last executing test programs: 5m14.19896881s ago: executing program 3 (id=234): syz_extract_tcp_res(&(0x7f0000000000), 0x4, 0xfffffffe) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) fsopen(&(0x7f0000000140)='cgroup\x00', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = open$dir(&(0x7f0000000300)='./file1\x00', 0x8000, 0x2) openat2(r0, &(0x7f00000003c0)='./file1\x00', &(0x7f0000000400)={0x501081, 0x11, 0x12}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x8) fallocate(r1, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x200000c, 0x13, r1, 0x2000) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8000003d) r3 = syz_io_uring_setup(0xed9, &(0x7f0000000340)={0x0, 0x2090, 0x2, 0x800008, 0xfffffffd}, &(0x7f0000000040), &(0x7f0000000240), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r3, 0x11, &(0x7f0000000500)='n', 0x1) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x13, 0x0, 0x2) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000808, 0x0, 0x0) r5 = syz_io_uring_setup(0xf01, 0x0, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0, 0x0) syz_io_uring_submit(r6, r7, 0x0, &(0x7f0000000280)=@IORING_OP_SENDMSG_ZC={0x30, 0x28, 0x20, 0xffffffffffffffff, 0x0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f00000009c0), 0x0, 0x0, 0x2b8}, 0x2, 0x48000, 0x1, {0x2}}) io_uring_enter(r5, 0x2000, 0xfffffffd, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000001c0)) syz_usb_connect(0x4, 0x77d, &(0x7f0000000d80)={{0x12, 0x1, 0x310, 0xf1, 0xfc, 0x70, 0x10, 0x409, 0x249, 0x789d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x76b, 0x2, 0x62, 0x0, 0x10, 0x5, "", [{{0x9, 0x4, 0xe4, 0xfc, 0x7, 0xd0, 0x27, 0x37, 0x4, [@hid_hid={0x9, 0x21, 0xdec, 0x2, 0x1, {0x22, 0xd7a}}, @cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "7e557801"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x40, 0xfff8, 0xf29, 0x4}, {0x6, 0x24, 0x1a, 0x769, 0xa}, [@obex={0x5, 0x24, 0x15, 0xffff}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x4}, @mbim_extended={0x8, 0x24, 0x1c, 0x7fff, 0x6, 0xe546}]}], [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x4, 0x6, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xf, 0x1}]}}, {{0x9, 0x5, 0x4, 0x10, 0x0, 0x4, 0x5, 0xc, [@generic={0x18, 0x8, "b1d11ae6b1c59d008de8845f5852e987ee377daf30b8"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x3}]}}, {{0x9, 0x5, 0xf, 0x10, 0x20, 0x54, 0xb0, 0x3}}, {{0x9, 0x5, 0x80, 0x3, 0x8, 0x7, 0x0, 0xfa, [@generic={0x7b, 0xe, "8be9f769f945b599ffc2a6295288262ef9eb4096258ca8fa191ef0edb877419d1eecf667d2ab28f3876f83b8fd4860396561463e5416a2a78c48d5b241e4cfb019c40941a1d3149d6d09bf59644f910b280c5b46d68f8874b54d7c273c65074898cdeb37496ad0348e0b95c67255bb2489d5940a310ed09ea9"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x4, 0x8, 0xef, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xff, 0x7}]}}, {{0x9, 0x5, 0x5, 0x8, 0x20, 0xd, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x2, 0x2}]}}, {{0x9, 0x5, 0x0, 0x4, 0x3ff, 0x0, 0x2, 0x4e}}]}}, {{0x9, 0x4, 0x53, 0x8, 0xf, 0xd7, 0x23, 0x55, 0x1, [], [{{0x9, 0x5, 0x5, 0x0, 0x20, 0x5, 0x7, 0x6, [@generic={0xea, 0xb, "54b1410ca717d436b1a50752e1df96bae479ec4248ed9c8ca869bca4bda98fa4970cdc83cdc31d93a03b66692c8962222fffe5f75b096748ea0c706a4f4dd5363e3c462414a141446935a4002cc26aff8b1428b0c3fab74665c912017bf0062739f4a49cf7396c7e6bdd868d306eabb4ed14974dbd408491a2653be1481945e7fd59cab9a8752c18180d0835d19952bbf52f9ab1ebfba3edc171a778213a46fe71d73cb64c8c8d38a21009a4c5bafebb6560702e6ab21611e927b5336189228d257102acf1f7a489ed07cbd0e97f257356fd779accc2d2795c631a0da4ff02c2a6591532f349ecab"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x8, 0x8000}]}}, {{0x9, 0x5, 0x6, 0x8, 0x40, 0x0, 0x80}}, {{0x9, 0x5, 0x6, 0xc, 0x400, 0x4, 0x5, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x9}, @generic={0xc5, 0x9, "2ba395f6f848ef552f2afe9b553e5f315f9c77ab54b6f26f0fcd26f924331ca7ab0867181d97936f0ea7e581c7ea8542751f2861440c18bdac6efc9d4f4bac9efdac1170d08dfb347980061eb0bec4e60345529fa1cee1c68bf60c06a61f2cc3567cd886f2d8ef797bbc295a382255df9253d84ffa79507f691035faf300c0bb3b7bc8e160e8e0dc0abc631a728dae6ac5e50dd78d0e76d8ee525dd962826993516a64f71e674f529593a6657d55d63f2a57686c0b602a3caba44abfa8c7151961cb65"}]}}, {{0x9, 0x5, 0x8, 0x8, 0x10, 0x8, 0x7, 0x6, [@generic={0xb5, 0x9, "ad42b63f0337d0d208c0438e669beedce1993154413dbeb8727c6222f1a062df5e5a8d3a2c8230a16ec2b7e88c609ca0963cd1166f8bef0538b17d56420f9a6b5b51161395b0dc866450c510a7c12f9f4c9274a99e5b8ac0a9de4bb1c4673c18a2a4c906049736b90f68fb5f4607cb377b9d95a75ff527f98b0471150aa159f6ef3cb906beed84f6d557f7c88c1911e41d17b463c6b78d3366208446faae666517b6ce767e85a226f61dc4e12648e539a7c465"}, @generic={0xc7, 0x26, "db3ac98c9e3d1dd8268f4be033f3b6f7e648cf1d226bc7c58badd90ffcd6b9b03dcf952def930cd675c2d63371ccb6aa42bb84091c0a362026fa925a9975005ebdbcc0edc27926c2f28cdf36002baee27a6abac7b4739ef9f23cb48f0fc1d65fa3142b4388269b59378c3e403a2d791e478660db406d478f789b190e130c8418182904a5dd1d92c16688de61624640a4b2b2bddd0dd6c000dc8052c2af1348d82265098c2ed4254b1340d9254c3e65cb615ca45ef4a7355cfa617a39eae5bf26869602b0c6"}]}}, {{0x9, 0x5, 0x7, 0xc, 0x200, 0x4, 0x7, 0x1, [@generic={0xd0, 0x7, "136b13d314541dc22b23a0d2088e956f227c5fbaade215970b72a900c59a58740c0e909c7fa6e478a9139a5713507e762d9653e3b9a6185549958a3a201e189bbb472f9be3d402fd9675ecb997768dd773e9e13125f0a6ff7b206f28c85c972a800f0e78576bbc1cde93b02820b70b29c97857853345b35501ed0dd1d326d3149edba596867337d6d7f0c06f799cc2392a5c837a07676df66869d26623449d0996ca870573bd95156626ca61ec7b09f9b6096fa83e1d64991613ac72f54b43a8c49ce176b1a704ecd2004a9ec72b"}, @generic={0x2f, 0xd, "51cf6e073923148deb5444d5f3363390a976d5c55f381359f2d566676cb9da29cb8e1661f981c44d17d78fbfd5"}]}}, {{0x9, 0x5, 0x3, 0x1, 0x200, 0x10, 0xc, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x3}]}}, {{0x9, 0x5, 0x0, 0x12, 0x40, 0x1, 0x5, 0x9a}}, {{0x9, 0x5, 0x2, 0x2, 0x8, 0x4, 0x1, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x2}, @generic={0xfc, 0x1, "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"}]}}, {{0x9, 0x5, 0x0, 0x1, 0x200, 0x6, 0x4, 0x9}}, {{0x9, 0x5, 0xd, 0x10, 0x20, 0xe, 0x7, 0x99}}, {{0x9, 0x5, 0x4, 0xc, 0x8, 0xd, 0x4, 0xb}}, {{0x9, 0x5, 0x8, 0x10, 0x200, 0x74, 0x38, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xb5, 0xa448}, @generic={0x46, 0x1, "71261039fc2eb9c6c5b97d5564521653dfec6df003dfb111c7907daf5a510d0c0878f0a13ccec2d7a161af6373793bccbbf65a9f623cee43c66cc76ccb73b84a5740cd91"}]}}, {{0x9, 0x5, 0xa, 0x3, 0x200, 0x5, 0x5, 0x9, [@generic={0xe, 0x23, "ec60bda7cabd3573c16cdeb7"}]}}, {{0x9, 0x5, 0x4, 0x8, 0x0, 0x5, 0x81, 0x5}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x4, 0x2, 0x2, [@generic={0x2, 0x1}]}}]}}]}}]}}, &(0x7f0000001600)={0xa, &(0x7f0000001540)={0xa, 0x6, 0x200, 0x0, 0x7, 0x3, 0x20, 0xd5}, 0x19, &(0x7f0000001580)={0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x4, 0x2, 0x141, 0xf, 0x5, [0xff0000, 0xff00]}]}, 0x1, [{0x4, &(0x7f00000015c0)=@lang_id={0x4, 0x3, 0x1809}}]}) syz_open_dev$vim2m(&(0x7f0000000280), 0x6, 0x2) 5m12.077493173s ago: executing program 3 (id=245): syz_extract_tcp_res(&(0x7f0000000000), 0x4, 0xfffffffe) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) fsopen(&(0x7f0000000140)='cgroup\x00', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = open$dir(&(0x7f0000000300)='./file1\x00', 0x8000, 0x2) openat2(r0, &(0x7f00000003c0)='./file1\x00', &(0x7f0000000400)={0x501081, 0x11, 0x12}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x8) fallocate(r1, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x200000c, 0x13, r1, 0x2000) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8000003d) r3 = syz_io_uring_setup(0xed9, &(0x7f0000000340)={0x0, 0x2090, 0x2, 0x800008, 0xfffffffd}, &(0x7f0000000040), &(0x7f0000000240), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r3, 0x11, &(0x7f0000000500)='n', 0x1) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x13, 0x0, 0x2) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000808, 0x0, 0x0) r5 = syz_io_uring_setup(0xf01, 0x0, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0, 0x0) syz_io_uring_submit(r6, r7, 0x0, &(0x7f0000000280)=@IORING_OP_SENDMSG_ZC={0x30, 0x28, 0x20, 0xffffffffffffffff, 0x0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f00000009c0), 0x0, 0x0, 0x2b8}, 0x2, 0x48000, 0x1, {0x2}}) io_uring_enter(r5, 0x2000, 0xfffffffd, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000001c0)) syz_usb_connect(0x4, 0x796, &(0x7f0000000d80)={{0x12, 0x1, 0x310, 0xf1, 0xfc, 0x70, 0x10, 0x409, 0x249, 0x789d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x784, 0x2, 0x62, 0x0, 0x10, 0x5, "", [{{0x9, 0x4, 0xe4, 0xfc, 0x7, 0xd0, 0x27, 0x37, 0x4, [@hid_hid={0x9, 0x21, 0xdec, 0x2, 0x1, {0x22, 0xd7a}}, @cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "7e557801"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x40, 0xfff8, 0xf29, 0x4}, {0x6, 0x24, 0x1a, 0x769, 0xa}, [@obex={0x5, 0x24, 0x15, 0xffff}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x4}, @mbim_extended={0x8, 0x24, 0x1c, 0x7fff, 0x6, 0xe546}]}], [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x4, 0x6, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xf, 0x1}]}}, {{0x9, 0x5, 0x4, 0x10, 0x0, 0x4, 0x5, 0xc, [@generic={0x18, 0x8, "b1d11ae6b1c59d008de8845f5852e987ee377daf30b8"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x3}]}}, {{0x9, 0x5, 0xf, 0x10, 0x20, 0x54, 0xb0, 0x3}}, {{0x9, 0x5, 0x80, 0x3, 0x8, 0x7, 0x0, 0xfa, [@generic={0x7b, 0xe, "8be9f769f945b599ffc2a6295288262ef9eb4096258ca8fa191ef0edb877419d1eecf667d2ab28f3876f83b8fd4860396561463e5416a2a78c48d5b241e4cfb019c40941a1d3149d6d09bf59644f910b280c5b46d68f8874b54d7c273c65074898cdeb37496ad0348e0b95c67255bb2489d5940a310ed09ea9"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x4, 0x8, 0xef, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xff, 0x7}]}}, {{0x9, 0x5, 0x5, 0x8, 0x20, 0xd, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x2, 0x2}]}}, {{0x9, 0x5, 0x0, 0x4, 0x3ff, 0x0, 0x2, 0x4e}}]}}, {{0x9, 0x4, 0x53, 0x8, 0xf, 0xd7, 0x23, 0x55, 0x1, [], [{{0x9, 0x5, 0x5, 0x0, 0x20, 0x5, 0x7, 0x6, [@generic={0xea, 0xb, "54b1410ca717d436b1a50752e1df96bae479ec4248ed9c8ca869bca4bda98fa4970cdc83cdc31d93a03b66692c8962222fffe5f75b096748ea0c706a4f4dd5363e3c462414a141446935a4002cc26aff8b1428b0c3fab74665c912017bf0062739f4a49cf7396c7e6bdd868d306eabb4ed14974dbd408491a2653be1481945e7fd59cab9a8752c18180d0835d19952bbf52f9ab1ebfba3edc171a778213a46fe71d73cb64c8c8d38a21009a4c5bafebb6560702e6ab21611e927b5336189228d257102acf1f7a489ed07cbd0e97f257356fd779accc2d2795c631a0da4ff02c2a6591532f349ecab"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x8, 0x8000}]}}, {{0x9, 0x5, 0x6, 0x8, 0x40, 0x0, 0x80}}, {{0x9, 0x5, 0x6, 0xc, 0x400, 0x4, 0x5, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x9}, @generic={0xc5, 0x9, "2ba395f6f848ef552f2afe9b553e5f315f9c77ab54b6f26f0fcd26f924331ca7ab0867181d97936f0ea7e581c7ea8542751f2861440c18bdac6efc9d4f4bac9efdac1170d08dfb347980061eb0bec4e60345529fa1cee1c68bf60c06a61f2cc3567cd886f2d8ef797bbc295a382255df9253d84ffa79507f691035faf300c0bb3b7bc8e160e8e0dc0abc631a728dae6ac5e50dd78d0e76d8ee525dd962826993516a64f71e674f529593a6657d55d63f2a57686c0b602a3caba44abfa8c7151961cb65"}]}}, {{0x9, 0x5, 0x8, 0x8, 0x10, 0x8, 0x7, 0x6, [@generic={0xb5, 0x9, "ad42b63f0337d0d208c0438e669beedce1993154413dbeb8727c6222f1a062df5e5a8d3a2c8230a16ec2b7e88c609ca0963cd1166f8bef0538b17d56420f9a6b5b51161395b0dc866450c510a7c12f9f4c9274a99e5b8ac0a9de4bb1c4673c18a2a4c906049736b90f68fb5f4607cb377b9d95a75ff527f98b0471150aa159f6ef3cb906beed84f6d557f7c88c1911e41d17b463c6b78d3366208446faae666517b6ce767e85a226f61dc4e12648e539a7c465"}, @generic={0xc7, 0x26, "db3ac98c9e3d1dd8268f4be033f3b6f7e648cf1d226bc7c58badd90ffcd6b9b03dcf952def930cd675c2d63371ccb6aa42bb84091c0a362026fa925a9975005ebdbcc0edc27926c2f28cdf36002baee27a6abac7b4739ef9f23cb48f0fc1d65fa3142b4388269b59378c3e403a2d791e478660db406d478f789b190e130c8418182904a5dd1d92c16688de61624640a4b2b2bddd0dd6c000dc8052c2af1348d82265098c2ed4254b1340d9254c3e65cb615ca45ef4a7355cfa617a39eae5bf26869602b0c6"}]}}, {{0x9, 0x5, 0x7, 0xc, 0x200, 0x4, 0x7, 0x1, [@generic={0xd0, 0x7, "136b13d314541dc22b23a0d2088e956f227c5fbaade215970b72a900c59a58740c0e909c7fa6e478a9139a5713507e762d9653e3b9a6185549958a3a201e189bbb472f9be3d402fd9675ecb997768dd773e9e13125f0a6ff7b206f28c85c972a800f0e78576bbc1cde93b02820b70b29c97857853345b35501ed0dd1d326d3149edba596867337d6d7f0c06f799cc2392a5c837a07676df66869d26623449d0996ca870573bd95156626ca61ec7b09f9b6096fa83e1d64991613ac72f54b43a8c49ce176b1a704ecd2004a9ec72b"}, @generic={0x2f, 0xd, "51cf6e073923148deb5444d5f3363390a976d5c55f381359f2d566676cb9da29cb8e1661f981c44d17d78fbfd5"}]}}, {{0x9, 0x5, 0x3, 0x1, 0x200, 0x10, 0xc, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x3}]}}, {{0x9, 0x5, 0x0, 0x12, 0x40, 0x1, 0x5, 0x9a}}, {{0x9, 0x5, 0x2, 0x2, 0x8, 0x4, 0x1, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x2}, @generic={0xfc, 0x1, "49f08614bf559d692fcf0f9f1e59ad783423a0ab2556703f4ed429bcc419600d32967323e38a4eaff530bca9954ede3f49137c907e673aaabfe2a2b6d99605c168da4b761475e24f521a286e92e8ad0841cbedb58e9afe54fa33e3bc710d45479d2d8fedee64def1778497ccf04b1b3c6f0c32c814b65ed224d7d76c402774afbf80b1fa72ac6ecc156c7ca26be7ddea58be7f5a41d767c20f09f936bc72363b3b0231459b005e38a6a00b36c7130233c03f672e9e2561643cfc21a79eb604156ab9c9e6ce8a2d88ba2c3215f4723a861c7eaa408e749712e8bf521c683e88ac9543a44f37590438e393eebfc202539b29911ffa11e1ca323622"}]}}, {{0x9, 0x5, 0x0, 0x1, 0x200, 0x6, 0x4, 0x9}}, {{0x9, 0x5, 0xd, 0x10, 0x20, 0xe, 0x7, 0x99}}, {{0x9, 0x5, 0x4, 0xc, 0x8, 0xd, 0x4, 0xb}}, {{0x9, 0x5, 0x8, 0x10, 0x200, 0x74, 0x38, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xb5, 0xa448}, @generic={0x46, 0x1, "71261039fc2eb9c6c5b97d5564521653dfec6df003dfb111c7907daf5a510d0c0878f0a13ccec2d7a161af6373793bccbbf65a9f623cee43c66cc76ccb73b84a5740cd91"}]}}, {{0x9, 0x5, 0xa, 0x3, 0x200, 0x5, 0x5, 0x9, [@generic={0xe, 0x23, "ec60bda7cabd3573c16cdeb7"}]}}, {{0x9, 0x5, 0x4, 0x8, 0x0, 0x5, 0x81, 0x5}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x4, 0x2, 0x2, [@generic={0x1b, 0x1, "b7942eccfce3323665514620a9998745c7f3e4532d1e548a61"}]}}]}}]}}]}}, &(0x7f0000001600)={0xa, &(0x7f0000001540)={0xa, 0x6, 0x200, 0x0, 0x7, 0x3, 0x20, 0xd5}, 0x19, &(0x7f0000001580)={0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x4, 0x2, 0x141, 0xf, 0x5, [0xff0000, 0xff00]}]}, 0x1, [{0x4, &(0x7f00000015c0)=@lang_id={0x4, 0x3, 0x1809}}]}) syz_open_dev$vim2m(&(0x7f0000000280), 0x6, 0x2) 5m9.740775632s ago: executing program 3 (id=253): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff11000000000e1208000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee40021146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x2f, 0x9, 0x70bd27, 0x25dfdbfd, {0x5}, [@typed={0x8, 0xa, 0x0, 0x0, @pid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x40814) fcntl$lock(r1, 0x25, &(0x7f00000006c0)={0x0, 0x0, 0xac1d, 0x9}) fcntl$lock(r1, 0x25, &(0x7f0000000040)={0x1, 0x0, 0x7f, 0x7}) fcntl$lock(r1, 0x24, &(0x7f0000000600)={0x2, 0x0, 0x1, 0x4}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002580), r0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x80001, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r7 = syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$x86(r7, &(0x7f0000000200)={0x0, 0x0, 0x14}) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f0000000040)) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_CPUID(r8, 0x4008ae8a, &(0x7f0000000040)) r9 = memfd_create(&(0x7f0000000800)='\xff\x00l\x1e\xa00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x1, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0x2}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f000000a7c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[], 0x20}}], 0x1, 0x800) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000f303010000000000000000000000000a14000000ea03010000000000000000000000000ac967951cf2da70e68e5cd57ab1e9003e38f8109328019fbe1ab6ba1da94c0e31c398441fbff8a8dd2fe53dc175c7319eb67b559f46f3ee886ecab60b5c03d69fe5ba169b5bd01e4b7bdd1828af0531f607d4035cac2f47037a43fbb42922fb4b3833ff1003949a5ccd354fec929a92f7c423a68c80de804d44e77e8e9acce60c06"], 0x28}}, 0x4008000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}, 0x1, 0x0, 0x0, 0x8000}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES8], 0xb8}, 0x1, 0x0, 0x0, 0x20008010}, 0x50) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) r4 = socket(0x840000000002, 0x3, 0x100) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r4, &(0x7f0000005240), 0x4000095, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000004800000000020000000900010073797a300000000064000000090a010400000000000000000200002008000a40000000010900020073797a31000000000900010073797a300000000008000540000000080800034000000084200009801c0002800c00018008000140000000040c00018008000140000000043c0000000c0a01010000000000000000020000000900020073797a31000000000900010073797a3000000000100003800c000080080003400000"], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2382420, &(0x7f0000000200)=ANY=[]) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0x4}}, './file1\x00'}) io_uring_setup(0x20006d19, &(0x7f0000000100)={0x0, 0x31cf, 0x10001, 0x2, 0x10c, 0x0, r6}) r7 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r8 = openat$binfmt(0xffffffffffffff9c, r7, 0x42, 0x1ff) close(r8) 8.869042397s ago: executing program 1 (id=1518): set_mempolicy(0x3, &(0x7f0000000080)=0x6, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001240)={0x0, 0x80000}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000f00)=@nat={'nat\x00', 0x670, 0x5, 0x358, 0x2c8, 0x1b8, 0xffffffff, 0x0, 0x2c8, 0x458, 0x458, 0xffffffff, 0x458, 0x458, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8, 0x48}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x19, @multicast2, @loopback, @icmp_id=0x66, @port=0x4e24}}}}, {{@ip={@broadcast, @remote, 0xff, 0xff, 'nicvf0\x00', 'ipvlan1\x00', {0xff}, {}, 0xc, 0x0, 0x30}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x11, @ipv6=@mcast1, @ipv4=@loopback, @icmp_id=0x64, @port=0x4e23}}}, {{@ip={@multicast2, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'team_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @icmp_id=0x65, @gre_key}}}, {{@ip={@broadcast, @rand_addr=0x1, 0x0, 0x0, 'nicvf0\x00', 'pim6reg\x00', {}, {0xff}, 0x1}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0xc0000000, {0x21, @broadcast, @dev={0xac, 0x14, 0x14, 0x1c}, @gre_key=0x40, @port=0x4e23}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3b8) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000003c0)={'ip6_vti0\x00', 0x400}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r7, 0x2180}, [@IFLA_TXQLEN={0x8, 0xd, 0x80000}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 8.68016838s ago: executing program 4 (id=1519): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x972, &(0x7f0000006680)) r0 = getpgrp(0x0) r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x17, &(0x7f00000003c0)={0x3d, 0xebfffff9, 0x1}) ptrace$cont(0x9, r1, 0x1, 0x4) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0}) r3 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) r5 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r5, 0x1) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) rmdir(&(0x7f0000000100)='./bus\x00') r6 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000340)) r7 = dup(r6) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r7}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4, 0x41}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup, 0xe, 0x0, 0xfffffff4, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], 0x0}, 0x40) preadv(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000100)=""/212, 0xd4}, {&(0x7f0000000200)=""/202, 0xca}, {&(0x7f0000000000)=""/19, 0x13}, {&(0x7f0000000040)=""/22, 0x16}, {&(0x7f0000000080)=""/47, 0x2f}], 0x5, 0x1fe, 0x12) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x16, 0x35, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40f7761f, 0x0, 0x0, 0x0, 0x566}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_fd={0x18, 0x2, 0x1, 0x0, 0x1}, @exit, @generic={0xff, 0x8, 0x5, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xcd3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000005c0)='GPL\x00', 0xfffffffa, 0xd4, &(0x7f0000000600)=""/212, 0x0, 0x4e, '\x00', r9, @fallback=0x20, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000740)={0x4, 0x8, 0x5, 0x3}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, &(0x7f0000000780)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000007c0)=[{0x1, 0x5, 0x4, 0xa}, {0x2, 0x2, 0x10, 0x5}, {0x2, 0x3, 0x8}, {0x1, 0x2, 0xd, 0x1}, {0x0, 0x2, 0x7, 0x3}, {0x3, 0x2, 0x9, 0xb}, {0x5, 0x2, 0xb, 0x1}], 0x10, 0x5}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='6\x00\x00\x00\b\x00\x00\x00', @ANYBLOB="ee60b85b30702b3d0017dc383b6cea583c07cdeb4b858cc30364e5692eb3c7aee8f5f6dcb0c1f7bfcecc3af9e67306cadfb83087e200951f3ea97e8149ce1aeaed728389e185653695ece09d692652f1b09cb6242b0a2651919927fba7bf9485440b4328ce", @ANYRES32=r11, @ANYBLOB, @ANYRES64=r10], 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x4}, 0x50) 8.16512728s ago: executing program 4 (id=1523): syz_extract_tcp_res(&(0x7f0000000000), 0x4, 0xfffffffe) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) fsopen(&(0x7f0000000140)='cgroup\x00', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = open$dir(&(0x7f0000000300)='./file1\x00', 0x8000, 0x2) openat2(r0, &(0x7f00000003c0)='./file1\x00', &(0x7f0000000400)={0x501081, 0x11, 0x12}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x8) fallocate(r1, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x200000c, 0x13, r1, 0x2000) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8000003d) r3 = syz_io_uring_setup(0xed9, &(0x7f0000000340)={0x0, 0x2090, 0x2, 0x800008, 0xfffffffd}, &(0x7f0000000040), &(0x7f0000000240), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r3, 0x11, &(0x7f0000000500)='n', 0x1) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x13, 0x0, 0x2) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000808, 0x0, 0x0) r5 = syz_io_uring_setup(0xf01, 0x0, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0, 0x0) syz_io_uring_submit(r6, r7, 0x0, &(0x7f0000000280)=@IORING_OP_SENDMSG_ZC={0x30, 0x28, 0x20, 0xffffffffffffffff, 0x0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f00000009c0), 0x0, 0x0, 0x2b8}, 0x2, 0x48000, 0x1, {0x2}}) io_uring_enter(r5, 0x2000, 0xfffffffd, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000001c0)) syz_usb_connect(0x4, 0x51b, &(0x7f0000000d80)={{0x12, 0x1, 0x310, 0xf1, 0xfc, 0x70, 0x10, 0x409, 0x249, 0x789d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x509, 0x2, 0x62, 0x0, 0x10, 0x5, "", [{{0x9, 0x4, 0xe4, 0xfc, 0x7, 0xd0, 0x27, 0x37, 0x4, [@hid_hid={0x9, 0x21, 0xdec, 0x2, 0x1, {0x22, 0xd7a}}, @cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "7e557801"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x40, 0xfff8, 0xf29, 0x4}, {0x6, 0x24, 0x1a, 0x769, 0xa}, [@obex={0x5, 0x24, 0x15, 0xffff}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x4}, @mbim_extended={0x8, 0x24, 0x1c, 0x7fff, 0x6, 0xe546}]}], [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x4, 0x6, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xf, 0x1}]}}, {{0x9, 0x5, 0x4, 0x10, 0x0, 0x4, 0x5, 0xc, [@generic={0x18, 0x8, "b1d11ae6b1c59d008de8845f5852e987ee377daf30b8"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x3}]}}, {{0x9, 0x5, 0xf, 0x10, 0x20, 0x54, 0xb0, 0x3}}, {{0x9, 0x5, 0x80, 0x3, 0x8, 0x7, 0x0, 0xfa, [@generic={0x7b, 0xe, "8be9f769f945b599ffc2a6295288262ef9eb4096258ca8fa191ef0edb877419d1eecf667d2ab28f3876f83b8fd4860396561463e5416a2a78c48d5b241e4cfb019c40941a1d3149d6d09bf59644f910b280c5b46d68f8874b54d7c273c65074898cdeb37496ad0348e0b95c67255bb2489d5940a310ed09ea9"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x4, 0x8, 0xef, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xff, 0x7}]}}, {{0x9, 0x5, 0x5, 0x8, 0x20, 0xd, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x2, 0x2}]}}, {{0x9, 0x5, 0x0, 0x4, 0x3ff, 0x0, 0x2, 0x4e}}]}}, {{0x9, 0x4, 0x53, 0x8, 0xa, 0xd7, 0x23, 0x55, 0x1, [], [{{0x9, 0x5, 0x5, 0x0, 0x20, 0x5, 0x7, 0x6, [@generic={0xea, 0xb, "54b1410ca717d436b1a50752e1df96bae479ec4248ed9c8ca869bca4bda98fa4970cdc83cdc31d93a03b66692c8962222fffe5f75b096748ea0c706a4f4dd5363e3c462414a141446935a4002cc26aff8b1428b0c3fab74665c912017bf0062739f4a49cf7396c7e6bdd868d306eabb4ed14974dbd408491a2653be1481945e7fd59cab9a8752c18180d0835d19952bbf52f9ab1ebfba3edc171a778213a46fe71d73cb64c8c8d38a21009a4c5bafebb6560702e6ab21611e927b5336189228d257102acf1f7a489ed07cbd0e97f257356fd779accc2d2795c631a0da4ff02c2a6591532f349ecab"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x8, 0x8000}]}}, {{0x9, 0x5, 0x6, 0x8, 0x40, 0x0, 0x80}}, {{0x9, 0x5, 0x6, 0xc, 0x400, 0x4, 0x5, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x9}, @generic={0xc5, 0x9, "2ba395f6f848ef552f2afe9b553e5f315f9c77ab54b6f26f0fcd26f924331ca7ab0867181d97936f0ea7e581c7ea8542751f2861440c18bdac6efc9d4f4bac9efdac1170d08dfb347980061eb0bec4e60345529fa1cee1c68bf60c06a61f2cc3567cd886f2d8ef797bbc295a382255df9253d84ffa79507f691035faf300c0bb3b7bc8e160e8e0dc0abc631a728dae6ac5e50dd78d0e76d8ee525dd962826993516a64f71e674f529593a6657d55d63f2a57686c0b602a3caba44abfa8c7151961cb65"}]}}, {{0x9, 0x5, 0x8, 0x8, 0x10, 0x8, 0x7, 0x6, [@generic={0xb5, 0x9, "ad42b63f0337d0d208c0438e669beedce1993154413dbeb8727c6222f1a062df5e5a8d3a2c8230a16ec2b7e88c609ca0963cd1166f8bef0538b17d56420f9a6b5b51161395b0dc866450c510a7c12f9f4c9274a99e5b8ac0a9de4bb1c4673c18a2a4c906049736b90f68fb5f4607cb377b9d95a75ff527f98b0471150aa159f6ef3cb906beed84f6d557f7c88c1911e41d17b463c6b78d3366208446faae666517b6ce767e85a226f61dc4e12648e539a7c465"}, @generic={0xc7, 0x26, "db3ac98c9e3d1dd8268f4be033f3b6f7e648cf1d226bc7c58badd90ffcd6b9b03dcf952def930cd675c2d63371ccb6aa42bb84091c0a362026fa925a9975005ebdbcc0edc27926c2f28cdf36002baee27a6abac7b4739ef9f23cb48f0fc1d65fa3142b4388269b59378c3e403a2d791e478660db406d478f789b190e130c8418182904a5dd1d92c16688de61624640a4b2b2bddd0dd6c000dc8052c2af1348d82265098c2ed4254b1340d9254c3e65cb615ca45ef4a7355cfa617a39eae5bf26869602b0c6"}]}}, {{0x9, 0x5, 0x3, 0x1, 0x200, 0x10, 0xc, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x3}]}}, {{0x9, 0x5, 0x0, 0x12, 0x40, 0x1, 0x5, 0x9a}}, {{0x9, 0x5, 0x8, 0x10, 0x200, 0x74, 0x38, 0x9}}, {{0x9, 0x5, 0xa, 0x3, 0x200, 0x5, 0x5, 0x9}}, {{0x9, 0x5, 0x4, 0x8, 0x0, 0x5, 0x81, 0x5}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x4, 0x2, 0x2, [@generic={0x2a, 0x1, "b7942eccfce3323665514620a9998745c7f3e4532d1e548a6183f74274981d94059611843e9f555a"}]}}]}}]}}]}}, &(0x7f0000001600)={0xa, &(0x7f0000001540)={0xa, 0x6, 0x200, 0x0, 0x7, 0x3, 0x20, 0xd5}, 0x19, &(0x7f0000001580)={0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x4, 0x2, 0x141, 0xf, 0x5, [0xff0000, 0xff00]}]}, 0x1, [{0x4, &(0x7f00000015c0)=@lang_id={0x4, 0x3, 0x1809}}]}) syz_open_dev$vim2m(&(0x7f0000000280), 0x6, 0x2) 7.649993012s ago: executing program 1 (id=1525): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000380)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x312000, 0x800, 0x0, 0x2}, 0x20) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x99) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4048aecb, &(0x7f0000000300)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 7.569239744s ago: executing program 2 (id=1526): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24002de8) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0xfffffffe, 0x4, 0x9, 0x18, "28f5c9ea1f0197000011ab18d2da69bde58cd7af40fd150b70aac11c2e16bd5bba76634793ddd7aae07ef35f17bf01933bdb6fd7ecdd91b59ca8d54100", "07a9400978042a8bfe1406584ae7df4af14e1df82d00", [0x2]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1e, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f00000071c0)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0xff7ffff7, @ipv4={'\x00', '\xff\xff', @local}, 0xfffb}, 0x1c, &(0x7f0000000480)=[{&(0x7f00000006c0)="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", 0x1a0}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e23, 0x86, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, 0x1c, &(0x7f0000000b00), 0x0, &(0x7f0000000e00)=[@hopopts={{0x108, 0x29, 0x36, {0x0, 0x1d, '\x00', [@enc_lim={0x4, 0x1, 0x61}, @jumbo={0xc2, 0x4, 0x145}, @jumbo={0xc2, 0x4, 0xf}, @ra={0x5, 0x2, 0x6}, @enc_lim={0x4, 0x1, 0x9}, @pad1, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @generic={0x7, 0xbd, "c35e418b3b5d07209090df28547efe458090c1b9b8f0f470f64e807d2b60ed8cabe737132f4b9c82d73d8e73ce7a8425f9421bf9cb6bf0799fdb3e3b63017ff0754243891b9a4f526f2d6a445aceb96338ec2aa5adfe9cb73fda7771a623c3ffc5cbab93c34e5a0fcb958d7043b5ef5a26b15ac7d28ed18ecb0eea5a298c357179187cc5177d15df102b6d542668c02d4ba83db3d53ce68af5ac126fb952f53b15419c18af8321d6d58b8c3ba660564e053315ab33b0ea75f5d35128d7"}, @ra={0x5, 0x2, 0x5}]}}}, @rthdr={{0x38, 0x29, 0x39, {0x62, 0x4, 0x2, 0x9, 0x0, [@private1, @local]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @flowinfo={{0x14, 0x29, 0xb, 0x1ff}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7f}}, @pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @rthdr_2292={{0x78, 0x29, 0x39, {0x2b, 0xc, 0x1, 0x8, 0x0, [@remote, @loopback, @rand_addr=' \x01\x00', @mcast2, @empty, @loopback]}}}, @rthdr={{0x48, 0x29, 0x39, {0x2b, 0x6, 0x0, 0xd, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x33}, @local]}}}, @tclass={{0x14, 0x29, 0x43, 0x1}}], 0x288}}, {{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001180)="b22e6a0379a84bc4e0ffd1d9559bfe89040903e76de89d375ad2344180ebd4cbe5905436ecb129763054adac1acc365daede30e217e6a350c50a07112f4606fd8f5a04ed8ecde6d64d9357110d781cf26944dd0e07db8cd60c681bc6d45af082db6f1fb367a72a6014586daf040f9a1a05bb55f9b1b87a75b2c1c3d3e9ec5893790252af6ad9984d312ac899bfbb78ce4c477f4f8c04040bd501a716a01f1030666c0cc35a02043a755f56c659b03dd5beddd454492561ae43e46f127267fd838fc5f2c6e9a6c577f95dfb18e04cf9bfa2ff6d3150fcfae66bf6237dd2aebc83894295ca8e72bea8ccb7", 0xea}, {&(0x7f0000001280)="6f927a28b27f616d6db1bdd795ce2534018d56d9fac036bf79d29d65869dd62b0ed138bfee15f5f825babb7e33f40dee96381638872adabcf874d9ddba288346b40080fe967bc92bbf02514ecbedfaa8d8a5f58035687ed67afa84a2df6457d0a8d6aa65c598a7a43749f4b20b6fc06008eec27dee47ae7a2042b35e6115655c07c7ca0e8decfde06b4aefaffcb2a104c79516feea00223e5a91fcc349f23b10bdf06f7d11136f50fcf2abcaa5e354cd65f3854708c3175851f5f7ea597368b50507e410ef2631dd86c6a5e85df50086533b56fdd0984da6", 0xd8}, {&(0x7f0000001380)="de5909fd297aa6a2cd1ea03c7f0e8372414c9c26cff5e0504a809424b5", 0x1d}, {&(0x7f00000013c0)="84e04d93acf891f3df2e75b9f94d743891f11861df1a2dfea64502d2093a0036786eea8d1bfc40d71edd5c2c51f34b070bf581763d4b6ce5baf90a242ed137da908e6d0aea0285d60b399a22a0d7e4b6e31fba18614cbfc9eb559288d8d0c81150f0fc2af483e4c55b5f91f3cc80d6b49617579c8593a2965030d3ad5b62c3d8ae09e17b445ca8cc6d3a2543f42fcd1808e2aa5606cb5b218217bb7fc982ffa23c36d3403e21b7f1cdea575cc92516caf2e528025f052047c2a687e35330a28dd907e6dbfd550df91020", 0xca}, {&(0x7f00000014c0)="52ca4906217404faa22cf3e9820d1fa520", 0x11}], 0x5, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], 0x3a0}}, {{&(0x7f0000001c40)={0xa, 0x4e22, 0x7, @private0, 0x1}, 0x1c, &(0x7f0000003300)=[{&(0x7f0000001c80)="129e19a150c6671d3d529506ee5325dca61652de2f1130466eee72e611f87ab917d28ce4fd1ffae38aec2abbf1148d998150f67582aef8c52e3b0e69bbaa7b739f0dccab858f7ea9bc820fcf2d7bb409641b77f09d685adbbea9b8317770dc745987a6c9a919f831c07cc08aa0c2b1b443655161f279d10a9d3f38f6118f039f7028c080078e", 0x86}, {&(0x7f0000001e40)="8abb6a19db1322f3245cfce95abba3cce2a29c516ef311866cbc1485b6f9d26e46b893b492bd942b0e29", 0x2a}, {&(0x7f0000002080)="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", 0xfc0}, {0x0}, {&(0x7f0000003140)="987fd4807b6f37f4e1e181c39e29a3d1ebe459be4f0c0bc3ac75e5414b37aeba56fd75c282c62760e8fa1ad3a4f50564b67c9915a9c6cbd61e31d675b460445c2d0e2654218a7cab63864a842b40", 0x4e}, {&(0x7f00000031c0)="bda0ee5c94c7d5abbaf0e3a94014e06e8e93325bbb669427a1dffd51ee1e34e339f136ac61b443f86411c099ce26b307c95fe26149b8019b966a3167c91ac681800be606fa581d0c47b05dca4c0cd3a5b314c14252", 0x55}, {&(0x7f0000003240)="6701eeecd98ae740eae547a6c0702a1d62fe9073fe18e7e7aab1c67ef22d2493", 0x20}, {&(0x7f0000003280)="47ee700a80e943fe0acc94c5334cf80202ee621dd952d7fac26490db74e707820cba9fe40333c96b47e278b275818a6ef10908888b545124369475e2d467c1fd35631c0da337eb6f414ef2", 0x4b}], 0x8, &(0x7f0000008400)=ANY=[@ANYBLOB="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"], 0x1140}}], 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000400)) sched_setattr(0xffffffffffffffff, &(0x7f0000000340)={0x38, 0x0, 0x1000002d, 0x12000, 0x299d4, 0x7, 0x395400000000005, 0x40000000000010, 0x3, 0x5509}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000340)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions'], 0xfb, 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) syz_fuse_handle_req(r4, &(0x7f000000a100)="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", 0x2000, &(0x7f0000000200)={&(0x7f0000000580)={0x50, 0x0, 0x100000001, {0x7, 0x28, 0x77, 0x2143040, 0x7f7f, 0x9, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000004080)="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", 0x2000, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x78, 0xfffffffffffffffe, 0x9, {0x6, 0x8, 0x0, {0x4, 0x7fffffffffffffff, 0x408, 0x201, 0x7, 0x6d6d, 0xa, 0x200207, 0xe000, 0x601d824b499141fd, 0xcd35, 0xffffffffffffffff, 0x0, 0xe9, 0x808003}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000540)=0x0, &(0x7f0000000600), &(0x7f0000000640)) mount$fuse(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000880)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{}, {@blksize={'blksize', 0x3d, 0xe00}}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x400}}, {@allow_other}, {@allow_other}]}}) fchownat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x1000) r6 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) socket$tipc(0x1e, 0x2, 0x0) fcntl$dupfd(r6, 0x0, r6) r7 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r7, 0x80047c05, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010400000000000000000200e704050001000700000030692b5aebac0cd17186e7779be9ab9e218cc6ca0af0bd83226a6865a9f66727"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 6.223802144s ago: executing program 1 (id=1529): ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x0, 0x0}) r1 = syz_open_procfs$userns(r0, &(0x7f0000000140)) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4038ae7a, &(0x7f0000000000)={0x80, 0x40000105, 0x0, 0x0}) ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4038ae7a, &(0x7f0000000280)={0x0, 0x400000b4, 0x0, 0x0}) syz_open_procfs(r0, &(0x7f0000000080)='net\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000140)=ANY=[@ANYBLOB="e704010000004f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000180)={0x44, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r6, 0x102030405060708, {}, 0xfe}, 0x18) connect$can_j1939(r5, &(0x7f0000000180)={0x1d, r6, 0xfffffffffffffffe, {0x0, 0xee}, 0xff}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x2, 0x7, 0x7fc00002}]}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000300)) sendmsg$can_j1939(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x5) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x82d00, 0x12) unshare(0x48000080) r8 = socket$l2tp(0x2, 0x2, 0x73) listen(r8, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) 5.500743463s ago: executing program 5 (id=1530): lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000480)={{}, {0x10}}, 0x24, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="5001000010000100feffffff000100006401010000000000000000000000000020010000000000000000000000000001000107164e230007000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x8801}, 0x80) 5.261053809s ago: executing program 4 (id=1531): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000022c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@private=0xa010101, 0x4e23, 0x0, 0xffff, 0x8000, 0x2}, {0x0, 0x1, 0x0, 0xfffffffffffe, 0xffff, 0x9}, {0x0, 0x0, 0x0, 0x2}, 0x80006c, 0x0, 0x2, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00', 0xffffffff, 0x33}, 0xa, @in=@empty, 0x3507, 0x1, 0x1, 0x0, 0x40000, 0x8007c, 0xfffffffe}}, 0xaa) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x4000000, 0x3e, 0x0, 'queue0\x00', 0x1c52}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) writev(r2, &(0x7f0000000640)=[{&(0x7f0000000080)="26eba9fdb4cbab48929e1af151000000000000000500000000000100", 0x1c}, {&(0x7f0000000000)='%', 0x1}], 0x2) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x6a, 0x4, 0x0, 0x33a2d82006b0271e) r3 = syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002c10db287"], 0x0) syz_usb_control_io(r3, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f00000003c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000340)={0x0, 0x10, 0x1, "c4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) syz_open_dev$I2C(&(0x7f0000000100), 0x5, 0x10000) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000000200)={0x1, 0x87, 0x0, &(0x7f0000000080)={0x4, "81c3b71a00000000000000000000000000000000ecff00"}}) syz_usb_control_io$sierra_net(r3, 0x0, &(0x7f0000000ec0)={0x1c, &(0x7f0000000380)={0x20, 0xe, 0x1, 'F'}, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0}, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x9, 0x6, 0x8, 0x8, 0x0, r6}, 0x50) syz_usb_control_io$uac2(r3, &(0x7f0000000700)={0x14, &(0x7f00000005c0)={0x40, 0x24, 0xd5, {0xd5, 0x11, "7b568e85eafdfeed1b455b56b57f829312a25e9eeda7570bc878013c93b994b8b979a90e7a18371766197b2516d2896e8701f2eebded184df4d2029e74a489e7d557c785c953ee1ec0a755aa15881cfc676c704eb7d1884f7d2cc62db15938edb963ef4ed4125d2faaeca48763f160a6cce29253a8c951c39bc4855fe570b8f1bcf4ebfeb1a8070269a7a2439821ffa00a8d8611a14b4af6265e6a10f31e7450060f4be1e6053809ee4175e3a70ba1069537a0da3feef35d0e5236f2b0dff54c4cdda165fbf8075c1e15442f0500184cf441cf"}}, &(0x7f00000006c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc01}}}, &(0x7f0000000980)={0x44, &(0x7f0000000740)={0x40, 0xf, 0x48, "89f6c0580e08204956989cda7f683c8f99a0e21d7d9b1b397dddfdc85efb0e660dff90fc0ca64d32b1387d32b17848080235688770a668808363a4e3dc29d411663078d7db98faf4"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000840)={0x20, 0x81, 0x3, "a95944"}, &(0x7f0000000880)={0x20, 0x82, 0x1, 'K'}, &(0x7f00000008c0)={0x20, 0x83, 0x1, 'K'}, &(0x7f0000000900)={0x20, 0x84, 0x1, "18"}, &(0x7f0000000940)={0x20, 0x85, 0x3, "c0328d"}}) ioctl$IOMMU_DESTROY$stdev(r5, 0x3b80, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x0, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000009a65d0860040800dec30102030109021b050000000000090495d794b2eaf5000905"], 0x0) 5.055025076s ago: executing program 5 (id=1532): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x8, 0xfffffffc, 0xdc64}}) (async) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000013c0)={0x0, 0x0, 0x4, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}, 0x2}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000880)={'syztnl1\x00', 0x0}) (async) syz_clone(0x0, 0x0, 0xfffffffffffffc57, 0x0, 0x0, 0x0) 4.929885264s ago: executing program 2 (id=1533): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x202540, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a3a440000000010109023b000101010000090400001202eb0000052406000005240000000d240f010000000000001e00000905820200020000000905", @ANYRES16], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a400000000328000480080002400000001208000140000000001400030066657464657673696d30000000000000080000000000000014000000110001f7"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0xc000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000018000480140003007465616d5f736c6176655f310000000014000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x20040845}, 0x802) sendmsg$NFT_BATCH(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}]}, &(0x7f00000002c0)=0x10) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000100)={r6}, 0x8) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r9, 0x1, &(0x7f0000000040)=[&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x5, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x2}]) fcntl$setpipe(r7, 0x407, 0x0) read$FUSE(r7, &(0x7f0000002440)={0x2020, 0x0, 0x0, 0x0}, 0xfffffffffffffec8) quotactl_fd$Q_QUOTAON(r8, 0xffffffff00000402, r11, &(0x7f0000000080)='./file0\x00') write$FUSE_INIT(r8, &(0x7f0000000180)={0x50, 0x0, r10, {0x7, 0x29, 0x4, 0xffffffffc8001048, 0xffff, 0x6, 0x2, 0x0, 0x0, 0x0, 0x80, 0x3}}, 0x50) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x29) ioctl(r0, 0x4048aecd, &(0x7f0000000300)="0200") 4.873558374s ago: executing program 5 (id=1534): syz_emit_ethernet(0x44e, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0) 4.710309759s ago: executing program 5 (id=1535): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000080)={'@\x00', 0xdf3, 0x6, 0x2, 0x7ff, 0x1, '\x00', '\x00\x00\a\x00', "020500", "0001ffff", ["50d5c2a7c5ae5cace40000b6", "808e88e2e9ffff470400", "000000400300", "0000000000000200"]}) 4.530682768s ago: executing program 5 (id=1536): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x1, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0x2}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f000000a7c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[], 0x20}}], 0x1, 0x800) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000f303010000000000000000000000000a14000000ea03010000000000000000000000000ac967951cf2da70e68e5cd57ab1e9003e38f8109328019fbe1ab6ba1da94c0e31c398441fbff8a8dd2fe53dc175c7319eb67b559f46f3ee886ecab60b5c03d69fe5ba169b5bd01e4b7bdd1828af0531f607d4035cac2f47037a43fbb42922fb4b3833ff1003949a5ccd354fec929a92f7c423a68c80de804d44e77e8e9acce60c06"], 0x28}}, 0x4008000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}, 0x1, 0x0, 0x0, 0x8000}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES8], 0xb8}, 0x1, 0x0, 0x0, 0x20008010}, 0x50) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) r4 = socket(0x840000000002, 0x3, 0x100) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r4, &(0x7f0000005240), 0x4000095, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000004800000000020000000900010073797a300000000064000000090a010400000000000000000200002008000a40000000010900020073797a31000000000900010073797a300000000008000540000000080800034000000084200009801c0002800c00018008000140000000040c00018008000140000000043c0000000c0a01010000000000000000020000000900020073797a31000000000900010073797a3000000000100003800c000080080003400000"], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2382420, &(0x7f0000000200)=ANY=[]) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0x4}}, './file1\x00'}) io_uring_setup(0x20006d19, &(0x7f0000000100)={0x0, 0x31cf, 0x10001, 0x2, 0x10c, 0x0, r6}) r7 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r8 = openat$binfmt(0xffffffffffffff9c, r7, 0x42, 0x1ff) close(r8) 2.834063585s ago: executing program 1 (id=1538): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x8}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'dummy0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x20048010}, 0x4000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000017c0)={0x44, 0x41, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x131}, @nested={0x28, 0x1, 0x0, 0x1, [@typed={0x10, 0x4, 0x0, 0x0, @str='\xca\xb1\x89: \xb8\xd2\xa95!\x80\n'}, @nested={0x14, 0x19, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x6}, @generic="6c3ffdfa"]}]}, @nested={0x4, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40815}, 0xc000) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) syz_io_uring_setup(0x24, &(0x7f0000000040)={0x0, 0x0, 0x800, 0x0, 0xfffffffe}, 0x0, 0x0, 0x0) r3 = syz_open_dev$midi(&(0x7f00000012c0), 0x2, 0x2) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f0000000080)) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000140009052cbd70000000000002189d00", @ANYRES32=r6, @ANYBLOB="08000200ac"], 0x40}, 0x1, 0x0, 0x0, 0x44855}, 0x4000) write(r4, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000b4bffc)=0x102, 0x16) write(r4, &(0x7f0000000000)='\"', 0xfdef) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, &(0x7f0000000080)) 2.553010473s ago: executing program 4 (id=1540): socket$packet(0x11, 0x2, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000cc0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000ffdbdf25010000ca000000000c41000000030014"], 0x30}, 0x1, 0x0, 0x0, 0x4040040}, 0x4000) socket(0x10, 0x803, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x80, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f00000fc000/0x1000)=nil, 0x1000, 0x2000002, 0x4000932, 0xffffffffffffffff, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000001040)=0x10000b, 0x4) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x3}], 0x1, 0x40800) 2.328107157s ago: executing program 1 (id=1542): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000024"], 0x0, 0x46}, 0x28) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1709000000000000000001000000050007000000000008000900fbff00001400200000000000000000000000ffffe000000008000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x620b}, 0x2000000) 2.026653932s ago: executing program 1 (id=1544): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x63, 0x86, 0x35, 0x10, 0xcf3, 0x1010, 0x3687, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7f, 0x4, 0x50, 0x0, "", [{{0x9, 0x4, 0x7c, 0xb, 0x0, 0xa4, 0xca, 0xd4}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x5, &(0x7f00000002c0)={0x5, 0xf, 0x5}}) syz_usb_disconnect(r0) syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000e00)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8f, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x4, 0x10, 0x2, {0x8, 0xb, 0x1, 0x1, 0x1, 0x5, 0x20, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x5409, 0xb, 0x9, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x2, 0x1, 0x80, {0x8, 0x25, 0x1, 0x80, 0x0, 0x6, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x81, 0x6, 0x9, {0x8, 0x25, 0x1, 0x0, 0x3c, 0x3, 0x9}}}}}}}}]}}, &(0x7f00000012c0)={0x0, 0x0, 0x5, &(0x7f0000000f40)={0x5, 0xf, 0x5}}) 1.905685383s ago: executing program 4 (id=1545): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x13, 0x51, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x6}, 0x94) r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_DEVICE_INFO(r0, 0xc1007c00, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000006110a4fffffff300170100000000000095000000000000004daf78c4ef08dc0978bcf94787784b785a279a31cc9fba0fe98042125ff1466a15fcd5d6e3ab177cd4c803000000000000008a7e0243b2"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 1.78936892s ago: executing program 0 (id=1546): syz_emit_ethernet(0x44e, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0) 1.578801469s ago: executing program 2 (id=1547): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000005c0)={0xaa, 0x685}) r2 = syz_open_dev$sndctrl(&(0x7f00000001c0), 0xba, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000002600000002000000ffff000005"], 0x48) openat$ppp(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f000000c280)={0x0}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f000073b000/0x3000)=nil, &(0x7f00005e8000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00007c2000/0x3000)=nil, &(0x7f00006d2000/0xd000)=nil, &(0x7f00008e3000/0x2000)=nil, &(0x7f0000098000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f000093e000/0xc000)=nil, &(0x7f0000883000/0x4000)=nil, &(0x7f00000003c0)="bc0a30891a66ca588f4941b4c9cc350e6da52353abe2dfef306ea773eb6fdbb6cdbd0669ada1c6cdaa2e30a81561f534817abe72b0180c465f96a5f9d00898f14a027f4bf989947d0c0f5295abb369c6715f5eb84648652a5858500f8b784e578fbc0d274fef5c3e4edb95a6434a9d060ae42e52fe09cd920504ed676b129de7d99bbb00f509bf16f5cb8bc72e91a966e2cc0b4787dcc3ce357c503ed7465db635599392360cef6533a34a47a73f3718", 0xb0, r2}, 0x68) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r6, @ANYRESOCT=r2], 0x34}}, 0x62e8868f58ba78ad) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000680)={r3, &(0x7f0000000540), 0x0}, 0x20) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) close(0x3) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x1e8}}, 0x0) mprotect(&(0x7f0000205000/0x3000)=nil, 0x3000, 0x1000003) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000300)=ANY=[@ANYBLOB="260e46170232a40b29944d1895a824a42e000000", @ANYRES16=0x0, @ANYBLOB="100029bd7000fddbdf25020000000800080002000000080004007f000001"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8050) r7 = userfaultfd(0x80000) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000140)={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendmmsg$inet(r8, &(0x7f0000000c00), 0x0, 0x2000c044) sendto$inet(r8, &(0x7f0000000c80)="e8", 0x6200, 0x0, 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r7, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) 1.506707089s ago: executing program 4 (id=1548): keyctl$dh_compute(0x17, &(0x7f0000000480), 0x0, 0x0, &(0x7f0000002540)={&(0x7f00000024c0)={'michael_mic\x00'}}) pipe2$9p(&(0x7f0000000000), 0x80) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_opts(r0, 0x0, 0xf, &(0x7f0000000000)='\x00', 0x1) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregset(0x4205, r1, 0x1, &(0x7f0000000140)={&(0x7f0000000000)="c94522", 0x3}) syz_usb_connect$uac2(0x2, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100300000020ba0d001040000102030109026e000301061002080b0100010c200009040000000101200009240180ff070e040000000b02000904010000010220000904010101010220000905010900020c02090825018030ad000109040200000102200009040201010102200009058209000202649a85d457104b910af3"], &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) unshare(0x36020780) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x3}}) close(0x3) unshare(0x40000000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000003480), 0x81402, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x100, 0x100, 0x100, 0xffffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x0, 0x0, 0x4}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x1, 0x3f3], 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x100}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x4, 0x6ec, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x100}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3d0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f0000000280)='0', 0xfffd, 0x4000854, &(0x7f0000000300)={0xa, 0x4e21, 0xbe7, @loopback, 0x800000c0}, 0x1c) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r6, &(0x7f0000000400)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x5}, 0xffffffff}, 0x1c, &(0x7f0000000700)=[{&(0x7f0000000440)="87", 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}, 0xa}, 0x1c, &(0x7f0000000280)=[{&(0x7f00000022c0)='t', 0x1}], 0x1}}], 0x2, 0x48081) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x9, 0x4, 0x81, 0xffffffff, 0xffffffff}) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid_for_children\x00') setns(r7, 0x0) shutdown(r6, 0x1) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000200)={0x0, 0x1}, 0x8) 1.506277092s ago: executing program 0 (id=1549): socket$inet(0x2, 0x4000000000000001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x40000000015, 0x5, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$rds(0x15, 0x5, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$pppl2tp(0x18, 0x1, 0x1) socket(0x2, 0x1, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000fbff27bd7002fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="14100400040004001c00128009000100766c616e000000000c000280061101000400000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x4c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) 1.363467726s ago: executing program 5 (id=1550): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000022c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@private=0xa010101, 0x4e23, 0x0, 0xffff, 0x8000, 0x2}, {0x0, 0x1, 0x0, 0xfffffffffffe, 0xffff, 0x9}, {0x0, 0x0, 0x0, 0x2}, 0x80006c, 0x0, 0x2, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00', 0xffffffff, 0x33}, 0xa, @in=@empty, 0x3507, 0x1, 0x1, 0x0, 0x40000, 0x8007c, 0xfffffffe}}, 0xaa) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x4000000, 0x3e, 0x0, 'queue0\x00', 0x1c52}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) writev(r2, &(0x7f0000000640)=[{&(0x7f0000000080)="26eba9fdb4cbab48929e1af151000000000000000500000000000100", 0x1c}, {&(0x7f0000000000)='%', 0x1}], 0x2) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x6a, 0x4, 0x0, 0x33a2d82006b0271e) r3 = syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002c10db287"], 0x0) syz_usb_control_io(r3, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f00000003c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000340)={0x0, 0x10, 0x1, "c4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) syz_open_dev$I2C(&(0x7f0000000100), 0x5, 0x10000) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000000200)={0x1, 0x87, 0x0, &(0x7f0000000080)={0x4, "81c3b71a00000000000000000000000000000000ecff00"}}) syz_usb_control_io$sierra_net(r3, 0x0, &(0x7f0000000ec0)={0x1c, &(0x7f0000000380)={0x20, 0xe, 0x1, 'F'}, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0}, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x9, 0x6, 0x8, 0x8, 0x0, r6}, 0x50) syz_usb_control_io$uac2(r3, &(0x7f0000000700)={0x14, &(0x7f00000005c0)={0x40, 0x24, 0xd5, {0xd5, 0x11, "7b568e85eafdfeed1b455b56b57f829312a25e9eeda7570bc878013c93b994b8b979a90e7a18371766197b2516d2896e8701f2eebded184df4d2029e74a489e7d557c785c953ee1ec0a755aa15881cfc676c704eb7d1884f7d2cc62db15938edb963ef4ed4125d2faaeca48763f160a6cce29253a8c951c39bc4855fe570b8f1bcf4ebfeb1a8070269a7a2439821ffa00a8d8611a14b4af6265e6a10f31e7450060f4be1e6053809ee4175e3a70ba1069537a0da3feef35d0e5236f2b0dff54c4cdda165fbf8075c1e15442f0500184cf441cf"}}, &(0x7f00000006c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc01}}}, &(0x7f0000000980)={0x44, &(0x7f0000000740)={0x40, 0xf, 0x48, "89f6c0580e08204956989cda7f683c8f99a0e21d7d9b1b397dddfdc85efb0e660dff90fc0ca64d32b1387d32b17848080235688770a668808363a4e3dc29d411663078d7db98faf4"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000840)={0x20, 0x81, 0x3, "a95944"}, &(0x7f0000000880)={0x20, 0x82, 0x1, 'K'}, &(0x7f00000008c0)={0x20, 0x83, 0x1, 'K'}, &(0x7f0000000900)={0x20, 0x84, 0x1, "18"}, &(0x7f0000000940)={0x20, 0x85, 0x3, "c0328d"}}) ioctl$IOMMU_DESTROY$stdev(r5, 0x3b80, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x0, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000009a65d0860040800dec30102030109021b050000000000090495d794b2eaf5000905"], 0x0) 1.030718047s ago: executing program 0 (id=1551): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000080)={'@\x00', 0xdf3, 0x6, 0x2, 0x7ff, 0x1, '\x00', '\x00\x00\a\x00', "020500", "0001ffff", ["50d5c2a7c5ae5cace40000b6", "808e88e2e9ffff470400", "000000400300", "0000000000000500"]}) 836.802581ms ago: executing program 0 (id=1552): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) r1 = syz_ublk_setup_io_uring(0x155a, &(0x7f0000000500)={0x0, 0xa355, 0x10000, 0x2, 0x15a}, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0, &(0x7f00000000c0)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, 0x0, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000a40)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@local, @in6=@loopback, 0xfffe, 0x0, 0x2, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in=@multicast2=0xfc020000, @in6=@mcast1, @in6=@mcast2, @in=@broadcast, 0x6c, 0x1, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0) r8 = dup(r6) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) io_setup(0x5, &(0x7f0000000000)) close(r9) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000900)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x23f, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_ublk_setup_queues(r8, r5, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x255, 0x0, r1}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffde, 0x200, 0x6, 0x15e, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x80, 0x10000004, 0x142, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x2000, 0x20003, 0x0, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8256, 0x2, 0x3, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) 788.247963ms ago: executing program 2 (id=1553): syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003380)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0xfffffffe}], 0x2, 0x2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$VIDIOC_QBUF(r1, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x3, 0x4, 0x80, 0x0, {0x77359400}, {0x0, 0xb846941ed94b4582, 0x80, 0x0, 0x0, 0xa, "a500e300"}, 0x4, 0x2, {}, 0x20804, 0x0, r1}) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000700, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x31]}}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r2, 0x707, &(0x7f00000000c0)={&(0x7f0000000580)=[{0x5, 0x4000, 0x0, 0x0}, {0x1, 0x1, 0x0, 0x0}], 0x2}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x19) writev(r4, &(0x7f0000003200)=[{&(0x7f0000002200)="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", 0x801}, {0x0}], 0x2) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in=@empty, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x3, 0x1, 0x2, 0x9, 0x10000000, 0x1}, {0x0, 0x2, 0x7}, {0x40000, 0xffffffff, 0xae8}, 0x0, 0x3504, 0xa, 0x2, 0xfe, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0x6b8f, 0x2, 0xb4, 0x5}}]}, 0x128}, 0x1, 0x0, 0x0, 0x1}, 0x890) syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x440401) r5 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r6 = socket$inet6(0xa, 0x80002, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r7, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}, 0x80ad}, 0x1c) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xce20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) 535.940168ms ago: executing program 0 (id=1554): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff11000000000e1208000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee40021146218a07445d6d930dfe1d9d322fe7c9fd68775730d", 0x87}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x2f, 0x9, 0x70bd27, 0x25dfdbfd, {0x5}, [@typed={0x8, 0xa, 0x0, 0x0, @pid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x40814) fcntl$lock(r1, 0x25, &(0x7f00000006c0)={0x0, 0x0, 0xac1d, 0x9}) fcntl$lock(r1, 0x25, &(0x7f0000000040)={0x1, 0x0, 0x7f, 0x7}) fcntl$lock(r1, 0x24, &(0x7f0000000600)={0x2, 0x0, 0x1, 0x4}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002580), r0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x80001, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r7 = syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$x86(r7, &(0x7f0000000200)={0x0, 0x0, 0x14}) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f0000000040)) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_CPUID(r8, 0x4008ae8a, &(0x7f0000000040)) r9 = memfd_create(&(0x7f0000000800)='\xff\x00l\x1e\xa00x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0xc4, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0xe, 0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x90, 0x2, [@TCA_MATCHALL_ACT={0x8c, 0x2, [@m_ife={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40, 0x6, 0x1, 0xea, 0x100004}, 0x1}}, @TCA_IFE_METALST={0x40, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x7}, @IFE_META_PRIO={0x8, 0x3, @val=0xe}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x7}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0xfffffffffffffd9e, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x4}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x3}]}]}, {0x4}, {0xc, 0x7, {0x0, 0xe4}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4040011}, 0x0) kernel console output (not intermixed with test programs): 3-1: config 6 has an invalid interface number: 2 but max is 0 [ 597.100087][ T25] usb 3-1: config 6 has no interface number 0 [ 597.100126][ T25] usb 3-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 597.100148][ T25] usb 3-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 597.100173][ T25] usb 3-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 597.100199][ T25] usb 3-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 597.103607][ T25] usb 3-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 597.103630][ T25] usb 3-1: Product: syz [ 597.103645][ T25] usb 3-1: Manufacturer: syz [ 597.103660][ T25] usb 3-1: SerialNumber: syz [ 597.238462][ T25] hso 3-1:6.2: Failed to find BULK eps [ 597.446229][ T5748] usb 3-1: USB disconnect, device number 34 [ 598.002419][ T5748] usb 5-1: USB disconnect, device number 50 [ 599.720730][ T9791] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1082'. [ 600.010999][ T9798] team0: Device vlan5 is already an upper device of the team interface [ 600.285491][ T5645] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 600.435697][ T5645] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 600.437737][ T5645] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 600.437782][ T5645] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 600.437823][ T5645] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.440490][ T5645] usb 5-1: config 0 descriptor?? [ 600.451573][ T5645] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 600.535079][ T25] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 600.617616][ T5748] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 600.691895][ T25] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 600.694054][ T25] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 600.694080][ T25] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 600.694119][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.748987][ T25] usb 1-1: probing VID:PID(0424:012C) [ 600.758825][ T25] usb 1-1: vub300 testing BULK IN EndPoint(0) 81 [ 600.758849][ T25] usb 1-1: vub300 testing BULK OUT EndPoint(1) 02 [ 600.758866][ T25] usb 1-1: vub300 testing BULK IN EndPoint(2) 83 [ 600.758883][ T25] usb 1-1: vub300 testing BULK OUT EndPoint(3) 04 [ 600.758900][ T25] usb 1-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 600.766353][ T5748] usb 2-1: New USB device found, idVendor=413c, idProduct=81d7, bcdDevice=ed.a6 [ 600.772024][ T5748] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 600.772069][ T5748] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 600.788494][ T5748] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.788542][ T5748] usb 2-1: Product: syz [ 600.788556][ T5748] usb 2-1: Manufacturer: syz [ 600.788570][ T5748] usb 2-1: SerialNumber: syz [ 601.064668][ T5748] usb 2-1: USB disconnect, device number 38 [ 601.169521][ T25] vub300 1-1:1.0: probe with driver vub300 failed with error -71 [ 601.216055][ T25] usb 1-1: USB disconnect, device number 40 [ 601.949907][ T9828] deleting an unspecified loop device is not supported. [ 601.950579][ T9828] misc userio: Invalid payload size [ 601.950680][ T9828] misc userio: Invalid payload size [ 601.951956][ T9828] misc userio: Invalid payload size [ 602.001341][ T5748] wiimote 0005:057E:0306.000C: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 602.001637][ T5748] wiimote 0005:057E:0306.000C: New device registered [ 602.007865][ T9826] wiimote 0005:057E:0306.000C: Device removed [ 602.159225][ T9831] fido_id[9831]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 602.265130][ T5750] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 602.365420][ T5720] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 602.437100][ T5750] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 602.438187][ T5750] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 602.438229][ T5750] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 602.439361][ T5750] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 602.439402][ T5750] usb 2-1: Manufacturer: syz [ 602.442443][ T5750] usb 2-1: config 0 descriptor?? [ 602.515043][ T5720] usb 6-1: Using ep0 maxpacket: 8 [ 602.515758][ T5720] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 602.516727][ T5720] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 602.516770][ T5720] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.520371][ T5720] usb 6-1: config 0 descriptor?? [ 602.615047][ T5750] rc_core: IR keymap rc-hauppauge not found [ 602.615084][ T5750] Registered IR keymap rc-empty [ 602.619929][ T5750] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 602.650013][ T5750] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input36 [ 602.671376][ C0] igorplugusb 2-1:0.0: Error: urb status = -32 [ 602.699199][ T5750] usb 2-1: USB disconnect, device number 39 [ 602.746735][ T5720] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 602.911678][ T9837] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1095'. [ 603.067882][ T5720] usb 5-1: USB disconnect, device number 51 [ 603.085144][ T5748] wiimote 0005:057E:0306.000C: detected device: Nintendo Wii Remote (Gen 1) [ 603.121619][ T5748] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.000C/input/input38 [ 603.140824][ T5748] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.000C/input/input39 [ 603.143890][ T5748] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.000C/input/input37 [ 603.435628][ T9847] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1098'. [ 603.504319][ T5761] usb 6-1: USB disconnect, device number 21 [ 603.644649][ T9852] fuse: Bad value for 'fd' [ 603.657869][ T9854] netlink: 'syz.1.1100': attribute type 1 has an invalid length. [ 603.698940][ T9854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 603.740836][ T9854] bond0: (slave geneve4): making interface the new active one [ 603.757667][ T9854] bond0: (slave geneve4): Enslaving as an active interface with an up link [ 603.883629][ T9861] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1101'. [ 604.159603][ T9871] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1104'. [ 604.981643][ T9877] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1106'. [ 604.990526][ T9877] loop5: detected capacity change from 0 to 6 [ 604.993049][ T9877] loop5: [POWERTEC] p1 p2 p3 [ 604.993720][ T9877] loop5: p1 start 2738982409 is beyond EOD, truncated [ 604.993742][ T9877] loop5: p2 start 3318134482 is beyond EOD, truncated [ 604.993758][ T9877] loop5: p3 start 3832978868 is beyond EOD, truncated [ 605.235182][ T5766] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 605.396374][ T5766] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 605.401944][ T5766] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 605.402041][ T5766] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.444354][ T5766] usb 2-1: config 0 descriptor?? [ 605.464205][ T5766] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 605.497638][ T9889] netlink: 'syz.2.1110': attribute type 1 has an invalid length. [ 605.581422][ T9889] 8021q: adding VLAN 0 to HW filter on device bond3 [ 605.647807][ T9891] bond3: (slave veth5): Enslaving as a backup interface with a down link [ 605.938412][ T9899] Cannot find add_set index 2 as target [ 605.967205][ T9899] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1113'. [ 605.967256][ T9899] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1113'. [ 606.137249][ T9904] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1115'. [ 606.351315][ T9909] FAULT_INJECTION: forcing a failure. [ 606.351315][ T9909] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 606.351347][ T9909] CPU: 1 UID: 0 PID: 9909 Comm: syz.2.1117 Not tainted syzkaller #0 PREEMPT(full) [ 606.351369][ T9909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 606.351384][ T9909] Call Trace: [ 606.351392][ T9909] [ 606.351401][ T9909] dump_stack_lvl+0xe8/0x150 [ 606.351434][ T9909] should_fail_ex+0x410/0x560 [ 606.351461][ T9909] _copy_to_user+0x31/0xb0 [ 606.351487][ T9909] bpf_verifier_vlog+0x496/0x900 [ 606.351527][ T9909] bpf_verifier_log_write+0x11d/0x1a0 [ 606.351548][ T9909] ? __pfx_reg_type_str+0x10/0x10 [ 606.351570][ T9909] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 606.351602][ T9909] print_reg_state+0x393/0x1a30 [ 606.351632][ T9909] ? __pfx_print_reg_state+0x10/0x10 [ 606.351649][ T9909] ? _copy_to_user+0x8a/0xb0 [ 606.351674][ T9909] ? bpf_verifier_vlog+0x58d/0x900 [ 606.351711][ T9909] ? bpf_verifier_log_write+0x11d/0x1a0 [ 606.351736][ T9909] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 606.351762][ T9909] ? bpf_verifier_log_write+0x11d/0x1a0 [ 606.351785][ T9909] print_verifier_state+0x205/0x1a40 [ 606.351805][ T9909] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 606.351831][ T9909] ? __pfx_print_verifier_state+0x10/0x10 [ 606.351855][ T9909] ? print_insn_state+0x135/0x170 [ 606.351877][ T9909] do_check_common+0x2d55/0x5d30 [ 606.351937][ T9909] ? __pfx_do_check_common+0x10/0x10 [ 606.351973][ T9909] bpf_check+0x2639/0x2e10 [ 606.352005][ T9909] ? ktime_get_with_offset+0x93/0x2d0 [ 606.352030][ T9909] ? __pfx_bpf_check+0x10/0x10 [ 606.352054][ T9909] ? bpf_obj_name_cpy+0x194/0x1e0 [ 606.352085][ T9909] bpf_prog_load+0x14d6/0x1c20 [ 606.352119][ T9909] ? __pfx_bpf_prog_load+0x10/0x10 [ 606.352165][ T9909] __sys_bpf+0xd0d/0xd90 [ 606.352193][ T9909] ? __pfx___sys_bpf+0x10/0x10 [ 606.352232][ T9909] ? __fget_files+0x2a/0x420 [ 606.352276][ T9909] ? ksys_write+0x242/0x270 [ 606.352307][ T9909] ? __pfx_ksys_write+0x10/0x10 [ 606.352339][ T9909] __x64_sys_bpf+0xba/0xd0 [ 606.352362][ T9909] do_syscall_64+0x166/0x520 [ 606.352381][ T9909] ? trace_irq_disable+0x3b/0x140 [ 606.352401][ T9909] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.352421][ T9909] ? clear_bhb_loop+0x70/0xc0 [ 606.352445][ T9909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.352463][ T9909] RIP: 0033:0x7f9af199e159 [ 606.352482][ T9909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 606.352499][ T9909] RSP: 002b:00007f9af2901028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 606.352520][ T9909] RAX: ffffffffffffffda RBX: 00007f9af1c25fa0 RCX: 00007f9af199e159 [ 606.352535][ T9909] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005 [ 606.352547][ T9909] RBP: 00007f9af2901090 R08: 0000000000000000 R09: 0000000000000000 [ 606.352560][ T9909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 606.352571][ T9909] R13: 00007f9af1c26038 R14: 00007f9af1c25fa0 R15: 00007f9af1d4fa48 [ 606.352602][ T9909] [ 606.800954][ T9914] fuse: blksize only supported for fuseblk [ 607.894681][ T9923] netlink: 296 bytes leftover after parsing attributes in process `syz.2.1120'. [ 607.998816][ T5761] usb 2-1: USB disconnect, device number 40 [ 608.287891][ T9929] syz_tun: entered promiscuous mode [ 608.310339][ T9929] syz_tun: left promiscuous mode [ 608.357081][ T9931] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1123'. [ 608.542696][ T9940] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1126'. [ 608.559754][ T9940] loop5: detected capacity change from 0 to 6 [ 608.561016][ T9939] openvswitch: netlink: IP tunnel TTL not specified. [ 608.561055][ T9939] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 608.561282][ T9940] loop5: [POWERTEC] p1 p2 p3 [ 608.561436][ T9940] loop5: p1 start 2738982409 is beyond EOD, truncated [ 608.561457][ T9940] loop5: p2 start 3318134482 is beyond EOD, truncated [ 608.561473][ T9940] loop5: p3 start 3832978868 is beyond EOD, truncated [ 608.717166][ T9942] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1128'. [ 609.065721][ T9947] fuse: Bad value for 'fd' [ 609.538079][ T5748] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 609.688865][ T5748] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 609.690153][ T5748] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 609.690199][ T5748] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.734595][ T5748] usb 3-1: config 0 descriptor?? [ 609.749917][ T5748] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 610.149394][ T9975] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1137'. [ 611.182550][ T9986] Cannot find add_set index 0 as target [ 611.243577][ T9987] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1138'. [ 611.455816][ T5761] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 611.625142][ T5761] usb 6-1: Using ep0 maxpacket: 32 [ 611.639463][ T5761] usb 6-1: unable to get BOS descriptor or descriptor too short [ 611.639563][ T5761] usb 6-1: New USB device found, idVendor=0a67, idProduct=5011, bcdDevice= 0.40 [ 611.642762][ T5761] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 611.642808][ T5761] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 611.662851][ T5761] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.662893][ T5761] usb 6-1: Product: syz [ 611.662923][ T5761] usb 6-1: Manufacturer: syz [ 611.662954][ T5761] usb 6-1: SerialNumber: syz [ 611.877621][ T9989] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1140'. [ 611.940789][ T9991] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1141'. [ 612.186695][ T5761] usb 6-1: 0:1 : does not exist [ 612.186866][ T5761] usb 6-1: unit 1 not found! [ 612.332996][ T5748] usb 3-1: USB disconnect, device number 35 [ 612.363887][ T9998] fuse: Bad value for 'fd' [ 612.440362][ T5761] usb 6-1: USB disconnect, device number 22 [ 612.584758][ T7760] udevd[7760]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 612.859912][T10012] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1148'. [ 612.975220][T10016] FAULT_INJECTION: forcing a failure. [ 612.975220][T10016] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 612.975254][T10016] CPU: 1 UID: 0 PID: 10016 Comm: syz.1.1149 Not tainted syzkaller #0 PREEMPT(full) [ 612.975276][T10016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 612.975287][T10016] Call Trace: [ 612.975295][T10016] [ 612.975303][T10016] dump_stack_lvl+0xe8/0x150 [ 612.975336][T10016] should_fail_ex+0x410/0x560 [ 612.975361][T10016] _copy_to_user+0x31/0xb0 [ 612.975388][T10016] bpf_verifier_vlog+0x496/0x900 [ 612.975429][T10016] bpf_verifier_log_write+0x11d/0x1a0 [ 612.975457][T10016] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 612.975484][T10016] ? bpf_verifier_log_write+0x11d/0x1a0 [ 612.975506][T10016] print_verifier_state+0x1e6/0x1a40 [ 612.975526][T10016] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 612.975552][T10016] ? __pfx_print_verifier_state+0x10/0x10 [ 612.975575][T10016] ? print_insn_state+0x135/0x170 [ 612.975596][T10016] do_check_common+0x2d55/0x5d30 [ 612.975655][T10016] ? __pfx_do_check_common+0x10/0x10 [ 612.975693][T10016] bpf_check+0x2639/0x2e10 [ 612.975725][T10016] ? ktime_get_with_offset+0x93/0x2d0 [ 612.975751][T10016] ? __pfx_bpf_check+0x10/0x10 [ 612.975774][T10016] ? bpf_obj_name_cpy+0x194/0x1e0 [ 612.975806][T10016] bpf_prog_load+0x14d6/0x1c20 [ 612.975839][T10016] ? __pfx_bpf_prog_load+0x10/0x10 [ 612.975895][T10016] __sys_bpf+0xd0d/0xd90 [ 612.975926][T10016] ? __pfx___sys_bpf+0x10/0x10 [ 612.975959][T10016] ? __fget_files+0x2a/0x420 [ 612.976000][T10016] ? ksys_write+0x242/0x270 [ 612.976032][T10016] ? __pfx_ksys_write+0x10/0x10 [ 612.976065][T10016] __x64_sys_bpf+0xba/0xd0 [ 612.976090][T10016] do_syscall_64+0x166/0x520 [ 612.976111][T10016] ? trace_irq_disable+0x3b/0x140 [ 612.976131][T10016] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.976151][T10016] ? clear_bhb_loop+0x70/0xc0 [ 612.976176][T10016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.976196][T10016] RIP: 0033:0x7f411659e159 [ 612.976215][T10016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 612.976232][T10016] RSP: 002b:00007f41173d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 612.976255][T10016] RAX: ffffffffffffffda RBX: 00007f4116825fa0 RCX: 00007f411659e159 [ 612.976270][T10016] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005 [ 612.976283][T10016] RBP: 00007f41173d7090 R08: 0000000000000000 R09: 0000000000000000 [ 612.976296][T10016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 612.976308][T10016] R13: 00007f4116826038 R14: 00007f4116825fa0 R15: 00007f411694fa48 [ 612.976340][T10016] [ 613.200642][T10018] loop4: detected capacity change from 0 to 7 [ 613.239267][T10018] Dev loop4: unable to read RDB block 7 [ 613.239429][T10018] loop4: AHDI p1 p2 p3 [ 613.239466][T10018] loop4: partition table partially beyond EOD, truncated [ 613.270410][T10018] loop4: p1 start 1601398130 is beyond EOD, truncated [ 613.270466][T10018] loop4: p2 start 1702059890 is beyond EOD, truncated [ 613.446335][T10023] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1152'. [ 613.555094][ T25] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 613.707792][ T25] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 613.729936][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.729975][ T25] usb 1-1: Product: syz [ 613.729990][ T25] usb 1-1: Manufacturer: syz [ 613.730015][ T25] usb 1-1: SerialNumber: syz [ 613.764361][ T25] usb 1-1: config 0 descriptor?? [ 613.794491][ T25] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 613.867448][ T4986] Dev loop4: unable to read RDB block 7 [ 613.867481][ T4986] loop4: AHDI p1 p2 p3 [ 613.867502][ T4986] loop4: partition table partially beyond EOD, truncated [ 613.867728][ T4986] loop4: p1 start 1601398130 is beyond EOD, truncated [ 613.867746][ T4986] loop4: p2 start 1702059890 is beyond EOD, truncated [ 614.200502][T10036] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 614.727024][ T5645] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 614.796273][T10047] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(86) [ 614.796300][T10047] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 614.805242][T10047] vhci_hcd vhci_hcd.0: Device attached [ 614.831141][T10053] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1159'. [ 614.876025][ T5645] usb 3-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 614.882550][ T5645] usb 3-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 614.882575][ T5645] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 614.916631][ T5645] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.916657][ T5645] usb 3-1: Product: syz [ 614.916671][ T5645] usb 3-1: Manufacturer: syz [ 614.916712][ T5645] usb 3-1: SerialNumber: syz [ 614.923982][ T5645] usb 3-1: config 0 descriptor?? [ 614.962312][ T5645] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 614.988049][ T5761] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 615.055299][ T5761] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 615.483013][T10021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 615.483380][T10039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 615.507061][T10039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 615.507448][T10021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 615.555153][T10021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 615.557682][T10021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 615.769760][T10052] vhci_hcd: connection reset by peer [ 615.795960][ T12] vhci_hcd vhci_hcd.4: stop threads [ 615.796006][ T12] vhci_hcd vhci_hcd.4: release socket [ 615.799699][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 615.884192][T10021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 615.887838][T10021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 616.127796][ T5645] usb 3-1: USB disconnect, device number 36 [ 616.486532][ T25] gspca_stk1135: reg_w 0x203 err -110 [ 616.487712][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 616.487728][ T25] gspca_stk1135: Sensor write failed [ 616.487752][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 616.487762][ T25] gspca_stk1135: Sensor write failed [ 616.487837][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 616.487848][ T25] gspca_stk1135: Sensor read failed [ 616.487874][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 616.487884][ T25] gspca_stk1135: Sensor read failed [ 616.487896][ T25] gspca_stk1135: Detected sensor type unknown (0x0) [ 616.487927][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 616.487936][ T25] gspca_stk1135: Sensor read failed [ 616.487962][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 616.487971][ T25] gspca_stk1135: Sensor read failed [ 616.487994][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 616.488004][ T25] gspca_stk1135: Sensor write failed [ 616.488029][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 616.488038][ T25] gspca_stk1135: Sensor write failed [ 616.493371][ T25] stk1135 1-1:0.0: probe with driver stk1135 failed with error -110 [ 616.857158][T10070] fuse: Bad value for 'fd' [ 616.953677][ T25] usb 1-1: USB disconnect, device number 41 [ 618.060436][T10096] FAULT_INJECTION: forcing a failure. [ 618.060436][T10096] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 618.060486][T10096] CPU: 0 UID: 0 PID: 10096 Comm: syz.5.1170 Not tainted syzkaller #0 PREEMPT(full) [ 618.060509][T10096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 618.060521][T10096] Call Trace: [ 618.060528][T10096] [ 618.060537][T10096] dump_stack_lvl+0xe8/0x150 [ 618.060568][T10096] should_fail_ex+0x410/0x560 [ 618.060595][T10096] _copy_to_user+0x31/0xb0 [ 618.060620][T10096] bpf_test_finish+0x4ea/0x690 [ 618.060658][T10096] ? __pfx_bpf_test_finish+0x10/0x10 [ 618.060697][T10096] bpf_prog_test_run_skb+0x11fe/0x2230 [ 618.060742][T10096] ? __fget_files+0x3a2/0x420 [ 618.060768][T10096] ? __fget_files+0x2a/0x420 [ 618.060798][T10096] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 618.060825][T10096] bpf_prog_test_run+0x2c5/0x340 [ 618.060852][T10096] __sys_bpf+0xa22/0xd90 [ 618.060888][T10096] ? __pfx___sys_bpf+0x10/0x10 [ 618.060910][T10096] ? taprio_dequeue+0x250/0x540 [ 618.060944][T10096] ? sched_clock_cpu+0x74/0x440 [ 618.060983][T10096] ? __irq_exit_rcu+0xcb/0x220 [ 618.061011][T10096] ? handle_softirqs+0x720/0x860 [ 618.061038][T10096] __x64_sys_bpf+0xba/0xd0 [ 618.061060][T10096] do_syscall_64+0x166/0x520 [ 618.061082][T10096] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.061098][T10096] ? clear_bhb_loop+0x70/0xc0 [ 618.061121][T10096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.061140][T10096] RIP: 0033:0x7fc41099e159 [ 618.061156][T10096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 618.061172][T10096] RSP: 002b:00007fc411793028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 618.061193][T10096] RAX: ffffffffffffffda RBX: 00007fc410c25fa0 RCX: 00007fc41099e159 [ 618.061207][T10096] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 000000000000000a [ 618.061220][T10096] RBP: 00007fc411793090 R08: 0000000000000000 R09: 0000000000000000 [ 618.061232][T10096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 618.061244][T10096] R13: 00007fc410c26038 R14: 00007fc410c25fa0 R15: 00007fc410d4fa48 [ 618.061275][T10096] [ 618.535032][ T25] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 618.662001][T10106] Cannot find add_set index 2 as target [ 618.688239][ T25] usb 1-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 1.00 [ 618.693324][ T25] usb 1-1: config index 0 descriptor too short (expected 69, got 51) [ 618.693381][ T25] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10 [ 618.693407][ T25] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 25466, setting to 1024 [ 618.738741][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.738767][ T25] usb 1-1: Product: syz [ 618.738780][ T25] usb 1-1: Manufacturer: syz [ 618.738794][ T25] usb 1-1: SerialNumber: syz [ 618.790745][ T25] usb 1-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8201); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 619.380086][T10114] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 619.667578][T10119] netlink: 'syz.1.1177': attribute type 1 has an invalid length. [ 619.853203][T10119] 8021q: adding VLAN 0 to HW filter on device bond6 [ 619.961376][T10125] bond6: (slave geneve6): making interface the new active one [ 619.973043][T10125] bond6: (slave geneve6): Enslaving as an active interface with an up link [ 620.045037][ T25] usb 1-1: Scarlett Gen 2 USB request timed out, cmd 0 [ 620.045315][ T25] usb 1-1: Error initialising Scarlett Gen 2 Mixer Driver: -110 [ 620.168103][ T25] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -110 [ 620.194724][ T25] usb 1-1: USB disconnect, device number 42 [ 620.197946][ T5761] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 620.343465][ T7760] udevd[7760]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 620.505084][ T5748] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 620.656046][ T5748] usb 3-1: Using ep0 maxpacket: 8 [ 620.656851][ T5748] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 620.658139][ T5748] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 620.658184][ T5748] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.706032][ T5748] usb 3-1: config 0 descriptor?? [ 620.860779][T10138] syz_tun: entered promiscuous mode [ 620.907125][T10138] syz_tun: left promiscuous mode [ 620.923959][ T5748] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 621.838040][ T5748] usb 3-1: USB disconnect, device number 37 [ 623.495730][T10192] misc userio: Invalid payload size [ 623.495978][T10192] misc userio: Invalid payload size [ 624.215392][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.215449][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.489746][ T5766] wiimote 0005:057E:0306.000D: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 624.511703][ T5766] wiimote 0005:057E:0306.000D: New device registered [ 624.553611][T10191] wiimote 0005:057E:0306.000D: Device removed [ 624.638960][T10208] wireguard0: entered promiscuous mode [ 624.749142][T10211] fido_id[10211]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 624.909343][T10216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1202'. [ 624.972524][T10223] FAULT_INJECTION: forcing a failure. [ 624.972524][T10223] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 624.972557][T10223] CPU: 1 UID: 0 PID: 10223 Comm: syz.0.1206 Not tainted syzkaller #0 PREEMPT(full) [ 624.972578][T10223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 624.972590][T10223] Call Trace: [ 624.972597][T10223] [ 624.972605][T10223] dump_stack_lvl+0xe8/0x150 [ 624.972639][T10223] should_fail_ex+0x410/0x560 [ 624.972665][T10223] _copy_from_user+0x2d/0xb0 [ 624.972688][T10223] move_addr_to_kernel+0x7e/0x160 [ 624.972717][T10223] io_submit_sqes+0xbde/0x2310 [ 624.972767][T10223] __se_sys_io_uring_enter+0x35b/0x1bb0 [ 624.972798][T10223] ? __fget_files+0x3a2/0x420 [ 624.972829][T10223] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 624.972850][T10223] ? fput+0xa0/0xd0 [ 624.972873][T10223] ? ksys_write+0x242/0x270 [ 624.972901][T10223] ? __pfx_ksys_write+0x10/0x10 [ 624.972934][T10223] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 624.972957][T10223] do_syscall_64+0x166/0x520 [ 624.972978][T10223] ? trace_irq_disable+0x3b/0x140 [ 624.972998][T10223] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.973018][T10223] ? clear_bhb_loop+0x70/0xc0 [ 624.973040][T10223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.973059][T10223] RIP: 0033:0x7fb27b99e159 [ 624.973076][T10223] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 624.973092][T10223] RSP: 002b:00007fb27c843028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 624.973112][T10223] RAX: ffffffffffffffda RBX: 00007fb27bc25fa0 RCX: 00007fb27b99e159 [ 624.973126][T10223] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 624.973137][T10223] RBP: 00007fb27c843090 R08: 0000000000000000 R09: 0000000000000000 [ 624.973150][T10223] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 624.973162][T10223] R13: 00007fb27bc26038 R14: 00007fb27bc25fa0 R15: 00007fb27bd4fa48 [ 624.973193][T10223] [ 625.366908][T10231] netlink: 296 bytes leftover after parsing attributes in process `syz.2.1210'. [ 625.565858][ T5766] wiimote 0005:057E:0306.000D: detected device: Nintendo Wii Remote (Gen 1) [ 625.624336][T10243] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1213'. [ 625.644387][T10243] loop5: detected capacity change from 0 to 6 [ 625.653840][T10243] loop5: [POWERTEC] p1 p2 p3 [ 625.654004][T10243] loop5: p1 start 2738982409 is beyond EOD, truncated [ 625.654026][T10243] loop5: p2 start 3318134482 is beyond EOD, truncated [ 625.654043][T10243] loop5: p3 start 3832978868 is beyond EOD, truncated [ 625.669992][ T5766] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.000D/input/input41 [ 625.680025][ T5766] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.000D/input/input42 [ 625.692990][ T5766] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.000D/input/input40 [ 625.799889][ T990] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 625.940003][ T990] usb 1-1: device descriptor read/64, error -71 [ 626.215299][ T990] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 626.350902][ T990] usb 1-1: device descriptor read/64, error -71 [ 626.465955][ T990] usb usb1-port1: attempt power cycle [ 626.625086][ T25] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 626.777493][ T25] usb 5-1: unable to get BOS descriptor or descriptor too short [ 626.777544][ T25] usb 5-1: New USB device found, idVendor=18d1, idProduct=2d05, bcdDevice= 0.40 [ 626.778773][ T25] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 36, changing to 7 [ 626.778804][ T25] usb 5-1: config 1 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 626.781215][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.781238][ T25] usb 5-1: Product: syz [ 626.781252][ T25] usb 5-1: Manufacturer: syz [ 626.781266][ T25] usb 5-1: SerialNumber: syz [ 626.837548][ T990] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 626.867279][ T990] usb 1-1: device descriptor read/8, error -71 [ 627.035235][ T25] usb 5-1: 1:1 : sample bitwidth 62 in over sample bytes 3 [ 627.035270][ T25] usb 5-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 627.070408][ T25] usb 5-1: failed to enable PITCH for EP 0x1 [ 627.073291][ T25] usb 5-1: unit 2 not found! [ 627.073310][ T25] usb 5-1: unit 0 not found! [ 627.118603][T10257] FAULT_INJECTION: forcing a failure. [ 627.118603][T10257] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 627.118650][T10257] CPU: 0 UID: 0 PID: 10257 Comm: syz.1.1218 Not tainted syzkaller #0 PREEMPT(full) [ 627.118673][T10257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 627.118685][T10257] Call Trace: [ 627.118693][T10257] [ 627.118701][T10257] dump_stack_lvl+0xe8/0x150 [ 627.118734][T10257] should_fail_ex+0x410/0x560 [ 627.118761][T10257] prepare_alloc_pages+0x223/0x600 [ 627.118789][T10257] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 627.118815][T10257] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 627.118842][T10257] ? __pfx_policy_nodemask+0x10/0x10 [ 627.118864][T10257] ? smaps_page_accumulate+0x163/0x280 [ 627.118897][T10257] ? __lock_acquire+0x747/0x2de0 [ 627.118921][T10257] alloc_pages_mpol+0x21e/0x390 [ 627.118951][T10257] folio_alloc_mpol_noprof+0x39/0x160 [ 627.118978][T10257] vma_alloc_folio_noprof+0xe1/0x1e0 [ 627.119006][T10257] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 627.119032][T10257] ? lock_acquire+0x115/0x350 [ 627.119056][T10257] do_pte_missing+0x173a/0x34b0 [ 627.119101][T10257] handle_mm_fault+0x1a53/0x3750 [ 627.119137][T10257] ? handle_mm_fault+0xf1/0x3750 [ 627.119172][T10257] ? __pfx_handle_mm_fault+0x10/0x10 [ 627.119210][T10257] ? __lock_acquire+0x747/0x2de0 [ 627.119233][T10257] ? lock_mm_and_find_vma+0xa7/0x340 [ 627.119263][T10257] do_user_addr_fault+0x746/0x1340 [ 627.119299][T10257] exc_page_fault+0x6a/0xc0 [ 627.119329][T10257] asm_exc_page_fault+0x26/0x30 [ 627.119347][T10257] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 627.119374][T10257] Code: 67 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 0f 67 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 627.119391][T10257] RSP: 0018:ffffc90003fe78f8 EFLAGS: 00050202 [ 627.119409][T10257] RAX: ffffffff84dc1401 RBX: ffff88802c428000 RCX: 0000000000000f69 [ 627.119422][T10257] RDX: 0000000000000000 RSI: ffff88802c428000 RDI: 0000200000004880 [ 627.119435][T10257] RBP: ffffc90003fe7a78 R08: ffff88802c428f68 R09: 1ffff110058851ed [ 627.119450][T10257] R10: dffffc0000000000 R11: ffffed10058851ee R12: dffffc0000000000 [ 627.119464][T10257] R13: 0000000000000000 R14: ffffc90003fe7be0 R15: 0000000000000f69 [ 627.119484][T10257] ? _copy_to_iter+0x401/0x1810 [ 627.119512][T10257] _copy_to_iter+0x49d/0x1810 [ 627.119548][T10257] ? __pfx__copy_to_iter+0x10/0x10 [ 627.119571][T10257] ? mmput+0xe/0x70 [ 627.119597][T10257] ? m_stop+0x269/0x300 [ 627.119627][T10257] seq_read_iter+0xaae/0xca0 [ 627.119664][T10257] seq_read+0x367/0x480 [ 627.119695][T10257] ? __pfx_seq_read+0x10/0x10 [ 627.119729][T10257] ? rw_verify_area+0x24a/0x4c0 [ 627.119758][T10257] ? __pfx_seq_read+0x10/0x10 [ 627.119779][T10257] vfs_read+0x213/0xa80 [ 627.119811][T10257] ? __pfx___mutex_lock+0x10/0x10 [ 627.119833][T10257] ? __pfx_vfs_read+0x10/0x10 [ 627.119863][T10257] ? __fget_files+0x2a/0x420 [ 627.119894][T10257] ? __fget_files+0x3a2/0x420 [ 627.119919][T10257] ? __fget_files+0x2a/0x420 [ 627.119953][T10257] ksys_read+0x150/0x270 [ 627.119983][T10257] ? __pfx_ksys_read+0x10/0x10 [ 627.120024][T10257] do_syscall_64+0x166/0x520 [ 627.120044][T10257] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.120063][T10257] ? clear_bhb_loop+0x70/0xc0 [ 627.120088][T10257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.120107][T10257] RIP: 0033:0x7f411659e159 [ 627.120129][T10257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 627.120146][T10257] RSP: 002b:00007f41173d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 627.120165][T10257] RAX: ffffffffffffffda RBX: 00007f4116825fa0 RCX: 00007f411659e159 [ 627.120179][T10257] RDX: 0000000000002020 RSI: 0000200000004880 RDI: 0000000000000003 [ 627.120192][T10257] RBP: 00007f41173d7090 R08: 0000000000000000 R09: 0000000000000000 [ 627.120204][T10257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 627.120216][T10257] R13: 00007f4116826038 R14: 00007f4116825fa0 R15: 00007f411694fa48 [ 627.120249][T10257] [ 627.127790][ T990] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 627.158395][ T990] usb 1-1: device descriptor read/8, error -71 [ 627.275711][ T990] usb usb1-port1: unable to enumerate USB device [ 627.373417][T10259] FAULT_INJECTION: forcing a failure. [ 627.373417][T10259] name failslab, interval 1, probability 0, space 0, times 0 [ 627.373461][T10259] CPU: 0 UID: 0 PID: 10259 Comm: syz.1.1219 Not tainted syzkaller #0 PREEMPT(full) [ 627.373486][T10259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 627.373497][T10259] Call Trace: [ 627.373505][T10259] [ 627.373513][T10259] dump_stack_lvl+0xe8/0x150 [ 627.373544][T10259] should_fail_ex+0x410/0x560 [ 627.373571][T10259] should_failslab+0xa8/0x100 [ 627.373594][T10259] ? sctp_get_port_local+0x6bd/0x1700 [ 627.373620][T10259] kmem_cache_alloc_noprof+0xa1/0x600 [ 627.373645][T10259] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 627.373670][T10259] ? __inet_dev_addr_type+0x131/0x560 [ 627.373696][T10259] ? sctp_get_port_local+0x6bd/0x1700 [ 627.373722][T10259] sctp_get_port_local+0x6bd/0x1700 [ 627.373741][T10259] ? lock_acquire+0x115/0x350 [ 627.373770][T10259] ? __pfx_sctp_get_port_local+0x10/0x10 [ 627.373791][T10259] ? sctp_bind_addr_match+0x30/0x2b0 [ 627.373816][T10259] ? sctp_bind_addr_match+0x28b/0x2b0 [ 627.373846][T10259] sctp_do_bind+0x4d9/0x9a0 [ 627.373875][T10259] sctp_connect_new_asoc+0x270/0x6b0 [ 627.373899][T10259] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 627.373921][T10259] ? kasan_save_track+0x3e/0x80 [ 627.373939][T10259] ? __kasan_kmalloc+0x93/0xb0 [ 627.373957][T10259] ? __kmalloc_noprof+0x36b/0x720 [ 627.373974][T10259] ? io_uring_alloc_async_data+0x191/0x2e0 [ 627.373995][T10259] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 627.374019][T10259] __sctp_connect+0x5cb/0xdc0 [ 627.374049][T10259] ? __pfx___sctp_connect+0x10/0x10 [ 627.374067][T10259] ? sctp_inet_connect+0xa0/0x210 [ 627.374096][T10259] ? __local_bh_enable_ip+0xd6/0x140 [ 627.374125][T10259] sctp_inet_connect+0x12e/0x210 [ 627.374155][T10259] io_connect+0x1e8/0x690 [ 627.374176][T10259] ? __pfx_io_connect+0x10/0x10 [ 627.374192][T10259] ? __fget_files+0x2a/0x420 [ 627.374221][T10259] ? __fget_files+0x2a/0x420 [ 627.374244][T10259] ? __fget_files+0x3a2/0x420 [ 627.374271][T10259] __io_issue_sqe+0x188/0x4d0 [ 627.374307][T10259] io_issue_sqe+0x16d/0x1020 [ 627.374327][T10259] ? _copy_from_user+0x94/0xb0 [ 627.374354][T10259] io_submit_sqes+0xd26/0x2310 [ 627.374402][T10259] __se_sys_io_uring_enter+0x35b/0x1bb0 [ 627.374431][T10259] ? __fget_files+0x3a2/0x420 [ 627.374459][T10259] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 627.374479][T10259] ? fput+0xa0/0xd0 [ 627.374502][T10259] ? ksys_write+0x242/0x270 [ 627.374531][T10259] ? __pfx_ksys_write+0x10/0x10 [ 627.374562][T10259] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 627.374585][T10259] do_syscall_64+0x166/0x520 [ 627.374605][T10259] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.374624][T10259] ? clear_bhb_loop+0x70/0xc0 [ 627.374647][T10259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.374666][T10259] RIP: 0033:0x7f411659e159 [ 627.374683][T10259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 627.374699][T10259] RSP: 002b:00007f41173d7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 627.374719][T10259] RAX: ffffffffffffffda RBX: 00007f4116825fa0 RCX: 00007f411659e159 [ 627.374733][T10259] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 627.374745][T10259] RBP: 00007f41173d7090 R08: 0000000000000000 R09: 0000000000000000 [ 627.374757][T10259] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 627.374768][T10259] R13: 00007f4116826038 R14: 00007f4116825fa0 R15: 00007f411694fa48 [ 627.374797][T10259] [ 627.465212][ T25] usb 5-1: USB disconnect, device number 52 [ 627.711353][ T8565] udevd[8565]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 628.038200][T10266] could not allocate digest TFM handle michael_mic [ 628.255108][ T25] usb 5-1: new full-speed USB device number 53 using dummy_hcd [ 628.408133][ T25] usb 5-1: unable to get BOS descriptor or descriptor too short [ 628.408622][ T25] usb 5-1: not running at top speed; connect to a high speed hub [ 628.408652][ T25] usb 5-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 628.409585][ T25] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 628.409607][ T25] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 628.412174][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.412199][ T25] usb 5-1: Product: syz [ 628.412213][ T25] usb 5-1: Manufacturer: syz [ 628.412228][ T25] usb 5-1: SerialNumber: syz [ 628.461055][ T5728] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 628.562583][T10279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1227'. [ 628.578584][T10279] loop5: detected capacity change from 0 to 6 [ 628.583496][T10279] loop5: [POWERTEC] p1 p2 p3 [ 628.583687][T10279] loop5: p1 start 2738982409 is beyond EOD, truncated [ 628.583710][T10279] loop5: p2 start 3318134482 is beyond EOD, truncated [ 628.583727][T10279] loop5: p3 start 3832978868 is beyond EOD, truncated [ 628.636056][ T5728] usb 2-1: New USB device found, idVendor=076d, idProduct=c262, bcdDevice= 0.00 [ 628.643339][ T5728] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 628.643409][ T5728] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 628.643450][ T5728] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.708394][ T5728] usb 2-1: config 0 descriptor?? [ 628.723515][ T5728] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 628.759842][T10281] syz_tun: entered promiscuous mode [ 628.763144][T10281] syz_tun: left promiscuous mode [ 628.962304][ T5728] usb 2-1: USB disconnect, device number 41 [ 629.070914][T10266] x_tables: duplicate underflow at hook 2 [ 629.157721][ T25] usb 5-1: USB disconnect, device number 53 [ 629.197168][ T7760] udevd[7760]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 629.211436][T10290] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1229'. [ 629.690402][T10298] FAULT_INJECTION: forcing a failure. [ 629.690402][T10298] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 629.690437][T10298] CPU: 1 UID: 0 PID: 10298 Comm: syz.1.1232 Not tainted syzkaller #0 PREEMPT(full) [ 629.690460][T10298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 629.690472][T10298] Call Trace: [ 629.690479][T10298] [ 629.690487][T10298] dump_stack_lvl+0xe8/0x150 [ 629.690519][T10298] should_fail_ex+0x410/0x560 [ 629.690546][T10298] prepare_alloc_pages+0x223/0x600 [ 629.690582][T10298] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 629.690608][T10298] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 629.690631][T10298] ? __pfx_policy_nodemask+0x10/0x10 [ 629.690660][T10298] ? __lock_acquire+0x747/0x2de0 [ 629.690683][T10298] alloc_pages_mpol+0x21e/0x390 [ 629.690713][T10298] folio_alloc_mpol_noprof+0x39/0x160 [ 629.690741][T10298] vma_alloc_folio_noprof+0xe1/0x1e0 [ 629.690769][T10298] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 629.690795][T10298] ? lock_acquire+0x115/0x350 [ 629.690823][T10298] do_pte_missing+0x173a/0x34b0 [ 629.690871][T10298] handle_mm_fault+0x1a53/0x3750 [ 629.690908][T10298] ? handle_mm_fault+0xf1/0x3750 [ 629.690944][T10298] ? __pfx_handle_mm_fault+0x10/0x10 [ 629.690982][T10298] ? __pfx___up_read+0x10/0x10 [ 629.691012][T10298] ? lock_mm_and_find_vma+0xa7/0x340 [ 629.691044][T10298] do_user_addr_fault+0x746/0x1340 [ 629.691079][T10298] exc_page_fault+0x6a/0xc0 [ 629.691101][T10298] asm_exc_page_fault+0x26/0x30 [ 629.691120][T10298] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 629.691147][T10298] Code: 67 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 0f 67 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 629.691163][T10298] RSP: 0018:ffffc900036378f8 EFLAGS: 00050202 [ 629.691181][T10298] RAX: ffffffff84dc1401 RBX: ffff88807a950000 RCX: 00000000000007e9 [ 629.691196][T10298] RDX: 0000000000000000 RSI: ffff88807a950780 RDI: 0000200000005000 [ 629.691210][T10298] RBP: ffffc90003637a78 R08: ffff88807a950f68 R09: 1ffff1100f52a1ed [ 629.691224][T10298] R10: dffffc0000000000 R11: ffffed100f52a1ee R12: dffffc0000000000 [ 629.691238][T10298] R13: 0000000000000000 R14: ffffc90003637be0 R15: 0000000000000f69 [ 629.691259][T10298] ? _copy_to_iter+0x401/0x1810 [ 629.691287][T10298] _copy_to_iter+0x49d/0x1810 [ 629.691323][T10298] ? __pfx__copy_to_iter+0x10/0x10 [ 629.691346][T10298] ? mmput+0xe/0x70 [ 629.691376][T10298] ? m_stop+0x269/0x300 [ 629.691406][T10298] seq_read_iter+0xaae/0xca0 [ 629.691444][T10298] seq_read+0x367/0x480 [ 629.691475][T10298] ? __pfx_seq_read+0x10/0x10 [ 629.691509][T10298] ? rw_verify_area+0x24a/0x4c0 [ 629.691539][T10298] ? __pfx_seq_read+0x10/0x10 [ 629.691565][T10298] vfs_read+0x213/0xa80 [ 629.691599][T10298] ? __pfx___mutex_lock+0x10/0x10 [ 629.691620][T10298] ? __pfx_vfs_read+0x10/0x10 [ 629.691648][T10298] ? __fget_files+0x2a/0x420 [ 629.691678][T10298] ? __fget_files+0x3a2/0x420 [ 629.691703][T10298] ? __fget_files+0x2a/0x420 [ 629.691747][T10298] ksys_read+0x150/0x270 [ 629.691777][T10298] ? __pfx_ksys_read+0x10/0x10 [ 629.691817][T10298] do_syscall_64+0x166/0x520 [ 629.691837][T10298] ? trace_irq_disable+0x3b/0x140 [ 629.691857][T10298] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.691877][T10298] ? clear_bhb_loop+0x70/0xc0 [ 629.691901][T10298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.691921][T10298] RIP: 0033:0x7f411659e159 [ 629.691939][T10298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 629.691955][T10298] RSP: 002b:00007f41173d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 629.691976][T10298] RAX: ffffffffffffffda RBX: 00007f4116825fa0 RCX: 00007f411659e159 [ 629.691991][T10298] RDX: 0000000000002020 RSI: 0000200000004880 RDI: 0000000000000003 [ 629.692003][T10298] RBP: 00007f41173d7090 R08: 0000000000000000 R09: 0000000000000000 [ 629.692015][T10298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 629.692027][T10298] R13: 00007f4116826038 R14: 00007f4116825fa0 R15: 00007f411694fa48 [ 629.692058][T10298] [ 630.267319][T10303] netlink: 296 bytes leftover after parsing attributes in process `syz.2.1234'. [ 631.065176][ T990] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 631.221880][ T990] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 631.225083][ T990] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 631.225179][ T990] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 631.225253][ T990] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.289969][ T990] qmi_wwan 5-1:1.0: skipping garbage [ 631.509816][ T990] qmi_wwan 5-1:1.0: probe with driver qmi_wwan failed with error -22 [ 631.555438][ T990] usb 5-1: USB disconnect, device number 54 [ 632.038066][T10344] wireguard0: entered promiscuous mode [ 632.798596][T10349] could not allocate digest TFM handle michael_mic [ 632.885064][ T5728] usb 5-1: new full-speed USB device number 55 using dummy_hcd [ 632.905356][ T25] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 633.057188][ T25] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 633.058765][ T25] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x15, changing to 0x5 [ 633.058796][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 244, setting to 64 [ 633.058860][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.110812][ T25] usb 2-1: config 0 descriptor?? [ 633.338058][T10356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 633.340920][T10356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 633.388735][ T25] ath6kl: Failed to submit usb control message: -71 [ 633.388807][ T25] ath6kl: unable to send the bmi data to the device: -71 [ 633.388823][ T25] ath6kl: Unable to send get target info: -71 [ 633.393069][ T25] ath6kl: Failed to init ath6kl core: -71 [ 633.393718][ T25] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 633.459617][ T25] usb 2-1: USB disconnect, device number 42 [ 633.630732][ T5761] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 633.795980][ T5761] usb 3-1: Using ep0 maxpacket: 16 [ 633.798829][ T5761] usb 3-1: New USB device found, idVendor=f924, idProduct=78ff, bcdDevice=27.0a [ 633.800181][ T5761] usb 3-1: config 0 has an invalid interface number: 246 but max is 0 [ 633.800239][ T5761] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 633.800275][ T5761] usb 3-1: config 0 has no interface number 0 [ 633.800371][ T5761] usb 3-1: config 0 interface 246 altsetting 249 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 633.800430][ T5761] usb 3-1: config 0 interface 246 altsetting 249 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 633.800494][ T5761] usb 3-1: config 0 interface 246 has no altsetting 0 [ 633.820981][ T5761] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.821019][ T5761] usb 3-1: Product: syz [ 633.821050][ T5761] usb 3-1: Manufacturer: syz [ 633.821081][ T5761] usb 3-1: SerialNumber: syz [ 633.835691][ T5761] usb 3-1: config 0 descriptor?? [ 634.102012][T10365] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 634.111321][T10369] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=65542 (524336 ns) > initial count (13312 ns). Using initial count to start timer. [ 634.289745][T10349] x_tables: duplicate underflow at hook 2 [ 634.411117][ T5766] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 634.502452][T10374] FAULT_INJECTION: forcing a failure. [ 634.502452][T10374] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 634.502517][T10374] CPU: 0 UID: 0 PID: 10374 Comm: syz.1.1253 Not tainted syzkaller #0 PREEMPT(full) [ 634.502540][T10374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 634.502551][T10374] Call Trace: [ 634.502559][T10374] [ 634.502568][T10374] dump_stack_lvl+0xe8/0x150 [ 634.502601][T10374] should_fail_ex+0x410/0x560 [ 634.502629][T10374] _copy_from_iter+0x1d3/0x1660 [ 634.502649][T10374] ? trace_kmem_cache_alloc+0x29/0xe0 [ 634.502684][T10374] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 634.502713][T10374] ? __alloc_skb+0x27a/0x7a0 [ 634.502736][T10374] ? __pfx__copy_from_iter+0x10/0x10 [ 634.502763][T10374] ? skb_page_frag_refill+0x217/0x460 [ 634.502798][T10374] tcp_sendmsg_locked+0x26c2/0x5640 [ 634.502868][T10374] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 634.502898][T10374] ? tcp_sendmsg+0x21/0x50 [ 634.502920][T10374] ? __local_bh_enable_ip+0xd6/0x140 [ 634.502951][T10374] tcp_sendmsg+0x2f/0x50 [ 634.502970][T10374] ? __pfx_inet_sendmsg+0x10/0x10 [ 634.502997][T10374] sock_sendmsg_nosec+0x10e/0x180 [ 634.503030][T10374] __sys_sendto+0x408/0x5a0 [ 634.503052][T10374] ? ksys_write+0x1e6/0x270 [ 634.503083][T10374] ? __pfx___sys_sendto+0x10/0x10 [ 634.503104][T10374] ? __mutex_unlock_slowpath+0x731/0x900 [ 634.503153][T10374] ? __pfx_ksys_write+0x10/0x10 [ 634.503187][T10374] __x64_sys_sendto+0xde/0x100 [ 634.503220][T10374] do_syscall_64+0x166/0x520 [ 634.503241][T10374] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.503261][T10374] ? clear_bhb_loop+0x70/0xc0 [ 634.503285][T10374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.503305][T10374] RIP: 0033:0x7f411659e159 [ 634.503322][T10374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 634.503340][T10374] RSP: 002b:00007f41173d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 634.503361][T10374] RAX: ffffffffffffffda RBX: 00007f4116825fa0 RCX: 00007f411659e159 [ 634.503376][T10374] RDX: 0000000000000381 RSI: 00002000000004c0 RDI: 0000000000000003 [ 634.503389][T10374] RBP: 00007f41173d7090 R08: 0000000000000000 R09: 0000000000000000 [ 634.503401][T10374] R10: 0000000000000805 R11: 0000000000000246 R12: 0000000000000001 [ 634.503413][T10374] R13: 00007f4116826038 R14: 00007f4116825fa0 R15: 00007f411694fa48 [ 634.503445][T10374] [ 634.575227][ T5766] usb 6-1: Using ep0 maxpacket: 32 [ 634.576932][ T5766] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 634.589842][ T5766] usb 6-1: too many endpoints for config 0 interface 0 altsetting 4: 128, using maximum allowed: 30 [ 634.589945][ T5766] usb 6-1: config 0 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 634.590001][ T5766] usb 6-1: config 0 interface 0 has no altsetting 0 [ 634.590204][ T5766] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.623800][ T5766] usb 6-1: config 0 descriptor?? [ 634.913539][ T5766] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 634.935976][ T5766] usb 6-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 634.936048][ T5766] usb 6-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 635.300536][ T5761] usb 3-1: USB disconnect, device number 38 [ 635.823849][T10372] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1252'. [ 635.961518][T10390] xt_hashlimit: overflow, rate too high: 1 [ 636.497910][T10398] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1262'. [ 636.701700][T10402] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 636.793719][T10405] team0: Device vlan7 is already an upper device of the team interface [ 636.956447][ T5728] usb 3-1: new low-speed USB device number 39 using dummy_hcd [ 637.105707][ T5728] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0a57, bcdDevice= 0.00 [ 637.106825][ T5728] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 637.106859][ T5728] usb 3-1: too many endpoints for config 0 interface 0 altsetting 9: 255, using maximum allowed: 30 [ 637.106894][ T5728] usb 3-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 637.106921][ T5728] usb 3-1: config 0 interface 0 has no altsetting 0 [ 637.106952][ T5728] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.111364][ T5728] usb 3-1: config 0 descriptor?? [ 637.182028][T10409] netlink: 296 bytes leftover after parsing attributes in process `syz.4.1266'. [ 637.186422][ T5728] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 637.625272][ T5748] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 637.786849][ T5748] usb 5-1: Using ep0 maxpacket: 16 [ 637.796569][ T5748] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 637.815434][ T5748] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 637.815460][ T5748] usb 5-1: config 0 has no interface number 0 [ 637.818727][ T5748] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.818750][ T5748] usb 5-1: Product: syz [ 637.818765][ T5748] usb 5-1: Manufacturer: syz [ 637.818778][ T5748] usb 5-1: SerialNumber: syz [ 637.821644][ T5748] usb 5-1: config 0 descriptor?? [ 637.823779][ T5748] hub 5-1:0.132: bad descriptor, ignoring hub [ 637.823802][ T5748] hub 5-1:0.132: probe with driver hub failed with error -5 [ 637.891116][ T5748] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.132/input/input43 [ 638.072705][T10430] netlink: 'syz.1.1274': attribute type 1 has an invalid length. [ 638.249603][T10430] 8021q: adding VLAN 0 to HW filter on device bond7 [ 638.381747][T10437] bond7: (slave geneve7): making interface the new active one [ 638.396433][T10437] bond7: (slave geneve7): Enslaving as an active interface with an up link [ 639.022199][T10447] syz_tun: entered promiscuous mode [ 639.037933][T10447] syz_tun: left promiscuous mode [ 639.511974][T10455] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 639.631748][ T990] usb 3-1: USB disconnect, device number 39 [ 640.086930][T10465] team0: Device vlan8 is already an upper device of the team interface [ 640.431934][T10472] netlink: 296 bytes leftover after parsing attributes in process `syz.1.1288'. [ 640.485181][ T4971] usb 5-1: reset high-speed USB device number 56 using dummy_hcd [ 640.524835][ T4971] usb 5-1: device reset changed ep0 maxpacket size! [ 640.593057][ T25] usb 5-1: USB disconnect, device number 56 [ 640.798311][ T25] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 640.948058][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 640.948762][ T25] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 640.949788][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 640.949831][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.002236][ T25] usb 5-1: config 0 descriptor?? [ 641.238242][ T25] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 641.574549][T10497] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 641.829988][ T5728] usb 5-1: USB disconnect, device number 57 [ 641.979356][T10508] netlink: 296 bytes leftover after parsing attributes in process `syz.1.1301'. [ 642.409476][T10514] loop6: detected capacity change from 0 to 2640 [ 642.415889][T10514] Buffer I/O error on dev loop6, logical block 0, async page read [ 642.415966][T10514] Buffer I/O error on dev loop6, logical block 0, async page read [ 642.416028][T10514] Buffer I/O error on dev loop6, logical block 0, async page read [ 642.416088][T10514] Buffer I/O error on dev loop6, logical block 0, async page read [ 642.416148][T10514] Buffer I/O error on dev loop6, logical block 0, async page read [ 642.416255][T10514] Buffer I/O error on dev loop6, logical block 0, async page read [ 642.416327][T10514] Buffer I/O error on dev loop6, logical block 0, async page read [ 642.416386][T10514] Buffer I/O error on dev loop6, logical block 0, async page read [ 642.416416][T10514] ldm_validate_partition_table(): Disk read failed. [ 642.416459][T10514] Buffer I/O error on dev loop6, logical block 0, async page read [ 642.416520][T10514] Buffer I/O error on dev loop6, logical block 0, async page read [ 642.416611][T10514] Dev loop6: unable to read RDB block 0 [ 642.417040][T10514] loop6: unable to read partition table [ 642.428962][T10514] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 642.594745][T10514] loop6: detected capacity change from 2640 to 524288000 [ 643.172902][T10517] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1302'. [ 643.713856][T10517] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 643.748158][ T5761] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 643.806938][T10546] Cannot find add_set index 2 as target [ 643.887030][ T5761] usb 1-1: device descriptor read/64, error -71 [ 644.037104][T10542] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1311'. [ 644.037130][T10542] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 644.100407][T10550] netlink: 296 bytes leftover after parsing attributes in process `syz.5.1314'. [ 644.149575][ T5761] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 644.259771][T10552] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1315'. [ 644.260104][T10552] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1315'. [ 644.260303][T10552] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1315'. [ 644.260498][T10552] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1315'. [ 644.263707][T10552] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1315'. [ 644.263926][T10552] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1315'. [ 644.287228][ T5761] usb 1-1: device descriptor read/64, error -71 [ 644.386952][ T5761] usb usb1-port1: attempt power cycle [ 644.578590][T10561] program syz.2.1318 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 644.749302][ T5761] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 644.779581][ T5761] usb 1-1: device descriptor read/8, error -71 [ 645.025388][ T5761] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 645.038836][T10572] syz_tun: left promiscuous mode [ 645.055165][ T5728] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 645.056294][ T5761] usb 1-1: device descriptor read/8, error -71 [ 645.063425][T10572] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.065588][T10572] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.167569][ T5761] usb usb1-port1: unable to enumerate USB device [ 645.205172][ T5728] usb 2-1: Using ep0 maxpacket: 8 [ 645.205854][ T5728] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 645.207691][ T5728] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 645.207735][ T5728] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.211892][ T5728] usb 2-1: config 0 descriptor?? [ 645.298381][T10572] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 645.318803][T10572] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 645.385297][T10572] veth1_vlan: left allmulticast mode [ 645.423829][ T5728] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 645.746903][T10583] Cannot find add_set index 2 as target [ 645.806706][T10572] wireguard0: left promiscuous mode [ 645.827023][ T149] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.827942][ T149] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.827981][ T149] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.828013][ T149] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.161745][ T5748] usb 2-1: USB disconnect, device number 43 [ 646.539098][T10598] Cannot find add_set index 2 as target [ 646.795084][T10602] loop5: detected capacity change from 0 to 6 [ 646.804633][T10602] loop5: [POWERTEC] p1 p2 p3 [ 646.804802][T10602] loop5: p1 start 2738982409 is beyond EOD, truncated [ 646.804822][T10602] loop5: p2 start 3318134482 is beyond EOD, truncated [ 646.804839][T10602] loop5: p3 start 3832978868 is beyond EOD, truncated [ 647.155264][ T5748] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 647.305863][ T5748] usb 2-1: Using ep0 maxpacket: 16 [ 647.309591][ T5748] usb 2-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 647.316425][ T5748] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.316459][ T5748] usb 2-1: Product: syz [ 647.316473][ T5748] usb 2-1: Manufacturer: syz [ 647.316486][ T5748] usb 2-1: SerialNumber: syz [ 647.345802][ T5748] usb 2-1: config 0 descriptor?? [ 647.380369][ T5748] usb 2-1: selecting invalid altsetting 1 [ 647.380392][ T5748] technisat-usb2: could not set alternate setting to 0 [ 647.494174][T10610] Cannot find add_set index 2 as target [ 647.562542][ T5748] technisat-usb2: firmware version: 0.0 [ 647.562589][ T5748] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 647.872927][T10618] __nla_validate_parse: 29 callbacks suppressed [ 647.872985][T10618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1337'. [ 647.975841][ T5748] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 647.976717][ T5748] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 647.976774][ T5748] usb 2-1: media controller created [ 647.977428][ T5748] technisat-usb2: i2c-error: out failed 53 = -22 [ 647.977570][ T5748] dvb-usb: MAC address reading failed. [ 648.058641][ T5748] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 648.173472][T10604] technisat-usb2: i2c-error: out failed 41 = -22 [ 648.199298][T10604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 648.202353][T10604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 648.233993][T10622] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1338'. [ 648.296995][ T5748] DVB: Unable to find symbol stv090x_attach() [ 648.298078][ T5748] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 648.456280][ T5748] rc_core: IR keymap rc-technisat-usb2 not found [ 648.456301][ T5748] Registered IR keymap rc-empty [ 648.457662][ T5748] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 648.489167][ T5748] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input44 [ 648.516469][ T5748] dvb-usb: schedule remote query interval to 100 msecs. [ 648.529558][ T5748] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 648.548324][ T5748] usb 2-1: USB disconnect, device number 44 [ 648.820357][ T5748] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 649.446916][ T5748] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 649.595398][ T5748] usb 3-1: Using ep0 maxpacket: 8 [ 649.596147][ T5748] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 649.597237][ T5748] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 649.597281][ T5748] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.606111][ T5748] usb 3-1: config 0 descriptor?? [ 649.816574][ T5748] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 649.819882][T10650] Cannot find add_set index 2 as target [ 649.862929][T10650] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1347'. [ 649.862954][T10650] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1347'. [ 650.050414][T10654] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1349'. [ 650.051268][T10655] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1349'. [ 650.137553][ T5750] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 650.287140][ T5750] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 650.291171][ T5750] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 650.291231][ T5750] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 650.291363][ T5750] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 650.291454][ T5750] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.355847][ T5750] usb 1-1: config 0 descriptor?? [ 650.467961][ T5748] usb 3-1: USB disconnect, device number 40 [ 650.788185][ T5750] usbhid 1-1:0.0: can't add hid device: -71 [ 650.788399][ T5750] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 650.809199][T10663] syz_tun: entered promiscuous mode [ 650.811396][T10663] syz_tun: left promiscuous mode [ 650.818682][ T5750] usb 1-1: USB disconnect, device number 51 [ 651.452070][T10683] FAULT_INJECTION: forcing a failure. [ 651.452070][T10683] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 651.452103][T10683] CPU: 1 UID: 0 PID: 10683 Comm: syz.0.1357 Not tainted syzkaller #0 PREEMPT(full) [ 651.452126][T10683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 651.452137][T10683] Call Trace: [ 651.452145][T10683] [ 651.452154][T10683] dump_stack_lvl+0xe8/0x150 [ 651.452187][T10683] should_fail_ex+0x410/0x560 [ 651.452214][T10683] _copy_to_user+0x31/0xb0 [ 651.452241][T10683] simple_read_from_buffer+0xe1/0x170 [ 651.452274][T10683] proc_fail_nth_read+0x1bb/0x230 [ 651.452303][T10683] ? common_file_perm+0x20e/0x2b0 [ 651.452329][T10683] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 651.452361][T10683] ? rw_verify_area+0x24a/0x4c0 [ 651.452389][T10683] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 651.452418][T10683] vfs_read+0x213/0xa80 [ 651.452451][T10683] ? __pfx___mutex_lock+0x10/0x10 [ 651.452474][T10683] ? __pfx_vfs_read+0x10/0x10 [ 651.452504][T10683] ? __fget_files+0x2a/0x420 [ 651.452534][T10683] ? __fget_files+0x3a2/0x420 [ 651.452557][T10683] ? __fget_files+0x2a/0x420 [ 651.452591][T10683] ksys_read+0x150/0x270 [ 651.452622][T10683] ? __pfx_ksys_read+0x10/0x10 [ 651.452660][T10683] do_syscall_64+0x166/0x520 [ 651.452680][T10683] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.452700][T10683] ? clear_bhb_loop+0x70/0xc0 [ 651.452724][T10683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.452744][T10683] RIP: 0033:0x7fb27b95e98e [ 651.452761][T10683] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 651.452779][T10683] RSP: 002b:00007fb27c842fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 651.452800][T10683] RAX: ffffffffffffffda RBX: 00007fb27c8436c0 RCX: 00007fb27b95e98e [ 651.452814][T10683] RDX: 000000000000000f RSI: 00007fb27c8430a0 RDI: 0000000000000005 [ 651.452827][T10683] RBP: 00007fb27c843090 R08: 0000000000000000 R09: 0000000000000000 [ 651.452839][T10683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 651.452851][T10683] R13: 00007fb27bc26038 R14: 00007fb27bc25fa0 R15: 00007fb27bd4fa48 [ 651.452882][T10683] [ 651.727830][T10687] Cannot find add_set index 2 as target [ 651.750279][T10687] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1359'. [ 651.750338][T10687] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1359'. [ 652.002363][T10689] could not allocate digest TFM handle michael_mic [ 652.190661][T10708] netlink: 'syz.4.1364': attribute type 13 has an invalid length. [ 652.625133][ T2237] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 652.759878][T10728] Cannot find add_set index 2 as target [ 652.773152][T10728] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1373'. [ 652.773178][T10728] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1373'. [ 652.794948][ T2237] usb 2-1: Using ep0 maxpacket: 32 [ 652.810804][ T2237] usb 2-1: unable to get BOS descriptor or descriptor too short [ 652.811171][ T2237] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 652.814846][ T2237] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 652.815032][ T2237] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 652.815072][ T2237] usb 2-1: config 14 has no interface number 0 [ 652.815107][ T2237] usb 2-1: config 14 has no interface number 1 [ 652.815234][ T2237] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 652.815274][ T2237] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 652.815355][ T2237] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 652.815398][ T2237] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 652.815465][ T2237] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 652.815524][ T2237] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 652.815584][ T2237] usb 2-1: config 14 interface 57 has no altsetting 0 [ 652.815619][ T2237] usb 2-1: config 14 interface 228 has no altsetting 0 [ 652.937813][ T2237] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.937859][ T2237] usb 2-1: Product: syz [ 652.937893][ T2237] usb 2-1: Manufacturer: syz [ 652.937925][ T2237] usb 2-1: SerialNumber: syz [ 653.023040][T10734] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1376'. [ 653.276644][T10742] fuse: Unknown parameter '.'€Øš [ 653.276644][T10742] 8�]ÛZfÏ8‰à�?ù}l|_0A¡L7Ý ·D:ØAAje½*�²×M�l­KóX3º´q BøgÝÌ�y' [ 653.422798][ T2237] legousbtower 2-1:14.57: interrupt endpoints not found [ 653.825264][ T2237] legousbtower 2-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 653.827267][ T2237] legousbtower 2-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 654.398636][ T5720] usb 2-1: USB disconnect, device number 45 [ 654.399914][ C1] usb 2-1: tower_interrupt_in_callback: usb_submit_urb failed (-19) [ 654.461157][ T5720] legousbtower 2-1:14.228: LEGO USB Tower #-160 now disconnected [ 654.805569][T10760] Cannot find add_set index 2 as target [ 654.823672][T10760] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1384'. [ 654.823714][T10760] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1384'. [ 654.865379][ T5748] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 655.015506][ T5748] usb 5-1: Using ep0 maxpacket: 8 [ 655.017097][ T5748] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 655.018252][ T5748] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 655.018296][ T5748] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.025307][ T5748] usb 5-1: config 0 descriptor?? [ 655.249172][ T5748] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 655.695256][ T5748] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 655.700776][ T30] audit: type=1326 audit(1789086017.349:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10781 comm="syz.5.1392" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc41099e159 code=0x7ffc0000 [ 655.700932][ T30] audit: type=1326 audit(1789086017.349:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10781 comm="syz.5.1392" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc41099e159 code=0x7ffc0000 [ 655.702540][ T30] audit: type=1326 audit(1789086017.349:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10781 comm="syz.5.1392" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc41099e159 code=0x7ffc0000 [ 655.702709][ T30] audit: type=1326 audit(1789086017.349:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10781 comm="syz.5.1392" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc41099e159 code=0x7ffc0000 [ 655.703190][ T30] audit: type=1326 audit(1789086017.349:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10781 comm="syz.5.1392" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc41099e159 code=0x7ffc0000 [ 655.703453][ T30] audit: type=1326 audit(1789086017.349:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10781 comm="syz.5.1392" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc41099e159 code=0x7ffc0000 [ 655.703598][ T30] audit: type=1326 audit(1789086017.349:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10781 comm="syz.5.1392" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc41099e159 code=0x7ffc0000 [ 655.714273][ T30] audit: type=1326 audit(1789086017.359:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10781 comm="syz.5.1392" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc41099e159 code=0x7ffc0000 [ 655.714346][ T30] audit: type=1326 audit(1789086017.359:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10781 comm="syz.5.1392" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc41099e159 code=0x7ffc0000 [ 655.714406][ T30] audit: type=1326 audit(1789086017.359:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10781 comm="syz.5.1392" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fc41099e159 code=0x7ffc0000 [ 655.748886][ T5720] usb 5-1: USB disconnect, device number 58 [ 655.845694][ T5748] usb 2-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 655.847469][ T5748] usb 2-1: config 4 has an invalid interface number: 44 but max is 0 [ 655.847491][ T5748] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 655.847509][ T5748] usb 2-1: config 4 has no interface number 0 [ 655.847544][ T5748] usb 2-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 655.850356][ T5748] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.850380][ T5748] usb 2-1: Product: syz [ 655.850393][ T5748] usb 2-1: Manufacturer: syz [ 655.850407][ T5748] usb 2-1: SerialNumber: syz [ 656.287644][ T5748] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 656.296624][ T5748] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 656.299096][ T5748] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 656.299146][ T5748] usb 2-1: media controller created [ 656.301290][ T5748] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 656.403599][T10793] loop5: detected capacity change from 0 to 7 [ 656.405042][ T5748] DVB: Unable to find symbol dib7000p_attach() [ 656.405057][ T5748] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 656.429645][T10793] Dev loop5: unable to read RDB block 7 [ 656.429691][T10793] loop5: unable to read partition table [ 656.429884][T10793] loop5: partition table beyond EOD, truncated [ 656.431810][T10793] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 656.475038][ T5728] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 656.560419][ T5748] rc_core: IR keymap rc-dib0700-rc5 not found [ 656.560436][ T5748] Registered IR keymap rc-empty [ 656.563122][ T5748] dvb-usb: could not initialize remote control. [ 656.563136][ T5748] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 656.625816][ T5728] usb 1-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 656.627184][ T5728] usb 1-1: config 0 interface 0 has no altsetting 0 [ 656.627218][ T5728] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.632756][ T5728] usb 1-1: config 0 descriptor?? [ 656.634747][T10797] Cannot find add_set index 2 as target [ 656.648216][T10797] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1397'. [ 656.648253][T10797] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1397'. [ 656.980954][T10788] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1394'. [ 656.985783][T10788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 656.986705][T10788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 657.027583][T10776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 657.028265][T10776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 657.032467][ T5750] usb 2-1: USB disconnect, device number 46 [ 657.101244][ T5750] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 657.224481][ T5728] usbhid 1-1:0.0: can't add hid device: -71 [ 657.224607][ T5728] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 657.247872][ T5728] usb 1-1: USB disconnect, device number 52 [ 657.311362][T10804] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 657.767708][T10810] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1400'. [ 657.868544][T10815] Cannot find add_set index 2 as target [ 657.932959][T10814] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1399'. [ 657.933772][T10814] netlink: 'syz.4.1399': attribute type 3 has an invalid length. [ 658.155045][ T5728] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 658.305439][ T5728] usb 1-1: Using ep0 maxpacket: 32 [ 658.306271][ T5728] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 658.307499][ T5728] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 658.307524][ T5728] usb 1-1: config 0 has no interface number 0 [ 658.307599][ T5728] usb 1-1: config 0 interface 184 has no altsetting 0 [ 658.311974][ T5728] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.311997][ T5728] usb 1-1: Product: syz [ 658.312010][ T5728] usb 1-1: Manufacturer: syz [ 658.312025][ T5728] usb 1-1: SerialNumber: syz [ 658.315374][ T5728] usb 1-1: config 0 descriptor?? [ 659.261002][T10818] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1403'. [ 659.460977][T10842] fuse: Bad value for 'fd' [ 659.619379][T10843] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1409'. [ 660.210160][T10847] could not allocate digest TFM handle michael_mic [ 660.254711][T10855] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 660.334548][T10857] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1413'. [ 660.385923][ T5750] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 660.557621][ T5750] usb 3-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 660.567486][ T5750] usb 3-1: config 4 has an invalid interface number: 44 but max is 0 [ 660.567528][ T5750] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 660.567580][ T5750] usb 3-1: config 4 has no interface number 0 [ 660.567653][ T5750] usb 3-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 660.583774][ T5750] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.583831][ T5750] usb 3-1: Product: syz [ 660.583846][ T5750] usb 3-1: Manufacturer: syz [ 660.583876][ T5750] usb 3-1: SerialNumber: syz [ 660.644094][ T5720] usb 5-1: new full-speed USB device number 59 using dummy_hcd [ 661.089009][ T5750] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 661.104344][ T5750] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 661.111261][ T5750] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 661.111382][ T5750] usb 3-1: media controller created [ 661.139902][ T5750] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 661.285683][ T5750] DVB: Unable to find symbol dib7000p_attach() [ 661.285719][ T5750] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 661.482884][T10865] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 661.568067][T10849] x_tables: duplicate underflow at hook 2 [ 661.679544][ T5750] rc_core: IR keymap rc-dib0700-rc5 not found [ 661.679606][ T5750] Registered IR keymap rc-empty [ 661.680230][ T5750] dvb-usb: could not initialize remote control. [ 661.680259][ T5750] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 661.923991][T10853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 661.944563][T10853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 661.989174][ T990] usb 3-1: USB disconnect, device number 41 [ 662.020460][T10873] overlayfs: failed to resolve 'ô$½ÒãW¿­»=ê¥&©(°úU6ÛËmR aM¿]d`Ä­®€ÉùÝÕ­<0&…ˆÉÇŽ°è45h1YáˆYF8�¥XŠnÌ È¿7лÿ?i­@Å€à|ÌÖfêS—Åù!üúq¦NÑœ§g°Melh�ÅìScY~çÏÛñiäRV»;,�ÉœÌ:‡‹´½€0fWúü·L3噦°ïLL;�†Œw/á¨ïž¯i­þcnjïÞƒ¥,Œ¹}e¥,—¸Ë¿•+­Ñ5ûÜÃOƒê+ƒàâ”x†(—c#ŠìúÁî¢�¿ô÷Ó˜M®„‘†ûo': -2 [ 662.177136][ T990] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 662.847002][ T990] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 663.010575][ T990] usb 2-1: Using ep0 maxpacket: 16 [ 663.014809][ T990] usb 2-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 663.022473][ T990] usb 2-1: config 166 has an invalid interface number: 177 but max is 1 [ 663.022534][ T990] usb 2-1: config 166 has an invalid interface number: 34 but max is 1 [ 663.022570][ T990] usb 2-1: config 166 has no interface number 0 [ 663.022602][ T990] usb 2-1: config 166 has no interface number 1 [ 663.022697][ T990] usb 2-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 663.022734][ T990] usb 2-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 663.022799][ T990] usb 2-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 663.022840][ T990] usb 2-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 663.022895][ T990] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 663.022936][ T990] usb 2-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 663.022992][ T990] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 663.023033][ T990] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 663.023070][ T990] usb 2-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 663.023128][ T990] usb 2-1: config 166 interface 177 has no altsetting 0 [ 663.023162][ T990] usb 2-1: config 166 interface 34 has no altsetting 0 [ 663.029448][ T990] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.029490][ T990] usb 2-1: Product: syz [ 663.029519][ T990] usb 2-1: Manufacturer: syz [ 663.029549][ T990] usb 2-1: SerialNumber: syz [ 663.376445][ T990] ums-realtek 2-1:166.177: USB Mass Storage device detected [ 663.528032][T10901] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1424'. [ 663.553373][ T990] ums-realtek 2-1:166.34: USB Mass Storage device detected [ 663.892616][ T990] ums-realtek 2-1:166.34: probe with driver ums-realtek failed with error -5 [ 664.024051][ T5728] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 664.024085][ T5728] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 664.024569][ T5728] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 664.024595][ T5728] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 664.024615][ T5728] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 664.024633][ T5728] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 664.047937][ T5728] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 664.123915][ T5728] usb 1-1: USB disconnect, device number 53 [ 664.369216][ T2237] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 664.508618][ T990] uvcvideo 2-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 664.508783][ T990] uvcvideo 2-1:166.34: No valid video chain found. [ 664.533493][ T2237] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 664.571798][ T2237] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.571858][ T2237] usb 3-1: Product: syz [ 664.571891][ T2237] usb 3-1: Manufacturer: syz [ 664.571922][ T2237] usb 3-1: SerialNumber: syz [ 664.620354][ T2237] usb 3-1: config 0 descriptor?? [ 664.644667][ T990] usb 2-1: USB disconnect, device number 47 [ 664.852985][ T2237] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 665.547451][ T2237] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 666.305109][ T5720] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 666.455865][ T5720] usb 1-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 666.457627][ T5720] usb 1-1: config 4 has an invalid interface number: 44 but max is 0 [ 666.457652][ T5720] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 666.457671][ T5720] usb 1-1: config 4 has no interface number 0 [ 666.457710][ T5720] usb 1-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 666.460127][ T5720] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.460151][ T5720] usb 1-1: Product: syz [ 666.460165][ T5720] usb 1-1: Manufacturer: syz [ 666.460179][ T5720] usb 1-1: SerialNumber: syz [ 666.958281][ T5720] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 666.983705][ T5720] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 666.997300][ T5720] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 666.997356][ T5720] usb 1-1: media controller created [ 667.026064][ T5720] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 667.170992][ T5720] DVB: Unable to find symbol dib7000p_attach() [ 667.171527][ T5720] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 667.335080][ T5720] rc_core: IR keymap rc-dib0700-rc5 not found [ 667.335100][ T5720] Registered IR keymap rc-empty [ 667.335445][ T5720] dvb-usb: could not initialize remote control. [ 667.335464][ T5720] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 667.635279][T10937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 667.640595][T10937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 667.642936][ T5748] usb 1-1: USB disconnect, device number 54 [ 667.796754][ T5748] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 668.514354][T10962] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1435'. [ 668.677547][ T2237] usb 3-1: USB disconnect, device number 42 [ 668.875483][T10967] netlink: 296 bytes leftover after parsing attributes in process `syz.0.1437'. [ 668.984485][T10968] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1438'. [ 670.045825][ T990] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 670.218374][ T990] usb 3-1: Using ep0 maxpacket: 16 [ 670.230900][ T990] usb 3-1: unable to get BOS descriptor or descriptor too short [ 670.230953][ T990] usb 3-1: New USB device found, idVendor=1163, idProduct=0100, bcdDevice=23.bb [ 670.232240][ T990] usb 3-1: config 4 has an invalid interface number: 86 but max is 0 [ 670.232308][ T990] usb 3-1: config 4 has no interface number 0 [ 670.232397][ T990] usb 3-1: config 4 interface 86 altsetting 11 endpoint 0x3 has an invalid bInterval 127, changing to 10 [ 670.232440][ T990] usb 3-1: config 4 interface 86 altsetting 11 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 670.232498][ T990] usb 3-1: config 4 interface 86 altsetting 11 endpoint 0x8B has invalid wMaxPacketSize 0 [ 670.232538][ T990] usb 3-1: config 4 interface 86 has no altsetting 0 [ 670.242294][ T990] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.242334][ T990] usb 3-1: Product: syz [ 670.242364][ T990] usb 3-1: Manufacturer: syz [ 670.242393][ T990] usb 3-1: SerialNumber: syz [ 670.524044][ T990] cypress_m8 3-1:4.86: DeLorme Earthmate USB converter detected [ 670.563938][ T990] usb 3-1: DeLorme Earthmate USB converter now attached to ttyUSB0 [ 670.596556][ T990] usb 3-1: USB disconnect, device number 43 [ 670.660618][ T990] earthmate ttyUSB0: DeLorme Earthmate USB converter now disconnected from ttyUSB0 [ 670.661258][ T990] cypress_m8 3-1:4.86: device disconnected [ 670.735015][ T5720] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 670.885882][ T5720] usb 2-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 670.886850][ T5720] usb 2-1: config 4 has an invalid interface number: 44 but max is 0 [ 670.886873][ T5720] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 670.886893][ T5720] usb 2-1: config 4 has no interface number 0 [ 670.886959][ T5720] usb 2-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 670.890069][ T5720] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.890092][ T5720] usb 2-1: Product: syz [ 670.890106][ T5720] usb 2-1: Manufacturer: syz [ 670.890121][ T5720] usb 2-1: SerialNumber: syz [ 671.373698][ T5720] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 671.392239][ T5720] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 671.394182][ T5720] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 671.394232][ T5720] usb 2-1: media controller created [ 671.413346][ T5720] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 671.592648][ T5720] DVB: Unable to find symbol dib7000p_attach() [ 671.592664][ T5720] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 671.815014][ T5720] rc_core: IR keymap rc-dib0700-rc5 not found [ 671.815034][ T5720] Registered IR keymap rc-empty [ 671.815311][ T5720] dvb-usb: could not initialize remote control. [ 671.815320][ T5720] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 671.978606][ T5728] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 672.097486][T10988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 672.097846][T10988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 672.104992][ T5728] usb 1-1: device descriptor read/64, error -71 [ 672.127838][ T5761] usb 2-1: USB disconnect, device number 48 [ 672.220068][ T5761] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 672.344994][ T5728] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 672.477478][ T5728] usb 1-1: device descriptor read/64, error -71 [ 672.585394][ T5728] usb usb1-port1: attempt power cycle [ 672.925350][ T5728] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 672.945769][ T5728] usb 1-1: device descriptor read/8, error -71 [ 673.186007][ T5728] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 673.216781][ T5728] usb 1-1: device descriptor read/8, error -71 [ 673.328745][ T5728] usb usb1-port1: unable to enumerate USB device [ 673.394836][T11016] netlink: 'syz.2.1454': attribute type 1 has an invalid length. [ 673.561232][T11016] 8021q: adding VLAN 0 to HW filter on device bond4 [ 673.784265][T11021] bond4: (slave geneve4): making interface the new active one [ 673.822052][T11021] bond4: (slave geneve4): Enslaving as an active interface with an up link [ 673.865276][ T8536] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.124362][T11023] syzkaller0: entered promiscuous mode [ 674.124387][T11023] syzkaller0: entered allmulticast mode [ 674.194201][T11028] syz_tun: entered promiscuous mode [ 674.208596][T11028] syz_tun: left promiscuous mode [ 674.425493][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.487563][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.489161][ T149] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.743192][T11040] input: syz1 as /devices/virtual/input/input49 [ 675.127531][ T5761] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 675.245338][ T990] usb 1-1: new full-speed USB device number 59 using dummy_hcd [ 675.296431][ T5761] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 675.302497][ T5761] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 675.302554][ T5761] usb 2-1: config 0 has no interface number 0 [ 675.351705][ T5761] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.351747][ T5761] usb 2-1: Product: syz [ 675.351767][ T5761] usb 2-1: Manufacturer: syz [ 675.351775][ T5761] usb 2-1: SerialNumber: syz [ 675.384744][ T5761] usb 2-1: config 0 descriptor?? [ 675.426101][ T990] usb 1-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 675.430740][ T990] usb 1-1: config 4 has an invalid interface number: 44 but max is 0 [ 675.430766][ T990] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 675.430782][ T990] usb 1-1: config 4 has no interface number 0 [ 675.431103][ T990] usb 1-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 675.491075][ T990] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.491178][ T990] usb 1-1: Product: syz [ 675.491211][ T990] usb 1-1: Manufacturer: syz [ 675.491633][ T990] usb 1-1: SerialNumber: syz [ 675.650798][T11045] syz_tun: entered allmulticast mode [ 675.677142][T11064] netlink: 8916 bytes leftover after parsing attributes in process `syz.5.1468'. [ 675.695295][T11044] syz_tun: left allmulticast mode [ 675.733893][ T5761] uvcvideo 2-1:0.64: Found UVC 0.08 device syz (046d:0823) [ 675.733965][ T5761] uvcvideo 2-1:0.64: No valid video chain found. [ 675.763968][ T5761] usb 2-1: USB disconnect, device number 49 [ 675.936800][ T990] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 675.958135][ T990] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 675.975982][ T990] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 675.976026][ T990] usb 1-1: media controller created [ 675.981227][ T990] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 676.134753][ T990] DVB: Unable to find symbol dib7000p_attach() [ 676.134785][ T990] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 676.285164][ T990] rc_core: IR keymap rc-dib0700-rc5 not found [ 676.285188][ T990] Registered IR keymap rc-empty [ 676.285425][ T990] dvb-usb: could not initialize remote control. [ 676.285430][ T990] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 676.639459][T11048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 676.639925][T11048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 676.648781][ T5728] usb 1-1: USB disconnect, device number 59 [ 676.712438][ T5728] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 677.159479][T11084] Cannot find add_set index 2 as target [ 677.276591][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 677.276610][ T30] audit: type=1400 audit(1789086038.929:873): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=11086 comm="syz.1.1476" [ 677.290728][T11087] netlink: 'syz.1.1476': attribute type 1 has an invalid length. [ 677.439161][T11092] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1478'. [ 677.488431][T11095] netlink: 8916 bytes leftover after parsing attributes in process `syz.1.1479'. [ 677.954705][T11105] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1483'. [ 677.988929][T11105] loop5: detected capacity change from 0 to 6 [ 678.005656][T11105] loop5: [POWERTEC] p1 p2 p3 [ 678.005839][T11105] loop5: p1 start 2738982409 is beyond EOD, truncated [ 678.005859][T11105] loop5: p2 start 3318134482 is beyond EOD, truncated [ 678.005876][T11105] loop5: p3 start 3832978868 is beyond EOD, truncated [ 679.034348][T11118] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1486'. [ 679.896664][T11122] syz_tun: entered promiscuous mode [ 679.911433][T11122] syz_tun: left promiscuous mode [ 679.955106][ T5761] usb 5-1: new full-speed USB device number 60 using dummy_hcd [ 680.115861][ T5761] usb 5-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 680.117724][ T5761] usb 5-1: config 4 has an invalid interface number: 44 but max is 0 [ 680.117766][ T5761] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 680.117819][ T5761] usb 5-1: config 4 has no interface number 0 [ 680.117892][ T5761] usb 5-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 680.148463][ T5761] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.148526][ T5761] usb 5-1: Product: syz [ 680.148557][ T5761] usb 5-1: Manufacturer: syz [ 680.148589][ T5761] usb 5-1: SerialNumber: syz [ 680.310457][T11127] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 680.648944][T11134] netlink: 'syz.2.1493': attribute type 2 has an invalid length. [ 680.653040][ T5761] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 680.673065][ T5761] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 680.684592][ T5761] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 680.684635][ T5761] usb 5-1: media controller created [ 680.704036][ T5761] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 680.830257][ T5761] DVB: Unable to find symbol dib7000p_attach() [ 680.830291][ T5761] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 680.981583][ T5761] rc_core: IR keymap rc-dib0700-rc5 not found [ 680.981621][ T5761] Registered IR keymap rc-empty [ 680.982343][ T5761] dvb-usb: could not initialize remote control. [ 680.982370][ T5761] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 681.423627][T11120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 681.424029][T11120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 681.425769][ T5728] usb 5-1: USB disconnect, device number 60 [ 681.455339][ T25] usb 1-1: new full-speed USB device number 60 using dummy_hcd [ 681.529996][ T5728] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 681.608053][ T25] usb 1-1: unable to get BOS descriptor or descriptor too short [ 681.608588][ T25] usb 1-1: not running at top speed; connect to a high speed hub [ 681.608620][ T25] usb 1-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 681.610759][ T25] usb 1-1: config 0 has an invalid interface number: 88 but max is 0 [ 681.610784][ T25] usb 1-1: config 0 has no interface number 0 [ 681.610824][ T25] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 46935, setting to 64 [ 681.610851][ T25] usb 1-1: config 0 interface 88 has no altsetting 0 [ 681.629163][ T25] usb 1-1: language id specifier not provided by device, defaulting to English [ 681.660859][ T25] usb 1-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 681.660886][ T25] usb 1-1: Product: syz [ 681.660899][ T25] usb 1-1: SerialNumber: Љ [ 681.670266][ T25] usb 1-1: config 0 descriptor?? [ 681.670972][T11145] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 681.750522][T11150] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1497'. [ 682.079946][T11130] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1490'. [ 682.115950][T11130] hsr_slave_0: left promiscuous mode [ 682.132937][T11145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 682.133448][T11145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 682.179143][T11130] hsr_slave_1: left promiscuous mode [ 682.179564][ T30] audit: type=1326 audit(1789086043.809:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11151 comm="syz.5.1498" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc41099e159 code=0x7ffc0000 [ 682.179611][ T30] audit: type=1326 audit(1789086043.809:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11151 comm="syz.5.1498" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc41099e159 code=0x7ffc0000 [ 682.188827][ T30] audit: type=1326 audit(1789086043.829:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11151 comm="syz.5.1498" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc41099e159 code=0x7ffc0000 [ 682.188898][ T30] audit: type=1326 audit(1789086043.829:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11151 comm="syz.5.1498" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc41099e159 code=0x7ffc0000 [ 682.188944][ T30] audit: type=1326 audit(1789086043.829:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11151 comm="syz.5.1498" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc41099e159 code=0x7ffc0000 [ 682.191943][ T30] audit: type=1326 audit(1789086043.839:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11151 comm="syz.5.1498" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fc41099e159 code=0x7ffc0000 [ 682.192008][ T30] audit: type=1326 audit(1789086043.839:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11151 comm="syz.5.1498" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc41099e159 code=0x7ffc0000 [ 682.192045][ T30] audit: type=1326 audit(1789086043.839:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11151 comm="syz.5.1498" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc41099e159 code=0x7ffc0000 [ 682.202244][T11152] sctp: [Deprecated]: syz.5.1498 (pid 11152) Use of int in max_burst socket option deprecated. [ 682.202244][T11152] Use struct sctp_assoc_value instead [ 682.202611][ T30] audit: type=1326 audit(1789086043.849:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11151 comm="syz.5.1498" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc41099e159 code=0x7ffc0000 [ 682.290640][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 682.290658][ T30] audit: type=1326 audit(1789086043.939:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11151 comm="syz.5.1498" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fc41099e159 code=0x7ffc0000 [ 682.290721][ T30] audit: type=1326 audit(1789086043.939:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11151 comm="syz.5.1498" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc41099e159 code=0x7ffc0000 [ 682.290944][ T30] audit: type=1326 audit(1789086043.939:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11151 comm="syz.5.1498" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc41099e159 code=0x7ffc0000 [ 682.316195][ T30] audit: type=1326 audit(1789086043.969:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11151 comm="syz.5.1498" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc41095e98e code=0x7ffc0000 [ 682.316616][ T30] audit: type=1326 audit(1789086043.969:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11151 comm="syz.5.1498" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc41099e159 code=0x7ffc0000 [ 682.316657][ T30] audit: type=1326 audit(1789086043.969:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11151 comm="syz.5.1498" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc41099e159 code=0x7ffc0000 [ 682.328815][ T30] audit: type=1326 audit(1789086043.979:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11151 comm="syz.5.1498" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc41095e98e code=0x7ffc0000 [ 682.329729][ T30] audit: type=1326 audit(1789086043.979:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11151 comm="syz.5.1498" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc41095e98e code=0x7ffc0000 [ 682.330436][ T30] audit: type=1326 audit(1789086043.979:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11151 comm="syz.5.1498" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc41099e159 code=0x7ffc0000 [ 682.336992][ T30] audit: type=1326 audit(1789086043.989:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11151 comm="syz.5.1498" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc41099e159 code=0x7ffc0000 [ 682.637865][T11145] can: request_module (can-proto-0) failed. [ 682.763875][ T25] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.88/input/input52 [ 682.988204][ T25] usb 1-1: USB disconnect, device number 60 [ 683.141455][ T5670] udevd[5670]: Error opening device "/dev/input/event4": No such file or directory [ 683.141689][ T5670] udevd[5670]: Unable to EVIOCGABS device "/dev/input/event4" [ 683.141907][ T5670] udevd[5670]: Unable to EVIOCGABS device "/dev/input/event4" [ 683.567611][ T990] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 683.721159][ T990] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 683.747346][ T990] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.747374][ T990] usb 5-1: Product: syz [ 683.747383][ T990] usb 5-1: Manufacturer: syz [ 683.747390][ T990] usb 5-1: SerialNumber: syz [ 683.752819][ T990] usb 5-1: config 0 descriptor?? [ 684.969477][ T990] usb 5-1: Firmware version (0.0) predates our first public release. [ 684.969535][ T990] usb 5-1: Please update to version 0.2 or newer [ 685.236246][T11178] kvm: pic: non byte write [ 685.520643][T11176] syzkaller0: entered promiscuous mode [ 685.657394][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.657452][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.984161][T11194] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1508'. [ 686.035994][ T990] usb 5-1: USB disconnect, device number 61 [ 686.525197][ T5728] usb 1-1: new full-speed USB device number 61 using dummy_hcd [ 686.677894][ T5728] usb 1-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 686.678874][ T5728] usb 1-1: config 4 has an invalid interface number: 44 but max is 0 [ 686.678899][ T5728] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 686.678918][ T5728] usb 1-1: config 4 has no interface number 0 [ 686.678954][ T5728] usb 1-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 686.682651][ T5728] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.682675][ T5728] usb 1-1: Product: syz [ 686.682689][ T5728] usb 1-1: Manufacturer: syz [ 686.682704][ T5728] usb 1-1: SerialNumber: syz [ 686.852707][T11198] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.853130][T11198] bridge0: port 1(bridge_slave_0) entered disabled state [ 687.138876][ T5728] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 687.171823][ T5728] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 687.176212][ T5728] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 687.176260][ T5728] usb 1-1: media controller created [ 687.203559][ T5728] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 687.366766][T11198] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 687.409903][T11198] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 687.513651][ T5728] DVB: Unable to find symbol dib7000p_attach() [ 687.513668][ T5728] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 687.767133][ T5728] rc_core: IR keymap rc-dib0700-rc5 not found [ 687.767153][ T5728] Registered IR keymap rc-empty [ 687.767427][ T5728] dvb-usb: could not initialize remote control. [ 687.767437][ T5728] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 688.017150][T11196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 688.018043][T11196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 688.066223][ T5748] usb 1-1: USB disconnect, device number 61 [ 688.147513][ T5748] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 688.148371][T11198] bond1: left allmulticast mode [ 688.190314][T11198] bond4: left promiscuous mode [ 688.223492][T11230] netlink: 'syz.4.1517': attribute type 1 has an invalid length. [ 688.362921][T11230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 688.369779][T11229] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 688.406198][ T7077] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.470491][T11234] bond0: (slave geneve2): making interface the new active one [ 688.483350][T11234] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 688.516961][ T7077] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.517023][ T7077] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.517067][ T7077] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.787492][T11238] syz_tun: entered promiscuous mode [ 688.804113][T11238] syz_tun: left promiscuous mode [ 688.982391][T11236] syzkaller0: entered promiscuous mode [ 690.275070][T11267] fuse: blksize only supported for fuseblk [ 690.965052][ T990] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 691.105400][ T990] usb 1-1: device descriptor read/64, error -71 [ 691.365229][ T990] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 691.505145][ T990] usb 1-1: device descriptor read/64, error -71 [ 691.595268][ T5713] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 691.615351][ T990] usb usb1-port1: attempt power cycle [ 691.745079][ T5713] usb 2-1: Using ep0 maxpacket: 32 [ 691.745910][ T5713] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 691.747252][ T5713] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 691.747281][ T5713] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 691.747307][ T5713] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 691.747330][ T5713] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 691.747355][ T5713] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 691.751071][ T5713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.751094][ T5713] usb 2-1: Product: syz [ 691.751110][ T5713] usb 2-1: Manufacturer: syz [ 691.751124][ T5713] usb 2-1: SerialNumber: syz [ 691.853913][ T5713] usb 2-1: config 0 descriptor?? [ 691.965152][ T990] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 691.987842][ T990] usb 1-1: device descriptor read/8, error -71 [ 692.245132][ T990] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 692.268397][ T990] usb 1-1: device descriptor read/8, error -71 [ 692.279872][ T5713] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 692.279987][ T5713] input input54: Device does not respond to id packet M [ 692.280722][ T5713] input input54: Device does not respond to id packet P [ 692.366183][ T5761] usb 5-1: new full-speed USB device number 62 using dummy_hcd [ 692.376961][ T990] usb usb1-port1: unable to enumerate USB device [ 692.518406][ T5761] usb 5-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 692.520532][ T5761] usb 5-1: config 4 has an invalid interface number: 44 but max is 0 [ 692.520589][ T5761] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 692.520626][ T5761] usb 5-1: config 4 has no interface number 0 [ 692.520723][ T5761] usb 5-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 692.559984][ T5761] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.560044][ T5761] usb 5-1: Product: syz [ 692.560076][ T5761] usb 5-1: Manufacturer: syz [ 692.560106][ T5761] usb 5-1: SerialNumber: syz [ 692.665202][ T990] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 692.826760][ T990] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 692.829340][ T990] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 692.829402][ T990] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 692.829467][ T990] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 692.829505][ T990] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 692.832327][ T990] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 692.832382][ T990] usb 3-1: SerialNumber: syz [ 693.125379][ T5761] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 693.145557][ T5761] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 693.147460][ T5761] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 693.147589][ T5761] usb 5-1: media controller created [ 693.182005][ T5761] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 693.325708][ T5713] iforce 2-1:0.0: usb_submit_urb failed: -110 [ 693.327266][ T5713] input input54: Device does not respond to id packet B [ 693.329874][ T5713] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 693.329939][ T5713] input input54: Device does not respond to id packet N [ 693.332081][ T5713] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 693.332777][ T5713] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 693.333218][ T5713] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 693.333811][ T5713] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 693.362260][ T5713] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input54 [ 693.403170][ T5761] DVB: Unable to find symbol dib7000p_attach() [ 693.403192][ T5761] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 693.667041][ T5761] rc_core: IR keymap rc-dib0700-rc5 not found [ 693.667053][ T5761] Registered IR keymap rc-empty [ 693.667331][ T5761] dvb-usb: could not initialize remote control. [ 693.667348][ T5761] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 693.894199][T11281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 693.908933][T11281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 693.922486][ T5748] usb 5-1: USB disconnect, device number 62 [ 694.019383][T11306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1537'. [ 694.036014][ T5748] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 694.255607][ T5748] usb 2-1: USB disconnect, device number 50 [ 694.637510][T11311] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 695.287885][T11320] loop5: detected capacity change from 0 to 7 [ 695.296563][T11320] Dev loop5: unable to read RDB block 7 [ 695.296615][T11320] loop5: unable to read partition table [ 695.296809][T11320] loop5: partition table beyond EOD, truncated [ 695.296842][T11320] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 695.622734][ T990] usbtest 3-1:1.0: couldn't get endpoints, -22 [ 695.622905][ T990] usbtest 3-1:1.0: probe with driver usbtest failed with error -22 [ 695.655149][ T5748] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 695.659173][ T990] usb 3-1: USB disconnect, device number 44 [ 695.806782][ T5748] usb 2-1: Using ep0 maxpacket: 16 [ 695.815460][ T5748] usb 2-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 695.822166][ T5748] usb 2-1: config 127 has an invalid interface number: 124 but max is 0 [ 695.822190][ T5748] usb 2-1: config 127 has no interface number 0 [ 695.822219][ T5748] usb 2-1: config 127 interface 124 has no altsetting 0 [ 695.826979][ T5748] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.827002][ T5748] usb 2-1: Product: syz [ 695.827015][ T5748] usb 2-1: Manufacturer: syz [ 695.827029][ T5748] usb 2-1: SerialNumber: syz [ 695.892067][ T5766] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 695.892199][ T5766] dvb_usb_az6027 6-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 695.933363][ T5766] usb 6-1: USB disconnect, device number 23 [ 696.071082][T11335] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1549'. [ 696.265381][T11330] could not allocate digest TFM handle michael_mic [ 696.367680][ T5766] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 696.425065][ T5713] usb 5-1: new full-speed USB device number 63 using dummy_hcd [ 696.528726][ T5766] usb 6-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 696.535184][ T5766] usb 6-1: config 4 has an invalid interface number: 44 but max is 0 [ 696.535226][ T5766] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 696.535277][ T5766] usb 6-1: config 4 has no interface number 0 [ 696.535342][ T5766] usb 6-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 696.583580][ T5713] usb 5-1: unable to get BOS descriptor or descriptor too short [ 696.584104][ T5713] usb 5-1: not running at top speed; connect to a high speed hub [ 696.584133][ T5713] usb 5-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 696.587803][ T5713] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 696.587825][ T5713] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 696.590628][ T5713] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.590651][ T5713] usb 5-1: Product: syz [ 696.590666][ T5713] usb 5-1: Manufacturer: syz [ 696.590679][ T5713] usb 5-1: SerialNumber: syz [ 696.667839][ T5766] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.667867][ T5766] usb 6-1: Product: syz [ 696.667881][ T5766] usb 6-1: Manufacturer: syz [ 696.667896][ T5766] usb 6-1: SerialNumber: syz [ 696.715065][ T5748] usb 2-1: reset high-speed USB device number 51 using dummy_hcd [ 696.805360][ T25] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 696.955243][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 696.956270][ T25] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 696.957682][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.987925][ T25] pvrusb2: Hardware description: Terratec Grabster AV400 [ 696.987941][ T25] pvrusb2: ********** [ 696.987947][ T25] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 696.987959][ T25] pvrusb2: Important functionality might not be entirely working. [ 696.987968][ T25] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 696.987978][ T25] pvrusb2: ********** [ 697.102283][ T5748] usb 2-1: failed to restore interface 124 altsetting 11 (error=-71) [ 697.119501][ T5766] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 697.128286][ T5748] usb 2-1: USB disconnect, device number 51 [ 697.160840][ T5766] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 697.164089][ T5766] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 697.164188][ T5766] usb 6-1: media controller created [ 697.193187][ T5766] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 697.234700][T11346] loop5: detected capacity change from 0 to 7 [ 697.241930][T11346] loop5: p1 p3 p4 [ 697.241953][T11346] loop5: partition table partially beyond EOD, truncated [ 697.242138][T11346] loop5: p1 size 128 extends beyond EOD, truncated [ 697.269315][T11346] loop5: p3 size 3645588866 extends beyond EOD, truncated [ 697.340288][ T5766] DVB: Unable to find symbol dib7000p_attach() [ 697.340330][ T5766] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 697.408959][T11346] ------------[ cut here ]------------ [ 697.408976][T11346] usb 6-1: BOGUS control dir, pipe 80001880 doesn't match bRequestType c0 [ 697.409026][T11346] WARNING: drivers/usb/core/urb.c:413 at usb_submit_urb+0x1057/0x18b0, CPU#1: syz.2.1553/11346 [ 697.434080][T11346] Modules linked in: [ 697.438187][T11346] CPU: 1 UID: 0 PID: 11346 Comm: syz.2.1553 Not tainted syzkaller #0 PREEMPT(full) [ 697.447887][T11346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 697.458293][T11346] RIP: 0010:usb_submit_urb+0x1100/0x18b0 [ 697.463980][T11346] Code: b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 0f 85 b2 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 18 4c 89 f2 44 89 f9 <67> 48 0f b9 3a 48 bd 00 00 00 00 00 fc ff df e9 ba f2 ff ff 44 89 [ 697.483724][T11346] RSP: 0018:ffffc9000203f958 EFLAGS: 00010246 [ 697.491077][T11346] RAX: 0000000000000000 RBX: ffff888062e17600 RCX: 0000000080001880 [ 697.499578][T11346] RDX: ffff88802ac44020 RSI: ffffffff8cc51f20 RDI: ffffffff9087dfc0 [ 697.507646][T11346] RBP: dffffc0000000000 R08: 00000000000000c0 R09: 0000000000000000 [ 697.515713][T11346] R10: ffffc9000203fa40 R11: fffff52000407f54 R12: 1ffff110064f80ac [ 697.523737][T11346] R13: ffff8880327c0560 R14: ffff88802ac44020 R15: 0000000080001880 [ 697.531845][T11346] FS: 00007f9af29016c0(0000) GS:ffff888124dd2000(0000) knlGS:0000000000000000 [ 697.540880][T11346] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 697.547550][T11346] CR2: 00007fe4d80b0c38 CR3: 0000000024be0000 CR4: 00000000003526f0 [ 697.555645][T11346] Call Trace: [ 697.558962][T11346] [ 697.561943][T11346] usb_start_wait_urb+0x13f/0x5b0 [ 697.567232][T11346] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 697.572852][T11346] usb_control_msg+0x234/0x3e0 [ 697.577729][T11346] dib0700_i2c_xfer+0xbb9/0xf80 [ 697.582647][T11346] __i2c_transfer+0x7bf/0x1fe0 [ 697.587641][T11346] ? rt_mutex_lock_nested+0x167/0x1c0 [ 697.593080][T11346] ? i2c_transfer+0xc7/0x2d0 [ 697.597897][T11346] i2c_transfer+0x1cb/0x2d0 [ 697.602439][T11346] i2cdev_ioctl_rdwr+0x460/0x740 [ 697.607502][T11346] i2cdev_ioctl+0x6a5/0x880 [ 697.612049][T11346] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 697.617187][T11346] ? __fget_files+0x3a2/0x420 [ 697.621913][T11346] ? __fget_files+0x2a/0x420 [ 697.626613][T11346] ? bpf_lsm_file_ioctl+0x9/0x20 [ 697.631619][T11346] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 697.635171][ T5766] rc_core: IR keymap rc-dib0700-rc5 not found [ 697.635205][ T5766] Registered IR keymap rc-empty [ 697.647966][T11346] __se_sys_ioctl+0xfc/0x170 [ 697.652612][T11346] do_syscall_64+0x166/0x520 [ 697.657290][T11346] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.663409][T11346] ? clear_bhb_loop+0x70/0xc0 [ 697.668204][T11346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.674139][T11346] RIP: 0033:0x7f9af199e159 [ 697.678741][T11346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 697.698495][T11346] RSP: 002b:00007f9af2901028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 697.707026][T11346] RAX: ffffffffffffffda RBX: 00007f9af1c25fa0 RCX: 00007f9af199e159 [ 697.715097][T11346] RDX: 00002000000000c0 RSI: 0000000000000707 RDI: 0000000000000006 [ 697.723114][T11346] RBP: 00007f9af1a3503b R08: 0000000000000000 R09: 0000000000000000 [ 697.731419][T11346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 697.739514][T11346] R13: 00007f9af1c26038 R14: 00007f9af1c25fa0 R15: 00007f9af1d4fa48 [ 697.747622][T11346] [ 697.750699][T11346] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 697.757982][T11346] CPU: 1 UID: 0 PID: 11346 Comm: syz.2.1553 Not tainted syzkaller #0 PREEMPT(full) [ 697.767354][T11346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 697.777414][T11346] Call Trace: [ 697.780701][T11346] [ 697.783634][T11346] vpanic+0x56d/0xa60 [ 697.787642][T11346] ? __pfx__printk+0x10/0x10 [ 697.792251][T11346] ? __pfx_vpanic+0x10/0x10 [ 697.796775][T11346] ? is_bpf_text_address+0x292/0x2b0 [ 697.802074][T11346] ? is_bpf_text_address+0x26/0x2b0 [ 697.807303][T11346] panic+0xc5/0xd0 [ 697.811047][T11346] ? __pfx_panic+0x10/0x10 [ 697.815499][T11346] __warn+0x315/0x4c0 [ 697.819496][T11346] ? usb_submit_urb+0x1057/0x18b0 [ 697.824549][T11346] ? usb_submit_urb+0x1057/0x18b0 [ 697.829600][T11346] __report_bug+0x276/0x570 [ 697.834124][T11346] ? usb_submit_urb+0x1057/0x18b0 [ 697.839184][T11346] ? __pfx___report_bug+0x10/0x10 [ 697.844223][T11346] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 697.850070][T11346] ? kasan_save_track+0x4f/0x80 [ 697.854936][T11346] report_bug_entry+0x19b/0x290 [ 697.859887][T11346] ? usb_submit_urb+0x1100/0x18b0 [ 697.864933][T11346] ? usb_submit_urb+0x1105/0x18b0 [ 697.869977][T11346] handle_bug+0xce/0x200 [ 697.874234][T11346] exc_invalid_op+0x1a/0x50 [ 697.878763][T11346] asm_exc_invalid_op+0x1a/0x20 [ 697.883623][T11346] RIP: 0010:usb_submit_urb+0x1100/0x18b0 [ 697.889293][T11346] Code: b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 0f 85 b2 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 18 4c 89 f2 44 89 f9 <67> 48 0f b9 3a 48 bd 00 00 00 00 00 fc ff df e9 ba f2 ff ff 44 89 [ 697.908904][T11346] RSP: 0018:ffffc9000203f958 EFLAGS: 00010246 [ 697.914986][T11346] RAX: 0000000000000000 RBX: ffff888062e17600 RCX: 0000000080001880 [ 697.922962][T11346] RDX: ffff88802ac44020 RSI: ffffffff8cc51f20 RDI: ffffffff9087dfc0 [ 697.930946][T11346] RBP: dffffc0000000000 R08: 00000000000000c0 R09: 0000000000000000 [ 697.938922][T11346] R10: ffffc9000203fa40 R11: fffff52000407f54 R12: 1ffff110064f80ac [ 697.946898][T11346] R13: ffff8880327c0560 R14: ffff88802ac44020 R15: 0000000080001880 [ 697.954891][T11346] ? usb_submit_urb+0x1091/0x18b0 [ 697.959947][T11346] usb_start_wait_urb+0x13f/0x5b0 [ 697.964987][T11346] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 697.970564][T11346] usb_control_msg+0x234/0x3e0 [ 697.975346][T11346] dib0700_i2c_xfer+0xbb9/0xf80 [ 697.980227][T11346] __i2c_transfer+0x7bf/0x1fe0 [ 697.985006][T11346] ? rt_mutex_lock_nested+0x167/0x1c0 [ 697.990392][T11346] ? i2c_transfer+0xc7/0x2d0 [ 697.994993][T11346] i2c_transfer+0x1cb/0x2d0 [ 697.999506][T11346] i2cdev_ioctl_rdwr+0x460/0x740 [ 698.004463][T11346] i2cdev_ioctl+0x6a5/0x880 [ 698.008976][T11346] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 698.014011][T11346] ? __fget_files+0x3a2/0x420 [ 698.018699][T11346] ? __fget_files+0x2a/0x420 [ 698.023315][T11346] ? bpf_lsm_file_ioctl+0x9/0x20 [ 698.028272][T11346] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 698.033312][T11346] __se_sys_ioctl+0xfc/0x170 [ 698.037915][T11346] do_syscall_64+0x166/0x520 [ 698.042516][T11346] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.048588][T11346] ? clear_bhb_loop+0x70/0xc0 [ 698.053286][T11346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.059189][T11346] RIP: 0033:0x7f9af199e159 [ 698.063614][T11346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 698.083229][T11346] RSP: 002b:00007f9af2901028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 698.091678][T11346] RAX: ffffffffffffffda RBX: 00007f9af1c25fa0 RCX: 00007f9af199e159 [ 698.099652][T11346] RDX: 00002000000000c0 RSI: 0000000000000707 RDI: 0000000000000006 [ 698.107634][T11346] RBP: 00007f9af1a3503b R08: 0000000000000000 R09: 0000000000000000 [ 698.115610][T11346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 698.123590][T11346] R13: 00007f9af1c26038 R14: 00007f9af1c25fa0 R15: 00007f9af1d4fa48 [ 698.131585][T11346] [ 698.134860][T11346] Kernel Offset: disabled [ 698.139182][T11346] Rebooting in 86400 seconds..