last executing test programs: 4m8.776432096s ago: executing program 2 (id=1001): r0 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x1, @loopback, 0x4}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000000140)="bc", 0x1, 0x4, &(0x7f0000000180)={0xa, 0x4e20, 0x8, @loopback, 0xfffffffe}, 0x1c) (fail_nth: 7) 4m8.04459782s ago: executing program 2 (id=1003): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000180), 0x0, 0x5) shutdown(r0, 0x1) socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa3, 0x6, 0x4, 0x7, 0x0, 0x9, 0x4}}, {0x4}}]}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x5c}}, 0x4000010) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x14) sendmsg$nl_route(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x9005}, 0x24000000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc) r4 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r4, &(0x7f0000000700)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000740)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x4, 0x3}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r4, &(0x7f0000000880), 0x2e9, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="020602000200000002"], 0x10}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYRES32=0x0, @ANYBLOB="159804000300000008000d00010000"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) socket(0x46, 0xa, 0x2feb) io_submit(0x0, 0xfffffffffffffead, 0x0) io_setup(0xc, &(0x7f0000000ac0)) ioctl$FS_IOC_READ_VERITY_METADATA(r2, 0xc0286687, &(0x7f0000000140)={0x1, 0x1, 0x27, &(0x7f0000000040)=""/39}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) 4m6.533490045s ago: executing program 2 (id=1012): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_connect$uac1(0x2, 0xda, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x582, 0x27, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc8, 0x3, 0x1, 0xd, 0x40, 0x70, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x2a}, [@output_terminal={0x9, 0x24, 0x3, 0x4, 0x305, 0x2, 0x3, 0x8}, @extension_unit={0xb, 0x24, 0x8, 0x6, 0x2, 0xc2, "4dd6c1b0"}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x603, 0x4, 0x5, 0x7, 0x3, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x8, 0x0, 0x1e, "87f7a9eeadc427259d"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xfff8, 0x7fff, 0xc0, 0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x3, 0x7f, 0x6, {0x7, 0x25, 0x1, 0x8, 0xe, 0x800}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x8001, 0x6, 0x7, 'a'}, @as_header={0x7, 0x24, 0x1, 0xd, 0xd8, 0x1001}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x1ff, 0x9, 0xba, 0x2}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x0, 0x3, 0xd, "ab4bef34ad9c7355"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x10, 0x0, 0xe1, {0x7, 0x25, 0x1, 0x8, 0x3}}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x4e, 0x5, 0x3, 0x20, 0x7f}, 0x3b, &(0x7f0000000140)={0x5, 0xf, 0x3b, 0x3, [@wireless={0xb, 0x10, 0x1, 0x4, 0x70, 0x5, 0x3, 0x7fff, 0x9}, @ssp_cap={0x20, 0x10, 0xa, 0x4, 0x5, 0x9, 0xf00, 0xe5, [0xc0, 0xff0000, 0xf0, 0x3f0f, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0xb, 0x3, 0x2, 0xec}]}, 0x5, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x400a}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x437}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x861}}, {0x2b, &(0x7f0000000240)=@string={0x2b, 0x3, "5434444d7bd0ba52031ae92e6a2d163d1cc1ddba8b398c457c6400213fe68c4751d77793573d41cc75"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x100a}}]}) syz_usb_control_io$lan78xx(r0, &(0x7f00000004c0)={0x14, &(0x7f0000000340)={0x40, 0x5, 0xbe, {0xbe, 0x2, "5509944d5ffce714bc5dead3b23009642a12087da7fd89af215d4a04a1176751a5cfb0b880d35979c9824d66005febf09b0b108c4b3915f8bb6a996da95f6aae83cac0ad008771b5cecbead8d9d9f2bf8c330a9856a9af17d3cb35cbeffb6777306bdfca20dc4abbcdbf33e2ebf74c84d270eccd5c7cdc6fd4806618509b72ebcb677a08cb203ee1ab6579f743186dd9ccbc37414c5bb3054672b27101e2b7f0aa1b41718d94c0d8639365678858e3a67f0289597af4617aa7fa159f"}}, &(0x7f0000000440)={0x0, 0x3, 0x6a, @string={0x6a, 0x3, "e9573a90937b37c986d308fb812ab3296e5547b16f45c6d84274c7d82eafca90887e820d168c88fe9cb621f76870847c1a026284be839ed027d9ba345169fd39180290a9bbb58e105f1c414a53807d284331e0dd8a0b6c9e04c4d0401383f786d55ef7b1549afd05"}}}, &(0x7f0000000780)={0x34, &(0x7f0000000500)={0x0, 0x15, 0xfe, "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"}, &(0x7f0000000640)={0x0, 0xa, 0x1}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000006c0)={0xc0, 0xa1, 0x4, 0x5}, &(0x7f0000000700)={0x40, 0xa0, 0x4, 0xa0ca}, &(0x7f0000000740)={0xc0, 0xa2, 0x2f, "461ee85b3ae226c73bfc01e2a5090a9d02f6a613dd26a311fe92d8b13ae183c2b2ac476cd5b3de0405c08ddae282a7"}}) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000940)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0686611, &(0x7f0000000980)={0x68, 0x0, 0x1, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 4m3.318740764s ago: executing program 2 (id=1024): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="29000000ff0f000000000000010400001811000067139aaa9e8d61282a276036cd145738c6a6d1da8e"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 4m2.868626491s ago: executing program 2 (id=1025): r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000140)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000180)={0x0, 0x0, 0x10001, 0x5}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{}, {0x0, 0x989680}}, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000540)='./file0\x00', 0x200000, 0x0, 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup\x00', 0x9801) move_mount(r2, &(0x7f0000000600)='.\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x0) umount2(&(0x7f0000000680)='./file0\x00', 0xb) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = open(&(0x7f00000002c0)='.\x00', 0x0, 0x40) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r3, 0x410, &(0x7f0000000300)={0x2, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000340)='./file0\x00') fchdir(r0) socket(0x2, 0x80805, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0x300, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xffff, 0xa}, {0xffff, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa2e86dd6100272400383a01fe800000000000000000000000000024ff0200000000000000000000000000010200907800000500663a794500023a00ff02000000000400000000000000000100000000000000000000ffffe00000028029335287b7a081"], 0x0) 4m2.634355004s ago: executing program 2 (id=1027): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x3, 0x7) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x4, &(0x7f00000001c0)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) syz_usb_connect(0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x0, &(0x7f0000000500)="9c8a5d6b5eaa09022b28045f1a4dc4c0df49221f1e3fe6b818880a434aef0219d35e8ecfb68972ef5f5488ab6f9894a57fd2fe907391f80f4aed3f47e4c3a2553cddb53e320171a95d2cf64df1e9e416c38d0b17a2742f00fdee282f3fc7e86fbc615a08b30651de0ced074626352737e932086f9914248f288c934a5a295bec8c8ec3fe4a77e012f86d8a6ae28e20c15b6ab5255f272d650c4ade18ea8c304176f15fe0aee4f8648dbf4acdfcd711927938c4194077eeb8c7", 0xb9, 0x0, 0x0, 0x0) r0 = syz_ublk_setup_io_uring(0x484d, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0x0) syz_ublk_add_dev(r0, 0x0, 0x0, r1, &(0x7f0000000300)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000003c0)=0xd) open(0x0, 0x143142, 0xc0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f00000001c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x14) 3m47.211021228s ago: executing program 32 (id=1027): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x3, 0x7) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x4, &(0x7f00000001c0)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) syz_usb_connect(0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x0, &(0x7f0000000500)="9c8a5d6b5eaa09022b28045f1a4dc4c0df49221f1e3fe6b818880a434aef0219d35e8ecfb68972ef5f5488ab6f9894a57fd2fe907391f80f4aed3f47e4c3a2553cddb53e320171a95d2cf64df1e9e416c38d0b17a2742f00fdee282f3fc7e86fbc615a08b30651de0ced074626352737e932086f9914248f288c934a5a295bec8c8ec3fe4a77e012f86d8a6ae28e20c15b6ab5255f272d650c4ade18ea8c304176f15fe0aee4f8648dbf4acdfcd711927938c4194077eeb8c7", 0xb9, 0x0, 0x0, 0x0) r0 = syz_ublk_setup_io_uring(0x484d, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0x0) syz_ublk_add_dev(r0, 0x0, 0x0, r1, &(0x7f0000000300)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000003c0)=0xd) open(0x0, 0x143142, 0xc0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f00000001c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x14) 8.994802676s ago: executing program 0 (id=2070): socket$rds(0x15, 0x5, 0x0) syz_ublk_setup_io_uring(0x2261, &(0x7f0000000300)={0x0, 0xd58c, 0x80, 0x2, 0x30b}, 0x0, 0x0, 0x0) eventfd2(0x1, 0x80001) eventfd(0xe467) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0x3b5, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0xffffffff, 0x5, 0x255}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x1, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x20000000, 0xe4, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x2, 0x2, 0x80000250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20084884) 8.821714602s ago: executing program 0 (id=2071): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f0000000080)={'NETMAP\x00'}, &(0x7f0000000140)=0x1e) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 8.411957488s ago: executing program 0 (id=2074): socket$kcm(0x2, 0xa, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) syz_emit_ethernet(0x66, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000580), 0x318, 0x0) recvmmsg(r2, &(0x7f00000005c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000600)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = memfd_create(&(0x7f0000000640)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) write$binfmt_script(r4, &(0x7f0000000700), 0x4) execveat(r4, &(0x7f0000000740)='\x00', 0x0, 0x0, 0x1000) r5 = add_key$user(&(0x7f0000000780), &(0x7f00000007c0)={'syz', 0x0}, &(0x7f0000000800)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r6, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r6, 0x5b) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x801d) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b5, &(0x7f00000008c0)) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffd) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_SET_SREGS2(r9, 0x4140aecd, &(0x7f0000000900)={{0xc000, 0x3000, 0xf000, 0x9, 0x0, 0xe3, 0x81, 0x1, 0x40, 0x85, 0x0, 0xb}, {0x26000, 0xd000, 0xc, 0x3, 0x3, 0x7, 0x5, 0x6, 0x1, 0x4, 0xfa, 0x5}, {0xf000, 0x8000000, 0x4, 0x4, 0x11, 0x81, 0xe, 0x5, 0x5, 0x4, 0x92, 0x9}, {0x58000, 0x58000, 0x1b, 0x7, 0x1, 0x40, 0x4, 0x0, 0xfa, 0x29, 0x6, 0x29}, {0xeeee8000, 0x4000, 0x4, 0x9, 0x5, 0x2, 0x87, 0xf1, 0x2, 0x9, 0x0, 0x8}, {0x4000, 0x58000, 0xb, 0x2, 0xad, 0x2, 0x5, 0x4, 0x1, 0xe, 0x6, 0x8a}, {0x3d0178791b53fadb, 0x10000, 0x4, 0x0, 0xcd, 0x5, 0x5, 0xf, 0x24, 0x6, 0xff, 0x6}, {0xc000, 0x6000, 0xb, 0xe, 0x13, 0x1e, 0x3, 0x0, 0x7f, 0x5, 0x2, 0x96}, {0x70000, 0x405}, {0x80a0000, 0xff81}, 0x7237efa2c7a3a116, 0x0, 0x6000, 0x61, 0x5, 0xa800, 0x6000, 0x1, [0x6, 0x400, 0x8000000000000003, 0x1]}) syz_open_dev$loop(&(0x7f0000000a40), 0xffffffff7ffffffd, 0x5300a2) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000a80)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000b00), &(0x7f0000000b40)=0x0, &(0x7f0000000b80)) syz_usb_connect(0x2, 0x24, &(0x7f0000000bc0)=ANY=[@ANYRES64=r10], 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 4.439100501s ago: executing program 3 (id=2092): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000140), 0x4) close(0x3) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000100)={0x40000039}) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, 0x0, &(0x7f0000000040)=0x21) 4.285447263s ago: executing program 0 (id=2093): unshare(0x68040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) fanotify_mark(0xffffffffffffffff, 0x10, 0x5000003a, 0xffffffffffffffff, 0x0) syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x40200) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vim2m(0x0, 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="f686c44ebdf22a7182d625424367881f97f12487251ffaeba287b4a43215d63086c4f54677fe95ab9a0e414da3a4287395ef80979b031823ccf1f5665dd7e9d4acd4b82f11d60d67a76b62329cafedf57098b40bbcf4aac9c3f2b3b37fc229869ed8d3d6dcac37e66ed89f94376960b4583716af893df0fee3facb1e9c18e76b", @ANYRES16, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000006c0)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, &(0x7f0000000700), 0x0, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x2e, 0x1c, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xe, &(0x7f00000007c0)=0x6, 0x4) syz_open_dev$dri(0x0, 0x0, 0x2000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', 0x10, 0x0) getresuid(&(0x7f0000000840), 0x0, &(0x7f0000000880)) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000008c0)={0xaa, 0x20f}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000900)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000940)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) sendmsg$nl_route(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000d9be2440830447374d52000000010902581e01000000000904", @ANYRES32], 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, 0x0) ioctl$UFFDIO_WRITEPROTECT(r5, 0xc018aa06, &(0x7f00000009c0)={{&(0x7f00005cb000/0x4000)=nil, 0x4000}, 0x1}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) syz_open_dev$vim2m(&(0x7f0000000a00), 0x1001004000e, 0x2) 4.188508729s ago: executing program 3 (id=2094): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000002600010127bd7000545e61979e78919c0852fc850cff0047000000"], 0x1c}, 0x1, 0x0, 0x0, 0x489d6}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x1, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300002a000000850000006900000095"], &(0x7f0000000a40)='syzkaller\x00', 0xc}, 0x94) syz_open_dev$vbi(&(0x7f00000000c0), 0x3, 0x2) fsopen(&(0x7f0000000200)='cifs\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x24}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, 0x0, 0x0) r5 = syz_open_dev$video(&(0x7f0000000400), 0x8, 0x101840) ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f0000000540)={0xa, 0x0, 0x1, {0xe7ff, 0x1, 0x406, 0x870}}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000005c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000600)={0x48, 0x2, r7, 0x0, 0x0, 0x0, 0x0}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000180)={'bond_slave_1\x00', 0x200}) r10 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56e39, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x0, 0x9}, {0x3, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x1, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @remote}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x5}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5, 0x4, 0x3}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000900)={0x28, 0x7, r7, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1004000}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) ioctl$IOMMU_HWPT_ALLOC$TEST(r6, 0x3b89, &(0x7f0000000980)={0x28, 0x2, r8, r7, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000b40)}) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 3.636340748s ago: executing program 5 (id=2096): r0 = socket$inet(0x2, 0x800, 0x8) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x8, 0x3, 0x3a8, 0x0, 0x8, 0xfa04, 0x1f8, 0x6c02, 0x310, 0x194, 0x194, 0x310, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6}, 0x0, 0x1c8, 0x1f8, 0x0, {0x0, 0x74020000}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xff000000, 0xff, 0xff000000, 0xff], @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, [0x0, 0xffffff00, 0x0, 0xff000000], 0x4d3, 0x3504, 0x6c, 0x1, 0x4, 0x19}, {@ipv4=@broadcast, [0xffffff00, 0x0, 0x0, 0xffffff00], @ipv4=@multicast1, [0xff, 0xff, 0xffffffff, 0xffffff00], 0x4d3, 0x3503, 0x89, 0x1, 0x3, 0x6}, {@ipv4=@private=0xa010101, [0x0, 0x0, 0xff, 0xff], @ipv6=@private0, [0xff, 0x0, 0xffffffff], 0x4d3, 0x3502, 0x2f, 0x0, 0x1}, {@ipv6=@private2, [0xff, 0xffffffff, 0xffffff00, 0xff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x19}, [0xff, 0x0, 0xff], 0x4d5, 0x0, 0x5e, 0x1, 0x18, 0x2}], 0x1, 0x3}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x6, 0x4, 0x2}}}, {{@uncond, 0x0, 0xf8, 0x118, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0x0, 0x0, 0xffffff00]}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x408) syz_usb_connect(0x0, 0x2d, &(0x7f0000000b40)=ANY=[@ANYBLOB="12010001003794089911280025e50102030109021b000201f000040904360700e4d2c301090436"], 0x0) socket$nl_crypto(0x10, 0x3, 0x15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x54, &(0x7f0000000580)=0x1, 0x4) 3.467573068s ago: executing program 3 (id=2097): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x1c00, &(0x7f0000000440)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x6000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa, 0x84}}}, 0x98}}, 0x20050800) 3.352966114s ago: executing program 3 (id=2098): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x4}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000881}, 0x1) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000003b40)={0x0, 0x0, &(0x7f0000003b80)={&(0x7f0000003bc0)={0x54, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}]}, 0x54}}, 0x0) 3.347778712s ago: executing program 3 (id=2099): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002400), 0x42, 0x0) write$dsp(r0, &(0x7f0000002440)="5cba91a4", 0xffffffd9) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000090401"], 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000080), 0x1, 0x2603) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000000000002000002e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000300000002"], 0x210) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000180)={&(0x7f00000001c0)=[{0x1e, 0x8801, 0x0, 0x0}], 0x1}) r4 = socket(0x10, 0x803, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000200)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f00000002c0)={0x4c, 0x0, 0x1, 0x70bd2d, 0x73, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x8000}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'tunl0\x00'}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xe3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x800000000000}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xffff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x9}, 0x8081) name_to_handle_at(r1, &(0x7f0000000340)='.\x00', &(0x7f0000000380)=ANY=[], &(0x7f00000003c0), 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8b0f, &(0x7f0000000400)={'wg2\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000440)={'dummy0\x00', &(0x7f0000000480)=@ethtool_rxnfc={0x4b, 0x14, 0x6, {0xb, @usr_ip6_spec={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, 0x2, 0x9}, {0x0, @multicast, 0x7, 0x6, [0x9, 0xf2d6]}, @udp_ip4_spec={@broadcast, @multicast1, 0x4e23, 0x4e24, 0x7a}, {0x0, @broadcast, 0x3, 0x7, [0x0, 0x9]}, 0x2, 0xfffffffc}}}) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r6, 0x65, 0x5, &(0x7f0000000540)=0x1, 0x4) r7 = landlock_create_ruleset(&(0x7f0000000580)={0x10, 0xf, 0x3}, 0x30, 0x0) landlock_restrict_self(r7, 0x0) r8 = landlock_create_ruleset(&(0x7f00000005c0)={0x0, 0x2, 0x3}, 0x18, 0x0) landlock_restrict_self(r8, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r9, 0x0, 0x0, 0x0, 0x0, 0x0) getdents64(r1, 0x0, 0x43) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000600)={0x1, &(0x7f0000000640)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) bpf$PROG_LOAD(0x25, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r10, 0xc0502100, &(0x7f0000000680)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r10, 0xc0182101, &(0x7f0000000700)={r11, 0x80001, 0x80000004}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r10, 0xc0502100, &(0x7f0000000740)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r10, 0x40182103, &(0x7f00000007c0)={r12, 0x1, r10, 0x3, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r10, 0xc0182101, &(0x7f0000000800)={r12, 0x5, 0x4000003}) 3.208145798s ago: executing program 4 (id=2101): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c6000006800010003001000fdffff7f00000000000000000c00020001000000150000000c000c8008000300fbffffff060003000500000004000b00"], 0x3c}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 3.12636539s ago: executing program 4 (id=2102): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000002640)={0x34, 0x43, 0x107, 0xfffffffd, 0x25dfdbfc, {0x1, 0x7c}, [@nested={0x4, 0x145}, @nested={0x1c, 0x1, 0x0, 0x1, [@nested={0x18, 0x69, 0x0, 0x1, [@nested={0x14, 0x74, 0x0, 0x1, [@typed={0x8, 0x19, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x3, 0x0, 0x0, @uid}]}, @generic]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) 3.099394973s ago: executing program 4 (id=2103): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0/file3\x00', 0x1c0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000009c0)='./file0/file3\x00', 0xd0000080) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 2.808834852s ago: executing program 4 (id=2105): openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x6040, 0x25, 0x4}, 0x18) ioctl$FIBMAP(r1, 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x129942, 0x18) fcntl$setlease(r3, 0x400, 0x1) openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x400, 0x14) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x281c2, 0x8) fcntl$setlease(r4, 0x400, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo/3\x00') read$FUSE(r5, &(0x7f0000000480)={0x2020}, 0x2020) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x2f, &(0x7f0000000040), 0x3b) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x80143, 0x0) mmap$IORING_OFF_SQ_RING(0xa000000, 0x800000, 0x9, 0x4c032, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x46, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000019078ac1e0001ac1402282500000000000000002f0000ac14141fac1414bb0900b6ddffffe5ff00"/62], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x1}]}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x70bd29, 0x35dfdbff, {0xa, 0x20, 0x50ceb205d85ac540, 0x0, 0xb5, 0x0, 0x0, 0x8, 0x10013}, [@FRA_SRC={0x14, 0x2, @private0}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x5e}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10000081}, 0x20048010) 2.37287184s ago: executing program 5 (id=2108): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000001000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="422bd1d457732778c200c57dba32330b28bd7000fbdbdf25010000000800028004003480"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000840), 0x5, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc040564a, &(0x7f0000001040)={0x0, 0x80080003, 0x100f, 0xffffffffffffffff, 0x0, 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl1\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x8, 0x7800, 0x5, 0x6, {{0xd, 0x4, 0x1, 0x15, 0x34, 0x68, 0x0, 0x4, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x42}, @local, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0xb, 0xe1, [@broadcast, @local]}, @noop, @lsrr={0x83, 0xf, 0x73, [@broadcast, @broadcast, @multicast1]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000009c0)={'ip6gre0\x00', &(0x7f0000000940)={'ip6tnl0\x00', 0x0, 0x29, 0xcc, 0x4, 0x3, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @remote}, 0x7, 0x20, 0x6, 0xe90}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000ac0)={'gretap0\x00', &(0x7f0000000a00)={'gre0\x00', 0x0, 0x7800, 0x8, 0x2, 0x5, {{0x23, 0x4, 0x3, 0x2e, 0x8c, 0x64, 0x0, 0xb, 0x4, 0x0, @remote, @broadcast, {[@timestamp_addr={0x44, 0xc, 0xb5, 0x1, 0x9, [{@private=0xa010101, 0x80}]}, @timestamp_addr={0x44, 0x54, 0xbf, 0x1, 0x6, [{@multicast1, 0x1000}, {@loopback}, {@private=0xa010101, 0x9}, {@dev={0xac, 0x14, 0x14, 0x3b}, 0xfffffffe}, {@broadcast, 0x2}, {@remote, 0x147}, {@remote}, {@empty}, {@empty, 0x5b81ef3a}, {@multicast1, 0x756}]}, @timestamp_addr={0x44, 0x14, 0xdc, 0x1, 0x1, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x6677}]}, @end]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000b00)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=@newtfilter={0x80, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x50, 0x2, [@TCA_BASIC_ACT={0x4c, 0x3, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000d00)={'ip_vti0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000e00)={'sit0\x00', &(0x7f0000000d40)={'syztnl0\x00', 0x0, 0x80, 0x0, 0x2, 0x6e, {{0x23, 0x4, 0x1, 0x5, 0x8c, 0x68, 0x0, 0xc, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, {[@end, @ra={0x94, 0x4}, @ssrr={0x89, 0xb, 0x1c, [@dev={0xac, 0x14, 0x14, 0x25}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0x1c, 0xec, 0x1, 0x5, [{@private=0xa010102, 0x6}, {@empty, 0x1}, {@multicast1, 0x2}]}, @cipso={0x86, 0x20, 0x0, [{0x5, 0x10, "f55afe58714623b8fee8dea5dea6"}, {0x7, 0x3, "f3"}, {0x6, 0x4, "b001"}, {0x1, 0x3, ':'}]}, @cipso={0x86, 0x9, 0x2, [{0x7, 0x3, "af"}]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x1f, 0xa7, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, @rand_addr=0x64010101, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @empty]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000fc0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e40)={0x13c, r2, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x40005}, 0x50) r11 = socket$inet6_sctp(0xa, 0x801, 0x84) r12 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r12, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0xa10905, 0x0, '\x00', @ptr}}) r13 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_int(r13, 0x1, 0x0, &(0x7f0000001080), &(0x7f00000010c0)=0x4) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r13, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010000000000fdffff073900000008000300", @ANYRES32=r15, @ANYBLOB="18005a0014000180050001"], 0x34}, 0x1, 0x0, 0x0, 0x4c810}, 0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r11, 0x84, 0x18, &(0x7f0000000000)={0x1, 0x9}, &(0x7f0000000040)=0x8) sendmsg$inet6(r11, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x100}, 0x1c, &(0x7f00000005c0)=[{&(0x7f00000002c0)="a43f930c08cf49d66c59c9212a4086a678869b09384cfea4e7148a4757fa804ff5078e94875042c319edeaf53c5a4640a1aca211b1e4742137c1df05274aea3908f79a76e40f77d0048097430c08b141eda6bebb31853f7d1bfc3773f6ac31d1e71fa62a6d68241974996cd87b79cd12609d4b5074b9aed4273075431eba20ac0c1729e4db454c3f51663c1902f20c0fe674d294d2b228f77a1770a338a5c265c799263756c0d30943ab8c2e7e9d197ef54b3618bbec3356032c46814eef4ebe905ac4f331488536df39ece96361c57997e17dce3bff689b18a2ce52896297c2079bbb17d1a75393be852aad9b937df68cb0a9", 0xf3}, {&(0x7f00000004c0)="efb6b688b79c45d48b6c290e665afcf7b347", 0x12}, {&(0x7f0000000500)="297bc754e20894b51c8f0f7924968f186950de66eb6e44ed1cc429e98e20cca51e0e1f3f2553045784a06a2c4888ac290807fd9345c13234066952e872f1d5ac0a9263578508c26df2ac6176fb52db6b126b0f698cf3", 0x56}, {&(0x7f0000000580)="8cc1bad4497b7c06a474f9", 0xb}], 0x4}, 0x20000840) sendmmsg$inet6(r11, &(0x7f0000000180)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x1, @private0, 0xae00000}, 0x1c, &(0x7f0000000280)=[{&(0x7f00000003c0)='*', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x4e23, 0x2, @private0, 0x1}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000480)="fa", 0x1}], 0x1}}], 0x2, 0x5) 2.143981594s ago: executing program 5 (id=2109): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0xf5ffffff, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x90}, 0x1, 0x0, 0x0, 0x4040850}, 0x40) 1.950693648s ago: executing program 0 (id=2110): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vhost_msg_v2(r0, &(0x7f00000000c0)={0x2, 0x0, {&(0x7f0000000140)=""/4082, 0xff2, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000001140)={0x2, 0x0, {&(0x7f00000011c0)=""/192, 0xffffffdc, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000001280)={0x2, 0x0, {&(0x7f0000001300)=""/193, 0xfffffffffffffd00, 0x0, 0x2, 0x3}}, 0x48) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001400)={{{@in=@dev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@ipv4={""/10, ""/2, @dev}}}, &(0x7f0000001500)=0xe8) quotactl_fd$Q_GETINFO(r0, 0x7fffffffc0000282, r1, &(0x7f0000001540)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000001580)=ANY=[@ANYBLOB="1201000000000010d804dd0000000000000109022400010000000009040040010300000009210100000122050009058103"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000015c0)={0x24, 0x0, 0x0, &(0x7f0000001600)=ANY=[], 0x0}, 0x0) r4 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000001640)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7a}) r5 = syz_usb_connect$rtl8150(0x6, 0x3f, &(0x7f0000001680)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r5, &(0x7f00000016c0)={0x14, &(0x7f0000001700)={0x40, 0x24, 0x5c, {0x5c, 0xe, "46497674d8cbfb98ec3325d8f05ce3aa7ff45d2782226e43ac5443019390512f625f29ca49b14e35606eaeb59f12f7588385146f76393b6a596fc6d0f0614985d4fdd1145edb105a0b16f4a740923a5311e0804b49f01ade3716"}}, &(0x7f0000001780)={0x0, 0x3, 0x101, @string={0x101, 0x3, "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"}}}, &(0x7f00000018c0)={0x2c, &(0x7f0000001900)={0x40, 0xc, 0x7, "5a6cf5aa66913c"}, &(0x7f0000001940)={0x0, 0xa, 0x1, 0xb7}, &(0x7f0000001980)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000019c0)={0xc0, 0x5, 0x2, '% '}, &(0x7f0000001a00)={0x40, 0x5, 0x1, "b6"}}) r6 = syz_open_dev$I2C(&(0x7f0000001a40), 0x1, 0x2603) r7 = syz_usb_connect$rtl8150(0x1, 0x3f, &(0x7f0000001a80)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r7, 0xffffffffffffffff, &(0x7f0000001ac0)={0x2c, &(0x7f0000001b00)={0x20, 0xd, 0xf9, "de5d8c5bbbeda7c43e163effba2869bfa14b1d21ab2a92f36ad1b5d3a159ca3ae4e16721fd0abb12b74eb918decf2c27c25616ae8ca3940b8289923d0050c8a5abbb8e0a88de03c5e3b56edabb23f1dd53c420f00367ede9c638f54a581c5b67314bf5d6bf3b147e0de4f882c9a0cd7eb62d031d8419b086660bc1504c09ad7dd9e0f3e310c737a2f9cd5bcc62cdf4c910cb29e1919be99c478bfc714d0103c1623a69b6ae629c807f979304ca2d8617a5fff1593f4ec71179c0f69bc7eabe240cc5bb07d0e8feb1067dcbd90c30a322949d3405ddc6608a9f2ac169a7ef48bf80c7e1ee6bfad8831ab2325bec0a3eed68e1d1c5235c75a5dc"}, &(0x7f0000001c00)={0x0, 0xa, 0x1, 0xa}, &(0x7f0000001c40)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000001c80)={0xc0, 0x5, 0x5, "72a517c50f"}, &(0x7f0000001cc0)={0x40, 0x5, 0x3, "ed659a"}}) ioctl$I2C_RDWR(r6, 0x707, &(0x7f0000001d00)={&(0x7f0000001d40)=[{0x1, 0x9000, 0x0, 0x0}], 0x1}) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000000)="73d918f6e4df6613329d1736c6d88fb8", 0x10) 1.864862725s ago: executing program 1 (id=2111): r0 = syz_open_procfs(0x0, &(0x7f0000010740)='net/rpc\x00') r1 = openat(r0, &(0x7f0000010800)='nfsd.fh/channel\x00', 0x2, 0x0) write(r1, &(0x7f0000010840)='localhost 1 \\x00000001 200 000000 /\n', 0x24) 1.850379611s ago: executing program 4 (id=2112): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001700)={0x1, 0x4, &(0x7f0000001800)=ANY=[@ANYBLOB="180000002000000000000000000000006f0000000000000095"], &(0x7f0000001840)='GPL\x00', 0x5}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2000400c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) capset(&(0x7f0000000140)={0x20071026}, &(0x7f0000000240)={0x200000, 0x200003, 0x200, 0x0, 0x7}) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f00000012c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001280)={'ip6tnl0\x00', 0x0}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001480), 0x40241, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet(r2, &(0x7f0000001300)=[{{&(0x7f00000013c0)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001440)="21c9c9cbb032ac38532d136331177bac", 0x10}], 0x1, &(0x7f0000001540)}}, {{&(0x7f0000001580)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f00000015c0)=[{&(0x7f0000001600)="5ef569b8", 0x4}], 0x1}}, {{&(0x7f0000001640)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000001680)=[{&(0x7f00000016c0)="7dd6", 0x2}], 0x1}}], 0x3, 0x20000041) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000014c0)={'syzkaller1\x00', 0xc201}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001500)={'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) io_setup(0x7, &(0x7f00000017c0)) write$tun(r1, &(0x7f0000001740)=ANY=[@ANYBLOB], 0xfdef) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = io_uring_setup(0x58e7, &(0x7f0000000000)={0x0, 0xfac7, 0x40, 0x0, 0x11000000}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)=""/4095, 0x440000}], 0x100000000000011a) 1.76265029s ago: executing program 1 (id=2113): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000300)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000340)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) setsockopt$inet_mreqn(r0, 0x0, 0x25, &(0x7f0000000380)={@multicast1, @local}, 0xc) 1.660811858s ago: executing program 1 (id=2114): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000300)={0x0, @in={{0xa, 0x4, @local}}, 0xffff, 0x4}, 0x90) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e23, 0x2, @loopback, 0x100000}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0)='X', 0x34000, 0xe0, &(0x7f0000000600)={0xa, 0x4e23, 0xa441, @loopback}, 0x1c) 1.620805343s ago: executing program 1 (id=2115): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0/file3\x00', 0x1c0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000009c0)='./file0/file3\x00', 0xd0000080) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1.536298601s ago: executing program 1 (id=2116): socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f0000000ac0)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00 \x00', 0x18, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local, {[], @mld={0x187, 0x0, 0x0, 0x0, 0x0, @local}}}}}}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000500)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x24040001, &(0x7f0000000580)={0xa, 0x2, 0xffff, @loopback, 0xd}, 0x1c) 1.366195352s ago: executing program 5 (id=2117): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x20) sendmsg$nl_generic(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000200400ae"], 0x18}, 0x1, 0x0, 0x0, 0x408c1}, 0x0) recvmsg(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000a80)=""/4113, 0x1011}, {&(0x7f0000001ac0)=""/99, 0x63}, {0x0}, {&(0x7f0000002b40)=""/4086, 0xff6}, {&(0x7f0000003b40)=""/24, 0x18}, {&(0x7f0000003b80)=""/55, 0x37}], 0x6}, 0x40000180) 1.270632061s ago: executing program 5 (id=2118): r0 = socket$inet(0x2, 0x800, 0x8) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x8, 0x3, 0x3a8, 0x0, 0x8, 0xfa04, 0x1f8, 0x6c02, 0x310, 0x194, 0x194, 0x310, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6}, 0x0, 0x1c8, 0x1f8, 0x0, {0x0, 0x74020000}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xff000000, 0xff, 0xff000000, 0xff], @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, [0x0, 0xffffff00, 0x0, 0xff000000], 0x4d3, 0x3504, 0x6c, 0x1, 0x4, 0x19}, {@ipv4=@broadcast, [0xffffff00, 0x0, 0x0, 0xffffff00], @ipv4=@multicast1, [0xff, 0xff, 0xffffffff, 0xffffff00], 0x4d3, 0x3503, 0x89, 0x1, 0x3, 0x6}, {@ipv4=@private=0xa010101, [0x0, 0x0, 0xff, 0xff], @ipv6=@private0, [0xff, 0x0, 0xffffffff], 0x4d3, 0x3502, 0x2f, 0x0, 0x1}, {@ipv6=@private2, [0xff, 0xffffffff, 0xffffff00, 0xff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x19}, [0xff, 0x0, 0xff], 0x4d5, 0x0, 0x5e, 0x1, 0x18, 0x2}], 0x1, 0x3}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x6, 0x4, 0x2}}}, {{@uncond, 0x0, 0xf8, 0x118, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0x0, 0x0, 0xffffff00]}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x408) syz_usb_connect(0x0, 0x2d, &(0x7f0000000b40)=ANY=[@ANYBLOB="12010001003794089911280025e50102030109021b000201f000040904360700e4d2c301090436"], 0x0) unshare(0x22020600) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x54, &(0x7f0000000580)=0x1, 0x4) 1.125034912s ago: executing program 4 (id=2119): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0xffffffff, 0x4, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@rand_addr=0x64010100, 0x0, 0x0, 0x0, 0x0, 0x2}, {0xfffffffffffffffc, 0x7, 0x0, 0x0, 0x206, 0x2}, {0x4000000000, 0x2, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x2, 0x2b}, 0xa, @in6=@empty, 0x0, 0x4, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x54, r3, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x2, 0x3003}, 0x4) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000008c0)=ANY=[@ANYBLOB="1201000220a40308801b09e3401f010203010902240001010900060904a7a7025d81df0209058a01", @ANYRESOCT=r3, @ANYRESHEX, @ANYRESDEC=r3], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newsa={0x104, 0x10, 0x7, 0xfffffffd, 0x0, {{@in=@multicast2, @in6=@dev={0xfe, 0x80, '\x00', 0x1a}, 0x4e20, 0x5, 0x0, 0x0, 0x0, 0x0, 0x80, 0x2, 0x0, 0xee00}, {@in6=@remote, 0x4d4, 0x6c}, @in6=@private0, {0x0, 0x0, 0x82, 0x0, 0x10000000, 0x80000400, 0xfe00000}, {0x0, 0x4, 0x5, 0x80000000}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in=@remote}]}, 0x104}}, 0x0) r5 = syz_ublk_setup_io_uring(0x1e8d, &(0x7f0000000040)={0x0, 0x121b, 0x0, 0x3, 0x2d1}, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000180)) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r6 = syz_ublk_setup_io_uring(0x1848, &(0x7f00000001c0)={0x0, 0x9fa8, 0x200, 0x0, 0x5a}, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_SEND_MSG_RING(r5, 0x1f, &(0x7f0000000380)={0x28, 0x8, 0x0, r6, &(0x7f0000000300)="9f3e8b07dad2729610b2b54fd5b3743f7c3aa95e7e7fdb4a95954a849134d8760976b8fabb01c2a4fe9db95f6fe44f34deb1cb5212ecb279188de5121c33a60729ac238dd0e3", 0x1, 0x8, 0x4, 0x0, {0x0, 0x0, r0, 0x2}}, 0x1) 612.625615ms ago: executing program 1 (id=2120): socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000078c0)=[{{&(0x7f0000000100)=@hci, 0x80, &(0x7f0000002600)=[{&(0x7f0000000180)=""/29, 0x1d}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/153, 0x99}, {&(0x7f0000002440)=""/6, 0x6}, {&(0x7f0000002480)=""/8, 0x8}, {0x0}, {&(0x7f00000025c0)=""/38, 0x26}], 0x7, &(0x7f0000002680)=""/7, 0x7}, 0x3}, {{&(0x7f00000026c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f00000027c0)=[{&(0x7f0000002740)=""/74, 0x4a}], 0x1, &(0x7f0000002800)=""/21, 0x15}, 0x3}, {{&(0x7f0000002840)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x80, &(0x7f0000003a40)=[{&(0x7f00000028c0)=""/183, 0xb7}, {&(0x7f0000002980)=""/46, 0x2e}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f00000039c0)=""/128, 0x80}], 0x4}, 0x40}, {{&(0x7f0000003a80)=@x25, 0x80, &(0x7f0000004bc0)=[{&(0x7f0000003b00)=""/114, 0x72}, {0x0}, {&(0x7f0000003bc0)=""/4096, 0x1000}], 0x3, &(0x7f0000004c00)=""/4096, 0x1000}, 0x7fff}, {{&(0x7f0000005c00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000005f40)=[{&(0x7f0000005c80)=""/10, 0xa}, {&(0x7f0000005cc0)=""/248, 0xf8}, {&(0x7f0000005dc0)=""/225, 0xe1}, {&(0x7f0000005ec0)=""/110, 0x6e}], 0x4}, 0x12000000}, {{&(0x7f0000005f80)=@x25, 0x80, &(0x7f0000006200)=[{&(0x7f0000006000)=""/31, 0x1f}, {&(0x7f0000006040)=""/105, 0x69}, {&(0x7f00000060c0)=""/244, 0xf4}, {&(0x7f00000061c0)=""/39, 0x27}], 0x4, &(0x7f0000006240)=""/163, 0xa3}, 0x40}, {{0x0, 0x0, &(0x7f0000007780)=[{0x0}, {&(0x7f0000006440)=""/163, 0xa3}, {&(0x7f0000006500)=""/107, 0x6b}, {&(0x7f0000006580)=""/154, 0x9a}, {&(0x7f0000006640)=""/74, 0x4a}, {&(0x7f00000066c0)=""/4096, 0x1000}, {&(0x7f00000076c0)=""/52, 0x34}, {&(0x7f0000007700)=""/79, 0x4f}], 0x8, &(0x7f0000007800)=""/178, 0xb2}, 0xffffffff}], 0x7, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) preadv2(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/246, 0xf6}, {&(0x7f0000000440)=""/155, 0x9b}, {&(0x7f0000000500)=""/44, 0x2c}, {&(0x7f0000000540)=""/168, 0xa8}, {&(0x7f0000000600)=""/117, 0x75}], 0x5, 0x7, 0x92, 0x1) r1 = fsopen(&(0x7f0000000800)='hfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='ui~d', &(0x7f0000000a80)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x04\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\bb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xd7\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:\x02\x00\x00\x00g&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f\f\xe6\xd0\xd3O[u\xe5\xb2\xd4r\xbb\xffszN\xa2\x9cm\xdc\xee\xea\xc2\xb8\v\"\xefp&\xe1\x9a\xaf\t\x0eN(\xc4\xc0_\x80\x1a\xb2\x1a\x0e\'\xfc\xe2\xba\xd7\x17\x067\x9f\xc4\xa5\xd1d\x90;\x1d\xec\x1a\xdb\xd0\a\x11\x9c>O\xc8\xdeG\"\x05{)\xd8\x96u\xad\x94\x84\xc9\xfbn\xea\xb4\xecq\xe95\xda\xdd\xc0#\xbd\xbd\x10\x0ff\x17\x88,\x8aKv\xae\xc1\xd0E\xc4\xfd\xb4\xd53o\xe2C#\x8f\x16\x0e\xf9u\"\xc8,@\x8ef\xfe\xc3\x92wI\xe9\xe1w\xbe\xc9n\xf6\x9f5.\xb4\xbc\x9b[\xbf\xd2\x1a\xa3\xa0\x9a\xc9n\xc8\"w\x11\xf1\x16\x1b\xd7\xd3\xe0&\xcd\xc4b\xa9\x1d\xd1\xaaU\x93+T\xee\xd6\xa2V\xf5\t\xa5n\x14G\xd6\t\x0f&', 0x0) r2 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$KVM_CAP_HYPERV_SEND_IPI(r3, 0x4068aea3, &(0x7f00000001c0)) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80081}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0x400, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0x0, 0x9}, {0xfff3, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4, 0x3ff9}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendfile(r4, r4, 0x0, 0x200) socket$kcm(0x10, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000000)=0xfe, 0x4) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) 384.670824ms ago: executing program 0 (id=2121): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000002600010127bd7000545e61979e78919c0852fc850cff0047000000"], 0x1c}, 0x1, 0x0, 0x0, 0x489d6}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x1, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300002a000000850000006900000095"], &(0x7f0000000a40)='syzkaller\x00', 0xc}, 0x94) syz_open_dev$vbi(&(0x7f00000000c0), 0x3, 0x2) fsopen(&(0x7f0000000200)='cifs\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x24}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, 0x0, 0x0) r5 = syz_open_dev$video(&(0x7f0000000400), 0x8, 0x101840) ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f0000000540)={0xa, 0x0, 0x1, {0xe7ff, 0x1, 0x406, 0x870}}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000005c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000600)={0x48, 0x2, r7, 0x0, 0x0, 0x0, 0x0}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000180)={'bond_slave_1\x00', 0x200}) r10 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56e39, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x0, 0x9}, {0x3, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x1, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @remote}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x5}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5, 0x4, 0x3}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000900)={0x28, 0x7, r7, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1004000}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) ioctl$IOMMU_HWPT_ALLOC$TEST(r6, 0x3b89, &(0x7f0000000980)={0x28, 0x2, r8, r7, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000b40)}) socket$nl_route(0x10, 0x3, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) 197.827181ms ago: executing program 3 (id=2122): sched_setattr(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x4) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x50400, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0x2d) unshare(0x64000600) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket(0x15, 0x5, 0x0) r0 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r2, 0x40000008008975) 0s ago: executing program 5 (id=2123): r0 = openat(0xffffffffffffffff, &(0x7f0000010800)='nfsd.fh/channel\x00', 0x2, 0x0) write(r0, &(0x7f0000010840)='localhost 1 \\x00000001 200 000000 /\n', 0x24) kernel console output (not intermixed with test programs): yz.0.1749) did not claim interface 0 before use [ 502.591646][T11634] usb usb7: usbfs: process 11634 (syz.0.1749) did not claim interface 0 before use [ 502.686783][ T44] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 502.719658][T11632] macsec0: left promiscuous mode [ 502.807873][ T4971] aiptek 4-1:0.0: Aiptek using 400 ms programming speed [ 502.827064][ T4971] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input58 [ 502.837044][ T44] usb 6-1: Using ep0 maxpacket: 16 [ 502.854051][ T44] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 502.872873][ T44] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 502.872922][ T44] usb 6-1: config 0 interface 0 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 502.872946][ T44] usb 6-1: config 0 interface 0 has no altsetting 0 [ 502.872977][ T44] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.901315][ T44] usb 6-1: config 0 descriptor?? [ 502.954344][ T44] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 503.024993][ T4971] usb 4-1: USB disconnect, device number 65 [ 503.025114][ C1] aiptek 4-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 503.340760][T11641] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1752'. [ 503.340797][T11641] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1752'. [ 503.346927][T11641] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1752'. [ 503.346959][T11641] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1752'. [ 503.548435][ T9] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 503.697756][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 503.698464][ T9] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 503.702011][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 503.704382][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.704406][ T9] usb 5-1: Product: syz [ 503.704421][ T9] usb 5-1: Manufacturer: syz [ 503.704435][ T9] usb 5-1: SerialNumber: syz [ 503.737791][ T9] usb 5-1: config 0 descriptor?? [ 503.764204][ T9] hub 5-1:0.0: bad descriptor, ignoring hub [ 503.764231][ T9] hub 5-1:0.0: probe with driver hub failed with error -5 [ 503.789562][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 503.858497][ T10] usb 4-1: new full-speed USB device number 66 using dummy_hcd [ 503.877833][T11647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.878281][T11647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.934951][ T9] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 503.959869][T11639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.963651][T11639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 504.000644][ T5642] udevd[5642]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 504.023805][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 504.023839][ T10] usb 4-1: too many configurations: 71, using maximum allowed: 8 [ 504.030310][ T10] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x3 has invalid wMaxPacketSize 0 [ 504.030338][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 504.067546][ T10] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x3 has invalid wMaxPacketSize 0 [ 504.067576][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 504.071671][ T10] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x3 has invalid wMaxPacketSize 0 [ 504.071699][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 504.107493][ T10] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x3 has invalid wMaxPacketSize 0 [ 504.107521][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 504.131578][ T10] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x3 has invalid wMaxPacketSize 0 [ 504.131608][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 504.132758][ T10] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x3 has invalid wMaxPacketSize 0 [ 504.132776][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 504.134979][ T10] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x3 has invalid wMaxPacketSize 0 [ 504.135003][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 504.142441][ T10] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x3 has invalid wMaxPacketSize 0 [ 504.142468][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 504.165995][ T10] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 504.166022][ T10] usb 4-1: Product: syz [ 504.166040][ T10] usb 4-1: Manufacturer: syz [ 504.166054][ T10] usb 4-1: SerialNumber: syz [ 504.210677][ T10] usb 4-1: config 0 descriptor?? [ 504.212820][ T9] usb 5-1: USB disconnect, device number 68 [ 504.254262][ T10] usb 4-1: selecting invalid altsetting 0 [ 504.342831][T11600] IPVS: starting estimator thread 0... [ 504.437627][T11650] IPVS: using max 51 ests per chain, 122400 per kthread [ 504.481409][ T10] usb 4-1: USB disconnect, device number 66 [ 504.577266][ T4971] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 504.706869][ T4971] usb 1-1: device descriptor read/64, error -71 [ 504.947112][ T4971] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 505.077099][ T4971] usb 1-1: device descriptor read/64, error -71 [ 505.187494][ T4971] usb usb1-port1: attempt power cycle [ 505.213992][T11666] xt_hashlimit: size too large, truncated to 1048576 [ 505.526797][ T4971] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 505.547990][ T4971] usb 1-1: device descriptor read/8, error -71 [ 505.550540][ T44] usb 6-1: USB disconnect, device number 22 [ 505.617952][T11676] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1763'. [ 505.617977][T11676] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1763'. [ 505.639180][T11676] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1763'. [ 505.639202][T11676] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1763'. [ 505.747698][ T9] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 505.786802][ T4971] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 505.807456][ T4971] usb 1-1: device descriptor read/8, error -71 [ 505.897043][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 505.917260][ T4971] usb usb1-port1: unable to enumerate USB device [ 505.934375][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 505.934407][ T9] usb 5-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 1.40 [ 505.962441][ T9] usb 5-1: config 1 has an invalid descriptor of length 145, skipping remainder of the config [ 505.962458][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 505.964016][ T9] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 505.964031][ T9] usb 5-1: Manufacturer: syz [ 506.126925][ T44] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 507.342632][T11702] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1775'. [ 507.342670][T11702] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1775'. [ 507.365712][T11702] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1775'. [ 507.365734][T11702] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1775'. [ 507.876808][ T10] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 508.027860][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 508.028993][ T10] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 508.034292][ T10] usb 6-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 508.034312][ T10] usb 6-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 508.034323][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 508.034342][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.061976][ T10] usb 6-1: config 0 descriptor?? [ 508.551651][ T10] mcp2221 0003:04D8:00DD.001E: unknown main item tag 0x0 [ 508.551689][ T10] mcp2221 0003:04D8:00DD.001E: unknown main item tag 0x0 [ 508.551715][ T10] mcp2221 0003:04D8:00DD.001E: unknown main item tag 0x0 [ 508.551761][ T10] mcp2221 0003:04D8:00DD.001E: unknown main item tag 0x0 [ 508.551786][ T10] mcp2221 0003:04D8:00DD.001E: unknown main item tag 0x0 [ 508.555038][ T10] mcp2221 0003:04D8:00DD.001E: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 508.761559][ T44] usb 6-1: USB disconnect, device number 23 [ 509.129710][ T9] usb 5-1: 0:1 : does not exist [ 509.375485][ T9] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 509.385524][ T9] usb 5-1: USB disconnect, device number 69 [ 509.449453][ T5642] udevd[5642]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 509.484466][ T10] usb 2-1: new low-speed USB device number 69 using dummy_hcd [ 509.640960][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 509.640994][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice=fd.97 [ 509.645623][ T10] usb 2-1: config 0 descriptor has 1 excess byte, ignoring [ 509.645640][ T10] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 7 [ 509.688566][ T10] usb 2-1: string descriptor 0 read error: -22 [ 509.688655][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.698188][ T10] usb 2-1: config 0 descriptor?? [ 509.736795][ T9] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 509.791098][ T194] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 509.898232][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 509.899041][ T9] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 509.903133][ T9] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 509.903151][ T9] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 509.903163][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 509.903182][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.905621][ T9] usb 5-1: config 0 descriptor?? [ 509.969339][ T194] usb 6-1: Using ep0 maxpacket: 8 [ 509.969981][ T194] usb 6-1: New USB device found, idVendor=1199, idProduct=0028, bcdDevice=e5.25 [ 509.971036][ T194] usb 6-1: config 1 has an invalid interface number: 54 but max is 1 [ 509.971057][ T194] usb 6-1: config 1 has an invalid interface number: 54 but max is 1 [ 509.971074][ T194] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 509.971085][ T194] usb 6-1: config 1 has no interface number 0 [ 509.971118][ T194] usb 6-1: config 1 interface 54 has no altsetting 1 [ 509.973813][ T194] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.973827][ T194] usb 6-1: Product: syz [ 509.973835][ T194] usb 6-1: Manufacturer: syz [ 509.973859][ T194] usb 6-1: SerialNumber: syz [ 510.296750][ T5742] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 510.329980][ T9] mcp2221 0003:04D8:00DD.001F: unknown main item tag 0x0 [ 510.330004][ T9] mcp2221 0003:04D8:00DD.001F: unknown main item tag 0x0 [ 510.330020][ T9] mcp2221 0003:04D8:00DD.001F: unknown main item tag 0x0 [ 510.330035][ T9] mcp2221 0003:04D8:00DD.001F: unknown main item tag 0x0 [ 510.330050][ T9] mcp2221 0003:04D8:00DD.001F: unknown main item tag 0x0 [ 510.334104][ T9] mcp2221 0003:04D8:00DD.001F: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 510.437687][ T44] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 510.456832][ T5742] usb 4-1: Using ep0 maxpacket: 32 [ 510.460499][ T5742] usb 4-1: unable to get BOS descriptor or descriptor too short [ 510.460543][ T5742] usb 4-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=fc.62 [ 510.462436][ T5742] usb 4-1: config 8 has an invalid interface number: 94 but max is 0 [ 510.462491][ T5742] usb 4-1: config 8 has no interface number 0 [ 510.462521][ T5742] usb 4-1: config 8 interface 94 has no altsetting 0 [ 510.466004][ T5742] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.466028][ T5742] usb 4-1: Product: syz [ 510.466042][ T5742] usb 4-1: Manufacturer: syz [ 510.466359][ T5742] usb 4-1: SerialNumber: syz [ 510.606987][ T44] usb 1-1: Using ep0 maxpacket: 32 [ 510.608639][ T44] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 510.610897][ T44] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 510.610926][ T44] usb 1-1: config 0 has no interface number 0 [ 510.614519][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.614541][ T44] usb 1-1: Product: syz [ 510.614571][ T44] usb 1-1: Manufacturer: syz [ 510.614580][ T44] usb 1-1: SerialNumber: syz [ 510.634234][ T44] usb 1-1: config 0 descriptor?? [ 510.680638][ T44] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 510.680769][ T44] usb 1-1: selecting invalid altsetting 1 [ 510.680786][ T44] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 510.715378][ T44] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 510.727184][ T44] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 510.735564][ T44] usb 1-1: media controller created [ 510.743149][ T194] usb 6-1: selecting invalid altsetting 1 [ 510.743195][ T194] sierra 6-1:1.54: Sierra USB modem converter detected [ 510.769538][ T194] usb 6-1: Sierra USB modem converter now attached to ttyUSB0 [ 510.787129][ T194] usb 6-1: USB disconnect, device number 24 [ 510.793634][ T44] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 510.812987][ T194] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 510.826281][ T194] sierra 6-1:1.54: device disconnected [ 511.060142][ T29] kauditd_printk_skb: 145 callbacks suppressed [ 511.060161][ T29] audit: type=1326 audit(1792892833.161:5317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11753 comm="syz.0.1791" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb15d9f559 code=0x7fc00000 [ 511.067135][ T29] audit: type=1326 audit(1792892833.161:5318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11753 comm="syz.0.1791" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb15d9f559 code=0x7fc00000 [ 511.106100][ T194] usb 5-1: USB disconnect, device number 70 [ 511.275157][T11761] netlink: 'syz.5.1792': attribute type 1 has an invalid length. [ 511.446409][T11761] bond2: entered promiscuous mode [ 511.454813][T11761] 8021q: adding VLAN 0 to HW filter on device bond2 [ 511.998869][ T44] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 511.998903][ T44] zl10353_read_register: readreg error (reg=127, ret==-110) [ 512.084038][ T9] usb 2-1: USB disconnect, device number 69 [ 512.986952][ T44] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 513.119777][ T29] audit: type=1326 audit(1792892835.221:5319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11753 comm="syz.0.1791" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb15d9f559 code=0x7fc00000 [ 513.151780][ T44] usb 2-1: Using ep0 maxpacket: 8 [ 513.157844][ T44] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 513.169177][ T44] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 513.169202][ T44] usb 2-1: config 179 has no interface number 0 [ 513.169242][ T44] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 513.169297][ T44] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 513.169322][ T44] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 513.169345][ T44] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 513.169369][ T44] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 513.169409][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.271907][T11778] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 513.531378][ T44] usb 2-1: USB disconnect, device number 70 [ 513.531479][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 513.531507][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 514.022536][ T5698] usb 1-1: USB disconnect, device number 72 [ 514.252459][T11798] FAULT_INJECTION: forcing a failure. [ 514.252459][T11798] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 514.252494][T11798] CPU: 0 UID: 0 PID: 11798 Comm: syz.0.1804 Tainted: G L syzkaller #0 PREEMPT(full) [ 514.252518][T11798] Tainted: [L]=SOFTLOCKUP [ 514.252529][T11798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 514.252541][T11798] Call Trace: [ 514.252548][T11798] [ 514.252557][T11798] dump_stack_lvl+0xe8/0x150 [ 514.252590][T11798] should_fail_ex+0x410/0x560 [ 514.252627][T11798] strncpy_from_user+0x36/0x2c0 [ 514.252652][T11798] __se_sys_request_key+0xb8/0x350 [ 514.252807][T11798] ? __pfx___se_sys_request_key+0x10/0x10 [ 514.252843][T11798] do_syscall_64+0x166/0x520 [ 514.252863][T11798] ? trace_irq_disable+0x3b/0x140 [ 514.252885][T11798] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.252904][T11798] ? clear_bhb_loop+0x70/0xc0 [ 514.252927][T11798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.252945][T11798] RIP: 0033:0x7fbb15d9f559 [ 514.252963][T11798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 514.252978][T11798] RSP: 002b:00007fbb16ca1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 514.252999][T11798] RAX: ffffffffffffffda RBX: 00007fbb16025fa0 RCX: 00007fbb15d9f559 [ 514.253013][T11798] RDX: 00002000000002c0 RSI: 0000200000000280 RDI: 0000200000000240 [ 514.253027][T11798] RBP: 00007fbb16ca1090 R08: 0000000000000000 R09: 0000000000000000 [ 514.253039][T11798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 514.253051][T11798] R13: 00007fbb16026038 R14: 00007fbb16025fa0 R15: 00007fbb1614fa48 [ 514.253081][T11798] [ 514.956603][ T29] audit: type=1326 audit(1792892837.051:5320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11809 comm="syz.1.1807" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0115d9f559 code=0x0 [ 515.386807][ T44] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 515.538718][ T44] usb 5-1: Using ep0 maxpacket: 32 [ 515.545210][ T44] usb 5-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 515.561355][ T44] usb 5-1: config index 0 descriptor too short (expected 19, got 18) [ 515.561382][ T44] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 515.595758][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.595777][ T44] usb 5-1: Product: syz [ 515.595785][ T44] usb 5-1: Manufacturer: syz [ 515.595793][ T44] usb 5-1: SerialNumber: syz [ 515.625619][ T44] usb 5-1: config 0 descriptor?? [ 515.627954][ T5742] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [ 515.644211][ T5742] gspca_sn9c2028: read1 error -32 [ 515.644678][ T5742] gspca_sn9c2028: read1 error -32 [ 515.645012][ T5742] gspca_sn9c2028: read1 error -32 [ 515.645111][ T5742] sn9c2028 4-1:8.94: probe with driver sn9c2028 failed with error -32 [ 515.946826][ T5742] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 516.067154][ T44] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 516.090709][ T5698] usb 4-1: USB disconnect, device number 68 [ 516.103773][ T5742] usb 1-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice= 0.01 [ 516.105542][ T5742] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 516.105560][ T5742] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 516.142537][ T5742] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.142564][ T5742] usb 1-1: Product: syz [ 516.142578][ T5742] usb 1-1: Manufacturer: syz [ 516.142592][ T5742] usb 1-1: SerialNumber: syz [ 516.194789][ T5742] ums-onetouch 1-1:1.0: USB Mass Storage device detected [ 516.219615][ T44] usb 2-1: Using ep0 maxpacket: 32 [ 516.220564][ T44] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 516.222649][ T44] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 516.222665][ T44] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 516.222678][ T44] usb 2-1: config 0 interface 0 has no altsetting 0 [ 516.272411][ T5742] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/input/input59 [ 516.272518][ T5742] input input59: usb_submit_urb failed [ 516.286158][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.286174][ T44] usb 2-1: Product: syz [ 516.286182][ T44] usb 2-1: Manufacturer: syz [ 516.286189][ T44] usb 2-1: SerialNumber: syz [ 516.322345][ T44] usb 2-1: config 0 descriptor?? [ 516.349566][ T5742] input: failed to attach handler kbd to device input59, error: -5 [ 516.369211][ T4986] input input59: usb_submit_urb failed [ 516.371384][ T5742] scsi host1: usb-storage 1-1:1.0 [ 516.377374][ T4986] input input59: usb_submit_urb failed [ 516.424331][ T5742] usb 1-1: USB disconnect, device number 73 [ 516.547338][ T29] audit: type=1326 audit(1792892838.641:5321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11820 comm="syz.1.1812" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0115d9f559 code=0x7ffc0000 [ 516.558246][ T29] audit: type=1326 audit(1792892838.651:5322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11820 comm="syz.1.1812" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0115d9f559 code=0x7ffc0000 [ 516.631026][ T29] audit: type=1326 audit(1792892838.721:5323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11820 comm="syz.1.1812" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f0115d9f559 code=0x7ffc0000 [ 516.631078][ T29] audit: type=1326 audit(1792892838.721:5324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11820 comm="syz.1.1812" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0115d9f559 code=0x7ffc0000 [ 516.631110][ T29] audit: type=1326 audit(1792892838.721:5325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11820 comm="syz.1.1812" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0115d9f559 code=0x7ffc0000 [ 516.656581][ T29] audit: type=1326 audit(1792892838.741:5326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11820 comm="syz.1.1812" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0115d9f559 code=0x7ffc0000 [ 516.698732][ T29] audit: type=1326 audit(1792892838.791:5327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11820 comm="syz.1.1812" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0115d9f559 code=0x7ffc0000 [ 516.698952][ T29] audit: type=1326 audit(1792892838.791:5328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11820 comm="syz.1.1812" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0115d9f559 code=0x7ffc0000 [ 516.828137][ T29] audit: type=1326 audit(1792892838.931:5329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11820 comm="syz.1.1812" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=468 compat=0 ip=0x7f0115d9f559 code=0x7ffc0000 [ 516.828251][ T29] audit: type=1326 audit(1792892838.931:5330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11820 comm="syz.1.1812" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0115d9f559 code=0x7ffc0000 [ 517.037015][ T5698] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 517.080472][ T44] gs_usb 2-1:0.0: Couldn't get device config: (err=-71) [ 517.080495][ T44] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -71 [ 517.106875][ T44] usb 2-1: USB disconnect, device number 71 [ 517.107956][ T5742] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 517.197160][ T5698] usb 4-1: Using ep0 maxpacket: 32 [ 517.197632][ T5698] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 517.198985][ T5698] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 517.199007][ T5698] usb 4-1: config 0 has no interface number 0 [ 517.232441][ T5698] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.232457][ T5698] usb 4-1: Product: syz [ 517.232465][ T5698] usb 4-1: Manufacturer: syz [ 517.232473][ T5698] usb 4-1: SerialNumber: syz [ 517.263059][ T5742] usb 1-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice= 0.01 [ 517.266179][ T5742] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 517.266196][ T5742] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 517.277470][ T5698] usb 4-1: config 0 descriptor?? [ 517.312334][ T5742] usb 1-1: string descriptor 0 read error: -22 [ 517.312442][ T5742] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.318658][ T5698] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 517.318682][ T5698] usb 4-1: selecting invalid altsetting 1 [ 517.318697][ T5698] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 517.372263][ T5742] ums-onetouch 1-1:1.0: USB Mass Storage device detected [ 517.396614][ T5698] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 517.408068][ T5742] input: Maxtor Onetouch 0d49:7000 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input60 [ 517.418429][ T5742] input input60: usb_submit_urb failed [ 517.421418][ T5698] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 517.421450][ T5698] usb 4-1: media controller created [ 517.425272][ T5742] input: failed to attach handler kbd to device input60, error: -5 [ 517.456979][ T4986] input input60: usb_submit_urb failed [ 517.459726][ T5742] scsi host1: usb-storage 1-1:1.0 [ 517.481678][ T4986] input input60: usb_submit_urb failed [ 517.521524][ T5698] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 517.574764][ T5640] input input60: usb_submit_urb failed [ 517.589891][ T4986] input input60: usb_submit_urb failed [ 517.594102][ T4986] input input60: usb_submit_urb failed [ 518.052797][ T5742] usb 1-1: USB disconnect, device number 74 [ 518.639493][ T5698] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 518.639545][ T5698] zl10353_read_register: readreg error (reg=127, ret==-110) [ 518.866807][ T9] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 519.027968][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 519.030538][ T9] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 519.032001][ T9] usb 6-1: config 0 interface 0 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 519.032031][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 519.032061][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.087352][ T9] usb 6-1: config 0 descriptor?? [ 519.118322][ T9] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 519.244468][ T9] usb 5-1: USB disconnect, device number 71 [ 519.384773][T11858] tipc: Can't bind to reserved service type 0 [ 519.576439][T11864] input: syz1 as /devices/virtual/input/input61 [ 519.617663][ T5698] usb 4-1: USB disconnect, device number 69 [ 519.847013][ T5742] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 519.996972][ T5742] usb 5-1: Using ep0 maxpacket: 16 [ 519.998323][ T5742] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 520.024639][ T5742] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.024666][ T5742] usb 5-1: Product: syz [ 520.024680][ T5742] usb 5-1: Manufacturer: syz [ 520.024692][ T5742] usb 5-1: SerialNumber: syz [ 520.064731][ T5742] usb 5-1: config 0 descriptor?? [ 520.087411][ T5698] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 520.112147][T11875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 520.114800][T11875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 520.256984][ T5698] usb 4-1: Using ep0 maxpacket: 8 [ 520.260261][ T5698] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 520.262285][ T5698] usb 4-1: config 135 has an invalid interface number: 230 but max is 0 [ 520.262310][ T5698] usb 4-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 520.262327][ T5698] usb 4-1: config 135 has no interface number 0 [ 520.262365][ T5698] usb 4-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 520.274088][ T5698] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.274114][ T5698] usb 4-1: Product: syz [ 520.274127][ T5698] usb 4-1: Manufacturer: syz [ 520.274140][ T5698] usb 4-1: SerialNumber: syz [ 520.367446][ T5698] uvcvideo 4-1:135.230: Found Unit with invalid ID 0 [ 520.370880][ T5698] uvcvideo 4-1:135.230: Found UVC 0.00 device syz (18ec:3288) [ 520.370953][ T5698] uvcvideo 4-1:135.230: No valid video chain found. [ 520.549742][ T5742] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 520.555438][ T5742] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 520.574443][ T5742] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 520.574507][ T5742] usb 5-1: media controller created [ 520.604692][ T5742] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 520.622690][ T5698] usb 4-1: USB disconnect, device number 70 [ 521.177091][T11864] dtv5100: wlen = 0, aborting. [ 521.177145][ T5742] zl10353_read_register: readreg error (reg=127, ret==0) [ 521.177206][ T5742] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 521.177219][ T5742] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 521.347595][T11892] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1835'. [ 521.347625][T11892] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1835'. [ 521.603350][ T5742] usb 6-1: USB disconnect, device number 25 [ 521.716941][ T5718] usb 5-1: USB disconnect, device number 72 [ 521.833407][ T5718] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 521.966098][T11906] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1838'. [ 522.174915][T11901] could not allocate digest TFM handle sha256-avx [ 522.298683][ T5718] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 522.451770][ T5718] usb 2-1: Using ep0 maxpacket: 32 [ 522.455493][ T5718] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 522.483854][ T5718] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 522.483882][ T5718] usb 2-1: config 0 has no interface number 0 [ 522.511260][ T5718] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.511287][ T5718] usb 2-1: Product: syz [ 522.511301][ T5718] usb 2-1: Manufacturer: syz [ 522.511313][ T5718] usb 2-1: SerialNumber: syz [ 522.548221][ T5718] usb 2-1: config 0 descriptor?? [ 522.551692][ T5718] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 522.551709][ T5718] usb 2-1: selecting invalid altsetting 1 [ 522.551718][ T5718] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 522.601586][ T5718] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 522.618837][ T5718] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 522.618889][ T5718] usb 2-1: media controller created [ 522.710879][ T5718] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 523.037929][T11898] macsec0: left allmulticast mode [ 523.279238][T11898] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 523.310472][ T29] kauditd_printk_skb: 69 callbacks suppressed [ 523.310485][ T29] audit: type=1326 audit(1792892845.411:5400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11904 comm="syz.1.1839" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0115d9f559 code=0x7fc00000 [ 523.313144][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.313186][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.313218][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.313248][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.348149][ T29] audit: type=1326 audit(1792892845.421:5401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11904 comm="syz.1.1839" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0115d9f559 code=0x7fc00000 [ 523.654743][T11924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 523.686751][T11924] bond0: (slave geneve2): making interface the new active one [ 523.689556][T11924] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 523.714706][ T9627] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.725882][ T9302] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.773963][ T9302] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.774026][ T9302] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.838576][ T5718] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 523.838652][ T5718] zl10353_read_register: readreg error (reg=127, ret==-110) [ 524.249820][T11943] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1848'. [ 524.268938][T11947] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1850'. [ 524.411029][T11950] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1851'. [ 524.843410][ T29] audit: type=1326 audit(1792892846.941:5402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11904 comm="syz.1.1839" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0115d9f559 code=0x7fc00000 [ 525.015850][ T5718] usb 2-1: USB disconnect, device number 72 [ 525.516897][ T5718] usb 2-1: new full-speed USB device number 73 using dummy_hcd [ 525.667542][ T5718] usb 2-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 525.676391][ T5718] usb 2-1: config 4 has an invalid interface number: 44 but max is 0 [ 525.676417][ T5718] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 525.676432][ T5718] usb 2-1: config 4 has no interface number 0 [ 525.676460][ T5718] usb 2-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 525.744990][ T5718] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.745018][ T5718] usb 2-1: Product: syz [ 525.745032][ T5718] usb 2-1: Manufacturer: syz [ 525.745046][ T5718] usb 2-1: SerialNumber: syz [ 526.202966][ T5718] dvb-usb: found a 'Gigabyte U7000' in cold state, will try to load a firmware [ 526.203908][ T5718] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 526.203934][ T5718] dib0700: firmware download failed at 7 with -22 [ 526.489460][T11986] veth1_macvtap: left promiscuous mode [ 526.489489][T11986] macsec0: entered promiscuous mode [ 526.489502][T11986] macsec0: entered allmulticast mode [ 526.504485][T11986] macsec0: left promiscuous mode [ 526.504505][T11986] macsec0: left allmulticast mode [ 526.603839][T11991] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 527.248189][T12006] xt_NETMAP: bad MAP_IPS. [ 527.716916][ T5718] usb 5-1: new low-speed USB device number 73 using dummy_hcd [ 527.858282][ T194] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 527.882308][ T5718] usb 5-1: unable to get BOS descriptor or descriptor too short [ 527.882361][ T5718] usb 5-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=d4.29 [ 527.908299][ T5718] usb 5-1: config 8 has an invalid interface number: 109 but max is 0 [ 527.908327][ T5718] usb 5-1: config 8 has no interface number 0 [ 527.908358][ T5718] usb 5-1: config 8 interface 109 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 8 [ 527.908373][ T5718] usb 5-1: config 8 interface 109 altsetting 0 endpoint 0x8E has invalid maxpacket 19095, setting to 8 [ 527.908386][ T5718] usb 5-1: config 8 interface 109 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 527.915742][ T5718] usb 5-1: string descriptor 0 read error: -22 [ 527.915869][ T5718] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.990400][T12010] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 528.004978][ T5718] metro_usb 5-1:8.109: Metrologic USB to Serial converter detected [ 528.020842][ T194] usb 6-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 528.022139][ T194] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 528.022162][ T194] usb 6-1: config 0 has no interface number 0 [ 528.022199][ T194] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 528.022212][ T194] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 528.022233][ T194] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.067348][ T194] usb 6-1: config 0 descriptor?? [ 528.073659][ T5718] usb 5-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 528.211498][ T5698] usb 5-1: USB disconnect, device number 73 [ 528.213017][ T5718] usb 2-1: USB disconnect, device number 73 [ 528.291181][ T5698] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 528.292786][ T5698] metro_usb 5-1:8.109: device disconnected [ 528.557586][ T194] asus 0003:0B05:17E0.0020: unknown main item tag 0x0 [ 528.557612][ T194] asus 0003:0B05:17E0.0020: unknown main item tag 0x0 [ 528.557628][ T194] asus 0003:0B05:17E0.0020: unknown main item tag 0x0 [ 528.557642][ T194] asus 0003:0B05:17E0.0020: unknown main item tag 0x0 [ 528.557657][ T194] asus 0003:0B05:17E0.0020: unknown main item tag 0x0 [ 528.557672][ T194] asus 0003:0B05:17E0.0020: unknown main item tag 0x0 [ 528.557687][ T194] asus 0003:0B05:17E0.0020: unknown main item tag 0x0 [ 528.625556][ T194] asus 0003:0B05:17E0.0020: hidraw0: USB HID v0.00 Device [HID 0b05:17e0] on usb-dummy_hcd.5-1/input2 [ 528.769085][ T5718] usb 6-1: USB disconnect, device number 26 [ 528.840393][T12020] fido_id[12020]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 529.744041][T12039] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1882'. [ 529.793288][T12039] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1882'. [ 530.209246][ T5742] usb 2-1: new full-speed USB device number 74 using dummy_hcd [ 530.366609][ T5742] usb 2-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 530.377752][ T5742] usb 2-1: config 4 has an invalid interface number: 44 but max is 0 [ 530.377770][ T5742] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 530.377780][ T5742] usb 2-1: config 4 has no interface number 0 [ 530.377802][ T5742] usb 2-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 530.382404][ T5742] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.382420][ T5742] usb 2-1: Product: syz [ 530.382431][ T5742] usb 2-1: Manufacturer: syz [ 530.382439][ T5742] usb 2-1: SerialNumber: syz [ 530.923645][ T5742] dvb-usb: found a 'Gigabyte U7000' in cold state, will try to load a firmware [ 530.936453][ T5742] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 530.936482][ T5742] dib0700: firmware download failed at 7 with -22 [ 531.112672][T12035] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1880'. [ 531.233282][T12061] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1890'. [ 531.966993][ T4971] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 532.047873][T12072] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1894'. [ 532.047897][T12072] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1894'. [ 532.118240][ T4971] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 532.120962][ T4971] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.151209][ T4971] usb 4-1: config 0 descriptor?? [ 532.359471][ T4971] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 532.609882][ T4971] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1 [ 532.609907][ T4971] [drm] Initialized udl on minor 1 [ 532.826151][T12085] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1899'. [ 532.926791][ T5698] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 532.998845][ T5718] usb 2-1: USB disconnect, device number 74 [ 533.090858][ T5698] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 533.094022][ T5698] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.121694][ T5698] usb 6-1: config 0 descriptor?? [ 533.318994][ T4962] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 533.384981][ T5698] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 533.634605][ T5698] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 533.634631][ T5698] [drm] Initialized udl on minor 2 [ 533.930203][T12097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.930698][T12097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.970297][T12097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.991600][T12097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 535.388879][ T44] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 535.539883][ T44] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 535.545066][ T44] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 535.545090][ T44] usb 1-1: config 0 has no interface number 0 [ 535.575768][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.575796][ T44] usb 1-1: Product: syz [ 535.575810][ T44] usb 1-1: Manufacturer: syz [ 535.575853][ T44] usb 1-1: SerialNumber: syz [ 535.617001][ T44] usb 1-1: config 0 descriptor?? [ 535.823028][ T44] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 535.841598][ T44] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 535.841940][ T44] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 535.842012][ T44] usb 1-1: media controller created [ 535.878916][T12114] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1906'. [ 535.878948][T12114] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1906'. [ 535.914886][T12114] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1906'. [ 535.914917][T12114] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1906'. [ 535.928579][ T44] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 535.947159][ T9629] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 535.947203][ T9629] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 535.947272][ T9629] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 535.947304][ T9629] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 536.023678][ T44] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 536.536848][ T194] usb 2-1: new full-speed USB device number 75 using dummy_hcd [ 536.698188][ T194] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 536.698246][ T194] usb 2-1: too many configurations: 248, using maximum allowed: 8 [ 536.702675][ T194] usb 2-1: config 0 has no interfaces? [ 536.704369][ T194] usb 2-1: config 0 has no interfaces? [ 536.705068][ T194] usb 2-1: config 0 has no interfaces? [ 536.705960][ T194] usb 2-1: config 0 has no interfaces? [ 536.715969][ T194] usb 2-1: config 0 has no interfaces? [ 536.724540][ T194] usb 2-1: config 0 has no interfaces? [ 536.735961][ T194] usb 2-1: config 0 has no interfaces? [ 536.747302][ T194] usb 2-1: config 0 has no interfaces? [ 536.747338][ T194] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.783039][ T194] usb 2-1: config 0 descriptor?? [ 537.067262][ T4962] usb 2-1: USB disconnect, device number 75 [ 537.443549][T12120] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 537.459592][T12120] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 537.678206][ T4971] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 537.678550][ T4971] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 537.691291][ T4971] usb 4-1: USB disconnect, device number 71 [ 537.696492][ T5698] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 537.697029][ T5698] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 537.704018][ T44] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 537.727789][ T44] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 537.743794][ T5698] usb 6-1: USB disconnect, device number 27 [ 537.750865][ T194] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 537.754756][ T194] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 537.896843][ T4962] usb 2-1: new full-speed USB device number 76 using dummy_hcd [ 537.932369][T12124] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 538.018768][ T29] audit: type=1326 audit(1792892860.121:5403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12126 comm="syz.5.1911" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f889fb9f559 code=0x0 [ 538.047687][ T4962] usb 2-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 538.048766][ T4962] usb 2-1: config 4 has an invalid interface number: 44 but max is 0 [ 538.048787][ T4962] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 538.048805][ T4962] usb 2-1: config 4 has no interface number 0 [ 538.048840][ T4962] usb 2-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 538.052136][ T4962] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.052158][ T4962] usb 2-1: Product: syz [ 538.052172][ T4962] usb 2-1: Manufacturer: syz [ 538.052185][ T4962] usb 2-1: SerialNumber: syz [ 538.140244][ T4971] usb 1-1: USB disconnect, device number 75 [ 538.485982][ T4962] dvb-usb: found a 'Gigabyte U7000' in cold state, will try to load a firmware [ 538.499523][ T4962] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 538.499551][ T4962] dib0700: firmware download failed at 7 with -22 [ 539.287225][ T5698] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 539.416852][ T4971] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 539.438665][ T5698] usb 6-1: Using ep0 maxpacket: 16 [ 539.439467][ T5698] usb 6-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40 [ 539.440747][ T5698] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 539.440768][ T5698] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 539.443243][ T5698] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.443259][ T5698] usb 6-1: Product: syz [ 539.443268][ T5698] usb 6-1: Manufacturer: syz [ 539.443275][ T5698] usb 6-1: SerialNumber: syz [ 539.509115][ T5698] hub 6-1:1.0: bad descriptor, ignoring hub [ 539.509141][ T5698] hub 6-1:1.0: probe with driver hub failed with error -5 [ 539.566825][ T4971] usb 1-1: Using ep0 maxpacket: 32 [ 539.567312][ T4971] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 539.570057][ T4971] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 539.570074][ T4971] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 539.570086][ T4971] usb 1-1: config 0 interface 0 has no altsetting 0 [ 539.571964][ T4971] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.571979][ T4971] usb 1-1: Product: syz [ 539.571987][ T4971] usb 1-1: Manufacturer: syz [ 539.571995][ T4971] usb 1-1: SerialNumber: syz [ 539.583328][ T4971] usb 1-1: config 0 descriptor?? [ 539.798420][ T29] audit: type=1326 audit(1792892861.901:5404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12147 comm="syz.0.1918" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb15d9f559 code=0x7ffc0000 [ 539.798590][ T29] audit: type=1326 audit(1792892861.901:5405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12147 comm="syz.0.1918" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb15d9f559 code=0x7ffc0000 [ 539.798882][ T29] audit: type=1326 audit(1792892861.901:5406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12147 comm="syz.0.1918" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fbb15d9f559 code=0x7ffc0000 [ 539.799023][ T29] audit: type=1326 audit(1792892861.901:5407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12147 comm="syz.0.1918" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb15d9f559 code=0x7ffc0000 [ 539.799978][ T29] audit: type=1326 audit(1792892861.901:5408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12147 comm="syz.0.1918" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb15d9f559 code=0x7ffc0000 [ 539.800185][ T29] audit: type=1326 audit(1792892861.901:5409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12147 comm="syz.0.1918" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbb15d9f559 code=0x7ffc0000 [ 539.802408][ T29] audit: type=1326 audit(1792892861.901:5410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12147 comm="syz.0.1918" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb15d9f559 code=0x7ffc0000 [ 539.802556][ T29] audit: type=1326 audit(1792892861.901:5411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12147 comm="syz.0.1918" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb15d9f559 code=0x7ffc0000 [ 539.803407][ T29] audit: type=1326 audit(1792892861.901:5412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12147 comm="syz.0.1918" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fbb15d9f559 code=0x7ffc0000 [ 539.808248][ T44] usb 6-1: USB disconnect, device number 28 [ 539.915630][ T4962] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 540.058012][ T4971] gs_usb 1-1:0.0: Couldn't get device config: (err=-71) [ 540.058034][ T4971] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -71 [ 540.094634][ T4971] usb 1-1: USB disconnect, device number 76 [ 540.128040][ T4962] usb 5-1: Using ep0 maxpacket: 16 [ 540.128582][ T4962] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 540.129527][ T4962] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 540.129550][ T4962] usb 5-1: config 0 has no interface number 0 [ 540.129589][ T4962] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 540.129611][ T4962] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 540.134094][ T4962] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.134117][ T4962] usb 5-1: Product: syz [ 540.134130][ T4962] usb 5-1: Manufacturer: syz [ 540.134144][ T4962] usb 5-1: SerialNumber: syz [ 540.151018][ T4962] usb 5-1: config 0 descriptor?? [ 540.217277][T12152] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 540.217369][T12152] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 540.419879][T12152] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 540.419952][T12152] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 540.471420][T12157] syzkaller1: entered promiscuous mode [ 540.471436][T12157] syzkaller1: entered allmulticast mode [ 540.630393][T12160] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1923'. [ 540.630495][T12160] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1923'. [ 540.658634][ T4962] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 540.689778][ T5698] usb 2-1: USB disconnect, device number 76 [ 540.838251][ T4962] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 540.838281][ T4962] asix 5-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 540.838501][ T4962] asix 5-1:0.34: probe with driver asix failed with error -61 [ 540.987733][T12171] FAULT_INJECTION: forcing a failure. [ 540.987733][T12171] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 540.988245][T12171] CPU: 0 UID: 0 PID: 12171 Comm: syz.0.1925 Tainted: G L syzkaller #0 PREEMPT(full) [ 540.988274][T12171] Tainted: [L]=SOFTLOCKUP [ 540.988281][T12171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 540.988293][T12171] Call Trace: [ 540.988302][T12171] [ 540.988310][T12171] dump_stack_lvl+0xe8/0x150 [ 540.988336][T12171] should_fail_ex+0x410/0x560 [ 540.988353][T12171] _copy_from_iter+0x1d3/0x1660 [ 540.988366][T12171] ? __alloc_skb+0x27a/0x7a0 [ 540.988382][T12171] ? __alloc_skb+0x27a/0x7a0 [ 540.988397][T12171] ? __alloc_skb+0x27a/0x7a0 [ 540.988411][T12171] ? __pfx__copy_from_iter+0x10/0x10 [ 540.988422][T12171] ? kmem_cache_alloc_node_noprof+0x1f4/0x600 [ 540.988438][T12171] ? __alloc_skb+0x27a/0x7a0 [ 540.988451][T12171] ? __alloc_skb+0x27a/0x7a0 [ 540.988467][T12171] ? netlink_sendmsg+0x64f/0xb20 [ 540.988482][T12171] ? skb_put+0x112/0x210 [ 540.988497][T12171] netlink_sendmsg+0x6bb/0xb20 [ 540.988514][T12171] ? __pfx_netlink_sendmsg+0x10/0x10 [ 540.988529][T12171] ? aa_sock_msg_perm+0x144/0x210 [ 540.988544][T12171] ? apparmor_socket_sendmsg+0x98/0x360 [ 540.988560][T12171] ? __pfx_netlink_sendmsg+0x10/0x10 [ 540.988573][T12171] sock_sendmsg_nosec+0x14e/0x190 [ 540.988588][T12171] ____sys_sendmsg+0x54e/0x850 [ 540.988601][T12171] ? __pfx_____sys_sendmsg+0x10/0x10 [ 540.988616][T12171] ? import_iovec+0x73/0xa0 [ 540.988630][T12171] ___sys_sendmsg+0x2a5/0x360 [ 540.988645][T12171] ? __lock_acquire+0x747/0x2de0 [ 540.988660][T12171] ? __pfx____sys_sendmsg+0x10/0x10 [ 540.988688][T12171] ? __fget_files+0x3a2/0x420 [ 540.988698][T12171] ? __fget_files+0x2a/0x420 [ 540.988713][T12171] __x64_sys_sendmsg+0x1b1/0x290 [ 540.988724][T12171] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 540.988745][T12171] do_syscall_64+0x166/0x520 [ 540.988757][T12171] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.988767][T12171] ? clear_bhb_loop+0x70/0xc0 [ 540.988780][T12171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.988791][T12171] RIP: 0033:0x7fbb15d9f559 [ 540.988802][T12171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 540.988811][T12171] RSP: 002b:00007fbb16c5f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 540.988824][T12171] RAX: ffffffffffffffda RBX: 00007fbb16026180 RCX: 00007fbb15d9f559 [ 540.988832][T12171] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 000000000000000a [ 540.988839][T12171] RBP: 00007fbb16c5f090 R08: 0000000000000000 R09: 0000000000000000 [ 540.988845][T12171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 540.988851][T12171] R13: 00007fbb16026218 R14: 00007fbb16026180 R15: 00007fbb1614fa48 [ 540.988868][T12171] [ 541.189237][ T5698] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 541.252292][ T10] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 541.376733][ T5698] usb 4-1: Using ep0 maxpacket: 8 [ 541.381901][ T5698] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 541.403015][ T5698] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.403041][ T5698] usb 4-1: Product: syz [ 541.403055][ T5698] usb 4-1: Manufacturer: syz [ 541.403510][ T5698] usb 4-1: SerialNumber: syz [ 541.431030][ T5698] usb 4-1: config 0 descriptor?? [ 541.445770][ T5698] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 541.445816][ T5698] pctv452e: pctv452e_power_ctrl: 1 [ 541.445816][ T5698] [ 541.445860][ T5698] usb 4-1: selecting invalid altsetting 3 [ 541.445874][ T5698] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 541.445874][ T5698] [ 541.445888][ T5698] dvb-usb: bulk message failed: -22 (5/0) [ 541.467988][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 541.490565][ T10] usb 1-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.40 [ 541.493091][ T5698] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 541.494363][ T5698] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 541.494412][ T5698] usb 4-1: media controller created [ 541.523958][ T10] usb 1-1: config 1 interface 0 altsetting 197 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 541.523980][ T10] usb 1-1: config 1 interface 0 has no altsetting 0 [ 541.550802][ T5698] dvb-usb: bulk message failed: -22 (8/0) [ 541.550822][ T5698] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 541.550877][ T5698] dvb-usb: MAC address reading failed. [ 541.584177][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.584219][ T10] usb 1-1: Product: syz [ 541.584233][ T10] usb 1-1: Manufacturer: ࠒ [ 541.584251][ T10] usb 1-1: SerialNumber: syz [ 541.614208][ T5698] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 541.663125][T12166] dvb-usb: bulk message failed: -22 (9/0) [ 541.663146][T12166] pctv452e: I2C error -22; AA 02 00 02 00 -> aa 02 31 05 00 02 00 [ 541.846594][ T5698] DVB: Unable to find symbol stb0899_attach() [ 541.846606][ T5698] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 541.996774][ T5698] rc_core: IR keymap rc-tt-1500 not found [ 541.996793][ T5698] Registered IR keymap rc-empty [ 541.999049][ T5698] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 542.002464][ T5698] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input62 [ 542.005934][ T5698] dvb-usb: schedule remote query interval to 100 msecs. [ 542.005954][ T5698] pctv452e: pctv452e_power_ctrl: 0 [ 542.005954][ T5698] [ 542.005964][ T5698] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 542.071214][ T5698] usb 4-1: USB disconnect, device number 72 [ 542.233189][ T5698] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 542.550554][T12195] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1933'. [ 542.550585][T12195] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1933'. [ 542.572743][T12195] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1933'. [ 542.572777][T12195] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1933'. [ 542.780550][ T4962] usb 5-1: USB disconnect, device number 75 [ 542.956851][ T44] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 543.110183][ T44] usb 6-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 543.114877][ T44] usb 6-1: config 4 has an invalid interface number: 44 but max is 0 [ 543.114902][ T44] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 543.114918][ T44] usb 6-1: config 4 has no interface number 0 [ 543.115115][ T44] usb 6-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 543.137114][ T44] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.137140][ T44] usb 6-1: Product: syz [ 543.137154][ T44] usb 6-1: Manufacturer: syz [ 543.137168][ T44] usb 6-1: SerialNumber: syz [ 543.182506][ T5698] usb 2-1: new low-speed USB device number 77 using dummy_hcd [ 543.327045][ T5698] usb 2-1: device descriptor read/64, error -71 [ 543.457107][ T4962] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 543.566787][ T5698] usb 2-1: new low-speed USB device number 78 using dummy_hcd [ 543.605555][ T44] dvb-usb: found a 'Gigabyte U7000' in cold state, will try to load a firmware [ 543.607937][ T4962] usb 5-1: Using ep0 maxpacket: 8 [ 543.608738][ T4962] usb 5-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 543.609925][ T4962] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 189, changing to 11 [ 543.609952][ T4962] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 543.609977][ T4962] usb 5-1: config 0 interface 0 has no altsetting 0 [ 543.610008][ T4962] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.616060][ T44] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 543.616103][ T44] dib0700: firmware download failed at 7 with -22 [ 543.631599][ T4962] usb 5-1: config 0 descriptor?? [ 543.758625][ T5698] usb 2-1: device descriptor read/64, error -71 [ 543.877143][ T5698] usb usb2-port1: attempt power cycle [ 544.061024][ T4962] usbhid 5-1:0.0: can't add hid device: -71 [ 544.061119][ T4962] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 544.090487][ T4962] usb 5-1: USB disconnect, device number 76 [ 544.219229][ T5698] usb 2-1: new low-speed USB device number 79 using dummy_hcd [ 544.248355][ T5698] usb 2-1: device descriptor read/8, error -71 [ 544.487150][ T5698] usb 2-1: new low-speed USB device number 80 using dummy_hcd [ 544.508195][ T5698] usb 2-1: device descriptor read/8, error -71 [ 544.617452][ T5698] usb usb2-port1: unable to enumerate USB device [ 544.667992][ T10] usbhid 1-1:1.0: can't add hid device: -71 [ 544.668058][ T10] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 544.691623][ T10] usb 1-1: USB disconnect, device number 77 [ 545.086965][T12224] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1944'. [ 545.087008][T12224] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1944'. [ 545.090367][T12224] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1944'. [ 545.090395][T12224] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1944'. [ 545.341452][T12233] FAULT_INJECTION: forcing a failure. [ 545.341452][T12233] name failslab, interval 1, probability 0, space 0, times 0 [ 545.341486][T12233] CPU: 0 UID: 0 PID: 12233 Comm: syz.4.1948 Tainted: G L syzkaller #0 PREEMPT(full) [ 545.341514][T12233] Tainted: [L]=SOFTLOCKUP [ 545.341522][T12233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 545.341534][T12233] Call Trace: [ 545.341541][T12233] [ 545.341550][T12233] dump_stack_lvl+0xe8/0x150 [ 545.341584][T12233] should_fail_ex+0x410/0x560 [ 545.341613][T12233] should_failslab+0xa8/0x100 [ 545.341640][T12233] __kvmalloc_node_noprof+0x171/0x820 [ 545.341666][T12233] ? traverse+0xf1/0x620 [ 545.341689][T12233] ? traverse+0xf1/0x620 [ 545.341719][T12233] traverse+0xf1/0x620 [ 545.341755][T12233] seq_read_iter+0xb6a/0xca0 [ 545.341784][T12233] ? apparmor_file_permission+0x1fb/0x2b0 [ 545.341820][T12233] proc_reg_read_iter+0x1b7/0x280 [ 545.341966][T12233] vfs_read+0x595/0xa80 [ 545.341993][T12233] ? __pfx_vfs_read+0x10/0x10 [ 545.342014][T12233] ? do_sys_openat2+0x18d/0x200 [ 545.342036][T12233] ? kmem_cache_free+0x182/0x650 [ 545.342065][T12233] ? fdget+0x16b/0x250 [ 545.342084][T12233] __x64_sys_pread64+0x196/0x220 [ 545.342108][T12233] ? __pfx___x64_sys_pread64+0x10/0x10 [ 545.342141][T12233] do_syscall_64+0x166/0x520 [ 545.342161][T12233] ? trace_irq_disable+0x3b/0x140 [ 545.342185][T12233] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.342204][T12233] ? clear_bhb_loop+0x70/0xc0 [ 545.342227][T12233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.342246][T12233] RIP: 0033:0x7fdc10f9f559 [ 545.342265][T12233] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 545.342281][T12233] RSP: 002b:00007fdc11e0e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 545.342302][T12233] RAX: ffffffffffffffda RBX: 00007fdc11225fa0 RCX: 00007fdc10f9f559 [ 545.342316][T12233] RDX: 0000000000000017 RSI: 00002000000000c0 RDI: 0000000000000004 [ 545.342329][T12233] RBP: 00007fdc11e0e090 R08: 0000000000000000 R09: 0000000000000000 [ 545.342341][T12233] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 545.342361][T12233] R13: 00007fdc11226038 R14: 00007fdc11225fa0 R15: 00007fdc1134fa48 [ 545.342393][T12233] [ 545.605508][T12235] tipc: Enabled bearer , priority 1 [ 545.688218][T12234] tipc: Resetting bearer [ 545.723555][T12234] tipc: Disabling bearer [ 545.756415][ T4962] usb 6-1: USB disconnect, device number 29 [ 545.829870][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 545.829888][ T29] audit: type=1326 audit(1792892867.931:5471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12237 comm="syz.3.1950" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb7c319f559 code=0x0 [ 546.108267][T12261] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1956'. [ 546.108309][T12261] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1956'. [ 546.216856][ T4962] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 546.259835][T12249] ifb0: entered allmulticast mode [ 546.312288][T12271] FAULT_INJECTION: forcing a failure. [ 546.312288][T12271] name failslab, interval 1, probability 0, space 0, times 0 [ 546.312313][T12271] CPU: 1 UID: 0 PID: 12271 Comm: syz.4.1958 Tainted: G L syzkaller #0 PREEMPT(full) [ 546.312328][T12271] Tainted: [L]=SOFTLOCKUP [ 546.312332][T12271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 546.312339][T12271] Call Trace: [ 546.312344][T12271] [ 546.312349][T12271] dump_stack_lvl+0xe8/0x150 [ 546.312371][T12271] should_fail_ex+0x410/0x560 [ 546.312388][T12271] should_failslab+0xa8/0x100 [ 546.312404][T12271] __kmalloc_noprof+0xf9/0x710 [ 546.312414][T12271] ? rcu_is_watching+0x16/0xb0 [ 546.312430][T12271] ? tomoyo_realpath_from_path+0xef/0x640 [ 546.312442][T12271] ? tomoyo_realpath_from_path+0xef/0x640 [ 546.312457][T12271] tomoyo_realpath_from_path+0xef/0x640 [ 546.312475][T12271] ? tomoyo_path_number_perm+0x219/0x5f0 [ 546.312490][T12271] tomoyo_path_number_perm+0x246/0x5f0 [ 546.312508][T12271] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 546.312522][T12271] ? __lock_acquire+0x747/0x2de0 [ 546.312554][T12271] ? __fget_files+0x2a/0x420 [ 546.312566][T12271] ? __fget_files+0x2a/0x420 [ 546.312576][T12271] ? __fget_files+0x2a/0x420 [ 546.312589][T12271] security_file_ioctl+0xc3/0x2a0 [ 546.312689][T12271] __se_sys_ioctl+0x47/0x170 [ 546.312704][T12271] do_syscall_64+0x166/0x520 [ 546.312723][T12271] ? trace_irq_disable+0x3b/0x140 [ 546.312736][T12271] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.312747][T12271] ? clear_bhb_loop+0x70/0xc0 [ 546.312760][T12271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.312771][T12271] RIP: 0033:0x7fdc10f9f559 [ 546.312782][T12271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 546.312791][T12271] RSP: 002b:00007fdc11e0e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 546.312804][T12271] RAX: ffffffffffffffda RBX: 00007fdc11225fa0 RCX: 00007fdc10f9f559 [ 546.312812][T12271] RDX: 00002000000004c0 RSI: 0000000000008982 RDI: 0000000000000003 [ 546.312819][T12271] RBP: 00007fdc11e0e090 R08: 0000000000000000 R09: 0000000000000000 [ 546.312826][T12271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 546.312833][T12271] R13: 00007fdc11226038 R14: 00007fdc11225fa0 R15: 00007fdc1134fa48 [ 546.312849][T12271] [ 546.312855][T12271] ERROR: Out of memory at tomoyo_realpath_from_path. [ 546.377926][ T4962] usb 6-1: Using ep0 maxpacket: 32 [ 546.378645][ T4962] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 546.392775][ T4962] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 546.392802][ T4962] usb 6-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 546.392825][ T4962] usb 6-1: config 0 interface 0 has no altsetting 0 [ 546.415151][ T4962] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.415177][ T4962] usb 6-1: Product: syz [ 546.415190][ T4962] usb 6-1: Manufacturer: syz [ 546.415202][ T4962] usb 6-1: SerialNumber: syz [ 546.505766][ T4962] usb 6-1: config 0 descriptor?? [ 546.737733][ T29] audit: type=1326 audit(1792892868.841:5472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12243 comm="syz.5.1952" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f889fb9f559 code=0x7ffc0000 [ 546.738136][ T29] audit: type=1326 audit(1792892868.841:5473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12243 comm="syz.5.1952" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f889fb9f559 code=0x7ffc0000 [ 546.741990][ T29] audit: type=1326 audit(1792892868.841:5474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12243 comm="syz.5.1952" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f889fb9f559 code=0x7ffc0000 [ 546.742171][ T29] audit: type=1326 audit(1792892868.841:5475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12243 comm="syz.5.1952" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f889fb9f559 code=0x7ffc0000 [ 546.744690][ T29] audit: type=1326 audit(1792892868.841:5476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12243 comm="syz.5.1952" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f889fb9f559 code=0x7ffc0000 [ 546.745693][ T29] audit: type=1326 audit(1792892868.841:5477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12243 comm="syz.5.1952" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f889fb9f559 code=0x7ffc0000 [ 546.796949][ T29] audit: type=1326 audit(1792892868.891:5478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12243 comm="syz.5.1952" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f889fb9f559 code=0x7ffc0000 [ 546.847324][ T29] audit: type=1326 audit(1792892868.921:5479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12243 comm="syz.5.1952" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f889fb9f559 code=0x7ffc0000 [ 546.948370][ T29] audit: type=1326 audit(1792892869.051:5480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12243 comm="syz.5.1952" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f889fb9f559 code=0x7ffc0000 [ 547.252771][ T4962] gs_usb 6-1:0.0: Couldn't get device config: (err=-71) [ 547.252793][ T4962] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -71 [ 547.295936][ T4962] usb 6-1: USB disconnect, device number 30 [ 547.556847][ T44] usb 4-1: new full-speed USB device number 73 using dummy_hcd [ 547.708572][ T44] usb 4-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 547.712217][ T44] usb 4-1: config 4 has an invalid interface number: 44 but max is 0 [ 547.712245][ T44] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 547.712289][ T44] usb 4-1: config 4 has no interface number 0 [ 547.712328][ T44] usb 4-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 547.733280][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.733306][ T44] usb 4-1: Product: syz [ 547.733321][ T44] usb 4-1: Manufacturer: syz [ 547.733334][ T44] usb 4-1: SerialNumber: syz [ 548.233785][ T44] dvb-usb: found a 'Gigabyte U7000' in cold state, will try to load a firmware [ 548.280345][ T44] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 548.280394][ T44] dib0700: firmware download failed at 7 with -22 [ 548.692137][ T44] wacom 0003:056A:0043.0021: Unknown device_type for 'syz0'. Assuming pen. [ 548.848238][ T44] wacom 0003:056A:0043.0021: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 548.943709][T12305] __nla_validate_parse: 35 callbacks suppressed [ 548.943726][T12305] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1968'. [ 548.943744][T12305] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1968'. [ 548.996364][T12305] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1968'. [ 548.996398][T12305] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1968'. [ 549.015065][ T9627] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 549.015113][ T9627] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 549.015148][ T9627] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 549.015178][ T9627] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 549.018070][ T4962] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 549.019958][ T44] input: Wacom Intuos2 9x12 Pen as /devices/virtual/misc/uhid/0003:056A:0043.0021/input/input63 [ 549.086952][T12293] could not allocate digest TFM handle sha256-avx [ 549.229961][ T4962] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40 [ 549.234841][ T4962] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 549.234868][ T4962] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 549.277887][ T4962] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.277912][ T4962] usb 6-1: Product: syz [ 549.277925][ T4962] usb 6-1: Manufacturer: syz [ 549.277939][ T4962] usb 6-1: SerialNumber: syz [ 549.522360][T12310] syzkaller1: entered promiscuous mode [ 549.522375][T12310] syzkaller1: entered allmulticast mode [ 549.624611][ T4962] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 549.840116][ T4962] usb 6-1: USB disconnect, device number 31 [ 549.923386][ T5642] udevd[5642]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 550.381309][ T5698] usb 4-1: USB disconnect, device number 73 [ 550.907184][ T44] usb 2-1: new low-speed USB device number 81 using dummy_hcd [ 550.946849][ T5698] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 551.070990][ T44] usb 2-1: Invalid ep0 maxpacket: 64 [ 551.103201][ T5698] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 551.103236][ T5698] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 551.104618][ T5698] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 551.104647][ T5698] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 551.104662][ T5698] usb 1-1: config 0 interface 0 has no altsetting 0 [ 551.105834][ T5698] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 551.105873][ T5698] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 551.105889][ T5698] usb 1-1: config 0 interface 0 has no altsetting 0 [ 551.116003][ T5698] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 551.116036][ T5698] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 551.116051][ T5698] usb 1-1: config 0 interface 0 has no altsetting 0 [ 551.221512][ T5698] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 551.221563][ T5698] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 551.221587][ T5698] usb 1-1: config 0 interface 0 has no altsetting 0 [ 551.223494][ T5698] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 551.223525][ T5698] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 551.223539][ T5698] usb 1-1: config 0 interface 0 has no altsetting 0 [ 551.225311][ T5698] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 551.225355][ T5698] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 551.225382][ T5698] usb 1-1: config 0 interface 0 has no altsetting 0 [ 551.247240][ T5698] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 551.247272][ T5698] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 551.247287][ T5698] usb 1-1: config 0 interface 0 has no altsetting 0 [ 551.275456][ T44] usb 2-1: new low-speed USB device number 82 using dummy_hcd [ 551.301462][ T5698] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 551.301519][ T5698] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 551.301543][ T5698] usb 1-1: config 0 interface 0 has no altsetting 0 [ 551.375527][ T5698] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 551.375554][ T5698] usb 1-1: Product: syz [ 551.375568][ T5698] usb 1-1: Manufacturer: syz [ 551.375580][ T5698] usb 1-1: SerialNumber: syz [ 551.401194][ T5698] usb 1-1: config 0 descriptor?? [ 551.427241][ T5698] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 551.480976][ T44] usb 2-1: Invalid ep0 maxpacket: 64 [ 551.481256][ T44] usb usb2-port1: attempt power cycle [ 551.693404][ T5698] usb 1-1: USB disconnect, device number 78 [ 551.707457][ T5698] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 551.822596][ T44] usb 2-1: new low-speed USB device number 83 using dummy_hcd [ 551.849060][ T44] usb 2-1: Invalid ep0 maxpacket: 64 [ 551.986772][ T44] usb 2-1: new low-speed USB device number 84 using dummy_hcd [ 552.009016][ T44] usb 2-1: Invalid ep0 maxpacket: 64 [ 552.009182][ T44] usb usb2-port1: unable to enumerate USB device [ 552.082865][T12332] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.082997][T12332] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.520078][T12332] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 552.603711][T12332] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 553.296444][T12372] x_tables: unsorted entry at hook 2 [ 553.536855][T11600] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 553.536878][T11600] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.536902][T11600] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 553.536915][T11600] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.536934][T11600] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 553.536947][T11600] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.536965][T11600] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 553.536978][T11600] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.226843][ T5719] usb 2-1: new full-speed USB device number 85 using dummy_hcd [ 554.399651][ T5719] usb 2-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 554.400698][ T5719] usb 2-1: config 4 has an invalid interface number: 44 but max is 0 [ 554.400722][ T5719] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 554.400747][ T5719] usb 2-1: config 4 has no interface number 0 [ 554.400784][ T5719] usb 2-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 554.408789][ T5719] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.408816][ T5719] usb 2-1: Product: syz [ 554.408829][ T5719] usb 2-1: Manufacturer: syz [ 554.408842][ T5719] usb 2-1: SerialNumber: syz [ 554.975169][ T5719] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 554.993341][ T5719] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 554.995914][ T5719] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 554.995946][ T5719] usb 2-1: media controller created [ 555.001079][ T5719] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 555.157962][ T5719] DVB: Unable to find symbol dib7000p_attach() [ 555.157974][ T5719] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 555.217153][T12343] usb 5-1: new full-speed USB device number 77 using dummy_hcd [ 555.297662][ T5719] rc_core: IR keymap rc-dib0700-rc5 not found [ 555.297676][ T5719] Registered IR keymap rc-empty [ 555.297833][ T5719] dvb-usb: could not initialize remote control. [ 555.297839][ T5719] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 555.378983][T12343] usb 5-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 555.384514][T12343] usb 5-1: too many endpoints for config 0 interface 0 altsetting 8: 130, using maximum allowed: 30 [ 555.384556][T12343] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 555.384580][T12343] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 555.384604][T12343] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 555.384649][T12343] usb 5-1: config 0 interface 0 has no altsetting 0 [ 555.384681][T12343] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.457877][T12343] usb 5-1: config 0 descriptor?? [ 555.458578][T12388] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 555.470727][ T5719] usb 2-1: USB disconnect, device number 85 [ 555.528425][ T5719] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 555.794661][T12388] netlink: 'syz.4.1986': attribute type 1 has an invalid length. [ 556.179834][T12343] logitech 0003:046D:C298.0022: unknown main item tag 0x2 [ 556.179858][T12343] logitech 0003:046D:C298.0022: unknown main item tag 0x0 [ 556.179874][T12343] logitech 0003:046D:C298.0022: unknown main item tag 0x0 [ 556.251282][T12343] input: HID 046d:c298 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:046D:C298.0022/input/input67 [ 556.252651][T12343] logitech 0003:046D:C298.0022: offset (39) exceeds report_count (19) [ 556.252728][T12343] logitech 0003:046D:C298.0022: offset (25) exceeds report_count (19) [ 556.828167][T12343] logitech 0003:046D:C298.0022: input,hidraw0: USB HID v0.00 Keyboard [HID 046d:c298] on usb-dummy_hcd.4-1/input0 [ 556.828813][T12343] logitech 0003:046D:C298.0022: implement() called with too large value 245 (n: 0)! (kworker/1:11) [ 556.867737][T12343] logitech 0003:046D:C298.0022: implement() called with too large value 248 (n: 0)! (kworker/1:11) [ 556.867765][T12343] logitech 0003:046D:C298.0022: implement() called with too large value 3 (n: 0)! (kworker/1:11) [ 556.867907][T12343] logitech 0003:046D:C298.0022: implement() called with too large value 129 (n: 0)! (kworker/1:11) [ 556.867927][T12343] logitech 0003:046D:C298.0022: implement() called with too large value 11 (n: 0)! (kworker/1:11) [ 556.867948][T12343] logitech 0003:046D:C298.0022: Force feedback support for Logitech Gaming Wheels [ 556.965948][T12343] usb 5-1: USB disconnect, device number 77 [ 557.392577][T12419] fido_id[12419]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 557.507239][T12428] netlink: 'syz.4.1996': attribute type 4 has an invalid length. [ 557.828129][T12343] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 557.960273][T12343] usb 5-1: device descriptor read/64, error -71 [ 558.026763][ T5711] usb 4-1: new full-speed USB device number 74 using dummy_hcd [ 558.156210][T12449] syzkaller1: entered promiscuous mode [ 558.156233][T12449] syzkaller1: entered allmulticast mode [ 558.198835][ T5711] usb 4-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 558.200620][ T5711] usb 4-1: config 4 has an invalid interface number: 44 but max is 0 [ 558.200644][ T5711] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 558.200661][ T5711] usb 4-1: config 4 has no interface number 0 [ 558.200698][ T5711] usb 4-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 558.202657][T12343] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 558.204410][ T5711] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.204432][ T5711] usb 4-1: Product: syz [ 558.204445][ T5711] usb 4-1: Manufacturer: syz [ 558.204470][ T5711] usb 4-1: SerialNumber: syz [ 558.338570][T12343] usb 5-1: device descriptor read/64, error -71 [ 558.447204][T12343] usb usb5-port1: attempt power cycle [ 558.699961][ T5711] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 558.702984][ T5711] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 558.706196][ T5711] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 558.706247][ T5711] usb 4-1: media controller created [ 558.741736][ T5711] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 558.788082][T12343] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 558.809744][T12343] usb 5-1: device descriptor read/8, error -71 [ 558.905399][ T5711] DVB: Unable to find symbol dib7000p_attach() [ 558.905417][ T5711] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 559.046783][T12343] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 559.068737][T12343] usb 5-1: device descriptor read/8, error -71 [ 559.087025][ T5711] rc_core: IR keymap rc-dib0700-rc5 not found [ 559.087043][ T5711] Registered IR keymap rc-empty [ 559.087322][ T5711] dvb-usb: could not initialize remote control. [ 559.087332][ T5711] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 559.165627][ T5711] usb 4-1: USB disconnect, device number 74 [ 559.177061][T12343] usb usb5-port1: unable to enumerate USB device [ 559.185165][ T5711] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 559.853438][T12487] syzkaller1: entered promiscuous mode [ 559.853460][T12487] syzkaller1: entered allmulticast mode [ 559.857048][ T5719] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 560.112914][T12492] FAULT_INJECTION: forcing a failure. [ 560.112914][T12492] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 560.112958][T12492] CPU: 1 UID: 0 PID: 12492 Comm: syz.3.2016 Tainted: G L syzkaller #0 PREEMPT(full) [ 560.112984][T12492] Tainted: [L]=SOFTLOCKUP [ 560.112992][T12492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 560.113003][T12492] Call Trace: [ 560.113011][T12492] [ 560.113023][T12492] dump_stack_lvl+0xe8/0x150 [ 560.113061][T12492] should_fail_ex+0x410/0x560 [ 560.113091][T12492] _copy_from_user+0x2d/0xb0 [ 560.113118][T12492] ucma_write+0x158/0x2f0 [ 560.113228][T12492] ? __pfx_ucma_write+0x10/0x10 [ 560.113248][T12492] ? security_file_permission+0x75/0x260 [ 560.113279][T12492] ? rw_verify_area+0x203/0x4c0 [ 560.113302][T12492] ? __pfx_ucma_write+0x10/0x10 [ 560.113320][T12492] vfs_write+0x296/0xba0 [ 560.113335][T12492] ? __pfx_vfs_write+0x10/0x10 [ 560.113353][T12492] ? __fget_files+0x2a/0x420 [ 560.113363][T12492] ? __fget_files+0x3a2/0x420 [ 560.113372][T12492] ? __fget_files+0x2a/0x420 [ 560.113384][T12492] ? fdget+0x1ac/0x250 [ 560.113397][T12492] ksys_write+0x150/0x270 [ 560.113409][T12492] ? __pfx_ksys_write+0x10/0x10 [ 560.113425][T12492] do_syscall_64+0x166/0x520 [ 560.113440][T12492] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.113450][T12492] ? clear_bhb_loop+0x70/0xc0 [ 560.113463][T12492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.113474][T12492] RIP: 0033:0x7fb7c319f559 [ 560.113484][T12492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 560.113494][T12492] RSP: 002b:00007fb7c4081028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 560.113506][T12492] RAX: ffffffffffffffda RBX: 00007fb7c3426180 RCX: 00007fb7c319f559 [ 560.113514][T12492] RDX: 0000000000000018 RSI: 0000200000000980 RDI: 0000000000000009 [ 560.113521][T12492] RBP: 00007fb7c4081090 R08: 0000000000000000 R09: 0000000000000000 [ 560.113528][T12492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 560.113534][T12492] R13: 00007fb7c3426218 R14: 00007fb7c3426180 R15: 00007fb7c354fa48 [ 560.113551][T12492] [ 560.367005][T12343] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 560.459184][T12494] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2017'. [ 560.518433][T12343] usb 4-1: Using ep0 maxpacket: 32 [ 560.519689][T12343] usb 4-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.40 [ 560.544690][T12343] usb 4-1: config 1 interface 0 altsetting 197 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 560.544713][T12343] usb 4-1: config 1 interface 0 has no altsetting 0 [ 560.581931][T12343] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.581949][T12343] usb 4-1: Product: syz [ 560.581957][T12343] usb 4-1: Manufacturer: ࠒ [ 560.581965][T12343] usb 4-1: SerialNumber: syz [ 561.708822][ T5719] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 561.858130][T12360] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 561.881371][ T5719] usb 2-1: Using ep0 maxpacket: 16 [ 561.882466][ T5719] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 561.890324][ T5719] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 561.890368][ T5719] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.937830][ T5719] usb 2-1: config 0 descriptor?? [ 562.017504][T12360] usb 6-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 562.039034][T12360] usb 6-1: config 4 has an invalid interface number: 44 but max is 0 [ 562.039060][T12360] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 562.039077][T12360] usb 6-1: config 4 has no interface number 0 [ 562.039123][T12360] usb 6-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 562.043883][T12360] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.043899][T12360] usb 6-1: Product: syz [ 562.043907][T12360] usb 6-1: Manufacturer: syz [ 562.043914][T12360] usb 6-1: SerialNumber: syz [ 562.334598][T12515] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2025'. [ 562.368383][T12515] xt_hashlimit: size too large, truncated to 1048576 [ 562.379654][ T5719] lua 0003:1E7D:2C2E.0023: unknown main item tag 0x0 [ 562.379694][ T5719] lua 0003:1E7D:2C2E.0023: unknown main item tag 0x0 [ 562.379744][ T5719] lua 0003:1E7D:2C2E.0023: unknown main item tag 0x0 [ 562.379769][ T5719] lua 0003:1E7D:2C2E.0023: unknown main item tag 0x0 [ 562.379794][ T5719] lua 0003:1E7D:2C2E.0023: unknown main item tag 0x0 [ 562.379819][ T5719] lua 0003:1E7D:2C2E.0023: unknown main item tag 0x0 [ 562.379842][ T5719] lua 0003:1E7D:2C2E.0023: unknown main item tag 0x0 [ 562.379889][ T5719] lua 0003:1E7D:2C2E.0023: unknown main item tag 0x0 [ 562.379914][ T5719] lua 0003:1E7D:2C2E.0023: unknown main item tag 0x0 [ 562.379937][ T5719] lua 0003:1E7D:2C2E.0023: unknown main item tag 0x0 [ 562.412704][ T5719] lua 0003:1E7D:2C2E.0023: hidraw0: USB HID v0.00 Device [HID 1e7d:2c2e] on usb-dummy_hcd.1-1/input0 [ 562.504550][T12360] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 562.523086][T12360] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 562.526179][T12360] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 562.526223][T12360] usb 6-1: media controller created [ 562.555222][T12360] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 562.606228][ T5719] usb 2-1: USB disconnect, device number 86 [ 562.791512][T12360] DVB: Unable to find symbol dib7000p_attach() [ 562.791530][T12360] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 562.882382][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.882440][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.946819][T12360] rc_core: IR keymap rc-dib0700-rc5 not found [ 562.946838][T12360] Registered IR keymap rc-empty [ 562.947120][T12360] dvb-usb: could not initialize remote control. [ 562.947130][T12360] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 562.954556][T12360] usb 6-1: USB disconnect, device number 33 [ 563.022759][T12360] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 563.524132][T12343] usbhid 4-1:1.0: can't add hid device: -71 [ 563.524198][T12343] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 563.554892][T12343] usb 4-1: USB disconnect, device number 75 [ 563.641268][T12530] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2030'. [ 563.641295][T12530] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2030'. [ 563.641310][T12530] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2030'. [ 563.880628][T12534] netlink: 'syz.3.2032': attribute type 4 has an invalid length. [ 563.902265][T12534] netlink: 'syz.3.2032': attribute type 4 has an invalid length. [ 563.957147][T12534] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2032'. [ 564.065111][T12540] skbuff: bad partial csum: csum=65535/2 headroom=178 headlen=65543 [ 564.197336][T12343] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 564.337880][T12343] usb 2-1: device descriptor read/64, error -71 [ 564.577433][T12343] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 564.717048][T12343] usb 2-1: device descriptor read/64, error -71 [ 564.829412][T12343] usb usb2-port1: attempt power cycle [ 565.179695][T12343] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 565.210877][T12343] usb 2-1: device descriptor read/8, error -71 [ 565.456848][T12343] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 565.478958][T12343] usb 2-1: device descriptor read/8, error -71 [ 565.567630][ T5711] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 565.587297][T12343] usb usb2-port1: unable to enumerate USB device [ 565.716811][ T5711] usb 6-1: Using ep0 maxpacket: 32 [ 565.718034][ T5711] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 565.719120][ T5711] usb 6-1: config 0 has no interfaces? [ 565.725922][ T5711] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.725947][ T5711] usb 6-1: Product: syz [ 565.725961][ T5711] usb 6-1: Manufacturer: syz [ 565.725974][ T5711] usb 6-1: SerialNumber: syz [ 565.770532][ T5711] usb 6-1: config 0 descriptor?? [ 566.180688][T12343] usb 6-1: USB disconnect, device number 34 [ 566.870902][ T8107] usb 2-1: new full-speed USB device number 91 using dummy_hcd [ 567.027540][ T8107] usb 2-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 567.029587][ T8107] usb 2-1: config 4 has an invalid interface number: 44 but max is 0 [ 567.029612][ T8107] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 567.029631][ T8107] usb 2-1: config 4 has no interface number 0 [ 567.029668][ T8107] usb 2-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 567.032619][ T8107] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.032644][ T8107] usb 2-1: Product: syz [ 567.032658][ T8107] usb 2-1: Manufacturer: syz [ 567.032672][ T8107] usb 2-1: SerialNumber: syz [ 567.476255][ T8107] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 567.480976][ T8107] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 567.483734][ T8107] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 567.483784][ T8107] usb 2-1: media controller created [ 567.488227][ T8107] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 567.613952][T12582] netlink: 'syz.4.2047': attribute type 4 has an invalid length. [ 567.614245][T12582] netlink: 'syz.4.2047': attribute type 4 has an invalid length. [ 567.646398][ T8107] DVB: Unable to find symbol dib7000p_attach() [ 567.646417][ T8107] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 567.663062][T12582] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2047'. [ 567.778661][ T8107] rc_core: IR keymap rc-dib0700-rc5 not found [ 567.778681][ T8107] Registered IR keymap rc-empty [ 567.778985][ T8107] dvb-usb: could not initialize remote control. [ 567.778995][ T8107] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 567.820228][ T8107] usb 2-1: USB disconnect, device number 91 [ 567.871433][ T8107] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 568.277003][T12343] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 568.345370][T12593] FAULT_INJECTION: forcing a failure. [ 568.345370][T12593] name failslab, interval 1, probability 0, space 0, times 0 [ 568.345405][T12593] CPU: 1 UID: 0 PID: 12593 Comm: syz.0.2051 Tainted: G L syzkaller #0 PREEMPT(full) [ 568.345431][T12593] Tainted: [L]=SOFTLOCKUP [ 568.345438][T12593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 568.345449][T12593] Call Trace: [ 568.345457][T12593] [ 568.345466][T12593] dump_stack_lvl+0xe8/0x150 [ 568.345502][T12593] should_fail_ex+0x410/0x560 [ 568.345530][T12593] should_failslab+0xa8/0x100 [ 568.345557][T12593] __kvmalloc_node_noprof+0x171/0x820 [ 568.345582][T12593] ? pipapo_realloc_scratch+0xf5/0x2a0 [ 568.345709][T12593] ? pipapo_realloc_scratch+0xf5/0x2a0 [ 568.345741][T12593] pipapo_realloc_scratch+0xf5/0x2a0 [ 568.345772][T12593] nft_pipapo_insert+0x13ba/0x18a0 [ 568.345821][T12593] ? __pfx_nft_pipapo_insert+0x10/0x10 [ 568.345847][T12593] ? rcu_is_watching+0x16/0xb0 [ 568.345874][T12593] ? trace_kmalloc+0x2a/0xf0 [ 568.345910][T12593] ? nft_trans_alloc+0x40/0x2a0 [ 568.345966][T12593] nf_tables_newsetelem+0x2aa4/0x4200 [ 568.346031][T12593] ? __pfx_nf_tables_newsetelem+0x10/0x10 [ 568.346055][T12593] ? lock_acquire+0x115/0x350 [ 568.346087][T12593] ? nla_validate_array+0xfc/0x260 [ 568.346150][T12593] ? __pfx___nla_validate_parse+0x10/0x10 [ 568.346182][T12593] ? __pfx_nf_tables_newset+0x10/0x10 [ 568.346203][T12593] ? nft_pernet+0x23/0x240 [ 568.346258][T12593] ? lock_acquire+0x115/0x350 [ 568.346278][T12593] ? nfnl_pernet+0x23/0x240 [ 568.346307][T12593] ? __nla_parse+0x40/0x60 [ 568.346334][T12593] nfnetlink_rcv+0x1288/0x28c0 [ 568.346382][T12593] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 568.346450][T12593] ? lock_acquire+0x115/0x350 [ 568.346482][T12593] ? netlink_deliver_tap+0x2e/0x1b0 [ 568.346505][T12593] ? netlink_deliver_tap+0x2e/0x1b0 [ 568.346535][T12593] netlink_unicast+0x8ef/0xa80 [ 568.346575][T12593] netlink_sendmsg+0x7f0/0xb20 [ 568.346605][T12593] ? __pfx_netlink_sendmsg+0x10/0x10 [ 568.346634][T12593] ? aa_sock_msg_perm+0x144/0x210 [ 568.346658][T12593] ? apparmor_socket_sendmsg+0x98/0x360 [ 568.346686][T12593] ? __pfx_netlink_sendmsg+0x10/0x10 [ 568.346707][T12593] sock_sendmsg_nosec+0x14e/0x190 [ 568.346734][T12593] ____sys_sendmsg+0x54e/0x850 [ 568.346759][T12593] ? __pfx_____sys_sendmsg+0x10/0x10 [ 568.346787][T12593] ? import_iovec+0x73/0xa0 [ 568.346815][T12593] ___sys_sendmsg+0x2a5/0x360 [ 568.346832][T12593] ? __lock_acquire+0x747/0x2de0 [ 568.346859][T12593] ? __pfx____sys_sendmsg+0x10/0x10 [ 568.346916][T12593] ? __fget_files+0x3a2/0x420 [ 568.346934][T12593] ? __fget_files+0x2a/0x420 [ 568.346962][T12593] __x64_sys_sendmsg+0x1b1/0x290 [ 568.346985][T12593] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 568.347026][T12593] do_syscall_64+0x166/0x520 [ 568.347046][T12593] ? trace_irq_disable+0x3b/0x140 [ 568.347070][T12593] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.347089][T12593] ? clear_bhb_loop+0x70/0xc0 [ 568.347120][T12593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.347139][T12593] RIP: 0033:0x7fbb15d9f559 [ 568.347159][T12593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 568.347175][T12593] RSP: 002b:00007fbb16ca1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 568.347197][T12593] RAX: ffffffffffffffda RBX: 00007fbb16025fa0 RCX: 00007fbb15d9f559 [ 568.347211][T12593] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 568.347223][T12593] RBP: 00007fbb16ca1090 R08: 0000000000000000 R09: 0000000000000000 [ 568.347235][T12593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 568.347246][T12593] R13: 00007fbb16026038 R14: 00007fbb16025fa0 R15: 00007fbb1614fa48 [ 568.347278][T12593] [ 568.437983][T12343] usb 6-1: Using ep0 maxpacket: 8 [ 568.441381][T12343] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 568.446347][T12343] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 568.446387][T12343] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 568.446431][T12343] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 568.446454][T12343] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 568.446493][T12343] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.474039][T12343] hub 6-1:1.0: bad descriptor, ignoring hub [ 568.474065][T12343] hub 6-1:1.0: probe with driver hub failed with error -5 [ 568.483120][T12343] cdc_wdm 6-1:1.0: skipping garbage [ 568.483140][T12343] cdc_wdm 6-1:1.0: skipping garbage [ 568.510764][T12343] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 568.510800][T12343] cdc_wdm 6-1:1.0: Unknown control protocol [ 568.887255][T12606] netlink: zone id is out of range [ 568.997875][T12343] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 569.146761][T12343] usb 2-1: Using ep0 maxpacket: 32 [ 569.147576][T12343] usb 2-1: New USB device found, idVendor=0e41, idProduct=4246, bcdDevice= 0.40 [ 569.148750][T12343] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 7 [ 569.153401][T12343] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.153424][T12343] usb 2-1: Product: syz [ 569.153437][T12343] usb 2-1: Manufacturer: ж [ 569.153451][T12343] usb 2-1: SerialNumber: syz [ 569.233064][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 569.233201][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 569.235124][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 569.235147][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 569.235357][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 569.235377][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 569.235605][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 569.235625][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 569.235756][ T8107] usb 6-1: USB disconnect, device number 35 [ 569.235840][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 569.235863][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 569.235882][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 569.241100][T12600] cdc_wdm 6-1:1.0: Tx URB error: -19 [ 569.399961][T12343] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 569.667282][T12343] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 569.679127][T12343] usb 2-1: unit 6 not found! [ 569.679248][T12343] usb 2-1: unit 2 not found! [ 569.833696][T12343] usb 2-1: USB disconnect, device number 92 [ 569.942030][ T5642] udevd[5642]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 570.720832][T12648] usb usb8: usbfs: process 12648 (syz.0.2066) did not claim interface 0 before use [ 570.840811][T12646] netlink: 'syz.1.2065': attribute type 4 has an invalid length. [ 570.867248][T12646] netlink: 'syz.1.2065': attribute type 4 has an invalid length. [ 570.933504][T12646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2065'. [ 571.005955][T12651] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 571.103721][T12653] netlink: zone id is out of range [ 571.477872][T12360] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 571.627469][T12360] usb 6-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 571.632259][T12360] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 571.632286][T12360] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 571.635171][T12360] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.635194][T12360] usb 6-1: Product: syz [ 571.635208][T12360] usb 6-1: Manufacturer: syz [ 571.635222][T12360] usb 6-1: SerialNumber: syz [ 571.975010][T12360] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 36 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 572.197595][T12670] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2073'. [ 572.197629][T12670] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2073'. [ 572.198243][T12670] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2073'. [ 572.198265][T12670] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2073'. [ 572.547437][T12360] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 572.577084][ T5711] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 572.696974][T12360] usb 5-1: Using ep0 maxpacket: 16 [ 572.697828][T12360] usb 5-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 572.699187][T12360] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 572.699217][T12360] usb 5-1: config 0 interface 0 has no altsetting 0 [ 572.701777][T12360] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.701799][T12360] usb 5-1: Product: syz [ 572.701813][T12360] usb 5-1: Manufacturer: syz [ 572.701826][T12360] usb 5-1: SerialNumber: syz [ 572.719587][T12360] usb 5-1: config 0 descriptor?? [ 572.727612][ T5711] usb 2-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=71.90 [ 572.751835][ T5711] usb 2-1: config 255 has an invalid interface number: 97 but max is 0 [ 572.751860][ T5711] usb 2-1: config 255 has an invalid interface descriptor of length 2, skipping [ 572.751876][ T5711] usb 2-1: config 255 has no interface number 0 [ 572.751954][ T5711] usb 2-1: config 255 interface 97 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 572.751979][ T5711] usb 2-1: config 255 interface 97 has no altsetting 0 [ 572.793221][ T5711] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.793247][ T5711] usb 2-1: Product: syz [ 572.793261][ T5711] usb 2-1: Manufacturer: syz [ 572.793275][ T5711] usb 2-1: SerialNumber: syz [ 572.986794][T12343] usb 1-1: new full-speed USB device number 79 using dummy_hcd [ 572.987564][ T5719] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 573.030318][T12360] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input71 [ 573.141465][T12343] usb 1-1: device descriptor read/64, error -71 [ 573.316159][ T5711] rndis_host 2-1:255.97: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 573.380781][T12343] usb 1-1: new full-speed USB device number 80 using dummy_hcd [ 573.425205][ T5711] usb 2-1: USB disconnect, device number 93 [ 573.510344][T12343] usb 1-1: device descriptor read/64, error -71 [ 573.512243][T12360] rc_core: IR keymap rc-imon-pad not found [ 573.512258][T12360] Registered IR keymap rc-empty [ 573.512365][T12360] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 573.512382][T12360] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 573.529633][T12362] usb 6-1: USB disconnect, device number 36 [ 573.557618][T12362] usblp0: removed [ 573.591322][T12689] fuse: Unknown parameter '0x000000000000000400000000000000000000004' [ 573.617072][T12343] usb usb1-port1: attempt power cycle [ 573.905946][T12676] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2075'. [ 573.957511][T12343] usb 1-1: new full-speed USB device number 81 using dummy_hcd [ 573.982041][T12343] usb 1-1: device descriptor read/8, error -71 [ 574.044637][T12696] netlink: zone id is out of range [ 574.099114][ C0] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 574.103804][T12360] imon:send_packet: packet tx failed (-71) [ 574.118566][T12360] imon 5-1:0.0: remote input dev register failed [ 574.118826][T12360] imon 5-1:0.0: imon_init_intf0: rc device setup failed [ 574.217001][T12343] usb 1-1: new full-speed USB device number 82 using dummy_hcd [ 574.237615][T12343] usb 1-1: device descriptor read/8, error -71 [ 574.347426][T12343] usb usb1-port1: unable to enumerate USB device [ 574.383541][T12698] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 574.417868][T12360] imon 5-1:0.0: unable to initialize intf0, err 0 [ 574.417882][T12360] imon:imon_probe: failed to initialize context! [ 574.417890][T12360] imon 5-1:0.0: unable to register, err -19 [ 574.436396][T12360] usb 5-1: USB disconnect, device number 82 [ 574.891040][T12701] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2081'. [ 574.891058][T12701] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2081'. [ 575.633203][T12715] netlink: 'syz.5.2086': attribute type 1 has an invalid length. [ 575.757616][T12715] 8021q: adding VLAN 0 to HW filter on device bond3 [ 575.782725][T12721] bond3: (slave gretap1): making interface the new active one [ 575.797927][T12721] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 575.803057][T12724] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2088'. [ 575.916798][T12361] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 575.922798][T12728] netlink: zone id is out of range [ 576.071806][T12361] usb 5-1: Using ep0 maxpacket: 16 [ 576.073441][T12361] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 576.074814][T12361] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 576.074843][T12361] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 576.074865][T12361] usb 5-1: config 0 interface 0 has no altsetting 0 [ 576.074898][T12361] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.084423][T12361] usb 5-1: config 0 descriptor?? [ 576.189493][T12730] tipc: Started in network mode [ 576.189513][T12730] tipc: Node identity aebc22b9ee76, cluster identity 4711 [ 576.189708][T12730] tipc: Enabled bearer , priority 0 [ 576.210424][T12733] tipc: Resetting bearer [ 576.263414][T12729] tipc: Disabling bearer [ 576.309010][T12739] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 576.468389][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 576.468403][ T29] audit: type=1326 audit(1792892898.571:5506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12741 comm="syz.5.2095" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f889fb9f559 code=0x7ffc0000 [ 576.468818][ T29] audit: type=1326 audit(1792892898.571:5507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12741 comm="syz.5.2095" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f889fb9f559 code=0x7ffc0000 [ 576.470377][ T29] audit: type=1326 audit(1792892898.571:5508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12741 comm="syz.5.2095" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f889fb9f559 code=0x7ffc0000 [ 576.471447][ T29] audit: type=1326 audit(1792892898.571:5509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12741 comm="syz.5.2095" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f889fb9f559 code=0x7ffc0000 [ 576.472986][ T29] audit: type=1326 audit(1792892898.571:5510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12741 comm="syz.5.2095" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f889fb9f559 code=0x7ffc0000 [ 576.474217][ T29] audit: type=1326 audit(1792892898.571:5511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12741 comm="syz.5.2095" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f889fb9f559 code=0x7ffc0000 [ 576.474578][ T29] audit: type=1326 audit(1792892898.571:5512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12741 comm="syz.5.2095" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7f889fb9f559 code=0x7ffc0000 [ 576.474817][ T29] audit: type=1326 audit(1792892898.571:5513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12741 comm="syz.5.2095" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f889fb9f559 code=0x7ffc0000 [ 576.475138][ T29] audit: type=1326 audit(1792892898.571:5514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12741 comm="syz.5.2095" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f889fb9f559 code=0x7ffc0000 [ 576.477963][ T29] audit: type=1326 audit(1792892898.581:5515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12741 comm="syz.5.2095" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f889fb9f559 code=0x7ffc0000 [ 576.482550][T12742] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2095'. [ 576.598239][T12745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 576.601174][T12745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.652442][T12361] usbhid 5-1:0.0: can't add hid device: -71 [ 576.652554][T12361] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 576.673418][T12361] usb 5-1: USB disconnect, device number 83 [ 577.126768][T12361] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 577.236843][T12343] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 577.276905][T12361] usb 6-1: Using ep0 maxpacket: 8 [ 577.279378][T12361] usb 6-1: New USB device found, idVendor=1199, idProduct=0028, bcdDevice=e5.25 [ 577.281750][T12361] usb 6-1: config 1 has an invalid interface number: 54 but max is 1 [ 577.281776][T12361] usb 6-1: config 1 has an invalid interface number: 54 but max is 1 [ 577.281792][T12361] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 577.281803][T12361] usb 6-1: config 1 has no interface number 0 [ 577.281820][T12361] usb 6-1: config 1 interface 54 has no altsetting 1 [ 577.283640][T12766] netlink: zone id is out of range [ 577.284027][T12361] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.284050][T12361] usb 6-1: Product: syz [ 577.284064][T12361] usb 6-1: Manufacturer: syz [ 577.284078][T12361] usb 6-1: SerialNumber: syz [ 577.389660][T12362] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 577.409366][T12343] usb 1-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 577.411713][T12343] usb 1-1: config index 0 descriptor too short (expected 7768, got 18) [ 577.411738][T12343] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 577.411761][T12343] usb 1-1: config 0 has no interface number 0 [ 577.411789][T12343] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 577.411811][T12343] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 577.411826][T12343] usb 1-1: config 0 interface 255 has no altsetting 0 [ 577.411854][T12343] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.450501][T12343] usb 1-1: config 0 descriptor?? [ 577.507832][T12343] ftdi_sio 1-1:0.255: FTDI USB Serial Device converter detected [ 577.520902][T12361] usb 6-1: selecting invalid altsetting 1 [ 577.520938][T12361] sierra 6-1:1.54: Sierra USB modem converter detected [ 577.534624][T12361] usb 6-1: Sierra USB modem converter now attached to ttyUSB1 [ 577.536754][T12362] usb 4-1: Using ep0 maxpacket: 32 [ 577.538799][T12362] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 577.541987][T12362] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 577.542010][T12362] usb 4-1: config 0 has no interface number 0 [ 577.543940][T12361] usb 6-1: USB disconnect, device number 37 [ 577.551325][T12362] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.551350][T12362] usb 4-1: Product: syz [ 577.551364][T12362] usb 4-1: Manufacturer: syz [ 577.551377][T12362] usb 4-1: SerialNumber: syz [ 577.563220][T12361] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 577.565550][T12361] sierra 6-1:1.54: device disconnected [ 577.568218][T12362] usb 4-1: config 0 descriptor?? [ 577.574025][T12343] ftdi_sio ttyUSB0: unknown device type: 0x524d [ 577.653596][T12362] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 577.653614][T12362] usb 4-1: selecting invalid altsetting 1 [ 577.653623][T12362] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 577.674646][T12362] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 577.675003][T12362] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 577.675047][T12362] usb 4-1: media controller created [ 577.727891][T12362] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 577.732530][T12360] usb 1-1: USB disconnect, device number 83 [ 577.741744][T12360] ftdi_sio 1-1:0.255: device disconnected [ 578.109596][T12782] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 578.173382][T12784] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2108'. [ 578.866832][T12343] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 578.877554][T12362] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 578.877630][T12362] zl10353_read_register: readreg error (reg=127, ret==-110) [ 579.016739][T12343] usb 1-1: Using ep0 maxpacket: 16 [ 579.017524][T12343] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 579.019235][T12343] usb 1-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 579.019264][T12343] usb 1-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 579.019286][T12343] usb 1-1: config 0 interface 0 has no altsetting 0 [ 579.019317][T12343] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.024707][T12343] usb 1-1: config 0 descriptor?? [ 579.341999][T12813] tipc: Enabled bearer , priority 10 [ 579.431572][T12789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 579.431958][T12789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 579.434928][T12343] usbhid 1-1:0.0: can't add hid device: -71 [ 579.435022][T12343] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 579.467692][T12343] usb 1-1: USB disconnect, device number 84 [ 579.496756][T12360] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 579.576753][T12361] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 579.646947][T12360] usb 6-1: Using ep0 maxpacket: 8 [ 579.647713][T12360] usb 6-1: New USB device found, idVendor=1199, idProduct=0028, bcdDevice=e5.25 [ 579.648691][T12360] usb 6-1: config 1 has an invalid interface number: 54 but max is 1 [ 579.648706][T12360] usb 6-1: config 1 has an invalid interface number: 54 but max is 1 [ 579.648716][T12360] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 579.648727][T12360] usb 6-1: config 1 has no interface number 0 [ 579.648742][T12360] usb 6-1: config 1 interface 54 has no altsetting 1 [ 579.650715][T12360] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.650728][T12360] usb 6-1: Product: syz [ 579.650736][T12360] usb 6-1: Manufacturer: syz [ 579.650744][T12360] usb 6-1: SerialNumber: syz [ 579.736771][T12361] usb 5-1: Using ep0 maxpacket: 8 [ 579.737698][T12361] usb 5-1: New USB device found, idVendor=1b80, idProduct=e309, bcdDevice=1f.40 [ 579.738741][T12361] usb 5-1: config 1 has an invalid interface number: 167 but max is 0 [ 579.738762][T12361] usb 5-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 579.738775][T12361] usb 5-1: config 1 has no interface number 0 [ 579.738797][T12361] usb 5-1: config 1 interface 167 altsetting 167 endpoint 0x8A has an invalid bInterval 48, changing to 7 [ 579.738812][T12361] usb 5-1: config 1 interface 167 altsetting 167 endpoint 0x8A has invalid maxpacket 8240, setting to 1024 [ 579.738843][T12361] usb 5-1: config 1 interface 167 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 579.738857][T12361] usb 5-1: config 1 interface 167 has no altsetting 0 [ 579.740995][T12361] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.741009][T12361] usb 5-1: Product: syz [ 579.741017][T12361] usb 5-1: Manufacturer: syz [ 579.741024][T12361] usb 5-1: SerialNumber: syz [ 579.983602][T12361] em28xx 5-1:1.167: New device syz syz @ 480 Mbps (1b80:e309, interface 167, class 167) [ 579.983625][T12361] em28xx 5-1:1.167: Video interface 167 found: isoc [ 579.983634][T12361] em28xx 5-1:1.167: DVB interface 167 found: [ 580.037313][T12361] em28xx 5-1:1.167: unknown em28xx chip ID (0) [ 580.110592][T12361] em28xx 5-1:1.167: reading from i2c device at 0xa0 failed (error=-5) [ 580.110883][T12361] em28xx 5-1:1.167: board has no eeprom [ 580.141619][T12818] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 580.169004][T12361] em28xx 5-1:1.167: Identified as Easy Cap Capture DC-60 (card=64) [ 580.169136][T12361] em28xx 5-1:1.167: analog set to isoc mode. [ 580.169152][T12361] em28xx 5-1:1.167: dvb set to bulk mode. [ 580.171508][ T5711] em28xx 5-1:1.167: Registering V4L2 extension [ 580.209949][T12362] usb 4-1: USB disconnect, device number 77 [ 580.210313][T12361] usb 5-1: USB disconnect, device number 84 [ 580.234199][T12361] em28xx 5-1:1.167: Disconnecting em28xx [ 580.372943][ T5711] em28xx 5-1:1.167: Config register raw data: 0xffffffed [ 580.372967][ T5711] em28xx 5-1:1.167: AC97 chip type couldn't be determined [ 580.373019][ T5711] em28xx 5-1:1.167: No AC97 audio processor [ 580.408806][T12360] usb 6-1: selecting invalid altsetting 1 [ 580.408858][T12360] sierra 6-1:1.54: Sierra USB modem converter detected [ 580.431268][T12360] usb 6-1: Sierra USB modem converter now attached to ttyUSB0 [ 580.447065][T12360] usb 6-1: USB disconnect, device number 38 [ 580.456307][ T5711] usb 5-1: Decoder not found [ 580.456327][ T5711] em28xx 5-1:1.167: failed to create media graph [ 580.456354][ T5711] em28xx 5-1:1.167: V4L2 device video103 deregistered [ 580.510043][T12360] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 580.510583][T12360] sierra 6-1:1.54: device disconnected [ 580.533829][ T5711] INFO: trying to register non-static key. [ 580.539749][ T5711] The code is fine but needs lockdep annotation, or maybe [ 580.546852][ T5711] you didn't initialize this object before use? [ 580.553165][ T5711] turning off the locking correctness validator. [ 580.559498][ T5711] CPU: 0 UID: 0 PID: 5711 Comm: kworker/0:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 580.570527][ T5711] Tainted: [L]=SOFTLOCKUP [ 580.574853][ T5711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 580.584911][ T5711] Workqueue: events request_module_async [ 580.590691][ T5711] Call Trace: [ 580.593969][ T5711] [ 580.596889][ T5711] dump_stack_lvl+0xe8/0x150 [ 580.601477][ T5711] assign_lock_key+0x133/0x150 [ 580.606233][ T5711] register_lock_class+0xcc/0x2e0 [ 580.611246][ T5711] __lock_acquire+0x10c/0x2de0 [ 580.616003][ T5711] ? __mutex_trylock_common+0x15f/0x270 [ 580.621540][ T5711] ? __pfx___mutex_trylock_common+0x10/0x10 [ 580.627430][ T5711] lock_acquire+0x115/0x350 [ 580.631942][ T5711] ? __wake_up_common_lock+0x30/0x1f0 [ 580.637322][ T5711] ? rcu_is_watching+0x16/0xb0 [ 580.642087][ T5711] _raw_spin_lock_irqsave+0x40/0x60 [ 580.647362][ T5711] ? __wake_up_common_lock+0x30/0x1f0 [ 580.652741][ T5711] __wake_up_common_lock+0x30/0x1f0 [ 580.657944][ T5711] ? __pfx___mutex_lock+0x10/0x10 [ 580.662960][ T5711] __vb2_queue_cancel+0x2de/0xde0 [ 580.668084][ T5711] ? __vb2_cleanup_fileio+0x134/0x1f0 [ 580.673447][ T5711] vb2_core_queue_release+0x2f/0x150 [ 580.678719][ T5711] vb2_video_unregister_device+0x15b/0x200 [ 580.684558][ T5711] em28xx_v4l2_init+0x1c89/0x3150 [ 580.689578][ T5711] em28xx_init_extension+0x120/0x1d0 [ 580.694849][ T5711] ? process_scheduled_works+0x97a/0x1630 [ 580.700580][ T5711] process_scheduled_works+0xc3d/0x1630 [ 580.706128][ T5711] ? __pfx_process_scheduled_works+0x10/0x10 [ 580.712100][ T5711] ? assign_work+0x3cf/0x5d0 [ 580.716682][ T5711] worker_thread+0xa47/0xfb0 [ 580.721276][ T5711] kthread+0x38b/0x480 [ 580.725333][ T5711] ? __pfx_worker_thread+0x10/0x10 [ 580.730439][ T5711] ? __pfx_kthread+0x10/0x10 [ 580.735014][ T5711] ret_from_fork+0x514/0xb70 [ 580.739653][ T5711] ? __pfx_ret_from_fork+0x10/0x10 [ 580.744755][ T5711] ? __switch_to+0xc78/0x1410 [ 580.749427][ T5711] ? __pfx_kthread+0x10/0x10 [ 580.754038][ T5711] ret_from_fork_asm+0x1a/0x30 [ 580.758794][ T5711] [ 580.761858][ T5711] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 580.773816][ T5711] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 580.782284][ T5711] CPU: 0 UID: 0 PID: 5711 Comm: kworker/0:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 580.793292][ T5711] Tainted: [L]=SOFTLOCKUP [ 580.797598][ T5711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 580.807639][ T5711] Workqueue: events request_module_async [ 580.813272][ T5711] RIP: 0010:__wake_up_common_lock+0xd6/0x1f0 [ 580.819247][ T5711] Code: 0f 84 d4 00 00 00 44 8b 64 24 04 eb 13 48 ba 00 00 00 00 00 fc ff df 4c 39 fd 0f 84 ba 00 00 00 49 89 ee 48 89 e8 48 c1 e8 03 <80> 3c 10 00 74 12 4c 89 f7 e8 0c 53 9e 00 48 ba 00 00 00 00 00 fc [ 580.838841][ T5711] RSP: 0018:ffffc90004c37880 EFLAGS: 00010046 [ 580.844895][ T5711] RAX: 0000000000000000 RBX: ffff88807f135740 RCX: 0000000000000001 [ 580.852852][ T5711] RDX: dffffc0000000000 RSI: 0000000000000004 RDI: ffffc90004c377e0 [ 580.860808][ T5711] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 580.868766][ T5711] R10: dffffc0000000000 R11: fffff52000986efc R12: 0000000000000000 [ 580.876726][ T5711] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88807f1357d0 [ 580.884681][ T5711] FS: 0000000000000000(0000) GS:ffff888123a48000(0000) knlGS:0000000000000000 [ 580.893597][ T5711] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 580.900165][ T5711] CR2: 0000200000000080 CR3: 000000002d026000 CR4: 00000000003526f0 [ 580.908126][ T5711] Call Trace: [ 580.911396][ T5711] [ 580.914318][ T5711] __vb2_queue_cancel+0x2de/0xde0 [ 580.919343][ T5711] ? __vb2_cleanup_fileio+0x134/0x1f0 [ 580.924704][ T5711] vb2_core_queue_release+0x2f/0x150 [ 580.929974][ T5711] vb2_video_unregister_device+0x15b/0x200 [ 580.935768][ T5711] em28xx_v4l2_init+0x1c89/0x3150 [ 580.940788][ T5711] em28xx_init_extension+0x120/0x1d0 [ 580.946083][ T5711] ? process_scheduled_works+0x97a/0x1630 [ 580.951821][ T5711] process_scheduled_works+0xc3d/0x1630 [ 580.957377][ T5711] ? __pfx_process_scheduled_works+0x10/0x10 [ 580.963359][ T5711] ? assign_work+0x3cf/0x5d0 [ 580.967948][ T5711] worker_thread+0xa47/0xfb0 [ 580.972541][ T5711] kthread+0x38b/0x480 [ 580.976598][ T5711] ? __pfx_worker_thread+0x10/0x10 [ 580.981700][ T5711] ? __pfx_kthread+0x10/0x10 [ 580.986276][ T5711] ret_from_fork+0x514/0xb70 [ 580.990853][ T5711] ? __pfx_ret_from_fork+0x10/0x10 [ 580.995959][ T5711] ? __switch_to+0xc78/0x1410 [ 581.000629][ T5711] ? __pfx_kthread+0x10/0x10 [ 581.005205][ T5711] ret_from_fork_asm+0x1a/0x30 [ 581.009958][ T5711] [ 581.012976][ T5711] Modules linked in: [ 581.016919][ T5711] ---[ end trace 0000000000000000 ]--- [ 581.022368][ T5711] RIP: 0010:__wake_up_common_lock+0xd6/0x1f0 [ 581.022408][ T5711] Code: 0f 84 d4 00 00 00 44 8b 64 24 04 eb 13 48 ba 00 00 00 00 00 fc ff df 4c 39 fd 0f 84 ba 00 00 00 49 89 ee 48 89 e8 48 c1 e8 03 <80> 3c 10 00 74 12 4c 89 f7 e8 0c 53 9e 00 48 ba 00 00 00 00 00 fc [ 581.022421][ T5711] RSP: 0018:ffffc90004c37880 EFLAGS: 00010046 [ 581.022435][ T5711] RAX: 0000000000000000 RBX: ffff88807f135740 RCX: 0000000000000001 [ 581.022446][ T5711] RDX: dffffc0000000000 RSI: 0000000000000004 RDI: ffffc90004c377e0 [ 581.022456][ T5711] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 581.022465][ T5711] R10: dffffc0000000000 R11: fffff52000986efc R12: 0000000000000000 [ 581.022476][ T5711] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88807f1357d0 [ 581.022487][ T5711] FS: 0000000000000000(0000) GS:ffff888123a48000(0000) knlGS:0000000000000000 [ 581.022500][ T5711] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 581.022510][ T5711] CR2: 0000200000000080 CR3: 000000002d026000 CR4: 00000000003526f0 [ 581.022597][ T5711] Kernel panic - not syncing: Fatal exception [ 581.123582][ T5711] Kernel Offset: disabled [ 581.127900][ T5711] Rebooting in 86400 seconds..