT_INJECTION: forcing a failure. [ 991.817162][T26352] name failslab, interval 1, probability 0, space 0, times 0 [ 991.832828][T26352] CPU: 0 UID: 0 PID: 26352 Comm: syz.4.3652 Tainted: G L syzkaller #0 PREEMPT(full) [ 991.832868][T26352] Tainted: [L]=SOFTLOCKUP [ 991.832876][T26352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 991.832890][T26352] Call Trace: [ 991.832899][T26352] [ 991.832910][T26352] dump_stack_lvl+0xe8/0x150 [ 991.832951][T26352] should_fail_ex+0x410/0x560 [ 991.832990][T26352] should_failslab+0xa8/0x100 [ 991.833018][T26352] __kmalloc_cache_noprof+0xa3/0x600 [ 991.833049][T26352] ? bpf_get_call_summary+0x9e0/0xfa0 [ 991.833072][T26352] ? do_check_common+0x20e/0x5d30 [ 991.833095][T26352] ? do_check_common+0x20e/0x5d30 [ 991.833128][T26352] do_check_common+0x20e/0x5d30 [ 991.833190][T26352] ? mark_fastcall_patterns+0xe21/0xe80 [ 991.833220][T26352] ? __pfx_do_check_common+0x10/0x10 [ 991.833260][T26352] bpf_check+0x2639/0x2e10 [ 991.833295][T26352] ? ktime_get_with_offset+0x93/0x2d0 [ 991.833319][T26352] ? __pfx_bpf_check+0x10/0x10 [ 991.833351][T26352] ? bpf_obj_name_cpy+0x194/0x1e0 [ 991.833383][T26352] bpf_prog_load+0x14d6/0x1c20 [ 991.833422][T26352] ? __pfx_bpf_prog_load+0x10/0x10 [ 991.833473][T26352] __sys_bpf+0xd0d/0xd90 [ 991.833507][T26352] ? __pfx___sys_bpf+0x10/0x10 [ 991.833542][T26352] ? __fget_files+0x2a/0x420 [ 991.833588][T26352] ? ksys_write+0x242/0x270 [ 991.833621][T26352] ? __pfx_ksys_write+0x10/0x10 [ 991.833656][T26352] __x64_sys_bpf+0xba/0xd0 [ 991.833681][T26352] do_syscall_64+0x166/0x520 [ 991.833709][T26352] ? trace_irq_disable+0x3b/0x140 [ 991.833729][T26352] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 991.833750][T26352] ? clear_bhb_loop+0x70/0xc0 [ 991.833775][T26352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 991.833792][T26352] RIP: 0033:0x7f65b8f9e159 [ 991.833813][T26352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 991.833862][T26352] RSP: 002b:00007f65b9dd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 991.833886][T26352] RAX: ffffffffffffffda RBX: 00007f65b9225fa0 RCX: 00007f65b8f9e159 [ 991.833900][T26352] RDX: 0000000000000094 RSI: 0000200000000000 RDI: 0000000000000005 [ 991.833913][T26352] RBP: 00007f65b9dd5090 R08: 0000000000000000 R09: 0000000000000000 [ 991.833925][T26352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 991.833938][T26352] R13: 00007f65b9226038 R14: 00007f65b9225fa0 R15: 00007f65b934fa48 [ 991.833972][T26352] [ 992.345157][T26370] batman_adv: batadv0: Adding interface: gretap1 [ 992.345188][T26370] batman_adv: batadv0: The MTU of interface gretap1 is too small (1294) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 992.345236][T26370] batman_adv: batadv0: Interface activated: gretap1 [ 992.345258][T26370] batadv0: mtu less than device minimum [ 992.349938][T26370] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 992.350732][T26370] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 992.351610][T26370] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 992.352377][T26370] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 992.353203][T26370] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 992.353977][T26370] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 992.354781][T26370] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 992.355555][T26370] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 992.356319][T26370] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 992.645318][T26387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 992.645824][T26387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 992.713242][T26387] binder_alloc: 26385: binder_alloc_buf, no vma [ 993.317386][ T9984] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 993.445548][ T31] audit: type=1326 audit(1788067310.229:3977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26408 comm="syz.2.3663" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149799e159 code=0x7ffc0000 [ 993.445637][ T31] audit: type=1326 audit(1788067310.229:3978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26408 comm="syz.2.3663" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149799e159 code=0x7ffc0000 [ 993.500539][ T31] audit: type=1326 audit(1788067310.289:3979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26408 comm="syz.2.3663" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149799e159 code=0x7ffc0000 [ 993.500612][ T31] audit: type=1326 audit(1788067310.289:3980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26408 comm="syz.2.3663" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149799e159 code=0x7ffc0000 [ 993.528428][ T31] audit: type=1326 audit(1788067310.319:3981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26408 comm="syz.2.3663" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f149799e159 code=0x7ffc0000 [ 993.528483][ T31] audit: type=1326 audit(1788067310.319:3982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26408 comm="syz.2.3663" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149799e159 code=0x7ffc0000 [ 993.528522][ T31] audit: type=1326 audit(1788067310.319:3983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26408 comm="syz.2.3663" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149799e159 code=0x7ffc0000 [ 993.529490][ T9984] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 993.530707][ T31] audit: type=1326 audit(1788067310.319:3984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26408 comm="syz.2.3663" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149799e159 code=0x7ffc0000 [ 993.530754][ T31] audit: type=1326 audit(1788067310.319:3985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26408 comm="syz.2.3663" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149799e159 code=0x7ffc0000 [ 993.533908][ T9984] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 993.533955][ T9984] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 993.536038][ T31] audit: type=1326 audit(1788067310.319:3986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26408 comm="syz.2.3663" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f149799e159 code=0x7ffc0000 [ 993.585172][ T9984] usb 4-1: config 0 descriptor?? [ 993.679835][T18875] usb 5-1: new full-speed USB device number 118 using dummy_hcd [ 993.713934][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.714006][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.807470][T26383] batman_adv: batadv0: Adding interface: vlan2 [ 993.807516][T26383] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 993.807569][T26383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 993.807593][T26383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 993.807611][T26383] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 993.853158][ T9984] usbhid 4-1:0.0: can't add hid device: -71 [ 993.853286][ T9984] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 993.889822][T18875] usb 5-1: New USB device found, idVendor=0499, idProduct=1039, bcdDevice= c.76 [ 993.916957][ T9984] usb 4-1: USB disconnect, device number 5 [ 993.917322][T18875] usb 5-1: config 0 has an invalid interface number: 176 but max is 0 [ 993.917407][T18875] usb 5-1: config 0 has no interface number 0 [ 993.917450][T18875] usb 5-1: config 0 interface 176 altsetting 0 endpoint 0x4 has invalid maxpacket 59391, setting to 64 [ 993.967789][T18875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 993.967843][T18875] usb 5-1: Product: syz [ 993.967880][T18875] usb 5-1: Manufacturer: syz [ 993.967896][T18875] usb 5-1: SerialNumber: syz [ 994.006352][T18875] usb 5-1: config 0 descriptor?? [ 994.025805][T26407] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 994.039408][T26407] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 994.065062][T18875] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 994.379294][ T9984] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 994.552801][ T9984] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 994.560464][ T9984] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 994.560517][ T9984] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.567741][ T9984] usb 4-1: config 0 descriptor?? [ 994.581880][ T9984] hub 4-1:0.0: USB hub found [ 994.781210][ T9984] hub 4-1:0.0: 1 port detected [ 994.815495][T26452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 994.816109][T26452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 994.842503][T26453] loop5: detected capacity change from 0 to 7 [ 994.846935][T26453] loop5: [ 994.846967][T26453] loop5: partition table partially beyond EOD, truncated [ 995.100378][T26468] netlink: 312 bytes leftover after parsing attributes in process `syz.0.3668'. [ 995.100433][T26468] netlink: 'syz.0.3668': attribute type 1 has an invalid length. [ 995.285151][T26466] netlink: 'syz.0.3668': attribute type 29 has an invalid length. [ 995.602252][ T1780] usb 4-1: USB disconnect, device number 6 [ 996.344274][ T9984] usb 5-1: USB disconnect, device number 118 [ 996.360347][T18875] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 996.478989][ T1780] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 996.519430][T18875] usb 2-1: Using ep0 maxpacket: 32 [ 996.520367][T18875] usb 2-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 996.521464][T18875] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 996.521498][T18875] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 996.521523][T18875] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 996.521549][T18875] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 996.523888][T18875] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 996.523912][T18875] usb 2-1: Product: syz [ 996.523927][T18875] usb 2-1: Manufacturer: syz [ 996.523942][T18875] usb 2-1: SerialNumber: syz [ 996.535937][T18875] usb 2-1: config 0 descriptor?? [ 996.546097][T18875] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input87 [ 996.702358][ T1780] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 996.723696][ T1780] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 996.723754][ T1780] usb 4-1: config 179 has no interface number 0 [ 996.723829][ T1780] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 996.723864][ T1780] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 996.723893][ T1780] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 996.723926][ T1780] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 58368, setting to 8 [ 996.723959][ T1780] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 996.724012][ T1780] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 996.806617][T26531] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 996.827401][T26501] raw-gadget.5 gadget.3: fail, usb_ep_enable returned -22 [ 996.843879][ T1780] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 996.855617][ T1780] xpad 4-1:179.65: probe with driver xpad failed with error -90 [ 997.096056][ T9968] usb 4-1: USB disconnect, device number 7 [ 997.179117][ T1780] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 997.338807][ T1780] usb 5-1: Using ep0 maxpacket: 32 [ 997.344786][ T1780] usb 5-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=6a.32 [ 997.347320][ T1780] usb 5-1: config 0 has an invalid interface number: 86 but max is 0 [ 997.347346][ T1780] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 997.347364][ T1780] usb 5-1: config 0 has no interface number 0 [ 997.349458][ T1780] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.349481][ T1780] usb 5-1: Product: syz [ 997.349495][ T1780] usb 5-1: Manufacturer: syz [ 997.349509][ T1780] usb 5-1: SerialNumber: syz [ 997.355934][ T1780] usb 5-1: config 0 descriptor?? [ 997.606717][ T1780] ljca 5-1:0.86: bulk endpoints not found [ 997.615847][ T1780] usb 5-1: USB disconnect, device number 119 [ 998.240308][T18875] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 998.410385][T18875] usb 4-1: Using ep0 maxpacket: 8 [ 998.417412][T18875] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 998.438633][T18875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.448020][T18875] usb 4-1: Product: syz [ 998.448080][T18875] usb 4-1: Manufacturer: syz [ 998.448096][T18875] usb 4-1: SerialNumber: syz [ 998.483753][T18875] usb 4-1: config 0 descriptor?? [ 998.500034][T18875] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 998.509490][T18875] pctv452e: pctv452e_power_ctrl: 1 [ 998.509490][T18875] [ 998.517359][T18875] usb 4-1: selecting invalid altsetting 3 [ 998.517381][T18875] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 998.517381][T18875] [ 998.524401][T18875] dvb-usb: bulk message failed: -22 (5/0) [ 998.554628][T18875] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 998.571033][T18875] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 998.580969][T18875] usb 4-1: media controller created [ 998.592929][T18875] dvb-usb: bulk message failed: -22 (8/0) [ 998.600528][T18875] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 998.610967][T18875] dvb-usb: MAC address reading failed. [ 998.638406][T18875] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 998.690512][ T1780] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 998.700070][T26566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 998.712180][T26566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 998.726384][T26566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 998.737559][T26566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 998.753315][T26566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 998.761509][T26566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 998.766847][T26566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 998.767355][T26566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 998.776288][T26566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 998.776777][T26566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 998.839965][ T1780] usb 5-1: Using ep0 maxpacket: 32 [ 998.840848][ T1780] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 998.841986][ T1780] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 998.842013][ T1780] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 998.842038][ T1780] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 998.842059][ T1780] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 998.842083][ T1780] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 998.844058][ T1780] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.844079][ T1780] usb 5-1: Product: syz [ 998.844092][ T1780] usb 5-1: Manufacturer: syz [ 998.844107][ T1780] usb 5-1: SerialNumber: syz [ 998.852468][ T1780] usb 5-1: config 0 descriptor?? [ 998.885338][T18875] DVB: Unable to find symbol stb0899_attach() [ 998.885359][T18875] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 998.913457][T26617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 998.913996][T26617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 999.059428][T18875] rc_core: IR keymap rc-tt-1500 not found [ 999.065639][T18875] Registered IR keymap rc-empty [ 999.073596][T18875] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 999.093743][T18875] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input89 [ 999.116801][ T9966] usb 2-1: USB disconnect, device number 105 [ 999.126767][T18875] dvb-usb: schedule remote query interval to 100 msecs. [ 999.135977][T18875] pctv452e: pctv452e_power_ctrl: 0 [ 999.135977][T18875] [ 999.144930][T18875] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 999.180977][T18875] usb 4-1: USB disconnect, device number 8 [ 999.287315][ T1780] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 999.287407][ T1780] input input88: Device does not respond to id packet M [ 999.292231][ T1780] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 999.292282][ T1780] input input88: Device does not respond to id packet P [ 999.294630][ T1780] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 999.294682][ T1780] input input88: Device does not respond to id packet B [ 999.299995][ T1780] input input88: Limiting number of effects to 32 (device reports 230) [ 999.372331][T18875] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 999.607735][ T1780] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 999.611654][ T1780] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 999.624557][ T1780] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 999.632766][ T1780] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 999.652080][ T1780] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input88 [ 999.713195][ T1780] usb 5-1: USB disconnect, device number 120 [ 999.741537][T26669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 999.760450][T26669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1000.069492][ T9966] usb 2-1: new full-speed USB device number 106 using dummy_hcd [ 1000.225293][ T9966] usb 2-1: New USB device found, idVendor=0499, idProduct=1039, bcdDevice= c.76 [ 1000.239431][ T9966] usb 2-1: config 0 has an invalid interface number: 176 but max is 0 [ 1000.239483][ T9966] usb 2-1: config 0 has no interface number 0 [ 1000.239546][ T9966] usb 2-1: config 0 interface 176 altsetting 0 endpoint 0x4 has invalid maxpacket 59391, setting to 64 [ 1000.301845][ T9966] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.301887][ T9966] usb 2-1: Product: syz [ 1000.301922][ T9966] usb 2-1: Manufacturer: syz [ 1000.301938][ T9966] usb 2-1: SerialNumber: syz [ 1000.315654][ T9966] usb 2-1: config 0 descriptor?? [ 1000.329885][T26658] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1000.330001][T26658] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1000.341897][ T9966] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1000.384773][T26699] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3688'. [ 1000.384858][T26699] netlink: 'syz.4.3688': attribute type 10 has an invalid length. [ 1000.384878][T26699] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3688'. [ 1000.431422][T26699] geneve2: entered promiscuous mode [ 1000.431459][T26699] geneve2: entered allmulticast mode [ 1000.605646][T26722] netlink: 'syz.4.3690': attribute type 1 has an invalid length. [ 1000.772062][T26722] bond1: entered promiscuous mode [ 1000.778041][T26722] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1000.803573][T26722] netlink: 'syz.4.3690': attribute type 1 has an invalid length. [ 1000.828095][T26755] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1000.828463][T26755] bond1: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 1000.828484][T26755] bond1: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 1000.847531][T26755] bond1: (slave ip6gre2): making interface the new active one [ 1000.847557][T26755] ip6gre2: entered promiscuous mode [ 1000.849366][T26755] bond1: (slave ip6gre2): Enslaving as an active interface with an up link [ 1001.010049][T26777] ip6gre3: entered allmulticast mode [ 1001.119639][T26783] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3694'. [ 1001.206239][T26791] netlink: 548 bytes leftover after parsing attributes in process `syz.4.3694'. [ 1001.318353][T26784] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3694'. [ 1001.519066][T26798] syzkaller1: entered promiscuous mode [ 1001.524925][T26798] syzkaller1: entered allmulticast mode [ 1001.629241][ T1780] usb 5-1: new full-speed USB device number 121 using dummy_hcd [ 1001.789938][ T1780] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1001.801305][ T1780] usb 5-1: config 150 has an invalid interface number: 204 but max is 2 [ 1001.801367][ T1780] usb 5-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 1001.801390][ T1780] usb 5-1: config 150 has no interface number 0 [ 1001.801435][ T1780] usb 5-1: config 150 interface 204 has no altsetting 0 [ 1001.837073][ T1780] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.837121][ T1780] usb 5-1: Product: syz [ 1001.837140][ T1780] usb 5-1: Manufacturer: syz [ 1001.837156][ T1780] usb 5-1: SerialNumber: syz [ 1001.989592][ T9984] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1002.071124][ T1780] xr_serial 5-1:150.204: skipping garbage [ 1002.071192][ T1780] xr_serial 5-1:150.204: xr_serial converter detected [ 1002.150062][ T9984] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1002.151722][ T9984] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1002.151789][ T9984] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1002.151816][ T9984] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1002.151837][ T9984] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1002.153082][ T9984] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1002.153106][ T9984] usb 4-1: Manufacturer: syz [ 1002.157184][ T9984] usb 4-1: config 0 descriptor?? [ 1002.473761][ T9980] usb 2-1: USB disconnect, device number 106 [ 1002.593531][ T9984] hid_parser_main: 3354 callbacks suppressed [ 1002.593602][ T9984] appleir 0003:05AC:8243.002F: unknown main item tag 0x0 [ 1002.711720][ T9984] appleir 0003:05AC:8243.002F: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 1003.081471][T26886] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1003.180778][ T1780] usb 5-1: xr_serial converter now attached to ttyUSB0 [ 1003.358611][ T1780] usb 4-1: USB disconnect, device number 9 [ 1003.360202][T26898] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3703'. [ 1003.395942][ T9980] usb 5-1: USB disconnect, device number 121 [ 1003.453997][ T9980] xr_serial ttyUSB0: xr_serial converter now disconnected from ttyUSB0 [ 1003.467715][ T9980] xr_serial 5-1:150.204: device disconnected [ 1003.719788][T26937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1003.720299][T26937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1003.938618][T26945] loop5: detected capacity change from 0 to 7 [ 1003.956870][ T1780] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 1003.966981][T26945] loop5: [ 1003.967036][T26945] loop5: partition table partially beyond EOD, truncated [ 1004.128889][ T1780] usb 2-1: Using ep0 maxpacket: 32 [ 1004.136105][ T1780] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 1004.172833][ T1780] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1004.172885][ T1780] usb 2-1: Product: syz [ 1004.172927][ T1780] usb 2-1: Manufacturer: syz [ 1004.172947][ T1780] usb 2-1: SerialNumber: syz [ 1004.214802][ T1780] usb 2-1: config 0 descriptor?? [ 1004.440340][ T1780] snd-usb-6fire 2-1:0.0: unable to receive device firmware state. [ 1004.440402][ T1780] snd-usb-6fire 2-1:0.0: probe with driver snd-usb-6fire failed with error -71 [ 1004.466986][ T1780] usb 2-1: USB disconnect, device number 107 [ 1004.591514][T26979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3712'. [ 1004.711526][T26984] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3713'. [ 1004.711588][T26984] netlink: 'syz.2.3713': attribute type 10 has an invalid length. [ 1004.712025][T26984] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3713'. [ 1004.721516][T26984] geneve2: entered promiscuous mode [ 1004.721539][T26984] geneve2: entered allmulticast mode [ 1004.839115][T18875] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 1005.002188][T18875] usb 4-1: New USB device found, idVendor=0499, idProduct=1039, bcdDevice= c.76 [ 1005.009432][T18875] usb 4-1: config 0 has an invalid interface number: 176 but max is 0 [ 1005.009462][T18875] usb 4-1: config 0 has no interface number 0 [ 1005.009503][T18875] usb 4-1: config 0 interface 176 altsetting 0 endpoint 0x4 has invalid maxpacket 59391, setting to 64 [ 1005.033593][T18875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.033621][T18875] usb 4-1: Product: syz [ 1005.033635][T18875] usb 4-1: Manufacturer: syz [ 1005.033649][T18875] usb 4-1: SerialNumber: syz [ 1005.065200][T18875] usb 4-1: config 0 descriptor?? [ 1005.072691][T26963] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1005.080464][T26963] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1005.101575][T18875] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1005.126686][T26993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1005.145797][T26993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1005.239229][ T9980] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 1005.399234][ T9980] usb 2-1: Using ep0 maxpacket: 8 [ 1005.416627][ T9980] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1005.416690][ T9980] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1005.421174][ T9980] usb 2-1: config 4 interface 0 has no altsetting 0 [ 1005.436845][ T9980] usb 2-1: string descriptor 0 read error: -22 [ 1005.436941][ T9980] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1005.474530][ T9980] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1005.537850][ T9980] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1005.551833][ T9980] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1005.552693][ T9980] usb 2-1: media controller created [ 1005.591062][ T9980] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1005.644006][T27027] xt_hashlimit: size too large, truncated to 1048576 [ 1005.710119][T26995] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3715'. [ 1006.580965][T27044] loop3: detected capacity change from 0 to 7 [ 1006.593975][T27044] Dev loop3: unable to read RDB block 7 [ 1006.600560][T27044] loop3: unable to read partition table [ 1006.607286][T27044] loop3: partition table beyond EOD, truncated [ 1006.615925][T27044] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1006.676434][ T9980] zl10353_read_register: readreg error (reg=127, ret==0) [ 1006.915703][ T9980] usb 2-1: USB disconnect, device number 108 [ 1006.969333][ T1780] usb 5-1: new full-speed USB device number 122 using dummy_hcd [ 1007.130710][ T1780] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1007.141351][ T1780] usb 5-1: config 0 has an invalid descriptor of length 95, skipping remainder of the config [ 1007.141438][ T1780] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1007.141468][ T1780] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x55, changing to 0x5 [ 1007.141492][ T1780] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1140, setting to 64 [ 1007.141516][ T1780] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1007.179754][ T1780] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1007.179786][ T1780] usb 5-1: Manufacturer: syz [ 1007.191982][ T1780] usb 5-1: config 0 descriptor?? [ 1007.255952][ T9968] usb 4-1: USB disconnect, device number 10 [ 1007.464608][T27091] loop5: detected capacity change from 0 to 7 [ 1007.467650][T27091] loop5: [ 1007.467676][T27091] loop5: partition table partially beyond EOD, truncated [ 1007.558760][ T1780] rc_core: IR keymap rc-hauppauge not found [ 1007.558808][ T1780] Registered IR keymap rc-empty [ 1007.561549][ T1780] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1007.586611][ T1780] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1007.600353][ T1780] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1007.616576][ T1780] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input90 [ 1007.664284][ T1780] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1007.680069][ T1780] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1007.701921][ T1780] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1007.718642][T27110] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3723'. [ 1007.719394][ T1780] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1007.740119][ T1780] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1007.760997][ T1780] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1007.779291][ T1780] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1007.800511][ T1780] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1007.819904][ T1780] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1007.839727][ T1780] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1007.864838][ T1780] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 1007.864891][ T1780] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1007.865073][T27106] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3722'. [ 1007.900912][ T1780] usb 5-1: USB disconnect, device number 122 [ 1008.300693][T27150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1008.301223][T27150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1008.448116][T27155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3727'. [ 1008.579759][T27163] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3729'. [ 1008.598997][ T31] kauditd_printk_skb: 95 callbacks suppressed [ 1008.599034][ T31] audit: type=1326 audit(1788067325.379:4082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27157 comm="syz.3.3728" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f649679e159 code=0x0 [ 1008.647599][T27172] netlink: 'syz.0.3729': attribute type 29 has an invalid length. [ 1008.648428][T27163] netlink: 'syz.0.3729': attribute type 29 has an invalid length. [ 1008.689964][T27158] kvm: pic: non byte write [ 1008.820527][ T1780] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1008.948786][ T1780] usb 4-1: device descriptor read/64, error -71 [ 1009.110420][T27195] loop5: detected capacity change from 0 to 7 [ 1009.120959][T27195] loop5: [ 1009.121023][T27195] loop5: partition table partially beyond EOD, truncated [ 1009.143206][T27197] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3734'. [ 1009.188827][ T1780] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1009.237752][T27202] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1009.319594][ T1780] usb 4-1: device descriptor read/64, error -71 [ 1009.431035][ T1780] usb usb4-port1: attempt power cycle [ 1009.437847][T27219] ========= ** replaying previous printk message ** [ 1009.437847][T27219] ================================================================== [ 1009.437932][T27219] BUG: KASAN: vmalloc-out-of-bounds in tpg_fill_plane_buffer+0x1220/0x22b0 [ 1009.438000][T27219] Write of size 720 at addr ffffc9000619ed40 by task vivid-000-vid-c/27219 [ 1009.438019][T27219] [ 1009.438059][T27219] CPU: 1 UID: 0 PID: 27219 Comm: vivid-000-vid-c Tainted: G L syzkaller #0 PREEMPT(full) [ 1009.438112][T27219] Tainted: [L]=SOFTLOCKUP [ 1009.438119][T27219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1009.438133][T27219] Call Trace: [ 1009.438142][T27219] [ 1009.438152][T27219] dump_stack_lvl+0xe8/0x150 [ 1009.438184][T27219] print_address_description+0x55/0x1e0 [ 1009.438212][T27219] ? tpg_fill_plane_buffer+0x1220/0x22b0 [ 1009.438234][T27219] print_report+0x58/0x70 [ 1009.438256][T27219] kasan_report+0x117/0x150 [ 1009.438280][T27219] ? tpg_fill_plane_buffer+0x1220/0x22b0 [ 1009.438307][T27219] kasan_check_range+0x264/0x2c0 [ 1009.438330][T27219] ? tpg_fill_plane_buffer+0x1220/0x22b0 [ 1009.438357][T27219] __asan_memcpy+0x40/0x70 [ 1009.438386][T27219] tpg_fill_plane_buffer+0x1220/0x22b0 [ 1009.438447][T27219] vivid_thread_vid_cap_tick+0x115c/0x6340 [ 1009.438557][T27219] ? finish_task_switch+0x40e/0xc60 [ 1009.438584][T27219] ? rcu_is_watching+0x16/0xb0 [ 1009.438609][T27219] ? __lock_acquire+0x6df/0x2e50 [ 1009.438634][T27219] ? __pfx_vivid_thread_vid_cap_tick+0x10/0x10 [ 1009.438671][T27219] vivid_thread_vid_cap+0x927/0x11e0 [ 1009.438697][T27219] ? __lock_acquire+0x6df/0x2e50 [ 1009.438727][T27219] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1009.438753][T27219] ? do_raw_spin_lock+0x12b/0x2f0 [ 1009.438784][T27219] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1009.438834][T27219] ? __kthread_parkme+0x71/0x1f0 [ 1009.438861][T27219] ? __kthread_parkme+0x199/0x1f0 [ 1009.438887][T27219] kthread+0x38b/0x480 [ 1009.438908][T27219] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1009.438932][T27219] ? __pfx_kthread+0x10/0x10 [ 1009.438950][T27219] ret_from_fork+0x514/0xb70 [ 1009.438982][T27219] ? __pfx_ret_from_fork+0x10/0x10 [ 1009.439012][T27219] ? __switch_to+0xc89/0x1420 [ 1009.439039][T27219] ? __pfx_kthread+0x10/0x10 [ 1009.439060][T27219] ret_from_fork_asm+0x1a/0x30 [ 1009.439094][T27219] [ 1009.439103][T27219] [ 1009.439109][T27219] The buggy address belongs to a 8-page vmalloc region starting at 0xffffc90006197000 allocated at vb2_vmalloc_alloc+0xef/0x360 [ 1009.439181][T27219] The buggy address belongs to the physical page: [ 1009.439191][T27219] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x10f pfn:0x3652f [ 1009.439210][T27219] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1009.439236][T27219] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 1009.439254][T27219] raw: 000000000000010f 0000000000000000 00000001ffffffff 0000000000000000 [ 1009.439264][T27219] page dumped because: kasan: bad access detected [ 1009.439274][T27219] page_owner tracks the page as allocated [ 1009.439282][T27219] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x29c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS|__GFP_ZERO), pid 27214, tgid 27208 (syz.2.3736), ts 1009405086204 [ 1009.439314][T27219] post_alloc_hook+0x1f9/0x250 [ 1009.439340][T27219] get_page_from_freelist+0x2209/0x2280 [ 1009.439358][T27219] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 1009.439375][T27219] alloc_pages_mpol+0x21e/0x390 [ 1009.439397][T27219] alloc_pages_noprof+0xb1/0x2b0 [ 1009.439429][T27219] __vmalloc_node_range_noprof+0x6e5/0x1540 [ 1009.439456][T27219] vmalloc_user_noprof+0xad/0xe0 [ 1009.439479][T27219] vb2_vmalloc_alloc+0xef/0x360 [ 1009.439502][T27219] __vb2_queue_alloc+0xa0b/0x1660 [ 1009.439523][T27219] vb2_core_reqbufs+0xc3f/0x1470 [ 1009.439542][T27219] __vb2_init_fileio+0x310/0x1040 [ 1009.439566][T27219] vb2_core_poll+0x4b0/0x830 [ 1009.439587][T27219] vb2_fop_poll+0x196/0x310 [ 1009.439609][T27219] v4l2_poll+0x147/0x2c0 [ 1009.439658][T27219] ep_insert+0x11da/0x1af0 [ 1009.439693][T27219] do_epoll_ctl_file+0x8c2/0xee0 [ 1009.439718][T27219] page last free pid 20731 tgid 20731 ts 1008796054877 stack trace: [ 1009.439732][T27219] __free_frozen_pages+0xc93/0xd90 [ 1009.439756][T27219] __slab_free+0x274/0x2c0 [ 1009.439771][T27219] qlist_free_all+0x99/0x100 [ 1009.439797][T27219] kasan_quarantine_reduce+0x148/0x160 [ 1009.439822][T27219] __kasan_slab_alloc+0x22/0x80 [ 1009.439841][T27219] kmem_cache_alloc_noprof+0x2b9/0x600 [ 1009.439867][T27219] do_getname+0x2e/0x250 [ 1009.439886][T27219] do_readlinkat+0xc8/0x510 [ 1009.439908][T27219] __x64_sys_readlink+0x7f/0x90 [ 1009.439927][T27219] do_syscall_64+0x166/0x520 [ 1009.439954][T27219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1009.439973][T27219] [ 1009.439978][T27219] Memory state around the buggy address: [ 1009.439991][T27219] ffffc9000619ef00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1009.440005][T27219] ffffc9000619ef80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1009.440019][T27219] >ffffc9000619f000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1009.440028][T27219] ^ [ 1009.440039][T27219] ffffc9000619f080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1009.440051][T27219] ffffc9000619f100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1009.440060][T27219] ================================================================== [ 1009.442536][T27219] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1009.967515][T27219] CPU: 1 UID: 0 PID: 27219 Comm: vivid-000-vid-c Tainted: G L syzkaller #0 PREEMPT(full) [ 1009.979318][T27219] Tainted: [L]=SOFTLOCKUP [ 1009.983705][T27219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1009.993952][T27219] Call Trace: [ 1009.997248][T27219] [ 1010.000461][T27219] vpanic+0x56d/0xa60 [ 1010.004559][T27219] ? __pfx_vpanic+0x10/0x10 [ 1010.009438][T27219] panic+0xc5/0xd0 [ 1010.013211][T27219] ? __pfx_panic+0x10/0x10 [ 1010.017820][T27219] ? preempt_schedule_thunk+0x16/0x40 [ 1010.023297][T27219] ? tpg_fill_plane_buffer+0x1220/0x22b0 [ 1010.029038][T27219] ? preempt_schedule_thunk+0x16/0x40 [ 1010.034423][T27219] ? tpg_fill_plane_buffer+0x1220/0x22b0 [ 1010.040071][T27219] check_panic_on_warn+0x89/0xb0 [ 1010.045132][T27219] ? tpg_fill_plane_buffer+0x1220/0x22b0 [ 1010.050976][T27219] end_report+0x73/0x170 [ 1010.055406][T27219] ? tpg_fill_plane_buffer+0x1220/0x22b0 [ 1010.061313][T27219] kasan_report+0x128/0x150 [ 1010.065998][T27219] ? tpg_fill_plane_buffer+0x1220/0x22b0 [ 1010.071901][T27219] kasan_check_range+0x264/0x2c0 [ 1010.076858][T27219] ? tpg_fill_plane_buffer+0x1220/0x22b0 [ 1010.082510][T27219] __asan_memcpy+0x40/0x70 [ 1010.087059][T27219] tpg_fill_plane_buffer+0x1220/0x22b0 [ 1010.092738][T27219] vivid_thread_vid_cap_tick+0x115c/0x6340 [ 1010.098592][T27219] ? finish_task_switch+0x40e/0xc60 [ 1010.103816][T27219] ? rcu_is_watching+0x16/0xb0 [ 1010.108602][T27219] ? __lock_acquire+0x6df/0x2e50 [ 1010.113550][T27219] ? __pfx_vivid_thread_vid_cap_tick+0x10/0x10 [ 1010.120073][T27219] vivid_thread_vid_cap+0x927/0x11e0 [ 1010.125387][T27219] ? __lock_acquire+0x6df/0x2e50 [ 1010.130452][T27219] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1010.136189][T27219] ? do_raw_spin_lock+0x12b/0x2f0 [ 1010.141370][T27219] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1010.147645][T27219] ? __kthread_parkme+0x71/0x1f0 [ 1010.152604][T27219] ? __kthread_parkme+0x199/0x1f0 [ 1010.157697][T27219] kthread+0x38b/0x480 [ 1010.161876][T27219] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1010.167868][T27219] ? __pfx_kthread+0x10/0x10 [ 1010.172467][T27219] ret_from_fork+0x514/0xb70 [ 1010.177080][T27219] ? __pfx_ret_from_fork+0x10/0x10 [ 1010.182201][T27219] ? __switch_to+0xc89/0x1420 [ 1010.186976][T27219] ? __pfx_kthread+0x10/0x10 [ 1010.191661][T27219] ret_from_fork_asm+0x1a/0x30 [ 1010.196537][T27219] [ 1010.200035][T27219] Kernel Offset: disabled [ 1010.204383][T27219] Rebooting in 86400 seconds..