last executing test programs: 15.970181155s ago: executing program 0 (id=3651): syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x12) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r2, 0x0, 0x0) r3 = fsopen(&(0x7f0000000040)='fuse\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$inet(r0, &(0x7f0000002c00)={&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000002b40)=[{&(0x7f0000000880)="5ed1d4794aa08eacf34755e11570c2cc8cfe0375adc3e36b1beaecff9deefbdb6dc62d343ff73c717697f42e7aa3248c30e17f5ff500c7e466893c470009c6819c15c0e4304a06751dba5c28282f04ed1e8e5c1f0cb057d90d1a082199a0bee2548d45d28055744bd734545219d4b57ec89515629425c6c21da05e291f7656eabc644b354d64e1d34b3a4bfe98e5fbe7b57050ae40b246c42a48e09a74572937b44a163185324d202fe6d4d50a947a715e8bd2131bee1c28f72725d3a2a7fc42999e751ab0edc443414802ef6829cd57025aeea2d537789403747b6880c508ba43ade95ceea4f28bcb1acde03112afae1bfcccb212528d4cf4120c6e049f74", 0xff}, {&(0x7f0000001880)="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", 0x1000}, {&(0x7f0000002880)="9a7c3e082e6299881d7115304e96eab69848cb001345e924919f15bdbb55c2eddceffdf5aaac7a7ba8d18a2b49cac5aa7e946bc44c18eaa294e17f19518ca77511e35d1f08f5d5aed3227df85a7a23801d84112829f659af96792932d3c135e876208887a31b99aed293ea35e46e415d72f76f2d18c59bdf52320eec50e5027eabdda3d21011c43e997e3e977c2cea74679cb004c13045207d4d969cc5c44d46159347a1df5394", 0xa7}, {&(0x7f0000002940)="349be937a02516e6826b35b15a176982057bd83b36348eef96cda8ab4e00479eb8b086ab4f022b2d39f2", 0x2a}, {&(0x7f0000002980)="9b36ff14b30044a6cca05e1f1f4a486947e4350bf02c94f82e05c9b06a808e056b", 0x21}, {&(0x7f00000029c0)="407cd5a92e35f6a9fe704c4c6819f898a5bb4222427b41bd90698d015aff27579a7cd2011ca30cd37a641cee6ee11387386b991a62388613d48c2f3d9cb34f27cf6aa12a4b59cce3e5d8bc48d22a46341b416d164125f9fb263843fd4fb5e2af58d52f98a5b14146f916c661ceaf91f5a5575038a1d85566ca730828a0ab", 0x7e}, {&(0x7f0000002a40)="443f82a67d3080bfad3616c257e361b391a4cf4a0468c877ec75caa56ea4b9e0e5420d648fb81aea831951b1a963e9ebefe3bc4aa3453c44d1b89c306f5e392669072c47838290e64035961337c2ae0e62e215d72462f1405c691b718d1e42b19b0a329ae19681a056cc8dae4d6c566ae1a8b62d86e6a864c6d80044d656d40da93ad6f624ed1089dcda4150e0d19a5a60969fc128d51d8669cb55a2173c1a418d1a385a87e19db29711b2d462ddee15184c3369a160289908a487d9287c94a897658ff35a24610a98bae7c0ef72b73a11f95e187a9853e4685d0c56e570ac", 0xdf}], 0x7, &(0x7f0000002bc0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x10}}], 0x18}, 0x801) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x629, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0x10002, 0x0, 0x5, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x7c9d, 0x9, 0x8, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x1000]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000040)='\x04]{!\x00', 0x5) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000080)='user_id', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0xfffffffc}, 0x94) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) keyctl$restrict_keyring(0xa, 0xfffffffffffffffc, &(0x7f0000000300)='asymmetric\x00', &(0x7f00000001c0)='\x00\x00\x00\x00\x00\x00\x00A\xbd\x98\x88\xf8\xc8\xa1#\xc5\xae\xe2\x17\xde\x8f2\x90') bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) 11.55121499s ago: executing program 4 (id=3667): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r3, 0x40044160, 0x3) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r4, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x65, &(0x7f00000002c0)=0x4, 0x4) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs={0x3, 0x0, 0x4e20}, 0x6e) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x8000, 0x80, 0x6, 0x1, {{0x7, 0x4, 0x0, 0x0, 0x1c, 0x67, 0x0, 0xb, 0x29, 0x0, @multicast1, @local, {[@lsrr={0x83, 0x7, 0x54, [@initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'ip6tnl0\x00', r5, 0x29, 0xe, 0x0, 0xcbd, 0x0, @local, @empty, 0x1, 0x700, 0x9, 0x7}}) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101701) ioctl$USBDEVFS_CLEAR_HALT(r6, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01002bbd70000e001000540000"], 0x14}, 0x1, 0x0, 0x0, 0x20000850}, 0x4000000) close(r2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) io_uring_setup(0x1684, 0x0) socket$kcm(0x2, 0xa, 0x2) write$tun(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfdef) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r7, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4040010) syz_usb_connect$cdc_ecm(0x2, 0x59, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024700010100800309040007ff02020000052406000005240000000d240f0100000000000000000004241309032407"], 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x20000055, &(0x7f0000000300)={0xa, 0x4001, 0xfffb, @loopback}, 0x1c) 11.304491734s ago: executing program 0 (id=3668): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/69, 0x328000, 0x800, 0x2, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000780)=ANY=[@ANYBLOB="000088640000030000000100000011000fc000000021"], 0xfce) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) syz_usb_connect(0x5, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x300, 0x99, 0x38, 0x26, 0x8, 0x2304, 0x229, 0xd712, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xec, 0x8, 0xd0, 0x22, "", [{{0x9, 0x4, 0xb5, 0x0, 0x0, 0x8, 0x2, 0x50, 0x1}}]}}]}}, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x100000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r4, 0x35}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18a40000000000000000000000000004000000000000000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000400), &(0x7f0000000440)=0x30) 9.828526126s ago: executing program 2 (id=3670): syz_emit_ethernet(0x8e, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb08004500008000000000000190780a010102ac1414aa040090780100000049000000000000ac1e000144140001ac1414bb4e210000ac1e000100000008443c0051e000000100080000e000000200000000ac1414000000000000000600000000000000000000000000ac1e000100000000ac14143e00000000"], 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181603, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000480)=@e={0xff, 0xa, 0xd, 0x40, @SEQ_CONTROLLER=0xfe, 0x10, 0xb, 0x8b}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000000e00"/20, @ANYRES32=0x0, @ANYBLOB="0a0000000028000018003480140035006d6163766c616e310000000000000000140035006d6163766c616e310000000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4000005}, 0x40000) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r1, 0x8008f511, &(0x7f0000000380)) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) syz_open_dev$vbi(&(0x7f0000000340), 0x2, 0x2) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x800, 0x5, 0xc000, 0xe, "0062ba7d8200000016001b000200f705096604"}) r3 = syz_open_pts(r0, 0xa0200) r4 = dup3(r3, r0, 0x0) ioctl$TCSETAF(r4, 0x5408, &(0x7f0000000040)={0x7, 0x4, 0x2, 0xfff, 0x16, "e533991cd00ee11a"}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000100)=@req3={0xa, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x12, r5, 0x0) syz_io_uring_setup(0x48ba, &(0x7f0000000000)={0x0, 0xfdfffffc, 0x20, 0x3, 0x1f3}, &(0x7f0000000080), &(0x7f0000ff4000), 0x0) syz_clone(0x80201000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(0x0, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x2}]) 7.441589844s ago: executing program 0 (id=3676): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(0xffffffffffffffff, 0xc040564b, &(0x7f0000000640)={0x1e, 0x0, 0x100d, 0x1000, 0xffffff62, {0x9, 0x87f}}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x70000) 7.349942199s ago: executing program 4 (id=3678): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) dup(r2) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902"], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) syz_open_dev$loop(&(0x7f0000001180), 0x81, 0x1) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000002100010000000000000000000a000040000000000000000005001600001b0000080017"], 0x2c}, 0x1, 0x0, 0x0, 0x20004894}, 0x20008000) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000000), 0x800) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sched_setattr(0x0, &(0x7f0000000500)={0x38, 0x5, 0x6a, 0x4, 0x3ff, 0x7, 0x7, 0x45f, 0x8, 0x6}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 6.968365005s ago: executing program 0 (id=3680): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002080)=[{{&(0x7f00000001c0)={0xa, 0x4e23, 0x8, @empty, 0x1}, 0x1c, &(0x7f0000001b80)=[{&(0x7f0000000680)="58224e40ea31acfa06ac306b62ca40ec7c10ebb0c482cbdebe3dcab61c59908ba4b04a9ba971a049db6786409bae4e2403c2204597b119ce213d754dc8e038572e275465d7faaa72ad0c9d1c7ce1b4857d6c35c7c1e26a6b6c927e0101c8adf783cc48484000c5369a4b6e9c959bfca181582bae1f4086981ea57f28b49ae53c71e56a35f9f8dfa5567cf6ab690fda5b70af3b19f9edb6d002009b32d770310c8487e355b50b376319628353", 0xac}, {&(0x7f0000000840)="f7a612f60eed32eeb7b54606f3ec834db2f216ba52377df21bcaf320e2c5e3db79d233169e572572e43c4acee38ad6ce62bd567db73b5701c17a82784065b54c522525b5864c5750f609831bb25d681c5a0fba20fcc2681dfb8d9d9001baef89983448ce3e5592adb7c630a2083385be454936c599e53eb6f8f8db511ba751314c2dc506d8d64dcbbfb800a6c2cf978dc035fb6b91ed3c4cd5d8c8fb1b5fdb3d3bab32e53179ae6ef8c9e673301748c57df117a08d36deadc889b9d661ced443690aa6989b34b48b39ef05321fdf732a9c56351affbad34fae8a94449cd1c16efa4bb1", 0xe3}, {&(0x7f0000000940)="ecd9bc521b6ac1b1aec8ecd9201fd0877bc9834abb680eb58e549fc993bdaa2de590172f0a35b5d8e83a115f6e7f522fee96e05da2b77f0897070d7cf34b779ae1008794228195745b39f6316afd14d18296a9f22b3049ebb331fec49fb9b155ac69c2febbebba698f8f7a16f726261bb21727a3b968f6177068707878b0bcbc12cea2cfe5d41f7c0b790434ed9156712d70127f26d7e3d4520175074e4361cdc11a7d7b1e14e472a95c2bb83142e4a95c761edb66933e17af", 0xb9}, {&(0x7f0000000a00)="13611a1cd7d6e6f47845ec9d7088955dfa73d06225a975a4f951d5fb5835428eddc7640f02bd6b05546ff3bb5f5fe81a5442410cd5fd66a17645cece2d982e5f777bb2b1d3a270ecffe20c7d09199d22a0168e", 0x53}, {&(0x7f0000000a80)="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", 0x1000}, {&(0x7f0000001a80)="e519b7572d46123fa490a76e31eec6cb29c1e554b19549877971c4f579bcd6213c9fc0a9a4b6c17effa9a05919b300adbfedf9c221780943a90b7a8390a2c71dc224234f04ca04d2fd61bdee9d48875943abb76449d9cfff2564fe574d4850714ebbc88df709a2022f064f560b5b76cdde80c8fcd8d348c75e662fde00cd9ee65b643444b053ee2e232cc9704b27be26fcc9f6797ee08203488f2eba422b09c8", 0xa0}, {&(0x7f0000001b40)="2df480133a9ece733d338eb0af8264cc82", 0x11}], 0x7}}, {{&(0x7f0000001c00)={0xa, 0x4e22, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0xffffcff0}, 0x1c, &(0x7f0000001e80)=[{&(0x7f0000001c40)="1c4b48000b30d85cb487b08ef89166512a5b61f9940f80d68ef3ad265395241733355f5153204533775075f6427bac63ae241bf3e26db2901a1f7cd9d66ca3e1547e13b0072057ca7acb2e6c17b90c70af3732434a0156a2e3be0b9f9baa1d23d9cfe4d4875e0bfcaebd3d683bccd6d923b2eb64f4b139a6047bf95cecb550af185da7c55bb163938abd81b23c4eadc9506bd7c5187d143d5f062b887ed1359da395573b9b3825ed362413fc59c98ec2c3072514c19444299e0ea8249dbb932fb6923f978731ad2cf07a9547fc7099305c20ec3a76374b", 0xd7}, {&(0x7f0000001d40)="712fa91c0d78f8a9f961b3af423fd9dedbf946379feb3c33bdeb619ca4f08ca09e93db771fa3f01af28d015be2a94dfca79c", 0x32}, {&(0x7f0000001d80)="010c714595761681ae6ae2f94cf07451dbd735", 0x13}, {&(0x7f0000001dc0)="619d602aa178c731172cb1686f033dc8219de0dff8030a18eba8fb8d76f80444c2e180ff0dca9cc81195791f43ee9face00e051f588402ae1760f7ee313e5c20fd3e62df3b1b170277d5d626c3300265841ad4691624957a0d35e7875b52d07eab0866ed16ba9eec9423829ddf29d18740061428d345fa2301442685", 0x7c}, {&(0x7f0000001e40)="65d826b8f321852b311f2b4f50a342162994fb", 0x13}], 0x5, &(0x7f0000002100)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x150}}], 0x2, 0x400c404) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000005c0)=[{{&(0x7f00000004c0)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10003}, 0x1c, 0x0}}, {{&(0x7f0000000800)={0xa, 0x4e21, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c, &(0x7f0000000c40)}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000048c0)=ANY=[], 0x80}}], 0x3, 0x48c0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x7ff9, 0x0, 0x9, 0x10, 0xfffffe0000000001, 0xfa11, 0x6}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000002340)='fdinfo\x00') getdents(r2, &(0x7f0000000000)=""/43, 0x2b) memfd_create(&(0x7f00000000c0)='\xe9`\x10\x98[\x82?O3#\xfa\x02\xdc\x96\xa1\xbc\x80\x00+\xb6O', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x1, @rand_addr=0x64010102, 0x4e22, 0x3, 'lc\x00', 0x1, 0x2, 0x86a}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xcd}}, 0x44) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = syz_open_dev$radio(&(0x7f0000000380), 0x2, 0x2) pread64(r5, 0x0, 0x3, 0x0) close(r5) r6 = syz_open_procfs(0x0, &(0x7f0000000300)='uid_map\x00') preadv(r6, &(0x7f0000000540)=[{&(0x7f0000000080)=""/23, 0x1f}], 0x1, 0x2, 0x4) open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x21) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) 6.403989054s ago: executing program 1 (id=3681): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x320, 0x180, 0x0, 0x4, 0x2, {0x0, 0x9, 0x1}, {0x350, 0x20002, 0xffffffff}, {0xf4ef}, {0x4, 0x4000000, 0x7fe}, 0x1, 0x100, 0x0, 0xd614, 0x1, 0x0, 0x0, 0x0, 0x3e000000, 0x0, 0x0, 0x0, 0x0, 0x120, 0x0, 0x4}) 6.403647677s ago: executing program 1 (id=3683): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000340)={0x0, 0x1, 0x7, 0x6}) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x9, 0x0, 0x0, 0x6}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r6, @ANYBLOB="05"], 0x6c}, 0x1, 0x0, 0x0, 0x10004000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r4, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 6.053828312s ago: executing program 2 (id=3684): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100"}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) msgrcv(0x0, 0x0, 0x3c, 0x3, 0x86b1b18158a7cb82) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x24, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000340)={0x1d, r7, 0x1, {0x2, 0x0, 0x3}, 0x2}, 0x18) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f00000001c0)=0x1, 0x4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x0, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x8, 0x200, 0x3e, 0x8c, 0x6, 0x7, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x8, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x7, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x7, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7fc, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0x2000b, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x201, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0x0, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) r8 = syz_open_dev$video4linux(&(0x7f0000000080), 0x200000000000, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r8, 0xc0305602, &(0x7f0000000000)={0x1, 0x900, {0x4}}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000200)={'tunl0\x00', 0x0, 0x10, 0x1, 0xb52, 0x42336aba, {{0x13, 0x4, 0x0, 0x2b, 0x4c, 0x68, 0x0, 0x1, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2a}, {[@timestamp_prespec={0x44, 0x1c, 0xa2, 0x3, 0x5, [{@dev={0xac, 0x14, 0x14, 0x3c}, 0x5}, {@multicast2, 0x5}, {@empty, 0x2}]}, @timestamp_prespec={0x44, 0x1c, 0xbf, 0x3, 0x8, [{@private=0xa010100, 0x9}, {@multicast1, 0x2}, {@private=0xa010102, 0x14}]}]}}}}}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={@loopback, 0x2a, r10}) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0xa0, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x54, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x2}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x6}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x6}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40}, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x18) 5.694197231s ago: executing program 3 (id=3686): sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x4, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x50997158686b2a93}, 0x80800) 5.558440614s ago: executing program 2 (id=3687): openat$userio(0xffffffffffffff9c, 0x0, 0x303882, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, 0x0, 0x40000000) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet(0x2, 0x2, 0x1) socket$packet(0x11, 0x3, 0x300) syz_open_dev$video4linux(0x0, 0x5, 0x0) socketpair(0x1, 0x3, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x400000000}, 0x400, 0x6e6bc0, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) write$tun(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="000086dd0000110000080000000060ec970000382c00fe8000fffffffffffffffd00000000aaff020000000000000000000000000001"], 0x6e) bind$rds(0xffffffffffffffff, 0x0, 0x0) 5.556578252s ago: executing program 1 (id=3688): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r3, 0x40044160, 0x3) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r4, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x65, &(0x7f00000002c0)=0x4, 0x4) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs={0x3, 0x0, 0x4e20}, 0x6e) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x8000, 0x80, 0x6, 0x1, {{0x7, 0x4, 0x0, 0x0, 0x1c, 0x67, 0x0, 0xb, 0x29, 0x0, @multicast1, @local, {[@lsrr={0x83, 0x7, 0x54, [@initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'ip6tnl0\x00', r5, 0x29, 0xe, 0x0, 0xcbd, 0x0, @local, @empty, 0x1, 0x700, 0x9, 0x7}}) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101701) ioctl$USBDEVFS_CLEAR_HALT(r6, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01002bbd70000e001000540000"], 0x14}, 0x1, 0x0, 0x0, 0x20000850}, 0x4000000) close(r2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) io_uring_setup(0x1684, 0x0) socket$kcm(0x2, 0xa, 0x2) write$tun(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfdef) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r7, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4040010) syz_usb_connect$cdc_ecm(0x2, 0x59, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024700010100800309040007ff02020000052406000005240000000d240f0100000000000000000004241309032407"], 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x20000055, &(0x7f0000000300)={0xa, 0x4001, 0xfffb, @loopback}, 0x1c) 5.40441857s ago: executing program 3 (id=3689): syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/time_for_children\x00') unshare(0x22020400) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x801) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) syz_emit_ethernet(0x56, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x100, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @timestamp={0x8, 0xa, 0x0, 0x8}]}}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x159}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x800, 0x5, 0xc000, 0xe, "0062ba7d8200000016001b000200f705096604"}) r4 = syz_open_pts(r0, 0xa0200) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_GET_NESTED_STATE(r5, 0xc080aebe, &(0x7f0000000e00)=@vmx={0x8, 0x0, 0x2080, {0xc000, 0x8000000, {0x2}, 0x1, 0x3ff}, {"2c09ecd03011c83a5ff9426d3a7522ca1fa64fb0a64109aca1c9cf5fcefa86897412c4ed7ec1898a7283cff05783bc9423bbcfbe857f2105160003bb7654027869eb7ec1ad424f9f28632f150b8d35e4ece70aa18cc56abda3f3d49db377f427fbc0d468071adea6311228a141a902a36d6b2b839f8762e6501cc9c9c7891600b821aa24cfb68222d48e241b288f8499fa6d843ad6138479df941cbda018ce20b714e2c004119d5b04d8b8cadfefe1410d29479ef7679c52d40e742a2483698b9ec62154e96dc5dd823a64f6637fea18e6f8bf4652fe134a9aeaaf1a03fa1b2bac758f3e522bf87106467c7fde79ac59b0df8be4ba9ea833cb9e52520f904cab2fcfce0e3a119f29ab87a182e18548579fe99b6acc2eb26e9ec77e790f6b4253b3b29f3f11aeadfe567f5cdf0611cd4dbd68169d5b6decd650962bfa31a27daa6d5787927e5d6fc5b9d7148b5c44bbfdc9affaaa666ef11c1922682392d0e9a98b86bb80aec86c0f8453eaf42b9b2e9a8b2f84bd7c1a992f11fc47e74752d4434067f2be14472c68d7e32ed9cded225d9488afd408d47811440c9cad9d00c7ef6befaf28e3b9c7b7a828e6dd6b5934a6dcf5376b0b513ef943bd92367bf53325902ede8466fbbcc3f642e6458eddada0b6c4b495d16fa3ca4e8cfad32b2e39ba60085201ba7bd33c5c4d2b0e16d682ece2d315b8f3a550d9b8a8d19ebf4927742cf85234edabb4fcc6950b777cfc19b493a33cc63150a134038a80fba4f561851dc09d2e3570d632641ae1a7c828cef6ec328b79b0bd3c36194ea0411c1bb3166737a8ce4451c9d0bc8578bdd22ff4b1e8f468bad04dd42e3679526db55343e807b67f2bbc2fa851155c8fa399b59b0950db3762c2b8740ed854b2b8efb224a2ad4f1c037f06a40bb2e0ed9e6a03e7f7fe0f26773d364c4368db9fa52ecf658b49124a5d165773a1747321a73bd3e5b4d676903bed4e776aab7dc69a555f813066b05d3e86e9f7700b6c5ed3df7e99a191bcb27d0cc9e20ddfc00cadcea5de66c261e8844b5492775872a82263afc83327e54328143ff4b2d1780bcb26e4f73901c4941ac9910154b27172b18ea18b349e73964a9b8afd890a3bc030fae588b87bb4f82634f62d246f6881e37b8e0e477edd06ef2c48bb711d1335e5a1e3547a6b7c70dea4a92e427c96ce7fbac97464f6f31c626ced85946e0fd8884e1fda2481b603a2cc6f777fb5d8fc34f3feabe2d1a3204b596e9d461894d59f0fdc094ebcef1a49106fb6cb8e3533b8cabcffe10bc3ed78706bdcf4a2dddb1e40e8ae554f85a1a4d4acfb061a7c66fbeaeacd2f3a43bdb0cb07738dc4dc97b478247d713a92f63f035a5dfcbd9572f13583fa0c5feb6eda592018086c5254a626b3c1d908837ac6c43931b9f10e9ad99af00272ef7135f158c465d684f52046232a9e3423d60d26e2dbf69ddbb75676255b8ad32f38309f6b088a441244a7eea6c1c71c637df8fd46584df4ccf0804e0da8853f7c2f4ac996d7c17bb0693bac12b4496f50d1dec16bff8517bf49214bbb24d0374e80346483f583e7ea4e358dc9e13ea05c48270a0d21e94b2a7a86548567d46dc7be7c34f26da47a0a35d4a0295584c8a36ed156bc2fa10261f93b9dc8ddd2f5814869cb064da5d0192e764fd37dd36719b39132ca393c997a1b9bad4d359a9649b84072f2a8da327f6dea1c4f2dd2d5e5ba6f79df745889e953803069142dcd4c71f4b8f7786836506f4e61a35a26a75c7ceeede0fe2ccbe85af0beaa0eabc0e92ffab8fd117d999490b3c8a9007b4c8539ce4c48cc66d949a59d5b1908df75aab311fa745a45a11ba152abd5a68bf1848c77b689627896b07018866c3f6258d815fb04c628652cb4d89e4ff4ec0f47a065b3951d284f1aee598b9f5bdbe8705493f9f30060b15690ca14482fb25ed1fbe29bfef5854935585dffc32f5416dc14f393c3940baaf486eaaa813a0d1f4f22c0e5b02b209213e38b194f2f389d02a5aa5dfd9e77a1bf1596dfdd801c573d72f2260d7535902266e7ae311948e2ca5b3516fe1f4fceaaa852a3e9cd28591c4c4d5b0ce26928900a7ba1dd1bfa10a3780606c8e87dbb711dbff38f0d7363e9bd66ba0528ae43f66b8328181ea33c316a49f45e59bcf2cea8c37831a75863fb458bd3ce65f8179716fb8c9db37630b69042ea9a54bc592ab6e159167f97791907a1f31555d25603378d93872fcfb3ebdcf266d0d6a16be4e804173e3a2d196bdc53dcc03ef7e2573a4eb23940f75fffb9d6560c5a82ffd30f0f9fafcaf90f0b4762b9dccff6fd8d0ee6413aa3ba868d0a2b82060680c95b7a004ba685f6707a5a0cf0d91be2ff77e40739b82abf4d9c7f6c897b88ec9c437c1f382c0378a8edd4846bc8fc248f600837e29a025153a5bea656aa02f81d7b719b75771357e93e12833f231f089bf9252ea72950a29621dac8814e7986e433c5de1ccb329fc3b3114a5cc2f8897f1c6b595cbb6cdf69e4312632c152cd7e5d25e1d3fc96f10b55e5fb7cbf9895556de94371c66742eeadb385fdc6773f2a97050018dccb854c1570ffbcca0eac45437e3611c32aad65c58bfc5aeb8ebe08a67285ee36e155760f67cadf47cf026c533fd9c3c14de6ed029bd60cd9d1bb9177e8ee175b3abb43e43988229fd8c05c4879ac6ab8b7a96eb9bf585d2e361598192e609217e02fab0a1a81e20b697e167acc9287b8e5e84f498f5511b601810fb34f82562da53a07ee023302a7a4d8068a9c08be9307ece9fc80ce776b28ae7a1f2b1d7f124d61224f885aa54c2f4c2e76d8715ea5cc2934fd31a646d42ecafd22e3d0b0e13670f1b8e2c079ad6e0c9ac7bedf2e4b03cfa2695e6f47fb3a994895b34a37ddd8c41ddbd65734a7f7e2f0e545d413ec4478bb668bfbfa9b0f6740fec08c2d3fefc05e3afa0e91e02fa0d03512a6de33d7db29c41c76c7a448ca1e630271c61f368d96222c46018299d2b473299b9e0dda1e86e1595c293903c1d01517b80b6b19b1e1338d6ea571d1e953a772748ccad26a72d3272322765b32ea122ad2c2ea5031c2765bb26eb2008c18d0a7c1e8c1e7931a87fc8152b8add463ff7ee3d0c1e5fe532b9c6b164faee3d94a0201bc96240439c1c4583f5c29a3ab159a3bb7888d17f7305e39aa4762263b89066c5723ccd3ef2c7b0a61abccf8a8a8762417e39b3ca38e09227f62b72e41e1291c88daa1840c71256b3b02990a4f16e6f60c31c4abbd76eec938441fc9fa51cc95e5392e2c6adc822d0236a0155d6180bb4c26432db6cee9cb1f19a4aa60652c67b67ee185e239037c5d0b6714d395142f7111d39b8f3b0e7839c02dc8e68abd5e2d33fe9f72c8485e08534f1830da55fd9734fee5736cddd51cc2ce592fb959897e72ae075e95b98a351cb1fb8158a88b51574f1e80e2d3e3ee3123a17569493b96ec97b5f74e72b59efd7008338a5696f8ca165ea38252dcc821bb1a28a2d942a41ea8d301ee01a944e80b405ac138195df65268e97249e7f7181d85ec24c204f46f32fbd0b689bb68e15cfb406ae99984375277de09ae5d16ca2ae372743afddcfdcbeb8633e41bd980e4c6e19164804a2d14a9720ea42812dfdaa095eb1fa58a131dada83d44663561f39ae9256e4ca7329a517bf33627793183ce8b36d3df601850772ae874309f4ee3a1cc4335dd48eceed33ec4f97d29cb1801db9275427a75e17505edaa5674735a765d9ad4f43c05f81c7b48207d06ff3640fd75af68e9dbadba4cff67d7702b290f57ef4687c86e330c4259a44b6b64bc813193fe87be283378e39c599a8736fb420477da0f5bcd7a2ed72494733737d0257c5d26f4a3d3e89d3ffcde7b15cbe38b30405ae4adbecf89078e5da71a16d15fe8cd36c5e33060c43b10966c5e534b079816f784ee44a1f5722b69f86e686e74cbe72cd15a6bcb6dffdb8a0116c39f8ee2f1580bbfc2fc1f16239efa6b8764be11e49320176e324e6a3767e4853c8286b62f27d72d172a15de0777efad97872f23ef92c56f7406897ef6fd97d3462a2b76025aeac3fc55f406340af393567c2582f660beb8ea71fb446430357fc3d66717c28981743f209eecf3b7e29b943d54c7292fb92e6b3162f8fd7522b3a61593a27e30fb8f2d09638935ca86f015d689758456fc05a9f4164645d60157d278901745c3709991c4c2b3f215935bb5fee2ccc1d60743596cecf720839cc7865000ffd25abd29a1b85c0a1cd2fa3de425124589c9d9575bc52d1fc11992c3cb1153b79058871c334ee0a70ff4859d82f4c170e1528d7186fa9943e4e007f6de71a1ff227d259c71c96fef51b75223d1dec831bc33fd296796fd0e18cce3e276c7bf7f4afdf01669d61bc0b31e5ffda2c26eab78341c476013fbcc67c3dfd00993c79a0d8816fdc2ebe4932c541462fe299ca0b10037e88fe7db27eb4fe374771d5db6e776aaeccc93e309e98d42155a646c533767139592edc9db3059ec438e2e267a3676d7ecc9bcac552e25ef533775a0ca755e9013dfa4344cfe6669d4d4b6a2cdaa619fe9f37d32db40c300cd6fd354228c873de57a07c9b05e488907b52b5c7ca0b6130d3b75e835179e899cfdc74d76ae3a4499d65c055b71f3432667f47c018c1092488b680887c40d84f7804c43e6b61817b04fac327d01a97bbc99c4f8384bf1ad5bebb5d2bdd758183fc604eeff251620f8840f086bcecdcd1e075d0e088ba0e1bcf8f19e8c6cbfe6f9b4d5af8db50fe121772e122c57207db248aa5a84a3fd2361e8558527355f31483e7d5eafc6dfe381c92febc01d2e6ad8018c0c8ef9bdbff9e5affeffc6e5ba6bd9362e424a088d191f1afd1a71ce137f97e11a9c7b0e952bc0a7cbd1531f0784cbbe52160dfce54bf2533ba353c6f8357d62eca32560218d69d3ab6957f2f9c050f939992e6919895befc1970b7642c3a4d7eb17ac0efb7d0619f3bc6741e41d4409f386ac5ae47f3e9d6ee5aa3a5130b29169cca7aac971a23ae63a25f7e458fcf169015889163b3ca1af4d5dc5645670106388aa26b1a974125f2492940531ba7b91ba0f533506c8d7acf340741f9f8fc704c059e240c2b1e019243ec90ab2431aa398d165f83d8126115fa5ff83b10b088d40e63d2b146f57d52120ddbdffa6091b3cd7316ea95b81986a083d5610b9e07d802ceb7b554b381f3d7870523cb6c9bdc8c2f7e72790e2be17cba9c8313399b5783f3b1ff7f03adbb139d0cbb541068c93d09755f53ebc73339432f010179358609f23faa737d7e667f86828f75f1a039da35c48b07445fb96b83b6671deaeb0210fd955e61c3ef9ab244e8b9d27102b227ec0a38d6acff524165485724c6b842afc8347ad3bebf39d0b9a8e89a5535bde2a37bea916d787e4a08fccb80f9fbe1362f77309b86f7cf0105d93d42ac533ef0fe70b2cb13dc2be6d1c9bba5d17f732702361707cb00cc491ca111d66dd3db3fa9d7b171eb63b8a1881ef71a6c01c30a864ae83a68aaed56c2af704fd4eee4359feed7bc0a2d4d7cb9c9957c49f42672e848c595e2d3e70c2207c1c14a8dfa2974ce4ff6453a4ee0a458e5999c4d24969a3b3e0192e6e2ad7b1a27d07e3266b88205c9625026733d1b68313609c8b2f90f3f83e4ac4e4a993c67a2e8e76421e3f82a5c3d72397049662402a836ba9fc5b63562d607344c17c73a740a70cf0fb299df274011a586a7938ce237e42aca63114eb643536a048431dd851309f819126e2cf3900768f476304cf0cec91f6813f4bc4277dc140dfd6", "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"}}) r6 = dup3(r4, r0, 0x0) ioctl$TCSETAF(r6, 0x5433, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r7 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x39d}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) io_uring_enter(r7, 0x12a, 0x13, 0x17, 0x0, 0x0) 5.165312432s ago: executing program 3 (id=3690): r0 = socket(0x28, 0xa, 0xfffffffc) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) write(r0, &(0x7f0000000240)="240000001a007f0214f9f4070009040803000000000000050000000008000f40fe00000e", 0x24) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000080)={0x400, 0xffffffffffffffff, 'id0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x101800, 0x0) pread64(r1, &(0x7f0000000b40)=""/130, 0x82, 0xb898) r5 = memfd_create(&(0x7f0000000840)='\x01\x00\x00\x00\x00\x00\x00\x00\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\x82\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xc0L\x1d\x98Zq\xce\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1j$S\xfc\xb1[N\x8d\xcfI\xc8\x91\x87\x1fuYG7}%)\xb9\x00\x00\x00\x00\x00\x00\x00\x80W\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]^\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1f2\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x9e\x035\x8a@\xd4\x1c\xe0\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\x00\x00\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d\xf5s\x03\x1a=\xcc\xd1\xa7\'\xa0\xaf\xf7\xec\xaf}\x0e\a\x00\x91U\xf9\x8e_f\x8e\x00\xc3r*\xc7\xaf\xe2\'\xe0f9\xde\n,\x8c8Y26\xa6u<\xca@H\xdc\xf1\xb0\xb8\x9f\xc2o\x0f\x02I\xb6\xc3xH\xc3\x88(\xb6\x97~\xea)\'\xa3:\x8d\xebc>z\xae*\xc2\x14\xe9\x89#\xe2)\x9a\xb0hR\xffa\xf8\xde\xf7q4\xcfV\xbb\xc3t\xfa\xa9\x05>\xaea\x12\xce\x1cY\a\xb16\xb9\x12v\x1dN\xe1,_3\xa9\xa36\xaa.Cj\xd4\ah\x92j\x86\xe1\x1f\xec1\xb9!lI\xc7\xbf\x85\xdd\x03\xbd\xeb\xec\xf9\xf3\xaf\xe02AzX\x9aO\x93y;\xa7,\xbb\x11\xe6\x8fn\xa0m\xf8\xcf\x92\x19\xba,\x0e\x04\xbe\xbb\xdd\x00\xb1\xb6Enr\x17\xa4\xc5)\xcc}*yN\xdc\xc3\xe0\xf2\x10\xe00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8101, 0x0, 0x7, 0x0, 0x3ff, 0xfa11, 0xffffffff}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000000)=0x1) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdbd) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x98fd3f00}, 0x0) 4.139883517s ago: executing program 3 (id=3692): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000008c0)=ANY=[@ANYBLOB="400100001000010026bd700000000000ace5ffffff0002000000970f0d405f000000b15b8da2d5f1006cc5af89a88d260500"/64, @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000146c00000080ffffffffffffff0000000000000001000000000000000004000000080000000000000000000000fffffffff7ffffff0000000000000000000000000000000002000000000000000000000000000000000000000000000004000000000000000010000000000000000000000000000000000000fcffffff0000000003000080033500000a0004060000000000000000480003006465666c61746500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080016"], 0x140}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) 4.132986057s ago: executing program 3 (id=3693): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/69, 0x328000, 0x800, 0x2, 0x3}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x8, 0x4, 0x20, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80, 0x5a6f3fb746055559, 0x6, 0x3}}) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)=@newtclass={0x50, 0x28, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xc, 0x6}, {0x10, 0xa}, {0x2, 0xfff7}}, [@TCA_RATE={0x6, 0x5, {0xf7, 0xdb}}, @tclass_kind_options=@c_cake={0x9}, @tclass_kind_options=@c_hfsc={{0x9}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x9, 0x9}}]}, 0x50}, 0x1, 0x0, 0x0, 0xffd736e7d910b310}, 0x48000) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f00000002c0)={0x2, 0x5, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @empty}}]}, 0x50}}, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, 0x0, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) select(0x40, &(0x7f0000000000)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0xa080, 0x0) close(r8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) chroot(&(0x7f0000000200)='./file0\x00') capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)={0x3}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x0, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x100000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r9, 0x40000}, 0x10) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000400), &(0x7f0000000440)=0x30) 3.801321976s ago: executing program 0 (id=3694): syz_emit_ethernet(0x8e, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb08004500008000000000000190780a010102ac1414aa040090780100000049000000000000ac1e000144140001ac1414bb4e210000ac1e000100000008443c0051e000000100080000e000000200000000ac1414000000000000000600000000000000000000000000ac1e000100000000ac14143e00000000"], 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181603, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000480)=@e={0xff, 0xa, 0xd, 0x40, @SEQ_CONTROLLER=0xfe, 0x10, 0xb, 0x8b}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000000e00"/20, @ANYRES32=0x0, @ANYBLOB="0a0000000028000018003480140035006d6163766c616e310000000000000000140035006d6163766c616e310000000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4000005}, 0x40000) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r1, 0x8008f511, &(0x7f0000000380)) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) syz_open_dev$vbi(&(0x7f0000000340), 0x2, 0x2) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x800, 0x5, 0xc000, 0xe, "0062ba7d8200000016001b000200f705096604"}) r3 = syz_open_pts(r0, 0xa0200) r4 = dup3(r3, r0, 0x0) ioctl$TCSETAF(r4, 0x5408, &(0x7f0000000040)={0x7, 0x4, 0x2, 0xfff, 0x16, "e533991cd00ee11a"}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000100)=@req3={0xa, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x12, r5, 0x0) syz_io_uring_setup(0x48ba, &(0x7f0000000000)={0x0, 0xfdfffffc, 0x20, 0x3, 0x1f3}, &(0x7f0000000080), &(0x7f0000ff4000), 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r6, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x2}]) 3.487397427s ago: executing program 4 (id=3695): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}, 0x1, 0x20000000, 0x0, 0x40}, 0x0) 3.30806347s ago: executing program 4 (id=3696): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0x46c}}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000240)={0x1}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000380)=[@release], 0x0, 0x0, &(0x7f0000000400)}) ioctl$SOUND_MIXER_READ_STEREODEVS(r4, 0x80044dfb, &(0x7f0000000700)) ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110e22fff6) close(r1) socket$inet_udp(0x2, 0x2, 0x0) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000802, 0x0, &(0x7f0000000000)={0x9, 0x4, 0x200, 0xea, 0x9, 0x4000000000000, 0x1cb7, 0x100000003, 0x2}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0xffff1000, 0x2000, 0xa, 0x0, 0x8, 0x2, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x3, 0xfd}, {0x2000, 0x0, 0xb, 0xa, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0xe, 0x0, 0x7f, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee0000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x0, 0x11, 0x0, 0x3c}, {0xb000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x10, 0x80}, {0xdddd1000, 0x0, 0xa, 0x8, 0x1, 0x0, 0x2, 0x7, 0x0, 0xb, 0x0, 0x1}, {0x8080000, 0x3000, 0x4, 0x0, 0x6, 0x1, 0x10, 0xa, 0x26}, {0x58000, 0xfffe}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x0, 0xf0, 0x80008, 0xdd00, 0x0, [0xe, 0x1, 0x2, 0x9ef]}) ioctl$KVM_TRANSLATE(r8, 0xc018ae85, &(0x7f00000000c0)) connect$unix(0xffffffffffffffff, 0x0, 0x0) r9 = userfaultfd(0x80001) ioctl$UFFDIO_API(r9, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r9, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="700000000001010400000000141a00000200ffff08000701240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e02010c000280050001000000000004000e800800084000000007"], 0x70}}, 0x0) 2.959037932s ago: executing program 3 (id=3697): r0 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=@newsa={0x194, 0x10, 0x1, 0x70bd2d, 0x0, {{@in6=@mcast2, @in=@dev={0xac, 0x14, 0x14, 0x11}, 0xfffe, 0xecdf, 0x0, 0x0, 0xa}, {@in=@private=0xa010101, 0xffffffff, 0x32}, @in=@broadcast, {0xfffffffffffffffe, 0xfffffffffffffffe, 0x3, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x9}, {0xfffffffffffffffd, 0x400804, 0x9, 0x292}, {0x1cb00000, 0x5}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x2c}, [@algo_crypt={0x58, 0x2, {{'cbc(camellia)\x00'}, 0x80, "3ae0bd000b000000366a6a849a739045"}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x60}}]}, 0x194}}, 0x44050) r2 = socket$kcm(0xf, 0x3, 0x2) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f00000003c0)={0x95, 0x100000000, 0x5, 0x0, 0x0, [{{r2}, 0x7fffffff}, {{r2}, 0x4}, {{r2}, 0x1000}, {{r1}, 0x8}, {{r1}, 0x7ff}]}) sendmsg$inet(r2, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="020a000302000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) recvmsg(r4, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002040)=[{&(0x7f00000001c0)=""/243, 0xf3}, {&(0x7f0000000300)=""/192, 0xc0}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/130, 0x82}, {&(0x7f0000001cc0)=""/114, 0x72}, {&(0x7f0000001d40)=""/209, 0xd1}, {&(0x7f0000001e40)=""/97, 0x61}, {&(0x7f0000001ec0)=""/163, 0xa3}, {&(0x7f0000001f80)=""/189, 0xbd}], 0x9, &(0x7f0000002100)=""/186, 0xba}, 0x2001) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2.753390758s ago: executing program 4 (id=3698): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8101, 0x0, 0x7, 0x0, 0x3ff, 0xfa11, 0xffffffff}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000000)=0x1) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdbd) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0xfffffff4}, 0x0) 2.293929043s ago: executing program 1 (id=3699): sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x4, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x50997158686b2a93}, 0x80800) 2.221681702s ago: executing program 2 (id=3700): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x90, 0x2c, 0xf35, 0x70bd23, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x2400}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_simple={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x100, 0xd, 0xa, 0xffff, 0x7ff}}, @TCA_DEF_DATA={0x6, 0x3, '\xff\xff'}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0xff}}]}, 0x90}, 0x1, 0x0, 0x0, 0x440}, 0xe4ff) 1.680295711s ago: executing program 1 (id=3701): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="63aa64fe0000000061104b000000000006000000000000009500"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) r0 = syz_clone(0x201000, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) r1 = landlock_create_ruleset(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x1e, 0x5, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) listen(r2, 0x0) accept$inet(r2, 0x0, 0x0) pipe2$watch_queue(0x0, 0x80) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, &(0x7f0000000200)={r4, 0xffffffffffffffff, 0x80}) landlock_restrict_self(r1, 0x0) get_robust_list(r0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x100002, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) socket$unix(0x1, 0x5, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 1.679978543s ago: executing program 2 (id=3702): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) dup(r2) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902"], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x43c37000) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000002100010000000000000000000a000040000000000000000005001600001b0000080017"], 0x2c}, 0x1, 0x0, 0x0, 0x20004894}, 0x20008000) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000000), 0x800) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sched_setattr(0x0, &(0x7f0000000500)={0x38, 0x5, 0x6a, 0x4, 0x3ff, 0x7, 0x7, 0x45f, 0x8, 0x6}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 423.376444ms ago: executing program 0 (id=3703): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="3400000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="42a0080a231c040008001b00000000000a00020080"], 0x34}, 0x1, 0x0, 0x0, 0x88}, 0x4004040) 303.240508ms ago: executing program 1 (id=3704): openat$userio(0xffffffffffffff9c, 0x0, 0x303882, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, 0x0, 0x40000000) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet(0x2, 0x2, 0x1) socket$packet(0x11, 0x3, 0x300) syz_open_dev$video4linux(0x0, 0x5, 0x0) socketpair(0x1, 0x3, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x400000000}, 0x400, 0x6e6bc0, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) write$tun(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="000086dd0000110000080000000060ec970000382c00fe8000fdffffffffffffff00000000aaff020000000000000000000000000001"], 0x6e) bind$rds(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 4 (id=3705): fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0xfe44, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r3 = accept4$alg(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x3, 0x880}], 0x1, 0x80001) recvmmsg(r3, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000b40)}, 0x10000}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001080)=""/4096, 0x1000}], 0x1}, 0x10001}], 0x2, 0x102, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f00000000c0), 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r5, 0x114, 0x1d, 0x0, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000340)="f20f2338650f405a00f20f32670f2169f30f099a7c0000001e010fc79b060000000f01cf673e0f47d7c166bafbacac40", 0x30}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) kernel console output (not intermixed with test programs): ate underflow at hook 1 [ 958.259385][ T9715] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 958.478290][ T1579] usb 5-1: USB disconnect, device number 125 [ 958.676808][ T6292] usb 3-1: USB disconnect, device number 126 [ 958.684814][ T6292] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 959.588719][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 960.287065][ T9715] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 960.427293][ T9715] usb 3-1: device descriptor read/64, error -71 [ 960.667326][ T9715] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 960.807167][ T9715] usb 3-1: device descriptor read/64, error -71 [ 960.855852][T18052] IPVS: set_ctl: invalid protocol: 1 100.1.1.2:20002 [ 960.865136][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 960.865162][ T30] audit: type=1326 audit(1775865964.219:1677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18049 comm="syz.1.3415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13439c819 code=0x7ffc0000 [ 960.912897][ T30] audit: type=1326 audit(1775865964.249:1678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18049 comm="syz.1.3415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa13435d04e code=0x7ffc0000 [ 960.937524][ T9715] usb usb3-port1: attempt power cycle [ 961.030214][ T30] audit: type=1326 audit(1775865964.249:1679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18049 comm="syz.1.3415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13439c819 code=0x7ffc0000 [ 961.215560][ T30] audit: type=1326 audit(1775865964.249:1680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18049 comm="syz.1.3415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7fa13439c819 code=0x7ffc0000 [ 961.247582][ T30] audit: type=1326 audit(1775865964.249:1681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18049 comm="syz.1.3415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13439c819 code=0x7ffc0000 [ 961.308800][ T30] audit: type=1326 audit(1775865964.249:1682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18049 comm="syz.1.3415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa13439c819 code=0x7ffc0000 [ 961.333002][ T9715] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 961.383388][ T9715] usb 3-1: device descriptor read/8, error -71 [ 961.407246][ T30] audit: type=1326 audit(1775865964.249:1683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18049 comm="syz.1.3415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13439c819 code=0x7ffc0000 [ 961.476408][ T30] audit: type=1326 audit(1775865964.249:1684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18049 comm="syz.1.3415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa13435d04e code=0x7ffc0000 [ 961.570081][ T30] audit: type=1326 audit(1775865964.249:1685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18049 comm="syz.1.3415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13439c819 code=0x7ffc0000 [ 961.625620][ T30] audit: type=1326 audit(1775865964.249:1686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18049 comm="syz.1.3415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7fa13439c819 code=0x7ffc0000 [ 961.648610][ T9715] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 961.668079][ T9715] usb 3-1: device descriptor read/8, error -71 [ 961.777398][ T9715] usb usb3-port1: unable to enumerate USB device [ 963.458882][T18091] netlink: 'syz.0.3428': attribute type 2 has an invalid length. [ 963.476066][T18091] : entered promiscuous mode [ 963.504652][T18091] netlink: 'syz.0.3428': attribute type 2 has an invalid length. [ 963.554972][T18093] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3429'. [ 963.586139][T18094] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 963.712819][T18091] : left promiscuous mode [ 963.847048][ T9715] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 964.009486][ T9715] usb 3-1: unable to get BOS descriptor or descriptor too short [ 964.028990][ T9715] usb 3-1: too many configurations: 11, using maximum allowed: 8 [ 964.048321][ T9715] usb 3-1: config index 0 descriptor too short (expected 8705, got 121) [ 964.147422][T18105] usb usb8: usbfs: process 18105 (syz.1.3432) did not claim interface 0 before use [ 964.198836][T18106] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3432'. [ 964.239089][ T9715] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 964.286313][ T9715] usb 3-1: can't read configurations, error -22 [ 964.427390][ T9715] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 964.457282][ T9] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 964.619542][ T9715] usb 3-1: unable to get BOS descriptor or descriptor too short [ 964.637901][ T9715] usb 3-1: too many configurations: 11, using maximum allowed: 8 [ 964.653342][ T9715] usb 3-1: config index 0 descriptor too short (expected 8705, got 121) [ 964.667846][ T9715] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 964.677954][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 964.728849][ T9715] usb 3-1: can't read configurations, error -22 [ 964.743161][ T9] usb 2-1: too many endpoints for config 1 interface 0 altsetting 7: 255, using maximum allowed: 30 [ 964.774997][ T9715] usb usb3-port1: attempt power cycle [ 964.796651][T18110] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3435'. [ 964.811689][ T9] usb 2-1: config 1 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 964.912764][ T9] usb 2-1: config 1 interface 0 has no altsetting 0 [ 965.102085][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 965.154451][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 965.173821][ T9] usb 2-1: SerialNumber: syz [ 965.187501][ T9715] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 965.219918][ T9715] usb 3-1: unable to get BOS descriptor or descriptor too short [ 965.239882][ T9715] usb 3-1: too many configurations: 11, using maximum allowed: 8 [ 965.283525][ T9715] usb 3-1: config index 0 descriptor too short (expected 8705, got 121) [ 965.306044][ T9715] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 965.316294][ T9] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 965.325170][ T9715] usb 3-1: can't read configurations, error -22 [ 965.336558][T18120] IPVS: set_ctl: invalid protocol: 1 100.1.1.2:20002 [ 965.484347][ T9] cdc_acm 2-1:1.0: This needs exactly 3 endpoints [ 965.491216][ T9] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -22 [ 965.577156][ T24] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 965.587579][ T9715] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 965.698512][ T9715] usb 3-1: unable to get BOS descriptor or descriptor too short [ 965.706526][ T9715] usb 3-1: too many configurations: 11, using maximum allowed: 8 [ 965.716041][ T9715] usb 3-1: config index 0 descriptor too short (expected 8705, got 121) [ 965.727062][ T9715] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 965.743648][ T9715] usb 3-1: can't read configurations, error -22 [ 965.759769][ T9715] usb usb3-port1: unable to enumerate USB device [ 965.780702][ T24] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 965.825888][ T24] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 965.848431][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 965.867110][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 965.867149][ T24] usb 1-1: config 1 has no interface number 0 [ 965.929014][ T24] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 965.938818][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 966.021375][ T24] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 966.231886][ T24] snd_usb_pod 1-1:1.1: endpoint not available, using fallback values [ 966.244247][ T24] snd_usb_pod 1-1:1.1: invalid control EP [ 966.256566][ T24] snd_usb_pod 1-1:1.1: cannot start listening: -22 [ 966.265042][ T24] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 966.276583][ T24] snd_usb_pod 1-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 966.460079][T18119] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3439'. [ 966.505003][ T6292] usb 1-1: USB disconnect, device number 26 [ 967.157825][T18145] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3447'. [ 967.256821][T18145] vlan2: entered promiscuous mode [ 967.527659][T18147] team_slave_0: entered promiscuous mode [ 967.533479][T18147] team_slave_1: entered promiscuous mode [ 967.554905][T18147] vlan2: entered promiscuous mode [ 967.575711][T18147] team0: entered promiscuous mode [ 967.711673][ T24] usb 2-1: USB disconnect, device number 39 [ 967.989216][T18155] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 969.511679][T18180] IPVS: set_ctl: invalid protocol: 1 100.1.1.2:20002 [ 969.528626][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 969.557391][ T30] audit: type=1326 audit(1775865972.869:1709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18175 comm="syz.0.3456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0719c819 code=0x7ffc0000 [ 969.613919][ T30] audit: type=1326 audit(1775865972.869:1710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18175 comm="syz.0.3456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbd0715d04e code=0x7ffc0000 [ 969.705606][ T30] audit: type=1326 audit(1775865972.869:1711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18175 comm="syz.0.3456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0719c819 code=0x7ffc0000 [ 969.746140][ T30] audit: type=1326 audit(1775865972.869:1712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18175 comm="syz.0.3456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7fbd0719c819 code=0x7ffc0000 [ 969.803272][ T30] audit: type=1326 audit(1775865972.869:1713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18175 comm="syz.0.3456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0719c819 code=0x7ffc0000 [ 969.854640][ T30] audit: type=1326 audit(1775865972.869:1714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18175 comm="syz.0.3456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fbd0719c819 code=0x7ffc0000 [ 969.952258][ T30] audit: type=1326 audit(1775865972.869:1715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18175 comm="syz.0.3456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0719c819 code=0x7ffc0000 [ 970.022071][ T30] audit: type=1326 audit(1775865972.869:1716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18175 comm="syz.0.3456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbd0715d04e code=0x7ffc0000 [ 970.081463][ T6292] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 970.096451][ T30] audit: type=1326 audit(1775865972.869:1717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18175 comm="syz.0.3456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0719c819 code=0x7ffc0000 [ 970.187110][ T30] audit: type=1326 audit(1775865972.879:1718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18175 comm="syz.0.3456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7fbd0719c819 code=0x7ffc0000 [ 970.249630][ T6292] usb 5-1: unable to get BOS descriptor or descriptor too short [ 970.260175][ T6292] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 970.328080][ T6292] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 970.377250][ T6292] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 970.431558][ T6292] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 970.591043][ T6292] usb 5-1: New USB device found, idVendor=041e, idProduct=30df, bcdDevice= 0.40 [ 970.614246][ T6292] usb 5-1: New USB device strings: Mfr=211, Product=219, SerialNumber=3 [ 970.647039][ T6292] usb 5-1: Product: syz [ 970.651371][ T6292] usb 5-1: Manufacturer: syz [ 970.667798][ T6292] usb 5-1: SerialNumber: syz [ 970.948319][ T1579] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 971.027447][ T6292] usb 5-1: 0:1 : does not exist [ 971.032418][ T6292] usb 5-1: 0:2 : does not exist [ 971.118578][ T1579] usb 2-1: Using ep0 maxpacket: 8 [ 971.141832][ T1579] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 971.157337][ T6292] usb 5-1: USB disconnect, device number 126 [ 971.167406][ T1579] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 971.175943][ T1579] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 971.234550][ T1579] usb 2-1: config 250 has no interface number 0 [ 971.251833][ T1579] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 971.265854][ T1579] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 971.316350][ T1579] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 971.394583][ T5899] udevd[5899]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 971.394876][ T1579] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 971.651255][ T1579] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 971.694942][ T1579] usb 2-1: config 250 interface 228 has no altsetting 0 [ 971.706230][ T1579] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 971.752442][ T1579] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 971.768133][ T1579] usb 2-1: Product: syz [ 971.772634][ T1579] usb 2-1: SerialNumber: syz [ 971.877401][ T9716] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 972.384348][T18205] hsr0: left promiscuous mode [ 972.451645][ T1579] hub 2-1:250.228: bad descriptor, ignoring hub [ 972.485781][ T1579] hub 2-1:250.228: probe with driver hub failed with error -5 [ 972.534389][ T9716] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 972.561228][ T9716] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 972.586067][ T9716] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 972.617632][ T9716] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 972.642664][T18207] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 972.662061][ T1579] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 40 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 972.680302][ T9716] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 973.021864][T18214] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3466'. [ 973.140193][ T9716] usb 1-1: USB disconnect, device number 27 [ 973.160346][ T1579] usb 2-1: reset high-speed USB device number 40 using dummy_hcd [ 973.245573][T18216] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3467'. [ 973.827646][ T9716] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 973.837144][T18192] netlink: 'syz.1.3460': attribute type 1 has an invalid length. [ 973.996683][ T9] usb 2-1: USB disconnect, device number 40 [ 974.007041][ T9716] usb 1-1: Using ep0 maxpacket: 32 [ 974.020096][ T9716] usb 1-1: New USB device found, idVendor=0e41, idProduct=4141, bcdDevice= 0.40 [ 974.029690][ T9] usblp0: removed [ 974.036650][ T9716] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.047182][ T9716] usb 1-1: Product: syz [ 974.051448][ T9716] usb 1-1: Manufacturer: syz [ 974.057778][ T9716] usb 1-1: SerialNumber: syz [ 974.107059][ T1579] usb 5-1: new full-speed USB device number 127 using dummy_hcd [ 974.164583][T18233] xt_hashlimit: size too large, truncated to 1048576 [ 974.271259][ T1579] usb 5-1: config 0 has no interfaces? [ 974.276848][ T1579] usb 5-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 974.291351][ T1579] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 974.319467][ T9716] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 974.320070][ T1579] usb 5-1: config 0 descriptor?? [ 974.342947][ T9716] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 974.455565][ T9716] usb 1-1: USB disconnect, device number 28 [ 974.510243][ T6618] udevd[6618]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 974.627681][T15701] Bluetooth: hci3: command 0x0406 tx timeout [ 974.797752][T18226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 974.809655][T18226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 974.844672][T18248] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3479'. [ 975.112171][ T24] usb 5-1: USB disconnect, device number 127 [ 975.118513][ T9715] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 975.295444][ T9715] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 975.313359][ T9716] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 975.339309][ T9715] usb 3-1: too many endpoints for config 1 interface 0 altsetting 7: 255, using maximum allowed: 30 [ 975.368938][ T9715] usb 3-1: config 1 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 975.420556][ T9715] usb 3-1: config 1 interface 0 has no altsetting 0 [ 975.438341][ T9715] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 975.453555][ T9715] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 975.469570][ T9715] usb 3-1: SerialNumber: syz [ 975.499709][ T9716] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 975.529929][ T9715] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 975.542848][ T9716] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 975.556585][ T9715] cdc_acm 3-1:1.0: This needs exactly 3 endpoints [ 975.569748][ T9715] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -22 [ 975.578486][ T9716] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 975.604687][ T9716] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 975.896771][T18252] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 975.940760][ T9716] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 976.493670][ T9716] usb 1-1: USB disconnect, device number 29 [ 976.688306][ T24] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 976.888033][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 976.919471][ T24] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 976.928505][ T24] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 976.956268][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 976.988023][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 977.011330][ T24] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 977.205065][ T24] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 977.235491][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 977.271538][T18277] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3488'. [ 977.569087][ T24] usb 4-1: usb_control_msg returned -32 [ 977.576293][ T24] usbtmc 4-1:16.0: can't read capabilities [ 977.947662][T18263] usbtmc 4-1:16.0: usb_control_msg returned -71 [ 977.951296][ T5906] usb 4-1: USB disconnect, device number 22 [ 977.960189][T18283] usbtmc 4-1:16.0: send_request_dev_dep_msg_in returned -19 [ 978.140374][T18289] IPVS: set_ctl: invalid protocol: 1 100.1.1.2:20002 [ 978.159538][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 978.159553][ T30] audit: type=1326 audit(1775865981.499:1725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18284 comm="syz.4.3490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75f259c819 code=0x7ffc0000 [ 978.258277][ T30] audit: type=1326 audit(1775865981.499:1726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18284 comm="syz.4.3490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75f259c819 code=0x7ffc0000 [ 978.291804][ T30] audit: type=1326 audit(1775865981.499:1727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18284 comm="syz.4.3490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f75f255d04e code=0x7ffc0000 [ 978.912421][ T30] audit: type=1326 audit(1775865981.499:1728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18284 comm="syz.4.3490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75f259c819 code=0x7ffc0000 [ 978.961633][ T9] usb 3-1: USB disconnect, device number 9 [ 978.979593][ T30] audit: type=1326 audit(1775865981.499:1729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18284 comm="syz.4.3490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f75f259c819 code=0x7ffc0000 [ 979.003188][ T30] audit: type=1326 audit(1775865981.499:1730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18284 comm="syz.4.3490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75f259c819 code=0x7ffc0000 [ 979.061387][ T30] audit: type=1326 audit(1775865981.499:1731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18284 comm="syz.4.3490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f75f259c819 code=0x7ffc0000 [ 979.169062][ T30] audit: type=1326 audit(1775865981.499:1732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18284 comm="syz.4.3490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75f259c819 code=0x7ffc0000 [ 979.204136][ T30] audit: type=1326 audit(1775865981.499:1733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18284 comm="syz.4.3490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f75f255d04e code=0x7ffc0000 [ 979.267152][ T30] audit: type=1326 audit(1775865981.499:1734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18284 comm="syz.4.3490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75f259c819 code=0x7ffc0000 [ 979.465331][ T9] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 979.631121][T18307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3497'. [ 980.215064][ T9] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 980.253320][ T5906] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 980.310462][ T9] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 980.364709][ T9] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 980.413468][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 980.457028][ T5906] usb 4-1: Using ep0 maxpacket: 16 [ 980.524653][ T5906] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 980.557136][ T5906] usb 4-1: config 0 has no interface number 0 [ 980.573854][T18295] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 980.592660][ T5906] usb 4-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 980.607152][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 980.667710][ T5906] usb 4-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 980.710959][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 980.764088][ T5906] usb 4-1: config 0 descriptor?? [ 980.829110][ T5906] usbhid 4-1:0.1: couldn't find an input interrupt endpoint [ 980.922474][ T9] usb 2-1: USB disconnect, device number 41 [ 980.964887][T18314] FAULT_INJECTION: forcing a failure. [ 980.964887][T18314] name failslab, interval 1, probability 0, space 0, times 0 [ 981.011638][T18314] CPU: 0 UID: 0 PID: 18314 Comm: syz.0.3500 Tainted: G L syzkaller #0 PREEMPT(full) [ 981.011676][T18314] Tainted: [L]=SOFTLOCKUP [ 981.011685][T18314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 981.011700][T18314] Call Trace: [ 981.011710][T18314] [ 981.011720][T18314] dump_stack_lvl+0xe8/0x150 [ 981.011760][T18314] should_fail_ex+0x412/0x560 [ 981.011802][T18314] should_failslab+0xa8/0x100 [ 981.011835][T18314] __kmalloc_cache_noprof+0x88/0x660 [ 981.011864][T18314] ? hash_ipmac_create+0x2fe/0x1040 [ 981.011901][T18314] hash_ipmac_create+0x2fe/0x1040 [ 981.011940][T18314] ? __nla_parse+0x40/0x60 [ 981.011966][T18314] ? __pfx_hash_ipmac_create+0x10/0x10 [ 981.012016][T18314] ip_set_create+0xae6/0x1a40 [ 981.012051][T18314] ? ip_set_create+0x4eb/0x1a40 [ 981.012097][T18314] ? __pfx_ip_set_create+0x10/0x10 [ 981.012174][T18314] nfnetlink_rcv_msg+0xc00/0x12c0 [ 981.012209][T18314] ? unwind_get_return_address+0x4d/0x90 [ 981.012244][T18314] ? nfnetlink_rcv_msg+0x229/0x12c0 [ 981.012298][T18314] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 981.012383][T18314] netlink_rcv_skb+0x232/0x4b0 [ 981.012410][T18314] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 981.012446][T18314] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 981.012483][T18314] ? bpf_lsm_capable+0x9/0x20 [ 981.012515][T18314] ? security_capable+0x7e/0x2c0 [ 981.012557][T18314] nfnetlink_rcv+0x2c0/0x27b0 [ 981.012602][T18314] ? __local_bh_enable_ip+0xd0/0x130 [ 981.012632][T18314] ? lockdep_hardirqs_on+0x7a/0x110 [ 981.012669][T18314] ? __dev_queue_xmit+0x277/0x3890 [ 981.012701][T18314] ? __local_bh_enable_ip+0xd0/0x130 [ 981.012729][T18314] ? __dev_queue_xmit+0x277/0x3890 [ 981.012760][T18314] ? __dev_queue_xmit+0x1e78/0x3890 [ 981.012790][T18314] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 981.012822][T18314] ? __dev_queue_xmit+0x277/0x3890 [ 981.012859][T18314] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 981.012901][T18314] ? __pfx___dev_queue_xmit+0x10/0x10 [ 981.012941][T18314] ? ref_tracker_free+0x693/0x840 [ 981.012963][T18314] ? __copy_skb_header+0xa3/0x4a0 [ 981.013000][T18314] ? __pfx_ref_tracker_free+0x10/0x10 [ 981.013022][T18314] ? __skb_clone+0x63/0x7a0 [ 981.013057][T18314] ? __skb_clone+0x483/0x7a0 [ 981.013095][T18314] ? skb_clone+0x246/0x3a0 [ 981.013129][T18314] ? __netlink_deliver_tap+0x807/0x850 [ 981.013160][T18314] ? netlink_deliver_tap+0x2e/0x1b0 [ 981.013192][T18314] ? netlink_deliver_tap+0x2e/0x1b0 [ 981.013224][T18314] netlink_unicast+0x80f/0x9b0 [ 981.013269][T18314] ? __pfx_netlink_unicast+0x10/0x10 [ 981.013306][T18314] ? netlink_sendmsg+0x650/0xb40 [ 981.013329][T18314] ? skb_put+0x11b/0x210 [ 981.013360][T18314] netlink_sendmsg+0x813/0xb40 [ 981.013396][T18314] ? __pfx_netlink_sendmsg+0x10/0x10 [ 981.013425][T18314] ? aa_sock_msg_perm+0xf1/0x1b0 [ 981.013462][T18314] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 981.013490][T18314] ____sys_sendmsg+0x972/0x9f0 [ 981.013528][T18314] ? __pfx_____sys_sendmsg+0x10/0x10 [ 981.013567][T18314] ? import_iovec+0x73/0xa0 [ 981.013596][T18314] ___sys_sendmsg+0x2a5/0x360 [ 981.013632][T18314] ? __pfx____sys_sendmsg+0x10/0x10 [ 981.013697][T18314] ? __fget_files+0x2a/0x420 [ 981.013716][T18314] ? __fget_files+0x3a0/0x420 [ 981.013746][T18314] __x64_sys_sendmsg+0x1bd/0x2a0 [ 981.013778][T18314] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 981.013815][T18314] ? __pfx_ksys_write+0x10/0x10 [ 981.013854][T18314] do_syscall_64+0x14d/0xf80 [ 981.013883][T18314] ? trace_irq_disable+0x3b/0x150 [ 981.013903][T18314] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 981.013926][T18314] ? clear_bhb_loop+0x40/0x90 [ 981.013955][T18314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 981.013977][T18314] RIP: 0033:0x7fbd0719c819 [ 981.014000][T18314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 981.014021][T18314] RSP: 002b:00007fbd053f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 981.014045][T18314] RAX: ffffffffffffffda RBX: 00007fbd07415fa0 RCX: 00007fbd0719c819 [ 981.014062][T18314] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 981.014076][T18314] RBP: 00007fbd053f6090 R08: 0000000000000000 R09: 0000000000000000 [ 981.014091][T18314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 981.014104][T18314] R13: 00007fbd07416038 R14: 00007fbd07415fa0 R15: 00007fbd0753fa48 [ 981.014139][T18314] [ 981.480828][T18317] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3501'. [ 981.494817][T18317] vlan2: entered promiscuous mode [ 982.010011][T18328] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3504'. [ 982.022957][ T5920] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 982.191344][ T5920] usb 5-1: Using ep0 maxpacket: 8 [ 982.213970][ T5920] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 982.223021][ T5920] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 982.252780][ T5920] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 982.282754][ T5920] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 982.338086][ T5920] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 982.517195][ T5920] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 982.526507][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 982.747080][ T24] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 982.757540][ T5920] usb 5-1: usb_control_msg returned -32 [ 982.763351][ T5920] usbtmc 5-1:16.0: can't read capabilities [ 982.917290][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 982.925383][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 17408, setting to 1024 [ 982.943495][ T24] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1024 [ 982.987954][ T24] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 983.032172][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 983.116443][ T24] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 983.137796][T18322] usbtmc 5-1:16.0: usb_control_msg returned -71 [ 983.138914][ T9] usb 5-1: USB disconnect, device number 2 [ 983.145987][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 983.165333][T18340] usbtmc 5-1:16.0: send_request_dev_dep_msg_in returned -19 [ 983.173078][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 983.182511][ T24] usb 3-1: SerialNumber: syz [ 983.372685][T18334] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 983.380926][T18334] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 983.987169][ T9] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 984.158643][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 984.198941][ T9] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 984.236751][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 984.252880][ T9716] usb 4-1: USB disconnect, device number 23 [ 984.368169][ T9] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 984.389837][ T24] usb 3-1: USB disconnect, device number 10 [ 984.412674][T18357] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3510'. [ 984.552985][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.571292][T18359] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3511'. [ 984.590677][T18352] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 984.607559][ T9] usb 1-1: config 0 descriptor?? [ 984.768031][ T5906] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 984.964026][ T5906] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 984.974916][ T5906] usb 2-1: too many endpoints for config 1 interface 0 altsetting 7: 255, using maximum allowed: 30 [ 984.989585][ T5906] usb 2-1: config 1 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 985.020141][ T5906] usb 2-1: config 1 interface 0 has no altsetting 0 [ 985.241761][T18369] IPVS: set_ctl: invalid protocol: 1 100.1.1.2:20002 [ 985.367891][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 985.367912][ T30] audit: type=1326 audit(1775865988.599:1742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18364 comm="syz.3.3513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f604af9c819 code=0x7ffc0000 [ 985.410960][ T5906] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 985.437110][ T1579] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 985.447066][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 985.546082][ T5906] usb 2-1: SerialNumber: syz [ 985.588648][ T30] audit: type=1326 audit(1775865988.599:1743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18364 comm="syz.3.3513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f604af9c819 code=0x7ffc0000 [ 985.619335][T18373] FAULT_INJECTION: forcing a failure. [ 985.619335][T18373] name failslab, interval 1, probability 0, space 0, times 0 [ 985.635369][ T5906] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 985.644791][T18373] CPU: 0 UID: 0 PID: 18373 Comm: syz.4.3514 Tainted: G L syzkaller #0 PREEMPT(full) [ 985.644822][T18373] Tainted: [L]=SOFTLOCKUP [ 985.644828][T18373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 985.644838][T18373] Call Trace: [ 985.644846][T18373] [ 985.644853][T18373] dump_stack_lvl+0xe8/0x150 [ 985.644880][T18373] should_fail_ex+0x412/0x560 [ 985.644911][T18373] should_failslab+0xa8/0x100 [ 985.644934][T18373] __kmalloc_cache_noprof+0x88/0x660 [ 985.644954][T18373] ? hash_ipmac_create+0x2fe/0x1040 [ 985.644981][T18373] hash_ipmac_create+0x2fe/0x1040 [ 985.645008][T18373] ? __nla_parse+0x40/0x60 [ 985.645025][T18373] ? __pfx_hash_ipmac_create+0x10/0x10 [ 985.645048][T18373] ip_set_create+0xae6/0x1a40 [ 985.645073][T18373] ? ip_set_create+0x4eb/0x1a40 [ 985.645104][T18373] ? __pfx_ip_set_create+0x10/0x10 [ 985.645152][T18373] nfnetlink_rcv_msg+0xc00/0x12c0 [ 985.645176][T18373] ? unwind_get_return_address+0x4d/0x90 [ 985.645201][T18373] ? nfnetlink_rcv_msg+0x229/0x12c0 [ 985.645238][T18373] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 985.645296][T18373] netlink_rcv_skb+0x232/0x4b0 [ 985.645315][T18373] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 985.645340][T18373] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 985.645365][T18373] ? bpf_lsm_capable+0x9/0x20 [ 985.645387][T18373] ? security_capable+0x7e/0x2c0 [ 985.645417][T18373] nfnetlink_rcv+0x2c0/0x27b0 [ 985.645448][T18373] ? __local_bh_enable_ip+0xd0/0x130 [ 985.645469][T18373] ? lockdep_hardirqs_on+0x7a/0x110 [ 985.645491][T18373] ? __dev_queue_xmit+0x277/0x3890 [ 985.645513][T18373] ? __local_bh_enable_ip+0xd0/0x130 [ 985.645539][T18373] ? __dev_queue_xmit+0x277/0x3890 [ 985.645561][T18373] ? __dev_queue_xmit+0x1e78/0x3890 [ 985.645582][T18373] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 985.645604][T18373] ? __dev_queue_xmit+0x277/0x3890 [ 985.645631][T18373] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 985.645665][T18373] ? __pfx___dev_queue_xmit+0x10/0x10 [ 985.645694][T18373] ? ref_tracker_free+0x693/0x840 [ 985.645710][T18373] ? __copy_skb_header+0xa3/0x4a0 [ 985.645732][T18373] ? __pfx_ref_tracker_free+0x10/0x10 [ 985.645748][T18373] ? __skb_clone+0x63/0x7a0 [ 985.645772][T18373] ? __skb_clone+0x483/0x7a0 [ 985.645800][T18373] ? skb_clone+0x246/0x3a0 [ 985.645824][T18373] ? __netlink_deliver_tap+0x807/0x850 [ 985.645841][T18373] ? netlink_deliver_tap+0x2e/0x1b0 [ 985.645862][T18373] ? netlink_deliver_tap+0x2e/0x1b0 [ 985.645885][T18373] netlink_unicast+0x80f/0x9b0 [ 985.645917][T18373] ? __pfx_netlink_unicast+0x10/0x10 [ 985.645943][T18373] ? netlink_sendmsg+0x650/0xb40 [ 985.645960][T18373] ? skb_put+0x11b/0x210 [ 985.645981][T18373] netlink_sendmsg+0x813/0xb40 [ 985.646005][T18373] ? __pfx_netlink_sendmsg+0x10/0x10 [ 985.646026][T18373] ? aa_sock_msg_perm+0xf1/0x1b0 [ 985.646052][T18373] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 985.646074][T18373] ____sys_sendmsg+0x972/0x9f0 [ 985.646102][T18373] ? __pfx_____sys_sendmsg+0x10/0x10 [ 985.646130][T18373] ? import_iovec+0x73/0xa0 [ 985.646152][T18373] ___sys_sendmsg+0x2a5/0x360 [ 985.646177][T18373] ? __pfx____sys_sendmsg+0x10/0x10 [ 985.646223][T18373] ? __fget_files+0x2a/0x420 [ 985.646237][T18373] ? __fget_files+0x3a0/0x420 [ 985.646259][T18373] __x64_sys_sendmsg+0x1bd/0x2a0 [ 985.646282][T18373] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 985.646311][T18373] ? __pfx_ksys_write+0x10/0x10 [ 985.646337][T18373] do_syscall_64+0x14d/0xf80 [ 985.646358][T18373] ? trace_irq_disable+0x3b/0x150 [ 985.646373][T18373] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 985.646389][T18373] ? clear_bhb_loop+0x40/0x90 [ 985.646409][T18373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 985.646425][T18373] RIP: 0033:0x7f75f259c819 [ 985.646440][T18373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 985.646454][T18373] RSP: 002b:00007f75f350a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 985.646471][T18373] RAX: ffffffffffffffda RBX: 00007f75f2815fa0 RCX: 00007f75f259c819 [ 985.646483][T18373] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 985.646493][T18373] RBP: 00007f75f350a090 R08: 0000000000000000 R09: 0000000000000000 [ 985.646504][T18373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 985.646514][T18373] R13: 00007f75f2816038 R14: 00007f75f2815fa0 R15: 00007f75f293fa48 [ 985.646545][T18373] [ 986.075592][ T5906] cdc_acm 2-1:1.0: This needs exactly 3 endpoints [ 986.082516][ T5906] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -22 [ 986.095366][ T30] audit: type=1326 audit(1775865988.599:1744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18364 comm="syz.3.3513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f604af5d04e code=0x7ffc0000 [ 986.118014][ T30] audit: type=1326 audit(1775865988.599:1745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18364 comm="syz.3.3513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f604af9c819 code=0x7ffc0000 [ 986.140651][ T30] audit: type=1326 audit(1775865988.599:1746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18364 comm="syz.3.3513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f604af9c819 code=0x7ffc0000 [ 986.163120][ T30] audit: type=1326 audit(1775865988.599:1747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18364 comm="syz.3.3513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f604af9c819 code=0x7ffc0000 [ 986.186154][ T30] audit: type=1326 audit(1775865988.599:1748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18364 comm="syz.3.3513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f604af9c819 code=0x7ffc0000 [ 986.209026][ T30] audit: type=1326 audit(1775865988.599:1749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18364 comm="syz.3.3513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f604af9c819 code=0x7ffc0000 [ 986.231540][ T30] audit: type=1326 audit(1775865988.599:1750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18364 comm="syz.3.3513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f604af9c819 code=0x7ffc0000 [ 986.254452][ T30] audit: type=1326 audit(1775865988.599:1751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18364 comm="syz.3.3513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f604af9c819 code=0x7ffc0000 [ 986.319595][ T1579] usb 3-1: unable to get BOS descriptor or descriptor too short [ 986.328122][ T1579] usb 3-1: not running at top speed; connect to a high speed hub [ 986.642321][ T1579] usb 3-1: config 1 has too many interfaces: 35, using maximum allowed: 32 [ 986.723148][ T1579] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 986.763539][ T1579] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 35 [ 986.800780][ T1579] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 986.852040][ T1579] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 986.881068][ T1579] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.912396][ T1579] usb 3-1: Product: syz [ 986.927199][ T1579] usb 3-1: Manufacturer: syz [ 986.942077][ T1579] usb 3-1: SerialNumber: syz [ 986.984829][ T1579] cdc_ncm 3-1:1.0: skipping garbage [ 987.002546][ T1579] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 987.015299][ T5906] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 987.049736][ T1579] cdc_ncm 3-1:1.0: bind() failure [ 987.199798][ T5906] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 987.343296][ T5906] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 987.357152][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 987.374881][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 987.388267][ T5906] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 987.437503][ T9] usb 1-1: USB disconnect, device number 30 [ 987.467800][ T5906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 987.561902][T18375] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 987.576672][ T5906] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 987.781897][ T5906] usb 5-1: USB disconnect, device number 3 [ 987.868063][ T9] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 987.958244][ T9716] usb 2-1: USB disconnect, device number 42 [ 988.040170][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 988.048692][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 988.062226][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 988.072740][ T9] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 988.083239][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 988.098301][ T9] usb 1-1: config 0 descriptor?? [ 988.277139][ T10] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 988.348696][T18385] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3520'. [ 988.377105][ T9716] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 988.437112][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 988.445100][ T10] usb 4-1: config 0 has an invalid interface number: 11 but max is 0 [ 988.456182][ T10] usb 4-1: config 0 has no interface number 0 [ 988.462530][ T10] usb 4-1: too many endpoints for config 0 interface 11 altsetting 255: 255, using maximum allowed: 30 [ 988.474058][ T10] usb 4-1: config 0 interface 11 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 988.487961][ T10] usb 4-1: config 0 interface 11 has no altsetting 0 [ 988.497763][ T10] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice=d2.7b [ 988.507319][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 988.520482][ T9] hid_parser_main: 4005 callbacks suppressed [ 988.520509][ T9] ft260 0003:0403:6030.001D: unknown main item tag 0x0 [ 988.534995][ T10] usb 4-1: Product: syz [ 988.542377][ T10] usb 4-1: Manufacturer: syz [ 988.549545][ T9716] usb 2-1: Using ep0 maxpacket: 8 [ 988.554846][ T10] usb 4-1: SerialNumber: syz [ 988.561621][ T9] ft260 0003:0403:6030.001D: unknown main item tag 0x0 [ 988.565035][ T9716] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 988.571691][ T10] usb 4-1: config 0 descriptor?? [ 988.588249][ T24] usb 3-1: USB disconnect, device number 11 [ 988.606862][ T9716] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 988.644407][ T9716] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 988.675258][ T9716] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 988.685958][ T9716] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 988.701198][ T9716] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 988.718969][ T9716] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 988.729024][ T9] ft260 0003:0403:6030.001D: chip code: 0000 0000 [ 988.894497][ T10] usb 4-1: Expected 3 endpoints, found: 0 [ 988.907088][ T9715] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 988.919070][ T10] usb 4-1: USB disconnect, device number 24 [ 988.945415][ T9716] usb 2-1: usb_control_msg returned -32 [ 988.956159][ T9716] usbtmc 2-1:16.0: can't read capabilities [ 988.962433][ T9] ft260 0003:0403:6030.001D: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 989.091188][ T9715] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 989.101088][ T9715] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 989.110975][ T9715] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 989.121624][T18399] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3524'. [ 989.130652][ T9715] usb 5-1: config 220 has no interface number 2 [ 989.130733][ T9715] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 989.130764][ T9715] usb 5-1: config 220 interface 0 has no altsetting 0 [ 989.130786][ T9715] usb 5-1: config 220 interface 76 has no altsetting 0 [ 989.130807][ T9715] usb 5-1: config 220 interface 1 has no altsetting 0 [ 989.173756][T18399] vlan2: entered promiscuous mode [ 989.180961][ T9] ft260 0003:0403:6030.001D: failed to retrieve status: -32, no wakeup [ 989.183690][T18377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 989.213984][T18377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 989.228270][ T9715] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 989.243905][ T9715] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.253474][ T9715] usb 5-1: Product: syz [ 989.257856][ T9715] usb 5-1: Manufacturer: syz [ 989.262548][ T9715] usb 5-1: SerialNumber: syz [ 989.355178][T18383] usbtmc 2-1:16.0: usb_control_msg returned -71 [ 989.358618][ T9] usb 2-1: USB disconnect, device number 43 [ 989.393794][T18404] tipc: Enabled bearer , priority 0 [ 989.420186][T18404] tipc: Resetting bearer [ 989.435445][ T24] usb 1-1: USB disconnect, device number 31 [ 989.702081][T18411] IPVS: set_ctl: invalid protocol: 1 100.1.1.2:20002 [ 989.827064][ T5906] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 989.998685][ T5906] usb 4-1: Using ep0 maxpacket: 32 [ 990.012880][ T5906] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 990.040188][ T5906] usb 4-1: config 0 interface 0 has no altsetting 0 [ 990.057052][ T5906] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 990.086073][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 990.120036][ T5906] usb 4-1: config 0 descriptor?? [ 990.762963][ T5906] usbhid 4-1:0.0: can't add hid device: -71 [ 990.792364][ T5906] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 990.829305][ T5906] usb 4-1: USB disconnect, device number 25 [ 991.917894][ T9715] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 991.933743][ T9715] uvcvideo 5-1:220.0: No valid video chain found. [ 991.943254][ T9715] usb 5-1: selecting invalid altsetting 0 [ 992.009251][ T9715] usb 5-1: selecting invalid altsetting 0 [ 992.015901][ T9715] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 992.054854][ T9715] usb 5-1: USB disconnect, device number 4 [ 992.435111][T18439] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3537'. [ 992.482110][ T9] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 992.675636][ T9] usb 3-1: config 1 interface 0 altsetting 16 endpoint 0x82 is Bulk; changing to Interrupt [ 992.694601][ T9] usb 3-1: config 1 interface 0 altsetting 16 endpoint 0x3 is Bulk; changing to Interrupt [ 992.718325][T18443] tipc: Started in network mode [ 992.723964][T18443] tipc: Node identity , cluster identity 4711 [ 992.730203][T18443] tipc: Failed to obtain node identity [ 992.735728][T18443] tipc: Enabling of bearer rejected, failed to enable media [ 992.747027][ T9] usb 3-1: config 1 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 992.797149][ T9] usb 3-1: config 1 interface 0 has no altsetting 0 [ 992.822644][ T9] usb 3-1: string descriptor 0 read error: -22 [ 992.831591][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 992.861993][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.869116][ T5920] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 992.875753][T18443] syzkaller0: entered promiscuous mode [ 992.907413][T18435] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 992.939700][T18435] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 992.949214][T18443] syzkaller0: entered allmulticast mode [ 992.982042][ T9] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 993.031767][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.038244][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.057642][ T5920] usb 2-1: Using ep0 maxpacket: 8 [ 993.078802][ T5920] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 993.087676][ T5920] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 993.107285][ T5920] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 993.117447][ T5920] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 993.127728][ T5920] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 993.142512][ T5920] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 993.151841][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 993.200448][T18435] netlink: 'syz.2.3535': attribute type 2 has an invalid length. [ 993.377204][ T5920] usb 2-1: usb_control_msg returned -32 [ 993.385370][T18446] netlink: 'syz.2.3535': attribute type 2 has an invalid length. [ 993.393531][ T5920] usbtmc 2-1:16.0: can't read capabilities [ 993.783799][ T9716] usb 2-1: USB disconnect, device number 44 [ 993.790126][T18442] usbtmc 2-1:16.0: usb_control_msg returned -71 [ 993.817190][ T5920] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 993.949762][T18458] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3543'. [ 993.977102][ T5920] usb 4-1: Using ep0 maxpacket: 32 [ 993.989871][ T5920] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 994.034115][ T5920] usb 4-1: config 0 interface 0 has no altsetting 0 [ 994.044388][ T5920] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 994.068019][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.082475][ T5920] usb 4-1: config 0 descriptor?? [ 996.754032][T18435] !: entered promiscuous mode [ 996.760969][T18446] !: left promiscuous mode [ 996.941408][ T9] usb 3-1: USB disconnect, device number 12 [ 996.968759][ T5920] usbhid 4-1:0.0: can't add hid device: -71 [ 996.997858][ T5920] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 997.071940][T18469] IPVS: set_ctl: invalid protocol: 1 100.1.1.2:20002 [ 997.114322][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 997.114346][ T30] audit: type=1326 audit(1775866000.429:1780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18464 comm="syz.4.3545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75f259c819 code=0x7ffc0000 [ 997.217370][ T5920] usb 4-1: USB disconnect, device number 26 [ 997.238077][ T30] audit: type=1326 audit(1775866000.429:1781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18464 comm="syz.4.3545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f75f255d04e code=0x7ffc0000 [ 997.442700][T18473] netlink: 496 bytes leftover after parsing attributes in process `syz.0.3549'. [ 997.496854][ T30] audit: type=1326 audit(1775866000.429:1782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18464 comm="syz.4.3545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75f259c819 code=0x7ffc0000 [ 997.568510][T18478] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3549'. [ 997.579389][T18478] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3549'. [ 997.631535][ T30] audit: type=1326 audit(1775866000.429:1783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18464 comm="syz.4.3545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f75f259c819 code=0x7ffc0000 [ 997.711880][ T30] audit: type=1326 audit(1775866000.429:1784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18464 comm="syz.4.3545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75f259c819 code=0x7ffc0000 [ 997.762881][ T30] audit: type=1326 audit(1775866000.429:1785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18464 comm="syz.4.3545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f75f259c819 code=0x7ffc0000 [ 997.796425][ T30] audit: type=1326 audit(1775866000.429:1786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18464 comm="syz.4.3545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75f259c819 code=0x7ffc0000 [ 997.887118][ T9716] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 997.937119][ T30] audit: type=1326 audit(1775866000.429:1787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18464 comm="syz.4.3545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f75f255d04e code=0x7ffc0000 [ 998.023802][ T30] audit: type=1326 audit(1775866000.429:1788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18464 comm="syz.4.3545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75f259c819 code=0x7ffc0000 [ 998.049128][ T9716] usb 2-1: Using ep0 maxpacket: 16 [ 998.072261][ T9716] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 998.084814][ T9716] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.142237][ T9716] usb 2-1: Product: syz [ 998.157410][ T30] audit: type=1326 audit(1775866000.429:1789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18464 comm="syz.4.3545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f75f259c819 code=0x7ffc0000 [ 998.183340][ T9716] usb 2-1: Manufacturer: syz [ 998.197386][ T9716] usb 2-1: SerialNumber: syz [ 998.218394][ T9716] usb 2-1: config 0 descriptor?? [ 998.298119][ T9716] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 998.553747][ T9716] usb 2-1: clie_3_5_startup: get config number bad return length: 0 [ 998.594558][ T9716] visor 2-1:0.0: probe with driver visor failed with error -5 [ 998.651747][T18496] netlink: 'syz.3.3556': attribute type 1 has an invalid length. [ 998.687412][T18496] 8021q: adding VLAN 0 to HW filter on device bond2 [ 998.767154][ T5920] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 998.811532][ T9716] usb 2-1: USB disconnect, device number 45 [ 999.039168][T18499] bond_slave_0: entered promiscuous mode [ 999.044937][T18499] bond_slave_1: entered promiscuous mode [ 999.050797][ T5920] usb 3-1: Using ep0 maxpacket: 16 [ 999.072238][T18499] macvlan2: entered allmulticast mode [ 999.079607][T18499] bond0: entered allmulticast mode [ 999.084930][T18499] bond_slave_0: entered allmulticast mode [ 999.101180][T18499] bond_slave_1: entered allmulticast mode [ 999.116427][ T5920] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 999.138834][T18499] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 999.158004][ T5920] usb 3-1: config 0 has no interface number 0 [ 999.164298][ T5920] usb 3-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 999.180575][T18499] bond0: left allmulticast mode [ 999.216030][T18499] bond_slave_0: left allmulticast mode [ 999.227202][ T5920] usb 3-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 999.236340][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 999.237059][T18499] bond_slave_1: left allmulticast mode [ 999.271896][T18499] bond_slave_0: left promiscuous mode [ 999.279019][T18499] bond_slave_1: left promiscuous mode [ 999.335937][ T5920] usb 3-1: config 0 descriptor?? [ 999.363848][ T5920] usbhid 3-1:0.1: couldn't find an input interrupt endpoint [ 999.497063][ T9716] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 999.647017][ T9716] usb 1-1: Using ep0 maxpacket: 32 [ 999.912525][ T9716] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 999.927768][ T9716] usb 1-1: config 0 interface 0 has no altsetting 0 [ 999.953460][ T9716] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1000.169229][ T9716] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.377034][ T5920] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1000.434706][ T9716] usb 1-1: config 0 descriptor?? [ 1000.552299][ T5920] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1000.577825][ T5920] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1000.591467][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1000.600460][ T5920] usb 4-1: Product: syz [ 1000.615604][ T5920] usb 4-1: Manufacturer: syz [ 1000.710445][ T9716] usbhid 1-1:0.0: can't add hid device: -71 [ 1000.727362][ T5920] usb 4-1: SerialNumber: syz [ 1000.732351][ T9716] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1000.893231][ T9716] usb 1-1: USB disconnect, device number 32 [ 1000.997854][ T5920] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 27 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1001.145023][T18521] fuse: Bad value for 'user_id' [ 1001.154303][T18521] fuse: Bad value for 'user_id' [ 1001.269194][T18522] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1001.494999][T18527] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3565'. [ 1001.952208][ T9] usb 3-1: USB disconnect, device number 13 [ 1002.540055][T18540] IPVS: set_ctl: invalid protocol: 1 100.1.1.2:20002 [ 1002.701830][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1002.701852][ T30] audit: type=1326 audit(1775866005.899:1796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18533 comm="syz.4.3569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75f259c819 code=0x7ffc0000 [ 1002.850077][ T9] usb 4-1: USB disconnect, device number 27 [ 1002.872123][ T9] usblp0: removed [ 1002.916426][ T30] audit: type=1326 audit(1775866005.899:1797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18533 comm="syz.4.3569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f75f255d04e code=0x7ffc0000 [ 1002.989976][ T30] audit: type=1326 audit(1775866005.899:1798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18533 comm="syz.4.3569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75f259c819 code=0x7ffc0000 [ 1003.019707][ T30] audit: type=1326 audit(1775866005.899:1799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18533 comm="syz.4.3569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f75f259c819 code=0x7ffc0000 [ 1003.110909][ T30] audit: type=1326 audit(1775866005.899:1800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18533 comm="syz.4.3569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75f259c819 code=0x7ffc0000 [ 1003.165401][T18549] bond_slave_0: entered promiscuous mode [ 1003.171185][T18549] bond_slave_1: entered promiscuous mode [ 1003.185723][ T30] audit: type=1326 audit(1775866005.899:1801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18533 comm="syz.4.3569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f75f259c819 code=0x7ffc0000 [ 1003.210697][T18549] macvlan2: entered allmulticast mode [ 1003.222889][T18549] bond0: entered allmulticast mode [ 1003.232815][T18549] bond_slave_0: entered allmulticast mode [ 1003.244572][T18549] bond_slave_1: entered allmulticast mode [ 1003.252831][ T30] audit: type=1326 audit(1775866005.899:1802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18533 comm="syz.4.3569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75f259c819 code=0x7ffc0000 [ 1003.289721][T18549] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1003.311978][T18549] bond0: left allmulticast mode [ 1003.328839][T18549] bond_slave_0: left allmulticast mode [ 1003.334475][T18549] bond_slave_1: left allmulticast mode [ 1003.341628][ T30] audit: type=1326 audit(1775866005.899:1803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18533 comm="syz.4.3569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f75f255d04e code=0x7ffc0000 [ 1003.385926][T18549] bond_slave_0: left promiscuous mode [ 1003.391578][T18549] bond_slave_1: left promiscuous mode [ 1003.406480][ T30] audit: type=1326 audit(1775866005.909:1804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18533 comm="syz.4.3569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75f259c819 code=0x7ffc0000 [ 1003.469111][ T30] audit: type=1326 audit(1775866005.909:1805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18533 comm="syz.4.3569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f75f259c819 code=0x7ffc0000 [ 1003.815198][T18556] IPVS: set_ctl: invalid protocol: 1 100.1.1.2:20002 [ 1005.003319][ T5906] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1005.081502][T18570] xt_hashlimit: size too large, truncated to 1048576 [ 1005.169215][ T5906] usb 1-1: Using ep0 maxpacket: 32 [ 1005.179798][ T5906] usb 1-1: config 0 has no interfaces? [ 1005.199277][ T5906] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1005.208645][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.217598][ T5906] usb 1-1: Product: syz [ 1005.250686][ T5906] usb 1-1: Manufacturer: syz [ 1005.277809][ T5906] usb 1-1: SerialNumber: syz [ 1005.337917][ T5906] usb 1-1: config 0 descriptor?? [ 1005.565762][T18579] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3582'. [ 1006.033373][T18586] xt_hashlimit: max too large, truncated to 1048576 [ 1006.047267][ T9716] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1006.216369][ T9716] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1006.226141][ T9716] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1006.237618][ T9716] usb 3-1: Product: syz [ 1006.243851][ T9716] usb 3-1: Manufacturer: syz [ 1006.252135][T18586] loop5: detected capacity change from 0 to 7 [ 1006.259786][T18586] Dev loop5: unable to read RDB block 7 [ 1006.265559][T18586] loop5: unable to read partition table [ 1006.272998][T18586] loop5: partition table beyond EOD, truncated [ 1006.279969][T18586] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1006.320411][ T9716] usb 3-1: SerialNumber: syz [ 1006.684299][T18597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3589'. [ 1006.701190][T18597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3589'. [ 1006.834926][T18597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3589'. [ 1006.930418][T18597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3589'. [ 1007.388270][T18583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1007.399298][T18583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1007.518376][ T9716] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1007.541229][ T9716] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1007.575669][ T9716] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1007.652020][ T9716] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 1007.709393][ T9716] usb 3-1: USB disconnect, device number 14 [ 1007.728619][ T9715] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1007.908230][ T9715] usb 4-1: Using ep0 maxpacket: 16 [ 1007.975115][ T9715] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1007.986389][ T9715] usb 4-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=ab.34 [ 1008.036983][ T9715] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1008.045108][ T9715] usb 4-1: Product: syz [ 1008.067289][ T9715] usb 4-1: Manufacturer: syz [ 1008.072015][ T9715] usb 4-1: SerialNumber: syz [ 1008.101521][T18609] IPVS: set_ctl: invalid protocol: 1 100.1.1.2:20002 [ 1008.118740][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 1008.118761][ T30] audit: type=1326 audit(1775866011.459:1831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18606 comm="syz.1.3592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13439c819 code=0x7ffc0000 [ 1008.429083][ T30] audit: type=1326 audit(1775866011.459:1832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18606 comm="syz.1.3592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa13435d04e code=0x7ffc0000 [ 1008.465377][ T9715] usb 4-1: USB disconnect, device number 28 [ 1008.522254][ T30] audit: type=1326 audit(1775866011.459:1833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18606 comm="syz.1.3592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13439c819 code=0x7ffc0000 [ 1008.604280][ T30] audit: type=1326 audit(1775866011.459:1834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18606 comm="syz.1.3592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7fa13439c819 code=0x7ffc0000 [ 1008.733034][ T30] audit: type=1326 audit(1775866011.459:1835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18606 comm="syz.1.3592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13439c819 code=0x7ffc0000 [ 1008.834466][ T30] audit: type=1326 audit(1775866011.459:1836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18606 comm="syz.1.3592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa13439c819 code=0x7ffc0000 [ 1008.879133][ T9715] usb 1-1: USB disconnect, device number 33 [ 1008.915684][ T30] audit: type=1326 audit(1775866011.459:1837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18606 comm="syz.1.3592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13439c819 code=0x7ffc0000 [ 1009.019597][ T30] audit: type=1326 audit(1775866011.459:1838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18606 comm="syz.1.3592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa13435d04e code=0x7ffc0000 [ 1009.368845][ T30] audit: type=1326 audit(1775866011.459:1839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18606 comm="syz.1.3592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13439c819 code=0x7ffc0000 [ 1009.530267][ T30] audit: type=1326 audit(1775866011.459:1840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18606 comm="syz.1.3592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7fa13439c819 code=0x7ffc0000 [ 1009.747235][T18628] bond_slave_0: entered promiscuous mode [ 1009.753006][T18628] bond_slave_1: entered promiscuous mode [ 1009.769350][ T797] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1009.842930][T18628] macvlan2: entered allmulticast mode [ 1009.873149][T18628] bond0: entered allmulticast mode [ 1009.897609][T18628] bond_slave_0: entered allmulticast mode [ 1009.956817][T18628] bond_slave_1: entered allmulticast mode [ 1009.962846][ T797] usb 4-1: Using ep0 maxpacket: 16 [ 1009.997447][ T797] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1010.040913][T18628] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1010.048063][ T797] usb 4-1: config 0 has no interface number 0 [ 1010.067994][ T797] usb 4-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1010.093710][T18628] bond0: left allmulticast mode [ 1010.218182][T18628] bond_slave_0: left allmulticast mode [ 1010.236245][ T797] usb 4-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 1010.253033][T18628] bond_slave_1: left allmulticast mode [ 1010.269934][T18636] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3599'. [ 1010.345605][T18628] bond_slave_0: left promiscuous mode [ 1010.351201][T18628] bond_slave_1: left promiscuous mode [ 1010.382393][ T797] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1010.454188][ T797] usb 4-1: config 0 descriptor?? [ 1010.573975][ T797] usbhid 4-1:0.1: couldn't find an input interrupt endpoint [ 1010.905680][T18641] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1728497071 (13827976568 ns) > initial count (134217856 ns). Using initial count to start timer. [ 1011.134435][T18645] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3601'. [ 1011.168610][T18645] vlan2: entered promiscuous mode [ 1011.702035][T18661] netlink: 'syz.0.3608': attribute type 13 has an invalid length. [ 1011.837411][ T9] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1011.857497][ T9715] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1012.049134][T18665] netlink: 7 bytes leftover after parsing attributes in process `syz.0.3609'. [ 1012.150613][ T9] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1012.180173][ T9] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1012.197038][ T9715] usb 3-1: Using ep0 maxpacket: 32 [ 1012.205631][ T9715] usb 3-1: config 0 has no interfaces? [ 1012.205868][T18667] Invalid logical block size (211) [ 1012.219508][ T9] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1012.219533][ T9715] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1012.239251][ T9715] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.249919][ T9715] usb 3-1: Product: syz [ 1012.254255][ T9715] usb 3-1: Manufacturer: syz [ 1012.256904][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.259404][ T9715] usb 3-1: SerialNumber: syz [ 1012.313128][ T9715] usb 3-1: config 0 descriptor?? [ 1012.368492][ T9715] usb 4-1: USB disconnect, device number 29 [ 1012.375711][T18665] netlink: 7 bytes leftover after parsing attributes in process `syz.0.3609'. [ 1012.475662][T18658] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1012.503444][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1012.912819][T18681] FAULT_INJECTION: forcing a failure. [ 1012.912819][T18681] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1012.977127][ T9716] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1013.138489][T18681] CPU: 1 UID: 0 PID: 18681 Comm: syz.4.3612 Tainted: G L syzkaller #0 PREEMPT(full) [ 1013.138528][T18681] Tainted: [L]=SOFTLOCKUP [ 1013.138537][T18681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1013.138552][T18681] Call Trace: [ 1013.138561][T18681] [ 1013.138572][T18681] dump_stack_lvl+0xe8/0x150 [ 1013.138610][T18681] should_fail_ex+0x412/0x560 [ 1013.138652][T18681] _copy_to_user+0x31/0xb0 [ 1013.138683][T18681] simple_read_from_buffer+0xe1/0x170 [ 1013.138723][T18681] proc_fail_nth_read+0x1bb/0x230 [ 1013.138761][T18681] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1013.138800][T18681] ? rw_verify_area+0x2a6/0x4d0 [ 1013.138826][T18681] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1013.138861][T18681] vfs_read+0x20c/0xa70 [ 1013.138886][T18681] ? fdget_pos+0x246/0x320 [ 1013.138913][T18681] ? __pfx___mutex_lock+0x10/0x10 [ 1013.138946][T18681] ? __pfx_vfs_read+0x10/0x10 [ 1013.138973][T18681] ? __fget_files+0x2a/0x420 [ 1013.138999][T18681] ? __fget_files+0x3a0/0x420 [ 1013.139019][T18681] ? __fget_files+0x2a/0x420 [ 1013.139050][T18681] ksys_read+0x150/0x270 [ 1013.139078][T18681] ? __pfx_ksys_read+0x10/0x10 [ 1013.139116][T18681] do_syscall_64+0x14d/0xf80 [ 1013.139147][T18681] ? trace_irq_disable+0x3b/0x150 [ 1013.139167][T18681] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1013.139191][T18681] ? clear_bhb_loop+0x40/0x90 [ 1013.139220][T18681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1013.139244][T18681] RIP: 0033:0x7f75f255d04e [ 1013.139265][T18681] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1013.139286][T18681] RSP: 002b:00007f75f34e8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1013.139311][T18681] RAX: ffffffffffffffda RBX: 00007f75f34e96c0 RCX: 00007f75f255d04e [ 1013.139338][T18681] RDX: 000000000000000f RSI: 00007f75f34e90a0 RDI: 0000000000000004 [ 1013.139358][T18681] RBP: 00007f75f34e9090 R08: 0000000000000000 R09: 0000000000000000 [ 1013.139373][T18681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1013.139387][T18681] R13: 00007f75f2816128 R14: 00007f75f2816090 R15: 00007f75f293fa48 [ 1013.139423][T18681] [ 1013.589914][ T9716] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1013.599734][ T9716] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1013.612296][ T9716] usb 4-1: Product: syz [ 1013.617125][ T9716] usb 4-1: Manufacturer: syz [ 1013.621838][ T9716] usb 4-1: SerialNumber: syz [ 1013.647756][ T9716] usb 4-1: config 0 descriptor?? [ 1013.667243][ T9] usb 2-1: USB disconnect, device number 46 [ 1013.686096][ T9716] ch341 4-1:0.0: ch341-uart converter detected [ 1013.864136][ T9716] usb 4-1: failed to receive control message: -71 [ 1013.875076][ T9716] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1013.923556][ T9716] usb 4-1: USB disconnect, device number 30 [ 1013.939489][ T9716] ch341 4-1:0.0: device disconnected [ 1014.343318][T18687] IPVS: set_ctl: invalid protocol: 1 100.1.1.2:20002 [ 1014.379785][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1014.379809][ T30] audit: type=1326 audit(1775866017.709:1847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18684 comm="syz.0.3614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0719c819 code=0x7ffc0000 [ 1014.418481][ T30] audit: type=1326 audit(1775866017.709:1848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18684 comm="syz.0.3614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbd0715d04e code=0x7ffc0000 [ 1014.481488][ T30] audit: type=1326 audit(1775866017.709:1849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18684 comm="syz.0.3614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0719c819 code=0x7ffc0000 [ 1014.534289][ T30] audit: type=1326 audit(1775866017.709:1850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18684 comm="syz.0.3614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7fbd0719c819 code=0x7ffc0000 [ 1014.733480][ T30] audit: type=1326 audit(1775866017.709:1851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18684 comm="syz.0.3614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0719c819 code=0x7ffc0000 [ 1014.785165][T18694] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 1014.785356][T18691] geneve1: entered promiscuous mode [ 1014.815771][ T9715] usb 3-1: USB disconnect, device number 15 [ 1014.829421][T18696] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3617'. [ 1014.857967][T18691] macsec1: entered promiscuous mode [ 1014.863459][T18691] macsec1: entered allmulticast mode [ 1014.953004][T18691] geneve1: entered allmulticast mode [ 1014.967229][T18691] geneve1: left allmulticast mode [ 1014.990973][ T30] audit: type=1326 audit(1775866017.709:1852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18684 comm="syz.0.3614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fbd0719c819 code=0x7ffc0000 [ 1015.020973][T18698] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3618'. [ 1015.033687][T18691] geneve1: left promiscuous mode [ 1015.055826][ T30] audit: type=1326 audit(1775866017.709:1853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18684 comm="syz.0.3614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0719c819 code=0x7ffc0000 [ 1015.083103][ T30] audit: type=1326 audit(1775866017.709:1854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18684 comm="syz.0.3614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbd0715d04e code=0x7ffc0000 [ 1015.114670][T18698] vlan2: entered promiscuous mode [ 1015.163496][ T30] audit: type=1326 audit(1775866017.709:1855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18684 comm="syz.0.3614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0719c819 code=0x7ffc0000 [ 1015.249311][ T30] audit: type=1326 audit(1775866017.709:1856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18684 comm="syz.0.3614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7fbd0719c819 code=0x7ffc0000 [ 1015.458469][T18708] usb usb8: usbfs: process 18708 (syz.2.3621) did not claim interface 0 before use [ 1015.487093][ T5906] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1015.527113][ T9716] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1015.637034][ T5906] usb 4-1: Using ep0 maxpacket: 32 [ 1015.652312][ T5906] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1015.663908][ T5906] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1015.689665][ T9716] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1015.708007][ T9716] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1015.737738][ T9716] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1015.756695][ T9716] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.757117][ T5906] usb 4-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1015.788946][ T9715] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 1015.837053][ T9716] usb 2-1: Product: syz [ 1015.844162][ T9716] usb 2-1: Manufacturer: syz [ 1015.844187][ T5906] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1015.844264][ T5906] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1015.854391][ T9716] usb 2-1: SerialNumber: syz [ 1015.927294][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1015.979187][ T9715] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1015.990186][ T9715] usb 3-1: too many endpoints for config 1 interface 0 altsetting 7: 255, using maximum allowed: 30 [ 1016.007510][ T9716] usb 2-1: config 0 descriptor?? [ 1016.029675][ T9715] usb 3-1: config 1 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1016.052789][ T9716] usb 2-1: 0:0 : invalid sync pipe. is_playback 1, ep 0a, bSynchAddress 07 [ 1016.130123][ T9715] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1016.148936][ T5906] usb 4-1: config 0 descriptor?? [ 1016.189286][ T9715] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1016.238406][ T9715] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1016.257627][ T5920] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1016.309565][ T9715] usb 3-1: SerialNumber: syz [ 1016.368720][ T9715] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 1016.405418][ T9715] cdc_acm 3-1:1.0: This needs exactly 3 endpoints [ 1016.432920][ T5920] usb 5-1: config 118 interface 0 has no altsetting 0 [ 1016.445774][ T9715] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -22 [ 1016.466051][ T5920] usb 5-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 1016.487052][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1016.520352][ T9716] usb 2-1: USB disconnect, device number 47 [ 1016.563398][ T5920] usb 5-1: Product: syz [ 1016.568178][ T5920] usb 5-1: Manufacturer: syz [ 1016.601441][ T5920] usb 5-1: SerialNumber: syz [ 1016.663270][ T6110] udevd[6110]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1016.740178][ T5906] hid-thrustmaster 0003:044F:B65D.001E: unknown main item tag 0x0 [ 1016.836978][ T5906] hid-thrustmaster 0003:044F:B65D.001E: unknown main item tag 0x0 [ 1016.987726][ T5906] hid-thrustmaster 0003:044F:B65D.001E: unknown main item tag 0x0 [ 1017.037015][ T5906] hid-thrustmaster 0003:044F:B65D.001E: unknown main item tag 0x0 [ 1017.064705][ T5906] hid-thrustmaster 0003:044F:B65D.001E: unknown main item tag 0x0 [ 1017.144150][ T5906] hid-thrustmaster 0003:044F:B65D.001E: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.3-1/input0 [ 1017.177482][ T9716] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1017.199482][ T5906] hid-thrustmaster 0003:044F:B65D.001E: Unexpected non-int endpoint [ 1017.266156][ C0] hid-thrustmaster 0003:044F:B65D.001E: URB to get model id failed with error -71 [ 1017.326476][ T5906] usb 4-1: USB disconnect, device number 31 [ 1017.363830][ T9716] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1017.405760][ T9716] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1017.441333][ T9716] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1017.475350][ T9716] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.502927][T18720] fido_id[18720]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1017.537044][T18717] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1017.562983][ T9716] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1018.551669][T18736] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3630'. [ 1019.035803][T18744] netlink: 'syz.3.3633': attribute type 4 has an invalid length. [ 1019.100080][ T797] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1019.154528][ T9715] usb 3-1: USB disconnect, device number 16 [ 1019.279710][ T797] usb 1-1: Using ep0 maxpacket: 32 [ 1019.292609][ T797] usb 1-1: config 7 has an invalid interface number: 244 but max is 3 [ 1019.301301][ T797] usb 1-1: config 7 has an invalid interface number: 212 but max is 3 [ 1019.310007][ T797] usb 1-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 1019.327906][ T797] usb 1-1: config 7 has an invalid interface number: 245 but max is 3 [ 1019.345530][T18750] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3635'. [ 1019.353576][ T797] usb 1-1: config 7 has an invalid interface number: 159 but max is 3 [ 1019.363599][T18750] bridge0: port 2(bridge_slave_1) entered blocking state [ 1019.371055][T18750] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1019.378750][T18750] bridge0: port 1(bridge_slave_0) entered blocking state [ 1019.386061][T18750] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1019.398298][ T797] usb 1-1: config 7 has no interface number 0 [ 1019.414676][ T797] usb 1-1: config 7 has no interface number 1 [ 1019.430487][T18750] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3635'. [ 1019.450405][ T797] usb 1-1: config 7 has no interface number 2 [ 1019.464960][ T797] usb 1-1: config 7 has no interface number 3 [ 1019.473544][ T797] usb 1-1: config 7 interface 244 altsetting 9 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 1019.486802][ T797] usb 1-1: config 7 interface 244 altsetting 9 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 1019.508374][ T797] usb 1-1: config 7 interface 245 altsetting 6 has a duplicate endpoint with address 0xA, skipping [ 1019.532639][ T797] usb 1-1: config 7 interface 159 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1019.574638][ T797] usb 1-1: config 7 interface 244 has no altsetting 0 [ 1019.594427][ T797] usb 1-1: config 7 interface 212 has no altsetting 0 [ 1019.612021][ T797] usb 1-1: config 7 interface 245 has no altsetting 0 [ 1019.632644][ T797] usb 1-1: config 7 interface 159 has no altsetting 0 [ 1019.646708][ T797] usb 1-1: Dual-Role OTG device on HNP port [ 1019.653910][ T797] usb 1-1: New USB device found, idVendor=1b3d, idProduct=931a, bcdDevice=a4.70 [ 1019.668212][ T797] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.691491][ T797] usb 1-1: Product: syz [ 1019.695868][ T797] usb 1-1: Manufacturer: syz [ 1019.705868][ T797] usb 1-1: SerialNumber: syz [ 1019.854547][ T5920] dvb-usb: found a 'Pinnacle PCTV 310e' in warm state. [ 1019.879162][ T9715] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1019.892381][ T5920] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1019.921544][ T5920] dvbdev: DVB: registering new adapter (Pinnacle PCTV 310e) [ 1020.006852][ T24] usb 2-1: USB disconnect, device number 48 [ 1020.027394][ T5920] usb 5-1: media controller created [ 1020.089263][ T9715] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1020.106536][ T5920] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1020.116088][ T9715] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1020.131039][ T9715] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1020.141228][ T9715] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.168562][T18754] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1020.185041][ T9715] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1020.366109][ T797] ftdi_sio 1-1:7.244: FTDI USB Serial Device converter detected [ 1020.382776][ T797] ftdi_sio ttyUSB0: unknown device type: 0xa470 [ 1020.438260][ T5920] DVB: Unable to find symbol mt352_attach() [ 1020.540460][ T797] ftdi_sio 1-1:7.212: FTDI USB Serial Device converter detected [ 1020.551567][ T5920] dvb-usb: no frontend was attached by 'Pinnacle PCTV 310e' [ 1020.620661][ T797] ftdi_sio ttyUSB1: unknown device type: 0xa470 [ 1020.630926][ T5920] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input39 [ 1020.660495][ T9715] usb 4-1: USB disconnect, device number 32 [ 1020.691918][ T5920] dvb-usb: schedule remote query interval to 100 msecs. [ 1020.701128][ T5920] dvb-usb: Pinnacle PCTV 310e successfully initialized and connected. [ 1020.724479][ T5920] dvb_usb_m920x 5-1:118.0: probe with driver dvb_usb_m920x failed with error -71 [ 1020.739067][ T797] ftdi_sio 1-1:7.245: FTDI USB Serial Device converter detected [ 1020.762014][ T5920] usb 5-1: USB disconnect, device number 5 [ 1020.787732][ T797] ftdi_sio ttyUSB2: unknown device type: 0xa470 [ 1020.802187][ T6115] udevd[6115]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1020.829842][ T24] m920x_read = error: -19 [ 1020.834533][ T24] dvb-usb: error while querying for an remote control event. [ 1020.853153][ T797] ftdi_sio 1-1:7.159: FTDI USB Serial Device converter detected [ 1020.977209][ T24] m920x_read = error: -19 [ 1020.981647][ T24] dvb-usb: error while querying for an remote control event. [ 1020.984812][T18772] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3642'. [ 1021.022118][ T797] ftdi_sio ttyUSB3: unknown device type: 0xa470 [ 1021.063896][ T797] usb 1-1: USB disconnect, device number 34 [ 1021.098528][T18775] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3642'. [ 1021.119197][ T797] ftdi_sio 1-1:7.244: device disconnected [ 1021.146229][T18772] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3642'. [ 1021.158017][ T24] m920x_read = error: -19 [ 1021.167619][ T24] dvb-usb: error while querying for an remote control event. [ 1021.224542][ T797] ftdi_sio 1-1:7.212: device disconnected [ 1021.241184][ T797] ftdi_sio 1-1:7.245: device disconnected [ 1021.252127][ T797] ftdi_sio 1-1:7.159: device disconnected [ 1021.287307][ T9715] m920x_read = error: -19 [ 1021.292011][ T9715] dvb-usb: error while querying for an remote control event. [ 1021.341322][T18782] usb usb8: usbfs: process 18782 (syz.3.3644) did not claim interface 0 before use [ 1021.446784][ T9715] m920x_read = error: -19 [ 1021.462287][ T9715] dvb-usb: error while querying for an remote control event. [ 1021.507405][ T24] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1021.607423][ T9715] m920x_read = error: -19 [ 1021.621496][ T9715] dvb-usb: error while querying for an remote control event. [ 1021.669390][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1021.679609][ T5906] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 1021.766578][ T9715] m920x_read = error: -19 [ 1021.866653][T18787] IPVS: set_ctl: invalid protocol: 1 100.1.1.2:20002 [ 1021.957865][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1021.957890][ T30] audit: type=1326 audit(1775866025.229:1863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18784 comm="syz.0.3645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0719c819 code=0x7ffc0000 [ 1021.997269][ T9715] dvb-usb: error while querying for an remote control event. [ 1022.005728][ T5906] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1022.016018][ T5906] usb 4-1: too many endpoints for config 1 interface 0 altsetting 7: 255, using maximum allowed: 30 [ 1022.026519][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1022.042776][ T5906] usb 4-1: config 1 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1022.063167][ T24] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1022.169974][ T797] m920x_read = error: -19 [ 1022.174553][ T797] dvb-usb: error while querying for an remote control event. [ 1022.187361][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1022.195788][ T30] audit: type=1326 audit(1775866025.229:1864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18784 comm="syz.0.3645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0719c819 code=0x7ffc0000 [ 1022.228657][ T24] usb 3-1: SerialNumber: syz [ 1022.271245][ T30] audit: type=1326 audit(1775866025.229:1865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18784 comm="syz.0.3645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbd0715d04e code=0x7ffc0000 [ 1022.327082][ T797] m920x_read = error: -19 [ 1022.331611][ T797] dvb-usb: error while querying for an remote control event. [ 1022.372958][ T30] audit: type=1326 audit(1775866025.229:1866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18784 comm="syz.0.3645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0719c819 code=0x7ffc0000 [ 1022.441126][ T5906] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1022.441177][ T30] audit: type=1326 audit(1775866025.229:1867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18784 comm="syz.0.3645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7fbd0719c819 code=0x7ffc0000 [ 1022.471077][ T797] m920x_read = error: -19 [ 1022.475505][ T797] dvb-usb: error while querying for an remote control event. [ 1022.517522][T18772] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3642'. [ 1022.566548][ T30] audit: type=1326 audit(1775866025.239:1868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18784 comm="syz.0.3645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0719c819 code=0x7ffc0000 [ 1022.590491][ T30] audit: type=1326 audit(1775866025.239:1869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18784 comm="syz.0.3645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fbd0719c819 code=0x7ffc0000 [ 1022.613801][ T797] m920x_read = error: -19 [ 1022.629896][ T797] dvb-usb: error while querying for an remote control event. [ 1022.690474][ T5906] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1022.702197][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1022.728517][ T5906] usb 4-1: SerialNumber: syz [ 1022.757617][ T9715] m920x_read = error: -19 [ 1022.758402][ T5906] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 1022.769902][ T9715] dvb-usb: error while querying for an remote control event. [ 1022.778928][ T30] audit: type=1326 audit(1775866025.239:1870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18784 comm="syz.0.3645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0719c819 code=0x7ffc0000 [ 1022.787312][T18772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1022.807557][ T5906] cdc_acm 4-1:1.0: This needs exactly 3 endpoints [ 1022.831676][ T30] audit: type=1326 audit(1775866025.239:1871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18784 comm="syz.0.3645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbd0715d04e code=0x7ffc0000 [ 1022.837102][ T5906] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -22 [ 1022.877154][ T9715] m920x_read = error: -19 [ 1022.881612][ T9715] dvb-usb: error while querying for an remote control event. [ 1022.897724][T18772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1022.936049][ T24] usb 3-1: 0:2 : does not exist [ 1022.949552][ T24] usb 3-1: unit 5: unexpected type 0x0c [ 1022.972542][ T30] audit: type=1326 audit(1775866025.239:1872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18784 comm="syz.0.3645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0719c819 code=0x7ffc0000 [ 1023.057322][ T9715] m920x_read = error: -19 [ 1023.221031][ T9715] dvb-usb: error while querying for an remote control event. [ 1023.294498][ T24] usb 3-1: USB disconnect, device number 17 [ 1023.379202][ T9716] m920x_read = error: -19 [ 1023.383676][ T9716] dvb-usb: error while querying for an remote control event. [ 1023.527292][ T9716] m920x_read = error: -19 [ 1023.531736][ T9716] dvb-usb: error while querying for an remote control event. [ 1023.677070][ T9716] m920x_read = error: -19 [ 1023.681517][ T9716] dvb-usb: error while querying for an remote control event. [ 1023.696599][T18797] FAULT_INJECTION: forcing a failure. [ 1023.696599][T18797] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1023.746062][T18797] CPU: 0 UID: 0 PID: 18797 Comm: syz.4.3648 Tainted: G L syzkaller #0 PREEMPT(full) [ 1023.746089][T18797] Tainted: [L]=SOFTLOCKUP [ 1023.746096][T18797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1023.746106][T18797] Call Trace: [ 1023.746113][T18797] [ 1023.746121][T18797] dump_stack_lvl+0xe8/0x150 [ 1023.746155][T18797] should_fail_ex+0x412/0x560 [ 1023.746185][T18797] _copy_from_user+0x2d/0xb0 [ 1023.746205][T18797] ip6gre_tunnel_siocdevprivate+0x1fb/0x720 [ 1023.746233][T18797] ? __pfx_ip6gre_tunnel_siocdevprivate+0x10/0x10 [ 1023.746270][T18797] ? full_name_hash+0x92/0xe0 [ 1023.746300][T18797] dev_ifsioc+0xba6/0x1280 [ 1023.746324][T18797] dev_ioctl+0x84c/0x1150 [ 1023.746344][T18797] sock_ioctl+0x75f/0x7f0 [ 1023.746370][T18797] ? __pfx_sock_ioctl+0x10/0x10 [ 1023.746394][T18797] ? __fget_files+0x3a0/0x420 [ 1023.746408][T18797] ? __fget_files+0x2a/0x420 [ 1023.746424][T18797] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1023.746446][T18797] ? __pfx_sock_ioctl+0x10/0x10 [ 1023.746468][T18797] __se_sys_ioctl+0xfc/0x170 [ 1023.746490][T18797] do_syscall_64+0x14d/0xf80 [ 1023.746510][T18797] ? trace_irq_disable+0x3b/0x150 [ 1023.746525][T18797] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1023.746540][T18797] ? clear_bhb_loop+0x40/0x90 [ 1023.746560][T18797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1023.746576][T18797] RIP: 0033:0x7f75f259c819 [ 1023.746591][T18797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1023.746605][T18797] RSP: 002b:00007f75f350a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1023.746623][T18797] RAX: ffffffffffffffda RBX: 00007f75f2815fa0 RCX: 00007f75f259c819 [ 1023.746635][T18797] RDX: 0000200000000600 RSI: 00000000000089f1 RDI: 0000000000000004 [ 1023.746646][T18797] RBP: 00007f75f350a090 R08: 0000000000000000 R09: 0000000000000000 [ 1023.746656][T18797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1023.746666][T18797] R13: 00007f75f2816038 R14: 00007f75f2815fa0 R15: 00007f75f293fa48 [ 1023.746691][T18797] [ 1023.957683][ T9716] m920x_read = error: -19 [ 1023.971933][ T9716] dvb-usb: error while querying for an remote control event. [ 1024.055771][T18804] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3652'. [ 1024.072875][T18804] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3652'. [ 1024.087536][ T24] m920x_read = error: -19 [ 1024.091965][ T24] dvb-usb: error while querying for an remote control event. [ 1024.207229][ T24] m920x_read = error: -19 [ 1024.212206][ T24] dvb-usb: error while querying for an remote control event. [ 1024.287100][ T9716] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1024.328292][ T24] m920x_read = error: -19 [ 1024.332875][ T24] dvb-usb: error while querying for an remote control event. [ 1024.439244][ T9716] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1024.451118][ T24] m920x_read = error: -19 [ 1024.455621][ T24] dvb-usb: error while querying for an remote control event. [ 1024.464830][ T9716] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1024.504049][ T9716] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1024.535628][ T9716] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1024.562097][T18798] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1024.578487][ T9716] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1024.587175][ T24] m920x_read = error: -19 [ 1024.591674][ T24] dvb-usb: error while querying for an remote control event. [ 1024.687489][ T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1024.709105][ T24] m920x_read = error: -19 [ 1024.723517][ T24] dvb-usb: error while querying for an remote control event. [ 1024.927209][ T9716] m920x_read = error: -19 [ 1024.931728][ T9716] dvb-usb: error while querying for an remote control event. [ 1024.943056][ T9] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1024.964921][ T9] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1024.993446][ T9] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1025.038967][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1025.097194][ T24] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1025.135830][T18812] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1025.147105][ T9716] m920x_read = error: -19 [ 1025.150393][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1025.151662][ T9716] dvb-usb: error while querying for an remote control event. [ 1025.183215][ T9715] usb 4-1: USB disconnect, device number 33 [ 1025.248948][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 1025.259669][ T24] usb 5-1: config 0 has no interfaces? [ 1025.286263][ T24] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1025.295847][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1025.337168][ T9716] m920x_read = error: -19 [ 1025.361630][ T9716] dvb-usb: error while querying for an remote control event. [ 1025.380250][ T24] usb 5-1: Product: syz [ 1025.392783][ T24] usb 5-1: Manufacturer: syz [ 1025.409890][ T24] usb 5-1: SerialNumber: syz [ 1025.433124][ T24] usb 5-1: config 0 descriptor?? [ 1025.507078][ T24] m920x_read = error: -19 [ 1025.511669][ T24] dvb-usb: error while querying for an remote control event. [ 1025.821090][ T24] m920x_read = error: -19 [ 1025.858848][ T24] dvb-usb: error while querying for an remote control event. [ 1025.920851][ T9] usb 3-1: USB disconnect, device number 18 [ 1025.991951][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 1026.096843][ T24] m920x_read = error: -19 [ 1026.107243][ T24] dvb-usb: error while querying for an remote control event. [ 1026.264137][ T9716] m920x_read = error: -19 [ 1026.286330][ T9716] dvb-usb: error while querying for an remote control event. [ 1026.294393][ T24] usb 2-1: USB disconnect, device number 49 [ 1026.462160][ T9715] m920x_read = error: -19 [ 1026.484560][ T9715] dvb-usb: error while querying for an remote control event. [ 1026.489587][T18827] tipc: Enabling of bearer rejected, already enabled [ 1026.611091][ T9715] m920x_read = error: -19 [ 1026.627380][ T9715] dvb-usb: error while querying for an remote control event. [ 1026.757115][ T9715] m920x_read = error: -19 [ 1026.767001][ T9715] dvb-usb: error while querying for an remote control event. [ 1026.919140][ T9715] m920x_read = error: -19 [ 1026.934314][ T9715] dvb-usb: error while querying for an remote control event. [ 1027.067094][ T9715] m920x_read = error: -19 [ 1027.071980][ T9715] dvb-usb: error while querying for an remote control event. [ 1027.197664][ T9715] m920x_read = error: -19 [ 1027.212497][ T9715] dvb-usb: error while querying for an remote control event. [ 1027.374110][ T9715] m920x_read = error: -19 [ 1027.402439][ T9715] dvb-usb: error while querying for an remote control event. [ 1027.603043][T18843] IPVS: set_ctl: invalid protocol: 1 100.1.1.2:20002 [ 1027.620436][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1027.620456][ T30] audit: type=1326 audit(1775866030.969:1880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18838 comm="syz.2.3661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9da6f9c819 code=0x7ffc0000 [ 1027.626251][ T9715] m920x_read = error: -19 [ 1027.629158][ T30] audit: type=1326 audit(1775866030.969:1881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18838 comm="syz.2.3661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9da6f5d04e code=0x7ffc0000 [ 1027.784514][ T9715] dvb-usb: error while querying for an remote control event. [ 1027.785968][ T30] audit: type=1326 audit(1775866030.969:1882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18838 comm="syz.2.3661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9da6f9c819 code=0x7ffc0000 [ 1027.822104][T18846] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3664'. [ 1027.832969][T18846] bridge0: port 2(bridge_slave_1) entered blocking state [ 1027.840317][T18846] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1027.847955][T18846] bridge0: port 1(bridge_slave_0) entered blocking state [ 1027.855197][T18846] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1027.867482][ T30] audit: type=1326 audit(1775866030.969:1883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18838 comm="syz.2.3661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f9da6f9c819 code=0x7ffc0000 [ 1027.913435][T18846] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3664'. [ 1027.923501][ T30] audit: type=1326 audit(1775866030.969:1884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18838 comm="syz.2.3661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9da6f9c819 code=0x7ffc0000 [ 1028.007092][ T9715] m920x_read = error: -19 [ 1028.011635][ T9715] dvb-usb: error while querying for an remote control event. [ 1028.022591][ T30] audit: type=1326 audit(1775866030.969:1885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18838 comm="syz.2.3661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9da6f9c819 code=0x7ffc0000 [ 1028.254547][ T9715] m920x_read = error: -19 [ 1028.267920][ T9715] dvb-usb: error while querying for an remote control event. [ 1028.334879][ T30] audit: type=1326 audit(1775866030.969:1886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18838 comm="syz.2.3661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9da6f9c819 code=0x7ffc0000 [ 1028.420292][ T5906] usb 5-1: USB disconnect, device number 6 [ 1028.520403][T18854] IPVS: set_ctl: invalid protocol: 1 100.1.1.2:20002 [ 1028.572785][ T30] audit: type=1326 audit(1775866030.969:1887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18838 comm="syz.2.3661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9da6f5d04e code=0x7ffc0000 [ 1028.573929][ T9715] m920x_read = error: -19 [ 1028.676208][ T9715] dvb-usb: error while querying for an remote control event. [ 1028.937322][ T30] audit: type=1326 audit(1775866030.969:1888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18838 comm="syz.2.3661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9da6f9c819 code=0x7ffc0000 [ 1028.970489][ T30] audit: type=1326 audit(1775866030.969:1889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18838 comm="syz.2.3661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f9da6f9c819 code=0x7ffc0000 [ 1029.024098][ T9715] m920x_read = error: -19 [ 1029.028704][ T9715] dvb-usb: error while querying for an remote control event. [ 1029.325645][ T9715] m920x_read = error: -19 [ 1029.337051][ T9715] dvb-usb: error while querying for an remote control event. [ 1029.457349][ T9715] m920x_read = error: -19 [ 1029.468580][ T9715] dvb-usb: error while querying for an remote control event. [ 1029.547136][T18860] usb usb8: usbfs: process 18860 (syz.4.3667) did not claim interface 0 before use [ 1029.587541][ T9716] m920x_read = error: -19 [ 1029.596481][ T9716] dvb-usb: error while querying for an remote control event. [ 1029.737071][ T9716] m920x_read = error: -19 [ 1029.741492][ T9716] dvb-usb: error while querying for an remote control event. [ 1029.757031][ T9715] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1029.857098][ T9716] m920x_read = error: -19 [ 1029.861529][ T9716] dvb-usb: error while querying for an remote control event. [ 1029.907358][ T9715] usb 1-1: Using ep0 maxpacket: 8 [ 1029.915394][ T9715] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1029.947560][ T9715] usb 1-1: config 236 has an invalid interface number: 181 but max is 0 [ 1029.957092][ T5906] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 1029.976307][ T9715] usb 1-1: config 236 has no interface number 0 [ 1030.003287][ T9715] usb 1-1: New USB device found, idVendor=2304, idProduct=0229, bcdDevice=d7.12 [ 1030.012929][ T9716] m920x_read = error: -19 [ 1030.026369][ T9716] dvb-usb: error while querying for an remote control event. [ 1030.039343][ T9715] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1030.074182][ T9715] usb 1-1: Product: syz [ 1030.129512][ T5906] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1030.146124][ T9715] usb 1-1: Manufacturer: syz [ 1030.146155][ T5906] usb 5-1: too many endpoints for config 1 interface 0 altsetting 7: 255, using maximum allowed: 30 [ 1030.167259][ T9716] m920x_read = error: -19 [ 1030.171692][ T9716] dvb-usb: error while querying for an remote control event. [ 1030.179407][ T9715] usb 1-1: SerialNumber: syz [ 1030.207706][ T5906] usb 5-1: config 1 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1030.231297][ T5906] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1030.253647][ T5906] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1030.317178][ T9716] m920x_read = error: -19 [ 1030.322917][ T9716] dvb-usb: error while querying for an remote control event. [ 1030.372315][ T5906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1030.403322][ T5906] usb 5-1: SerialNumber: syz [ 1030.447208][ T9716] m920x_read = error: -19 [ 1030.451725][ T9716] dvb-usb: error while querying for an remote control event. [ 1030.482458][ T5906] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 1030.515427][ T5906] cdc_acm 5-1:1.0: This needs exactly 3 endpoints [ 1030.548196][ T5906] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -22 [ 1030.581576][T18874] IPVS: set_ctl: invalid protocol: 1 100.1.1.2:20002 [ 1030.617622][ T9716] m920x_read = error: -19 [ 1030.622187][ T9716] dvb-usb: error while querying for an remote control event. [ 1030.687035][ T1579] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1030.737271][ T797] m920x_read = error: -19 [ 1030.741802][ T797] dvb-usb: error while querying for an remote control event. [ 1030.839285][ T1579] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1030.850863][ T1579] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1030.867513][ T797] m920x_read = error: -19 [ 1030.875619][ T797] dvb-usb: error while querying for an remote control event. [ 1030.876011][ T1579] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1030.915633][ T1579] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1031.007711][ T9715] usb-storage 1-1:236.181: USB Mass Storage device detected [ 1031.063627][T18868] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1031.085732][ T1579] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1031.137219][ T797] m920x_read = error: -19 [ 1031.141653][ T797] dvb-usb: error while querying for an remote control event. [ 1031.353036][ T9715] dvb-usb: found a 'Pinnacle PCTV Dual DVB-T Diversity Stick' in cold state, will try to load a firmware [ 1031.437211][ T797] m920x_read = error: -19 [ 1031.454377][ T9715] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1031.474567][ T797] dvb-usb: error while querying for an remote control event. [ 1031.506305][ T9715] dib0700: firmware download failed at 7 with -22 [ 1031.598279][ T9715] usb 1-1: USB disconnect, device number 35 [ 1031.663961][ T797] m920x_read = error: -19 [ 1031.679196][ T797] dvb-usb: error while querying for an remote control event. [ 1031.787431][ T797] m920x_read = error: -19 [ 1031.809513][ T797] dvb-usb: error while querying for an remote control event. [ 1031.947473][ T797] m920x_read = error: -19 [ 1031.956593][ T797] dvb-usb: error while querying for an remote control event. [ 1032.077235][ T797] m920x_read = error: -19 [ 1032.100572][ T797] dvb-usb: error while querying for an remote control event. [ 1032.237102][ T797] m920x_read = error: -19 [ 1032.255962][ T797] dvb-usb: error while querying for an remote control event. [ 1032.397231][ T797] m920x_read = error: -19 [ 1032.412317][ T797] dvb-usb: error while querying for an remote control event. [ 1032.537977][ T797] m920x_read = error: -19 [ 1032.560101][ T797] dvb-usb: error while querying for an remote control event. [ 1032.581991][ T9715] usb 5-1: USB disconnect, device number 7 [ 1032.757092][ T797] m920x_read = error: -19 [ 1032.758962][T18894] netlink: 496 bytes leftover after parsing attributes in process `syz.1.3677'. [ 1032.789700][ T797] dvb-usb: error while querying for an remote control event. [ 1032.987126][ T797] m920x_read = error: -19 [ 1032.991693][ T797] dvb-usb: error while querying for an remote control event. [ 1033.107522][ T9715] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1033.127325][ T24] m920x_read = error: -19 [ 1033.131785][ T24] dvb-usb: error while querying for an remote control event. [ 1033.145440][T18902] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3679'. [ 1033.287627][ T24] m920x_read = error: -19 [ 1033.292155][ T24] dvb-usb: error while querying for an remote control event. [ 1033.309819][T18907] IPVS: set_ctl: invalid protocol: 1 100.1.1.2:20002 [ 1033.327032][ T9715] usb 5-1: Using ep0 maxpacket: 32 [ 1033.335146][ T9715] usb 5-1: config 0 has no interfaces? [ 1033.396429][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 1033.396451][ T30] audit: type=1326 audit(1775866036.729:1928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18901 comm="syz.0.3680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0719c819 code=0x7ffc0000 [ 1033.433213][ T24] m920x_read = error: -19 [ 1033.447047][ T24] dvb-usb: error while querying for an remote control event. [ 1033.554541][ T9715] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1033.633173][ T30] audit: type=1326 audit(1775866036.729:1929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18901 comm="syz.0.3680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbd0715d04e code=0x7ffc0000 [ 1033.681117][ T30] audit: type=1326 audit(1775866036.729:1930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18901 comm="syz.0.3680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0719c819 code=0x7ffc0000 [ 1033.703771][ T9715] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1033.727047][ T9715] usb 5-1: Product: syz [ 1033.732269][ T9715] usb 5-1: Manufacturer: syz [ 1033.746062][ T9715] usb 5-1: SerialNumber: syz [ 1033.773756][ T9715] usb 5-1: config 0 descriptor?? [ 1033.800857][ T30] audit: type=1326 audit(1775866036.739:1931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18901 comm="syz.0.3680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7fbd0719c819 code=0x7ffc0000 [ 1033.827921][ T24] m920x_read = error: -19 [ 1033.832401][ T24] dvb-usb: error while querying for an remote control event. [ 1033.906671][T18911] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3683'. [ 1033.940543][ T1579] usb 3-1: USB disconnect, device number 19 [ 1034.017339][ T30] audit: type=1326 audit(1775866036.739:1932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18901 comm="syz.0.3680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0719c819 code=0x7ffc0000 [ 1034.051214][T18911] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3683'. [ 1034.066260][ T9715] m920x_read = error: -19 [ 1034.097060][ T9715] dvb-usb: error while querying for an remote control event. [ 1034.184040][T18911] bridge0: port 2(bridge_slave_1) entered disabled state [ 1034.192797][T18911] bridge0: port 1(bridge_slave_0) entered disabled state [ 1034.221478][ T30] audit: type=1326 audit(1775866036.739:1933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18901 comm="syz.0.3680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fbd0719c819 code=0x7ffc0000 [ 1034.387046][ T30] audit: type=1326 audit(1775866036.739:1934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18901 comm="syz.0.3680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0719c819 code=0x7ffc0000 [ 1034.400938][ T9716] m920x_read = error: -19 [ 1034.503261][ T30] audit: type=1326 audit(1775866036.739:1935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18901 comm="syz.0.3680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbd0715d04e code=0x7ffc0000 [ 1034.602338][ T30] audit: type=1326 audit(1775866036.739:1936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18901 comm="syz.0.3680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0719c819 code=0x7ffc0000 [ 1034.695898][ T30] audit: type=1326 audit(1775866036.739:1937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18901 comm="syz.0.3680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7fbd0719c819 code=0x7ffc0000 [ 1034.775663][ T9716] dvb-usb: error while querying for an remote control event. [ 1034.796249][T18924] usb usb8: usbfs: process 18924 (syz.1.3688) did not claim interface 0 before use [ 1034.947500][ T9715] m920x_read = error: -19 [ 1034.952024][ T9715] dvb-usb: error while querying for an remote control event. [ 1035.021224][T18930] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3690'. [ 1035.067134][ T9715] m920x_read = error: -19 [ 1035.071669][ T9715] dvb-usb: error while querying for an remote control event. [ 1035.097071][ T9716] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 1035.187362][ T9715] m920x_read = error: -19 [ 1035.191879][ T9715] dvb-usb: error while querying for an remote control event. [ 1035.255629][ T9716] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1035.265976][ T9716] usb 2-1: too many endpoints for config 1 interface 0 altsetting 7: 255, using maximum allowed: 30 [ 1035.284270][ T9716] usb 2-1: config 1 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1035.307098][ T9715] m920x_read = error: -19 [ 1035.311987][ T9715] dvb-usb: error while querying for an remote control event. [ 1035.323589][ T9716] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1035.364527][ T9716] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1035.396229][ T9716] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1035.420789][ T9716] usb 2-1: SerialNumber: syz [ 1035.429862][ T9715] m920x_read = error: -19 [ 1035.434346][ T9715] dvb-usb: error while querying for an remote control event. [ 1035.478288][ T9716] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 1035.509720][ T9716] cdc_acm 2-1:1.0: This needs exactly 3 endpoints [ 1035.530441][ T9716] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -22 [ 1035.578804][ T9715] m920x_read = error: -19 [ 1035.596210][ T9715] dvb-usb: error while querying for an remote control event. [ 1035.737235][ T9715] m920x_read = error: -19 [ 1035.742264][ T9715] dvb-usb: error while querying for an remote control event. [ 1035.867095][ T9715] m920x_read = error: -19 [ 1035.872103][ T9715] dvb-usb: error while querying for an remote control event. [ 1035.990501][ T9715] m920x_read = error: -19 [ 1035.995074][ T9715] dvb-usb: error while querying for an remote control event. [ 1036.124851][ T9715] m920x_read = error: -19 [ 1036.137731][ T9715] dvb-usb: error while querying for an remote control event. [ 1036.257305][ T9715] m920x_read = error: -19 [ 1036.262113][ T9715] dvb-usb: error while querying for an remote control event. [ 1036.438981][ T9715] m920x_read = error: -19 [ 1036.443451][ T9715] dvb-usb: error while querying for an remote control event. [ 1036.517380][ T9716] usb 5-1: USB disconnect, device number 8 [ 1036.568082][ T797] m920x_read = error: -19 [ 1036.576146][ T797] dvb-usb: error while querying for an remote control event. [ 1036.707408][ T797] m920x_read = error: -19 [ 1036.712556][ T797] dvb-usb: error while querying for an remote control event. [ 1036.720689][ T9715] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1036.749563][T18946] netlink: 496 bytes leftover after parsing attributes in process `syz.4.3696'. [ 1036.858355][ T797] m920x_read = error: -19 [ 1036.871205][ T797] dvb-usb: error while querying for an remote control event. [ 1036.879661][T18946] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3696'. [ 1036.898818][T18946] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3696'. [ 1036.902809][ T9715] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1036.939184][ T9715] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1036.964450][ T9715] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1036.987090][ T797] m920x_read = error: -19 [ 1036.991550][ T797] dvb-usb: error while querying for an remote control event. [ 1037.001752][ T9715] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1037.042504][T18942] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1037.076844][ T9715] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1037.127156][ T797] m920x_read = error: -19 [ 1037.143889][ T797] dvb-usb: error while querying for an remote control event. [ 1037.297910][ T797] m920x_read = error: -19 [ 1037.336681][ T797] dvb-usb: error while querying for an remote control event. [ 1037.487397][ T797] m920x_read = error: -19 [ 1037.491919][ T797] dvb-usb: error while querying for an remote control event. [ 1037.662976][ T797] m920x_read = error: -19 [ 1037.668903][ T1579] usb 2-1: USB disconnect, device number 50 [ 1037.679103][ T797] dvb-usb: error while querying for an remote control event. [ 1038.031840][ T797] m920x_read = error: -19 [ 1038.044129][ T797] dvb-usb: error while querying for an remote control event. [ 1038.187796][ T797] m920x_read = error: -19 [ 1038.199429][ T797] dvb-usb: error while querying for an remote control event. [ 1038.347898][ T797] m920x_read = error: -19 [ 1038.366973][ T797] dvb-usb: error while querying for an remote control event. [ 1038.481866][ T797] m920x_read = error: -19 [ 1038.494721][ T797] dvb-usb: error while querying for an remote control event. [ 1038.657288][ T797] m920x_read = error: -19 [ 1038.661947][ T797] dvb-usb: error while querying for an remote control event. [ 1038.813731][ T797] m920x_read = error: -19 [ 1038.823812][ T797] dvb-usb: error while querying for an remote control event. [ 1038.947455][ T797] m920x_read = error: -19 [ 1038.952120][ T797] dvb-usb: error while querying for an remote control event. [ 1039.077287][ T797] m920x_read = error: -19 [ 1039.086788][ T797] dvb-usb: error while querying for an remote control event. [ 1039.168362][ T9] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1039.208387][ T797] m920x_read = error: -19 [ 1039.214268][ T797] dvb-usb: error while querying for an remote control event. [ 1039.327125][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 1039.347314][ T797] m920x_read = error: -19 [ 1039.351939][ T797] dvb-usb: error while querying for an remote control event. [ 1039.362428][ T9] usb 3-1: config 0 has no interfaces? [ 1039.464400][ T9] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1039.504444][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.537236][ T797] m920x_read = error: -19 [ 1039.543622][ T1579] usb 1-1: USB disconnect, device number 36 [ 1039.715580][ T9] usb 3-1: Product: syz [ 1039.722052][ T9] usb 3-1: Manufacturer: syz [ 1039.727229][ T9] usb 3-1: SerialNumber: syz [ 1039.753365][ T797] dvb-usb: error while querying for an remote control event. [ 1039.805520][ T9] usb 3-1: config 0 descriptor?? [ 1039.910315][ T797] m920x_read = error: -19 [ 1039.922716][ T797] dvb-usb: error while querying for an remote control event. [ 1040.000299][T18981] ================================================================== [ 1040.008423][T18981] BUG: KASAN: slab-out-of-bounds in af_alg_pull_tsgl+0x1c6/0x740 [ 1040.016196][T18981] Read of size 8 at addr ffff888028cf5320 by task syz.4.3705/18981 [ 1040.024116][T18981] [ 1040.026480][T18981] CPU: 1 UID: 0 PID: 18981 Comm: syz.4.3705 Tainted: G L syzkaller #0 PREEMPT(full) [ 1040.026509][T18981] Tainted: [L]=SOFTLOCKUP [ 1040.026517][T18981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1040.026530][T18981] Call Trace: [ 1040.026540][T18981] [ 1040.026549][T18981] dump_stack_lvl+0xe8/0x150 [ 1040.026579][T18981] print_report+0xba/0x230 [ 1040.026601][T18981] ? af_alg_pull_tsgl+0x1c6/0x740 [ 1040.026638][T18981] kasan_report+0x117/0x150 [ 1040.026664][T18981] ? af_alg_pull_tsgl+0x1c6/0x740 [ 1040.026696][T18981] af_alg_pull_tsgl+0x1c6/0x740 [ 1040.026732][T18981] skcipher_recvmsg+0x5df/0x1140 [ 1040.026761][T18981] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1040.026785][T18981] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1040.026806][T18981] sock_recvmsg_nosec+0x10c/0x140 [ 1040.026826][T18981] ____sys_recvmsg+0x3e3/0x4a0 [ 1040.026857][T18981] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1040.026890][T18981] ? import_iovec+0x73/0xa0 [ 1040.026917][T18981] ___sys_recvmsg+0x215/0x590 [ 1040.026944][T18981] ? __lock_acquire+0x6b5/0x2cf0 [ 1040.026975][T18981] ? __pfx____sys_recvmsg+0x10/0x10 [ 1040.027015][T18981] do_recvmmsg+0x334/0x800 [ 1040.027043][T18981] ? __sys_sendmmsg+0x4ae/0x4e0 [ 1040.027067][T18981] ? __pfx_do_recvmmsg+0x10/0x10 [ 1040.027097][T18981] ? __pfx_do_futex+0x10/0x10 [ 1040.027127][T18981] __x64_sys_recvmmsg+0x198/0x250 [ 1040.027154][T18981] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1040.027185][T18981] do_syscall_64+0x14d/0xf80 [ 1040.027211][T18981] ? trace_irq_disable+0x3b/0x150 [ 1040.027227][T18981] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1040.027246][T18981] ? clear_bhb_loop+0x40/0x90 [ 1040.027267][T18981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1040.027286][T18981] RIP: 0033:0x7f75f259c819 [ 1040.027305][T18981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1040.027322][T18981] RSP: 002b:00007f75f350a028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1040.027342][T18981] RAX: ffffffffffffffda RBX: 00007f75f2815fa0 RCX: 00007f75f259c819 [ 1040.027357][T18981] RDX: 0000000000000002 RSI: 0000200000000980 RDI: 0000000000000006 [ 1040.027370][T18981] RBP: 00007f75f2632c91 R08: 0000000000000000 R09: 0000000000000000 [ 1040.027381][T18981] R10: 0000000000000102 R11: 0000000000000246 R12: 0000000000000000 [ 1040.027393][T18981] R13: 00007f75f2816038 R14: 00007f75f2815fa0 R15: 00007f75f293fa48 [ 1040.027414][T18981] [ 1040.027421][T18981] [ 1040.271397][T18981] Allocated by task 18981: [ 1040.275840][T18981] kasan_save_track+0x3e/0x80 [ 1040.280562][T18981] __kasan_kmalloc+0x93/0xb0 [ 1040.285192][T18981] __kmalloc_noprof+0x35c/0x760 [ 1040.290070][T18981] sock_kmalloc+0xd6/0x160 [ 1040.294526][T18981] skcipher_recvmsg+0x54d/0x1140 [ 1040.299494][T18981] sock_recvmsg_nosec+0x10c/0x140 [ 1040.304546][T18981] ____sys_recvmsg+0x3e3/0x4a0 [ 1040.309353][T18981] ___sys_recvmsg+0x215/0x590 [ 1040.314060][T18981] do_recvmmsg+0x334/0x800 [ 1040.318512][T18981] __x64_sys_recvmmsg+0x198/0x250 [ 1040.323574][T18981] do_syscall_64+0x14d/0xf80 [ 1040.328198][T18981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1040.334122][T18981] [ 1040.336465][T18981] The buggy address belongs to the object at ffff888028cf5300 [ 1040.336465][T18981] which belongs to the cache kmalloc-32 of size 32 [ 1040.350460][T18981] The buggy address is located 0 bytes to the right of [ 1040.350460][T18981] allocated 32-byte region [ffff888028cf5300, ffff888028cf5320) [ 1040.364902][T18981] [ 1040.367254][T18981] The buggy address belongs to the physical page: [ 1040.373704][T18981] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888028cf5bc0 pfn:0x28cf5 [ 1040.383804][T18981] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) [ 1040.391905][T18981] page_type: f5(slab) [ 1040.395919][T18981] raw: 00fff00000000200 ffff88813fea6780 ffff88813fea54c8 ffffea00016c5a10 [ 1040.404527][T18981] raw: ffff888028cf5bc0 0000000800400027 00000000f5000000 0000000000000000 [ 1040.413134][T18981] page dumped because: kasan: bad access detected [ 1040.419580][T18981] page_owner tracks the page as allocated [ 1040.425328][T18981] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 48, tgid 48 (kworker/u8:3), ts 277033754250, free_ts 275015622965 [ 1040.444923][T18981] post_alloc_hook+0x231/0x280 [ 1040.449729][T18981] get_page_from_freelist+0x24dc/0x2580 [ 1040.455398][T18981] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1040.461248][T18981] allocate_slab+0x77/0x660 [ 1040.465795][T18981] refill_objects+0x331/0x3c0 [ 1040.470596][T18981] __pcs_replace_empty_main+0x2e6/0x730 [ 1040.476172][T18981] __kmalloc_cache_noprof+0x392/0x660 [ 1040.481643][T18981] kmem_cache_free+0x15b/0x630 [ 1040.486524][T18981] __io_req_caches_free+0x1c1/0x270 [ 1040.491771][T18981] io_req_caches_free+0x21/0x60 [ 1040.496723][T18981] io_ring_exit_work+0x41b/0x960 [ 1040.501810][T18981] process_scheduled_works+0xb6e/0x18c0 [ 1040.507591][T18981] worker_thread+0xa53/0xfc0 [ 1040.512234][T18981] kthread+0x388/0x470 [ 1040.516354][T18981] ret_from_fork+0x51e/0xb90 [ 1040.521037][T18981] ret_from_fork_asm+0x1a/0x30 [ 1040.525846][T18981] page last free pid 8194 tgid 8192 stack trace: [ 1040.532196][T18981] free_unref_folios+0xed5/0x16d0 [ 1040.537353][T18981] folios_put_refs+0x789/0x8d0 [ 1040.542152][T18981] truncate_inode_pages_range+0x3dd/0xe30 [ 1040.547932][T18981] blkdev_flush_mapping+0x109/0x2f0 [ 1040.553172][T18981] bdev_release+0x417/0x650 [ 1040.557705][T18981] blkdev_release+0x15/0x20 [ 1040.562234][T18981] __fput+0x44f/0xa70 [ 1040.566253][T18981] task_work_run+0x1d9/0x270 [ 1040.570867][T18981] do_exit+0x70f/0x23c0 [ 1040.575048][T18981] do_group_exit+0x21b/0x2d0 [ 1040.579669][T18981] get_signal+0x1284/0x1330 [ 1040.584201][T18981] arch_do_signal_or_restart+0xbc/0x830 [ 1040.589815][T18981] exit_to_user_mode_loop+0x86/0x480 [ 1040.595157][T18981] do_syscall_64+0x32d/0xf80 [ 1040.599963][T18981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1040.606080][T18981] [ 1040.608442][T18981] Memory state around the buggy address: [ 1040.614108][T18981] ffff888028cf5200: fa fb fb fb fc fc fc fc 00 00 00 00 fc fc fc fc [ 1040.622253][T18981] ffff888028cf5280: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 1040.630358][T18981] >ffff888028cf5300: 00 00 00 00 fc fc fc fc 00 00 00 00 fc fc fc fc [ 1040.638497][T18981] ^ [ 1040.643659][T18981] ffff888028cf5380: fa fb fb fb fc fc fc fc 00 00 00 00 fc fc fc fc [ 1040.651783][T18981] ffff888028cf5400: 00 00 00 00 fc fc fc fc 00 00 00 00 fc fc fc fc [ 1040.659882][T18981] ================================================================== [ 1040.669098][ T797] m920x_read = error: -19 [ 1040.673503][ T797] dvb-usb: error while querying for an remote control event. [ 1040.705995][T18981] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1040.713268][T18981] CPU: 0 UID: 0 PID: 18981 Comm: syz.4.3705 Tainted: G L syzkaller #0 PREEMPT(full) [ 1040.724245][T18981] Tainted: [L]=SOFTLOCKUP [ 1040.728585][T18981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1040.738664][T18981] Call Trace: [ 1040.741969][T18981] [ 1040.744908][T18981] vpanic+0x56c/0xa60 [ 1040.748918][T18981] ? __pfx_vpanic+0x10/0x10 [ 1040.753445][T18981] ? __pfx___schedule+0x10/0x10 [ 1040.758325][T18981] panic+0xc5/0xd0 [ 1040.762071][T18981] ? __pfx_panic+0x10/0x10 [ 1040.766684][T18981] ? preempt_schedule_common+0x82/0xd0 [ 1040.772279][T18981] ? af_alg_pull_tsgl+0x1c6/0x740 [ 1040.777341][T18981] check_panic_on_warn+0x89/0xb0 [ 1040.782301][T18981] ? af_alg_pull_tsgl+0x1c6/0x740 [ 1040.787353][T18981] end_report+0x73/0x180 [ 1040.791616][T18981] ? af_alg_pull_tsgl+0x1c6/0x740 [ 1040.796672][T18981] kasan_report+0x128/0x150 [ 1040.801207][T18981] ? af_alg_pull_tsgl+0x1c6/0x740 [ 1040.806291][T18981] af_alg_pull_tsgl+0x1c6/0x740 [ 1040.811180][T18981] skcipher_recvmsg+0x5df/0x1140 [ 1040.816145][T18981] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1040.821555][T18981] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1040.827054][T18981] sock_recvmsg_nosec+0x10c/0x140 [ 1040.832115][T18981] ____sys_recvmsg+0x3e3/0x4a0 [ 1040.836931][T18981] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1040.842259][T18981] ? import_iovec+0x73/0xa0 [ 1040.846794][T18981] ___sys_recvmsg+0x215/0x590 [ 1040.851502][T18981] ? __lock_acquire+0x6b5/0x2cf0 [ 1040.856511][T18981] ? __pfx____sys_recvmsg+0x10/0x10 [ 1040.861796][T18981] do_recvmmsg+0x334/0x800 [ 1040.866253][T18981] ? __sys_sendmmsg+0x4ae/0x4e0 [ 1040.871134][T18981] ? __pfx_do_recvmmsg+0x10/0x10 [ 1040.876103][T18981] ? __pfx_do_futex+0x10/0x10 [ 1040.880807][T18981] __x64_sys_recvmmsg+0x198/0x250 [ 1040.885873][T18981] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1040.891461][T18981] do_syscall_64+0x14d/0xf80 [ 1040.896095][T18981] ? trace_irq_disable+0x3b/0x150 [ 1040.901146][T18981] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1040.907332][T18981] ? clear_bhb_loop+0x40/0x90 [ 1040.912033][T18981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1040.917936][T18981] RIP: 0033:0x7f75f259c819 [ 1040.922357][T18981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1040.941978][T18981] RSP: 002b:00007f75f350a028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1040.950411][T18981] RAX: ffffffffffffffda RBX: 00007f75f2815fa0 RCX: 00007f75f259c819 [ 1040.958396][T18981] RDX: 0000000000000002 RSI: 0000200000000980 RDI: 0000000000000006 [ 1040.966376][T18981] RBP: 00007f75f2632c91 R08: 0000000000000000 R09: 0000000000000000 [ 1040.974363][T18981] R10: 0000000000000102 R11: 0000000000000246 R12: 0000000000000000 [ 1040.982346][T18981] R13: 00007f75f2816038 R14: 00007f75f2815fa0 R15: 00007f75f293fa48 [ 1040.990347][T18981] [ 1040.994047][T18981] Kernel Offset: disabled [ 1040.998403][T18981] Rebooting in 86400 seconds..