last executing test programs: 7m12.079224707s ago: executing program 3 (id=9131): syz_mount_image$fuse(0x0, 0x0, 0x11000a0, 0x0, 0xfe, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x10, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r0, &(0x7f0000003780)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000001680)=""/188, 0xbc}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x2}, 0x6}], 0x3, 0x40002000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$can_j1939(0x1d, 0x2, 0x7) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[], 0x6f4}}, 0x0) 7m11.831487201s ago: executing program 3 (id=9132): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x8, 0x4, 0xba, 0x2, 0x6, 0x0, 0xa1, 0x8, 0xfc, 0xfd, 0x0, 0x0, 0x3, 0x1}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x13}}}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000680)={r1, 0x4, 0x401, 0xfffffd0d}, 0x10) (fail_nth: 2) 7m11.474934329s ago: executing program 3 (id=9133): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000008c0)={0x2c, &(0x7f0000000740)={0x40, 0xf8c9f399b980bab0, 0x3, "668fd6"}, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x20, 0x3, 0x1, 0x1}}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) read$alg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 7m8.343258334s ago: executing program 3 (id=9150): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=@bridge_newneigh={0x1c, 0x1c, 0x1, 0x70bd2d, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x4, 0x7e, 0xa}}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c801}, 0x4040000) 7m7.989973867s ago: executing program 3 (id=9152): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x24, r1, 0x1, 0x0, 0x10, {{}, {@val={0x8, 0x1, 0x2}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) (fail_nth: 2) 7m7.546278856s ago: executing program 3 (id=9154): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x5c2, &(0x7f00000006c0)={0x0, 0x0, 0x2, 0x3, 0x317}, 0x0, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) pwrite64(r2, 0x0, 0x0, 0x5) (async) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000600)='fdinfo/3\x00') read$FUSE(r3, &(0x7f00000020c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) (async) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) (async) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYRES16=r4, @ANYRESOCT=r1, @ANYBLOB="ee4363a78542c30bf5782c54478d8a3d0a9871cf3e841a1a7fed3a71e32c312e6cb8ccbbab7eae4985d80df37eb83d11fda8b2cb9f44ef135b7a5191ca1f022293c8ad4c430233871c"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newtfilter={0x38, 0x28, 0x575ac7824d421509, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r8, {0x9}, {0xffff}, {0xfff1, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x11}, 0x40) socket(0x10, 0x3, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), r9) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r11, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) syz_open_procfs(0xffffffffffffffff, 0x0) 6m52.222835862s ago: executing program 32 (id=9154): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_io_uring_setup(0x5c2, &(0x7f00000006c0)={0x0, 0x0, 0x2, 0x3, 0x317}, 0x0, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) pwrite64(r2, 0x0, 0x0, 0x5) (async) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000600)='fdinfo/3\x00') read$FUSE(r3, &(0x7f00000020c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) (async) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) (async) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYRES16=r4, @ANYRESOCT=r1, @ANYBLOB="ee4363a78542c30bf5782c54478d8a3d0a9871cf3e841a1a7fed3a71e32c312e6cb8ccbbab7eae4985d80df37eb83d11fda8b2cb9f44ef135b7a5191ca1f022293c8ad4c430233871c"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newtfilter={0x38, 0x28, 0x575ac7824d421509, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r8, {0x9}, {0xffff}, {0xfff1, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x11}, 0x40) socket(0x10, 0x3, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), r9) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r11, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) syz_open_procfs(0xffffffffffffffff, 0x0) 12.746498017s ago: executing program 5 (id=10734): set_mempolicy(0x3, &(0x7f0000000240)=0x1020fff, 0x6) r0 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x44, r2, 0x1, 0x170bd2c, 0x8000, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x20}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}}, 0x20000000) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001b80)=ANY=[@ANYBLOB="12011001000000401c1b3e1b0000000000010902240001000080010904000082030002000921fd6f000122eb00090581031000"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000040)={0x14, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000080)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) memfd_create(&(0x7f0000000800)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r2 = gettid() sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r2], 0x28}}, 0x0) 10.110896387s ago: executing program 5 (id=10741): syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff110701030009"], 0x0) close(0x3) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000200)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x4, 0x0, 0x2}}]}}, 0x0) 8.595326164s ago: executing program 0 (id=10746): r0 = dup(0xffffffffffffffff) mmap(&(0x7f00005fd000/0x2000)=nil, 0x2000, 0x3000009, 0x40010, r0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000040)={0x8, 0x9, 0x4, {0x2, @vbi={0x9, 0x1, 0x7, 0x34565559, [0x34565348, 0xb22], [0x7], 0x1}}, 0x8}) socket(0x1d, 0x2, 0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) sendmsg$NFT_BATCH(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"/347], 0x14c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xffffffffffffff8a}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="113856583c6ec3caf8c1129a60be3afc59aa71fbb74288b8bee119bc8c4130ad5c426848bb81daed457a7c630ec57f4f11842b0162cf90f85b653362034ebe5ae057e316efe58a7fde200cf5fcd41c7026ed3542389f528eabc44af2867daa73e3885818524426222906c14e934527ee8c6702fb218410cb63d9b7d0b1c0fe47c3cf8cc43ce16b8496539154d4df204cab4974486bd222ef88107ad661b42f1e3735805215feb1e663e6c6a076bd6ee6ce0e11c746d6a75c5317d9cdbca51b3481cb4c489db78964eae6f52db598d7e1c435d4ac5c294fd731ad5c2c", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) socket(0x10, 0x3, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40088a01, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f000000b3c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f000000b480)={'dummy0\x00', 0x0}) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f000000b6c0), r6) sendmsg$ETHTOOL_MSG_EEE_GET(r6, &(0x7f000000bac0)={0x0, 0x0, &(0x7f000000ba80)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010026bd7000ffdbdf25170000000c00018008000100", @ANYRES32=r8, @ANYBLOB="115c2b22b381cf550e0fddaabb7a6c5a5f3b7714cd046c961a6c0d89ee458e49b41b9b9fef1fcb09c1d5a21f63e0ab3d99c97f873003ed1cb75ab6d3bafb353d07bbe62c4f5a5cc5b4d6278e0d121014c9648aea0b37c16b965a9fd8a932fc45d555fa3452751d8de23663d263dbf2232094148c5a226c6eede7a5ef3a4291f66e0ef6af3f2a487c9c6bb66a606dc5"], 0x20}, 0x1, 0x0, 0x0, 0x2000c001}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000040)={0xc000000e}) 8.375880835s ago: executing program 2 (id=10747): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x4, 0x7ffe, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfffffffe, 0xffffffff}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x22102, 0x0) getsockopt$sock_buf(r1, 0x1, 0x0, &(0x7f0000000480)=""/235, &(0x7f0000000000)=0xeb) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r2, 0xc008aec1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = syz_open_dev$vim2m(0x0, 0x5, 0x2) writev(0xffffffffffffffff, &(0x7f0000000200), 0x0) shutdown(0xffffffffffffffff, 0x1) ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc0585611, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="05ac0f00"}, @typed={0x4, 0x1e}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) sendfile(r6, r6, 0x0, 0x200000) 7.238512042s ago: executing program 1 (id=10749): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r2, @ANYBLOB="6d3082610000000008001300", @ANYRES32], 0x28}}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x6a7}]}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001dc0)={'gretap0\x00', &(0x7f0000001d40)={'sit0\x00', 0x0, 0x7, 0x20, 0x5, 0x7, {{0xe, 0x4, 0x0, 0xc, 0x38, 0x64, 0x0, 0x3, 0x29, 0x0, @broadcast, @local, {[@rr={0x7, 0x23, 0x70, [@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @rand_addr=0x64010100, @rand_addr=0x64010102]}]}}}}}) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) 6.967634531s ago: executing program 0 (id=10750): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000180), 0x0) recvmmsg(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001540)=""/4097, 0x1001}], 0x1}, 0x6}], 0x1, 0x40000020, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x800, r1}, 0x38) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x38011, r3, 0x0) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r1}, 0x38) 6.594062963s ago: executing program 5 (id=10751): syz_usb_connect(0x2, 0x0, 0x0, &(0x7f0000000580)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x200, 0x5, 0xf, 0x8, 0x40, 0x81}, 0x3a, &(0x7f00000002c0)={0x5, 0xf, 0x3a, 0x4, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x7, 0x2, 0x100}, @ssp_cap={0x14, 0x10, 0xa, 0x8, 0x2, 0x4, 0xf0f, 0x5, [0x3ff0, 0x1e]}, @ssp_cap={0x14, 0x10, 0xa, 0x80, 0x2, 0xd91, 0xf, 0x3, [0xff003f, 0x600f]}]}, 0x8, [{0x1e, &(0x7f0000000300)=@string={0x1e, 0x3, "76303588969c112ff76fbf347bfb5623c4eccc7e69ef21f33a454840"}}, {0x6b, &(0x7f0000000340)=@string={0x6b, 0x3, "74b3bba91f90c18188c5b2bad10deda3e0c98fc82c01442004eabfa230920a36b73837f4b18d755b466d01703082b7046749aa5b698647b41ab4be993fe315c73048ba2812249764684730130c4e7291d7f063507d94e0e3bb5f04f0817ef7c7a3d0028279772cc81e"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x60}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x83e}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x43f}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x410}}, {0xe4, &(0x7f0000000740)=@string={0xe4, 0x3, "eb37d9d40c02c9aac03e0dead6801713a45215037c253fe5adec7cc958225a647094a50340df49b395c8f0b4682fe76b74c61efd9c2a8a6ef3d95a4b455d129eb5d1237bfb637861ca2ae262de447b86fc5c825860eae4a5a2a83d998e9fd742e2d531d1604e72e72ec461958345d7d10aebeff61c69a7fc39fdb5f71b9dc5fa530782b083c955a65f3e56d7202fffdd6d189987c5a3933e0eeda5dade5bf7b9c8cbbab0b26ff79ccc0cb19ebb40b33f2c3e44d27359d3b17e8f968f1b68f612ec100d62df933a8cc8d7d018bd4036daa091b0d991cb0e22381c1712bf23411cd951"}}, {0xac, &(0x7f0000000840)=@string={0xac, 0x3, "86c8f6b3df69138d5133c2aed8c33a8714c4d6c0d8e6e3eb545ab4aac8ad07c24929477fd9da19b2a75d57a37f1a0186fc44494faaa5387ad32b0cf3fb3b077cb7c1213c962c6cddf9c7038599d7652a9651cef812c115909b943b418e6c015f9af91079fd65cba953da999c4d60cc5e85e58dddf1715d168efb2f6a52e185e8e348de009f00ffa618e7ddcebfa13b1d9d02e4e36fc52d18d9320dc49a2f9c0b06f750d777ace3f63d05"}}]}) 6.351295085s ago: executing program 1 (id=10752): getpid() r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r4 = syz_open_procfs(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f00000000c0)={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0x1, 0x5, [@multicast1, @multicast1, @private=0xa010100, @rand_addr=0x64010100, @broadcast]}, 0x24) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r5, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) bind$alg(r4, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'fpu(pcbc(aes-aesni))\x00'}, 0x58) syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x94, 0x1, 0x1, 0x201, 0x0, 0x0, {0xa}, [@CTA_SEQ_ADJ_REPLY={0x0, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x0, 0x3, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x0, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_CORRECTION_POS={0x0, 0x1, 0x1, 0x0, 0xffffffff}, @CTA_SEQADJ_OFFSET_BEFORE={0x0, 0x2, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_BEFORE={0x0, 0x2, 0x1, 0x0, 0xfffffff3}, @CTA_SEQADJ_CORRECTION_POS={0x0, 0x1, 0x1, 0x0, 0xa0000}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @remote}}}]}, @CTA_ZONE={0x28, 0x12, 0x1, 0x0, 0x2}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r8, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x800, 0xbbba, 0x0, 0x18, 0x0, {}, {0x0, 0xfffffffd, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x100}) 6.293632273s ago: executing program 4 (id=10753): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_smc(0x2b, 0x1, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f00000010c0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}], 0x1, 0x0) recvfrom$inet(r2, 0x0, 0x0, 0x2102, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="030000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000002e50c000004000018110000", @ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0xfffffc01, 0x3f, &(0x7f0000000140)=""/63, 0x40f00, 0xd, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0xd, 0x1, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000240), &(0x7f00000002c0)=[{0x4, 0x2, 0x9, 0x1}, {0x2, 0x3, 0xd, 0x7}, {0x0, 0x3, 0x4, 0x4}, {0x3, 0x4, 0x0, 0x5}], 0x10, 0xb9}, 0x94) r5 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e80)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x80000000}, 0x10}, 0x94) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000f1401000000000000000000c82597800c00450072646d61"], 0x1c}}, 0x0) r6 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @private2, 0x3ff}, 0x1c) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) gettid() unshare(0x6a040000) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000000)=""/149, &(0x7f00000000c0)=0x210) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) 5.793493959s ago: executing program 5 (id=10754): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = dup(r0) mmap(&(0x7f00005fd000/0x2000)=nil, 0x2000, 0x3000009, 0x40010, r1, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000040)={0x8, 0x9, 0x4, {0x2, @vbi={0x9, 0x1, 0x7, 0x34565559, [0x34565348, 0xb22], [0x7], 0x1}}, 0x8}) socket(0x1d, 0x2, 0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) sendmsg$NFT_BATCH(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"/347], 0x14c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xffffffffffffff8a}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="113856583c6ec3caf8c1129a60be3afc59aa71fbb74288b8bee119bc8c4130ad5c426848bb81daed457a7c630ec57f4f11842b0162cf90f85b653362034ebe5ae057e316efe58a7fde200cf5fcd41c7026ed3542389f528eabc44af2867daa73e3885818524426222906c14e934527ee8c6702fb218410cb63d9b7d0b1c0fe47c3cf8cc43ce16b8496539154d4df204cab4974486bd222ef88107ad661b42f1e3735805215feb1e663e6c6a076bd6ee6ce0e11c746d6a75c5317d9cdbca51b3481cb4c489db78964eae6f52db598d7e1c435d4ac5c294fd731ad5c2c", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) socket(0x10, 0x3, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40088a01, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f000000b3c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f000000b480)={'dummy0\x00', 0x0}) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f000000b6c0), r7) sendmsg$ETHTOOL_MSG_EEE_GET(r7, &(0x7f000000bac0)={0x0, 0x0, &(0x7f000000ba80)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010026bd7000ffdbdf25170000000c00018008000100", @ANYRES32=r9, @ANYBLOB="115c2b22b381cf550e0fddaabb7a6c5a5f3b7714cd046c961a6c0d89ee458e49b41b9b9fef1fcb09c1d5a21f63e0ab3d99c97f873003ed1cb75ab6d3bafb353d07bbe62c4f5a5cc5b4d6278e0d121014c9648aea0b37c16b965a9fd8a932fc45d555fa3452751d8de23663d263dbf2232094148c5a226c6eede7a5ef3a4291f66e0ef6af3f2a487c9c6bb66a606dc5"], 0x20}, 0x1, 0x0, 0x0, 0x2000c001}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000040)={0xc000000e}) 5.791118098s ago: executing program 2 (id=10755): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000280)=ANY=[], 0x48) listen(r0, 0x2) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa8086dd600a3ff200540600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYBLOB="5001000090"], 0x0) 5.638344338s ago: executing program 0 (id=10756): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x4, 0x7ffe, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfffffffe, 0xffffffff}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x22102, 0x0) getsockopt$sock_buf(r1, 0x1, 0x0, &(0x7f0000000480)=""/235, &(0x7f0000000000)=0xeb) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r2, 0xc008aec1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = syz_open_dev$vim2m(0x0, 0x5, 0x2) writev(0xffffffffffffffff, &(0x7f0000000200), 0x0) shutdown(0xffffffffffffffff, 0x1) ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc0585611, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="05ac0f00"}, @typed={0x4, 0x1e}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) sendfile(r6, r6, 0x0, 0x200000) 5.454471406s ago: executing program 2 (id=10757): r0 = dup(0xffffffffffffffff) mmap(&(0x7f00005fd000/0x2000)=nil, 0x2000, 0x3000009, 0x40010, r0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000040)={0x8, 0x9, 0x4, {0x2, @vbi={0x9, 0x1, 0x7, 0x34565559, [0x34565348, 0xb22], [0x7], 0x1}}, 0x8}) socket(0x1d, 0x2, 0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) sendmsg$NFT_BATCH(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2c000000180a01010000000000000000020000000900010073797a5dd86f62560d26a7d7bb528ec61bafab30000000000900020073797a4900000000f8000000160a0104000000000000000002000002c400038054000380140001006272696467655f736c6176655f3000001400010076657468315f766c616e0000000000001400010073797a010076657468315f746f5f6261746164760004000380680003800001006970766c616e30000000000000000000140001006970365f7674693000000000000000001400010070696d367265670000000000000000001400010065727370616e30000000000000000000140001006272696467655f736c6176655f3100000900010073797a31000000001400038008000140000000000800024000010000140000001100010000000000000000000100000a00"/347], 0x14c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xffffffffffffff8a}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="113856583c6ec3caf8c1129a60be3afc59aa71fbb74288b8bee119bc8c4130ad5c426848bb81daed457a7c630ec57f4f11842b0162cf90f85b653362034ebe5ae057e316efe58a7fde200cf5fcd41c7026ed3542389f528eabc44af2867daa73e3885818524426222906c14e934527ee8c6702fb218410cb63d9b7d0b1c0fe47c3cf8cc43ce16b8496539154d4df204cab4974486bd222ef88107ad661b42f1e3735805215feb1e663e6c6a076bd6ee6ce0e11c746d6a75c5317d9cdbca51b3481cb4c489db78964eae6f52db598d7e1c435d4ac5c294fd731ad5c2c", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) socket(0x10, 0x3, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40088a01, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f000000b3c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f000000b480)={'dummy0\x00', 0x0}) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f000000b6c0), r6) sendmsg$ETHTOOL_MSG_EEE_GET(r6, &(0x7f000000bac0)={0x0, 0x0, &(0x7f000000ba80)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010026bd7000ffdbdf25170000000c00018008000100", @ANYRES32=r8, @ANYBLOB="115c2b22b381cf550e0fddaabb7a6c5a5f3b7714cd046c961a6c0d89ee458e49b41b9b9fef1fcb09c1d5a21f63e0ab3d99c97f873003ed1cb75ab6d3bafb353d07bbe62c4f5a5cc5b4d6278e0d121014c9648aea0b37c16b965a9fd8a932fc45d555fa3452751d8de23663d263dbf2232094148c5a226c6eede7a5ef3a4291f66e0ef6af3f2a487c9c6bb66a606dc5"], 0x20}, 0x1, 0x0, 0x0, 0x2000c001}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000040)={0xc000000e}) 4.520246882s ago: executing program 5 (id=10758): syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff"], 0x0) close(0x3) r0 = syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000200)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x4, 0x0, 0x2}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 4.472316387s ago: executing program 4 (id=10759): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DESC={0x1c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5fffffff}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa8}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040), 0x0) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r3 = dup(r0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="020000000001000000000200000c000000000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="05000000010000000200"/28], 0x50) r6 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x1, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_GUEST_MEMFD(r9, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r10, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) fchdir(r7) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) lseek(r11, 0x3, 0x1) getdents64(r11, 0xfffffffffffffffe, 0x29) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000540)='wg0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}}, 0x8003, 0xfff, 0xe652, 0x5, 0x84, 0x48, 0xff}, 0x9c) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x70, 0x8310000, 0x3ff, 0xff, 0x3, 0xa54, 0x0, 0x0, 0x10, 0x20000000}}, 0x50) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) socket(0x10, 0x3, 0x0) 3.722680898s ago: executing program 0 (id=10760): unshare(0x66000080) r0 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00'}) gettid() sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) 3.653346528s ago: executing program 4 (id=10761): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000000)=0x5) r1 = socket$inet_smc(0x2b, 0x1, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000021c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000010c0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}], 0x1, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x2102, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="030000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000002e50c000004000018110000", @ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0xfffffc01, 0x3f, &(0x7f0000000140)=""/63, 0x40f00, 0xd, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0xd, 0x1, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000240), &(0x7f00000002c0)=[{0x4, 0x2, 0x9, 0x1}, {0x2, 0x3, 0xd, 0x7}, {0x0, 0x3, 0x4, 0x4}, {0x3, 0x4, 0x0, 0x5}], 0x10, 0xb9}, 0x94) r4 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e80)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x80000000}, 0x10}, 0x94) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000f1401000000000000000000c82597800c00450072646d61"], 0x1c}}, 0x0) r5 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @private2, 0x3ff}, 0x1c) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) gettid() unshare(0x6a040000) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000000)=""/149, &(0x7f00000000c0)=0x210) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) 2.69472893s ago: executing program 1 (id=10762): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r2, @ANYBLOB="6d3082610000000008001300", @ANYRES32], 0x28}}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x6a7}]}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001dc0)={'gretap0\x00', &(0x7f0000001d40)={'sit0\x00', 0x0, 0x7, 0x20, 0x5, 0x7, {{0xe, 0x4, 0x0, 0xc, 0x38, 0x64, 0x0, 0x3, 0x29, 0x0, @broadcast, @local, {[@rr={0x7, 0x23, 0x70, [@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @rand_addr=0x64010100, @rand_addr=0x64010102]}]}}}}}) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) 2.141031109s ago: executing program 4 (id=10763): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x4, 0x7ffe, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfffffffe, 0xffffffff}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x22102, 0x0) getsockopt$sock_buf(r1, 0x1, 0x0, &(0x7f0000000480)=""/235, &(0x7f0000000000)=0xeb) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r2, 0xc008aec1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = syz_open_dev$vim2m(0x0, 0x5, 0x2) writev(0xffffffffffffffff, &(0x7f0000000200), 0x0) shutdown(0xffffffffffffffff, 0x1) ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc0585611, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="05ac0f00"}, @typed={0x4, 0x1e}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) sendfile(r6, r6, 0x0, 0x200000) 1.919243488s ago: executing program 1 (id=10764): syz_usb_connect(0x2, 0x0, 0x0, &(0x7f0000000580)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x200, 0x5, 0xf, 0x8, 0x40, 0x81}, 0x3a, &(0x7f00000002c0)={0x5, 0xf, 0x3a, 0x4, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x7, 0x2, 0x100}, @ssp_cap={0x14, 0x10, 0xa, 0x8, 0x2, 0x4, 0xf0f, 0x5, [0x3ff0, 0x1e]}, @ssp_cap={0x14, 0x10, 0xa, 0x80, 0x2, 0xd91, 0xf, 0x3, [0xff003f, 0x600f]}]}, 0x8, [{0x1e, &(0x7f0000000300)=@string={0x1e, 0x3, "76303588969c112ff76fbf347bfb5623c4eccc7e69ef21f33a454840"}}, {0x6b, &(0x7f0000000340)=@string={0x6b, 0x3, "74b3bba91f90c18188c5b2bad10deda3e0c98fc82c01442004eabfa230920a36b73837f4b18d755b466d01703082b7046749aa5b698647b41ab4be993fe315c73048ba2812249764684730130c4e7291d7f063507d94e0e3bb5f04f0817ef7c7a3d0028279772cc81e"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x60}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x83e}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x43f}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x410}}, {0xe4, &(0x7f0000000740)=@string={0xe4, 0x3, "eb37d9d40c02c9aac03e0dead6801713a45215037c253fe5adec7cc958225a647094a50340df49b395c8f0b4682fe76b74c61efd9c2a8a6ef3d95a4b455d129eb5d1237bfb637861ca2ae262de447b86fc5c825860eae4a5a2a83d998e9fd742e2d531d1604e72e72ec461958345d7d10aebeff61c69a7fc39fdb5f71b9dc5fa530782b083c955a65f3e56d7202fffdd6d189987c5a3933e0eeda5dade5bf7b9c8cbbab0b26ff79ccc0cb19ebb40b33f2c3e44d27359d3b17e8f968f1b68f612ec100d62df933a8cc8d7d018bd4036daa091b0d991cb0e22381c1712bf23411cd951"}}, {0xac, &(0x7f0000000840)=@string={0xac, 0x3, "86c8f6b3df69138d5133c2aed8c33a8714c4d6c0d8e6e3eb545ab4aac8ad07c24929477fd9da19b2a75d57a37f1a0186fc44494faaa5387ad32b0cf3fb3b077cb7c1213c962c6cddf9c7038599d7652a9651cef812c115909b943b418e6c015f9af91079fd65cba953da999c4d60cc5e85e58dddf1715d168efb2f6a52e185e8e348de009f00ffa618e7ddcebfa13b1d9d02e4e36fc52d18d9320dc49a2f9c0b06f750d777ace3f63d05"}}]}) 1.811979831s ago: executing program 2 (id=10765): syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff"], 0x0) close(0x3) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000200)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x4, 0x0, 0x2}}]}}, 0x0) 1.12289705s ago: executing program 1 (id=10766): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4", 0xb) recvmmsg(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001540)=""/4097, 0x1001}], 0x1}, 0x6}], 0x1, 0x40000020, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x800, r1}, 0x38) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x38011, r3, 0x0) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r1}, 0x38) 991.795306ms ago: executing program 0 (id=10767): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000280)=ANY=[], 0x48) listen(r0, 0x2) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa8086dd600a3ff200540600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYBLOB="5001000090"], 0x0) 975.450619ms ago: executing program 4 (id=10768): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = dup(r0) mmap(&(0x7f00005fd000/0x2000)=nil, 0x2000, 0x3000009, 0x40010, r1, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000040)={0x8, 0x9, 0x4, {0x2, @vbi={0x9, 0x1, 0x7, 0x34565559, [0x34565348, 0xb22], [0x7], 0x1}}, 0x8}) socket(0x1d, 0x2, 0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) sendmsg$NFT_BATCH(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"/347], 0x14c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xffffffffffffff8a}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="113856583c6ec3caf8c1129a60be3afc59aa71fbb74288b8bee119bc8c4130ad5c426848bb81daed457a7c630ec57f4f11842b0162cf90f85b653362034ebe5ae057e316efe58a7fde200cf5fcd41c7026ed3542389f528eabc44af2867daa73e3885818524426222906c14e934527ee8c6702fb218410cb63d9b7d0b1c0fe47c3cf8cc43ce16b8496539154d4df204cab4974486bd222ef88107ad661b42f1e3735805215feb1e663e6c6a076bd6ee6ce0e11c746d6a75c5317d9cdbca51b3481cb4c489db78964eae6f52db598d7e1c435d4ac5c294fd731ad5c2c", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) socket(0x10, 0x3, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40088a01, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f000000b3c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f000000b480)={'dummy0\x00', 0x0}) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f000000b6c0), r7) sendmsg$ETHTOOL_MSG_EEE_GET(r7, &(0x7f000000bac0)={0x0, 0x0, &(0x7f000000ba80)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010026bd7000ffdbdf25170000000c00018008000100", @ANYRES32=r9, @ANYBLOB="115c2b22b381cf550e0fddaabb7a6c5a5f3b7714cd046c961a6c0d89ee458e49b41b9b9fef1fcb09c1d5a21f63e0ab3d99c97f873003ed1cb75ab6d3bafb353d07bbe62c4f5a5cc5b4d6278e0d121014c9648aea0b37c16b965a9fd8a932fc45d555fa3452751d8de23663d263dbf2232094148c5a226c6eede7a5ef3a4291f66e0ef6af3f2a487c9c6bb66a606dc5"], 0x20}, 0x1, 0x0, 0x0, 0x2000c001}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000040)={0xc000000e}) 818.310092ms ago: executing program 0 (id=10769): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_smc(0x2b, 0x1, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f00000010c0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}], 0x1, 0x0) recvfrom$inet(r2, 0x0, 0x0, 0x2102, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="030000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000002e50c000004000018110000", @ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0xfffffc01, 0x3f, &(0x7f0000000140)=""/63, 0x40f00, 0xd, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0xd, 0x1, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000240), &(0x7f00000002c0)=[{0x4, 0x2, 0x9, 0x1}, {0x2, 0x3, 0xd, 0x7}, {0x0, 0x3, 0x4, 0x4}, {0x3, 0x4, 0x0, 0x5}], 0x10, 0xb9}, 0x94) r5 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e80)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x80000000}, 0x10}, 0x94) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000f1401000000000000000000c82597800c00450072646d61"], 0x1c}}, 0x0) r6 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @private2, 0x3ff}, 0x1c) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) gettid() unshare(0x6a040000) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000000)=""/149, &(0x7f00000000c0)=0x210) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) 270.369215ms ago: executing program 1 (id=10770): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DESC={0x1c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5fffffff}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa8}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r3 = dup(r0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="020000000001000000000200000c000000000000", @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="05000000010000000200"/28], 0x50) r6 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x1, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_GUEST_MEMFD(r9, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r10, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) fchdir(r7) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) lseek(r11, 0x3, 0x1) getdents64(r11, 0xfffffffffffffffe, 0x29) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000540)='wg0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}}, 0x8003, 0xfff, 0xe652, 0x5, 0x84, 0x48, 0xff}, 0x9c) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x70, 0x8310000, 0x3ff, 0xff, 0x3, 0xa54, 0x0, 0x0, 0x10, 0x20000000}}, 0x50) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) socket(0x10, 0x3, 0x0) 191.633746ms ago: executing program 5 (id=10771): r0 = dup(0xffffffffffffffff) mmap(&(0x7f00005fd000/0x2000)=nil, 0x2000, 0x3000009, 0x40010, r0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000040)={0x8, 0x9, 0x4, {0x2, @vbi={0x9, 0x1, 0x7, 0x34565559, [0x34565348, 0xb22], [0x7], 0x1}}, 0x8}) socket(0x1d, 0x2, 0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) sendmsg$NFT_BATCH(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"/347], 0x14c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xffffffffffffff8a}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="113856583c6ec3caf8c1129a60be3afc59aa71fbb74288b8bee119bc8c4130ad5c426848bb81daed457a7c630ec57f4f11842b0162cf90f85b653362034ebe5ae057e316efe58a7fde200cf5fcd41c7026ed3542389f528eabc44af2867daa73e3885818524426222906c14e934527ee8c6702fb218410cb63d9b7d0b1c0fe47c3cf8cc43ce16b8496539154d4df204cab4974486bd222ef88107ad661b42f1e3735805215feb1e663e6c6a076bd6ee6ce0e11c746d6a75c5317d9cdbca51b3481cb4c489db78964eae6f52db598d7e1c435d4ac5c294fd731ad5c2c", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) socket(0x10, 0x3, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40088a01, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f000000b3c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f000000b480)={'dummy0\x00', 0x0}) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f000000b6c0), r6) sendmsg$ETHTOOL_MSG_EEE_GET(r6, &(0x7f000000bac0)={0x0, 0x0, &(0x7f000000ba80)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010026bd7000ffdbdf25170000000c00018008000100", @ANYRES32=r8, @ANYBLOB="115c2b22b381cf550e0fddaabb7a6c5a5f3b7714cd046c961a6c0d89ee458e49b41b9b9fef1fcb09c1d5a21f63e0ab3d99c97f873003ed1cb75ab6d3bafb353d07bbe62c4f5a5cc5b4d6278e0d121014c9648aea0b37c16b965a9fd8a932fc45d555fa3452751d8de23663d263dbf2232094148c5a226c6eede7a5ef3a4291f66e0ef6af3f2a487c9c6bb66a606dc5"], 0x20}, 0x1, 0x0, 0x0, 0x2000c001}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000040)={0xc000000e}) 0s ago: executing program 4 (id=10772): socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r5], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) kernel console output (not intermixed with test programs): SerialNumber=0 [ 3417.673808][ T4901] usb 2-1: config 0 descriptor?? [ 3417.697219][T24547] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10367'. [ 3417.713292][T24547] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10367'. [ 3417.926387][T24566] netlink: 'syz.4.10371': attribute type 12 has an invalid length. [ 3417.971465][T24568] FAULT_INJECTION: forcing a failure. [ 3417.971465][T24568] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3417.987192][T24568] CPU: 1 UID: 0 PID: 24568 Comm: syz.0.10372 Tainted: G L syzkaller #0 PREEMPT(full) [ 3417.987214][T24568] Tainted: [L]=SOFTLOCKUP [ 3417.987219][T24568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3417.987227][T24568] Call Trace: [ 3417.987232][T24568] [ 3417.987238][T24568] dump_stack_lvl+0xe8/0x150 [ 3417.987261][T24568] should_fail_ex+0x412/0x560 [ 3417.987283][T24568] _copy_to_user+0x31/0xb0 [ 3417.987298][T24568] simple_read_from_buffer+0xe1/0x170 [ 3417.987320][T24568] proc_fail_nth_read+0x1bb/0x230 [ 3417.987339][T24568] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3417.987358][T24568] ? rw_verify_area+0x2a6/0x4d0 [ 3417.987372][T24568] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3417.987390][T24568] vfs_read+0x20c/0xa70 [ 3417.987409][T24568] ? fdget_pos+0x246/0x320 [ 3417.987426][T24568] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 3417.987447][T24568] ? __pfx___mutex_lock+0x10/0x10 [ 3417.987462][T24568] ? __pfx_vfs_read+0x10/0x10 [ 3417.987476][T24568] ? __fget_files+0x2a/0x420 [ 3417.987496][T24568] ? __fget_files+0x3a0/0x420 [ 3417.987512][T24568] ? __fget_files+0x2a/0x420 [ 3417.987535][T24568] ksys_read+0x150/0x270 [ 3417.987550][T24568] ? __pfx_ksys_read+0x10/0x10 [ 3417.987565][T24568] ? asm_int80_emulation+0x1a/0x20 [ 3417.987581][T24568] do_int80_emulation+0x173/0x4d0 [ 3417.987595][T24568] ? trace_irq_disable+0x3b/0x150 [ 3417.987613][T24568] ? asm_int80_emulation+0x1a/0x20 [ 3417.987624][T24568] ? clear_bhb_loop+0x40/0x90 [ 3417.987636][T24568] ? clear_bhb_loop+0x40/0x90 [ 3417.987650][T24568] asm_int80_emulation+0x1a/0x20 [ 3417.987662][T24568] RIP: 0023:0xf71a5cab [ 3417.987674][T24568] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 3417.987685][T24568] RSP: 002b:00000000f545d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 3417.987700][T24568] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f545d5d0 [ 3417.987709][T24568] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 3417.987716][T24568] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3417.987724][T24568] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 3417.987731][T24568] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3417.987748][T24568] [ 3418.076286][ T4901] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 3418.485270][T24574] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 3418.648583][ T4901] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3418.658832][ T4901] usb 3-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=36.53 [ 3418.669790][ T4901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3418.745410][ T4901] usb 3-1: config 0 descriptor?? [ 3418.918328][ T4901] option 3-1:0.0: GSM modem (1-port) converter detected [ 3418.994829][T24590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3419.201477][ T4901] usb 3-1: USB disconnect, device number 25 [ 3419.208960][ T4901] option 3-1:0.0: device disconnected [ 3419.228094][T24590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3419.636790][T24633] FAULT_INJECTION: forcing a failure. [ 3419.636790][T24633] name failslab, interval 1, probability 0, space 0, times 0 [ 3419.653162][T24633] CPU: 0 UID: 0 PID: 24633 Comm: syz.5.10378 Tainted: G L syzkaller #0 PREEMPT(full) [ 3419.653184][T24633] Tainted: [L]=SOFTLOCKUP [ 3419.653189][T24633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3419.653197][T24633] Call Trace: [ 3419.653202][T24633] [ 3419.653209][T24633] dump_stack_lvl+0xe8/0x150 [ 3419.653232][T24633] should_fail_ex+0x412/0x560 [ 3419.653253][T24633] should_failslab+0xa8/0x100 [ 3419.653270][T24633] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 3419.653284][T24633] ? __alloc_skb+0x186/0x7d0 [ 3419.653297][T24633] ? __alloc_skb+0x1d0/0x7d0 [ 3419.653307][T24633] ? __local_bh_enable_ip+0xd0/0x130 [ 3419.653326][T24633] __alloc_skb+0x1d0/0x7d0 [ 3419.653338][T24633] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 3419.653356][T24633] netlink_sendmsg+0x5d4/0xb40 [ 3419.653380][T24633] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3419.653400][T24633] ? aa_sock_msg_perm+0xf1/0x1b0 [ 3419.653419][T24633] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 3419.653434][T24633] ____sys_sendmsg+0x972/0x9f0 [ 3419.653453][T24633] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3419.653470][T24633] ? kstrtoull+0x12f/0x1d0 [ 3419.653491][T24633] ___sys_sendmsg+0x2a5/0x360 [ 3419.653508][T24633] ? __pfx____sys_sendmsg+0x10/0x10 [ 3419.653523][T24633] ? get_pid_task+0x20/0x1f0 [ 3419.653534][T24633] ? get_pid_task+0x20/0x1f0 [ 3419.653544][T24633] ? get_pid_task+0x20/0x1f0 [ 3419.653569][T24633] ? __fget_files+0x2a/0x420 [ 3419.653586][T24633] ? __fget_files+0x3a0/0x420 [ 3419.653609][T24633] __sys_sendmsg+0x183/0x260 [ 3419.653624][T24633] ? __pfx___sys_sendmsg+0x10/0x10 [ 3419.653649][T24633] __do_fast_syscall_32+0x20d/0x640 [ 3419.653666][T24633] ? do_fast_syscall_32+0x33/0x70 [ 3419.653687][T24633] ? asm_int80_emulation+0x1a/0x20 [ 3419.653699][T24633] ? do_int80_emulation+0x274/0x4d0 [ 3419.653713][T24633] ? trace_irq_disable+0x3b/0x150 [ 3419.653734][T24633] do_fast_syscall_32+0x33/0x70 [ 3419.653748][T24633] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3419.653763][T24633] RIP: 0023:0xf6feef6c [ 3419.653775][T24633] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 3419.653786][T24633] RSP: 002b:00000000f53dd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 3419.653801][T24633] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 3419.653810][T24633] RDX: 0000000000004080 RSI: 0000000000000000 RDI: 0000000000000000 [ 3419.653818][T24633] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3419.653826][T24633] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 3419.653839][T24633] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3419.653857][T24633] [ 3419.961712][ T9312] usb 2-1: USB disconnect, device number 94 [ 3420.111451][T24642] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10382'. [ 3420.337874][T24660] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 3420.487681][ T5918] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 3421.016809][ T5918] usb 3-1: device descriptor read/64, error -71 [ 3421.267028][ T5918] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 3421.497104][ T5918] usb 3-1: device descriptor read/64, error -71 [ 3421.727986][ T5918] usb usb3-port1: attempt power cycle [ 3421.968062][T24712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3422.000125][T24712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3422.087748][ T5918] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 3422.107355][T25812] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 3422.117857][ T5918] usb 3-1: device descriptor read/8, error -71 [ 3422.247601][T25812] usb 1-1: device descriptor read/64, error -71 [ 3422.377434][ T5918] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 3422.398817][ T5918] usb 3-1: device descriptor read/8, error -71 [ 3422.488074][T25812] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 3422.514029][ T5918] usb usb3-port1: unable to enumerate USB device [ 3422.537045][T17301] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 3422.637224][T25812] usb 1-1: device descriptor read/64, error -71 [ 3422.739310][T17301] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3422.757234][T17301] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 3422.758157][T25812] usb usb1-port1: attempt power cycle [ 3422.787054][T17301] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 3422.796411][T17301] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3422.808907][T17301] usb 2-1: config 0 descriptor?? [ 3422.837115][ T5918] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 3422.942976][T24776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3422.956142][T24776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3423.005907][ T5918] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3423.018622][ T5918] usb 6-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=36.53 [ 3423.028086][ T5918] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3423.038737][ T5918] usb 6-1: config 0 descriptor?? [ 3423.046174][ T5918] option 6-1:0.0: GSM modem (1-port) converter detected [ 3423.137047][T25812] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 3423.157648][T25812] usb 1-1: device descriptor read/8, error -71 [ 3423.253438][ T5918] usb 6-1: USB disconnect, device number 77 [ 3423.262355][ T5918] option 6-1:0.0: device disconnected [ 3423.417023][T25812] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 3423.449290][T25812] usb 1-1: device descriptor read/8, error -71 [ 3423.567704][T25812] usb usb1-port1: unable to enumerate USB device [ 3423.857061][T24812] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10395'. [ 3424.817092][T17301] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 3424.967195][T17301] usb 3-1: device descriptor read/64, error -71 [ 3425.033932][T24821] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 3425.217086][T17301] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 3425.301265][T25812] usb 2-1: USB disconnect, device number 95 [ 3425.357233][T17301] usb 3-1: device descriptor read/64, error -71 [ 3425.518165][T17301] usb usb3-port1: attempt power cycle [ 3426.318015][T17301] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 3426.358525][T17301] usb 3-1: device descriptor read/8, error -71 [ 3426.427187][ T5918] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 3426.777470][ T5918] usb 6-1: Using ep0 maxpacket: 32 [ 3426.784440][ T5918] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 3426.810168][ T5918] usb 6-1: config 0 has no interface number 0 [ 3426.827017][ T5918] usb 6-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 3426.867331][ T5918] usb 6-1: config 0 interface 1 has no altsetting 0 [ 3426.892988][ T5918] usb 6-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 3426.943612][ T5918] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3426.962289][ T5918] usb 6-1: Product: syz [ 3426.979701][T17301] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 3426.994401][ T5918] usb 6-1: Manufacturer: syz [ 3427.004553][ T5918] usb 6-1: SerialNumber: syz [ 3427.010284][T17301] usb 3-1: device descriptor read/8, error -71 [ 3427.040452][ T5918] usb 6-1: config 0 descriptor?? [ 3427.047395][T25812] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 3427.117611][T17301] usb usb3-port1: unable to enumerate USB device [ 3427.177095][T25812] usb 1-1: device descriptor read/64, error -71 [ 3427.185010][T24944] IPVS: Error connecting to the multicast addr [ 3427.333194][T24948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3427.344091][T24948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3427.417960][T25812] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 3427.447165][T17301] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 3427.573128][T25812] usb 1-1: device descriptor read/64, error -71 [ 3427.607266][T17301] usb 2-1: Using ep0 maxpacket: 16 [ 3427.639797][T17301] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3427.655798][T17301] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3427.694225][T17301] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3427.697278][T25812] usb usb1-port1: attempt power cycle [ 3427.705371][T17301] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3427.717491][T17301] usb 2-1: Product: syz [ 3427.721818][T17301] usb 2-1: Manufacturer: syz [ 3427.726501][T17301] usb 2-1: SerialNumber: syz [ 3427.947855][T17301] usb 2-1: 0:2 : does not exist [ 3428.183439][T25812] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 3428.222153][T17301] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 3428.222679][T25812] usb 1-1: device descriptor read/8, error -71 [ 3428.280129][T17301] usb 2-1: USB disconnect, device number 96 [ 3428.767289][T25812] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 3428.798040][T25812] usb 1-1: device descriptor read/8, error -71 [ 3428.917805][T25812] usb usb1-port1: unable to enumerate USB device [ 3429.259041][ T5918] cx231xx 6-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 3429.287141][ T5918] cx231xx 6-1:0.1: Not found matching IAD interface [ 3429.327435][ T5918] usb 6-1: USB disconnect, device number 78 [ 3429.454648][T25000] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10412'. [ 3429.719199][T25008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3429.762650][T25008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3431.354092][T24999] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 3432.317150][ T5918] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 3432.530305][T17301] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 3432.717549][ T5918] usb 2-1: no configurations [ 3432.726671][ T5918] usb 2-1: can't read configurations, error -22 [ 3432.736147][T17301] usb 6-1: config 0 has no interfaces? [ 3432.768317][T17301] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 3432.776152][T25068] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10421'. [ 3432.827245][T17301] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3432.899697][T17301] usb 6-1: Product: syz [ 3432.923910][T17301] usb 6-1: Manufacturer: syz [ 3432.955283][T17301] usb 6-1: SerialNumber: syz [ 3432.970512][ T5918] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 3433.038047][T17301] usb 6-1: config 0 descriptor?? [ 3433.249233][ T5918] usb 2-1: no configurations [ 3433.253898][ T5918] usb 2-1: can't read configurations, error -22 [ 3433.260469][ T5918] usb usb2-port1: attempt power cycle [ 3433.587406][T25812] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 3433.729133][T25119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3433.739373][T25119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3433.757961][T25812] usb 1-1: Using ep0 maxpacket: 16 [ 3433.765021][T25812] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3433.775932][T25812] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3433.788540][T25119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3433.803213][T25812] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3433.805153][T17301] usb 6-1: USB disconnect, device number 79 [ 3433.814632][T25812] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3433.818714][ T5918] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 3433.829600][T25119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3433.843664][T25812] usb 1-1: Product: syz [ 3433.848832][T25812] usb 1-1: Manufacturer: syz [ 3433.853647][T25812] usb 1-1: SerialNumber: syz [ 3433.865994][ T5918] usb 2-1: no configurations [ 3433.874648][ T5918] usb 2-1: can't read configurations, error -22 [ 3434.017124][ T5918] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 3434.038515][ T5918] usb 2-1: no configurations [ 3434.043185][ T5918] usb 2-1: can't read configurations, error -22 [ 3434.050136][ T5918] usb usb2-port1: unable to enumerate USB device [ 3434.078923][T25812] usb 1-1: 0:2 : does not exist [ 3434.089271][T25812] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 3434.124124][T25812] usb 1-1: USB disconnect, device number 69 [ 3434.549568][T25154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3434.565739][T25154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3434.767150][ T5918] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 3435.017097][ T5918] usb 3-1: device descriptor read/64, error -71 [ 3435.145017][T25175] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 3435.259747][ T5918] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 3435.549037][ T5918] usb 3-1: device descriptor read/64, error -71 [ 3435.831128][ T5918] usb usb3-port1: attempt power cycle [ 3436.707038][ T5918] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 3436.727956][ T5918] usb 3-1: device descriptor read/8, error -71 [ 3436.939914][ T5912] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 3436.968076][ T5918] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 3436.988221][ T5918] usb 3-1: device descriptor read/8, error -71 [ 3437.045184][T25226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3437.058539][T25226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3437.099087][ T5918] usb usb3-port1: unable to enumerate USB device [ 3437.117090][ T5912] usb 1-1: Using ep0 maxpacket: 32 [ 3437.124481][ T5912] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 3437.132941][ T5912] usb 1-1: config 0 has no interface number 0 [ 3437.147090][ T5912] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 3437.167048][ T5912] usb 1-1: config 0 interface 1 has no altsetting 0 [ 3437.176270][ T5912] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 3437.185720][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3437.193982][ T5912] usb 1-1: Product: syz [ 3437.198311][ T5912] usb 1-1: Manufacturer: syz [ 3437.198331][T17301] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 3437.204556][ T5912] usb 1-1: SerialNumber: syz [ 3437.222302][ T5912] usb 1-1: config 0 descriptor?? [ 3437.259679][T25194] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10431'. [ 3437.357188][T17301] usb 6-1: device descriptor read/64, error -71 [ 3437.515883][T25267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3437.527266][T25267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3437.623404][T17301] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 3437.780296][T17301] usb 6-1: device descriptor read/64, error -71 [ 3437.888047][T17301] usb usb6-port1: attempt power cycle [ 3438.587035][T17301] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 3438.671254][T17301] usb 6-1: device descriptor read/8, error -71 [ 3438.987164][T17301] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 3439.005330][T25281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3439.082935][T17301] usb 6-1: device descriptor read/8, error -71 [ 3439.162830][T25281] 8021q: adding VLAN 0 to HW filter on device team0 [ 3439.191966][T25281] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 3439.197487][T17301] usb usb6-port1: unable to enumerate USB device [ 3439.366182][T25298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3439.421619][T25298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3440.111700][ T5912] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 3440.174556][ T5912] cx231xx 1-1:0.1: Not found matching IAD interface [ 3440.230116][ T5912] usb 1-1: USB disconnect, device number 70 [ 3440.652022][T25351] FAULT_INJECTION: forcing a failure. [ 3440.652022][T25351] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3440.682675][T25351] CPU: 0 UID: 0 PID: 25351 Comm: syz.4.10445 Tainted: G L syzkaller #0 PREEMPT(full) [ 3440.682703][T25351] Tainted: [L]=SOFTLOCKUP [ 3440.682708][T25351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3440.682718][T25351] Call Trace: [ 3440.682726][T25351] [ 3440.682735][T25351] dump_stack_lvl+0xe8/0x150 [ 3440.682773][T25351] should_fail_ex+0x412/0x560 [ 3440.682812][T25351] _copy_from_user+0x2d/0xb0 [ 3440.682837][T25351] ucma_query_route+0x142/0xb20 [ 3440.682869][T25351] ? aa_file_perm+0x50e/0x15e0 [ 3440.682897][T25351] ? __pfx_ucma_query_route+0x10/0x10 [ 3440.682966][T25351] ucma_write+0x24e/0x2f0 [ 3440.682998][T25351] ? __pfx_ucma_write+0x10/0x10 [ 3440.683025][T25351] ? security_file_permission+0x75/0x260 [ 3440.683056][T25351] ? rw_verify_area+0x255/0x4d0 [ 3440.683081][T25351] ? __pfx_ucma_write+0x10/0x10 [ 3440.683110][T25351] vfs_write+0x29a/0xb90 [ 3440.683141][T25351] ? __pfx_vfs_write+0x10/0x10 [ 3440.683168][T25351] ? __fget_files+0x2a/0x420 [ 3440.683203][T25351] ? __fget_files+0x2a/0x420 [ 3440.683232][T25351] ? __fget_files+0x3a0/0x420 [ 3440.683262][T25351] ? __fget_files+0x2a/0x420 [ 3440.683302][T25351] ksys_write+0x150/0x270 [ 3440.683327][T25351] ? __pfx_ksys_write+0x10/0x10 [ 3440.683358][T25351] __do_fast_syscall_32+0x20d/0x640 [ 3440.683396][T25351] ? do_fast_syscall_32+0x33/0x70 [ 3440.683419][T25351] ? asm_int80_emulation+0x1a/0x20 [ 3440.683440][T25351] ? do_int80_emulation+0x274/0x4d0 [ 3440.683464][T25351] ? trace_irq_disable+0x3b/0x150 [ 3440.683503][T25351] do_fast_syscall_32+0x33/0x70 [ 3440.683531][T25351] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3440.683556][T25351] RIP: 0023:0xf703ef6c [ 3440.683577][T25351] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 3440.683597][T25351] RSP: 002b:00000000f542d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 3440.683621][T25351] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800001c0 [ 3440.683637][T25351] RDX: 0000000000000018 RSI: 0000000000000000 RDI: 0000000000000000 [ 3440.683651][T25351] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3440.683663][T25351] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 3440.683675][T25351] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3440.683705][T25351] [ 3441.477451][ T5918] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 3441.621528][ T5918] usb 3-1: device descriptor read/64, error -71 [ 3441.685070][T25413] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 3441.693074][T17301] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 3441.707788][T25413] netlink: 'syz.1.10456': attribute type 12 has an invalid length. [ 3441.733919][T25417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3441.758825][T25417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3441.827293][ T9312] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 3441.877142][ T5918] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 3441.888439][T17301] usb 6-1: config 0 has no interfaces? [ 3441.899053][T17301] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 3441.908662][T17301] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3441.918562][T17301] usb 6-1: Product: syz [ 3441.922757][T17301] usb 6-1: Manufacturer: syz [ 3441.928140][T17301] usb 6-1: SerialNumber: syz [ 3441.936016][T17301] usb 6-1: config 0 descriptor?? [ 3441.989722][ T9312] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3442.000475][ T9312] usb 1-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=36.53 [ 3442.009782][ T9312] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3442.017102][ T5918] usb 3-1: device descriptor read/64, error -71 [ 3442.025295][ T9312] usb 1-1: config 0 descriptor?? [ 3442.035702][ T9312] option 1-1:0.0: GSM modem (1-port) converter detected [ 3442.127564][ T5918] usb usb3-port1: attempt power cycle [ 3442.225747][ T9312] usb 6-1: USB disconnect, device number 84 [ 3442.255996][T25812] usb 1-1: USB disconnect, device number 71 [ 3442.263429][T25812] option 1-1:0.0: device disconnected [ 3442.477158][ T5918] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 3442.504486][ T5918] usb 3-1: device descriptor read/8, error -71 [ 3442.788006][ T5918] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 3442.979015][ T5918] usb 3-1: device descriptor read/8, error -71 [ 3443.261955][ T5918] usb usb3-port1: unable to enumerate USB device [ 3443.307991][T25486] FAULT_INJECTION: forcing a failure. [ 3443.307991][T25486] name failslab, interval 1, probability 0, space 0, times 0 [ 3443.341024][T25486] CPU: 0 UID: 0 PID: 25486 Comm: syz.1.10460 Tainted: G L syzkaller #0 PREEMPT(full) [ 3443.341058][T25486] Tainted: [L]=SOFTLOCKUP [ 3443.341067][T25486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3443.341079][T25486] Call Trace: [ 3443.341088][T25486] [ 3443.341097][T25486] dump_stack_lvl+0xe8/0x150 [ 3443.341133][T25486] should_fail_ex+0x412/0x560 [ 3443.341170][T25486] should_failslab+0xa8/0x100 [ 3443.341201][T25486] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 3443.341225][T25486] ? __alloc_skb+0x186/0x7d0 [ 3443.341245][T25486] ? __alloc_skb+0x1d0/0x7d0 [ 3443.341264][T25486] ? __local_bh_enable_ip+0xd0/0x130 [ 3443.341301][T25486] __alloc_skb+0x1d0/0x7d0 [ 3443.341337][T25486] netlink_sendmsg+0x5d4/0xb40 [ 3443.341383][T25486] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3443.341420][T25486] ? aa_sock_msg_perm+0xf1/0x1b0 [ 3443.341454][T25486] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 3443.341484][T25486] ____sys_sendmsg+0x972/0x9f0 [ 3443.341523][T25486] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3443.341553][T25486] ? kstrtoull+0x12f/0x1d0 [ 3443.341592][T25486] ___sys_sendmsg+0x2a5/0x360 [ 3443.341624][T25486] ? __pfx____sys_sendmsg+0x10/0x10 [ 3443.341653][T25486] ? get_pid_task+0x20/0x1f0 [ 3443.341673][T25486] ? get_pid_task+0x20/0x1f0 [ 3443.341692][T25486] ? get_pid_task+0x20/0x1f0 [ 3443.341741][T25486] ? __fget_files+0x2a/0x420 [ 3443.341771][T25486] ? __fget_files+0x3a0/0x420 [ 3443.341814][T25486] __sys_sendmsg+0x183/0x260 [ 3443.341842][T25486] ? __pfx___sys_sendmsg+0x10/0x10 [ 3443.341891][T25486] __do_fast_syscall_32+0x20d/0x640 [ 3443.341920][T25486] ? do_fast_syscall_32+0x33/0x70 [ 3443.341945][T25486] ? asm_int80_emulation+0x1a/0x20 [ 3443.341966][T25486] ? do_int80_emulation+0x274/0x4d0 [ 3443.341991][T25486] ? trace_irq_disable+0x3b/0x150 [ 3443.342027][T25486] do_fast_syscall_32+0x33/0x70 [ 3443.342054][T25486] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3443.342080][T25486] RIP: 0023:0xf707ef6c [ 3443.342100][T25486] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 3443.342120][T25486] RSP: 002b:00000000f546d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 3443.342144][T25486] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 3443.342160][T25486] RDX: 0000000000040840 RSI: 0000000000000000 RDI: 0000000000000000 [ 3443.342175][T25486] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3443.342188][T25486] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 3443.342203][T25486] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3443.342235][T25486] [ 3443.765325][T25492] xt_hashlimit: size too large, truncated to 1048576 [ 3443.880140][T25492] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 3443.910545][T25495] sg_write: data in/out 437212/166 bytes for SCSI command 0xff-- guessing data in; [ 3443.910545][T25495] program syz.0.10461 not setting count and/or reply_len properly [ 3444.287182][T25504] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 3444.299102][T25504] netlink: 'syz.1.10467': attribute type 12 has an invalid length. [ 3444.507183][T25812] usb 6-1: new full-speed USB device number 85 using dummy_hcd [ 3444.637427][T25555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3444.652282][T25555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3444.672276][T25812] usb 6-1: unable to get BOS descriptor or descriptor too short [ 3444.691940][T25812] usb 6-1: not running at top speed; connect to a high speed hub [ 3444.701925][T25812] usb 6-1: config 255 has an invalid interface number: 209 but max is 0 [ 3444.711612][T25812] usb 6-1: config 255 has no interface number 0 [ 3444.718381][T25812] usb 6-1: config 255 interface 209 altsetting 10 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 3444.730481][ T5912] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 3444.738317][T25812] usb 6-1: config 255 interface 209 has no altsetting 0 [ 3444.747891][T25812] usb 6-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=13.a2 [ 3444.757198][ T9312] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 3444.764969][T25812] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3444.774371][T25812] usb 6-1: Product: syz [ 3444.778790][T25812] usb 6-1: Manufacturer: syz [ 3444.784460][T25812] usb 6-1: SerialNumber: syz [ 3444.887769][ T5912] usb 3-1: no configurations [ 3444.892522][ T5912] usb 3-1: can't read configurations, error -22 [ 3444.919227][ T9312] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3444.931246][ T9312] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 130, using maximum allowed: 30 [ 3444.943833][ T9312] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 130 [ 3444.957822][ T9312] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 3444.977737][ T9312] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3445.014090][ T9312] usb 2-1: config 0 descriptor?? [ 3445.037230][ T5912] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 3445.047636][ T9312] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 3445.178173][T25812] uvcvideo 6-1:255.209: Found UVC 0.00 device syz (05ac:8501) [ 3445.185754][T25812] uvcvideo 6-1:255.209: No valid video chain found. [ 3445.198052][T25812] usb 6-1: USB disconnect, device number 85 [ 3445.218366][ T5912] usb 3-1: no configurations [ 3445.223101][ T5912] usb 3-1: can't read configurations, error -22 [ 3445.231157][ T5912] usb usb3-port1: attempt power cycle [ 3445.304587][T25597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3445.314754][T25597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3445.331155][ T29] kauditd_printk_skb: 146 callbacks suppressed [ 3445.331176][ T29] audit: type=1326 audit(1774155056.669:4203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25596 comm="syz.4.10472" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x0 [ 3445.544052][T25604] tipc: Enabled bearer , priority 0 [ 3445.553120][T25604] syzkaller0: entered promiscuous mode [ 3445.558820][T25604] syzkaller0: entered allmulticast mode [ 3445.577290][ T5912] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 3445.588938][T25603] tipc: Resetting bearer [ 3445.610855][ T5912] usb 3-1: no configurations [ 3445.615493][ T5912] usb 3-1: can't read configurations, error -22 [ 3445.623749][T25603] tipc: Disabling bearer [ 3445.757403][ T5912] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 3445.786161][T25618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3445.798663][ T5912] usb 3-1: no configurations [ 3445.803313][ T5912] usb 3-1: can't read configurations, error -22 [ 3445.814282][T25618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3445.838108][ T5912] usb usb3-port1: unable to enumerate USB device [ 3446.097471][ T5918] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 3446.217873][T25652] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 3446.258846][ T5918] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 3446.276729][T25652] netlink: 128 bytes leftover after parsing attributes in process `syz.0.10477'. [ 3446.375790][ T5918] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 3446.424855][ T5918] usb 6-1: New USB device found, idVendor=0499, idProduct=103e, bcdDevice=4e.18 [ 3446.424880][ T5918] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3446.424893][ T5918] usb 6-1: Product: syz [ 3446.424903][ T5918] usb 6-1: Manufacturer: syz [ 3446.424912][ T5918] usb 6-1: SerialNumber: syz [ 3446.428403][ T5918] usb 6-1: config 0 descriptor?? [ 3447.434797][T25664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3447.485212][T25664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3447.595308][T25664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3447.624441][T25664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3447.722083][ T5912] usb 2-1: USB disconnect, device number 101 [ 3447.842088][T25682] FAULT_INJECTION: forcing a failure. [ 3447.842088][T25682] name failslab, interval 1, probability 0, space 0, times 0 [ 3447.926114][T25682] CPU: 0 UID: 0 PID: 25682 Comm: syz.1.10481 Tainted: G L syzkaller #0 PREEMPT(full) [ 3447.926150][T25682] Tainted: [L]=SOFTLOCKUP [ 3447.926158][T25682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3447.926176][T25682] Call Trace: [ 3447.926184][T25682] [ 3447.926193][T25682] dump_stack_lvl+0xe8/0x150 [ 3447.926225][T25682] should_fail_ex+0x412/0x560 [ 3447.926247][T25682] should_failslab+0xa8/0x100 [ 3447.926268][T25682] ? vm_area_dup+0x2b/0x680 [ 3447.926289][T25682] kmem_cache_alloc_noprof+0x87/0x650 [ 3447.926320][T25682] vm_area_dup+0x2b/0x680 [ 3447.926346][T25682] __split_vma+0x1dc/0xa40 [ 3447.926374][T25682] ? __pfx___calc_delta+0x10/0x10 [ 3447.926397][T25682] ? __pfx___split_vma+0x10/0x10 [ 3447.926424][T25682] ? can_vma_merge_left+0x191/0x3e0 [ 3447.926448][T25682] vma_modify+0xa30/0x2060 [ 3447.926492][T25682] vma_modify_flags+0x24b/0x330 [ 3447.926521][T25682] ? __pfx_vma_modify_flags+0x10/0x10 [ 3447.926550][T25682] ? __pfx_ksm_madvise+0x10/0x10 [ 3447.926565][T25682] ? __lock_acquire+0x6b5/0x2cf0 [ 3447.926587][T25682] madvise_vma_behavior+0x1c5c/0x4300 [ 3447.926619][T25682] ? ima_match_policy+0x112/0x21e0 [ 3447.926646][T25682] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 3447.926687][T25682] ? process_measurement+0x7ce/0x1c80 [ 3447.926704][T25682] ? up_write+0x1ab/0x410 [ 3447.926719][T25682] ? process_measurement+0x195e/0x1c80 [ 3447.926733][T25682] ? process_measurement+0x371/0x1c80 [ 3447.926762][T25682] ? __pfx_process_measurement+0x10/0x10 [ 3447.926787][T25682] ? tomoyo_check_open_permission+0x38e/0x470 [ 3447.926815][T25682] ? tomoyo_check_open_permission+0x1d3/0x470 [ 3447.926844][T25682] ? __lock_acquire+0x6b5/0x2cf0 [ 3447.926868][T25682] ? mas_prev_slot+0xb31/0xbb0 [ 3447.926892][T25682] ? find_vma_prev+0x123/0x1b0 [ 3447.926921][T25682] ? __pfx_find_vma_prev+0x10/0x10 [ 3447.926960][T25682] ? __lock_acquire+0x6b5/0x2cf0 [ 3447.926991][T25682] madvise_walk_vmas+0x573/0xae0 [ 3447.927033][T25682] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 3447.927051][T25682] ? blk_start_plug+0x6e/0x1b0 [ 3447.927070][T25682] madvise_do_behavior+0x386/0x540 [ 3447.927100][T25682] ? __pfx_madvise_do_behavior+0x10/0x10 [ 3447.927133][T25682] ? iov_iter_iovec_advance+0x1e0/0x290 [ 3447.927158][T25682] ? madvise_should_skip+0x2c6/0x2f0 [ 3447.927183][T25682] __se_sys_process_madvise+0x55e/0x980 [ 3447.927207][T25682] ? get_pid_task+0x20/0x1f0 [ 3447.927224][T25682] ? get_pid_task+0x20/0x1f0 [ 3447.927251][T25682] ? __pfx___se_sys_process_madvise+0x10/0x10 [ 3447.927290][T25682] ? ksys_write+0x1e6/0x270 [ 3447.927343][T25682] ? ksys_write+0x242/0x270 [ 3447.927360][T25682] ? __ia32_sys_process_madvise+0x20/0xc0 [ 3447.927382][T25682] __do_fast_syscall_32+0x20d/0x640 [ 3447.927409][T25682] ? do_fast_syscall_32+0x33/0x70 [ 3447.927429][T25682] ? asm_int80_emulation+0x1a/0x20 [ 3447.927448][T25682] ? do_int80_emulation+0x274/0x4d0 [ 3447.927469][T25682] ? trace_irq_disable+0x3b/0x150 [ 3447.927491][T25682] do_fast_syscall_32+0x33/0x70 [ 3447.927505][T25682] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3447.927520][T25682] RIP: 0023:0xf707ef6c [ 3447.927537][T25682] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 3447.927555][T25682] RSP: 002b:00000000f546d50c EFLAGS: 00000206 ORIG_RAX: 00000000000001b8 [ 3447.927578][T25682] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 3447.927592][T25682] RDX: 0000000000000002 RSI: 000000000000000c RDI: 0000000000000000 [ 3447.927604][T25682] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3447.927616][T25682] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 3447.927626][T25682] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3447.927644][T25682] [ 3448.808345][T25686] FAULT_INJECTION: forcing a failure. [ 3448.808345][T25686] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3448.827656][T25686] CPU: 1 UID: 0 PID: 25686 Comm: syz.4.10483 Tainted: G L syzkaller #0 PREEMPT(full) [ 3448.827691][T25686] Tainted: [L]=SOFTLOCKUP [ 3448.827699][T25686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3448.827711][T25686] Call Trace: [ 3448.827721][T25686] [ 3448.827729][T25686] dump_stack_lvl+0xe8/0x150 [ 3448.827770][T25686] should_fail_ex+0x412/0x560 [ 3448.827807][T25686] _copy_to_user+0x31/0xb0 [ 3448.827833][T25686] simple_read_from_buffer+0xe1/0x170 [ 3448.827869][T25686] proc_fail_nth_read+0x1bb/0x230 [ 3448.827904][T25686] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3448.827938][T25686] ? rw_verify_area+0x2a6/0x4d0 [ 3448.827961][T25686] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3448.827992][T25686] vfs_read+0x20c/0xa70 [ 3448.828013][T25686] ? fdget_pos+0x246/0x320 [ 3448.828060][T25686] ? __pfx___mutex_lock+0x10/0x10 [ 3448.828087][T25686] ? __pfx_vfs_read+0x10/0x10 [ 3448.828111][T25686] ? __fget_files+0x2a/0x420 [ 3448.828145][T25686] ? __fget_files+0x3a0/0x420 [ 3448.828173][T25686] ? __fget_files+0x2a/0x420 [ 3448.828213][T25686] ksys_read+0x150/0x270 [ 3448.828238][T25686] ? __pfx_ksys_read+0x10/0x10 [ 3448.828265][T25686] ? asm_int80_emulation+0x1a/0x20 [ 3448.828292][T25686] do_int80_emulation+0x173/0x4d0 [ 3448.828316][T25686] ? asm_int80_emulation+0x1a/0x20 [ 3448.828335][T25686] ? clear_bhb_loop+0x40/0x90 [ 3448.828356][T25686] ? clear_bhb_loop+0x40/0x90 [ 3448.828381][T25686] asm_int80_emulation+0x1a/0x20 [ 3448.828402][T25686] RIP: 0023:0xf7175cab [ 3448.828421][T25686] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 3448.828439][T25686] RSP: 002b:00000000f542d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 3448.828463][T25686] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f542d5d0 [ 3448.828477][T25686] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 3448.828490][T25686] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3448.828502][T25686] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 3448.828514][T25686] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3448.828545][T25686] [ 3449.145067][T25692] tipc: Cannot configure node identity twice [ 3449.163878][ T5918] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 3449.269479][ T5918] usb 6-1: USB disconnect, device number 86 [ 3449.684735][T25736] bridge0: port 2(bridge_slave_1) entered disabled state [ 3449.692039][T25736] bridge0: port 1(bridge_slave_0) entered disabled state [ 3450.342917][T25736] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3450.487804][ T5912] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 3450.502988][T25736] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3450.539179][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 3450.545682][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 3450.706145][ T5912] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3450.741442][ T5912] usb 2-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=36.53 [ 3450.771745][ T5912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3450.982764][ T5912] usb 2-1: config 0 descriptor?? [ 3451.009649][ T5912] option 2-1:0.0: GSM modem (1-port) converter detected [ 3451.270776][ T5912] usb 2-1: USB disconnect, device number 102 [ 3451.285121][ T5912] option 2-1:0.0: device disconnected [ 3451.400149][T25736] erspan0: left allmulticast mode [ 3451.405557][T25736] macvtap0: left promiscuous mode [ 3451.411265][T25736] macvtap0: left allmulticast mode [ 3451.696230][ T1038] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3451.709671][ T1038] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3451.754506][ T1038] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3452.125475][T17301] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 3452.509802][T17062] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 3452.543547][T17301] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 3452.554228][T17301] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3452.567884][T17301] usb 3-1: Product: syz [ 3452.572101][T17301] usb 3-1: Manufacturer: syz [ 3452.576717][T17301] usb 3-1: SerialNumber: syz [ 3452.590328][T17301] usb 3-1: config 0 descriptor?? [ 3452.600913][T17301] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 3452.616057][T17301] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 3452.627905][T17301] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 3452.643767][T17301] usb 3-1: media controller created [ 3452.661650][T17301] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3452.688705][T17062] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 130, using maximum allowed: 30 [ 3452.702717][T17062] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3452.730929][T17062] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 3452.867120][ T5912] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 3452.876342][ T5826] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 3452.885626][T17062] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 3452.898823][T17062] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3452.910573][T17301] DVB: Unable to find symbol mt352_attach() [ 3452.931265][T17062] usb 2-1: config 0 descriptor?? [ 3452.965632][T17301] DVB: Unable to find symbol nxt6000_attach() [ 3452.975906][T17301] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 3453.004093][T17301] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input143 [ 3453.149311][ T5826] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3453.167606][ T5826] usb 6-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=36.53 [ 3453.176746][ T5826] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3453.200377][ T5912] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 3453.202148][T17301] dvb-usb: schedule remote query interval to 1000 msecs. [ 3453.210126][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3453.219276][T17301] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 3453.235905][ T5826] usb 6-1: config 0 descriptor?? [ 3453.258907][T17301] dvb-usb: bulk message failed: -22 (7/0) [ 3453.268198][ T5826] option 6-1:0.0: GSM modem (1-port) converter detected [ 3453.285618][ T5912] usb 1-1: Product: syz [ 3453.285644][T17301] dvb-usb: bulk message failed: -22 (7/0) [ 3453.307094][ T5912] usb 1-1: Manufacturer: syz [ 3453.317253][ T5912] usb 1-1: SerialNumber: syz [ 3453.317596][T17301] usb 3-1: USB disconnect, device number 46 [ 3453.338828][ T5912] usb 1-1: config 0 descriptor?? [ 3453.362337][ T5912] hub 1-1:0.0: bad descriptor, ignoring hub [ 3453.363571][T17062] hid_parser_main: 109 callbacks suppressed [ 3453.363590][T17062] corsair 0003:1B1C:1B3E.00EE: unknown main item tag 0x0 [ 3453.369933][ T5912] hub 1-1:0.0: probe with driver hub failed with error -5 [ 3453.384063][T17062] corsair 0003:1B1C:1B3E.00EE: unknown main item tag 0x0 [ 3453.430982][T17062] corsair 0003:1B1C:1B3E.00EE: unknown main item tag 0x0 [ 3453.459761][T17301] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 3453.472962][T17062] corsair 0003:1B1C:1B3E.00EE: unknown main item tag 0x0 [ 3453.480212][T17062] corsair 0003:1B1C:1B3E.00EE: unknown main item tag 0x0 [ 3453.499337][T17062] corsair 0003:1B1C:1B3E.00EE: unknown main item tag 0x0 [ 3453.506660][T17062] corsair 0003:1B1C:1B3E.00EE: unknown main item tag 0x0 [ 3453.514139][T17062] corsair 0003:1B1C:1B3E.00EE: unknown main item tag 0x0 [ 3453.521798][T17062] corsair 0003:1B1C:1B3E.00EE: unknown main item tag 0x0 [ 3453.528940][T17062] corsair 0003:1B1C:1B3E.00EE: unknown main item tag 0x0 [ 3453.552814][T17062] corsair 0003:1B1C:1B3E.00EE: hidraw0: USB HID v6f.fd Device [HID 1b1c:1b3e] on usb-dummy_hcd.1-1/input0 [ 3453.606761][ T4901] usb 6-1: USB disconnect, device number 87 [ 3453.633359][ T4901] option 6-1:0.0: device disconnected [ 3454.030638][T17301] usb 2-1: USB disconnect, device number 103 [ 3454.777079][T17301] usb 6-1: new full-speed USB device number 88 using dummy_hcd [ 3454.940487][T17301] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3454.964952][T17301] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 3454.975878][T17062] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 3455.003886][T17301] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 3455.031245][T17301] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3455.063412][T17301] usb 6-1: config 0 descriptor?? [ 3455.161176][T17062] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 130, using maximum allowed: 30 [ 3455.172383][T17062] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3455.185059][T17301] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 3455.200228][T17301] dvb-usb: bulk message failed: -22 (3/0) [ 3455.206104][T17062] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 3455.235063][T17062] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 3455.253422][T17062] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3455.270209][T17301] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 3455.284378][T17062] usb 3-1: config 0 descriptor?? [ 3455.294234][T17301] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 3455.309499][T17301] usb 6-1: media controller created [ 3455.342327][T25899] kernel read not supported for file /sg0 (pid: 25899 comm: syz.5.10499) [ 3455.359087][T17301] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3455.564715][T17301] dvb-usb: bulk message failed: -22 (6/0) [ 3455.724768][T17062] corsair 0003:1B1C:1B3E.00EF: unexpected long global item [ 3456.127192][T17301] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 3456.135313][T17062] corsair 0003:1B1C:1B3E.00EF: parse failed [ 3456.144777][T17301] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input144 [ 3456.158232][T17062] corsair 0003:1B1C:1B3E.00EF: probe with driver corsair failed with error -22 [ 3456.180557][T17301] dvb-usb: schedule remote query interval to 150 msecs. [ 3456.187668][T17062] usb 3-1: USB disconnect, device number 47 [ 3456.195682][T17301] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 3456.223586][T17301] usb 6-1: USB disconnect, device number 88 [ 3456.434303][ T5912] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 3456.623967][T17301] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 3456.663693][ T5912] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 3456.696703][ T5912] dib0700: firmware download failed at 7 with -22 [ 3456.730833][ T5912] usb 1-1: USB disconnect, device number 72 [ 3456.948878][T25985] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10503'. [ 3457.897417][T17301] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 3458.256900][T17301] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3458.286728][T17301] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3458.506960][T17301] usb 2-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 3458.533542][T26012] xt_CT: No such helper "snmp" [ 3458.579057][T17301] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3458.637168][T17301] usb 2-1: Product: syz [ 3458.647015][T17301] usb 2-1: Manufacturer: syz [ 3458.666415][T17301] usb 2-1: SerialNumber: syz [ 3458.944100][T25993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3458.973716][T25993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3459.070386][T17062] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 3459.089856][T17301] usb 2-1: unit 132 not found! [ 3459.337055][T17062] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3459.357304][T17062] usb 1-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=36.53 [ 3459.366422][T17062] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3459.408034][T17301] usb 2-1: USB disconnect, device number 104 [ 3459.720720][T26084] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10510'. [ 3459.898792][T17062] usb 1-1: config 0 descriptor?? [ 3460.213935][T17062] option 1-1:0.0: GSM modem (1-port) converter detected [ 3460.477595][T26033] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10509'. [ 3460.553101][T17301] usb 1-1: USB disconnect, device number 73 [ 3460.560494][T17301] option 1-1:0.0: device disconnected [ 3460.817280][ T5912] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 3460.858013][T25812] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 3460.978999][ T5912] usb 2-1: no configurations [ 3460.983780][ T5912] usb 2-1: can't read configurations, error -22 [ 3461.025075][T26164] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 3461.028753][T25812] usb 6-1: config 0 has no interfaces? [ 3461.067298][T25812] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 3461.097592][T25812] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3461.105857][T25812] usb 6-1: Product: syz [ 3461.117438][T25812] usb 6-1: Manufacturer: syz [ 3461.122057][T25812] usb 6-1: SerialNumber: syz [ 3461.137495][ T5912] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 3461.158283][T25812] usb 6-1: config 0 descriptor?? [ 3461.908854][ T5912] usb 2-1: no configurations [ 3461.913510][ T5912] usb 2-1: can't read configurations, error -22 [ 3462.011251][ T5912] usb usb2-port1: attempt power cycle [ 3462.153878][T26189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3462.197625][T25812] usb 6-1: USB disconnect, device number 89 [ 3462.257269][T26189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3462.398570][ T5912] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 3462.457119][ T5912] usb 2-1: no configurations [ 3462.461833][ T5912] usb 2-1: can't read configurations, error -22 [ 3462.597150][ T5912] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 3462.618504][ T5912] usb 2-1: no configurations [ 3462.623114][ T5912] usb 2-1: can't read configurations, error -22 [ 3462.630063][ T5912] usb usb2-port1: unable to enumerate USB device [ 3462.777077][T17301] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 3462.900234][T26205] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10519'. [ 3462.949206][T17301] usb 1-1: Using ep0 maxpacket: 8 [ 3462.978263][T17301] usb 1-1: config index 0 descriptor too short (expected 5924, got 36) [ 3463.037032][T17301] usb 1-1: config 250 has an invalid interface number: 228 but max is -1 [ 3463.055791][T17301] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 3463.075151][T17301] usb 1-1: config 250 has no interface number 0 [ 3463.101282][T17301] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 3463.147905][T17301] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 3463.185521][T17301] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3463.208224][T26208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3463.218265][T17301] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 3463.229610][T26208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3463.245332][T17301] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 3463.265873][T17301] usb 1-1: config 250 interface 228 has no altsetting 0 [ 3463.277317][T17301] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 3463.286654][T17301] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 3463.295421][T17301] usb 1-1: Product: syz [ 3463.307407][T17301] usb 1-1: SerialNumber: syz [ 3463.332703][T17301] hub 1-1:250.228: bad descriptor, ignoring hub [ 3463.343162][T17301] hub 1-1:250.228: probe with driver hub failed with error -5 [ 3463.545595][T17301] usblp 1-1:250.228: usblp0: USB Bidirectional printer dev 74 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 3463.857491][T17301] usb 1-1: reset high-speed USB device number 74 using dummy_hcd [ 3464.077260][ T5912] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 3464.188995][T26246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3464.199086][T26246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3464.227917][ T5912] usb 2-1: Using ep0 maxpacket: 32 [ 3464.243189][ T5912] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 3464.254065][ T5912] usb 2-1: config 0 has no interface number 0 [ 3464.261259][ T5912] usb 2-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 3464.274221][ T5912] usb 2-1: config 0 interface 1 has no altsetting 0 [ 3464.315889][ T5912] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 3464.325942][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3464.377468][ T5912] usb 2-1: Product: syz [ 3464.381688][ T5912] usb 2-1: Manufacturer: syz [ 3464.442941][ T5912] usb 2-1: SerialNumber: syz [ 3464.449367][ T5912] usb 2-1: config 0 descriptor?? [ 3464.920738][ T5912] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 3465.027463][T17062] usb 1-1: USB disconnect, device number 74 [ 3465.033974][ T5912] cx231xx 2-1:0.1: Failed to read PCB config [ 3465.034047][ T5912] cx231xx 2-1:0.1: probe with driver cx231xx failed with error -71 [ 3465.038499][ T5912] usb 2-1: USB disconnect, device number 109 [ 3465.067339][T17062] usblp0: removed [ 3465.357975][T26283] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10525'. [ 3465.605188][ T5912] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 3465.946097][ T29] audit: type=1326 audit(1774155077.009:4204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26284 comm="syz.2.10526" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 3466.187011][ T5912] usb 2-1: Using ep0 maxpacket: 32 [ 3466.371797][ T29] audit: type=1326 audit(1774155077.009:4205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26284 comm="syz.2.10526" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 3466.373152][ T5912] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 3466.395777][ T29] audit: type=1326 audit(1774155077.009:4206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26284 comm="syz.2.10526" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 3466.617792][ T29] audit: type=1326 audit(1774155077.009:4207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26284 comm="syz.2.10526" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 3466.648356][ T5912] usb 2-1: config 0 has no interface number 0 [ 3466.654515][ T5912] usb 2-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 3466.682370][ T5912] usb 2-1: config 0 interface 1 has no altsetting 0 [ 3466.690093][ T5912] usb 2-1: string descriptor 0 read error: -71 [ 3466.696854][ T5912] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 3466.705981][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3466.720116][ T5912] usb 2-1: config 0 descriptor?? [ 3466.725706][ T5912] usb 2-1: can't set config #0, error -71 [ 3466.735138][ T5912] usb 2-1: USB disconnect, device number 110 [ 3466.806989][ T29] audit: type=1326 audit(1774155077.009:4208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26284 comm="syz.2.10526" exe="/root/syz-executor" sig=0 arch=40000003 syscall=150 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 3467.077983][ T29] audit: type=1326 audit(1774155077.169:4209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26284 comm="syz.2.10526" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 3467.101933][ T29] audit: type=1326 audit(1774155077.169:4210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26284 comm="syz.2.10526" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x7ffc0000 [ 3470.563105][T26368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3470.643833][T26368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3471.082776][T26389] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 3471.213221][T25812] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 3471.267068][T17062] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 3471.382287][T25812] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 130, using maximum allowed: 30 [ 3471.393386][T25812] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3471.407970][T25812] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 3471.421569][T25812] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 3471.437830][T25812] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3471.438987][T17062] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3471.450552][T25812] usb 6-1: config 0 descriptor?? [ 3471.459639][T17062] usb 2-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=36.53 [ 3471.471444][T17062] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3471.486299][T17062] usb 2-1: config 0 descriptor?? [ 3471.505831][T17062] option 2-1:0.0: GSM modem (1-port) converter detected [ 3471.761094][ T5912] usb 2-1: USB disconnect, device number 111 [ 3471.768435][ T5912] option 2-1:0.0: device disconnected [ 3471.809265][T29041] wlan0: Trigger new scan to find an IBSS to join [ 3471.915950][T25812] hid_parser_main: 341 callbacks suppressed [ 3471.915967][T25812] corsair 0003:1B1C:1B3E.00F0: unknown main item tag 0x0 [ 3471.933870][T25812] corsair 0003:1B1C:1B3E.00F0: unknown main item tag 0x0 [ 3471.943211][T25812] corsair 0003:1B1C:1B3E.00F0: unknown main item tag 0x0 [ 3471.950480][T25812] corsair 0003:1B1C:1B3E.00F0: unknown main item tag 0x0 [ 3471.977111][T25812] corsair 0003:1B1C:1B3E.00F0: unknown main item tag 0x0 [ 3471.987371][T25812] corsair 0003:1B1C:1B3E.00F0: unknown main item tag 0x0 [ 3472.011422][T25812] corsair 0003:1B1C:1B3E.00F0: unknown main item tag 0x0 [ 3472.040084][T25812] corsair 0003:1B1C:1B3E.00F0: unknown main item tag 0x0 [ 3472.055336][T25812] corsair 0003:1B1C:1B3E.00F0: unknown main item tag 0x0 [ 3472.062909][T25812] corsair 0003:1B1C:1B3E.00F0: unknown main item tag 0x0 [ 3472.073732][T25812] corsair 0003:1B1C:1B3E.00F0: hidraw0: USB HID v6f.fd Device [HID 1b1c:1b3e] on usb-dummy_hcd.5-1/input0 [ 3472.327474][T17062] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 3472.365622][T25812] usb 6-1: USB disconnect, device number 90 [ 3472.512631][T26429] xt_CT: No such helper "snmp" [ 3472.529570][T17062] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3472.561678][T17062] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3472.651058][T26459] fuse: Bad value for 'fd' [ 3472.668985][T17062] usb 1-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 3472.679047][T17062] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3472.856633][T26475] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10545'. [ 3472.977902][T25812] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 3473.077148][T17062] usb 1-1: Product: syz [ 3473.082214][T17062] usb 1-1: Manufacturer: syz [ 3473.086848][T17062] usb 1-1: SerialNumber: syz [ 3473.243927][T25812] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 3473.277519][T25812] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3473.317093][T25812] usb 2-1: Product: syz [ 3473.317372][T26418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3473.321778][T25812] usb 2-1: Manufacturer: syz [ 3473.336313][T26418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3473.371204][T25812] usb 2-1: SerialNumber: syz [ 3473.402106][T25812] usb 2-1: config 0 descriptor?? [ 3473.408953][T17062] usb 1-1: unit 132 not found! [ 3473.443613][T25812] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 3473.467405][T26494] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10546'. [ 3473.530099][T26496] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10547'. [ 3473.606256][T25812] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 3473.632338][T25812] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 3473.649397][T25812] usb 2-1: media controller created [ 3473.700518][T17062] usb 1-1: USB disconnect, device number 75 [ 3473.715937][T25812] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3474.017357][T25812] DVB: Unable to find symbol mt352_attach() [ 3474.134198][T25812] DVB: Unable to find symbol nxt6000_attach() [ 3474.140801][T25812] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 3474.267134][T25812] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input145 [ 3474.287338][T25812] dvb-usb: schedule remote query interval to 1000 msecs. [ 3474.440905][T25812] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 3474.509514][T25812] dvb-usb: bulk message failed: -22 (7/0) [ 3474.515265][T25812] dvb-usb: bulk message failed: -22 (7/0) [ 3474.541794][T25812] usb 2-1: USB disconnect, device number 112 [ 3474.701725][T25812] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 3475.814673][T29050] wlan0: Trigger new scan to find an IBSS to join [ 3476.791332][T26576] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 3476.801394][T26576] netlink: 'syz.5.10553': attribute type 12 has an invalid length. [ 3477.067978][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3477.127115][T17062] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 3477.558958][T17062] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3477.961989][T17062] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 3477.989170][T17062] usb 1-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=36.53 [ 3477.998682][T17062] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3478.014499][T17062] usb 1-1: config 0 descriptor?? [ 3478.017536][T26604] netlink: 'syz.2.10567': attribute type 12 has an invalid length. [ 3478.168494][T26608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3478.198669][T26608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3478.252048][T17062] usb 1-1: USB disconnect, device number 76 [ 3478.847144][T29069] wlan0: Trigger new scan to find an IBSS to join [ 3479.066023][T26632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3479.075671][T26632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3479.217567][T25812] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 3479.580327][T25812] usb 3-1: Using ep0 maxpacket: 32 [ 3479.591121][T25812] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 3479.602898][T25812] usb 3-1: config 0 has no interface number 0 [ 3479.636496][T25812] usb 3-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 3479.743706][T25812] usb 3-1: config 0 interface 1 has no altsetting 0 [ 3479.755772][T25812] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 3479.765427][T25812] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3479.957652][T25812] usb 3-1: Product: syz [ 3479.963041][T25812] usb 3-1: Manufacturer: syz [ 3479.971164][T25812] usb 3-1: SerialNumber: syz [ 3480.015013][T26657] xt_CT: No such helper "snmp" [ 3480.064986][T25812] usb 3-1: config 0 descriptor?? [ 3480.290343][T25812] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 3480.306009][T25812] cx231xx 3-1:0.1: Failed to read PCB config [ 3480.326360][T25812] cx231xx 3-1:0.1: probe with driver cx231xx failed with error -71 [ 3480.477190][T25812] usb 3-1: USB disconnect, device number 48 [ 3480.988087][T25812] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 3481.137043][T25812] usb 3-1: Using ep0 maxpacket: 32 [ 3481.145826][T25812] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 3481.159938][T25812] usb 3-1: config 0 has no interface number 0 [ 3481.176766][T25812] usb 3-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 3481.202522][T25812] usb 3-1: config 0 interface 1 has no altsetting 0 [ 3481.223316][T25812] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 3481.233647][T25812] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3481.287038][T25812] usb 3-1: Product: syz [ 3481.293737][T25812] usb 3-1: Manufacturer: syz [ 3481.308198][T25812] usb 3-1: SerialNumber: syz [ 3481.336297][T25812] usb 3-1: config 0 descriptor?? [ 3481.613121][T25812] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 3481.739205][T25812] cx231xx 3-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4) [ 3481.994474][T25812] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --110 [ 3482.257909][T25812] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --71 [ 3482.272723][T25812] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --71 [ 3482.297969][T25812] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --71 [ 3482.417258][T25812] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --71 [ 3482.435301][T25812] cx231xx 3-1:0.1: Failed to set devmode to analog: error: -71 [ 3482.487186][T25812] i2c i2c-3: Added multiplexed i2c bus 5 [ 3482.507737][T25812] i2c i2c-3: Added multiplexed i2c bus 6 [ 3482.557323][T25812] cx231xx 3-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-71]! [ 3482.567184][T25812] cx231xx 3-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-71]! [ 3482.847967][ T14] wlan0: Trigger new scan to find an IBSS to join [ 3482.869793][T25812] cx231xx 3-1:0.1: probe with driver cx231xx failed with error -71 [ 3482.879923][T26769] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10580'. [ 3482.931763][T25812] usb 3-1: USB disconnect, device number 49 [ 3482.990816][T26780] IPVS: length: 528 != 8 [ 3483.006185][T26779] syzkaller0: entered promiscuous mode [ 3483.056318][T26779] syzkaller0: entered allmulticast mode [ 3483.095080][T26788] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 3483.104636][T26788] netlink: 'syz.4.10571': attribute type 12 has an invalid length. [ 3483.597072][T25812] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 3483.759678][T25812] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 3483.782872][T25812] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3483.815302][T25812] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3483.841634][T25812] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 3483.885114][T25812] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 3483.905284][T25812] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 3483.934272][T25812] usb 2-1: Manufacturer: syz [ 3483.950358][T25812] usb 2-1: config 0 descriptor?? [ 3484.018310][T26832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3484.037749][T26832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3484.167228][T29069] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3484.237429][ T4901] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 3484.364906][T25812] hid_parser_main: 222 callbacks suppressed [ 3484.364933][T25812] appleir 0003:05AC:8243.00F1: unknown main item tag 0x0 [ 3484.399280][ T4901] usb 6-1: config 0 has no interfaces? [ 3484.408419][ T4901] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 3484.421483][ T4901] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3484.430879][ T4901] usb 6-1: Product: syz [ 3484.435150][ T4901] usb 6-1: Manufacturer: syz [ 3484.440106][ T4901] usb 6-1: SerialNumber: syz [ 3484.445474][T25812] appleir 0003:05AC:8243.00F1: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 3484.461791][ T4901] usb 6-1: config 0 descriptor?? [ 3484.712380][T17062] usb 2-1: USB disconnect, device number 113 [ 3484.799062][T26877] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10574'. [ 3484.873774][T25812] usb 6-1: USB disconnect, device number 91 [ 3484.897422][T17301] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 3485.029469][T26903] FAULT_INJECTION: forcing a failure. [ 3485.029469][T26903] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3485.047618][T26903] CPU: 0 UID: 0 PID: 26903 Comm: syz.2.10579 Tainted: G L syzkaller #0 PREEMPT(full) [ 3485.047650][T26903] Tainted: [L]=SOFTLOCKUP [ 3485.047658][T26903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3485.047670][T26903] Call Trace: [ 3485.047678][T26903] [ 3485.047688][T26903] dump_stack_lvl+0xe8/0x150 [ 3485.047720][T26903] should_fail_ex+0x412/0x560 [ 3485.047754][T26903] _copy_to_user+0x31/0xb0 [ 3485.047780][T26903] simple_read_from_buffer+0xe1/0x170 [ 3485.047823][T26903] proc_fail_nth_read+0x1bb/0x230 [ 3485.047857][T26903] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3485.047889][T26903] ? rw_verify_area+0x2a6/0x4d0 [ 3485.047911][T26903] ? tun_chr_write_iter+0xe0/0x200 [ 3485.047932][T26903] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3485.047962][T26903] vfs_read+0x20c/0xa70 [ 3485.047981][T26903] ? fdget_pos+0x246/0x320 [ 3485.048015][T26903] ? __pfx___mutex_lock+0x10/0x10 [ 3485.048042][T26903] ? __pfx_vfs_read+0x10/0x10 [ 3485.048067][T26903] ? __fget_files+0x2a/0x420 [ 3485.048099][T26903] ? __fget_files+0x3a0/0x420 [ 3485.048126][T26903] ? __fget_files+0x2a/0x420 [ 3485.048165][T26903] ksys_read+0x150/0x270 [ 3485.048188][T26903] ? __pfx_ksys_read+0x10/0x10 [ 3485.048214][T26903] ? asm_int80_emulation+0x1a/0x20 [ 3485.048240][T26903] do_int80_emulation+0x173/0x4d0 [ 3485.048262][T26903] ? trace_irq_disable+0x3b/0x150 [ 3485.048291][T26903] ? asm_int80_emulation+0x1a/0x20 [ 3485.048310][T26903] ? clear_bhb_loop+0x40/0x90 [ 3485.048331][T26903] ? clear_bhb_loop+0x40/0x90 [ 3485.048355][T26903] asm_int80_emulation+0x1a/0x20 [ 3485.048373][T26903] RIP: 0023:0xf71c5cab [ 3485.048393][T26903] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 3485.048410][T26903] RSP: 002b:00000000f547d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 3485.048433][T26903] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f547d5d0 [ 3485.048447][T26903] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 3485.048460][T26903] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3485.048472][T26903] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 3485.048484][T26903] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3485.048514][T26903] [ 3485.109661][T17301] usb 1-1: Using ep0 maxpacket: 8 [ 3485.350227][T17301] usb 1-1: config index 0 descriptor too short (expected 5924, got 36) [ 3485.359784][T17301] usb 1-1: config 250 has an invalid interface number: 228 but max is -1 [ 3485.369372][T17301] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 3485.390521][T17301] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 3485.415985][T17301] usb 1-1: config 250 has no interface number 0 [ 3485.426060][T17301] usb 1-1: config 250 interface 228 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 3485.462257][T17301] usb 1-1: config 250 interface 228 has no altsetting 0 [ 3485.485065][T17301] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 3485.497571][T17301] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 3485.526176][T17301] usb 1-1: Product: syz [ 3485.546240][T17301] usb 1-1: SerialNumber: syz [ 3485.592920][T17301] hub 1-1:250.228: bad descriptor, ignoring hub [ 3485.605532][T17301] hub 1-1:250.228: probe with driver hub failed with error -5 [ 3485.759268][T25812] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 3485.780863][T26911] input: syz0 as /devices/virtual/input/input146 [ 3485.964992][T25812] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 130, using maximum allowed: 30 [ 3486.014878][T25812] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3486.038653][T25812] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 3486.075234][T25812] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 3486.087871][ T5912] usb 1-1: reset high-speed USB device number 77 using dummy_hcd [ 3486.103801][T25812] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3486.139110][T25812] usb 2-1: config 0 descriptor?? [ 3486.165888][T25812] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 3486.228996][ T4901] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 3486.406267][ T4901] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3486.425190][ T4901] usb 6-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=36.53 [ 3486.435324][ T4901] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3486.450542][ T4901] usb 6-1: config 0 descriptor?? [ 3486.465832][T25812] hid-generic 0000:0000:0000.00F2: unknown main item tag 0x0 [ 3486.489512][ T4901] option 6-1:0.0: GSM modem (1-port) converter detected [ 3486.496876][T25812] hid-generic 0000:0000:0000.00F2: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3486.664773][T17301] usb 6-1: USB disconnect, device number 92 [ 3486.690422][T17301] option 6-1:0.0: device disconnected [ 3486.767853][T25812] usb 1-1: USB disconnect, device number 77 [ 3486.828001][ T4901] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 3486.977013][ T4901] usb 3-1: Using ep0 maxpacket: 32 [ 3486.984242][ T4901] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 3486.992741][ T4901] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3487.003360][ T4901] usb 3-1: config 0 has no interface number 0 [ 3487.012975][ T4901] usb 3-1: config 0 interface 89 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 3487.029131][ T4901] usb 3-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 3487.038417][ T4901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3487.046406][ T4901] usb 3-1: Product: syz [ 3487.050920][ T4901] usb 3-1: Manufacturer: syz [ 3487.055541][ T4901] usb 3-1: SerialNumber: syz [ 3487.064196][ T4901] usb 3-1: config 0 descriptor?? [ 3487.074045][ T4901] hub 3-1:0.89: bad descriptor, ignoring hub [ 3487.082971][ T4901] hub 3-1:0.89: probe with driver hub failed with error -5 [ 3487.091678][ T4901] option 3-1:0.89: GSM modem (1-port) converter detected [ 3487.380623][T26998] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 3487.404859][T26998] netlink: 'syz.4.10589': attribute type 12 has an invalid length. [ 3487.524613][T27003] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10590'. [ 3487.606135][T17301] usb 3-1: USB disconnect, device number 50 [ 3487.638170][T27016] IPVS: length: 528 != 8 [ 3487.704706][T17301] option 3-1:0.89: device disconnected [ 3488.488113][T17301] usb 2-1: USB disconnect, device number 114 [ 3488.777536][T17062] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 3488.951538][T17062] usb 6-1: config 0 has no interfaces? [ 3488.960414][T17062] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 3488.971957][T17062] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3488.977040][T25812] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 3488.981023][T17062] usb 6-1: Product: syz [ 3488.992237][T17062] usb 6-1: Manufacturer: syz [ 3488.996863][T17062] usb 6-1: SerialNumber: syz [ 3489.006612][T17062] usb 6-1: config 0 descriptor?? [ 3489.017941][ T4901] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 3489.036090][T27112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3489.050249][T27112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3489.081642][T27116] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10596'. [ 3489.148076][T25812] usb 1-1: Using ep0 maxpacket: 32 [ 3489.155245][T25812] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 3489.163993][T25812] usb 1-1: config 0 has no interface number 0 [ 3489.174211][T25812] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 3489.186388][T25812] usb 1-1: config 0 interface 1 has no altsetting 0 [ 3489.195953][T25812] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 3489.206583][T25812] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3489.216636][ T4901] usb 2-1: config 0 has no interfaces? [ 3489.224748][T25812] usb 1-1: Product: syz [ 3489.232860][ T4901] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 3489.242336][T25812] usb 1-1: Manufacturer: syz [ 3489.247349][ T4901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3489.259062][T25812] usb 1-1: SerialNumber: syz [ 3489.267383][ T4901] usb 2-1: Product: syz [ 3489.279042][T25812] usb 1-1: config 0 descriptor?? [ 3489.284860][ T4901] usb 2-1: Manufacturer: syz [ 3489.290131][ T4901] usb 2-1: SerialNumber: syz [ 3489.305979][ T4901] usb 2-1: config 0 descriptor?? [ 3489.423384][T27041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3489.439320][T27041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3489.532496][T25812] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 3489.545473][T25812] cx231xx 1-1:0.1: Failed to read PCB config [ 3489.547665][T17062] usb 6-1: USB disconnect, device number 93 [ 3489.552109][T25812] cx231xx 1-1:0.1: probe with driver cx231xx failed with error -71 [ 3489.604516][T25812] usb 1-1: USB disconnect, device number 78 [ 3489.761036][ T4901] usb 2-1: USB disconnect, device number 115 [ 3489.896377][T27151] netlink: 'syz.2.10600': attribute type 10 has an invalid length. [ 3489.911214][T27151] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3489.922163][T27151] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 3489.971834][ T6298] Bluetooth: hci0: unexpected event for opcode 0x2003 [ 3490.023865][T27161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3490.051035][T27161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3490.137028][T17301] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 3490.336199][T17301] usb 1-1: Using ep0 maxpacket: 32 [ 3490.362111][T17301] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 3490.380658][T17301] usb 1-1: config 0 has no interface number 0 [ 3490.394533][T17301] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 3490.407842][T17301] usb 1-1: config 0 interface 1 has no altsetting 0 [ 3490.427282][T17301] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 3490.439505][T17301] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3490.523313][T17301] usb 1-1: Product: syz [ 3490.525663][T27170] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10602'. [ 3490.565984][T17301] usb 1-1: Manufacturer: syz [ 3490.575438][T27170] netlink: 72 bytes leftover after parsing attributes in process `syz.5.10602'. [ 3490.584612][T17301] usb 1-1: SerialNumber: syz [ 3490.592072][T17301] usb 1-1: config 0 descriptor?? [ 3490.733202][T27177] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 3490.839813][T27177] netlink: 'syz.1.10603': attribute type 12 has an invalid length. [ 3490.853035][T17301] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 3490.996669][T17301] cx231xx 1-1:0.1: Failed to read PCB config [ 3491.020047][T17301] cx231xx 1-1:0.1: probe with driver cx231xx failed with error -110 [ 3491.133808][T27183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3491.226577][T27183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3491.716374][T27198] syzkaller0: entered promiscuous mode [ 3491.722049][T27198] syzkaller0: entered allmulticast mode [ 3491.867092][T17301] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 3491.977249][ T4901] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 3491.989899][T27206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3492.010914][T27206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3492.057325][T17301] usb 2-1: Using ep0 maxpacket: 32 [ 3492.104333][T17301] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 3492.113183][T17301] usb 2-1: config 0 has no interface number 0 [ 3492.120037][T17301] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 3492.135853][T17301] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 3492.143488][T25812] usb 1-1: USB disconnect, device number 79 [ 3492.164116][T17301] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3492.169471][ T4901] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 3492.173651][T17301] usb 2-1: Product: syz [ 3492.189186][ T4901] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3492.201746][T17301] usb 2-1: Manufacturer: syz [ 3492.201773][T17301] usb 2-1: SerialNumber: syz [ 3492.204702][T17301] usb 2-1: config 0 descriptor?? [ 3492.207402][ T4901] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3492.227697][T27192] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 3492.231633][ T4901] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 3492.250083][ T4901] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 3492.307972][ T4901] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 3492.324854][ T4901] usb 6-1: Manufacturer: syz [ 3492.340101][ T4901] usb 6-1: config 0 descriptor?? [ 3492.466523][T27192] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 3492.774706][ T4901] appleir 0003:05AC:8243.00F3: unknown main item tag 0x0 [ 3492.790959][T27226] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10619'. [ 3492.803229][T27226] netlink: 72 bytes leftover after parsing attributes in process `syz.0.10619'. [ 3492.896869][ T4901] appleir 0003:05AC:8243.00F3: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 3493.116130][ T4901] usb 6-1: USB disconnect, device number 94 [ 3493.735906][T27192] syzkaller0: entered promiscuous mode [ 3493.744242][T27192] syzkaller0: entered allmulticast mode [ 3493.772460][T17301] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 3493.788855][T17301] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 3493.842036][T17301] asix 2-1:0.188: probe with driver asix failed with error -71 [ 3493.886031][T17301] usb 2-1: USB disconnect, device number 116 [ 3493.927109][T17062] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 3494.004335][T27270] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10612'. [ 3494.102925][T17062] usb 1-1: Using ep0 maxpacket: 8 [ 3494.124501][T17062] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 3494.145270][T17062] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 3494.164895][T17062] usb 1-1: config 0 has no interface number 0 [ 3494.183038][T17062] usb 1-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3494.212090][T17062] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 3494.274465][T17062] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 3494.311259][T17062] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 3494.330804][T17062] usb 1-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 3494.367586][T17062] usb 1-1: Product: syz [ 3494.371948][T17062] usb 1-1: Manufacturer: syz [ 3494.400303][T17062] usb 1-1: config 0 descriptor?? [ 3494.478544][T27294] netlink: 'syz.2.10615': attribute type 10 has an invalid length. [ 3494.569780][ T6298] Bluetooth: hci0: unexpected event for opcode 0x2003 [ 3494.785410][T17062] usb 1-1: USB disconnect, device number 80 [ 3495.680350][T27341] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 3495.694509][T27341] netlink: 'syz.5.10617': attribute type 12 has an invalid length. [ 3495.723879][ T4901] hid-generic 0000:0000:0000.00F4: unknown main item tag 0x0 [ 3495.739021][ T4901] hid-generic 0000:0000:0000.00F4: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3495.855775][T27326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3495.868137][T27326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3495.907334][ T4901] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 3496.079833][ T4901] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 130, using maximum allowed: 30 [ 3496.092954][ T4901] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3496.104150][ T4901] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 3496.117270][ T4901] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 3496.132081][ T4901] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3496.142483][ T4901] usb 1-1: config 0 descriptor?? [ 3496.537102][T17062] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 3496.558880][ T4901] corsair 0003:1B1C:1B3E.00F5: unknown main item tag 0x0 [ 3496.576160][ T4901] corsair 0003:1B1C:1B3E.00F5: unknown main item tag 0x0 [ 3496.590130][T27368] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10622'. [ 3496.603749][T27368] netlink: 72 bytes leftover after parsing attributes in process `syz.5.10622'. [ 3496.690413][T27364] input: syz0 as /devices/virtual/input/input148 [ 3496.702772][T17062] usb 3-1: Using ep0 maxpacket: 8 [ 3496.712993][T17062] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 3496.742857][T17062] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 3496.744633][ T4901] corsair 0003:1B1C:1B3E.00F5: unknown main item tag 0x0 [ 3496.848660][T17062] usb 3-1: config 250 has no interfaces? [ 3496.856975][ T4901] corsair 0003:1B1C:1B3E.00F5: unknown main item tag 0x0 [ 3496.881141][T17062] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 3496.883183][ T4901] corsair 0003:1B1C:1B3E.00F5: unknown main item tag 0x0 [ 3496.897725][T17062] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 3496.940475][T17062] usb 3-1: Product: syz [ 3496.943048][ T4901] corsair 0003:1B1C:1B3E.00F5: unknown main item tag 0x0 [ 3496.959957][T17062] usb 3-1: SerialNumber: syz [ 3496.981991][ T4901] corsair 0003:1B1C:1B3E.00F5: unknown main item tag 0x0 [ 3497.019754][ T4901] corsair 0003:1B1C:1B3E.00F5: unknown main item tag 0x0 [ 3497.054553][ T4901] corsair 0003:1B1C:1B3E.00F5: unexpected long global item [ 3497.096059][ T4901] corsair 0003:1B1C:1B3E.00F5: parse failed [ 3497.129846][T27381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3497.130657][ T4901] corsair 0003:1B1C:1B3E.00F5: probe with driver corsair failed with error -22 [ 3497.182243][T27381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3497.204935][T17062] usb 3-1: USB disconnect, device number 51 [ 3497.232202][ T4901] usb 1-1: USB disconnect, device number 81 [ 3497.647078][T17062] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 3497.807158][T17062] usb 3-1: Using ep0 maxpacket: 8 [ 3497.814668][T17062] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 3497.837391][T17062] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 3497.867659][T17062] usb 3-1: config 250 has no interfaces? [ 3497.901451][T17062] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 3497.938026][T17062] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 3497.964029][T17062] usb 3-1: Product: syz [ 3497.981530][T17062] usb 3-1: SerialNumber: syz [ 3498.307224][ T4901] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 3498.489156][ T4901] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3498.508143][ T4901] usb 2-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=36.53 [ 3498.529454][ T4901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3498.619921][ T4901] usb 2-1: config 0 descriptor?? [ 3498.631301][ T4901] option 2-1:0.0: GSM modem (1-port) converter detected [ 3498.697681][T27449] xt_CT: No such helper "snmp" [ 3498.867712][T17062] usb 2-1: USB disconnect, device number 117 [ 3498.879688][T17062] option 2-1:0.0: device disconnected [ 3498.967350][ T4901] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 3499.137145][ T4901] usb 1-1: Using ep0 maxpacket: 8 [ 3499.149581][ T4901] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 3499.168884][ T4901] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 3499.185314][ T4901] usb 1-1: config 0 has no interface number 0 [ 3499.196302][ T4901] usb 1-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3499.216018][ T4901] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 3499.227396][ T4901] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 3499.239846][ T4901] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 3499.254706][ T4901] usb 1-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 3499.264659][ T4901] usb 1-1: Product: syz [ 3499.269208][ T4901] usb 1-1: Manufacturer: syz [ 3499.279769][ T4901] usb 1-1: config 0 descriptor?? [ 3499.368420][T17062] usb 3-1: USB disconnect, device number 52 [ 3499.681912][ T4901] usb 1-1: USB disconnect, device number 82 [ 3499.778809][T27533] netlink: 'syz.2.10632': attribute type 10 has an invalid length. [ 3499.899582][ T6298] Bluetooth: hci0: unexpected event for opcode 0x2003 [ 3500.616735][T27572] fuse: Bad value for 'fd' [ 3500.677039][ T4901] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 3500.733920][T27570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3500.766228][T27570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3500.848794][ T4901] usb 2-1: no configurations [ 3500.853462][ T4901] usb 2-1: can't read configurations, error -22 [ 3501.067081][ T4901] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 3501.208995][T27583] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10639'. [ 3501.258204][ T4901] usb 2-1: no configurations [ 3501.264906][ T4901] usb 2-1: can't read configurations, error -22 [ 3501.283311][ T4901] usb usb2-port1: attempt power cycle [ 3501.294934][T27583] netlink: 72 bytes leftover after parsing attributes in process `syz.5.10639'. [ 3501.659628][ T4901] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 3501.718080][ T4901] usb 2-1: no configurations [ 3501.722907][ T4901] usb 2-1: can't read configurations, error -22 [ 3501.887143][ T4901] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 3501.909962][ T4901] usb 2-1: no configurations [ 3501.914621][ T4901] usb 2-1: can't read configurations, error -22 [ 3501.923026][ T4901] usb usb2-port1: unable to enumerate USB device [ 3502.082471][T27582] input: syz0 as /devices/virtual/input/input150 [ 3502.222908][T27638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3502.264155][T27638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3502.325585][T27638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3502.347411][T27638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3502.956104][T27685] fuse: Bad value for 'fd' [ 3503.107487][ T4901] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 3503.118271][T27698] netlink: 'syz.4.10650': attribute type 10 has an invalid length. [ 3503.203381][T25812] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 3503.297189][ T4901] usb 3-1: Using ep0 maxpacket: 8 [ 3503.356051][ T4901] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 3503.374847][ T4901] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 3503.402849][ T4901] usb 3-1: config 0 has no interface number 0 [ 3503.411401][ T5912] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 3503.443128][T25812] usb 1-1: config 0 has no interfaces? [ 3503.451044][ T4901] usb 3-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3503.596841][T25812] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 3503.621408][T25812] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3503.636397][ T4901] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 3503.666815][ T5912] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 130, using maximum allowed: 30 [ 3503.680134][T25812] usb 1-1: Product: syz [ 3503.684334][T25812] usb 1-1: Manufacturer: syz [ 3503.698527][ T5912] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3503.709856][ T4901] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 3503.727084][T25812] usb 1-1: SerialNumber: syz [ 3503.742194][T25812] usb 1-1: config 0 descriptor?? [ 3503.782725][ T4901] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 3503.792480][ T5912] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 3503.819793][ T4901] usb 3-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 3503.828119][ T4901] usb 3-1: Product: syz [ 3503.832572][ T5912] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 3503.862466][ T4901] usb 3-1: Manufacturer: syz [ 3503.900031][ T5912] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3503.918320][ T4901] usb 3-1: config 0 descriptor?? [ 3503.935522][ T5912] usb 6-1: config 0 descriptor?? [ 3504.089193][T25812] usb 1-1: USB disconnect, device number 83 [ 3504.148082][ T4901] usb 3-1: USB disconnect, device number 53 [ 3504.370615][ T5912] usbhid 6-1:0.0: can't add hid device: -71 [ 3504.376674][ T5912] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 3504.425671][ T5912] usb 6-1: USB disconnect, device number 95 [ 3504.620350][T27775] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10653'. [ 3504.785314][T27781] IPVS: Error connecting to the multicast addr [ 3504.892771][T27783] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10655'. [ 3504.908357][T27783] netlink: 72 bytes leftover after parsing attributes in process `syz.0.10655'. [ 3505.878071][T27812] fuse: Bad value for 'fd' [ 3506.117372][T17062] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 3506.217019][T17301] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 3506.257017][T17062] usb 6-1: device descriptor read/64, error -71 [ 3506.378369][T17301] usb 3-1: no configurations [ 3506.387400][T17301] usb 3-1: can't read configurations, error -22 [ 3506.457089][ T4901] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 3506.498244][T17062] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 3506.527150][T17301] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 3506.624678][ T4901] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3506.637539][T17062] usb 6-1: device descriptor read/64, error -71 [ 3506.645542][ T4901] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 130, using maximum allowed: 30 [ 3506.658636][ T4901] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 130 [ 3506.672700][ T4901] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 3506.692689][ T4901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3506.707125][ T5826] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 3506.717181][T17301] usb 3-1: no configurations [ 3506.719024][ T4901] usb 2-1: config 0 descriptor?? [ 3506.722044][T17301] usb 3-1: can't read configurations, error -22 [ 3506.735228][T17301] usb usb3-port1: attempt power cycle [ 3506.749480][T17062] usb usb6-port1: attempt power cycle [ 3506.750306][ T4901] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 3506.861078][T27905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3506.870263][T27905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3506.883374][T27905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3506.894656][T27905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3506.902641][ T5826] usb 1-1: config 0 has no interfaces? [ 3506.930423][ T5826] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 3506.941470][ T5826] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3506.969202][ T5826] usb 1-1: Product: syz [ 3506.973723][ T5826] usb 1-1: Manufacturer: syz [ 3506.978970][ T5826] usb 1-1: SerialNumber: syz [ 3506.988584][ T5826] usb 1-1: config 0 descriptor?? [ 3507.087569][T17301] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 3507.107699][T17062] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 3507.116468][T17301] usb 3-1: no configurations [ 3507.121715][T17301] usb 3-1: can't read configurations, error -22 [ 3507.128944][T17062] usb 6-1: device descriptor read/8, error -71 [ 3507.205370][ T5826] usb 1-1: USB disconnect, device number 84 [ 3507.268684][T17301] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 3507.288032][T17301] usb 3-1: no configurations [ 3507.292659][T17301] usb 3-1: can't read configurations, error -22 [ 3507.299641][T17301] usb usb3-port1: unable to enumerate USB device [ 3507.367096][T17062] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 3507.387498][T17062] usb 6-1: device descriptor read/8, error -71 [ 3507.451555][T27920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3507.461062][T27920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3507.497227][T17062] usb usb6-port1: unable to enumerate USB device [ 3507.945684][T27930] netlink: 'syz.0.10670': attribute type 12 has an invalid length. [ 3508.186825][T27948] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10673'. [ 3508.545573][T27977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3508.561336][T27977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3508.612854][T27977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3508.635762][T27977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3509.117062][T17062] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 3509.197694][ T4901] usb 2-1: USB disconnect, device number 122 [ 3509.325371][T17062] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3509.346513][T17062] usb 1-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=36.53 [ 3509.827831][T28020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3510.022130][T28020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3510.041618][T17062] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3510.072301][T17062] usb 1-1: config 0 descriptor?? [ 3510.095097][T17062] option 1-1:0.0: GSM modem (1-port) converter detected [ 3510.188690][T28035] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10684'. [ 3510.308867][T27990] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10678'. [ 3510.371128][T17062] usb 1-1: USB disconnect, device number 85 [ 3510.379766][T17062] option 1-1:0.0: device disconnected [ 3510.607117][ T5912] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 3510.807671][ T5912] usb 2-1: config 0 has no interfaces? [ 3510.815427][ T5912] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 3510.839339][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3510.851481][T28117] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 3510.857344][ T5912] usb 2-1: Product: syz [ 3510.874808][T28117] netlink: 'syz.4.10689': attribute type 12 has an invalid length. [ 3510.882043][ T5912] usb 2-1: Manufacturer: syz [ 3510.917126][ T5912] usb 2-1: SerialNumber: syz [ 3510.932319][ T5912] usb 2-1: config 0 descriptor?? [ 3510.967886][T17062] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 3511.187027][T17062] usb 3-1: Using ep0 maxpacket: 8 [ 3511.217284][T17062] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 3511.232815][T17062] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 3511.257455][ T5826] usb 2-1: USB disconnect, device number 123 [ 3511.274891][T17062] usb 3-1: config 250 has no interfaces? [ 3511.287808][T17062] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 3511.298475][T17062] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 3511.309960][T17062] usb 3-1: Product: syz [ 3511.314169][T17062] usb 3-1: SerialNumber: syz [ 3511.327233][T29055] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 3511.437148][ T5912] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 3511.532451][T25812] usb 3-1: USB disconnect, device number 58 [ 3511.587109][ T5912] usb 6-1: Using ep0 maxpacket: 8 [ 3511.595547][ T5912] usb 6-1: config index 0 descriptor too short (expected 5924, got 36) [ 3511.604379][ T5912] usb 6-1: config 250 has an invalid interface number: 228 but max is -1 [ 3511.613000][ T5912] usb 6-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 3511.623604][ T5912] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 3511.634590][ T5912] usb 6-1: config 250 has no interface number 0 [ 3511.645501][ T5912] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 3511.667957][ T5912] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 3511.677573][ T5912] usb 6-1: Product: syz [ 3511.681776][ T5912] usb 6-1: SerialNumber: syz [ 3511.701424][ T5912] hub 6-1:250.228: bad descriptor, ignoring hub [ 3511.708463][ T5912] hub 6-1:250.228: probe with driver hub failed with error -5 [ 3511.859281][T25812] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 3511.985200][T28181] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10696'. [ 3511.997452][T28181] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 3512.027800][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 3512.034642][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 3512.047275][T25812] usb 3-1: Using ep0 maxpacket: 8 [ 3512.066799][T25812] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 3512.083245][T25812] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 3512.325862][T28187] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10698'. [ 3512.359329][T25812] usb 3-1: config 250 has no interfaces? [ 3512.418826][T25812] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 3512.430599][T25812] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 3512.443225][ T5826] usb 6-1: reset high-speed USB device number 100 using dummy_hcd [ 3512.575273][T25812] usb 3-1: Product: syz [ 3512.584432][T25812] usb 3-1: SerialNumber: syz [ 3512.833778][T25812] usb 3-1: USB disconnect, device number 59 [ 3512.847262][T17062] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 3512.949716][ T5826] usb 6-1: USB disconnect, device number 100 [ 3513.021113][T17062] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 130, using maximum allowed: 30 [ 3513.044346][T17062] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3513.067822][T17062] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 3513.086686][T17062] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 3513.115459][T17062] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3513.128939][T17062] usb 2-1: config 0 descriptor?? [ 3513.529939][T28247] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10711'. [ 3513.752569][T28246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3513.761399][T28246] 8021q: adding VLAN 0 to HW filter on device team0 [ 3513.836242][T17062] usbhid 2-1:0.0: can't add hid device: -71 [ 3513.852836][T17062] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 3513.875403][T17062] usb 2-1: USB disconnect, device number 124 [ 3513.886235][T28246] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 3514.123232][T28246] netlink: 128 bytes leftover after parsing attributes in process `syz.4.10701'. [ 3514.873345][T28278] IPVS: Error connecting to the multicast addr [ 3515.037237][T17062] usb 2-1: new full-speed USB device number 125 using dummy_hcd [ 3515.199900][T17062] usb 2-1: config 5 has an invalid interface number: 42 but max is 0 [ 3515.222829][T28335] netlink: 'syz.0.10705': attribute type 12 has an invalid length. [ 3515.245607][T17062] usb 2-1: config 5 has no interface number 0 [ 3515.252640][T17062] usb 2-1: config 5 interface 42 altsetting 255 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 3515.264725][T17062] usb 2-1: config 5 interface 42 has no altsetting 0 [ 3515.276020][T17062] usb 2-1: New USB device found, idVendor=05ac, idProduct=0231, bcdDevice=e0.90 [ 3515.289419][T17062] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3515.298026][T17062] usb 2-1: Product: ` [ 3515.302393][T17062] usb 2-1: Manufacturer: 덴ꦻ速臁얈몲ෑꏭ짠좏Ĭ⁄ꊿ鈰㘊㢷趱孵浆瀁舰ҷ䥧宪虩둇됚馾윕䠰⢺␒撗䝨ጰ丌酲偣鑽徻纁쟷킣舂睹젬 [ 3515.353322][T17062] usb 2-1: SerialNumber: ࠾ [ 3515.596314][T17062] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:5.42/input/input152 [ 3515.613642][ T5179] bcm5974 2-1:5.42: could not read from device [ 3515.652826][ T5179] bcm5974 2-1:5.42: could not read from device [ 3515.672190][T17062] usb 2-1: USB disconnect, device number 125 [ 3515.678613][ T5179] bcm5974 2-1:5.42: could not read from device [ 3515.702300][ T5826] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 3515.879153][ T5826] usb 6-1: config 0 has no interfaces? [ 3515.885570][T28397] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10709'. [ 3515.899562][ T5826] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 3515.920680][ T5826] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3515.933004][ T5826] usb 6-1: Product: syz [ 3515.941349][ T5826] usb 6-1: Manufacturer: syz [ 3515.952136][ T5826] usb 6-1: SerialNumber: syz [ 3515.966250][ T5826] usb 6-1: config 0 descriptor?? [ 3516.197705][T17062] usb 6-1: USB disconnect, device number 101 [ 3516.727372][T28405] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10712'. [ 3516.779226][T28405] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 3516.910935][T28418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3516.922261][T28418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3517.110385][ T1038] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 3517.136514][T28418] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10713'. [ 3517.252916][T17062] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 3517.627250][T17062] usb 1-1: Using ep0 maxpacket: 8 [ 3517.635323][T17062] usb 1-1: config index 0 descriptor too short (expected 5924, got 36) [ 3517.653842][T17062] usb 1-1: config 250 has an invalid interface number: 228 but max is -1 [ 3517.693873][T17062] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 3517.704933][T17062] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 3517.714234][T17062] usb 1-1: config 250 has no interface number 0 [ 3517.729484][T17062] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 3517.742652][T17062] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 3517.757282][T17062] usb 1-1: Product: syz [ 3517.833910][T17062] usb 1-1: SerialNumber: syz [ 3517.853037][T17062] hub 1-1:250.228: bad descriptor, ignoring hub [ 3517.866059][T17062] hub 1-1:250.228: probe with driver hub failed with error -5 [ 3517.947002][T25812] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 3518.119945][T28480] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10717'. [ 3518.131806][T25812] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 130, using maximum allowed: 30 [ 3518.143134][T25812] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3518.159891][T25812] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 3518.173458][ T5912] usb 1-1: USB disconnect, device number 86 [ 3518.181005][T25812] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 3518.191837][T25812] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3518.282879][T25812] usb 6-1: config 0 descriptor?? [ 3518.722702][T25812] usbhid 6-1:0.0: can't add hid device: -71 [ 3518.728848][T25812] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 3518.748840][T25812] usb 6-1: USB disconnect, device number 102 [ 3519.858354][T17301] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 3520.389768][T17301] usb 6-1: config 0 has no interfaces? [ 3520.405517][T17301] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 3520.417075][T17301] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3520.428779][T17301] usb 6-1: Product: syz [ 3520.432994][T17301] usb 6-1: Manufacturer: syz [ 3520.450692][T17301] usb 6-1: SerialNumber: syz [ 3520.494286][T17301] usb 6-1: config 0 descriptor?? [ 3520.511262][T28576] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10725'. [ 3520.637490][T25812] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 3520.818778][T25812] usb 1-1: config 0 has no interfaces? [ 3520.827870][ T4901] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 3520.859370][T25812] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 3520.894951][T25812] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3520.911172][T25812] usb 1-1: Product: syz [ 3520.938536][T25812] usb 1-1: Manufacturer: syz [ 3520.964763][T25812] usb 1-1: SerialNumber: syz [ 3520.990167][T25812] usb 1-1: config 0 descriptor?? [ 3521.025012][ T4901] usb 2-1: config 0 has no interfaces? [ 3521.040036][ T4901] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 3521.064468][ T4901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3521.080498][ T4901] usb 2-1: Product: syz [ 3521.084708][ T4901] usb 2-1: Manufacturer: syz [ 3521.100802][ T4901] usb 2-1: SerialNumber: syz [ 3521.116548][ T4901] usb 2-1: config 0 descriptor?? [ 3521.160814][T28662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3521.207692][T28662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3521.264427][ T4901] usb 1-1: USB disconnect, device number 87 [ 3521.288640][T28662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3521.319889][T28662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3521.365325][T25812] usb 2-1: USB disconnect, device number 126 [ 3521.366390][T17301] usb 6-1: USB disconnect, device number 103 [ 3521.697074][ T4901] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 3521.847079][ T4901] usb 3-1: Using ep0 maxpacket: 8 [ 3521.870383][ T4901] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 3521.879424][ T4901] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 3521.943579][ T4901] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 3521.988120][ T4901] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 3522.007164][ T4901] usb 3-1: config 250 has no interface number 0 [ 3522.015730][ T4901] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 3522.041746][ T4901] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 3522.054584][ T4901] usb 3-1: Product: syz [ 3522.063059][ T4901] usb 3-1: SerialNumber: syz [ 3522.078536][ T4901] hub 3-1:250.228: bad descriptor, ignoring hub [ 3522.084963][ T4901] hub 3-1:250.228: probe with driver hub failed with error -5 [ 3522.340135][ T4901] usb 3-1: USB disconnect, device number 60 [ 3523.118332][T17062] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 3523.289807][T17062] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 130, using maximum allowed: 30 [ 3523.311807][T17062] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3523.347134][T17062] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 3523.416701][T17062] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 3523.471639][T28734] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10735'. [ 3523.495886][T17062] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3523.533854][T17062] usb 6-1: config 0 descriptor?? [ 3524.011432][T17062] usbhid 6-1:0.0: can't add hid device: -71 [ 3524.018232][T17062] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 3524.052019][T17062] usb 6-1: USB disconnect, device number 104 [ 3525.113184][ T4901] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 3525.174726][T28846] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10739'. [ 3525.309290][ T4901] usb 3-1: config 0 has no interfaces? [ 3525.316800][ T4901] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 3525.326025][ T4901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3525.362107][ T4901] usb 3-1: Product: syz [ 3525.372361][ T4901] usb 3-1: Manufacturer: syz [ 3525.390248][ T4901] usb 3-1: SerialNumber: syz [ 3525.715578][ T4901] usb 3-1: config 0 descriptor?? [ 3525.767033][T25812] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 3525.927703][T25812] usb 6-1: Using ep0 maxpacket: 8 [ 3525.965197][T25812] usb 6-1: config index 0 descriptor too short (expected 5924, got 36) [ 3525.977689][T25812] usb 6-1: config 250 has an invalid interface number: 228 but max is -1 [ 3526.000401][T25812] usb 6-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 3526.003420][T17062] usb 3-1: USB disconnect, device number 61 [ 3526.028689][T25812] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 3526.057091][T25812] usb 6-1: config 250 has no interface number 0 [ 3526.063412][T25812] usb 6-1: config 250 interface 228 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 3526.146985][T25812] usb 6-1: config 250 interface 228 has no altsetting 0 [ 3526.165508][T25812] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 3526.185370][T25812] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 3526.195260][T25812] usb 6-1: Product: syz [ 3526.197016][T17301] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 3526.212802][T25812] usb 6-1: SerialNumber: syz [ 3526.246015][T25812] hub 6-1:250.228: bad descriptor, ignoring hub [ 3526.277831][T28901] netlink: 'syz.0.10745': attribute type 72 has an invalid length. [ 3526.307175][T25812] hub 6-1:250.228: probe with driver hub failed with error -5 [ 3526.359160][T17301] usb 2-1: config 0 has no interfaces? [ 3526.369875][T17301] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 3526.379214][T17301] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3526.387291][T17301] usb 2-1: Product: syz [ 3526.391719][T17301] usb 2-1: Manufacturer: syz [ 3526.397543][T17301] usb 2-1: SerialNumber: syz [ 3526.409564][T17301] usb 2-1: config 0 descriptor?? [ 3526.465529][T28908] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10746'. [ 3526.707810][ T4901] usb 2-1: USB disconnect, device number 127 [ 3526.807883][T17301] usb 6-1: reset high-speed USB device number 105 using dummy_hcd [ 3527.628106][T17301] usb 6-1: failed to restore interface 228 altsetting 255 (error=-71) [ 3527.643691][T17301] usb 6-1: USB disconnect, device number 105 [ 3528.759348][T28964] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10753'. [ 3528.773092][T28964] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 3528.863514][T28968] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 3529.002557][T28969] IPVS: length: 528 != 8 [ 3529.343877][T28997] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10754'. [ 3529.599621][T29001] netlink: 128 bytes leftover after parsing attributes in process `syz.1.10752'. [ 3529.907943][T29010] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10757'. [ 3530.891358][T17062] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 3531.257102][T17062] usb 6-1: Using ep0 maxpacket: 8 [ 3531.305434][T17062] usb 6-1: config index 0 descriptor too short (expected 5924, got 36) [ 3531.347591][T17062] usb 6-1: config 250 has an invalid interface number: 228 but max is -1 [ 3531.522251][T17062] usb 6-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 3531.637088][T29065] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10761'. [ 3531.651945][T29065] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 3531.757275][T29066] IPVS: length: 528 != 8 [ 3532.099157][T17062] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 3532.109409][T17062] usb 6-1: config 250 has no interface number 0 [ 3532.119324][T17062] usb 6-1: config 250 interface 228 has no altsetting 0 [ 3532.209439][T17062] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 3532.223258][T17062] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 3532.233763][T17062] usb 6-1: Product: syz [ 3532.237033][ T4901] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 3532.601739][T17062] usb 6-1: SerialNumber: syz [ 3532.618631][ T4901] usb 1-1: config 0 has no interfaces? [ 3532.626020][ T4901] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 3532.645012][ T4901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3532.675112][T17062] hub 6-1:250.228: bad descriptor, ignoring hub [ 3532.685615][ T4901] usb 1-1: Product: syz [ 3532.694425][T17062] hub 6-1:250.228: probe with driver hub failed with error -5 [ 3532.701031][ T4901] usb 1-1: Manufacturer: syz [ 3532.720189][ T4901] usb 1-1: SerialNumber: syz [ 3532.760416][ T4901] usb 1-1: config 0 descriptor?? [ 3533.071980][T25812] usb 1-1: USB disconnect, device number 88 [ 3533.198303][ T4901] usb 6-1: reset high-speed USB device number 106 using dummy_hcd [ 3533.447005][T25812] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 3533.797333][T25812] usb 3-1: Using ep0 maxpacket: 8 [ 3533.804578][T25812] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 3533.890587][T25812] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 3533.923827][T25812] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 3533.948035][T25812] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 3533.961891][T25812] usb 3-1: config 250 has no interface number 0 [ 3533.989253][T25812] usb 3-1: config 250 interface 228 has no altsetting 0 [ 3534.012956][T25812] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 3534.022438][T25812] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 3534.040213][T25812] usb 3-1: Product: syz [ 3534.051282][T25812] usb 3-1: SerialNumber: syz [ 3534.069946][T17062] usb 6-1: USB disconnect, device number 106 [ 3534.072814][T25812] hub 3-1:250.228: bad descriptor, ignoring hub [ 3534.089243][T25812] hub 3-1:250.228: probe with driver hub failed with error -5 [ 3534.178990][T29150] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10768'. [ 3534.242971][T29152] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10769'. [ 3534.324556][T29153] IPVS: length: 528 != 8 [ 3534.819238][T25812] usb 3-1: reset high-speed USB device number 62 using dummy_hcd [ 3534.994181][T29192] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10771'. [ 3535.010945][ T30] INFO: task kworker/0:5:18005 blocked for more than 143 seconds. [ 3535.022358][ T30] Tainted: G L syzkaller #0 [ 3535.029563][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3535.154765][ T30] task:kworker/0:5 state:D stack:15712 pid:18005 tgid:18005 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 3535.155076][ T30] Workqueue: usb_hub_wq hub_event [ 3535.155301][ T30] Call Trace: [ 3535.155312][ T30] [ 3535.155328][ T30] __schedule+0x15dd/0x52d0 [ 3535.155411][ T30] ? usb_new_device+0xa08/0x16f0 [ 3535.155435][ T30] ? hub_event+0x2a1c/0x4f30 [ 3535.155460][ T30] ? process_scheduled_works+0xb6e/0x18c0 [ 3535.155489][ T30] ? worker_thread+0xa53/0xfc0 [ 3535.155544][ T30] ? __pfx___schedule+0x10/0x10 [ 3535.155581][ T30] ? schedule+0x90/0x360 [ 3535.155610][ T30] schedule+0x164/0x360 [ 3535.155637][ T30] schedule_timeout+0xc3/0x2c0 [ 3535.155709][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 3535.155734][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 3535.155768][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 3535.155804][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 3535.155853][ T30] ? wait_for_completion+0x274/0x5e0 [ 3535.155881][ T30] wait_for_completion+0x2cc/0x5e0 [ 3535.155921][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 3535.155962][ T30] i2c_del_adapter+0x5c0/0x790 [ 3535.156087][ T30] ? __pfx_i2c_del_adapter+0x10/0x10 [ 3535.156121][ T30] ? kfree+0x4d/0x630 [ 3535.156153][ T30] dvb_usb_i2c_exit+0x64/0xb0 [ 3535.156241][ T30] dvb_usb_device_exit+0x1cb/0x360 [ 3535.156272][ T30] ? __pfx_dvb_usb_device_exit+0x10/0x10 [ 3535.156317][ T30] cxusb_probe+0x60f/0x710 [ 3535.156390][ T30] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 3535.156418][ T30] ? __pfx_cxusb_probe+0x10/0x10 [ 3535.156443][ T30] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 3535.156468][ T30] ? __pm_runtime_set_status+0x9d4/0xcd0 [ 3535.156584][ T30] usb_probe_interface+0x668/0xc90 [ 3535.156648][ T30] ? __pfx_usb_probe_interface+0x10/0x10 [ 3535.156677][ T30] really_probe+0x267/0xaf0 [ 3535.156763][ T30] __driver_probe_device+0x18c/0x320 [ 3535.156798][ T30] driver_probe_device+0x4f/0x240 [ 3535.156834][ T30] __device_attach_driver+0x279/0x430 [ 3535.157127][ T30] bus_for_each_drv+0x258/0x2f0 [ 3535.198757][T29195] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 3535.382570][T25812] usb 3-1: failed to restore interface 228 altsetting 255 (error=-71) [ 3535.394793][T25812] usb 3-1: USB disconnect, device number 62 [ 3535.561067][ T30] ? __pfx___device_attach_driver+0x10/0x10 [ 3535.571971][ T30] ? __pfx_bus_for_each_drv+0x10/0x10 [ 3535.580143][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 3535.590294][ T30] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 3535.600579][ T30] __device_attach+0x2c5/0x450 [ 3535.612396][ T30] ? __pfx___device_attach+0x10/0x10 [ 3535.621638][ T30] ? _raw_spin_unlock+0x28/0x50 [ 3535.633638][ T30] device_initial_probe+0xa1/0xd0 [ 3535.643343][ T30] bus_probe_device+0x12a/0x220 [ 3535.653635][ T30] ? device_add+0x726/0xb70 [ 3535.661063][ T30] device_add+0x7b6/0xb70 [ 3535.665564][ T30] usb_set_configuration+0x1a87/0x2110 [ 3535.671823][ T30] usb_generic_driver_probe+0x8d/0x150 [ 3535.677562][ T30] usb_probe_device+0x1c4/0x3b0 [ 3535.682832][ T30] ? __pfx_usb_probe_device+0x10/0x10 [ 3535.689617][ T30] really_probe+0x267/0xaf0 [ 3535.694398][ T30] __driver_probe_device+0x18c/0x320 [ 3535.699981][ T30] driver_probe_device+0x4f/0x240 [ 3535.706294][ T30] __device_attach_driver+0x279/0x430 [ 3535.713460][ T30] bus_for_each_drv+0x258/0x2f0 [ 3535.718731][ T30] ? __pfx___device_attach_driver+0x10/0x10 [ 3535.724891][ T30] ? __pfx_bus_for_each_drv+0x10/0x10 [ 3535.730574][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 3535.735921][ T30] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 3535.742214][ T30] __device_attach+0x2c5/0x450 [ 3535.747740][ T30] ? __pfx___device_attach+0x10/0x10 [ 3535.754837][ T30] ? _raw_spin_unlock+0x28/0x50 [ 3535.760063][ T30] device_initial_probe+0xa1/0xd0 [ 3535.765355][ T30] bus_probe_device+0x12a/0x220 [ 3535.770415][ T30] ? device_add+0x726/0xb70 [ 3535.775054][ T30] device_add+0x7b6/0xb70 [ 3535.779694][ T30] usb_new_device+0xa08/0x16f0 [ 3535.784623][ T30] ? __pfx_usb_new_device+0x10/0x10 [ 3535.790174][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 3535.795509][ T30] hub_event+0x2a1c/0x4f30 [ 3535.800417][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 3535.806696][ T30] ? __pfx_hub_event+0x10/0x10 [ 3535.818463][ T30] ? process_scheduled_works+0xa8d/0x18c0 [ 3535.824465][ T30] ? process_scheduled_works+0xa8d/0x18c0 [ 3535.830769][ T30] process_scheduled_works+0xb6e/0x18c0 [ 3535.837044][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 3535.843293][ T30] ? assign_work+0x3d5/0x5e0 [ 3535.848380][ T30] worker_thread+0xa53/0xfc0 [ 3535.853381][ T30] kthread+0x388/0x470 [ 3535.859211][ T30] ? __pfx_worker_thread+0x10/0x10 [ 3535.864589][ T30] ? __pfx_kthread+0x10/0x10 [ 3535.870609][ T30] ret_from_fork+0x51e/0xb90 [ 3535.875378][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 3535.880724][ T30] ? __switch_to+0xc7d/0x1450 [ 3535.928666][ T30] ? __pfx_kthread+0x10/0x10 [ 3535.933364][ T30] ret_from_fork_asm+0x1a/0x30 [ 3535.938412][ T30] [ 3535.942381][ T30] [ 3535.942381][ T30] Showing all locks held in the system: [ 3535.950487][ T30] 1 lock held by khungtaskd/30: [ 3535.955381][ T30] #0: ffffffff8e75e520 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 3535.970747][ T30] 2 locks held by getty/5583: [ 3535.975510][ T30] #0: ffff8880378a10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 3535.987957][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 3535.999403][ T30] 3 locks held by kworker/1:0/17062: [ 3536.006037][ T30] #0: ffff88813fe0f148 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 3536.017843][ T30] #1: ffffc9000d417c40 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 3536.031313][ T30] #2: ffffffff8e764680 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 3536.045920][ T30] 5 locks held by kworker/0:5/18005: [ 3536.051674][ T30] #0: ffff88802168a548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 3536.076281][ T30] #1: ffffc900037e7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 3536.091862][ T30] #2: ffff88802a132198 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 3536.106240][ T30] #3: ffff888028b7f198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 3536.127258][ T30] #4: ffff8880554d3160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 3536.141248][ T30] 6 locks held by kworker/0:1/25812: [ 3536.146571][ T30] #0: ffff88802168a548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 3536.165377][ T30] #1: ffffc9000ca7fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 3536.182786][ T30] #2: ffff88802a08a198 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 3536.195791][ T30] #3: ffff88802a0db518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x217a/0x4f30 [ 3536.211344][ T30] #4: ffff88802981e768 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21a2/0x4f30 [ 3536.226997][ T30] #5: ffffffff8f474f30 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x14e/0x1840 [ 3536.244715][ T30] 4 locks held by udevd/27477: [ 3536.253018][ T30] #0: ffff88807f9a32f0 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10 [ 3536.268296][ T30] #1: ffff888034db5888 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 3536.285360][ T30] #2: ffff88803ef96f08 (kn->active#27){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 3536.305687][ T30] #3: ffff888028b7f198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 3536.328960][ T30] 3 locks held by kworker/u8:10/29050: [ 3536.334470][ T30] #0: ffff88801b6de948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 3536.359067][ T30] #1: ffffc9000d8afc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 3536.378844][ T30] #2: ffffffff8fbbf8b0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 3536.395914][ T30] 1 lock held by syz.1.10770/29185: [ 3536.405509][ T30] #0: ffffffff8e764680 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 3536.426089][ T30] 3 locks held by syz.5.10771/29186: [ 3536.439604][ T30] #0: ffff888057e96f48 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 3536.459313][ T30] #1: ffff88803c9d0260 (sk_lock-AF_CAN){+.+.}-{0:0}, at: bcm_release+0x1cd/0x940 [ 3536.476649][ T30] #2: ffffffff8e7647b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 3536.497511][ T30] 1 lock held by syz.5.10771/29190: [ 3536.548912][ T30] [ 3536.554993][ T30] ============================================= [ 3536.554993][ T30] [ 3536.573773][ T30] NMI backtrace for cpu 1 [ 3536.573799][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 3536.573828][ T30] Tainted: [L]=SOFTLOCKUP [ 3536.573836][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3536.573850][ T30] Call Trace: [ 3536.573858][ T30] [ 3536.573868][ T30] dump_stack_lvl+0xe8/0x150 [ 3536.573904][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 3536.573953][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 3536.573984][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 3536.574017][ T30] sys_info+0x135/0x170 [ 3536.574041][ T30] watchdog+0xfd9/0x1030 [ 3536.574077][ T30] ? watchdog+0x21a/0x1030 [ 3536.574114][ T30] kthread+0x388/0x470 [ 3536.574135][ T30] ? __pfx_watchdog+0x10/0x10 [ 3536.574164][ T30] ? __pfx_kthread+0x10/0x10 [ 3536.574186][ T30] ret_from_fork+0x51e/0xb90 [ 3536.574215][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 3536.574240][ T30] ? __switch_to+0xc7d/0x1450 [ 3536.574267][ T30] ? __pfx_kthread+0x10/0x10 [ 3536.574289][ T30] ret_from_fork_asm+0x1a/0x30 [ 3536.574335][ T30] [ 3536.574367][ T30] Sending NMI from CPU 1 to CPUs 0: [ 3536.691585][ C0] NMI backtrace for cpu 0 [ 3536.691608][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 3536.691635][ C0] Tainted: [L]=SOFTLOCKUP [ 3536.691642][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3536.691653][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 3536.691678][ C0] Code: 6e 6c 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 c2 1a 00 fb f4 fc e9 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 3536.691692][ C0] RSP: 0018:ffffffff8e407dc0 EFLAGS: 00000246 [ 3536.691709][ C0] RAX: 0000000003da288d RBX: ffffffff819a900a RCX: 0000000080000001 [ 3536.691722][ C0] RDX: 0000000000000001 RSI: ffffffff8def7f2f RDI: ffffffff8c27c900 [ 3536.691734][ C0] RBP: ffffffff8e407eb0 R08: ffff8880b863395b R09: 1ffff110170c672b [ 3536.691746][ C0] R10: dffffc0000000000 R11: ffffed10170c672c R12: 0000000000000000 [ 3536.691759][ C0] R13: 1ffffffff1c929d8 R14: 0000000000000000 R15: 1ffffffff1c929d8 [ 3536.691771][ C0] FS: 0000000000000000(0000) GS:ffff88812545d000(0000) knlGS:0000000000000000 [ 3536.691785][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3536.691797][ C0] CR2: 00000000801ee018 CR3: 00000000539d4000 CR4: 00000000003526f0 [ 3536.691819][ C0] Call Trace: [ 3536.691827][ C0] [ 3536.691834][ C0] default_idle+0x9/0x20 [ 3536.691854][ C0] default_idle_call+0x72/0xb0 [ 3536.691874][ C0] do_idle+0x36a/0x5f0 [ 3536.691896][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3536.691917][ C0] ? __pfx_do_idle+0x10/0x10 [ 3536.691942][ C0] cpu_startup_entry+0x43/0x60 [ 3536.691961][ C0] rest_init+0x2de/0x300 [ 3536.691981][ C0] start_kernel+0x385/0x3d0 [ 3536.692072][ C0] x86_64_start_reservations+0x24/0x30 [ 3536.692113][ C0] x86_64_start_kernel+0x143/0x1c0 [ 3536.692134][ C0] common_startup_64+0x13e/0x147 [ 3536.692157][ C0] [ 3536.887000][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 3536.893901][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 3536.904606][ T30] Tainted: [L]=SOFTLOCKUP [ 3536.908944][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3536.919013][ T30] Call Trace: [ 3536.922302][ T30] [ 3536.925239][ T30] vpanic+0x56c/0xa60 [ 3536.929241][ T30] ? __pfx___schedule+0x10/0x10 [ 3536.934101][ T30] ? __pfx_vpanic+0x10/0x10 [ 3536.938725][ T30] ? __pfx_console_unlock+0x10/0x10 [ 3536.943944][ T30] panic+0xc5/0xd0 [ 3536.947685][ T30] ? __pfx_panic+0x10/0x10 [ 3536.952201][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 3536.957625][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 3536.963800][ T30] watchdog+0x1023/0x1030 [ 3536.968149][ T30] ? watchdog+0x21a/0x1030 [ 3536.972596][ T30] kthread+0x388/0x470 [ 3536.976666][ T30] ? __pfx_watchdog+0x10/0x10 [ 3536.981352][ T30] ? __pfx_kthread+0x10/0x10 [ 3536.985952][ T30] ret_from_fork+0x51e/0xb90 [ 3536.990553][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 3536.995671][ T30] ? __switch_to+0xc7d/0x1450 [ 3537.000357][ T30] ? __pfx_kthread+0x10/0x10 [ 3537.004951][ T30] ret_from_fork_asm+0x1a/0x30 [ 3537.009738][ T30] [ 3537.013163][ T30] Kernel Offset: disabled [ 3537.017487][ T30] Rebooting in 86400 seconds..