last executing test programs: 15.057735405s ago: executing program 1 (id=1457): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1f, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000005600000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008520000002000000950000000000000008e1020008000000850000002200000018120000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000ccf6dc4538d51f7948651aec0d0d22282d61900000000000000000018940000", @ANYRES32=0x1, @ANYBLOB="0000000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x1, 0x7b, &(0x7f0000000280)=""/123, 0x0, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0x8, 0x10000}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x98}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{0x1, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x1c) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000580)={r0, r1}, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'geneve0\x00', 0x0}) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0x401c5820, &(0x7f0000001100)={0x0, 0x0, {}, {}, 0xda}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0xf0000000, '\x00', r2, r4, 0x0, 0x0, 0x5}, 0x50) r5 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$sock_timeval(r5, 0x1, 0x48, 0x0, &(0x7f0000000400)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000161000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0xf000, 0x2, 0x2}) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f00000001c0)={0x1ff, 0x38, '\x00', 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000000)) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) r6 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r6, &(0x7f0000000780)="800000800000210ee7decd7a0000", 0xe, 0x40, &(0x7f00000000c0)={0x11, 0x8100, r2, 0x1, 0xda, 0x6, @broadcast}, 0x14) r7 = syz_open_dev$sndpcmc(&(0x7f00000005c0), 0xc2de, 0x121600) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r7, 0xc0fc4110, &(0x7f0000000600)={0x800e, [0x7, 0x6063, 0xa], [{0x8, 0x2, 0x0, 0x0, 0x1}, {0x8, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x8, 0x7887, 0x1, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0xffffffff, 0x23da, 0x1, 0x1}, {0x3bfa, 0x8}, {0x5, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x1dff, 0x8000}, {0x9, 0x6, 0x0, 0x0, 0x0, 0x1}, {0x4, 0x6, 0x1}, {0x7fff, 0x7, 0x1, 0x0, 0x0, 0x1}, {0x3ff, 0x5, 0x1, 0x1, 0x0, 0x1}], 0x951}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r7, 0x4140, 0x0) 12.357450806s ago: executing program 1 (id=1463): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x83, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8800) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x2, 0x1}, 0x200000}}, 0x10) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000001000000fe8000000000000000000000000000bbac1414bb00000000000000000000000000000400100000000200002000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100020000000000000000000000004000"], 0xb8}}, 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(0xffffffffffffffff, 0xc0c85666, &(0x7f00000005c0)={{0x1, @addr=0x1}, "522ec2c4dfdea0e049be106158e4f5aa2e9a2a24b978bb029b829364f1d8fecd", 0x1}) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000240)={0xa, @pix_mp={0xc0000000, 0x0, 0x31364d4e, 0x34565348, 0x7, [{}, {}, {}, {0x0, 0xffffffff}, {0x0, 0xfffffffe}, {0x1}, {}, {0x0, 0x6}], 0x0, 0xfc, 0x7, 0x0, 0x6}}) r6 = dup(r4) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000400)=[@acquire], 0x0, 0x0, 0x0}) r8 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) ioctl$VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000040)={0x47, 0xa, 0x0, "1b0700000000000000fff4dd40073407b95d1faec8f20000000014efff000002", 0x3234564e}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r6, 0x0, 0xffffffdb) 10.324474513s ago: executing program 3 (id=1470): r0 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0x2, 0x0) r5 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) bind$unix(r6, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r7 = syz_open_dev$vivid(&(0x7f0000000200), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r7, 0xc004562f, &(0x7f0000000240)=0x9) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) recvmmsg(r6, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000400)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r8, &(0x7f0000000040)='\x00\x00', 0x2d, 0x0, &(0x7f000005ffe4)={0xa, 0x4e27, 0xfffffffe, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, 0x1c) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$pokeuser(0x6, r9, 0x103, 0x528ec475) open(0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/21, 0x15}, 0x1ff}], 0x4000000000001bf, 0x40000023, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000080)={0x6, 0x42474752, 0x140, 0xf0, 0x0, @discrete={0x3, 0xfffffff9}}) 8.114579868s ago: executing program 2 (id=1475): setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0x8, 0xc5, 0x0, 0x6, 0x9, 0x4, 0x6, 0x1, 0xf8, 0x0, 0x1, 0x0, 0x3, 0x6, 0x6, 0x9, 0x4, 0xfe, '\x00', 0x4, 0x4}) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000480)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x1fff, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) write(r0, &(0x7f0000000140)="8265000000000000", 0x5ac) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r1 = socket$kcm(0x2, 0x3, 0x106) r2 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xfd066dc190494569, 0x5d031, r2, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r3}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r4}, 0x38) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="580000000102030000000000000000000a00000a440002802c000180140003"], 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x20008800) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="fbd2b9ed29d8974a6ce75f08916ac3b4da11bc1a", 0xffeb}], 0x1}, 0x0) 6.979836656s ago: executing program 3 (id=1476): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) getsockname$unix(r0, 0x0, &(0x7f00000000c0)) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$sock_int(r0, 0x1, 0x23, 0x0, 0x0) mremap(&(0x7f00005f4000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r2 = syz_open_dev$evdev(0x0, 0x0, 0x28000) socket$alg(0x26, 0x5, 0x0) add_key(&(0x7f0000000040)='pkcs7_test\x00', 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffe) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000240)={0x15, 0xfffffffffffffec9, 0x0}) syz_emit_ethernet(0x12, &(0x7f00000000c0)={@random="dfa473846208", @random="cc4a363554da", @val={@void, {0x8100, 0x2, 0x1}}, {@generic={0x8906}}}, 0x0) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000880)={0x3, 0x0, 0x0}) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f00000001c0)="c683c320bb386bce45eb641122", 0xd, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) keyctl$update(0x2, r3, 0x0, 0x0) r5 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) r6 = syz_io_uring_setup(0x313f, &(0x7f0000000080)={0x0, 0xfffffffd, 0x10100, 0x3, 0x17b}, &(0x7f0000000180), &(0x7f0000000040)) io_uring_enter(r6, 0x4d10, 0x2, 0x2, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000600)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x3, @loopback, 0x1}, {0xa, 0x0, 0x5, @mcast2}, r7}}, 0x48) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_MASTER={0x8, 0xa, r8}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private1}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 6.760528316s ago: executing program 4 (id=1477): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x2a, 0x2, 0x0) r2 = io_uring_setup(0x3541, &(0x7f0000000140)={0x0, 0xa8a5, 0x0, 0x1, 0x13c}) r3 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x200, 0x1, 0x312, 0x0, r2}, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r3, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x0) 5.450670181s ago: executing program 2 (id=1479): r0 = syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x2182) ioctl$CEC_RECEIVE(r0, 0xc0386106, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) openat$dsp1(0xffffff9c, &(0x7f0000000040), 0x204000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x103002, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @loopback}}) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r8, 0x8918, &(0x7f0000000080)={'ipvlan0\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x37}}}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$BTRFS_IOC_FS_INFO(0xffffffffffffffff, 0x8400941f, &(0x7f00000005c0)) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000009c0)=@newtfilter={0xb8, 0x2c, 0xd27, 0x70bd1f, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x88, 0x2, [@TCA_FLOWER_ACT={0x84, 0x3, [@m_bpf={0x80, 0x1, 0x0, 0x0, {{0x8}, {0x58, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x44, 0x4, [{0x3, 0x7, 0x59, 0x5}, {0x5, 0x34, 0xd, 0x4}, {0x7, 0xcb, 0x4, 0x4}, {0x4, 0x6, 0xd, 0xfff}, {0x7, 0xfb, 0x4, 0xd3f}, {0x8, 0x4e, 0x3, 0x2}, {0x9, 0x75, 0x9, 0x6}, {0x3, 0x40, 0x69}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x4}, @TCA_ACT_BPF_FD={0x8}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x8848}, 0x20000080) ioctl$FBIOPAN_DISPLAY(r3, 0x4606, &(0x7f0000000200)={0x190, 0x30, 0x3c0, 0x280, 0x0, 0xc0e4, 0x18, 0x1, {0x5, 0x8001}, {0x0, 0x7}, {0xb, 0x2000}, {0x29, 0x10001}, 0x1, 0x80, 0x7e, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x6, 0x8, 0xd, 0x7fff, 0x0, 0x0, 0x3, 0x5}) inotify_init1(0x800) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="38000000100039042a", @ANYRES32=0x0, @ANYBLOB="57800000100100001800128008000100736974000c00028005"], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4008840) socket$nl_generic(0x10, 0x3, 0x10) 4.740807019s ago: executing program 3 (id=1481): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x400}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0xad, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000480)=ANY=[@ANYBLOB="180800001200000000000000fbffffff18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0900000000000055090100000000009500000000000000b7020000001200007b2af0ff00000000d609080001000080db9af0ff50000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000015000000760000007b980000000000005608000002000000a500000007000000b70000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.47901629s ago: executing program 3 (id=1483): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x85, 0x0, &(0x7f0000000140)=0x90) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000140)={{0x3, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}, 0x76e0}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r4, &(0x7f0000000000)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {}, {}, @result}], 0x1c) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r5, &(0x7f0000000200)='m', 0x1) ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000400)=0x1, 0xa) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000067c000/0x4000)=nil, &(0x7f0000711000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000e3000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0xc0686611, &(0x7f0000000040)={0x6a, 0x0, 0x100000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) r8 = socket(0x40000000015, 0x5, 0x0) bind$inet(r8, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg(r8, &(0x7f0000000200)={&(0x7f0000000040)=@in={0x2, 0x0, @rand_addr=0x64010100}, 0x80, 0x0, 0x0, &(0x7f0000019580)=[{0x10, 0x114, 0x2}], 0x10}, 0x0) sendto(r6, &(0x7f0000000540)="f6", 0x1, 0xd63a66976f7dfbe0, 0x0, 0x0) close(0x3) 4.468023472s ago: executing program 1 (id=1484): bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) timerfd_create(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="180000001703000000000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) fsopen(0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000000000000000300000784"], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x9}, 0x94) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r2, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond_slave_1\x00'}) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001200b7a325bd7000fddbdf25200f07074a264e22030000002f00000001ffffffc300000006000000000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="de00fbffa611195cc93f034708000000080003"], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r1, &(0x7f00000004c0)="bd3119fab037020de607352a978727cdd46a7ad7671829c16bb1339d3f711b7c5da66f48a8b5842dad66eedf75899eb65d733423ca5651013e1db97f5d192e302ac583ccd19e1e8a3e7812af51f0eea31c5e05cec737cc11a38936d67d4c7cd78351177f515ab5ebe8523e54dd8db33ab6214499c610051df74b67269c9b554b25c70c3238ff9a908675df728ef76e7ae5ee938e025ed07603ec4cc86ee67be10ef6087e7ff0017b358ebee016f08b756cfd2645ccdf335d8b62b630939ba724776a5f2caa487586527f2066268945dfc1b2845e52758b6da2ce07de99165195af70ea9659005901a0f28e90b49a0803ab10698ade4c07337535c2600c45b8c497ab6863ad984815f375df57e5940e5322d90d66c84937e9b7f2356a6e16a026b2393670d370759a4567a87fd2a4d0d5857b9e25607002e658fab060deb46d59a5a0a857b845f0e1495e8d9b574b0f4d1a55ec8d93c148a50c5c4228c653be69a7d728fa4983e129ec4e7b821ce041be389d37efd40b81a9704e5182b9cdca1f2d3312351e9edaa8ac96088c465a953e0ec3e8f26aa17ea3e1913b4d147141d1aef80b3ed959d14fad4ead4de92e10f0faca7acdce7c712ab95a11ff4c72798965f0794d7bc50f5082b52b34a1de7c5609631e1fcc05fc7dbd73973b5dfc92896f57f5b76fd9df5067eb273f0960560df3dfd00ba068e28812244f700d76da4197bb332245f00112b73659c63dfb054eb8eed1a9881e5c49399b2c6932b540d3464d470cabb65a62fe8119c6543923bb11bfd61db06f5455d202681199fc176e67c4714335e8f479725ab5ad1037a9", 0xffffffffffffff71, 0x400bfeb, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 4.202070574s ago: executing program 4 (id=1485): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) read$FUSE(r2, &(0x7f0000003000)={0x2020}, 0x2020) recvfrom$inet(r2, &(0x7f0000000000)=""/56, 0x38, 0x2, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000005c0)="9e", 0x1}], 0x1}}], 0x1, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)={0x40, r3, 0x1, 0x70bd2d, 0x25dffbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x93}, @NL80211_ATTR_MESH_SETUP={0x1c, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x30048011}, 0x20048006) 3.438815484s ago: executing program 3 (id=1486): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f000905", @ANYRES32], 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) (async) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000026c0)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x8}, 0x1c, 0x0}}], 0x1, 0x20000080) socket(0x1d, 0x2, 0x6) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x0, 0x80, 0x0, 0x4000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x702, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) (async) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newtfilter={0x60, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x30, 0x2, [@TCA_FLOW_EMATCHES={0x2c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x3, 0x3, 0xe735}, {0x1, 0xf, 0x7, 0xea1}}}]}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000014}, 0x200e4040) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newtfilter={0x60, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x30, 0x2, [@TCA_FLOW_EMATCHES={0x2c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x3, 0x3, 0xe735}, {0x1, 0xf, 0x7, 0xea1}}}]}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000014}, 0x200e4040) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) (async) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x30a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close_range(r1, r1, 0x2) (async) close_range(r1, r1, 0x2) r9 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) (async) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r9, 0x47f6, 0x0, 0x2, 0x0, 0x300) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r12 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r12, 0x501c4814, &(0x7f00000000c0)={0x2}) (async) ioctl$HIDIOCGUSAGE(r12, 0x501c4814, &(0x7f00000000c0)={0x2}) 3.358465217s ago: executing program 1 (id=1487): r0 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000080)={0x6, 0x42474752, 0x140, 0xf0, 0x0, @discrete={0x3, 0xfffffff9}}) 3.178995508s ago: executing program 1 (id=1488): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x200, 0x8) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000013c0)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a0000004cd5ab4d2dcf68cc118c23d214ed57655c249a00040000000000005acba8383e129ddb181a40510aa7ee2288816061dec50e0558fcdbec6ff312592455829aa3b3ab5bb75572d49954672d8fc768", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd7000043500000a00010020000000480003006465666c61746500"/236], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x4, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) close(0x3) prctl$PR_SET_KEEPCAPS(0x8, 0xffffffee) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8fe00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x2, 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0xaee2, 0x0, 0x5, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r3, 0x0, &(0x7f0000000040)='./file0\x00', 0x50, 0x183000, 0x12345}) openat$audio1(0xffffff9c, &(0x7f0000000040), 0x20040, 0x0) io_uring_enter(r3, 0x47f6, 0x40, 0x2, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f2, &(0x7f0000003680)={'ip6tnl0\x00', &(0x7f0000003600)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty, 0x7800, 0x0, 0x0, 0xffffffff}}) prctl$PR_SET_KEEPCAPS(0x8, 0x1) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000140)="4ba72c4cfd81685544e46c3f08004bdad4e6e35db8499c2107a7a0417a956a41cb42", 0x22}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) 3.02287608s ago: executing program 4 (id=1489): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async, rerun: 32) r0 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) (rerun: 32) ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0x40044103, &(0x7f0000000080)) (async, rerun: 32) r1 = socket$inet6(0x10, 0x80808, 0xfffffffc) (async, rerun: 32) r2 = socket(0x1, 0x1, 0x0) ioctl$SIOCGETSGCNT(r2, 0x89a0, &(0x7f0000000200)={@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}}) (async) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cmdline\x00') (async) mmap(&(0x7f0000eeb000/0x3000)=nil, 0x3000, 0x5, 0x2010, r2, 0x95500000) (async) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r6 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) splice(r1, 0x0, r6, 0x0, 0x5, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') fchdir(r7) (async) r8 = inotify_init() inotify_add_watch(r8, &(0x7f0000000180)='./file0/file0\x00', 0x81000066) write$eventfd(r5, &(0x7f0000000240), 0xffffff14) getsockopt$inet_mptcp_buf(r4, 0x11c, 0x2, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000340)=0x4000, 0x4) read$char_usb(r3, &(0x7f00000013c0)=""/4113, 0x1011) (async, rerun: 32) r9 = socket$kcm(0x10, 0x2, 0x4) (rerun: 32) sendmsg$kcm(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)="89000000120081ae08060cdc030000007f03e3e7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00121000a6400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x90) (async, rerun: 64) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 64) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r10, 0x84, 0x6b, &(0x7f0000000a80)=[@in6={0xa, 0x4e21, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x401}], 0x1c) (async, rerun: 32) getsockopt$sock_buf(r10, 0x1, 0x1c, 0x0, &(0x7f00000000c0)=0x1200) (async, rerun: 32) clock_gettime(0x0, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000100)) 3.00731127s ago: executing program 2 (id=1490): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_QBUF(r2, 0xc058565d, &(0x7f00000002c0)=@multiplanar_mmap={0x7, 0x5, 0x4, 0x289bd4a939f3150a, 0x5, {0x0, 0xea60}, {0x2, 0x8, 0x2e, 0xd, 0x6, 0x2, "51dddb69"}, 0x3, 0x1, {0x0}}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x44}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x48, r3, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x42}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 2.6947773s ago: executing program 2 (id=1492): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000003c0)=0x800001, 0x4) bind$inet6(r0, 0x0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000340), 0x14c, 0x28041) ppoll(&(0x7f00000003c0)=[{r1, 0x2400}], 0x1, &(0x7f0000000440), 0x0, 0x0) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000700)={@local, @random="de9ea3f675c1", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x1, @remote, @mcast2, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x18}}}}}}}, 0x0) 2.690779965s ago: executing program 4 (id=1493): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_usb_connect(0x0, 0x51, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000025697086708129808460102030109023f00010000c0000904"], 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000840)={0x1, 0x0, @pic={0x2a, 0xc0, 0x7, 0x7, 0x7f, 0x0, 0xf, 0x9, 0x2, 0x41, 0x3, 0x7, 0x90, 0x5, 0xb, 0x7f}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x8af, 0xd, 0x4, 0x6d, 0x2, 0x1002, 0xef, 0x200, 0x7fffffffffffb, 0x8d, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x5, 0x3, 0xbde], 0x1000, 0x67a64fa265d09613}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.646116472s ago: executing program 0 (id=1494): socket(0x2, 0x3, 0x100000001) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller0\x00', @remote}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x789d2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0x1, 0x4, 0x9, 0x4cca}, {0x6, 0x1, 0x5, 0x10, 0x7, 0x312}, 0x3, 0x10, 0xd1d}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xa89d84ea6e694e0f}, @TCA_TBF_BURST={0x8, 0x6, 0xb1a}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffe6, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x1, 0x0, 0x200, 0xfdffffff, 0x9}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c031}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.582242616s ago: executing program 2 (id=1495): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x83, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8800) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x2, 0x1}, 0x200000}}, 0x10) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000001000000fe8000000000000000000000000000bbac1414bb00000000000000000000000000000400100000000200002000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100020000000000000000000000004000"], 0xb8}}, 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(0xffffffffffffffff, 0xc0c85666, &(0x7f00000005c0)={{0x1, @addr=0x1}, "522ec2c4dfdea0e049be106158e4f5aa2e9a2a24b978bb029b829364f1d8fecd", 0x1}) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000240)={0xa, @pix_mp={0xc0000000, 0x0, 0x31364d4e, 0x34565348, 0x7, [{}, {}, {}, {0x0, 0xffffffff}, {0x0, 0xfffffffe}, {0x1}, {}, {0x0, 0x6}], 0x0, 0xfc, 0x7, 0x0, 0x6}}) r6 = dup(r4) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000400)=[@acquire], 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, &(0x7f0000000400)=ANY=[@ANYBLOB="1b1b"]) ioctl$VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000040)={0x47, 0xa, 0x0, "1b0700000000000000fff4dd40073407b95d1faec8f20000000014efff000002", 0x3234564e}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r6, 0x0, 0xffffffdb) 2.090761134s ago: executing program 0 (id=1496): r0 = mq_open(&(0x7f0000000000)='e_1\x00', 0x8c2, 0xb3, &(0x7f0000000080)={0x8000000040000000, 0x4, 0x4, 0x9}) mq_timedsend(r0, 0x0, 0x0, 0x5, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000540)={0x40000000}) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f0000000080)=0x2) mq_timedreceive(r0, &(0x7f0000000580)=""/169, 0xa9, 0x200001000a9b, 0x0) 1.802827367s ago: executing program 0 (id=1497): userfaultfd(0x80801) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{&(0x7f0000000140)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_retopts={{0x10, 0x0, 0x7, {[@ra={0x94, 0x4}]}}}], 0x10}}], 0x1, 0x44008004) write$binfmt_misc(r0, &(0x7f0000000300), 0xfdef) 1.404009241s ago: executing program 0 (id=1498): ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, &(0x7f0000000080)={0x6, 0x42474752, 0x140, 0xf0, 0x0, @discrete={0x3, 0xfffffff9}}) 1.074581771s ago: executing program 0 (id=1499): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="e8c10f0fd59c1bd8fa55932b69c2152cd8afef35d2698d53fead111e84b9886bbfe1136a346e20750dd5b1d679507fe8c34b7512d36a863588573d3dc70c88f119f75f44c766d24efaba3f2faaa8c34c5e63805d9f57e7f2482f1f279f5a57de1a5d4928f63207ca55fa1dc6f613463cf2a4d5b578d8a4e378dded9712859f23f8c969f6bad0eb26673b2fe8883d774151e6741e97abdf", 0x97}, {&(0x7f0000000000)="e76f3bc40cbc6493cb8a88252c16bdb106fb1a4fdbbd8fcd611ded2564c8fa6074517f34fad72e2a24b7138958d9d12382a4e1954ada33402fb015d82ea7815997e1a2d7bf7bdef5cd7a68decf2b88450d4287f93570ce11885f08", 0x5b}, {&(0x7f0000000340)="1af05205f2be5c410f81b6abd45613b98bc0d020b95cf9935d6c4b389d92aa698cc408c8786b2e788092162310c97b98e7a62cc7eabe80457e49fed688695e1644a43ec5a95a743f5bf1170a6512f301382b72a8da5255b2c5c7554eb2db168a04f9eb3f1ab8da6d327448cb6c938981789378ef3170cd2bcd2704e22883ea301986b9056950c3833d9bdde9e593210d2f11806aeec76ea8755eb4296dea7345c2ed58fe53593ad5675835d47106dcb3222ba974c7256f4b7966ceb7", 0xbc}, {&(0x7f0000000400)="73054c8fa6be87f68ae925923a7797a155b6f809752cd569e5758544ad521bf5ec4caea9d10e19960c78da1c3900958cc87f32bce7bbecceb4dfd5f52c9bd5f4f301298d3828b343513a573eef127663afaeaf16751dfd0496716b36fc409329d9ca1b79bd4872e81386ca44cc15903d5a22fdf4898f410eda506f1d690c1bcd2d527a81ef873bc882c1526233da215096c47a", 0x93}, {&(0x7f0000000280)="61c7318eea6b10e9216a91e51d4e6b4c54", 0x11}, {&(0x7f00000004c0)="d4d62beacdb311e0972454012fe5b31c21a91b35f9e6872e89b2fda9b9db8c0ce091385049f8f706cb5c3255e83886cfb3aeb1536cc9aa646d4f487777b8879fd5a37b8f40396eff021d02a617a59938e8b6d42c58f824e3425349cf1e038aa9c38fc5ea4284e96e221385b905c4e82ebfdb0b12", 0x74}, {&(0x7f00000002c0)="32a38f1bfacbf862aedf7cff7d3e425c277c96320e865be8f3", 0x19}], 0x7}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000780)="1a039aa96144fad3c37aa94a9e1965652ccaf419a2238dbdd082c19608286dffba597a058d3023b4729a1e7bc238cdcf7d8502cc50285b9c2e69ed96ecf36fd5e17ed5d04ad86ea65ca6730bf55a41d021d47cf6f51848dc84f6c0c136334ab92429075e0adb9d06dd81058f3f203ca914f226e2c613d669d1c4e774dde26ef524", 0x81}, {&(0x7f0000000840)="b9840d8d3634a722af78c347ba744d6686209228ad3548796b67359f6befc6921c50b6175c27f9f32f78e53f88f083e528b33a78ad72b59ac94cc58f3911577294ea9e19599cf211074dd1e817c9a73217", 0x51}], 0x2}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000e00)="62dd61bf3e58a4d1c1150120eb317c4443b8de5c5fb44d3381ca8e796e96db62b83f6c3cc1cb9ef6fc4e753a0b0ff6", 0x2f}, {&(0x7f0000000e40)="12583f12deeb62d501cec87db95bc0ffc2cee2560fabcc01f4f5661a59c99f2ba0ee4849f88622285ce9b13354a0efe943a0cbcc8491c94e43fd1c7c71079f192fad1751c7bde6a41992a2cf614c3099f6510444b21ad54a50a468fc8d4a2bae7650829f41b9a2571026c998ea24e316fb792dcb7e159834efbec6ca6fe68826963afe0991ebb90acbb700087a", 0x8d}], 0x2}}, {{0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000f80)="36d0e54a3c83cd5a141d33c3cd0c373ed4e966bfdb92249816337e9602eb3a61c281f864456aff00f3c5925643cdaaf3ca6f0c62d015c16861f86551ef403cf40a7520be5aac17b2beb1b2e0dc49bf95166fbb432a665d34868dac70812cdb7c24328118e4104137fb64f2935321ff0d81d7d972e7a79c079f225c8981fd48dabb3702f172840a0aaaf107566930", 0x8e}, {&(0x7f0000001040)="4f67857ac7707e915e00047bd1c4a276a26a6d15e76ca8062dee193bcfa526ec8ffee3af3957fc297279d2e70e7e392d8e9c743570b70d2864786d51f2270e", 0x3f}, {&(0x7f0000001080)="9676822591d232b46ee195b66ca39ac6f07ae3d861f15f0d88", 0x19}, {&(0x7f00000010c0)="b0c8cb68dc471301228f1620acdf3848f856144b0a4f06877ccbd79a548897293f870ea7027fa17a544b4fcbfc6d85aebe5399a100a0e8af385c579c6b21ba55524d1b9fb1585f5f54e5731d94fd3a6e72c1cd31cb7856fdf48e37c302643ea6ad1e6bb94eab3903422aa93296da4f9ec23c70aba93f655fa5119a897ef3519ced79d40fc75207834ec0c385ac4f81277c9b46268f9b66fe4c52ce1d41197415d5e694f76e71cb835435aaaad1db5890653d927d70acb49b683f341c758a3024fce0361e", 0xc4}, {&(0x7f00000011c0)="4a58869e", 0x4}], 0x5}}, {{0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f00000014c0)="1ecba7eb387e65d6b95d2b1780a3150d36aefabd7f6999ef3e52251c3e28a10a23dafb094225819f20d8f58dc3421ad991c3b984845347e6e932dad1941bad8a8c0868c1888e6a582cea871eab0b0397029f008025a5537afa6f9a18b9a71c85f25724da61a0469fed8c2f0e34f073e2a8acca49d177473fbb0959e63ebaa01a4fb3ae82c8b999e72fe938a4c4421f12dcd3ec766885e8207f3973d8a480f1a78b8e327ef6ac5d79f17ec6eb48dc4d7207c35e98d9f9d90cb1ca54abbbe4e6118771065c3d2eab64d6affa1644c5095f77b399aa8da9e43257f0c95044bef1c82b69e30de9089c62b36a9b5f8d8776a55a1453f5a33b05d9d4d39300957b91d50e50f4d17e370db51805828b40fb25761f352a0657382277642d0ace4808de7a0bac878aee0bd4c7a29ec09755925af3129aee4e230b9f7b1412c39d36bae776a8f10871a490d59d4f087de024e6363507ce0d504d10a90547d3bf80f452e20c7f2495eb25c347b927439ffb67bc47a8c038149c0c7f99a2f93429e38da683ea495f13dc77444ba433f8a60621fdc2534d66916a11c7551d30bc17d4fba7a856d329db1c40b35b5bda61d48baa2528f046c724fa6849d524cff326cc85cb6eb588aba400ccff337cbb4ebc8aa3adc6ae0ad1a354994711b668a90b9d6e14e7311c294c1be395bd25f7cc2889aef7131720d847374833e30222eadf1e9be612cbdc91ae20aa3a7e6b93fcd206d6bbdf360699d53299edfe8a266df0a89175937243ff9c556031bd7547463a57721977ca16667bfc8640519448a219cfbae746eb9aff8520353b0e88e84ad2e01157078ac70688102a28dbfea2d693823522725401afb945ceb2e7636372ea4023096018ba7ae11555bfb2860b4d5fde2409c66b83bc4257c28e1fba7aeec2ec26a78015ad03e49830be2a34d60dc93a21ce884e5bb52819f87c208108b7dac2e0fe3eaaf6d4a900c1942e56cb75798e33c6aa1b486aa2869baee9c3b1fe015abcf8ae176253f57677133fef851434fb4443c81661b9546b0e332f40a0a14ed0df8e27c40408a0b5a1cbb53c5e6aa5cc09a09f9fa653563de4a5add480e8d528fae859198f3b2a871a84462f36e8a88eeabccc66a80df513614551d4392084356d9ad40a25dda929ff4564156511967f1663e1a233fa74640523a205fee301a656308da000eef5285b3a15e35b7c4b685ba32d15dabcd7074838def3032461d37d5b9992892bb5117ef12a4c906d40334802836bc54205d0202a865424cce4b5707efcd806720a6563610a33cd3e8cf9a60e1e2806b5748829065c7a3c54eeed2157048f1c6905752aa2826755c838ce15c30bbecf8cc0cfc3094d55996a71e14a7b6f6b535d07ae053551e2f7dae28e0140e3f776762f6cbac3b872e72b1a56f90797167df3236633635060fdb776497787e5fbede024e068fd27909d32f64ff13290e566cb4dbf87b9ca7cc8a6b45bf3689ee1c5343bf6864d00017df3724b3bb16ad7384b628f5b72fbba7e45bdf24a55ccf13371f98dbfbc6a5be28e9b45762a7a027b7b31bc97e825c4efdd019d8c69fc6932af0fa063d9a6a8df2e8221233bd934afb0ef71f447c20461f4cdf24911cddd91268116423b677292cac5b34cc0cc9ad2403f8b1172becef63d9b9e9cb76a97d88c9240a171eaf27e9f1e9d50ad98e62e8fc69fb10404ff50d0d6230f93ab053fd6afd4281105e5d940085cd876dbc638b1a1158e768f59a3f94895ea11e7f22895b5c93d25efccd0bac70836815590fa5a0e602be5f78e80b0663c258156f2cba50d1ce353e55918d77a5748b632dbcf97e1e6759753f20517c02a159c4dd9500951e96e717c7c7ac9017154a27f0034baaab209c63d8616b2eeb78f03c7cc908db670c28ab39c5ccc159d81721ad1f9d3279a5975f9c8c6875aa4e516c92155d2b8166244bda5adc506fb86e5828ca45c362924aa09dc9188bc6cddf0a28142a5c351b6451cfc25e52a3b8d1d1cf2ba3b50815ba751cd842949db162e63009546a444afb378bcb1f8e3f2cf29586b85cdb4ed7ab655456eca0779417ec373a206960fd78ff80823b1a3547ea8263531f5e72dc6525d96531a73515f5ce2a0083e81c24015cab42688aeb914e7e9ed6433fb182b4759bc0a5cb36d1655aa5b456ee33766885f34e26e9d87932a11725bd11b37be65bb3a2150a6901a547501679067a4efc3eded5d76f80ba58507a13657b8571ebf5374575d5803b23799f67663276575c13824b13008e8bf261944bfb4f4e9d313eab054d2168d24666e07b11db49097800696fbbcd74cd776fc2feca39140cf2dc1854c6221fa6424c648c0e053bd7625ab87cf04d3f71d48c8dbcda4351ec3b2009a41e3d875905a0e5064b3c9103dc502335b1f6ec0059130de7bc6033c2dd578689ab395705bcc928a1a946e18c7205f3573f0eb2bb51ab3722492788a5699945afdf1a4ec664c85b85cb30b2a692dc5f06118cdbf122cf6b4e148ca9234fee4c1f1c1264a717e7ec279f6739d8a1539d75c28fa041aaf3bd9eb0c0e953c6b87af04b991ad1b3f3051490ba64448c44b947a2aad7e06f51aaeb309a5f61b7f1c90e6a60ce31c8d773037ec21f57c0d8c242e1e658e8507c7945084c3524a6d50b8d5176c2e691518e5eaccd0d73db86d0288ce2a5e4457413e9e92042927eb730caebbe7ede8254f4c383d8cffb14caa3c4f4ed4759ce424fa036b925c83b4abc139bebc63fbe51459688314f8a8774e5c66578059e7aa2b08248b4e2385368dc9bbb6c454d6ceb286b134dd6680ea7a262da0af1b56dd5837e750bd92c2d0fdf0bd305dc91c579cf518e7e32ed07296b93f282c320a823e40f4ac3466d1bafa491aaaf3e4ee752c8bfb858c7946acba95b9d5b3f674c9ea03902ee4ee53df5ba8a264a23b82de23dedf811be5243574ab61a80d10564175614631386d96a65a9eafed7c0cdae89623ec34cbe50be5334218956020ca067bdc6333044c3cd5ca9681e28b7ce42f630d0334bc2adbaaa13327739f00587b8874b706048f3df8f38f532e5f44b3b958a9ce0537f3ed14d8d183a7c78d72f0c686a3f095aabf05c10199a75186ad36da9b5e2ad0081ebcd95cf242a67b89152ad40d5d6de80b9328a22f7ce4a5bf55b2dc26d81be6a38ccd898692029bcad2fe9f294274ac934170c7894f9b13401c2619173a0e34b76e57cdf491287a11e43269994d05a7e0d00cd79c179dbd8c19d2a3f4bdbc722cd4ee5668896bf8751f54a852ffc1b94ebf1555494e450fc207540497fe47ab0eb214cf998d8f575636514770570b717fb98f719c0694735cdbfad115525ba19b5c96bcb67dad8e38d19d786bb6c600e4efa724043fe0d19f48c8f5d2d6d08e6276ad26bf7ce6a62c1f094e1911c9f895625aa5ecb821ba3f88ccd1805e4a4c53888d6db900ad663acd670bb374fb527209a5bf778f8ae31ae920fe72c5e611b84b29ef1fff36d78d74ca2b20227d1a766f75ae745e701090a2fb15a1de35aba17995b17159db28fc0194516e2a0243d117987b456d7febc01a1f36ddb54226f93d", 0x9e6}, {0x0}], 0x2}}], 0x5, 0x4008000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x800, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111}}, 0x20) syz_emit_ethernet(0x24f, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = open(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x157) r6 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x0) ioctl$CEC_S_MODE(r6, 0x40046109, &(0x7f0000000100)=0x21) r7 = syz_open_dev$cec(0x0, 0x0, 0x0) ioctl$CEC_S_MODE(r7, 0x40046109, &(0x7f00000000c0)=0x32) ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f0000000280)={"54ec36e6", 0x3, 0x6, 0x6, 0x10001, 0x3, "785144b84ef7ebe60630484ac7b0c8", "391f49c1", "cd5ca376", "b4538793", ["1a99d11773947bbc54a7e33f", "7d2dd431950208ccfab8907c", "113bd782b5dd4faa927d715f", "6e36525b23ac564cef69ea62"]}) r8 = syz_open_dev$video4linux(&(0x7f0000000740), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r8, 0xc0585604, &(0x7f00000001c0)={0x0, 0x1000000, {0x28, 0x64, 0x2025, 0x5, 0x1, 0x0, 0x1, 0x4}}) r9 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, 0x0, 0x0) bind$inet6(r9, &(0x7f0000000040)={0xa, 0x4e23, 0xffff, @mcast1, 0x9}, 0x1c) syz_clone3(&(0x7f0000000340)={0x3a0000080, 0x0, 0x0, 0x0, {0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58) 1.016382246s ago: executing program 3 (id=1500): r0 = socket$nl_route(0x10, 0x3, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x81c0, 0x0) execve(&(0x7f0000000140)='./file2\x00', &(0x7f0000000300)={[&(0x7f0000000180)='&\x00', &(0x7f00000001c0)='&\x00']}, &(0x7f0000000480)={[&(0x7f0000000380)='gre0\x00']}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$can_raw(r4, &(0x7f0000000440)={&(0x7f0000000000)={0x1d, r5}, 0x10, &(0x7f00000005c0)={&(0x7f0000000b00)=@canfd={{0x0, 0x1, 0x0, 0x1}, 0x12, 0x6, 0x0, 0x0, "41aa852ed0ee53ae210696985995de3bb842da1d072d09fc23839199cfdd79ce5b8fd9f8c96b59f6550648cb7ddc3acb99961b8c5a1f2624e07c9ff92be5eff9"}, 0x48}, 0x1, 0x0, 0x0, 0x48004}, 0x80) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12014000f273a440cd061501c3d90102030109021b0001000000000904000c019d0178000905", @ANYBLOB="872f", @ANYRESHEX], 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1438a}, [@IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000884}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, r1, 0x8013, 0x1d36b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8, 0xb, r1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4008080) 520.325063ms ago: executing program 4 (id=1501): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x400000, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2, 0xfffa, 0x7, 0x8, 0x8}, {0x6, 0x1, 0xd, 0x6, 0x6, 0xfb8e001}, 0x6, 0x4, 0x111e}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000011}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x2}, {0x0, 0xb}, {0xd, 0x7}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}}, 0x4008004) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0xf9ffff00, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, 0x0}, 0x108) 269.673482ms ago: executing program 1 (id=1502): r0 = socket$inet6(0xa, 0x3, 0x8) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_mr_cache\x00') lseek(r1, 0x67, 0x0) setsockopt$inet6_int(r0, 0x29, 0x43, 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) r3 = syz_io_uring_setup(0x312d, &(0x7f0000000200)={0x0, 0x8008663, 0x400, 0x3}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002840)=ANY=[@ANYBLOB="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"/2745], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) io_uring_enter(r3, 0x48e9, 0x0, 0x2, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r1, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x24101000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000005}, 0x20000000) sendto$inet(r2, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) syz_emit_ethernet(0x56, &(0x7f0000000cc0)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x1, 0x6, "174668", 0x20, 0x0, 0xfe, @local, @remote, {[@hopopts={0x89, 0x3, '\x00', [@hao={0xc9, 0x10, @remote}, @generic={0x7e, 0x4, "cad44c02"}]}]}}}}}, 0x0) r6 = socket$kcm(0x29, 0x5, 0x0) r7 = socket$kcm(0x29, 0x2, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000001500)={'wlan0\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_KEY(r10, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001540)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002bbd7000f9dbdf250a00000008000300", @ANYRES32=r9], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x20044000) sendmsg$kcm(r6, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="f83c108ea1a0127aa1ecc88d98987e4647d8ec6d1f84119ba1443b9797e8ba48050a187245195a786e255fcc6a76626c5b2ddf6710d16afb3f4a78e80561f887b285d2127bc352fbd0416787e49c596b13a75d85305860eef5bcb334416d11bf4c8efd7b95155d2885afe5c8a27ad650c885345fbc8688bca5bcdd9c72a0cb6fb3ffb86c9ecb91f1543f874895754740cb2d", 0x92}, {&(0x7f0000000280)="0df959594950b96d032a1dc375ea5e1e3b24e86879b3d8eafcfabc606ce46f9f07e3cab3c39e092d57ff28ee14f1fb8e44b26b57597142278dab38b5325383b05e631acd9ce27f630ab15c508c1531abe42501eaba68c1eb820dcb38b1d1ed574289e86edc8c780756eaafe9a090f880f68307d35329e4b495", 0x79}, {&(0x7f0000000300)="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", 0x1000}], 0x3, &(0x7f0000003300)=[{0x20, 0x110, 0x97, "caef609af2efba100e44ad8db65ad74ca0"}, {0x100c, 0x10f, 0x9, "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"}], 0x102c}, 0x0) ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0x4170) 86.637745ms ago: executing program 0 (id=1503): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000500)=@gcm_128={{0x304}, "e8ffff0700", "8e083700daf38a6d69e9b5e9eebe75c5", "6a3a05b9", "12772541f8eb02bb"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0x20000000002) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000022400010000000045a38bd4258f2b49c1d852376729000904000001030000000921000000012202000905810300"/69], 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x9, 0x1, 0xc2}, &(0x7f00000007c0)=0x0, &(0x7f0000000200)) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000040)="11da3cf44b1a8c3d8a39ccbd630e8ef9170ccf07ef180032", 0x18) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001940)={0x0}}, 0x0) close(0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) r8 = socket(0x10, 0x2, 0x0) write(r8, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r8, &(0x7f0000002ec0), 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 32.74164ms ago: executing program 4 (id=1504): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x9, r2}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000004c40)={@ipv4={'\x00', '\xff\xff', @multicast2}, r2}, 0x14) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}, 0x6}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=1505): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000003c0)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r1 = syz_open_dev$usbmon(0x0, 0x14c, 0x28041) ppoll(&(0x7f00000003c0)=[{r1, 0x2400}], 0x1, &(0x7f0000000440), 0x0, 0x0) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000700)={@local, @random="de9ea3f675c1", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x1, @remote, @mcast2, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x18}}}}}}}, 0x0) kernel console output (not intermixed with test programs): Z)µК'šPUL‚_<à ¢Ø°‰Ò®ÔÅ`Ò±TÔÁޜÐËÞ;_Ô"(‘U{7Jœ¿2X ‘/€'ÝÙCÑÌÕIº©ÀÏH¿CÕ³žVŠ=‘AIÇ%WŒESž RšŸJŠÎœƒÚ”GÂ÷RÁ¹Í¡HI˜¢œAÏÌ6-ÚDÚVšÁ I"ØÅNÆš ÞÚASC~4Áª¹8CØ*­OO5/ߜJš~º§¡W—VK+¬®‰Œ3ÈÇY)Ž¹M°žÆV¶ÌYQÆœ€DTR¯OTPEM%F×ÊEJÍA5ÆÔT_-X~ ^AAۂҘœQÖÅ [ 372.616204][ T7711] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 372.717694][ T9767] fuse: Bad value for 'fd' [ 372.776336][ T7711] usb 1-1: Using ep0 maxpacket: 16 [ 372.807990][ T7711] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 372.843471][ T9761] [U] +W‰G?]£Ó'A: »Ú)ÕÏÓ™“' B>T¢ ¡F/™÷<'ÈUÓ'–ŒH§IÉ.+]EŸ.œ-É¿ß¿Ò%÷È>2`¶^Uß8F.Š6€Å3ÓØ+ËAŸÂ««„°G3ÓPÂÓ6:^0ÀTÉÈV÷'EÕTŒ€ÛÂYC‰NŸÞRÏ©ÞNÈPJ× ;ÆZ†ÊÔÑۑ8!¯È\مžAØʖ2Á£$е™Â­WI.ÍÇ#ŠÈ/BAIŒÄ`ÐÁ4J’ÔDÎY@ÓZ„ÜGW÷5Ë¿BÄ µÙœ NÓY"VI2ÛÌ [ 372.866311][ T7711] usb 1-1: config 0 has no interfaces? [ 372.889815][ T7711] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 372.898283][ T9771] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1177'. [ 372.913621][ T9761] [U] ÔTŠ_K5žT¬YJÐÞÎ9ÐÕCÊ$BRŸLÚNUL ¶Ü9WÈÝÍ|žGÅ"ʃÆ%ÇÚ¶ÊCªØ°¶ºQÎÙ ŸÇ3‹ÆQ¯ÔN^HP*œÜ$ µ.Î7YÓ±œ2³ [ 372.986252][ T7711] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.997966][ T7711] usb 1-1: config 0 descriptor?? [ 373.020844][ T9761] [U] œ?©ß HÜÄ*ÙÁ”Î3͝7ÜɍŸ^#Q"0~‡ ‚Ð(ÉOÏX LŒB£,'VÎÓ=‹ÝËCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷Ο™÷P#Ò2DO*Ƀ [ 373.107143][ T9761] [U] ©S¹“Gžµ²¶“˜GUÐÔD-{ž™Â|&“®ŸŸÑ2µ›LÞC_©œ!`šÍOZÖ¥¢B¶³%>ÊRѶÖWχݎSSÂH"£YA4£O.šYÙÛď„RTÔ¶ŒBÚ[+/<>—¡{Q¢Ú×_²ÕLX8ÊU„ÇØÎ{ÐZ³Íؐ)ßÒ7?ËRR;ßC¿R HײڣÁ»šÈ1Å>)©Mă‰ÏT§²Ú(ÌÇAϝ„}9·Ú¥ÃJ*Mќ¥Ä¡«'L¹£Q ÌDWŸÒØž=Øœ|Q¬ ÏƙW;5ÆÙÅœª!ÑDBžX`ɧÖ/÷ÂE`ÆŠM¢XÎÂ"Ä\ [ 373.465824][ T9761] [U] {;Ž Õ¥Â٘_ˆO2«Ñ)ÎO®›.2ÐW2ʲšÐYÙÃÃX_ HPϱœSªD­ŠØ:]‚{Ë©ÔÝÆÈœ [ 373.494618][ T9761] [U] I,Ç>ÇÓ€ ÎÙ51Ñ÷^1ÒN4¯OǶÞ'0Ý?֒IÙ9W.Ï_.¶WŠAŒŠVˆ±`)ÑZ¬ÏÆC6GIÓ¹²A»¬XL[¢›œ¡FÜ*ÀÑO‰W)+‡Ç'\NÆ[K@ÑËÄÜ2ÇǬ–®¡P"^`Á‰Í Ø¿ [ 373.514554][ T9761] [U] 22œ“Æ©ÐÛ©X?0;3U± [ 373.599419][ T9761] [U] ޜÕƍÓSOBX 8”Wˆ4Á‘(Ð~/§¿ÍKÇUžÃԖOQËE+·G®-YµGY_•>V¢ÜÈË—3.HÁә]̈́²2‘”)™DË, ‘Ä ÞD~×D©£¡+ÃW; A\˜FPÉÞȘ|$ºØ)KؐI³ÉÐÉ¿KÑYT^RÍÜÙǙµ“ËA=±#–Üœ ÝÍ¿ËAE©TÅ1·Îݯ4K¯.E"RÚS|ПÀSÖ’Á:•Ù>P ™…RÐ"Z‰Ú­ÛÚÉ#P!˜KY"›}ÃÆF¿N84ܳƒÅHÞ±£O•ÈS¿™Ì«%DLWÙMÆ²Ç [ 373.681754][ T9761] [U] [ª['XN€'²÷ Á¿Ü,MRŠ«/žšœÂ1D=!DŽX91BÙWÇ»R—LF…ƒÆKÌ€ZÕÊ# `̑ L؛§Ëœ»×B~ÅMÒÔÖ [ 373.691595][ T9761] [U] ™LÖ>ÑD+ˆD¯§—®Ì"5ŽÊH3<ªšÅIR=F^”FNÕÓÜÀ‰¿Û­VÛ÷œDÁOIOÚ:UÖ>ÖY [ 373.727221][ T9761] [U] 'B—6VÝ20³Ä·Çž¥·×ŒÏ"T8Ñ{9ÆFW]ÔÊÄÌ© [ 373.735264][ T9761] [U] Ù72މÏÂÃUÞC6™ÎÜÔτI]8Cª£TÛšQSKYÞÎIÒÀ¹ ¿|V'ÛTV/ÙÅG•$[ 9KH`Ú"ܑÚÕ}€Ñ[^=ˆÚ0Á]œÃ%Æ̂T“Šž¹ØFÌ_VÖ4CžÒÅ [ 373.816268][ T9761] [U] ¹ EC [ 373.821594][ T9761] [U] —”|‚ÊÌ<ÄÎ:^Ü3$7NK~Ø-™@÷Š?Ÿ–/MTL·ÛŸ©IˆWȬ@G~TØ{ÊÜP¿+Æ$ªJP|µ ŽÇIÛRIӍPMÐ Õ·YÓ Ú”8ÌTÉÐÞVžÙßÆË,ÎLÂ,Õ [ 373.958565][ T9790] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1182'. [ 373.992519][ T9791] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1180'. [ 373.992922][ T9790] netlink: 'syz.2.1182': attribute type 13 has an invalid length. [ 374.036297][ T9790] netlink: 'syz.2.1182': attribute type 17 has an invalid length. [ 374.082305][ T9792] bridge_slave_0: left allmulticast mode [ 374.088196][ T9791] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1180'. [ 374.176295][ T9792] bridge_slave_0: left promiscuous mode [ 374.178519][ T9794] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1181'. [ 374.209405][ T9792] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.291516][ T9792] bridge_slave_1: left allmulticast mode [ 374.329089][ T9792] bridge_slave_1: left promiscuous mode [ 374.384169][ T9792] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.521108][ T9792] bond0: (slave bond_slave_0): Releasing backup interface [ 374.576998][ T9792] bond0: (slave bond_slave_1): Releasing backup interface [ 374.609984][ T9792] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 374.625399][ T9792] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 374.698870][ T9792] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 374.721146][ T9792] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 374.798877][ T9792] net_ratelimit: 16 callbacks suppressed [ 374.798893][ T9792] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 374.943209][ T9790] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 375.068252][ T9786] [U] ˆKÌÚÛÕ‰)0ÄÄÝ~ܳʪÁIP'ÍFÓҜZÚÞR¬™ß @BÓ]Â5ÝÊ{­©ÊŒÔ'À8ÅÆ¥F‡¹UTQUDÇ©€K;7ͪ0C[„ÃY–ŒÈYCŠ¶»Ø°Mª™LÒ8’T…ÍšÎ5³ÝÝRX™¶ÐWÍ X€²ÓOQHVI'8œ¥Î…Lµ [ 375.550495][ T9812] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1185'. [ 375.563385][ T9812] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1185'. [ 375.572689][ T9812] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1185'. [ 375.946215][ T7711] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 376.496185][ T7711] usb 4-1: Using ep0 maxpacket: 32 [ 376.529247][ T7711] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 376.576508][ T7711] usb 4-1: config 0 has no interface number 0 [ 376.635498][ T7711] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 376.663500][ T7711] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.690706][ T7711] usb 4-1: Product: syz [ 376.708202][ T7711] usb 4-1: Manufacturer: syz [ 376.712869][ T7711] usb 4-1: SerialNumber: syz [ 376.750257][ T7711] usb 4-1: config 0 descriptor?? [ 376.764865][ T7711] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 376.864618][ T9828] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1187'. [ 377.041499][ T7711] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 377.134872][ T7711] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 378.770650][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.777136][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.925040][ T9835] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1189'. [ 379.316219][ T6499] usb 5-1: new low-speed USB device number 68 using dummy_hcd [ 379.426330][ T9828] batman_adv: batadv0: Adding interface: dummy0 [ 379.456773][ T9828] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 379.482850][ T6499] usb 5-1: Invalid ep0 maxpacket: 64 [ 379.504248][ T9828] batman_adv: batadv0: Interface activated: dummy0 [ 379.568516][ T9829] batadv0: mtu less than device minimum [ 379.576009][ T9829] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 379.588274][ T9829] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 379.599574][ T9829] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 379.611745][ T9829] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 379.622979][ T9829] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 379.626160][ T6499] usb 5-1: new low-speed USB device number 69 using dummy_hcd [ 379.634886][ T9829] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 379.652168][ T9829] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 379.754120][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 379.762845][ T7711] usb 4-1: USB disconnect, device number 55 [ 379.783378][ T7711] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 379.832396][ T7711] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 379.875516][ T7711] quatech2 4-1:0.51: device disconnected [ 379.887210][ T6499] usb 5-1: Invalid ep0 maxpacket: 64 [ 379.909205][ T6499] usb usb5-port1: attempt power cycle [ 380.110006][ T9845] FAULT_INJECTION: forcing a failure. [ 380.110006][ T9845] name failslab, interval 1, probability 0, space 0, times 0 [ 380.122854][ T9845] CPU: 1 UID: 0 PID: 9845 Comm: syz.0.1193 Not tainted syzkaller #0 PREEMPT(full) [ 380.122883][ T9845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 380.122895][ T9845] Call Trace: [ 380.122903][ T9845] [ 380.122912][ T9845] dump_stack_lvl+0x189/0x250 [ 380.122940][ T9845] ? __pfx____ratelimit+0x10/0x10 [ 380.122969][ T9845] ? __pfx_dump_stack_lvl+0x10/0x10 [ 380.122990][ T9845] ? __pfx__printk+0x10/0x10 [ 380.123014][ T9845] ? netlink_sendmsg+0x805/0xb30 [ 380.123044][ T9845] ? __sys_sendmsg+0x164/0x220 [ 380.123071][ T9845] ? do_fast_syscall_32+0x34/0x80 [ 380.123100][ T9845] should_fail_ex+0x414/0x560 [ 380.123131][ T9845] should_failslab+0xa8/0x100 [ 380.123155][ T9845] kmem_cache_alloc_noprof+0x74/0x6e0 [ 380.123191][ T9845] ? skb_clone+0x212/0x3a0 [ 380.123215][ T9845] skb_clone+0x212/0x3a0 [ 380.123239][ T9845] __netlink_deliver_tap+0x404/0x850 [ 380.123279][ T9845] ? netlink_deliver_tap+0x2e/0x1b0 [ 380.123308][ T9845] netlink_deliver_tap+0x19c/0x1b0 [ 380.123335][ T9845] netlink_sendskb+0x68/0x140 [ 380.123361][ T9845] netlink_unicast+0x397/0x9e0 [ 380.123383][ T9845] ? __asan_memcpy+0x40/0x70 [ 380.123419][ T9845] ? __pfx_netlink_unicast+0x10/0x10 [ 380.123454][ T9845] netlink_rcv_skb+0x28c/0x470 [ 380.123479][ T9845] ? lockdep_hardirqs_on+0x98/0x140 [ 380.123507][ T9845] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 380.123534][ T9845] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 380.123572][ T9845] ? bpf_lsm_capable+0x9/0x20 [ 380.123595][ T9845] ? security_capable+0x7e/0x2e0 [ 380.123624][ T9845] nfnetlink_rcv+0x282/0x2590 [ 380.123651][ T9845] ? __dev_queue_xmit+0x259/0x3b10 [ 380.123673][ T9845] ? __dev_queue_xmit+0x1d47/0x3b10 [ 380.123690][ T9845] ? kasan_save_track+0x3e/0x80 [ 380.123716][ T9845] ? __kasan_slab_alloc+0x6c/0x80 [ 380.123742][ T9845] ? __dev_queue_xmit+0x259/0x3b10 [ 380.123807][ T9845] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 380.123833][ T9845] ? __pfx___dev_queue_xmit+0x10/0x10 [ 380.123859][ T9845] ? ref_tracker_free+0x63a/0x7d0 [ 380.123875][ T9845] ? __asan_memcpy+0x40/0x70 [ 380.123890][ T9845] ? __pfx_ref_tracker_free+0x10/0x10 [ 380.123904][ T9845] ? __skb_clone+0x63/0x7a0 [ 380.123917][ T9845] ? __skb_clone+0x483/0x7a0 [ 380.123932][ T9845] ? skb_clone+0x246/0x3a0 [ 380.123946][ T9845] ? __netlink_deliver_tap+0x807/0x850 [ 380.123963][ T9845] ? netlink_deliver_tap+0x2e/0x1b0 [ 380.123986][ T9845] ? netlink_deliver_tap+0x2e/0x1b0 [ 380.124009][ T9845] netlink_unicast+0x82f/0x9e0 [ 380.124033][ T9845] ? __pfx_netlink_unicast+0x10/0x10 [ 380.124050][ T9845] ? netlink_sendmsg+0x642/0xb30 [ 380.124065][ T9845] ? skb_put+0x11b/0x210 [ 380.124084][ T9845] netlink_sendmsg+0x805/0xb30 [ 380.124106][ T9845] ? __pfx_netlink_sendmsg+0x10/0x10 [ 380.124124][ T9845] ? __import_iovec+0x5d4/0x7f0 [ 380.124135][ T9845] ? aa_sock_msg_perm+0xf1/0x1b0 [ 380.124151][ T9845] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 380.124163][ T9845] ? __pfx_netlink_sendmsg+0x10/0x10 [ 380.124181][ T9845] __sock_sendmsg+0x21c/0x270 [ 380.124197][ T9845] ____sys_sendmsg+0x505/0x820 [ 380.124218][ T9845] ? __pfx_____sys_sendmsg+0x10/0x10 [ 380.124238][ T9845] ? kstrtouint+0x6e/0xe0 [ 380.124258][ T9845] ___sys_sendmsg+0x21f/0x2a0 [ 380.124276][ T9845] ? __pfx____sys_sendmsg+0x10/0x10 [ 380.124298][ T9845] ? rcu_read_lock_any_held+0xb3/0x120 [ 380.124329][ T9845] ? __fget_files+0x2a/0x420 [ 380.124342][ T9845] ? __fget_files+0x3a0/0x420 [ 380.124361][ T9845] __sys_sendmsg+0x164/0x220 [ 380.124379][ T9845] ? __pfx___sys_sendmsg+0x10/0x10 [ 380.124402][ T9845] ? __pfx_ksys_write+0x10/0x10 [ 380.124420][ T9845] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 380.124433][ T9845] ? lockdep_hardirqs_on+0x98/0x140 [ 380.124452][ T9845] __do_fast_syscall_32+0xb6/0x300 [ 380.124465][ T9845] ? lockdep_hardirqs_on+0x98/0x140 [ 380.124485][ T9845] do_fast_syscall_32+0x34/0x80 [ 380.124497][ T9845] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 380.124511][ T9845] RIP: 0023:0xf70dd539 [ 380.124523][ T9845] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 380.124533][ T9845] RSP: 002b:00000000f54cd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 380.124549][ T9845] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 380.124557][ T9845] RDX: 0000000004000084 RSI: 0000000000000000 RDI: 0000000000000000 [ 380.124565][ T9845] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 380.124572][ T9845] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 380.124579][ T9845] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 380.124597][ T9845] [ 380.676848][ T6499] usb 5-1: new low-speed USB device number 70 using dummy_hcd [ 380.716311][ T7711] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 380.720188][ T6499] usb 5-1: Invalid ep0 maxpacket: 64 [ 380.866331][ T7711] usb 4-1: Using ep0 maxpacket: 16 [ 380.876700][ T6499] usb 5-1: new low-speed USB device number 71 using dummy_hcd [ 380.885954][ T7711] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 380.899287][ T9854] batman_adv: batadv0: Interface deactivated: dummy0 [ 380.906393][ T7711] usb 4-1: config 0 has no interfaces? [ 380.911591][ T9854] batman_adv: batadv0: Removing interface: dummy0 [ 380.916769][ T7711] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 380.930487][ T7711] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.931533][ T9854] bridge_slave_0: left allmulticast mode [ 380.943248][ T7711] usb 4-1: config 0 descriptor?? [ 380.954627][ T6499] usb 5-1: Invalid ep0 maxpacket: 64 [ 380.967793][ T6499] usb usb5-port1: unable to enumerate USB device [ 380.990862][ T9856] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1198'. [ 381.000197][ T9856] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1198'. [ 381.009602][ T9854] bridge_slave_0: left promiscuous mode [ 381.011722][ T9857] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1197'. [ 381.015537][ T9854] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.043863][ T9854] bridge_slave_1: left allmulticast mode [ 381.049707][ T9854] bridge_slave_1: left promiscuous mode [ 381.055701][ T9854] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.124900][ T9861] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1199'. [ 381.138655][ T9854] bond0: (slave bond_slave_0): Releasing backup interface [ 381.154086][ T9861] netlink: 'syz.2.1199': attribute type 13 has an invalid length. [ 381.168285][ T6499] usb 4-1: USB disconnect, device number 56 [ 381.191266][ T9861] netlink: 'syz.2.1199': attribute type 17 has an invalid length. [ 381.208190][ T9854] bond0: (slave bond_slave_1): Releasing backup interface [ 381.243497][ T9854] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 381.367454][ T9854] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 381.386554][ T9854] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 381.409532][ T9854] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 381.465523][ T9854] net_ratelimit: 12 callbacks suppressed [ 381.465540][ T9854] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 381.587890][ T9861] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 382.072995][ T9870] trusted_key: syz.3.1201 sent an empty control message without MSG_MORE. [ 382.429356][ T9877] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1202'. [ 382.442020][ T9877] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1202'. [ 382.451333][ T9877] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1202'. [ 382.746190][ T7711] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 382.966171][ T7711] usb 5-1: Using ep0 maxpacket: 32 [ 383.260366][ T9885] netlink: 277 bytes leftover after parsing attributes in process `syz.1.1204'. [ 383.309080][ T9885] netlink: 277 bytes leftover after parsing attributes in process `syz.1.1204'. [ 383.341856][ T7711] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 383.356901][ T7711] usb 5-1: config 0 has no interface number 0 [ 383.502981][ T30] audit: type=1800 audit(1764711401.184:32): pid=9868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1200" name="bus" dev="ramfs" ino=30232 res=0 errno=0 [ 383.565319][ T7711] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 383.587445][ T7711] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.615791][ T7711] usb 5-1: Product: syz [ 383.723697][ T7711] usb 5-1: Manufacturer: syz [ 383.726782][ T6499] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 383.827949][ T7711] usb 5-1: SerialNumber: syz [ 383.916514][ T6499] usb 2-1: Using ep0 maxpacket: 32 [ 383.971048][ T6499] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 383.986036][ T6499] usb 2-1: config 0 has no interface number 0 [ 384.033486][ T7711] usb 5-1: config 0 descriptor?? [ 384.039337][ T6499] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 384.051322][ T6499] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.063238][ T6499] usb 2-1: Product: syz [ 384.073993][ T6499] usb 2-1: Manufacturer: syz [ 384.079998][ T6499] usb 2-1: SerialNumber: syz [ 384.081845][ T7711] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 384.206405][ T9] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 384.388462][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 384.425605][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 384.441242][ T6499] usb 2-1: config 0 descriptor?? [ 384.461756][ T7711] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 384.495218][ T6499] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 384.506632][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 384.546921][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 384.575147][ T7711] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 384.616962][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 384.681886][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.718420][ T6499] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB2 [ 384.759841][ T9] usb 1-1: config 0 descriptor?? [ 384.799035][ T6499] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB3 [ 385.446763][ T9] plantronics 0003:047F:FFFF.0026: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 385.753149][ T9901] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1211'. [ 386.238928][ T9] usb 1-1: USB disconnect, device number 50 [ 386.335623][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 386.336692][ T6499] usb 5-1: USB disconnect, device number 72 [ 386.395201][ T6499] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 386.439289][ T6499] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 386.629476][ T6499] quatech2 5-1:0.51: device disconnected [ 386.808939][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 386.829087][ T9] usb 2-1: USB disconnect, device number 41 [ 386.869458][ T9] quatech-serial ttyUSB2: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB2 [ 386.927308][ T9] quatech-serial ttyUSB3: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB3 [ 386.968563][ T9] quatech2 2-1:0.51: device disconnected [ 386.981040][ T6499] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 387.168864][ T6499] usb 5-1: Using ep0 maxpacket: 16 [ 387.177553][ T6499] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 387.236233][ T6499] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 387.266657][ T6499] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 387.275738][ T6499] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.343330][ T6499] usb 5-1: config 0 descriptor?? [ 387.407388][ T9923] __nla_validate_parse: 1 callbacks suppressed [ 387.407405][ T9923] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1219'. [ 387.489574][ T9923] netlink: 'syz.0.1219': attribute type 13 has an invalid length. [ 387.507933][ T9923] netlink: 'syz.0.1219': attribute type 17 has an invalid length. [ 387.595276][ T9923] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 387.666647][ T6499] usb 5-1: USB disconnect, device number 73 [ 387.686498][ T5909] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 388.178738][ T5909] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 388.240951][ T5909] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 388.262699][ T5909] usb 2-1: config 0 interface 0 has no altsetting 0 [ 388.287215][ T5909] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 388.352964][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 388.406151][ T5909] usb 2-1: Product: syz [ 388.426035][ T5909] usb 2-1: Manufacturer: syz [ 388.434931][ T5909] usb 2-1: SerialNumber: syz [ 388.446990][ T5909] usb 2-1: config 0 descriptor?? [ 388.474876][ T5909] usb 2-1: selecting invalid altsetting 0 [ 388.632080][ T9934] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1221'. [ 388.679624][ T9934] netlink: 'syz.4.1221': attribute type 13 has an invalid length. [ 388.724762][ T9925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.737884][ T9934] netlink: 'syz.4.1221': attribute type 17 has an invalid length. [ 388.781021][ T9925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.821832][ T6499] usb 2-1: USB disconnect, device number 42 [ 388.876216][ T9934] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 388.936778][ T30] audit: type=1800 audit(1764711406.614:33): pid=9932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1220" name="bus" dev="ramfs" ino=30304 res=0 errno=0 [ 390.185630][ T9941] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1222'. [ 390.197823][ T9941] netlink: 277 bytes leftover after parsing attributes in process `syz.2.1222'. [ 390.207180][ T9941] netlink: 277 bytes leftover after parsing attributes in process `syz.2.1222'. [ 390.477602][ T30] audit: type=1800 audit(1764711408.164:34): pid=9926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1218" name="bus" dev="ramfs" ino=29594 res=0 errno=0 [ 390.536179][ T7711] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 390.757714][ T7711] usb 3-1: Using ep0 maxpacket: 32 [ 390.827704][ T9951] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1223'. [ 390.843804][ T9951] netlink: 277 bytes leftover after parsing attributes in process `syz.1.1223'. [ 390.853355][ T9951] netlink: 277 bytes leftover after parsing attributes in process `syz.1.1223'. [ 390.965693][ T7711] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 390.998024][ T7711] usb 3-1: config 0 has no interface number 0 [ 391.042674][ T7711] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 391.093091][ T7711] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.146474][ T5909] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 391.159827][ T7711] usb 3-1: Product: syz [ 391.199256][ T7711] usb 3-1: Manufacturer: syz [ 391.239977][ T7711] usb 3-1: SerialNumber: syz [ 391.306273][ T5909] usb 2-1: Using ep0 maxpacket: 32 [ 391.327128][ T5909] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 391.352018][ T7711] usb 3-1: config 0 descriptor?? [ 391.372645][ T5909] usb 2-1: config 0 has no interface number 0 [ 391.411707][ T7711] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 391.431102][ T5909] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 391.442220][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.452094][ T5909] usb 2-1: Product: syz [ 391.488002][ T5909] usb 2-1: Manufacturer: syz [ 391.499822][ T5909] usb 2-1: SerialNumber: syz [ 391.576535][ T5909] usb 2-1: config 0 descriptor?? [ 391.604719][ T7711] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 391.643188][ T5909] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 391.663534][ T7711] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 391.937329][ T5909] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB2 [ 391.978196][ T9965] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1226'. [ 392.013250][ T9965] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1226'. [ 392.098785][ T5909] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB3 [ 392.336292][ T7711] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 392.531706][ T7711] usb 5-1: Using ep0 maxpacket: 32 [ 393.012138][ T7711] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 393.031841][ T7711] usb 5-1: config 0 has no interface number 0 [ 393.537579][ T7711] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 393.546936][ T7711] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.558173][ T7711] usb 5-1: Product: syz [ 393.562453][ T7711] usb 5-1: Manufacturer: syz [ 393.575886][ T7711] usb 5-1: SerialNumber: syz [ 393.637026][ T7711] usb 5-1: config 0 descriptor?? [ 393.691949][ T7711] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 393.942970][ T7711] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB4 [ 393.970239][ T7711] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB5 [ 394.299980][ T30] audit: type=1326 audit(1764711411.984:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9978 comm="syz.0.1230" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 394.520857][ T30] audit: type=1326 audit(1764711411.984:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9978 comm="syz.0.1230" exe="/root/syz-executor" sig=0 arch=40000003 syscall=242 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 394.520911][ T30] audit: type=1326 audit(1764711411.984:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9978 comm="syz.0.1230" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 394.520959][ T30] audit: type=1326 audit(1764711412.014:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9978 comm="syz.0.1230" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 394.521007][ T30] audit: type=1326 audit(1764711412.014:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9978 comm="syz.0.1230" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 394.521051][ T30] audit: type=1326 audit(1764711412.014:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9978 comm="syz.0.1230" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 394.521096][ T30] audit: type=1326 audit(1764711412.014:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9978 comm="syz.0.1230" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 394.521140][ T30] audit: type=1326 audit(1764711412.024:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9978 comm="syz.0.1230" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 394.521184][ T30] audit: type=1326 audit(1764711412.024:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9978 comm="syz.0.1230" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 394.521227][ T30] audit: type=1326 audit(1764711412.024:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9978 comm="syz.0.1230" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 394.696179][ T10] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 394.866637][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 394.870734][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 394.870763][ T10] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 394.870810][ T10] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 394.870834][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.874133][ T10] usb 4-1: config 0 descriptor?? [ 395.113685][ T10] usb 4-1: USB disconnect, device number 57 [ 395.180723][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 395.181693][ T6499] usb 3-1: USB disconnect, device number 46 [ 395.185653][ T6499] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 395.195804][ T6499] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 395.214492][ T6499] quatech2 3-1:0.51: device disconnected [ 395.352292][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 395.362859][ T7711] usb 2-1: USB disconnect, device number 43 [ 395.387695][ T7711] quatech-serial ttyUSB2: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB2 [ 395.392687][ T7711] quatech-serial ttyUSB3: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB3 [ 395.764277][ T7711] quatech2 2-1:0.51: device disconnected [ 395.872940][ T9986] sctp: [Deprecated]: syz.2.1232 (pid 9986) Use of int in maxseg socket option. [ 395.872940][ T9986] Use struct sctp_assoc_value instead [ 396.004416][ T9990] __nla_validate_parse: 1 callbacks suppressed [ 396.004439][ T9990] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1235'. [ 396.027994][ T9990] netlink: 'syz.1.1235': attribute type 13 has an invalid length. [ 396.044408][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 396.047124][ T10] usb 5-1: USB disconnect, device number 74 [ 396.054610][ T9990] netlink: 'syz.1.1235': attribute type 17 has an invalid length. [ 396.072629][ T9990] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 396.147137][ T10] quatech-serial ttyUSB4: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB4 [ 396.186466][ T6499] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 396.248732][ T10] quatech-serial ttyUSB5: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB5 [ 396.308466][ T10] quatech2 5-1:0.51: device disconnected [ 396.416749][ T6499] usb 3-1: Using ep0 maxpacket: 16 [ 396.438283][ T6499] usb 3-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01 [ 396.452180][ T6499] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.469569][ T6499] usb 3-1: Product: syz [ 396.478323][ T6499] usb 3-1: Manufacturer: syz [ 396.482987][ T6499] usb 3-1: SerialNumber: syz [ 396.506642][ T6499] usb 3-1: config 0 descriptor?? [ 396.525972][ T6499] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected. [ 396.747827][ T6499] pwc: Warning: more than 1 configuration available. [ 396.760515][ T6499] pwc: Failed to set LED on/off time (-71) [ 396.781000][ T6499] pwc: send_video_command error -71 [ 396.804579][ T6499] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 397.010732][ T6499] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 397.087910][ T6499] usb 3-1: USB disconnect, device number 47 [ 397.382843][T10019] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1243'. [ 397.395641][T10019] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1243'. [ 397.405066][T10019] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1243'. [ 397.686188][ T7711] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 398.026181][ T5928] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 398.126180][ T7711] usb 4-1: Using ep0 maxpacket: 32 [ 398.186145][ T5928] usb 3-1: Using ep0 maxpacket: 16 [ 398.215602][ T5928] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 398.234991][ T5928] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 398.244286][ T5928] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 398.254331][ T5928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.265475][ T5928] usb 3-1: config 0 descriptor?? [ 398.483752][ T6499] usb 3-1: USB disconnect, device number 48 [ 398.647031][ T7711] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 398.656574][ T7711] usb 4-1: config 0 has no interface number 0 [ 398.671852][ T7711] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 398.681639][ T7711] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.691765][ T7711] usb 4-1: Product: syz [ 398.701089][ T7711] usb 4-1: Manufacturer: syz [ 398.705899][ T7711] usb 4-1: SerialNumber: syz [ 398.734040][ T7711] usb 4-1: config 0 descriptor?? [ 398.753637][ T7711] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 398.978514][ T7711] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 399.040674][ T7711] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 399.203287][T10027] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1246'. [ 400.407750][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 400.407769][ T30] audit: type=1800 audit(1764711418.094:53): pid=10006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1238" name="bus" dev="ramfs" ino=30411 res=0 errno=0 [ 400.565491][T10037] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1249'. [ 400.577839][T10037] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1249'. [ 400.587077][T10037] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1249'. [ 400.896238][ T7711] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 401.203056][ T7711] usb 1-1: Using ep0 maxpacket: 32 [ 401.238325][ T7711] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 401.252878][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 401.293784][ T7711] usb 1-1: config 0 has no interface number 0 [ 401.307019][ T5909] usb 4-1: USB disconnect, device number 58 [ 401.374648][ T5909] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 401.419897][ T7711] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 401.463201][ T7711] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.472611][ T5909] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 401.510267][T10046] FAULT_INJECTION: forcing a failure. [ 401.510267][T10046] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 401.545878][ T7711] usb 1-1: Product: syz [ 401.560089][ T5909] quatech2 4-1:0.51: device disconnected [ 401.574307][ T7711] usb 1-1: Manufacturer: syz [ 401.579949][T10046] CPU: 1 UID: 0 PID: 10046 Comm: syz.2.1254 Not tainted syzkaller #0 PREEMPT(full) [ 401.579978][T10046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 401.579990][T10046] Call Trace: [ 401.579998][T10046] [ 401.580007][T10046] dump_stack_lvl+0x189/0x250 [ 401.580037][T10046] ? __pfx____ratelimit+0x10/0x10 [ 401.580067][T10046] ? __pfx_dump_stack_lvl+0x10/0x10 [ 401.580088][T10046] ? __pfx__printk+0x10/0x10 [ 401.580115][T10046] ? __might_fault+0xb0/0x130 [ 401.580156][T10046] should_fail_ex+0x414/0x560 [ 401.580187][T10046] _copy_from_user+0x2d/0xb0 [ 401.580209][T10046] generic_map_delete_batch+0x2f4/0x9e0 [ 401.580247][T10046] ? __pfx_generic_map_delete_batch+0x10/0x10 [ 401.580273][T10046] ? __fget_files+0x2a/0x420 [ 401.580301][T10046] ? __pfx_generic_map_delete_batch+0x10/0x10 [ 401.580328][T10046] bpf_map_do_batch+0x44f/0x630 [ 401.580357][T10046] __sys_bpf+0x3a6/0x860 [ 401.580380][T10046] ? __pfx___sys_bpf+0x10/0x10 [ 401.580418][T10046] ? ksys_write+0x22a/0x250 [ 401.580445][T10046] ? exc_page_fault+0x82/0x100 [ 401.580474][T10046] ? __pfx_ksys_write+0x10/0x10 [ 401.580512][T10046] __ia32_sys_bpf+0x7c/0x90 [ 401.580542][T10046] __do_fast_syscall_32+0xb6/0x300 [ 401.580563][T10046] ? lockdep_hardirqs_on+0x98/0x140 [ 401.580597][T10046] do_fast_syscall_32+0x34/0x80 [ 401.580618][T10046] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 401.580651][T10046] RIP: 0023:0xf703d539 [ 401.580669][T10046] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 401.580684][T10046] RSP: 002b:00000000f540c55c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 401.580702][T10046] RAX: ffffffffffffffda RBX: 000000000000001b RCX: 0000000080000040 [ 401.580714][T10046] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 0000000000000000 [ 401.580723][T10046] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 401.580733][T10046] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 401.580742][T10046] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 401.580767][T10046] [ 401.806789][ T7711] usb 1-1: SerialNumber: syz [ 401.813281][ T7711] usb 1-1: config 0 descriptor?? [ 401.856295][ T7711] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 402.247351][ T7711] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 402.272583][ T7711] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 402.798872][T10068] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 402.991538][T10072] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1262'. [ 403.012987][T10072] netlink: 277 bytes leftover after parsing attributes in process `syz.2.1262'. [ 403.023660][T10072] netlink: 277 bytes leftover after parsing attributes in process `syz.2.1262'. [ 403.056177][ T6499] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 403.267252][ T6499] usb 2-1: Using ep0 maxpacket: 8 [ 403.276957][ T6499] usb 2-1: config 0 has an invalid interface number: 56 but max is 0 [ 403.286557][ T6499] usb 2-1: config 0 has no interface number 0 [ 403.411260][ T10] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 403.442690][ T6499] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 403.486194][ T6499] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.502879][ T6499] usb 2-1: Product: syz [ 403.512979][ T6499] usb 2-1: Manufacturer: syz [ 403.519277][ T6499] usb 2-1: SerialNumber: syz [ 403.565538][ T6499] usb 2-1: config 0 descriptor?? [ 403.582587][ T6499] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 403.591093][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 403.605521][ T10] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 403.614911][ T10] usb 3-1: config 0 has no interface number 0 [ 403.622716][ T6499] pctv452e: pctv452e_power_ctrl: 1 [ 403.622716][ T6499] [ 403.639888][ T6499] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 403.639888][ T6499] [ 403.653444][ T6499] dvb-usb: bulk message failed: -22 (5/0) [ 403.690545][ T10] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 403.702098][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.713105][ T6499] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 403.728879][ T10] usb 3-1: Product: syz [ 403.740874][ T10] usb 3-1: Manufacturer: syz [ 403.748265][ T6499] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 403.772259][ T10] usb 3-1: SerialNumber: syz [ 403.780515][T10068] pctv452e: I2C error -22; AA 01 00 00 F5 -> 00 00 00 00 00 00 00 [ 403.806257][ T6499] usb 2-1: media controller created [ 403.821053][ T10] usb 3-1: config 0 descriptor?? [ 403.835566][ T6499] dvb-usb: bulk message failed: -22 (8/0) [ 403.851730][ T10] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 403.861201][ T6499] pctv452e: I2C error -22; AA 02 A0 01 14 -> aa 02 31 04 a0 01 14 [ 403.879050][ T6499] dvb-usb: MAC address reading failed. [ 403.946887][ T6499] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 404.065461][ T10] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB2 [ 404.084061][ T10] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB3 [ 404.161752][ T6499] DVB: Unable to find symbol stb0899_attach() [ 404.179746][ T6499] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 404.496408][ T6499] rc_core: IR keymap rc-tt-1500 not found [ 404.502233][ T6499] Registered IR keymap rc-empty [ 404.541275][ T6499] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 404.641387][ T6499] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input30 [ 404.720471][ T6499] dvb-usb: schedule remote query interval to 100 msecs. [ 404.750809][ T6499] pctv452e: pctv452e_power_ctrl: 0 [ 404.750809][ T6499] [ 404.786138][ T6499] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 404.811272][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 404.812463][ T10] usb 1-1: USB disconnect, device number 51 [ 404.847109][T10081] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1266'. [ 404.912086][ T6499] usb 2-1: USB disconnect, device number 44 [ 404.926857][ T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 405.231906][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 405.251453][ T10] quatech2 1-1:0.51: device disconnected [ 405.263101][T10083] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1266'. [ 405.888758][T10083] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1266'. [ 405.958035][ T6499] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 406.196224][ T10] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 406.366273][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 406.374975][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 406.375441][ T5909] usb 3-1: USB disconnect, device number 49 [ 406.441697][ T5909] quatech-serial ttyUSB2: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB2 [ 406.487253][ T10] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 406.495391][ T10] usb 5-1: config 0 has no interface number 0 [ 406.511745][ T5909] quatech-serial ttyUSB3: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB3 [ 406.538648][ T10] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 406.541064][ T5909] quatech2 3-1:0.51: device disconnected [ 406.577466][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.604418][ T10] usb 5-1: Product: syz [ 406.626147][ T10] usb 5-1: Manufacturer: syz [ 406.634829][ T10] usb 5-1: SerialNumber: syz [ 406.664006][ T10] usb 5-1: config 0 descriptor?? [ 406.694107][ T10] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 406.696527][ T5928] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 406.876202][ T5928] usb 4-1: Using ep0 maxpacket: 32 [ 406.884655][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.906194][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 406.925886][ T5928] usb 4-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00 [ 406.935287][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.944004][ T10] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 406.973369][ T10] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 407.029470][ T5928] usb 4-1: config 0 descriptor?? [ 407.039230][T10108] fuse: Unknown parameter 'aßÕ`|ô§o' [ 407.281359][ T30] audit: type=1800 audit(1764711424.964:54): pid=10085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1264" name="bus" dev="ramfs" ino=30596 res=0 errno=0 [ 407.393056][ T5909] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 407.553145][ T5928] kye 0003:0458:501B.0027: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 407.564958][ T5928] kye 0003:0458:501B.0027: unknown main item tag 0x0 [ 407.572013][ T5909] usb 1-1: Using ep0 maxpacket: 16 [ 407.579302][ T5909] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 407.591950][ T5909] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 407.617810][ T5928] kye 0003:0458:501B.0027: unknown main item tag 0x0 [ 407.625906][ T5909] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 407.660273][ T5928] kye 0003:0458:501B.0027: hidraw0: USB HID v0.04 Device [HID 0458:501b] on usb-dummy_hcd.3-1/input0 [ 407.776196][ T5909] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 407.810732][ T5928] kye 0003:0458:501B.0027: tablet-enabling feature report not found [ 407.819804][ T5909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.827910][ T5928] kye 0003:0458:501B.0027: tablet enabling failed [ 407.839453][ T5909] usb 1-1: config 0 descriptor?? [ 408.291970][ T5909] microsoft 0003:045E:07DA.0028: invalid report_count 42497 [ 408.318886][ T5909] microsoft 0003:045E:07DA.0028: item 0 2 1 9 parsing failed [ 408.352016][ T5909] microsoft 0003:045E:07DA.0028: parse failed [ 408.385937][ T5909] microsoft 0003:045E:07DA.0028: probe with driver microsoft failed with error -22 [ 408.509986][ T5909] usb 1-1: USB disconnect, device number 52 [ 408.510679][T10116] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=167772160 (2684354560 ns) > initial count (320 ns). Using initial count to start timer. [ 409.041390][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 409.132771][ T6499] usb 5-1: USB disconnect, device number 75 [ 409.171261][ T6499] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 409.227849][ T6499] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 409.259091][ T6499] quatech2 5-1:0.51: device disconnected [ 409.637333][ T5909] usb 4-1: USB disconnect, device number 59 [ 409.751956][T10130] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1277'. [ 410.324899][T10142] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1282'. [ 410.489472][T10142] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1282'. [ 410.947017][T10148] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1284'. [ 410.969846][T10148] netlink: 'syz.0.1284': attribute type 13 has an invalid length. [ 411.001267][T10148] netlink: 'syz.0.1284': attribute type 17 has an invalid length. [ 411.052452][T10148] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 411.526257][ T5909] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 411.724055][ T5909] usb 5-1: too many configurations: 94, using maximum allowed: 8 [ 411.765336][ T5909] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 411.779306][ T5909] usb 5-1: can't read configurations, error -61 [ 411.926230][ T5909] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 411.960380][T10169] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1288'. [ 412.028148][T10169] netlink: 277 bytes leftover after parsing attributes in process `syz.1.1288'. [ 412.044514][T10169] netlink: 277 bytes leftover after parsing attributes in process `syz.1.1288'. [ 412.134778][ T5909] usb 5-1: too many configurations: 94, using maximum allowed: 8 [ 412.186177][ T5928] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 412.267338][ T5909] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 412.276364][ T5909] usb 5-1: can't read configurations, error -61 [ 412.301664][ T5909] usb usb5-port1: attempt power cycle [ 412.456193][ T6499] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 412.458460][ T5928] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 412.532638][ T5928] usb 4-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 412.589661][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.616285][ T6499] usb 2-1: Using ep0 maxpacket: 32 [ 412.623236][ T5928] usb 4-1: Product: syz [ 412.624786][ T6499] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 412.642278][ T6499] usb 2-1: config 0 has no interface number 0 [ 412.651817][ T5928] usb 4-1: Manufacturer: syz [ 412.667563][ T5928] usb 4-1: SerialNumber: syz [ 412.669901][ T6499] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 412.682011][ T6499] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.701903][ T6499] usb 2-1: Product: syz [ 412.738715][ T6499] usb 2-1: Manufacturer: syz [ 412.759004][ T6499] usb 2-1: SerialNumber: syz [ 412.776280][ T5909] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 412.787691][ T6499] usb 2-1: config 0 descriptor?? [ 412.864674][ T5909] usb 5-1: too many configurations: 94, using maximum allowed: 8 [ 412.885055][ T5928] usb 4-1: config 0 descriptor?? [ 412.888097][ T6499] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 412.910931][ T5909] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 412.932714][ T5928] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 412.942109][ T5909] usb 5-1: can't read configurations, error -61 [ 413.011033][ T6499] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 413.059932][ T6499] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 413.106395][ T5909] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 413.128650][ T5909] usb 5-1: too many configurations: 94, using maximum allowed: 8 [ 413.161383][ T5909] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 413.187557][ T5909] usb 5-1: can't read configurations, error -61 [ 413.257150][ T5909] usb usb5-port1: unable to enumerate USB device [ 413.866632][ T5928] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 413.890207][ T5928] gspca_pac7302 4-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 414.132274][ T5928] usb 4-1: USB disconnect, device number 60 [ 414.856249][ T5928] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 415.017974][ T5928] usb 5-1: config 0 has an invalid interface number: 228 but max is 0 [ 415.046926][ T5928] usb 5-1: config 0 has no interface number 0 [ 415.053354][ T5928] usb 5-1: too many endpoints for config 0 interface 228 altsetting 172: 89, using maximum allowed: 30 [ 415.075475][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 415.075829][ T24] usb 2-1: USB disconnect, device number 45 [ 415.110283][ T5928] usb 5-1: config 0 interface 228 altsetting 172 has 0 endpoint descriptors, different from the interface descriptor's value: 89 [ 415.128019][ T24] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 415.148601][ T5928] usb 5-1: config 0 interface 228 has no altsetting 0 [ 415.176468][ T24] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 415.191942][ T5928] usb 5-1: config 0 has an invalid interface number: 228 but max is 0 [ 415.220629][ T5928] usb 5-1: config 0 has no interface number 0 [ 415.236392][ T24] quatech2 2-1:0.51: device disconnected [ 415.252859][ T5928] usb 5-1: too many endpoints for config 0 interface 228 altsetting 172: 89, using maximum allowed: 30 [ 415.277466][ T5928] usb 5-1: config 0 interface 228 altsetting 172 has 0 endpoint descriptors, different from the interface descriptor's value: 89 [ 415.322515][ T5928] usb 5-1: config 0 interface 228 has no altsetting 0 [ 415.343073][ T5928] usb 5-1: config 0 has an invalid interface number: 228 but max is 0 [ 415.359501][ T5928] usb 5-1: config 0 has no interface number 0 [ 415.365663][ T5928] usb 5-1: too many endpoints for config 0 interface 228 altsetting 172: 89, using maximum allowed: 30 [ 415.377576][ T5928] usb 5-1: config 0 interface 228 altsetting 172 has 0 endpoint descriptors, different from the interface descriptor's value: 89 [ 415.393605][ T5928] usb 5-1: config 0 interface 228 has no altsetting 0 [ 415.414368][ T5928] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 415.436189][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 415.445938][ T5928] usb 5-1: Product: syz [ 415.452765][ T5928] usb 5-1: Manufacturer: syz [ 415.457501][ T5928] usb 5-1: SerialNumber: syz [ 415.467370][ T5928] usb 5-1: config 0 descriptor?? [ 415.691042][ T5928] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 415.705967][ T5928] dvb-usb: bulk message failed: -22 (2/0) [ 415.718744][ T5928] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 415.746937][ T5928] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 415.750003][T10189] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1295'. [ 415.755036][ T5928] usb 5-1: media controller created [ 415.813255][T10189] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1295'. [ 415.834387][ T5928] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 415.866157][ T7711] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 415.916299][ T5928] cxusb: set interface failed [ 415.921049][ T5928] dvb-usb: bulk message failed: -22 (1/0) [ 415.993511][ T5928] DVB: Unable to find symbol mt352_attach() [ 416.010018][ T5928] dvb-usb: bulk message failed: -22 (5/0) [ 416.017937][ T5928] zl10353_read_register: readreg error (reg=127, ret==-121) [ 416.025327][ T5928] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 416.033504][ T7711] usb 4-1: Using ep0 maxpacket: 32 [ 416.066190][ T7711] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 416.078786][ T7711] usb 4-1: config 0 has no interface number 0 [ 416.115538][ T7711] usb 4-1: config 0 interface 31 altsetting 2 bulk endpoint 0xE has invalid maxpacket 32 [ 416.166180][ T7711] usb 4-1: config 0 interface 31 has no altsetting 0 [ 416.176320][ T5928] rc_core: IR keymap rc-dvico-mce not found [ 416.182259][ T5928] Registered IR keymap rc-empty [ 416.209652][ T7711] usb 4-1: New USB device found, idVendor=0546, idProduct=06c1, bcdDevice=34.16 [ 416.228763][ T5928] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 416.242788][ T7711] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.263600][ T5928] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input31 [ 416.276136][ T7711] usb 4-1: Product: syz [ 416.280331][ T7711] usb 4-1: Manufacturer: syz [ 416.296154][ T7711] usb 4-1: SerialNumber: syz [ 416.324783][ T7711] usb 4-1: config 0 descriptor?? [ 416.330755][T10212] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1303'. [ 416.340244][ T5928] dvb-usb: schedule remote query interval to 100 msecs. [ 416.362374][ T5928] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 416.372184][T10194] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 416.383934][T10210] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1302'. [ 416.384971][T10212] netlink: 'syz.4.1303': attribute type 13 has an invalid length. [ 416.409986][ T5928] usb 5-1: USB disconnect, device number 80 [ 416.427320][T10212] netlink: 'syz.4.1303': attribute type 17 has an invalid length. [ 416.447112][T10210] syzkaller0: entered promiscuous mode [ 416.452603][T10210] syzkaller0: entered allmulticast mode [ 416.519463][T10212] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 416.548314][T10207] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1298'. [ 416.577381][ T5928] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 416.701161][T10194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.701607][T10194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.100925][ T5928] usb 4-1: USB disconnect, device number 61 [ 417.376619][ T24] usb 1-1: new low-speed USB device number 53 using dummy_hcd [ 417.538761][ T24] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 417.546786][ T24] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 417.568031][ T24] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 417.587324][T10227] netlink: 277 bytes leftover after parsing attributes in process `syz.1.1306'. [ 417.596634][T10227] netlink: 277 bytes leftover after parsing attributes in process `syz.1.1306'. [ 417.696324][ T24] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 418.110579][ T6499] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 418.174027][ T24] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 418.223608][ T24] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 418.263996][ T24] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 418.299181][ T24] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 418.317034][ T6499] usb 2-1: Using ep0 maxpacket: 32 [ 418.336269][ T24] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 418.343026][ T6499] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 418.358641][T10235] batadv_slave_0: entered promiscuous mode [ 418.390174][ T24] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 418.407900][ T6499] usb 2-1: config 0 has no interface number 0 [ 418.430521][ T24] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 418.433933][ T6499] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 418.450934][ T6499] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.463047][ T6499] usb 2-1: Product: syz [ 418.467669][ T24] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 418.467868][ T6499] usb 2-1: Manufacturer: syz [ 418.510000][ T24] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 418.513952][ T6499] usb 2-1: SerialNumber: syz [ 418.551909][ T24] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 418.572019][ T6499] usb 2-1: config 0 descriptor?? [ 418.586389][ T24] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 418.590480][ T6499] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 418.619736][ T24] usb 1-1: string descriptor 0 read error: -22 [ 418.626398][ T24] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 418.635524][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.666238][ T10] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 418.720653][ T24] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 418.800940][ T6499] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 418.814682][ T6499] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 418.833488][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 418.847681][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 418.896175][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 418.931219][ T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 418.943598][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.107186][ T10] usb 4-1: config 0 descriptor?? [ 419.644351][T10235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.851488][T10235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.180707][T10235] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1309'. [ 420.400652][T10234] batadv_slave_0: left promiscuous mode [ 420.400679][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 420.400817][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 420.460546][T10248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 420.462351][ T10] usb 4-1: USB disconnect, device number 62 [ 420.571996][T10247] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1312'. [ 420.581337][T10247] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1312'. [ 420.936147][ T5928] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 421.020476][ T24] usb 1-1: USB disconnect, device number 53 [ 421.096290][ T5928] usb 5-1: Using ep0 maxpacket: 8 [ 421.109831][ T5928] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 421.133167][ T5928] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 421.163788][ T5928] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 421.187019][ T5928] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 421.206250][ T5928] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 421.219803][ T5928] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 421.219812][T10255] batadv_slave_0: entered promiscuous mode [ 421.239540][ T5928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.261938][T10255] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1316'. [ 421.421790][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 421.430424][ T6499] usb 2-1: USB disconnect, device number 46 [ 421.461765][ T5928] usb 5-1: GET_CAPABILITIES returned 0 [ 421.475963][ T5928] usbtmc 5-1:16.0: can't read capabilities [ 421.477502][ T6499] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 421.490509][T10264] FAULT_INJECTION: forcing a failure. [ 421.490509][T10264] name failslab, interval 1, probability 0, space 0, times 0 [ 421.558834][T10264] CPU: 1 UID: 0 PID: 10264 Comm: syz.0.1319 Not tainted syzkaller #0 PREEMPT(full) [ 421.558867][T10264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 421.558889][T10264] Call Trace: [ 421.558899][T10264] [ 421.558909][T10264] dump_stack_lvl+0x189/0x250 [ 421.558938][T10264] ? __pfx____ratelimit+0x10/0x10 [ 421.558968][T10264] ? __pfx_dump_stack_lvl+0x10/0x10 [ 421.558991][T10264] ? __pfx__printk+0x10/0x10 [ 421.559026][T10264] ? __pfx___might_resched+0x10/0x10 [ 421.559045][T10264] ? fs_reclaim_acquire+0x7d/0x100 [ 421.559072][T10264] should_fail_ex+0x414/0x560 [ 421.559105][T10264] should_failslab+0xa8/0x100 [ 421.559130][T10264] __kmalloc_noprof+0xcb/0x7e0 [ 421.559159][T10264] ? tomoyo_encode+0x28b/0x550 [ 421.559191][T10264] tomoyo_encode+0x28b/0x550 [ 421.559224][T10264] tomoyo_realpath_from_path+0x58d/0x5d0 [ 421.559264][T10264] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 421.559286][T10264] tomoyo_path_number_perm+0x1e8/0x5a0 [ 421.559311][T10264] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 421.559332][T10264] ? __lock_acquire+0x6b6/0x2cf0 [ 421.559408][T10264] ? __fget_files+0x2a/0x420 [ 421.559438][T10264] ? __fget_files+0x3a0/0x420 [ 421.559460][T10264] ? __fget_files+0x2a/0x420 [ 421.559488][T10264] security_file_ioctl_compat+0xcb/0x2d0 [ 421.559522][T10264] __ia32_compat_sys_ioctl+0x128/0x840 [ 421.559556][T10264] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 421.559587][T10264] ? __fget_files+0x3a0/0x420 [ 421.559618][T10264] ? fput+0xa0/0xd0 [ 421.559642][T10264] ? ksys_write+0x22a/0x250 [ 421.559670][T10264] ? exc_page_fault+0x82/0x100 [ 421.559701][T10264] ? __pfx_ksys_write+0x10/0x10 [ 421.559739][T10264] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 421.559762][T10264] ? lockdep_hardirqs_on+0x98/0x140 [ 421.559796][T10264] __do_fast_syscall_32+0xb6/0x300 [ 421.559818][T10264] ? lockdep_hardirqs_on+0x98/0x140 [ 421.559852][T10264] do_fast_syscall_32+0x34/0x80 [ 421.559873][T10264] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 421.559906][T10264] RIP: 0023:0xf70dd539 [ 421.559924][T10264] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 421.559941][T10264] RSP: 002b:00000000f54cd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 421.559964][T10264] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040505330 [ 421.559979][T10264] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 421.559992][T10264] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 421.560005][T10264] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 421.560018][T10264] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 421.560052][T10264] [ 421.563599][T10264] ERROR: Out of memory at tomoyo_realpath_from_path. [ 421.702433][ T6499] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 421.868638][T10251] usbtmc 5-1:16.0: usb_control_msg returned -71 [ 421.869055][ T5928] usb 5-1: USB disconnect, device number 81 [ 422.029232][ T6499] quatech2 2-1:0.51: device disconnected [ 422.095594][T10254] batadv_slave_0: left promiscuous mode [ 422.289351][ T24] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 422.403639][T10276] warning: `syz.2.1323' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 422.459866][ T24] usb 4-1: config 0 has an invalid descriptor of length 137, skipping remainder of the config [ 422.490709][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 422.541966][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 422.563433][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64 [ 422.594081][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 422.668872][ T24] usb 4-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 422.678021][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.702680][ T24] usb 4-1: Product: syz [ 422.724044][ T24] usb 4-1: Manufacturer: syz [ 422.734138][ T24] usb 4-1: SerialNumber: syz [ 422.755064][ T24] usb 4-1: config 0 descriptor?? [ 422.765399][T10270] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 422.792358][ T24] ati_remote 4-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints [ 422.833254][T10282] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1324'. [ 422.842652][T10282] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1324'. [ 423.109129][ T6499] usb 4-1: USB disconnect, device number 63 [ 423.986188][ T5909] usb 4-1: new full-speed USB device number 64 using dummy_hcd [ 424.354758][T10331] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1337'. [ 424.369020][T10331] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1337'. [ 424.378299][T10331] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1337'. [ 424.429599][ T5909] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 424.445220][ T5909] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 424.454998][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.464081][ T5909] usb 4-1: Product: syz [ 424.468740][ T5909] usb 4-1: Manufacturer: syz [ 424.473551][ T5909] usb 4-1: SerialNumber: syz [ 424.481668][ T5909] usb 4-1: config 0 descriptor?? [ 424.493919][ T5909] streamzap 4-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 424.646475][ T24] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 424.688562][T10332] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1338'. [ 424.707304][T10332] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1338'. [ 424.806174][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 424.823510][ T24] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 424.840082][ T24] usb 1-1: config 0 has no interface number 0 [ 424.889995][ T24] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 424.900908][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.938569][ T24] usb 1-1: Product: syz [ 424.965355][ T24] usb 1-1: Manufacturer: syz [ 425.056562][ T24] usb 1-1: SerialNumber: syz [ 425.089645][ T24] usb 1-1: config 0 descriptor?? [ 425.254626][ T24] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 425.366012][ T5909] usb 4-1: USB disconnect, device number 64 [ 425.445016][ T24] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 425.481575][ T24] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 425.702420][T10351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1343'. [ 425.733537][T10351] netlink: 277 bytes leftover after parsing attributes in process `syz.2.1343'. [ 426.066152][ T6499] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 426.257062][ T6499] usb 3-1: Using ep0 maxpacket: 32 [ 426.289208][ T6499] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 426.297692][ T6499] usb 3-1: config 0 has no interface number 0 [ 426.337161][ T6499] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 426.347392][ T6499] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.355764][ T6499] usb 3-1: Product: syz [ 426.360810][ T6499] usb 3-1: Manufacturer: syz [ 426.366555][ T6499] usb 3-1: SerialNumber: syz [ 426.538322][ T6499] usb 3-1: config 0 descriptor?? [ 426.591134][ T6499] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 426.878203][ T6499] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB2 [ 426.892709][ T6499] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB3 [ 427.866539][T10368] ªªªªªª: renamed from vlan0 (while UP) [ 427.978677][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 427.996205][ T5909] usb 1-1: USB disconnect, device number 54 [ 428.024273][ T5909] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 428.137775][ T5909] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 428.590653][ T5909] quatech2 1-1:0.51: device disconnected [ 428.944148][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 428.944663][ T5909] usb 3-1: USB disconnect, device number 50 [ 428.962502][T10378] __nla_validate_parse: 2 callbacks suppressed [ 428.962524][T10378] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1352'. [ 429.021399][ T5909] quatech-serial ttyUSB2: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB2 [ 429.036809][T10378] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1352'. [ 429.058473][ T5909] quatech-serial ttyUSB3: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB3 [ 429.095995][ T5909] quatech2 3-1:0.51: device disconnected [ 429.606930][T10399] fuse: Bad value for 'fd' [ 429.647994][T10399] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1360'. [ 429.750779][T10405] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check. [ 429.984039][ T9] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 430.169442][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 430.194532][ T9] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 430.224487][ T9] usb 1-1: can't read configurations, error -71 [ 430.731702][T10421] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1366'. [ 430.782632][T10421] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1366'. [ 430.812145][T10421] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1366'. [ 430.829122][T10427] fuse: Unknown parameter 'fd0x0000000000000004' [ 430.868569][T10428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.889410][T10428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.917411][T10431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.948441][T10428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.960876][T10431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.993135][T10428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.027767][T10426] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1368'. [ 431.321045][ T9] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 431.419305][ T5909] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 431.466247][ T9] usb 1-1: device descriptor read/64, error -71 [ 431.491890][T10442] loop6: detected capacity change from 0 to 2640 [ 431.505719][ T7132] buffer_io_error: 1215 callbacks suppressed [ 431.505739][ T7132] Buffer I/O error on dev loop6, logical block 0, async page read [ 431.522705][ T7132] Buffer I/O error on dev loop6, logical block 0, async page read [ 431.533656][ T7132] Buffer I/O error on dev loop6, logical block 0, async page read [ 431.545114][T10443] FAULT_INJECTION: forcing a failure. [ 431.545114][T10443] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 431.587702][T10443] CPU: 0 UID: 0 PID: 10443 Comm: syz.3.1373 Not tainted syzkaller #0 PREEMPT(full) [ 431.587724][T10443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 431.587732][T10443] Call Trace: [ 431.587738][T10443] [ 431.587745][T10443] dump_stack_lvl+0x189/0x250 [ 431.587764][T10443] ? __pfx____ratelimit+0x10/0x10 [ 431.587782][T10443] ? __pfx_dump_stack_lvl+0x10/0x10 [ 431.587802][T10443] ? __pfx__printk+0x10/0x10 [ 431.587818][T10443] ? __might_fault+0xb0/0x130 [ 431.587843][T10443] should_fail_ex+0x414/0x560 [ 431.587862][T10443] _copy_from_user+0x2d/0xb0 [ 431.587876][T10443] snd_rawmidi_kernel_write1+0x3ab/0x650 [ 431.587903][T10443] snd_rawmidi_write+0x5a8/0xbc0 [ 431.587929][T10443] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 431.587945][T10443] ? __pfx_default_wake_function+0x10/0x10 [ 431.587964][T10443] ? common_file_perm+0x1b5/0x220 [ 431.587981][T10443] ? bpf_lsm_file_permission+0x9/0x20 [ 431.587994][T10443] ? security_file_permission+0x75/0x290 [ 431.588013][T10443] ? rw_verify_area+0x255/0x4d0 [ 431.588030][T10443] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 431.588047][T10443] vfs_write+0x27e/0xb30 [ 431.588069][T10443] ? __pfx_vfs_write+0x10/0x10 [ 431.588087][T10443] ? __fget_files+0x2a/0x420 [ 431.588102][T10443] ? __fget_files+0x2a/0x420 [ 431.588115][T10443] ? __fget_files+0x3a0/0x420 [ 431.588127][T10443] ? __fget_files+0x2a/0x420 [ 431.588145][T10443] ksys_write+0x145/0x250 [ 431.588161][T10443] ? exc_page_fault+0x82/0x100 [ 431.588179][T10443] ? __pfx_ksys_write+0x10/0x10 [ 431.588198][T10443] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 431.588211][T10443] ? lockdep_hardirqs_on+0x98/0x140 [ 431.588230][T10443] __do_fast_syscall_32+0xb6/0x300 [ 431.588244][T10443] ? lockdep_hardirqs_on+0x98/0x140 [ 431.588263][T10443] do_fast_syscall_32+0x34/0x80 [ 431.588276][T10443] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 431.588290][T10443] RIP: 0023:0xf707d539 [ 431.588307][T10443] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 431.588318][T10443] RSP: 002b:00000000f544c55c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 431.588333][T10443] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000000 [ 431.588342][T10443] RDX: 00000000fffffd2c RSI: 0000000000000000 RDI: 0000000000000000 [ 431.588350][T10443] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 431.588357][T10443] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 431.588365][T10443] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 431.588383][T10443] [ 431.854125][T10441] Buffer I/O error on dev loop6, logical block 0, async page read [ 431.862275][T10441] Buffer I/O error on dev loop6, logical block 0, async page read [ 432.128004][T10439] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1372'. [ 432.133344][ T9] usb usb1-port1: attempt power cycle [ 432.156192][ T5909] usb 5-1: Using ep0 maxpacket: 32 [ 432.162406][ T7132] Buffer I/O error on dev loop6, logical block 0, async page read [ 432.170674][ T7132] Buffer I/O error on dev loop6, logical block 0, async page read [ 432.171788][T10439] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1372'. [ 432.228273][T10443] Buffer I/O error on dev loop6, logical block 0, async page read [ 432.243918][T10441] Buffer I/O error on dev loop6, logical block 0, async page read [ 432.259337][T10443] Buffer I/O error on dev loop6, logical block 0, async page read [ 432.285732][ T7132] ldm_validate_partition_table(): Disk read failed. [ 432.303238][ T7132] Dev loop6: unable to read RDB block 0 [ 432.321089][ T7132] loop6: unable to read partition table [ 432.349962][ T5909] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 432.357220][T10442] ldm_validate_partition_table(): Disk read failed. [ 432.361279][ T5909] usb 5-1: config 0 has no interface number 0 [ 432.415314][ T5909] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 432.446722][T10442] Dev loop6: unable to read RDB block 0 [ 432.451165][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.487049][ T9] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 432.498210][ T5909] usb 5-1: Product: syz [ 432.502429][ T5909] usb 5-1: Manufacturer: syz [ 432.512312][T10442] loop6: unable to read partition table [ 432.521164][ T9] usb 1-1: device descriptor read/8, error -71 [ 432.537006][ T5909] usb 5-1: SerialNumber: syz [ 432.537689][T10442] loop_reread_partitions: partition scan of loop6 (3Ÿ Ÿ‚³˜) failed (rc=-5) [ 432.554550][ T5909] usb 5-1: config 0 descriptor?? [ 432.595457][ T5909] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 432.680869][T10448] loop6: detected capacity change from 0 to 2640 [ 432.710544][ T7132] ldm_validate_partition_table(): Disk read failed. [ 432.734852][ T7132] Dev loop6: unable to read RDB block 0 [ 432.753109][ T7132] loop6: unable to read partition table [ 432.776235][ T24] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 432.776487][ T9] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 432.800884][T10448] ldm_validate_partition_table(): Disk read failed. [ 432.818428][ T9] usb 1-1: device descriptor read/8, error -71 [ 432.825633][ T5909] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 432.842512][ T5909] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 432.844686][T10448] Dev loop6: unable to read RDB block 0 [ 432.881098][T10448] loop6: unable to read partition table [ 432.896161][T10448] loop_reread_partitions: partition scan of loop6 (3Ÿ Ÿ‚³˜) failed (rc=-5) [ 432.936666][ T9] usb usb1-port1: unable to enumerate USB device [ 432.976929][ T24] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 432.985965][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 433.111123][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 433.154834][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 433.213045][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 433.267902][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 433.288523][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 433.327409][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 433.353547][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 433.380182][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 433.401762][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 433.577187][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 433.675936][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 433.724797][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 433.736318][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 433.753430][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 433.766112][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 433.782580][ T24] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 433.792452][ T24] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 433.803276][ T24] usb 3-1: Product: syz [ 433.807556][ T24] usb 3-1: Manufacturer: syz [ 433.813006][ T24] usb 3-1: SerialNumber: syz [ 433.827372][ T24] usb 3-1: config 0 descriptor?? [ 433.850268][ T24] yurex 3-1:0.0: Could not find endpoints [ 434.093945][ T24] usb 3-1: USB disconnect, device number 51 [ 434.316597][ T6499] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 434.486101][ T6499] usb 4-1: Using ep0 maxpacket: 32 [ 434.512335][ T6499] usb 4-1: config 0 has an invalid interface number: 210 but max is 0 [ 434.512371][ T6499] usb 4-1: config 0 has no interface number 0 [ 434.512418][ T6499] usb 4-1: config 0 interface 210 has no altsetting 0 [ 434.512459][ T6499] usb 4-1: New USB device found, idVendor=05c6, idProduct=9001, bcdDevice=76.e3 [ 434.512485][ T6499] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.517528][ T6499] usb 4-1: config 0 descriptor?? [ 434.858197][T10454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.858974][T10454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.861006][T10454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.861378][T10454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.902843][ T6499] usb 4-1: string descriptor 0 read error: -71 [ 434.920157][ T6499] usb 4-1: USB disconnect, device number 65 [ 434.949321][T10469] ipvlan0: entered promiscuous mode [ 435.468936][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 435.469465][ T9] usb 5-1: USB disconnect, device number 82 [ 435.474129][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 435.539249][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 435.540065][ T9] quatech2 5-1:0.51: device disconnected [ 435.662225][T10459] loop6: detected capacity change from 0 to 524287999 [ 435.689424][T10464] ipvlan0: left promiscuous mode [ 435.917730][T10481] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1383'. [ 435.931943][T10481] netlink: 277 bytes leftover after parsing attributes in process `syz.2.1383'. [ 435.941272][T10481] netlink: 277 bytes leftover after parsing attributes in process `syz.2.1383'. [ 436.036288][T10480] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1384'. [ 436.056023][T10480] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1384'. [ 436.289584][T10489] bond0: option xmit_hash_policy: invalid value (8) [ 436.368037][ T9] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 436.556669][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 436.566240][ T5909] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 436.585303][ T9] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 436.604458][ T9] usb 3-1: config 0 has no interface number 0 [ 436.620083][ T9] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 436.646015][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.646599][ T9] usb 3-1: Product: syz [ 436.646620][ T9] usb 3-1: Manufacturer: syz [ 436.646638][ T9] usb 3-1: SerialNumber: syz [ 436.649927][ T9] usb 3-1: config 0 descriptor?? [ 436.688537][ T9] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 436.738928][ T5909] usb 5-1: Using ep0 maxpacket: 16 [ 436.767162][ T5909] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 436.767188][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.767210][ T5909] usb 5-1: Product: syz [ 436.767227][ T5909] usb 5-1: Manufacturer: syz [ 436.767244][ T5909] usb 5-1: SerialNumber: syz [ 436.770087][ T5909] usb 5-1: config 0 descriptor?? [ 436.795395][ T5909] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 436.796879][ T5909] usb 5-1: Detected FT-X [ 436.913233][ T9] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 436.945637][ T9] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB2 [ 436.993436][ T5909] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 436.993875][ T5909] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 436.994457][ T5909] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 437.000852][ T5909] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 437.020443][ T5909] usb 5-1: USB disconnect, device number 83 [ 437.098145][ T5909] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 437.098725][ T5909] ftdi_sio 5-1:0.0: device disconnected [ 438.463624][T10511] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1393'. [ 438.635389][T10519] tipc: Enabling of bearer rejected, failed to enable media [ 439.481294][T10531] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1395'. [ 439.513202][T10531] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1395'. [ 439.524122][T10531] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1395'. [ 439.709612][T10533] netlink: 'syz.0.1399': attribute type 3 has an invalid length. [ 439.744240][T10533] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1399'. [ 439.926283][ T5909] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 439.982274][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 439.982710][ T24] usb 3-1: USB disconnect, device number 52 [ 440.210828][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.271392][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.294433][ T24] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 440.305979][ T5909] usb 4-1: Using ep0 maxpacket: 32 [ 440.336981][T10542] FAULT_INJECTION: forcing a failure. [ 440.336981][T10542] name failslab, interval 1, probability 0, space 0, times 0 [ 440.351695][T10542] CPU: 0 UID: 0 PID: 10542 Comm: syz.4.1401 Not tainted syzkaller #0 PREEMPT(full) [ 440.351721][T10542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 440.351735][T10542] Call Trace: [ 440.351743][T10542] [ 440.351752][T10542] dump_stack_lvl+0x189/0x250 [ 440.351787][T10542] ? __pfx____ratelimit+0x10/0x10 [ 440.351817][T10542] ? __pfx_dump_stack_lvl+0x10/0x10 [ 440.351838][T10542] ? __pfx__printk+0x10/0x10 [ 440.351868][T10542] ? __pfx___might_resched+0x10/0x10 [ 440.351889][T10542] ? fs_reclaim_acquire+0x7d/0x100 [ 440.351915][T10542] should_fail_ex+0x414/0x560 [ 440.351947][T10542] should_failslab+0xa8/0x100 [ 440.351972][T10542] __kmalloc_noprof+0xcb/0x7e0 [ 440.351999][T10542] ? fib_create_info+0x171d/0x31f0 [ 440.352026][T10542] fib_create_info+0x171d/0x31f0 [ 440.352052][T10542] ? rcu_is_watching+0x15/0xb0 [ 440.352079][T10542] ? __mutex_lock+0x335/0x1350 [ 440.352100][T10542] ? nlmon_xmit+0xb0/0x100 [ 440.352132][T10542] fib_table_insert+0xc6/0x1b50 [ 440.352155][T10542] ? lwtunnel_valid_encap_type+0xb7/0x210 [ 440.352181][T10542] ? __pfx___mutex_lock+0x10/0x10 [ 440.352198][T10542] ? rtm_to_fib_config+0x1086/0x13c0 [ 440.352251][T10542] inet_rtm_newroute+0x12b/0x210 [ 440.352285][T10542] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 440.352337][T10542] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 440.352366][T10542] rtnetlink_rcv_msg+0x7cf/0xb70 [ 440.352398][T10542] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 440.352425][T10542] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 440.352449][T10542] ? ref_tracker_free+0x63a/0x7d0 [ 440.352475][T10542] ? __asan_memcpy+0x40/0x70 [ 440.352502][T10542] ? __pfx_ref_tracker_free+0x10/0x10 [ 440.352525][T10542] ? __skb_clone+0x63/0x7a0 [ 440.352555][T10542] netlink_rcv_skb+0x208/0x470 [ 440.352586][T10542] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 440.352615][T10542] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 440.352657][T10542] ? netlink_deliver_tap+0x2e/0x1b0 [ 440.352696][T10542] netlink_unicast+0x82f/0x9e0 [ 440.352733][T10542] ? __pfx_netlink_unicast+0x10/0x10 [ 440.352761][T10542] ? netlink_sendmsg+0x642/0xb30 [ 440.352797][T10542] ? skb_put+0x11b/0x210 [ 440.352829][T10542] netlink_sendmsg+0x805/0xb30 [ 440.352869][T10542] ? __pfx_netlink_sendmsg+0x10/0x10 [ 440.352901][T10542] ? __import_iovec+0x5d4/0x7f0 [ 440.352919][T10542] ? aa_sock_msg_perm+0xf1/0x1b0 [ 440.352945][T10542] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 440.352966][T10542] ? __pfx_netlink_sendmsg+0x10/0x10 [ 440.352996][T10542] __sock_sendmsg+0x21c/0x270 [ 440.353024][T10542] ____sys_sendmsg+0x505/0x820 [ 440.353059][T10542] ? __pfx_____sys_sendmsg+0x10/0x10 [ 440.353095][T10542] ? kstrtouint+0x6e/0xe0 [ 440.353130][T10542] ___sys_sendmsg+0x21f/0x2a0 [ 440.353163][T10542] ? __pfx____sys_sendmsg+0x10/0x10 [ 440.353199][T10542] ? rcu_read_lock_any_held+0xb3/0x120 [ 440.353254][T10542] ? __fget_files+0x2a/0x420 [ 440.353276][T10542] ? __fget_files+0x3a0/0x420 [ 440.353311][T10542] __sys_sendmsg+0x164/0x220 [ 440.353342][T10542] ? __pfx___sys_sendmsg+0x10/0x10 [ 440.353384][T10542] ? __pfx_ksys_write+0x10/0x10 [ 440.353417][T10542] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 440.353439][T10542] ? lockdep_hardirqs_on+0x98/0x140 [ 440.353472][T10542] __do_fast_syscall_32+0xb6/0x300 [ 440.353494][T10542] ? lockdep_hardirqs_on+0x98/0x140 [ 440.353527][T10542] do_fast_syscall_32+0x34/0x80 [ 440.353548][T10542] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 440.353572][T10542] RIP: 0023:0xf7f91539 [ 440.353591][T10542] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 440.353609][T10542] RSP: 002b:00000000f548655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 440.353632][T10542] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 440.353647][T10542] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 440.353660][T10542] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 440.353672][T10542] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 440.353685][T10542] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 440.353719][T10542] [ 440.757873][ C0] vkms_vblank_simulate: vblank timer overrun [ 440.796111][ T24] quatech-serial ttyUSB2: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB2 [ 440.844920][ T24] quatech2 3-1:0.51: device disconnected [ 440.853668][ T5909] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 440.890149][ T5909] usb 4-1: config 0 has no interface number 0 [ 441.034458][ T5909] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 441.096127][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.104154][ T5909] usb 4-1: Product: syz [ 441.149061][ T5909] usb 4-1: Manufacturer: syz [ 441.153751][ T5909] usb 4-1: SerialNumber: syz [ 441.217632][ T5909] usb 4-1: config 0 descriptor?? [ 441.267895][ T5909] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 441.442137][ T5909] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 441.455142][ T5909] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 442.286807][ T6499] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 442.486185][ T6499] usb 5-1: Using ep0 maxpacket: 8 [ 442.499853][ T6499] usb 5-1: unable to get BOS descriptor or descriptor too short [ 442.525229][ T6499] usb 5-1: config 8 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 8 [ 442.551969][T10566] __nla_validate_parse: 3 callbacks suppressed [ 442.551990][T10566] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1410'. [ 442.554313][ T6499] usb 5-1: config 8 interface 0 has no altsetting 0 [ 442.613165][ T6499] usb 5-1: New USB device found, idVendor=0005, idProduct=0000, bcdDevice= 0.00 [ 442.626224][ T5909] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 442.634415][ T6499] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 442.642663][T10566] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1410'. [ 442.662070][ T6499] usb 5-1: SerialNumber: syz [ 442.687509][T10558] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 442.793132][ T5909] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 442.817763][ T5909] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 442.833856][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.842600][ T5909] usb 2-1: Product: syz [ 442.848051][ T5909] usb 2-1: Manufacturer: syz [ 442.893631][ T5909] usb 2-1: SerialNumber: syz [ 442.916364][ T5909] usb 2-1: config 0 descriptor?? [ 442.937045][ T5909] streamzap 2-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 442.972668][ T6499] usb 5-1: USB disconnect, device number 84 [ 443.187925][ T5909] usb 2-1: USB disconnect, device number 47 [ 443.515176][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 443.523316][ T5909] usb 4-1: USB disconnect, device number 66 [ 443.538288][ T5909] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 443.662470][ T5909] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 443.678061][ T5909] quatech2 4-1:0.51: device disconnected [ 443.776617][T10569] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1411'. [ 443.936299][T10569] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1411'. [ 444.069236][T10575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1413'. [ 444.494040][T10572] block device autoloading is deprecated and will be removed. [ 444.754896][T10592] netlink: 'syz.1.1416': attribute type 16 has an invalid length. [ 444.763073][T10592] netlink: 'syz.1.1416': attribute type 17 has an invalid length. [ 444.772487][T10592] lo: entered promiscuous mode [ 444.779101][T10592] lo: entered allmulticast mode [ 444.794986][T10592] tunl0: entered promiscuous mode [ 444.802290][T10592] tunl0: entered allmulticast mode [ 444.824732][T10592] gre0: entered promiscuous mode [ 444.846013][T10592] gre0: entered allmulticast mode [ 444.858800][T10592] gretap0: entered promiscuous mode [ 444.865698][T10592] gretap0: entered allmulticast mode [ 444.879941][T10592] erspan0: entered promiscuous mode [ 444.885584][T10592] erspan0: entered allmulticast mode [ 444.908982][T10592] ip_vti0: entered promiscuous mode [ 444.914423][T10592] ip_vti0: entered allmulticast mode [ 444.938852][T10592] ip6_vti0: entered promiscuous mode [ 444.945860][T10592] ip6_vti0: entered allmulticast mode [ 444.959531][T10592] sit0: entered promiscuous mode [ 444.965519][T10592] sit0: entered allmulticast mode [ 444.980829][T10592] ip6tnl0: entered promiscuous mode [ 444.987791][T10592] ip6tnl0: entered allmulticast mode [ 445.003916][T10592] ip6gre0: entered promiscuous mode [ 445.011566][T10592] ip6gre0: entered allmulticast mode [ 445.027316][T10592] syz_tun: entered promiscuous mode [ 445.034219][T10592] syz_tun: entered allmulticast mode [ 445.049601][T10592] ip6gretap0: entered promiscuous mode [ 445.055889][T10592] ip6gretap0: entered allmulticast mode [ 445.073467][T10592] bridge0: entered promiscuous mode [ 445.080758][T10592] bridge0: entered allmulticast mode [ 445.091662][T10592] bond0: entered promiscuous mode [ 445.097171][T10592] bond0: entered allmulticast mode [ 445.110913][T10592] dummy0: entered promiscuous mode [ 445.118578][T10592] dummy0: entered allmulticast mode [ 445.133357][T10592] nlmon0: entered promiscuous mode [ 445.139216][T10592] nlmon0: entered allmulticast mode [ 445.218320][T10592] caif0: entered promiscuous mode [ 445.224540][T10592] caif0: entered allmulticast mode [ 445.230004][T10592] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 445.365302][T10601] IPv6: addrconf: prefix option has invalid lifetime [ 445.426261][ T5909] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 445.659458][ T5909] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 445.668622][ T5909] usb 1-1: config 1 has no interface number 0 [ 445.674877][ T5909] usb 1-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 445.708884][ T5909] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 445.739293][ T5909] usb 1-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 445.789218][ T5909] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 445.821330][ T5909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.836223][ T5909] usb 1-1: Product: syz [ 445.847320][ T5909] usb 1-1: Manufacturer: syz [ 445.857786][ T5909] usb 1-1: SerialNumber: syz [ 445.880140][T10595] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 445.900096][ T5909] usb 1-1: Expected 3 endpoints, found: 2 [ 445.906214][ T24] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 446.148019][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 446.159665][ T24] usb 4-1: config 81 has an invalid descriptor of length 0, skipping remainder of the config [ 446.183314][ T24] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice=68.0d [ 446.196188][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.206614][ T24] usb 4-1: Product: syz [ 446.210825][ T24] usb 4-1: Manufacturer: syz [ 446.216139][ T24] usb 4-1: SerialNumber: syz [ 446.371202][T10611] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1420'. [ 446.446170][T10611] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1420'. [ 446.517170][T10614] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1420'. [ 446.794632][T10615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.807784][ T24] usb 4-1: cannot find UAC_HEADER [ 446.816616][T10615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.913803][ T24] snd-usb-audio 4-1:81.0: probe with driver snd-usb-audio failed with error -22 [ 446.953330][ T24] usb 4-1: USB disconnect, device number 67 [ 446.985519][ T7132] udevd[7132]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:81.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 447.011308][T10615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.027242][T10615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.101121][T10615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.115994][T10615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.165798][T10615] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1419'. [ 447.557320][ T30] audit: type=1326 audit(1764711465.014:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10620 comm="syz.4.1428" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91539 code=0x7ffc0000 [ 447.654720][ T30] audit: type=1326 audit(1764711465.014:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10620 comm="syz.4.1428" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91539 code=0x7ffc0000 [ 447.676730][ C1] vkms_vblank_simulate: vblank timer overrun [ 447.717278][ T30] audit: type=1326 audit(1764711465.014:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10620 comm="syz.4.1428" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf7f91539 code=0x7ffc0000 [ 447.739397][ C1] vkms_vblank_simulate: vblank timer overrun [ 447.763841][ T30] audit: type=1326 audit(1764711465.014:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10620 comm="syz.4.1428" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91539 code=0x7ffc0000 [ 447.893173][ T30] audit: type=1326 audit(1764711465.014:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10620 comm="syz.4.1428" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91539 code=0x7ffc0000 [ 448.211805][T10635] netlink: 'syz.3.1431': attribute type 10 has an invalid length. [ 448.343337][ T30] audit: type=1326 audit(1764711465.014:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10620 comm="syz.4.1428" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f91539 code=0x7ffc0000 [ 448.435760][ T30] audit: type=1326 audit(1764711465.014:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10620 comm="syz.4.1428" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91539 code=0x7ffc0000 [ 448.473208][ T30] audit: type=1326 audit(1764711465.014:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10620 comm="syz.4.1428" exe="/root/syz-executor" sig=0 arch=40000003 syscall=228 compat=1 ip=0xf7f91539 code=0x7ffc0000 [ 448.531884][ T5909] usb 1-1: USB disconnect, device number 59 [ 448.632841][ T30] audit: type=1326 audit(1764711465.014:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10620 comm="syz.4.1428" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91539 code=0x7ffc0000 [ 448.658552][ T30] audit: type=1326 audit(1764711465.024:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10620 comm="syz.4.1428" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f91539 code=0x7ffc0000 [ 448.808710][T10647] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1444'. [ 448.855522][T10647] netlink: 'syz.0.1444': attribute type 13 has an invalid length. [ 448.864086][T10647] netlink: 'syz.0.1444': attribute type 17 has an invalid length. [ 448.964103][T10647] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 449.024141][T10653] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1434'. [ 449.057166][T10653] netlink: 277 bytes leftover after parsing attributes in process `syz.2.1434'. [ 449.079494][T10653] netlink: 277 bytes leftover after parsing attributes in process `syz.2.1434'. [ 449.407150][ T9] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 449.556213][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 449.574640][ T9] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 449.574677][ T9] usb 3-1: config 0 has no interface number 0 [ 449.622467][ T9] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 449.622504][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.622528][ T9] usb 3-1: Product: syz [ 449.622544][ T9] usb 3-1: Manufacturer: syz [ 449.622559][ T9] usb 3-1: SerialNumber: syz [ 449.629583][ T9] usb 3-1: config 0 descriptor?? [ 449.648300][ T9] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 449.865676][ T9] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 449.871995][ T9] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 452.145943][T10683] 8021q: VLANs not supported on vcan0 [ 452.713078][T10693] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1445'. [ 452.837658][T10693] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1445'. [ 453.134699][T10696] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1447'. [ 453.182885][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 453.205778][ T5909] usb 3-1: USB disconnect, device number 53 [ 453.253939][ T5909] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 453.449746][ T5909] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 453.471765][T10696] netlink: 'syz.1.1447': attribute type 13 has an invalid length. [ 453.494546][T10696] netlink: 'syz.1.1447': attribute type 17 has an invalid length. [ 453.526983][ T5909] quatech2 3-1:0.51: device disconnected [ 453.568889][T10696] lo: left promiscuous mode [ 453.573497][T10696] lo: left allmulticast mode [ 453.579081][T10696] tunl0: left promiscuous mode [ 453.584012][T10696] tunl0: left allmulticast mode [ 453.649804][T10691] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1446'. [ 453.653986][T10696] gre0: left promiscuous mode [ 453.698508][T10691] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1446'. [ 453.750038][T10696] gre0: left allmulticast mode [ 453.807439][T10696] gretap0: left promiscuous mode [ 453.869478][T10696] gretap0: left allmulticast mode [ 453.919452][T10696] erspan0: left promiscuous mode [ 453.959643][T10696] erspan0: left allmulticast mode [ 453.984065][T10696] ip_vti0: left promiscuous mode [ 453.995386][T10696] ip_vti0: left allmulticast mode [ 454.020785][T10696] ip6_vti0: left promiscuous mode [ 454.027221][T10696] ip6_vti0: left allmulticast mode [ 454.035446][T10696] sit0: left promiscuous mode [ 454.040865][T10696] sit0: left allmulticast mode [ 454.047223][T10696] ip6tnl0: left promiscuous mode [ 454.052400][T10696] ip6tnl0: left allmulticast mode [ 454.064726][T10696] ip6gre0: left promiscuous mode [ 454.076576][T10696] ip6gre0: left allmulticast mode [ 454.094331][T10696] syz_tun: left promiscuous mode [ 454.101619][T10696] syz_tun: left allmulticast mode [ 454.133411][T10710] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1450'. [ 454.148294][T10710] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1450'. [ 454.157652][T10710] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1450'. [ 454.323416][T10696] ip6gretap0: left promiscuous mode [ 454.357996][T10696] ip6gretap0: left allmulticast mode [ 454.376988][T10713] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1453'. [ 454.377383][T10696] bridge0: left promiscuous mode [ 454.398688][T10713] netlink: 'syz.0.1453': attribute type 13 has an invalid length. [ 454.399576][T10696] bridge0: left allmulticast mode [ 454.416451][T10713] netlink: 'syz.0.1453': attribute type 17 has an invalid length. [ 454.417223][T10696] bond0: left promiscuous mode [ 454.436492][ T5926] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 454.495869][T10696] bond0: left allmulticast mode [ 454.524277][T10696] dummy0: left promiscuous mode [ 454.546204][T10696] dummy0: left allmulticast mode [ 454.564356][T10696] nlmon0: left promiscuous mode [ 454.596166][T10696] nlmon0: left allmulticast mode [ 454.609266][ T5926] usb 5-1: Using ep0 maxpacket: 32 [ 454.628558][ T5926] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 454.636931][ T5926] usb 5-1: config 0 has no interface number 0 [ 454.662871][ T5926] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 454.677873][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.690285][ T5926] usb 5-1: Product: syz [ 454.694673][ T5926] usb 5-1: Manufacturer: syz [ 454.700478][ T5926] usb 5-1: SerialNumber: syz [ 454.709415][ T5926] usb 5-1: config 0 descriptor?? [ 454.733028][ T5926] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 454.751900][T10696] caif0: left promiscuous mode [ 454.935178][T10696] caif0: left allmulticast mode [ 454.944941][ T5926] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 454.969239][ T5926] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 455.012426][T10696] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 455.238172][T10713] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 457.475189][T10735] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1458'. [ 457.490473][T10735] netlink: 277 bytes leftover after parsing attributes in process `syz.2.1458'. [ 457.500096][T10735] netlink: 277 bytes leftover after parsing attributes in process `syz.2.1458'. [ 458.173402][ T5928] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 458.346144][ T5928] usb 3-1: Using ep0 maxpacket: 32 [ 458.354361][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 458.363893][ T5926] usb 5-1: USB disconnect, device number 85 [ 458.389856][ T5926] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 458.459528][ T5926] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 458.553723][ T5926] quatech2 5-1:0.51: device disconnected [ 458.671691][ T5928] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 458.772942][ T5928] usb 3-1: config 0 has no interface number 0 [ 458.850051][ T5928] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 458.866169][ T5928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.879131][ T5928] usb 3-1: Product: syz [ 458.883356][ T5928] usb 3-1: Manufacturer: syz [ 458.892813][ T5928] usb 3-1: SerialNumber: syz [ 459.065121][ T5928] usb 3-1: config 0 descriptor?? [ 459.257611][ T5928] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 459.923059][ T5205] Dev loop7: unable to read RDB block 8 [ 460.003485][ T5205] loop7: unable to read partition table [ 460.009398][ T5205] loop7: partition table beyond EOD, truncated [ 460.292504][T10758] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1463'. [ 460.315364][T10758] netlink: 277 bytes leftover after parsing attributes in process `syz.1.1463'. [ 460.335252][T10758] netlink: 277 bytes leftover after parsing attributes in process `syz.1.1463'. [ 460.360165][T10748] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1460'. [ 460.369458][T10748] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1460'. [ 460.756167][ T5909] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 460.916388][ T5909] usb 2-1: Using ep0 maxpacket: 32 [ 461.039927][ T5909] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 461.057264][ T5909] usb 2-1: config 0 has no interface number 0 [ 461.514530][ T5909] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 461.514569][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.514630][ T5909] usb 2-1: Product: syz [ 461.514648][ T5909] usb 2-1: Manufacturer: syz [ 461.514665][ T5909] usb 2-1: SerialNumber: syz [ 461.525806][ T5909] usb 2-1: config 0 descriptor?? [ 461.603957][ T5909] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 461.849527][ T5909] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 461.855868][ T5909] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 462.239993][T10782] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1471'. [ 462.250195][T10782] netlink: 'syz.0.1471': attribute type 13 has an invalid length. [ 462.266183][T10782] netlink: 'syz.0.1471': attribute type 17 has an invalid length. [ 462.413758][ T5928] usb 3-1: qt2_attach - failed to power on unit: -71 [ 462.420652][T10782] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 462.439312][ T5928] quatech2 3-1:0.51: probe with driver quatech2 failed with error -71 [ 462.451492][ T5928] usb 3-1: USB disconnect, device number 54 [ 463.394750][T10792] bond1: option arp_all_targets: invalid value (18446744073290121217) [ 463.964504][T10792] bond1 (unregistering): Released all slaves [ 464.635037][T10801] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1475'. [ 464.766305][T10801] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1475'. [ 466.294645][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 466.295098][ T5926] usb 2-1: USB disconnect, device number 48 [ 466.505323][ T5926] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 466.570742][ T5926] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 466.593279][ T5926] quatech2 2-1:0.51: device disconnected [ 467.289295][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 467.289318][ T30] audit: type=1326 audit(1764711484.924:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10819 comm="syz.0.1482" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 467.550012][ T30] audit: type=1326 audit(1764711484.924:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10819 comm="syz.0.1482" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 467.690057][ T30] audit: type=1326 audit(1764711484.924:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10819 comm="syz.0.1482" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 467.713051][ T30] audit: type=1326 audit(1764711484.924:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10819 comm="syz.0.1482" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 467.752550][ T30] audit: type=1326 audit(1764711484.924:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10819 comm="syz.0.1482" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 467.822428][ T30] audit: type=1326 audit(1764711484.934:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10819 comm="syz.0.1482" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 468.122680][ T30] audit: type=1326 audit(1764711484.934:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10819 comm="syz.0.1482" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 468.209639][ T30] audit: type=1326 audit(1764711484.934:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10819 comm="syz.0.1482" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 468.333740][ T30] audit: type=1326 audit(1764711484.934:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10819 comm="syz.0.1482" exe="/root/syz-executor" sig=0 arch=40000003 syscall=228 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 468.391314][ T30] audit: type=1326 audit(1764711484.934:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10819 comm="syz.0.1482" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 468.556489][ T5909] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 468.633697][T10842] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1488'. [ 468.665021][T10842] netlink: 'syz.1.1488': attribute type 13 has an invalid length. [ 468.683866][T10842] netlink: 'syz.1.1488': attribute type 17 has an invalid length. [ 468.719438][T10842] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 468.740626][ T5909] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 468.748940][ T5909] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 468.770103][ T5909] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 468.796115][ T5909] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 468.816176][ T5909] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 468.841796][ T5909] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 468.873066][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.909294][ T5909] usb 4-1: config 0 descriptor?? [ 468.920880][T10838] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 469.143607][T10859] tipc: Enabled bearer , priority 0 [ 469.330271][T10864] syzkaller0: entered allmulticast mode [ 469.342724][T10859] tipc: Resetting bearer [ 469.372152][T10858] tipc: Disabling bearer [ 469.521266][ T9] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 469.541384][ T5909] plantronics 0003:047F:FFFF.0029: reserved main item tag 0xd [ 469.564258][ T5909] plantronics 0003:047F:FFFF.0029: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 469.603047][T10867] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1495'. [ 469.613721][T10867] netlink: 277 bytes leftover after parsing attributes in process `syz.2.1495'. [ 469.623583][T10867] netlink: 277 bytes leftover after parsing attributes in process `syz.2.1495'. [ 469.716986][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 469.724744][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 469.771211][ T9] usb 5-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=46.08 [ 469.801976][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.836469][ T9] usb 5-1: Product: syz [ 469.840687][ T9] usb 5-1: Manufacturer: syz [ 469.845355][ T9] usb 5-1: SerialNumber: syz [ 470.022512][ T9] usb 5-1: config 0 descriptor?? [ 470.142927][ T9] comedi comedi5: Wrong number of endpoints [ 470.169991][ T9] dt9812 5-1:0.0: driver 'dt9812' failed to auto-configure device. [ 470.284503][T10857] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 470.422699][ T9] usb 5-1: USB disconnect, device number 86 [ 470.612015][ T5909] usb 4-1: USB disconnect, device number 68 [ 471.016184][ T5909] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 471.176777][T10885] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 471.203116][ T5909] usb 4-1: config 0 interface 0 altsetting 12 endpoint 0x87 has an invalid bInterval 102, changing to 10 [ 471.225116][ T5909] usb 4-1: config 0 interface 0 altsetting 12 endpoint 0x87 has invalid maxpacket 24624, setting to 1024 [ 471.237895][T10885] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 471.260009][ T5909] usb 4-1: config 0 interface 0 has no altsetting 0 [ 471.292226][ T5909] usb 4-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 471.315275][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.334971][ T5909] usb 4-1: Product: syz [ 471.346176][ T5909] usb 4-1: Manufacturer: syz [ 471.366349][ T5909] usb 4-1: SerialNumber: syz [ 471.443436][ T5909] usb 4-1: config 0 descriptor?? [ 471.468516][ T5909] keyspan 4-1:0.0: Keyspan 2 port adapter converter detected [ 471.517115][ T5909] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 7 [ 471.556829][ T5909] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81 [ 471.564659][ T5909] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1 [ 471.630537][T10887] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1502'. [ 471.655536][ T5909] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2 [ 471.674390][ T5909] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 85 [ 471.692167][ T5909] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 5 [ 471.706667][T10882] geneve1: entered promiscuous mode [ 471.720270][ T5909] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 471.729844][T10882] geneve1: entered allmulticast mode [ 471.765081][ T5909] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 83 [ 471.775124][T10892] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 471.811939][ T5909] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 3 [ 471.819222][ T5948] [ 471.821912][ T5948] ============================================ [ 471.828052][ T5948] WARNING: possible recursive locking detected [ 471.834191][ T5948] syzkaller #0 Not tainted [ 471.838612][ T5948] -------------------------------------------- [ 471.844746][ T5948] kworker/u8:15/5948 is trying to acquire lock: [ 471.850967][ T5948] ffffe8ffffd50aa8 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x707/0xb80 [ 471.860204][ T5948] [ 471.860204][ T5948] but task is already holding lock: [ 471.867561][ T5948] ffffe8ffffd544c8 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x590/0xb80 [ 471.876794][ T5948] [ 471.876794][ T5948] other info that might help us debug this: [ 471.884844][ T5948] Possible unsafe locking scenario: [ 471.884844][ T5948] [ 471.892276][ T5948] CPU0 [ 471.895545][ T5948] ---- [ 471.898807][ T5948] lock(&pd_list->lock); [ 471.903139][ T5948] lock(&pd_list->lock); [ 471.907458][ T5948] [ 471.907458][ T5948] *** DEADLOCK *** [ 471.907458][ T5948] [ 471.915596][ T5948] May be due to missing lock nesting notation [ 471.915596][ T5948] [ 471.923899][ T5948] 3 locks held by kworker/u8:15/5948: [ 471.929257][ T5948] #0: ffff88801fb92948 ((wq_completion)pencrypt_parallel){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 471.941176][ T5948] #1: ffffc90004b0fb80 ((work_completion)(&pw->pw_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 471.953017][ T5948] #2: ffffe8ffffd544c8 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x590/0xb80 [ 471.962679][ T5948] [ 471.962679][ T5948] stack backtrace: [ 471.968558][ T5948] CPU: 0 UID: 0 PID: 5948 Comm: kworker/u8:15 Not tainted syzkaller #0 PREEMPT(full) [ 471.968574][ T5948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 471.968584][ T5948] Workqueue: pencrypt_parallel padata_parallel_worker [ 471.968603][ T5948] Call Trace: [ 471.968611][ T5948] [ 471.968617][ T5948] dump_stack_lvl+0x189/0x250 [ 471.968632][ T5948] ? __pfx_dump_stack_lvl+0x10/0x10 [ 471.968644][ T5948] ? __pfx__printk+0x10/0x10 [ 471.968660][ T5948] ? print_lock_name+0xde/0x100 [ 471.968676][ T5948] print_deadlock_bug+0x279/0x290 [ 471.968690][ T5948] __lock_acquire+0x2540/0x2cf0 [ 471.968710][ T5948] ? queue_work_on+0x1ed/0x270 [ 471.968721][ T5948] ? queue_work_on+0x1f7/0x270 [ 471.968733][ T5948] ? padata_do_serial+0x707/0xb80 [ 471.968746][ T5948] lock_acquire+0x117/0x340 [ 471.968763][ T5948] ? padata_do_serial+0x707/0xb80 [ 471.968780][ T5948] _raw_spin_lock+0x2e/0x40 [ 471.968796][ T5948] ? padata_do_serial+0x707/0xb80 [ 471.968810][ T5948] padata_do_serial+0x707/0xb80 [ 471.968828][ T5948] ? padata_parallel_worker+0x44/0x1d0 [ 471.968842][ T5948] padata_parallel_worker+0x75/0x1d0 [ 471.968857][ T5948] ? process_scheduled_works+0x9ef/0x1770 [ 471.968874][ T5948] process_scheduled_works+0xad1/0x1770 [ 471.968896][ T5948] ? __pfx_process_scheduled_works+0x10/0x10 [ 471.968916][ T5948] worker_thread+0x8a0/0xda0 [ 471.968927][ T5948] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 471.968946][ T5948] ? __kthread_parkme+0x7b/0x200 [ 471.968959][ T5948] kthread+0x711/0x8a0 [ 471.968972][ T5948] ? __pfx_worker_thread+0x10/0x10 [ 471.968983][ T5948] ? __pfx_kthread+0x10/0x10 [ 471.968996][ T5948] ? _raw_spin_unlock_irq+0x23/0x50 [ 471.969011][ T5948] ? lockdep_hardirqs_on+0x98/0x140 [ 471.969026][ T5948] ? __pfx_kthread+0x10/0x10 [ 471.969039][ T5948] ret_from_fork+0x52d/0xa60 [ 471.969056][ T5948] ? __pfx_ret_from_fork+0x10/0x10 [ 471.969074][ T5948] ? __switch_to_asm+0x39/0x70 [ 471.969087][ T5948] ? __switch_to_asm+0x33/0x70 [ 471.969100][ T5948] ? __pfx_kthread+0x10/0x10 [ 471.969112][ T5948] ret_from_fork_asm+0x1a/0x30 [ 471.969130][ T5948] [ 472.175805][ T5909] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 4 [ 472.183502][ T5909] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 86 [ 472.191302][ T5909] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 6 [ 472.237040][ T5909] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 472.278776][ T5909] usb 4-1: USB disconnect, device number 69 [ 472.308825][ T5909] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 472.337177][ T5909] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 472.356684][ T5909] keyspan 4-1:0.0: device disconnected [ 472.456144][ T6499] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 472.596201][ T6499] usb 1-1: device descriptor read/64, error -71 [ 472.836197][ T6499] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 472.966238][ T6499] usb 1-1: device descriptor read/64, error -71 [ 473.076625][ T6499] usb usb1-port1: attempt power cycle [ 473.416376][ T6499] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 473.436959][ T6499] usb 1-1: device descriptor read/8, error -71 [ 473.676169][ T6499] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 473.696633][ T6499] usb 1-1: device descriptor read/8, error -71 [ 473.806592][ T6499] usb usb1-port1: unable to enumerate USB device