last executing test programs: 14m19.235397351s ago: executing program 1 (id=1235): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="540000006800010000000000fedffff70a000000000000001800088014000300fc020000000000000000000000000000060007000900000008000500", @ANYRES32, @ANYBLOB="140006"], 0x54}, 0x1, 0x0, 0x0, 0x8810}, 0x40040d0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000200)={0x0, 0x0, 0x2}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000028000000030a01020000000000000000010000080900010073797a3000000000080003006e61740064000000060a010400000000000000000100000008000b40000000003c000480240001800b0001007470726f78790000140002800800014000000002080003400007000000000000000001006578746864720000040002800900010073797a30"], 0xd4}, 0x1, 0x0, 0x0, 0x2804}, 0x48000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r6, 0x6, &(0x7f0000000000)={0x1, 0x0, 0x200000000, 0xfffffffffffffffa}) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo/4\x00') pread64(r7, &(0x7f0000002140)=""/17, 0x11, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x0, 0x5}}, 0x2) setsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000000)=0xb21360d4, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newlink={0x38, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffa7, 0x10008}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0x27aa}]]}}}]}, 0x38}}, 0x0) r9 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000f2d07c40501d89601dd0000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r9, 0x0, &(0x7f0000000400)={0x1c, &(0x7f0000000180)=ANY=[@ANYBLOB="493122aa7204e78eb53bf3d715f97219bbdbec8cd04d95ebc79ca04ffd93d08463fbf9505a671ae0084e54448587a5ccbb7d813f824159f6f810fdbd5de83d93ffb23ea7c33c90b06e8cc61a82bd679a088832af90661a4ac608e6c9a75faef0ad66893b73aa01657344e9fe085f973d65272f61e907671d1469dfafa122ea958c951b668a158d2eb1814dc6338fb74d0ab0819137634b9c8e72dcf494aa53c675b68ac4ea5dd9e243b2a1fb9da54534e42e1ea6ed148a513e2f04df4f0a94810f4b5bc3db096a8b223957ae3adcf91604eb1b765aa0426be53ea2630071daca5580485d95451cff", @ANYBLOB="b6e2cf9994b7ea37e972269518e94c1dcc9650b34e63462295e4c722a3c52473c87603c1f12d752ae687162cb1e2539bafedf013153f397704444c525eab12bf37508345173ee497ec9ba29be763bbe085cbc28d275c73c84e0f811436caca79336c9e474d26031dce8f8112e9fc0aaac4e419d956d39c1f"], 0x0, 0x0}) 14m17.627892398s ago: executing program 1 (id=1242): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0xfe, 0x0, 0x7fffffff}]}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0xfffe}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x0) close_range(r1, r2, 0x0) r3 = creat(&(0x7f0000000400)='./bus\x00', 0x0) r4 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000340)={r4}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="d84a56bd0d001c00180081064e32e82331734c368cc79100", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e3, &(0x7f0000000180)={r3, r3}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003f6000/0x2000)=nil, 0x400000, 0x2, 0x2}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) socket$inet_udp(0x2, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000200)="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") 14m16.975520949s ago: executing program 1 (id=1244): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='maps\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r2 = syz_open_procfs$pagemap(0x0, 0x0) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f00002e3000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x4e, 0x20}) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ioctl$VIDIOC_G_AUDIO(r0, 0x80345621, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) r4 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010000000009040000010300000009210000200122050009058103"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000b00)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0xa, "b5095847"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_fuse_handle_req(r3, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14m13.499496954s ago: executing program 1 (id=1259): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x88, 0x4, 0x3, 0xfa11, 0xffffffff}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, 0x0) r3 = syz_open_dev$evdev(0x0, 0x2, 0x862b01) write$char_usb(r3, &(0x7f0000000040), 0x0) close(r2) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r5 = syz_open_pts(r4, 0x141601) write(r5, &(0x7f0000000000)="d5", 0xb840c58f) close(0x4) ioctl$TCFLSH(r4, 0x540b, 0x2) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x2c2) prctl$PR_GET_ENDIAN(0x13, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_dev$video4linux(&(0x7f0000000040), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r6, 0xc0305602, &(0x7f00000002c0)={0x0, 0x9, 0x0, 0x1}) 14m10.987715243s ago: executing program 1 (id=1266): socket$packet(0x11, 0x2, 0x300) (async) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x4, &(0x7f0000000140)={0x11, 0xf8, r1}, 0x14) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYRES8=r1], 0x0) (async) r2 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYRES8=r1], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) 14m7.880234263s ago: executing program 1 (id=1272): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000340)={0x60, 0x0, &(0x7f000011d000/0x2000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x7, 0x0, 0x0, 0x1c3, 0x0, 0x2, 0x0, 0x6}) io_setup(0x9, &(0x7f0000000b80)) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x49844) r5 = io_uring_setup(0x4feb, &(0x7f0000000040)={0x0, 0xa6a3, 0x1c080, 0x1, 0x20002f7}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, 0x0, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) 13m52.695366906s ago: executing program 32 (id=1272): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000340)={0x60, 0x0, &(0x7f000011d000/0x2000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x7, 0x0, 0x0, 0x1c3, 0x0, 0x2, 0x0, 0x6}) io_setup(0x9, &(0x7f0000000b80)) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x49844) r5 = io_uring_setup(0x4feb, &(0x7f0000000040)={0x0, 0xa6a3, 0x1c080, 0x1, 0x20002f7}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, 0x0, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) 9.67982285s ago: executing program 0 (id=4149): r0 = socket(0x10, 0x3, 0x9) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x40182, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x10, 0x0, 0x1, 0x0, 0x0, 0x20004090}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x5, 0x8, 0x8005, 0x0, 0x8, 0x1000000000, 0x2, 0xfa11, 0x6}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x10, r1, 0x4000) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r4, 0x84, 0x2, &(0x7f0000000840)=""/4121, &(0x7f0000000000)=0x1019) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001880)=ANY=[@ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, 0xffffffffffffffff, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) write$cgroup_int(r6, &(0x7f0000000180)=0xfe5f, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(r6, 0xc0585604, &(0x7f00000001c0)={0x0, 0x0, {0x4d39580f, 0x2, 0x3008, 0x3, 0xb, 0x6, 0x1}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2e, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6}]}) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000fe857108480b0730644f010203010902120001000000"], 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = syz_open_dev$I2C(&(0x7f0000001a40), 0x1, 0x1050c0) pwrite64(r7, 0x0, 0x0, 0x26c) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0xffff, 0xee}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) 9.676005382s ago: executing program 5 (id=4150): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000050000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3024000000140004800800024000000000080001400000000571000000060a010400000008000000000100000008000b4000000000400004803c0001800a0001006d617463680000002c0002800800010065636e000c000300e4edf2b75cc7c0a308000240000000000c000100706b7474797065000900010073797a30"], 0xf0}, 0x1, 0x0, 0x1100}, 0x0) 9.593409801s ago: executing program 5 (id=4151): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x20, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r2, @ANYBLOB="24005a80200001800500040003"], 0x40}}, 0x0) 9.511829061s ago: executing program 5 (id=4152): r0 = socket$rds(0x15, 0x5, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000000)=0x80) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x5dee, 0x0, 0x0, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(0x0, 0x22) r3 = memfd_secret(0x0) getdents64(r3, 0x0, 0x0) r4 = shmget$private(0x0, 0x4000, 0x40, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_INFO(r4, 0xe, &(0x7f0000000100)=""/189) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) unshare(0x62040200) syz_usb_connect(0x6, 0x22, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in=@loopback, 0x4f23, 0xfffc, 0x4e23, 0x6, 0xa, 0x2a11bad3d5f03f04, 0x30}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x6, 0x8, 0x800000000001}, {0x9, 0xfffffffffffffffe, 0x4, 0x9}, 0xd6, 0x0, 0x1, 0x0, 0x2, 0x3}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x33}, 0x0, @in=@remote, 0xffffffff, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffb}}, 0xe8) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_TIMEOUT(r6, 0x0, 0x48a, 0x0, 0x0) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0xffe0) ioctl$sock_ifreq(r0, 0x8993, &(0x7f0000000a40)={'veth1_to_bridge\x00', @ifru_data=&(0x7f0000000040)="cb7da61a8fc19a71e0f6803331d174127331fd3700"}) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000080)='veth1_to_bridge\x00', 0x185a02, &(0x7f00000000c0)={@align=0x9a, {0x5, 0x2, 0x1ff, 0x1}}, 0x200, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0xf8}) 8.050237397s ago: executing program 4 (id=4157): socket$packet(0x11, 0x3, 0x300) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100), 0x48) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x6, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x1, 0x9, 0xfffffffffffffffc, 0x0, 0x7fffffff}, 0x0, 0x0) 7.002183278s ago: executing program 4 (id=4161): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e20, 0x7, 0x0, 0x0, 0xa, 0x0, 0x0, 0x8}, {0x8, 0x6, 0x6, 0x200000000, 0x7, 0x4, 0x1, 0x7}, {0x8040000000060, 0x7, 0x7fffffffffffffff, 0x9}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d6, 0x3c}, 0xa, @in=@private=0xa010100, 0xffffffde, 0x0, 0x67a01bcf906970c1, 0x81, 0x7, 0x0, 0x8000}}, 0xe8) (async) sendmmsg$inet6(r2, &(0x7f0000000300)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x52700000, @mcast2}, 0x1c, 0x0}}], 0x1, 0x8015) (async) mprotect(&(0x7f0000070000/0x1000)=nil, 0x1000, 0x1) (async) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) (async) sendmsg$nl_xfrm(r3, 0x0, 0x0) (async, rerun: 64) syz_emit_ethernet(0x0, 0x0, 0x0) (async, rerun: 64) r6 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000700)=ANY=[@ANYBLOB="40000f000000012721dcfe14c639a500ba17162716"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r6, 0x0, &(0x7f0000000440)={0x18, &(0x7f0000000240)={0x20, 0x5, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0}) (async) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r7, 0x5b14, 0x0) (async) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r8, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) 6.290192988s ago: executing program 5 (id=4164): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="51debb46d6430f50ca7011924acdc86a4d787e1485622bc99e2333123140f817b27fe4dad7f3b3b62503ab0c5259b971276518cf75fdc905d185af34af4d2344338db5d42642b572a99c2e386a8b251730639159e5d786f759d2aa154382c75c8cb5374bfec238b97da32239d6e4ba420f2aac6f5504de958e28efdb0918f44928ba4ef85d58d558887955fc4010852d3453"], 0x14}}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x80000, 0x8ec) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x5, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x100006}}}}]}, 0x58}}, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000800)={'syzkaller0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x3, 0x9d, &(0x7f0000000640)=""/157, 0x41100, 0x20, '\x00', r2, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[0xffffffffffffffff], 0x0, 0x10, 0x8}, 0x94) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@delchain={0x24, 0x65, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x7, 0x7}, {0xc, 0xfff1}, {0xffe0, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40868}, 0x4000000) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000000010001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r13, @ANYBLOB="86bdb18d60d80f1d1a25519454110de6a356e1737a62e67dc9b678715be7a3bede30fc404c530383365c9f04037304b6968916b628a9ed7ee4a3cbe03c2441dcb5117a03dfcc99cc7a5ee117f3039cf64f9dc3ebfd605d54ae409075b47f835ece6327a995e24348574ea188c59209702cd9cb69d4381af93f9be650396ff538df7c88facad769ef9da4a70c9365ff560667de7acc247e1cff98d8"], 0x4c}, 0x1, 0xba01}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f000000e280)={0x2020}, 0x2020) 6.127386971s ago: executing program 5 (id=4165): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x8}, 0x1c) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x400, 0x3ffffff, 0x7, 0x80, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071103100000000001f010000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x6, 0xc3, &(0x7f000000cf3d)=""/189, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x1}, 0x10}, 0x4e) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000100), &(0x7f0000000440)=0x4) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120110028de8e820c6057990a6870102030109021200010809000909044502000e010004ce938b7079af36d5a878dd"], &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x2, &(0x7f0000000180)=@string={0x2}}, {0x0, 0x0}, {0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="0203ec7a6ac00aa3d423a29e9b393d8a8a2ddf30ca7d0fc7b5bc00eba63522c9bef1b90f544209ad9bbefdea2f12a0e9025e9dfb39d06f88474518dc2ec4ac2762bac7f04d9fd4fb10235238000000ec5d6c01f6cfdc275940636316729700e34b4efc7e51d35f2553dd395e4b9d9fa0cb5d264cb31abb29a36e2fd4112082be6e94cc05bfaee838144a23929ca35a8641141cf5337297853e0ac324b60b"]}, {0x0, 0x0}]}) syz_usb_control_io$uac2(r1, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$uac1(r1, &(0x7f00000004c0)={0x14, 0x0, &(0x7f0000000480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x420}}}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_RELEASE_PORT(r2, 0x80045519, 0x0) syz_usb_control_io$lan78xx(r1, &(0x7f0000000400)={0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="4022bc000000bc2390b7b460ec09138f82d83879b4d2813b682db45210b86ae424f9d0e2c902c5b49d885e196afd97e622fe2242d0160fb875201b3f0bce9147fb0b7d5a92ef92530b0a2c3dd7c21cc91c2f78ab14bc7bff01d0b0416c90cb85bd9a4d82535890c042ef99df5eaba7389fda6b403f2a5ad91e72e6bb86c1f1f5a4f408f00b40067f33f1f710a01ecbff29fe8b3c955167e4eedc0d9d6c91a70268943074c50c8377411b49a21b7df3c86d59df"], &(0x7f0000000380)={0x0, 0x3, 0x6f, @string={0x6f, 0x3, "ba0ded412318e3ea2bdd33461bc3fc5aaf1c6b6578f3e6dfb2228c204556dec15f4ec6a4d1fe6ec82051b1e892e33383a50a7aac775ba5abdc7fd660174bac2220fa229adc7d66682d1c4719052ead02a8ec4b1e7774739218c7069a0aa2d40fcd194ded01793ecadffa906b25"}}}, &(0x7f00000006c0)={0x34, &(0x7f0000000440)=ANY=[@ANYBLOB="3d00a06af8e11700000000"], &(0x7f0000000500)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000580)={0xc0, 0xa1, 0x4, 0xfffeffff}, &(0x7f0000000640)={0x40, 0xa0, 0x4, 0x8}, &(0x7f0000000680)={0xc0, 0xa2, 0x2f, "e00b727618895c9e4e38085cbf096fd32e0b7473a8adbd595aea0280cadb3d76a57dc9df16da0a181bde2377837018"}}) syz_usb_control_io$uac1(r1, &(0x7f0000002280)={0x14, 0x0, &(0x7f0000002200)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) socket$pppoe(0x18, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={0x8a080, 0x39, 0x15}, 0x18) r5 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f00000000c0)={'\x00@\x00', 0x0, 0x6, 0x3, 0x0, 0x0, "f759ca34000400", '\x00', "03000100", '\x00', ["8bada940edffea0a0800", "c2fed6cb0200004000", '\x00', "00000000000000000100"]}) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r6, 0x4004ae99, &(0x7f00000001c0)=0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000569000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, 0x0}], 0x1, 0x30, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000380)={"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"}) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x101b01) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000700)={0x0, @in6={{0xa, 0x4e23, 0x8, @mcast2, 0x9}}, 0x5, 0x4, 0x9, 0x1, 0x80, 0xa0}, 0x9c) 5.943584052s ago: executing program 0 (id=4166): r0 = socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, &(0x7f0000000400)}) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f00000000c0)={{}, {}, [], {0x4, 0x1}, [], {0x10, 0x6}}, 0x24, 0x0) getxattr(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000140)=@known='system.posix_acl_access\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f00000000c0)=0x8000000) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x2, {{0x2}, 0x3}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) bind$tipc(r2, 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x10004e23}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x2, &(0x7f00000010c0)='b', 0x1) r7 = socket(0x40000000015, 0x5, 0x0) connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r7, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r7, 0x0, 0x0) getsockopt(r7, 0x200000000114, 0x271e, 0x0, &(0x7f0000000040)) 5.907675327s ago: executing program 2 (id=4167): r0 = syz_usb_connect$uac1(0x1, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000000844060e804000010303010902600003010400030904001b00010100000a24010e000a00020102090401000008020000090401010101020000090501"], &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r0, 0x0, 0x0) (async) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYRES8=r0], 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@text32={0x20, &(0x7f0000000140)="f30f7f3527af253fea8c9600001201c4e27d79a63d000000ddea66baf80cb89458ec84ef66bafc0cb8f7ffffffef662ef2f2d9fac4e3896d2b0b3eab66b8d8008ec066baf80cb815aef28bef66bafc0cec", 0xffffffffffffffc2}], 0x1, 0xa4b6d3c70067e696, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9c000000100001002d8a5a32ec00000000000000", @ANYRES32=0x0, @ANYBLOB="02210000c80f0600140003006e657464657673696d3000000000000068001680640001800c00040009000000fef5ffff1000020000000000830f0000faffffff10000600400000000500000008000000280001"], 0x9c}}, 0x0) (async) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="00225c000000000004e006"], 0x0}, 0x0) 5.768331166s ago: executing program 4 (id=4168): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x18, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_REPLY={0x4}]}, 0x18}}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000003c0)={0x0}) 5.663222651s ago: executing program 4 (id=4169): bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002b715f08e11d02c1894d0000000109021200010000006c0904"], 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20041811}, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x50, 0x7fff7ffc}]}) r3 = socket$netlink(0x10, 0x3, 0x4) write(r3, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe004681000000078a151f75080039000500", 0x27) r4 = fspick(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x1}, "02"}}, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x801a01, 0x0) ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/246) writev(r6, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) ioctl$XFS_IOC_EXCHANGE_RANGE(r3, 0x40285881, &(0x7f0000000340)={r4, 0x0, 0x47, 0xdb9, 0x7, 0x2}) socket$inet6_sctp(0xa, 0x5, 0x84) 5.380920811s ago: executing program 3 (id=4170): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2080, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4048aec9, &(0x7f0000000080)={0x3}) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000}) preadv(r5, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/100, 0x64}], 0x1, 0x80000000, 0x0) r6 = syz_open_dev$video4linux(&(0x7f0000000040), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r6, 0xc0305602, &(0x7f00000002c0)={0x0, 0x8, 0x2007, 0x1}) r7 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000100)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x4050) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="f8000000160004000000000000000000fe880000000000000000000000000001ff0100000000000000000000000000010000000000000082000000002b000000", @ANYRES32=0x0, @ANYRES32], 0xf8}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) socket$kcm(0x10, 0x2, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000000)) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000100fffeffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="60a002000084318bc400030073797a5f74756e000000000000000000140003006970365f767469300000000000000000"], 0x48}}, 0x8000) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000100001082dbd7000fbdbdf2500000000", @ANYRES32=r8, @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x30}}, 0x4) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000800) 4.923151291s ago: executing program 0 (id=4171): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x1, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0xfffffffffffffffc}) getpeername$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000180)) r2 = open(&(0x7f0000000040)='.\x00', 0x0, 0x6c) fcntl$notify(r2, 0x402, 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) ftruncate(r3, 0x6000000) ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, &(0x7f00000012c0)={0x18}) bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000540)=@base={0x5, 0x80, 0x1a00, 0xf7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) syz_emit_ethernet(0x227, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f00000008c0)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x2e, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x1050) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='source', &(0x7f00000019c0)='//\xf2/\x06\b\\/\\o\\\xea\x95\x9a/\x00bb\x8a\x80\x91\xdf\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x99\xef\x8b0x0}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000040)=ANY=[@ANYRES8=0x0, @ANYRESOCT=0x0], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x55e}, 0x94) ioctl$BTRFS_IOC_DEV_REPLACE(r2, 0xca289435, &(0x7f0000000200)={0x0, 0x122a, @status={[0x9, 0xfffffffffffffc01, 0x7, 0xd, 0x2]}, [0x7, 0x40, 0x0, 0x4, 0x9, 0xe, 0x1, 0x7, 0x2, 0x8, 0x2, 0x7, 0x9, 0xfffffffffffffffd, 0x9, 0x3, 0x23c, 0x8000, 0x6, 0x8, 0x100000001, 0x0, 0xbf, 0xe, 0x9, 0xfffffffffffffff3, 0x93, 0x5, 0x1000, 0x7, 0x3a, 0x1004000000000, 0x401, 0x7fffffff, 0x100, 0x0, 0x16, 0x10001, 0x6, 0x1, 0x4, 0x3, 0x9, 0x5, 0xfffffffffffffffe, 0xc, 0x4, 0x3, 0x5, 0x6, 0x2, 0x83f, 0xb, 0xf53b, 0x7fff, 0xedcb, 0xd, 0x3, 0xfffffffffffff7ed, 0x8, 0x3, 0x90000000000000, 0xe, 0x9424]}) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$XFS_IOC_ERROR_CLEARALL(r3, 0x40085875) 3.622526524s ago: executing program 2 (id=4173): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000050000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3024000000140004800800024000000000080001400000000571000000060a010400000008000000000100000008000b4000000000400004803c0001800a0001006d617463680000002c0002800800010065636e000c000300e4edf2b75cc7c0a308000240000000000c000100706b7474797065000900010073797a30"], 0xf0}, 0x1, 0x0, 0x1300}, 0x0) 3.356193422s ago: executing program 2 (id=4174): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = socket$key(0xf, 0x3, 0x2) pipe2(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a2c0000000e0a030000000000000000000a0000060900010073797a31000000000900020073797a31000000002c0000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000140000001100010000000000000000000200000a34f21902e6540a7dde21d7d10f0889422e559540edfe3b2394b2bf5b03fdfc331bd939821d2ddebdbfb072db387ed26c57d88a2fd051abd5442086e8072787c0901ab1ca733051a4c9d8bca44913d473debf44c76dabf3cc7f212943cbeabed3a4ceeb2d427ea9633b9d63d418e06699e98939984d6e9a1d68c89c209230ef8ba5e737f62f30b1241c41f37e50d56bffe556f142426c25e7bc5b752f9ca11c1ce32ddd0fe5b24c86646a5ce198c9f3e7851d130f564cd23e32930a6ed5dd788e9df2ea6a1bbe5666db7300"/342], 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x10) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x1ff, 0x0, 0xfffffe0000000001, 0xfa11}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x200301, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0xf400000000000000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0008000000feffffff1e00000000"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x90) sendmsg$key(r2, 0x0, 0x40408c0) r7 = syz_open_dev$video(&(0x7f0000000040), 0x7f, 0x0) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/181, 0xb5}], 0x1, 0x6, 0x1) 2.613324358s ago: executing program 3 (id=4175): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="51debb46d6430f50ca7011924acdc86a4d787e1485622bc99e2333123140f817b27fe4dad7f3b3b62503ab0c5259b971276518cf75fdc905d185af34af4d2344338db5d42642b572a99c2e386a8b251730639159e5d786f759d2aa154382c75c8cb5374bfec238b97da32239d6e4ba420f2aac6f5504de958e28efdb0918f44928ba4ef85d58d558887955fc4010852d3453"], 0x14}}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x80000, 0x8ec) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x5, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x100006}}}}]}, 0x58}}, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000800)={'syzkaller0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x3, 0x9d, &(0x7f0000000640)=""/157, 0x41100, 0x20, '\x00', r2, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[0xffffffffffffffff], 0x0, 0x10, 0x8}, 0x94) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@delchain={0x24, 0x65, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x7, 0x7}, {0xc, 0xfff1}, {0xffe0, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40868}, 0x4000000) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=ANY=[@ANYBLOB="4c000000100003040000000000ffffffffffffff", @ANYRES32=0x0, @ANYBLOB="15020000000010001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r13, @ANYBLOB="86bdb18d60d80f1d1a25519454110de6a356e1737a62e67dc9b678715be7a3bede30fc404c530383365c9f04037304b6968916b628a9ed7ee4a3cbe03c2441dcb5117a03dfcc99cc7a5ee117f3039cf64f9dc3ebfd605d54ae409075b47f835ece6327a995e24348574ea188c59209702cd9cb69d4381af93f9be650396ff538df7c88facad769ef9da4a70c9365ff560667de7acc247e1cff98d8"], 0x4c}, 0x1, 0xba01}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f000000e280)={0x2020}, 0x2020) 2.548840979s ago: executing program 0 (id=4176): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) r0 = gettid() timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)=0x0) timer_settime(r1, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) rt_sigtimedwait(&(0x7f0000007340)={[0xfffffffffffffffa]}, &(0x7f0000007380), 0x0, 0x8) mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1) r2 = userfaultfd(0x1) ioctl$UFFDIO_MOVE(r2, 0xc028aa05, &(0x7f0000000000)={&(0x7f00006b7000/0x3000)=nil, &(0x7f000010d000/0x1000)=nil, 0x3000, 0x3}) mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) munmap(&(0x7f0000967000/0x3000)=nil, 0x3000) 2.396414969s ago: executing program 4 (id=4177): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa019600ba9380d440fe0000000000002900000003000000", 0xfe60) 2.278788268s ago: executing program 3 (id=4178): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x161283, 0x0) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x40000073, 0x0, 0xfff}]}) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) (async) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) (async) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) (async) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) (async) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x12}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) (async) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) (async) r7 = accept4(r6, 0x0, 0x0, 0x80800) sendmmsg$alg(r7, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000180)=[@op={0x18}], 0x18}], 0x1, 0x8040010) (async) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) 2.054838763s ago: executing program 4 (id=4179): mq_open(0x0, 0x40, 0x100, 0x0) socket(0x10, 0x3, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120141014706000000040075ee69010003010902240001000010000904b8070259d5ca000905060200020d0006090582020002fe2102c30ba33f241a"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x0, 0xc, 0x4, "ca258375"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000005c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="205aba"], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000007c0)={0x20, 0x17, 0x4, "549b3e82"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000140)={0x20, 0x30, 0x4, "b1b69587"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xc, 0x4, 0xffffbe0000000001, 0x8, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket(0x1, 0x3, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000014001b0528bd7000ffdbdf2511000d0001000405fa97"], 0x24}, 0x1, 0x0, 0x0, 0x2400a051}, 0x44000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4000008}]}, 0x40}}, 0x0) socket$kcm(0x10, 0x100000000002, 0x4) 1.719342696s ago: executing program 5 (id=4180): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = syz_open_dev$video(&(0x7f0000000100), 0x200, 0xc4400) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1, @private}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000002f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002f40)=""/21, 0x15}, 0x2}], 0x1, 0x12112, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000001c0)=@multiplanar_mmap={0x8, 0x1a, 0x4, 0x4, 0x5, {}, {0x3, 0x1, 0x6, 0xa, 0x4, 0x8, "e08a25d6"}, 0x8, 0x1, {&(0x7f0000000140)=[{0x3ff, 0x3, {0x8}, 0xa}, {0x9, 0x9, {0x3}, 0x3}]}, 0x3, 0x0, r7}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r8 = io_uring_setup(0x64a, &(0x7f0000000040)={0x0, 0x8835c, 0xc000, 0x20000a, 0x33c}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x3}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00008e5000/0x400000)=nil) 1.466053299s ago: executing program 3 (id=4181): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="d4", 0x1, 0x20000800, &(0x7f0000000240)={0xa, 0x4a20, 0x7fffffff, @local, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x101a80, 0x0) r3 = memfd_create(&(0x7f0000000840)='\x01\x00\x00\x00\x00\x00\x00\x00\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\x82\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xc0L\x1d\x98Zq\xce\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1j$S\xfc\xb1[N\x8d\xcfI\xc8\x91\x87\x1fuYG7}%)\xb9\x00\x00\x00\x00\x00\x00\x00\x80W\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]^\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1f2\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x9e\x035\x8a@\xd4\x1c\xe0\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\x00\x00\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d\xf5s\x03\x1a=\xcc\xd1\xa7\'\xa0\xaf\xf7\xec\xaf}\x0e\a\x00\x91U\xf9\x8e_f\x8e\x00\xc3r*\xc7\xaf\xe2\'\xe0f9\xde\n,\x8c8Y26\xa6u<\xca@H\xdc\xf1\xb0\xb8\x9f\xc2o\x0f\x02I\xb6\xc3xH\xc3\x88(\xb6\x97~\xea)\'\xa3:\x8d\xebc>z\xae*\xc2\x14\xe9\x89#\xe2)\x9a\xb0hR\xffa\xf8\xde\xf7q4\xcfV\xbb\xc3t\xfa\xa9\x05>\xaea\x12\xce\x1cY\a\xb16\xb9\x12v\x1dN\xe1,_3\xa9\xa36\xaa.Cj\xd4\ah\x92j\x86\xe1\x1f\xec1\xb9!lI\xc7\xbf\x85\xdd\x03\xbd\xeb\xec\xf9\xf3\xaf\xe02AzX\x9aO\x93y;\xa7,\xbb\x11\xe6\x8fn\xa0m\xf8\xcf\x92\x19\xba,\x0e\x04\xbe\xbb\xdd\x00\xb1\xb6Enr\x17\xa4\xc5)\xcc}*yN\xdc\xc3\xe0\xf2\x10\xe00x0}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000002c0)=0x4553, 0x4) sendmmsg$inet(r5, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800) recvfrom(r5, &(0x7f0000000440)=""/136, 0x88, 0x2101, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x80, 0x9, 0xffff}, &(0x7f0000000300)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000340)={0x3, 0x8, 0x3, 0x80, 0x3, 0x81, 0xc, 0x40, r6}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15010000000000001c00128009000100766c616e000000000c00028006000100fe0f000008000500", @ANYRES32=r4, @ANYBLOB="73473b0583932c2dd6dea92af105eabb344b4020fdaa552071e9819774185b105cbb2945c33ad0ce1c009feeb1e2c31f06ad83525fc72385bb084389afbfb811776116a2ae7da597fd2d0e866f08000000cb6b8c78237ee898dd"], 0x44}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r7, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0x31, "2a161d2d7137f20a8f1597f02515fcead4e153309c703be3a0d6416f3528fe1da7e47629e5d7afc1f95c9cf965056b4c89"}}) 1.361052435s ago: executing program 0 (id=4182): openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) io_setup(0x8, &(0x7f0000000080)=0x0) socket$inet6_sctp(0xa, 0x1, 0x84) io_setup(0x7, &(0x7f00000000c0)) io_submit(r0, 0x33, 0xfffffffffffffffc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$LINK_DETACH(0x22, &(0x7f0000000040), 0x4) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x1000000000000, 0x0, 0xb5, 0x0, 0xfffffffffffffffd, 0x20000000000}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0xfffffffffffffffe, 0xf, 0x3, 0x800000000005, 0x2}, 0x0, 0x0) 1.303071148s ago: executing program 2 (id=4183): r0 = socket$can_j1939(0x1d, 0x2, 0x7) (async, rerun: 32) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) sendmsg$tipc(r1, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="34cbf9c55466da0eadc249236ab3cbf316717306be4c08c8c7da1f1ee04ab4b4eac14995ebdf620ff778a4e3452587e42a3c6aa1bd35dfd99f23b525893bc3b5f9f3bed1986bf8d0dddd7c5cdada611f9bf641e421ed71a842d84fa289a542f941d6e06b2b14e2a706ce30acf7d82f224f3e30cadd9d15f3dddbb29dbeb9f68fb68bedb91e0b1ef48832778fe36699c7ebf101659a8f476c4a065eac71d6d1e7fafc6f25ec2c9a8f431fe347a2d30e912c5b2397613ce784637ec71e37566eb0548b461f71028459c6f137c18737d58b56949d022bf1eaf486692bb76836a233c7879d740ad0beaf5159d3380442824f536a41bb22d08fe53952b9c6fed2605d53311c71b455655f96ea6a87e41e9211e90170b0a2b1a2098175ebcd33d517085d224122264cddadd82a3d11bc4a33ce66108b22b1abc6243d306d8f6b8a2ddb5373c190d8f859a3174a200936b079f85edcac7fc03fb993ec0ff8b83f1fd3f1b888d192d99c7ede5d381784d25410cccf1b0bf26a54f065e1e3ec59cc5704fb658fc980a0ac4287ef884ee82007554be3f1e163c81468d0c26c95e3e12393776e32800bb4f086f19080c4fca3d72e8569a5627ce98f2ae0bdb3ec42c23847d47e10b1c58da7e9cea990da842d96e3a51ed7d892f7b28a10486424a69a9109ebd4d7d5a3768400ac000a6d7556ca192e5cd45efb82001ac7b53e03036b6019a07ffb545cd3853e077f08a015f6232488c1139a9409c95ed005261e36b307406ba5714ef395129345866109341feb6c7c458ce08c147a983b46375ddb3621cee0312ba1a434bcd6081e1a8ae8b6d518988b9965faf9aff86df8173b93342cceaec357a100e59b4d66553633626b0b12e9622b8f8fdfe26545b87c57f8ce8609fb8e19b0f6d1cd64e8de85c7327f543b2f38cf3086b57f85e1aaa4add723e4bc4e3ea2c27acec1e545ae3fc870bd42422f6eaf17a1f82699c9cadf224ea1e5d1705b49118d91cc3731aeed60e41bf15a9613aeda8e63a29bc7a95b2d993d23269a310b91f69d16a71243c0f4080d3359f5ddd63c7032bef14ab25eb7df4b28b2132bcbf94a281c8f5de79885a6d679f145fca292b599bb09a1864726d86b65d4781408320b968e2224c23ce7a56d8892970043737ae47f071aaeb219716bc21e3304e301eb5cd32aea951a70621eb870214a72e6c474c3a20f5bd8e089ba16326cc9a80a1a4f5f0e8f58629e20b1c73eb8af330744b187a5cfdb410466378313700ca44eb6dcbc8f3d70f58e134202546f0b1a3b61a298f2a1184b1533bdad308fa2f960087e0f239d2ccbaee3889ddc1a2bea2183b98854d255a6f708909134fab83f42f13e7604f602e264f4a3b2b2a08c673c7ce2813218159b472d3b20ecbf26dd2f7b3ba5298a4ff7444ea0936e098c126f590b05e7697ed8a3d52ba1abc7285de2f160b9b081cb775a5ab77aad1bb98d47e3da53fc4c11d4db47de1e4e6f56ad671f5d8389b33260cc546e4f0bf34fec9b2abd209e6b89e6e381367774676ed6e6eaffe42b07241c276f3c84f17a0762de83eb769bdf28991ddbc23758f01c9ecfba4ab2ca2118fcedd7adde9ff47f643c13e3ad2f13b576985128f233e329fe269d5745cd2b30e5762452a4ff58fdec30623175f8d575ced1c43411e2869aadbe6f1e79a010bca334cb08d545bc2808f359b7777d1bb5675ee210574b9f72cdeb071e07eeaa0988086213a37a972647cf21d3a3bcbd7359da327bacad41b93c5e0e494669109dddcec781774f248f5663e4fac187d42ffccf68335de2adac4f8d3e1bf04b95a9464960186ed019773ffeda18f9827a61edc5fc4088eb0965cb1bd8af1185aa3972b8f73839b4611e303bcbc1f84a330f60fa0a7795ea3cffe0e338406533e12c7deef0b5906c513eab4619a8f02fdd65dcfb7297ef971c4601ad079f7ad38278ae3ff455b37d5492af546975535450693fd4593c8157b3fdb16fd3a106d2f1509d1c06dabb8933269d790a1c5e5f7bdd4a57e1e670d7043cfed88c365b5f8eefe530ef7da5322df981723332c088fce89c2ceee23b420f64332243b9c606d67d538810a94e0ffbd37a119d8fc4d6caec0def40e62613873c74feabde63e12cb2016c1d35cf1bb95bf59e01a63be8825cb3118b74b106f21eef5ee2f41e5fb39fdde058050f780d98ced247c66fc3a03ba04edaf14d698859ba303d511cf0845dc5e269aef2287770a247fd5ae1299b45819ff41725f9da3e4dab7770eb83992b53ae9a9de69e764f6e3aee3e27cfb1bacf531a91605894ae209da6d25872fb54bf36b2ed450b51aa8ee4875b9bc7e55753f61e12a323d301faceb2ecff0686b1359343a94774a6a098dc2df440725cd8331f527d4e22f8090d8879ef4765849705b99465d7ebdf661b81c303d13b87270dc1f227d5954fcbc93bbce6fde2a1f8d573d9cd8130c173a14706f1e9dabc4d16a5b003dd3239faf91769e25cf007b0623141e4e57f11746cd62f20d73956fa84c6a12e1756b6671a64bd7a474ba425907e1a61ba6d2ffa1149165a713a141bfec0f1af51afebdb84d5f14eb51acc284403627d6ce48fd028dc04e00ed963de37f85d155c33e2b4ceb09044c4f1c7791348216b674a8831a232a638f8bfb396fabbe1f880944bc5dcac55df8abc78f804306c88617acfd4adfbb5a055d3d3e91abb763ad84e701cc5679498e04600570f4b2e57c70542043dc590ab363215e6ab3f0bd89383748783d01c9227229edac723d4e2eaa061a44f2630691f25ca6093775183fdf432e01322203dd654b336670116a6a52a27ff2032b1103a4e4be0cc2fb05b24352d72e374e90cc3db2a5a691c7f6b8d1058d7730433c742d8ce52074318b1bce9bb104cf90c8b7f65293c2b74434661444f38d94d977e03433440517f6155a3cad2621c5502dd6148b867a40e6a40be4c8265ec2164b5257f06da1784e98991f42003ced4ba67c23b8c654b542d2d31168fd853cf56cc2c464d7a8a9fbcd2715968788f8527c597ab5f917753c1f1708d2c19972373c5a22af71847de22b9f1e9d38a04ea4dd291da3099cb836a696350bf1263c3c275c27b8b82f604625451a24490b0b5367c2fd05e699546ddf17709d2e2c2710f4361d9dd6e2de2b4353b7f4f8141f6f989dc1a798a974565978e4f9ec0c59a7dbc04bcab072c8513b9ca782c22cdd31fb116c10081740fd8f7d0cbd5c54f1069297f20b45d79bb9ace8e851a655fedf47b2dc76fd30b9ba9f09c9b50d6910ffcdec7078c36fe1e9b19dbb110197496349560a43c0ab42b4ce286643e73a92246ecb71e95ce0d54114772f8477c7d5604c1a52d2f680c5868cf08a2688dd9fef492a01836112cec824483e77da93d104a9e18d06bddf9a4007740a0537ac1a5e09900acc65d52680212a15b68b0ef887228e06f533c1ca95b8f9d81b9fc6608cb5bacf4b867922999c69d46048ec3f408866789f49fcb176fc99ed9d3e6c357ed2e3ce2665925773e5d86c2ceaf8f18519a00d9d2e19e9a6b16af0a53fd7df6974f5db00494460e7f3de6ff6b642859335e020513bb525adddabf0d7d6ae85e7e56e32ca8acc07fe86b7b445358966ba3914c1dfa7b814d9e846ff02a6a8c8f5713a0f727024b5d1ea7e4ce7c64f9b24dd3337a3df33714c5404403b0304b25a66fe3ac85083965877117b3d721e7922f0ac7e278feeb8dc09f58cbcfbb81b11d4699737f37ac240a24b9c4b2b587e68974f7ca5561856f32e389d32056f7d58e4de24c11bd5c5afaa441120370d0c48341e1b8146a6bbca8c15f23c155d2533e97a8e6496bc00533ec83be8488d020708d97385a03bcbf57cadc2c1e575e1ac134cdb5047f3f88eae0230751626cea1c85da9b74ddace668afebb2dc66d302ddf3c5f8f21ac0c0535d00839457e7cac9282a8e49d018b077e38ea512cf28eacff5d98e880abfb5af2e7c039d2e1f1edaad2642963ef29d715f754e2715caa6af046a298b285e3582d903be726b608619332e1a82be48b0f5adf6838f41ff776e5290de8269794bce8fb971267d036bd6bd30e42df918125d573ced78263251bcae2b7b40f1ba855b4f2472312ea8752c4a0e09468bd25615a6c00a9b44c484c5507b8400537f20890e9499ec94ed2b6aeff21e57c6e8a93d80097f85ac9316b03a5f768721bf7d041bb9a6a03eabd615e3c4d74f56c429d53b8fec4b5e86c5b311a6cd4a86f03e04dab25ad65b68a8b8d9053993fd2440ff2b81768213084c831d31a0f8c646aff9090b5463cbee452abd6318340ec41b50f1deba7ffb60b326751de3f6dbf9b17714299233d5c43071367ece2e53212e7f4e084fea60850d4d16908d9bbbb531fbf72143fdb62d1b40afde3d0b2ac2c94c32e456bbef62f8d677e332aec8ccc8eedbac61e7b89b32d57157a39ad5c456258d9c36db0edc82c2baead990ee78007ed89c8f450e92d5e209cc25f7c13f5909ca404fddbdbeff89cc42350c91e9f1fdf9753c6e95f71257f8cbb97838684461cd1244c938b9939a4e9c7727902b6f1a5434e0a06d3fc221771dd87572ae801c5ce6886122f0c91dae57440ffc7ace4e8e0041a1d245103aaadbfc2ecff622228daed2b0cd30f7f59b2617f6f0571ee4403d84e652d78b8e64d5450b6483ef70582dcda9351f2dddd3a4ac84f514f708d3af6242501bd041beae78e6b29b517b534148ea91ef85653fec824d6ddb0c0fa2555ab2564ba29227b1046b48a11ee0e6aafda9d0b80b0f05a8d057cbeb16264cb579aea3ba2b2000052d03c77844ab7c81be3110a36a27aeffe0ad5a8a7385a1913a64fb2db630e8fc8017828cea60f327c3a510b441d94d32584e55f7c2320d89b2ba3d44d832b8e7c5f45442de9ef37d057e6d0c6664e8d74e23f18336d41a3e38c2cda49050cb32ca7040a388c75741ac07d3befc714df35dc92ff70ad041cf17b70a971c142bb89ecfe25290750e989c8666560a61b62fdc4fadef7f30b6269a669ef99be7e7ba7ddddf99949fedc0c331796988c6eedb5c66cbe2870a2affce0b550c3411a2aaf302481ee93398c0fbc0c815cfe1e78bf8fed7f19f2c2dae17a4533aa85f6b787f8072adda379118d76dbba3cebfc4c8aacbb1f79a28ec3a0ec99816e3c8721ddcde1ce73b0704063474", 0xd24}, {0x0, 0x4000}, {0x0, 0x21}, {0x0}, {&(0x7f00000020c0)}], 0x5}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r2, 0x7fffffe}, 0x18) (async) connect$can_j1939(r0, &(0x7f0000000100)={0x1d, r2, 0x1, {}, 0x1}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = add_key$user(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000280)="5e77c182b4eb1dfba848335dab0131a96e1fa368c9904ed5e33137bc8f13e363f6aa41ab084f98c26f968efdd180f5e96aa4958fde4c7a8b11e3ba2c5df1df2ba89e2f1e0f8a18d454ad6cc5ee8387921508a080c062035837de044f9b4b8e91b61064c60489a128572c5e7d6a90db46a019b053b559bec0f21cfd505ce5317cac6274615f72393688356efc1c1728ee7310e8ddf4de84e2ed7ce742a121f18da41c40b4ff07ca7ad2008056c5be49705789a5910bb8ae9bf6e42d8b2a500fd219c72af2b6d65036fb82c3eacd", 0xcd, 0xfffffffffffffffa) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r6, 0x4188aec6, &(0x7f0000000bc0)={0x0, [{0x2, 0x8, 0x108, &(0x7f0000000200)='m'}, {0x1, 0x5e8, 0x20027a6, &(0x7f0000000540)="a2f0173e40c0918ab2baad91e9dc29a1ca1cd2ed0803200d50e08e053af9bbdc5c4bc774f31f9ce16342e7ac020a446a62eb9b24106a5bc6482d68835e9f0ccb65af5f57f07170ae0b73d1cc03496b915859c9bcd64dfbd1cf230e621873929a9045cee6a725d8930dee201d7a30c9a9806f40925611843ad7853b7476e2b318cfcbfc5ebcd3ad47b6f2413a78228fe56ce80d9f859fd3a27c34caad3e2677aaf4b903ae6e1ae40a787e6edbcec253f56af0913b83a399da79ca8c603e"}, {0x0, 0x0, 0x2, 0x0}, {0x3, 0x0, 0x200007f, 0x0}, {0x2, 0x0, 0x85a2, 0x0}, {0x0, 0x0, 0xa, 0x0}, {0x2, 0x0, 0x7f, 0x0}, {0x1, 0x0, 0x0, 0x0}, {0x3, 0x0, 0x5, 0x0}, {0x2, 0x0, 0x80000001, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x3, 0x0, 0x0, 0x0}, {0x2, 0x0, 0x10001, 0x0}, {0x2, 0x0, 0x3, 0x0}, {0x2, 0x0, 0x3f, 0x0}, {0x3, 0x6, 0x6, 0x0}]}) (async) keyctl$dh_compute(0x17, &(0x7f0000000380)={r4}, &(0x7f0000001d80)=""/4096, 0x1000, &(0x7f0000002e40)={&(0x7f0000002d80)={'sha3-512-ce\x00'}, &(0x7f0000002dc0)="8dc01f902625f3545c5ba64d998c77fbd5136968649ee2b9297e1472dd7a0b1e0084cfa8bfdee8d2742a3623ca04ab0077b958c13c78d0463f90af410685094050112cc2944dbb4a1a307ee6af60726ecd6857c1518e1e7261b977cfdc32275157a24a653280e4", 0x67}) (async) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="58000000020601020000000000000000000000000900020073797a3100000000050004000100000014000780050015007200000008001140573f006c050005000a00000005000100070000000c000300686173683a6970"], 0x58}}, 0x4000884) (async) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) r7 = socket(0x10, 0x2, 0x0) fsopen(&(0x7f0000000180)='exfat\x00', 0x0) (async) close_range(r7, 0xffffffffffffffff, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xb3ef97915a702ebc, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x2, 0x7ffffcb9}]}) sync() 551.896002ms ago: executing program 2 (id=4184): syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[], 0x0) (async) prctl$PR_GET_ENDIAN(0x13, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x38, 0x0, 0x1, 0x201, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) (async) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000200)) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x3) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)=""/245, 0xf5}, {0x0}], 0x2, 0x778f, 0x3) (async) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x10, 0x20, 0x4, "", [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x7, 0x1, 0x3, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x6, 0x9, 0x6}}}}}]}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x8, 0x2, 0x81, 0x10, 0x1}, 0xb5, &(0x7f0000000900)={0x5, 0xf, 0xb5, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0x5, 0x3, 0x4}, @wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x5c, 0xb4, 0x99, 0xe}, @generic={0x90, 0x10, 0x4, "60fe6e93a64b36ab76939d8ea260ab56d684af7716b0ed8a4f8612fedd4125aad025300d28ff180e90db7600d17acb88082dfb0741b60d687ccc38453f57590fd6b700e40b45c10a30f142b7d8e1ff602619d337376e4869aac5cf7fa174079e5dcb7aab1102b400195eb6add2de18f7c05626be41fc96c911a81fed2d2b08cc9a2b24c36d44b26dcca58dee93"}, @wireless={0xb, 0x10, 0x1, 0x0, 0xe1, 0x1, 0x3, 0x4, 0x5}]}, 0x6, [{0xd1, &(0x7f0000000300)=@string={0xd1, 0x3, "6be79bf2b5c65e6af496d1e2c4398068dd851e7bb1a400098d7b6bd3821a8b439db9fd4390a8747f7d1ba04386b763033b56ba53cd3439529a46cced3d2ce86c9bc87f608649f711cec5f2d4e7e57dd614217b145db84e493f9a12611501ca8074792b855fe5617ce5cff29d0b35acce897190b697e260d9cfe4692131fadc5ade20ee7f0579cc38ff537abc225c4a26ebaea5b0a5448e0dc2f704cc99a6a25aca0b8390d9da9266f2fa158b519f521c84b5fd9e70bd81278e18b65ce1a984dae74db58abe6a221db9930da756e05f"}}, {0xf6, &(0x7f0000000400)=@string={0xf6, 0x3, "fdf050f7ce7df435f714484e1fa762bc69b27539fff8ec5873587930dc2bbf5109e99554da15eb60609b7a73456f11d15d122b61fdd86407cf9479844e3a3715c6cce6c67f459ed3dea1b1b0cb3ee4f11fbc0df80e5272d1cc0c5b4214a3cbd1c0543322f0066598bb56b6da9d8c6f17789973d444c0b0399388055b2501b48bcf23f04116590a0abe8c02cf315d2dc0f5706130ba9e9408fcfafa2dd1c6613779202bb90ff4b8a576035d407ca9ae84d8d74016d78d3e14cce5e3fb1e3f1f5c13abc402e376e6184bc55b927dc1325427bbf47b97117d16ca77e7c7049a31b49d01daaa7483d68b8c221a1ea48ce3f8a6b2638e"}}, {0x38, &(0x7f0000000500)=@string={0x38, 0x3, "2000ddeabd05b56ecab0e4288da29f355e98617842c3b5988850ec7d73dd677ab41180a62a3a1857a205463792199c81e5104be62c1d"}}, {0xc8, &(0x7f0000000580)=@string={0xc8, 0x3, "df9a3695ca57ddceca7ef1f5636e1ee9389adbe2e3ce971934742ece077a935c5e4ab12d31b91dbc59e2f28868ee74a4e5ca41a689c56a88a09d31e28accf43f8c606379aac633da0f376f5a06137142c0f36a522e8de4d7e83bcf433ef4e05450d8df64f57aeeab26711722883d97e7cf09f2dfeda0a8d5b0383f5dd906989737fd7bb9112ada5da37a7c41b5517ec49d9fa5a50bbd92c8d64bcefec89c6fb3f9d68f40f1043316aa73931895f75c412f20909aff7ebf796720e1c139f1a48f35437adb078b"}}, {0xc5, &(0x7f0000000800)=@string={0xc5, 0x3, "4710778078296fc9954cd3ecd2e0095a0197cecde0b9cb00a221bfd1abb2708e12c2c822a26799b1c5b98eb4320c97e41e796e4d3eba1b521b1e63c0b10ff9fccc79991e1e3450b5f43de6261ebbf26da6d8d26e3f6a4aeddba9db320e7c1053521ff6ee8c24ac4e92a4562afadb30cc5c7608482b1ee2a5f61f04802ac3e9bfb4af526bd4aad824519c10faf62bd10493b3e42e1f5c3fcc29cb3c1557d01e03cb664218ad9d822f18cda5d16e4ab79c8195c166224946201168fc8a3f7e4e8b93df3c"}}, {0xa4, &(0x7f00000006c0)=@string={0xa4, 0x3, "3d0a2f3b02af37a2a6a74a4655ad0c162332e72d4320906545dc6a57f2535b700e4cb8f9e1a7244fa3a9425863bb47253bf29391737544d4489fb3d168adcff56959a1b8e81071db72d5d15473bb92b9a097cb32da9c140d696b4216569a3abf1ab463a36bb816a8b2564a0298caa06336d42b3bde9f807401fdcd5cfd1264515dbe76a40cc40b3e170704d38a61ac79d5ba3638f40d2976bb1970f5efc01f3942f8"}}]}) 255.808181ms ago: executing program 0 (id=4185): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_setup(0x267a, &(0x7f0000000140)={0x0, 0x52a0, 0x8000, 0x1, 0x8e}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b19, &(0x7f0000000140)={'wlan1\x00', @random="0100eb00"}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r6 = socket$tipc(0x1e, 0x5, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0xfff, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x8000, 0x3c}, 0x0, @in=@broadcast}]}]}, 0xfc}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) bind$tipc(r6, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r9 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r9, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/tty/drivers\x00', 0x0, 0x0) fcntl$lock(r10, 0x5, &(0x7f0000000000)={0x0, 0x2, 0x7fffffffffffffff, 0xb}) syz_usb_connect$cdc_ncm(0x3, 0x74, &(0x7f00000002c0)=ANY=[@ANYBLOB="12011001020000102505a1a44000010255dd28030109026d000201a220fc0904000001020d00000024060001002400000000240f01000000000000e231a606241a0000000905810300000000001504010000020d00000904010102020d0000090582020000000000090503020000000000"], 0xfffffffffffffffc) write(0xffffffffffffffff, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x2710, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000340)={0x4, 0x0, [{0xb65, 0x0, 0x4}, {0xb55, 0x0, 0x3}, {0x3f6, 0x0, 0x6}, {0x4b564d01, 0x0, 0x200}]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xf3b8, 0x0, 0x8000001000, 0x400, 0x4002004c4, 0x1000, 0x0, 0x97, 0x10, 0x0, 0x3, 0x4], 0xeeee8000, 0x140640}) 149.093286ms ago: executing program 3 (id=4186): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1000000000000000100180000e10000018000000000010"], 0x38}, 0xfc40) 0s ago: executing program 3 (id=4187): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000000000)="1c681411f7ab96c0dacc6a3c24465b016f64b4c00b5f7c691cb24cb8000000081a0000200000008ba3d747ab00", 0x0, 0x48) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xca100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x8000000000000000, 0x100000000, 0x0, 0x20, 0x0, 0x0, 0x2004c9, 0x7001, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x4000000000000004, 0x2], 0xffff1000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x10080, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="0300001f", @ANYRES16=r2, @ANYBLOB="010029bd7000fcdbdf254400000008000300", @ANYRES32=r7, @ANYBLOB], 0x1c}}, 0x814) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x1, 0x15f, 0x9}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYRES16=r8], 0xec}, 0x1, 0x0, 0x0, 0x24044005}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="01072cbd7000fe9bdf251f000000"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8814) syz_open_dev$dmmidi(&(0x7f0000000180), 0x4000001, 0x800) r11 = syz_open_dev$I2C(&(0x7f0000000440), 0x2a, 0x80a40) ioctl$BTRFS_IOC_SET_FEATURES(r11, 0x40309439, &(0x7f0000000480)={0x1, 0x0, 0x10}) r12 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r12, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_opts(r12, 0x0, 0x4, 0x0, 0x0) connect$inet(r12, &(0x7f0000000280)={0x2, 0x4e23, @loopback}, 0x10) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r6, 0xc0245720, &(0x7f00000004c0)={0x1}) kernel console output (not intermixed with test programs): 16 [ 1313.185562][T20287] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3779'. [ 1313.234741][T20287] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3779'. [ 1313.361129][T20283] team_slave_0: entered promiscuous mode [ 1313.367333][T20283] team_slave_1: entered promiscuous mode [ 1313.373133][T20283] batadv1: entered promiscuous mode [ 1313.407634][T20283] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 1313.482195][T20287] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3779'. [ 1313.555249][T20288] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 1313.569994][T20295] netlink: 'syz.5.3779': attribute type 4 has an invalid length. [ 1313.797366][ T5830] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPROTO [ 1313.840658][ T5830] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1313.866949][ T5830] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1313.944900][ T5830] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 1313.995577][ T5830] usb 3-1: USB disconnect, device number 44 [ 1314.400830][ T5830] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1314.617133][T20310] x_tables: duplicate underflow at hook 4 [ 1314.679982][ T5830] usb 3-1: Using ep0 maxpacket: 32 [ 1314.688095][ T5830] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 1314.696857][ T5830] usb 3-1: config 0 has no interface number 0 [ 1314.724166][ T5830] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1314.737942][ T5830] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1314.762921][ T5830] usb 3-1: Product: syz [ 1314.834929][ T5830] usb 3-1: Manufacturer: syz [ 1314.865115][ T5830] usb 3-1: SerialNumber: syz [ 1314.896612][ T5830] usb 3-1: config 0 descriptor?? [ 1314.901650][T17416] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1315.025774][ T5830] usb 3-1: can't set config #0, error -71 [ 1315.081686][T17416] usb 4-1: Using ep0 maxpacket: 16 [ 1315.089692][T17416] usb 4-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1315.091542][ T5830] usb 3-1: USB disconnect, device number 45 [ 1315.125859][T17416] usb 4-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1315.178284][T17416] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1315.218865][T17416] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1315.325647][T20314] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3785'. [ 1315.528497][ T5830] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1315.624708][T20320] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3786'. [ 1315.720479][T17416] mcp2221 0003:04D8:00DD.0030: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 1315.744374][ T5830] usb 3-1: Using ep0 maxpacket: 8 [ 1315.761705][ T5894] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1315.784082][ T5830] usb 3-1: config 8 has an invalid interface number: 188 but max is 0 [ 1315.821895][ T5830] usb 3-1: config 8 has no interface number 0 [ 1315.838515][ T5830] usb 3-1: config 8 interface 188 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 1315.886039][T20310] i2c i2c-1: unsupported multi-msg i2c transaction [ 1315.895823][ T5830] usb 3-1: config 8 interface 188 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1315.924833][ T5830] usb 3-1: config 8 interface 188 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1315.972296][ T5894] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 1315.995488][T17416] usb 4-1: USB disconnect, device number 64 [ 1315.996721][ T5830] usb 3-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=8f.67 [ 1316.021238][ T5830] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1316.029435][ T5894] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 1316.060283][ T5830] usb 3-1: Product: syz [ 1316.068166][ T5830] usb 3-1: Manufacturer: syz [ 1316.083062][ T5894] usb 1-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 1316.095491][ T5830] usb 3-1: SerialNumber: syz [ 1316.102683][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1316.125013][ T5894] usb 1-1: Product: syz [ 1316.133670][ T5894] usb 1-1: Manufacturer: syz [ 1316.143030][ T5894] usb 1-1: SerialNumber: syz [ 1316.450714][ T5830] vmk80xx 3-1:8.188: driver 'vmk80xx' failed to auto-configure device. [ 1316.479729][ T5830] vmk80xx 3-1:8.188: probe with driver vmk80xx failed with error -22 [ 1316.602319][ T5830] usb 3-1: USB disconnect, device number 46 [ 1317.083031][T20333] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3789'. [ 1317.092457][T20333] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3789'. [ 1317.102652][ T30] audit: type=1400 audit(1775728543.006:3993): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="\" pid=20327 comm="syz.5.3789" [ 1317.285414][T20334] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3790'. [ 1317.580883][T20342] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3791'. [ 1318.256312][ T30] audit: type=1326 audit(1775728544.156:3994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20344 comm="syz.3.3793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c9d99c819 code=0x7ffc0000 [ 1318.402634][ T30] audit: type=1326 audit(1775728544.156:3995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20344 comm="syz.3.3793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f8c9d99c819 code=0x7ffc0000 [ 1318.564437][ T5894] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1318.579725][ T5894] usb 1-1: unit 6 not found! [ 1318.732035][ T30] audit: type=1326 audit(1775728544.156:3996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20344 comm="syz.3.3793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8c9d99c582 code=0x7ffc0000 [ 1318.798620][ T30] audit: type=1326 audit(1775728544.156:3997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20344 comm="syz.3.3793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8c9d99c582 code=0x7ffc0000 [ 1318.911738][ T30] audit: type=1326 audit(1775728544.156:3998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20344 comm="syz.3.3793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c9d99c819 code=0x7ffc0000 [ 1318.935958][ T30] audit: type=1326 audit(1775728544.156:3999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20344 comm="syz.3.3793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f8c9d99c819 code=0x7ffc0000 [ 1319.004902][ T30] audit: type=1326 audit(1775728544.166:4000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20344 comm="syz.3.3793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c9d99c819 code=0x7ffc0000 [ 1319.031897][ T5894] usb 1-1: USB disconnect, device number 56 [ 1319.134725][T20356] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3795'. [ 1319.144146][T20356] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3795'. [ 1319.191633][ T30] audit: type=1326 audit(1775728544.166:4001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20344 comm="syz.3.3793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8c9d99c819 code=0x7ffc0000 [ 1319.195031][ T6014] udevd[6014]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1319.236712][T20357] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3795'. [ 1319.248028][T20356] netlink: 'syz.5.3795': attribute type 4 has an invalid length. [ 1319.379785][ T30] audit: type=1326 audit(1775728544.166:4002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20344 comm="syz.3.3793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c9d99c819 code=0x7ffc0000 [ 1319.801590][ T5894] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1320.031844][ T5894] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1320.051276][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1320.069271][ T5894] usb 1-1: Product: syz [ 1320.078433][T20363] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3797'. [ 1320.079371][ T5894] usb 1-1: Manufacturer: syz [ 1320.120555][ T5894] usb 1-1: SerialNumber: syz [ 1320.351648][T16351] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1320.481768][T16351] usb 3-1: device descriptor read/64, error -71 [ 1320.594025][ T5894] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1320.595065][T20352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1320.622085][T20352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1320.631150][ T5894] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1320.697712][T20370] netlink: 'syz.5.3798': attribute type 7 has an invalid length. [ 1320.741661][T16351] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1320.881751][ T9845] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1320.889479][T16351] usb 3-1: device descriptor read/64, error -71 [ 1321.001859][T16351] usb usb3-port1: attempt power cycle [ 1321.044813][ T9845] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1321.054083][ T9845] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 1321.065258][ T9845] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 1321.080651][ T9845] usb 4-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 1321.089938][ T9845] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1321.098317][ T9845] usb 4-1: Product: syz [ 1321.102991][ T9845] usb 4-1: Manufacturer: syz [ 1321.107640][ T9845] usb 4-1: SerialNumber: syz [ 1321.282577][ T5894] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPROTO [ 1321.307362][ T5894] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1321.320483][ T5894] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1321.332804][T20369] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3799'. [ 1321.333799][ T5894] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 1321.342043][T16351] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1321.398819][ T5894] usb 1-1: USB disconnect, device number 57 [ 1321.405248][T16351] usb 3-1: device descriptor read/8, error -71 [ 1321.420209][ T9845] usb 4-1: Can't get UAC3 power state for id 10 [ 1321.453025][ T9845] usb 4-1: 2:0: failed to get current value for ch 0 (-71) [ 1321.466066][ T9845] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1321.541943][ T9845] usb 4-1: USB disconnect, device number 65 [ 1321.596192][ T6094] udevd[6094]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1321.652216][T16351] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1321.693979][T16351] usb 3-1: device descriptor read/8, error -71 [ 1321.789098][T20376] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:0 [ 1321.805937][T20377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1321.817813][T16351] usb usb3-port1: unable to enumerate USB device [ 1321.828582][T20377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1321.941633][ T5894] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1322.041631][ T9845] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1322.101979][ T5894] usb 5-1: Using ep0 maxpacket: 8 [ 1322.110520][ T5894] usb 5-1: config 8 has an invalid interface number: 188 but max is 0 [ 1322.123471][ T5894] usb 5-1: config 8 has no interface number 0 [ 1322.140933][ T5894] usb 5-1: config 8 interface 188 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 1322.166580][ T5894] usb 5-1: config 8 interface 188 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1322.191586][ T9845] usb 6-1: device descriptor read/64, error -71 [ 1322.198211][ T5894] usb 5-1: config 8 interface 188 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1322.221065][ T5894] usb 5-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=8f.67 [ 1322.230795][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1322.239136][ T5894] usb 5-1: Product: syz [ 1322.244009][ T5894] usb 5-1: Manufacturer: syz [ 1322.248717][ T5894] usb 5-1: SerialNumber: syz [ 1322.301620][T16351] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1322.437148][ T9845] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1322.471633][T16351] usb 4-1: Using ep0 maxpacket: 32 [ 1322.477984][ T5894] vmk80xx 5-1:8.188: driver 'vmk80xx' failed to auto-configure device. [ 1322.487798][T16351] usb 4-1: config 0 has an invalid interface number: 146 but max is 0 [ 1322.490492][ T5894] vmk80xx 5-1:8.188: probe with driver vmk80xx failed with error -22 [ 1322.508948][T16351] usb 4-1: config 0 has no interface number 0 [ 1322.515781][T16351] usb 4-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1322.535656][ T5894] usb 5-1: USB disconnect, device number 99 [ 1322.537802][T16351] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1322.576108][T16351] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1322.587867][ T9845] usb 6-1: device descriptor read/64, error -71 [ 1322.614629][T16351] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1322.648155][T16351] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1322.660503][T16351] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1322.670889][T16351] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1322.681644][T16351] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1322.693149][T16351] usb 4-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1322.706923][ T9845] usb usb6-port1: attempt power cycle [ 1322.716607][T16351] usb 4-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1322.726322][T16351] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1322.735048][T16351] usb 4-1: Product: syz [ 1322.739419][T16351] usb 4-1: Manufacturer: syz [ 1322.744502][T16351] usb 4-1: SerialNumber: syz [ 1322.752997][T16351] usb 4-1: config 0 descriptor?? [ 1322.760007][T20383] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 1322.770287][T16351] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 1 is not bulk. [ 1322.780860][T16351] microtek usb (rev 0.4.3): couldn't find an output bulk endpoint. Bailing out. [ 1322.878085][T20386] syzkaller0: entered promiscuous mode [ 1322.883912][T20386] syzkaller0: entered allmulticast mode [ 1323.031284][ T5894] usb 4-1: USB disconnect, device number 66 [ 1323.062154][ T9845] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1323.092319][ T9845] usb 6-1: device descriptor read/8, error -71 [ 1323.129227][T20389] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3806'. [ 1323.177170][T20393] syzkaller1: entered promiscuous mode [ 1323.227928][T20393] syzkaller1: entered allmulticast mode [ 1323.352658][ T9845] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1323.393029][ T9845] usb 6-1: device descriptor read/8, error -71 [ 1323.423221][T20402] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3805'. [ 1323.433668][T20402] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3805'. [ 1323.458972][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 1323.458995][ T30] audit: type=1400 audit(1775728549.336:4024): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="\" pid=20387 comm="syz.0.3805" [ 1323.505155][ T9845] usb usb6-port1: unable to enumerate USB device [ 1323.518484][T20403] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3808'. [ 1323.528156][T20403] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3808'. [ 1323.542508][T20403] netlink: 'syz.4.3808': attribute type 4 has an invalid length. [ 1324.651601][ T9843] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1324.853981][ T9843] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1324.864438][ T9843] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1324.908253][ T9843] usb 4-1: Product: syz [ 1324.925370][ T9843] usb 4-1: Manufacturer: syz [ 1324.930027][ T9843] usb 4-1: SerialNumber: syz [ 1324.956915][ T9843] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1324.983908][ T9845] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1325.331681][ T5894] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1325.486267][ T5894] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1325.507955][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1325.524162][ T5894] usb 3-1: Product: syz [ 1325.533028][ T5894] usb 3-1: Manufacturer: syz [ 1325.540908][ T5894] usb 3-1: SerialNumber: syz [ 1325.641764][T20432] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1325.641764][T20432] The task syz.5.3816 (20432) triggered the difference, watch for misbehavior. [ 1325.761937][ T9843] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1325.806169][T20410] __nla_validate_parse: 51 callbacks suppressed [ 1325.806193][T20410] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3809'. [ 1325.901706][ T9843] usb 1-1: device descriptor read/64, error -71 [ 1326.017536][ T5894] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1326.030182][T20419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1326.039035][T20419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1326.047246][ T5894] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1326.141753][ T9843] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1326.291869][ T9843] usb 1-1: device descriptor read/64, error -71 [ 1326.403582][ T9843] usb usb1-port1: attempt power cycle [ 1326.425473][T20438] batman_adv: batadv0: Adding interface: dummy0 [ 1326.432075][T20438] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1326.457823][T20438] batman_adv: batadv0: Interface activated: dummy0 [ 1326.509340][T20438] batadv0: mtu less than device minimum [ 1326.517583][T20438] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1326.529712][T20438] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1326.541699][T20438] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1326.553415][T20438] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1326.564986][T20438] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1326.576819][T20438] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1326.588434][T20438] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1326.600306][T20438] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1326.641837][ T9845] usb 4-1: Service connection timeout for: 258 [ 1326.658889][ T9845] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1326.673929][ T5894] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1326.696985][ T5894] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1326.712171][ T5894] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 1326.723166][ T9845] ath9k_htc: Failed to initialize the device [ 1326.729627][ T5894] usb 3-1: USB disconnect, device number 51 [ 1326.741716][ T9843] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1326.758098][ T9845] usb 4-1: ath9k_htc: USB layer deinitialized [ 1326.772468][ T9843] usb 1-1: device descriptor read/8, error -71 [ 1326.940690][T16351] usb 4-1: USB disconnect, device number 67 [ 1327.011999][ T9843] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1327.052581][ T9843] usb 1-1: device descriptor read/8, error -71 [ 1327.162079][ T9843] usb usb1-port1: unable to enumerate USB device [ 1327.512995][T20467] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3824'. [ 1327.522421][T20467] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3824'. [ 1327.585195][T20470] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3825'. [ 1327.598205][T20470] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3825'. [ 1327.825850][ T30] audit: type=1400 audit(1775728553.506:4025): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="\" pid=20460 comm="syz.2.3825" [ 1327.852360][T20467] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3824'. [ 1327.861936][T20467] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3824'. [ 1327.871029][T20467] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3824'. [ 1327.886965][T20467] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3824'. [ 1327.981685][T20467] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3824'. [ 1327.994714][T20475] netlink: 'syz.3.3824': attribute type 4 has an invalid length. [ 1329.217252][T20482] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1329.629443][T16351] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1329.807282][T16351] usb 6-1: Using ep0 maxpacket: 16 [ 1329.880900][T16351] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1329.893205][T16351] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1329.909473][T16351] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1330.027550][T16351] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1330.041675][T16351] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1330.297469][T16351] usb 6-1: config 0 descriptor?? [ 1330.748161][T16351] microsoft 0003:045E:07DA.0031: reserved main item tag 0xd [ 1330.772134][T16351] hid_parser_main: 28 callbacks suppressed [ 1330.772165][T16351] microsoft 0003:045E:07DA.0031: unknown main item tag 0x0 [ 1330.804276][ T9843] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1330.821592][T16351] microsoft 0003:045E:07DA.0031: unknown main item tag 0x0 [ 1330.841816][T20501] mac80211_hwsim hwsim42 syzkaller0: entered promiscuous mode [ 1330.849441][T20501] mac80211_hwsim hwsim42 syzkaller0: entered allmulticast mode [ 1330.859940][T16351] microsoft 0003:045E:07DA.0031: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 1330.905323][T16351] microsoft 0003:045E:07DA.0031: no inputs found [ 1330.930515][T16351] microsoft 0003:045E:07DA.0031: could not initialize ff, continuing anyway [ 1330.952441][ T9843] usb 3-1: device descriptor read/64, error -71 [ 1331.122175][ T5830] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1331.190889][ T5894] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1331.191649][ T9843] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1331.218170][T20512] syzkaller0: entered promiscuous mode [ 1331.224941][T20512] syzkaller0: entered allmulticast mode [ 1331.308157][ T5830] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1331.317492][ T5830] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1331.342244][ T5894] usb 4-1: device descriptor read/64, error -71 [ 1331.348621][ T5830] usb 1-1: Product: syz [ 1331.361562][ T5830] usb 1-1: Manufacturer: syz [ 1331.366220][ T5830] usb 1-1: SerialNumber: syz [ 1331.371727][ T9843] usb 3-1: device descriptor read/64, error -71 [ 1331.485282][ T9843] usb usb3-port1: attempt power cycle [ 1331.590983][T20516] kAFS: unable to lookup cell 'ÿ' [ 1331.609846][ T5894] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1331.767406][ T5894] usb 4-1: device descriptor read/64, error -71 [ 1331.825280][ T5830] net_ratelimit: 12 callbacks suppressed [ 1331.825307][ T5830] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1331.826505][T20506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1331.831063][ T5830] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1331.862304][ T9843] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1331.872267][T20506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1331.892239][ T5894] usb usb4-port1: attempt power cycle [ 1331.892434][ T9843] usb 3-1: device descriptor read/8, error -71 [ 1332.141720][ T9843] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1332.166950][ T9843] usb 3-1: device descriptor read/8, error -71 [ 1332.241617][ T5894] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1332.252311][ T9845] usb 6-1: USB disconnect, device number 53 [ 1332.282047][ T9843] usb usb3-port1: unable to enumerate USB device [ 1332.282324][ T5894] usb 4-1: device descriptor read/8, error -71 [ 1332.530847][ T5830] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPROTO [ 1332.537368][T20519] syzkaller0: entered promiscuous mode [ 1332.547189][ T5830] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1332.552431][T20519] syzkaller0: entered allmulticast mode [ 1332.558727][ T5830] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1332.595364][ T5830] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 1332.624111][ T5830] usb 1-1: USB disconnect, device number 62 [ 1332.651629][ T5894] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1332.672266][ T5894] usb 4-1: device descriptor read/8, error -71 [ 1332.781906][ T5894] usb usb4-port1: unable to enumerate USB device [ 1332.991636][ T9845] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1333.143278][ T9845] usb 5-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 1333.152604][ T9845] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1333.164204][ T9845] usb 5-1: config 0 descriptor?? [ 1333.177158][ T9845] pwc: Creative Labs Webcam 5 detected. [ 1333.283013][T20533] __nla_validate_parse: 49 callbacks suppressed [ 1333.283030][T20533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3845'. [ 1333.300751][T20533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3845'. [ 1333.313442][T20533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3845'. [ 1333.323384][T20533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3845'. [ 1333.333678][T20533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3845'. [ 1333.343035][T20533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3845'. [ 1333.352304][T20533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3845'. [ 1333.361284][T20533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3845'. [ 1333.372157][ T9845] pwc: Failed to set LED on/off time (-71) [ 1333.379635][T20533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3845'. [ 1333.379774][ T9845] pwc: send_video_command error -71 [ 1333.395003][T20533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3845'. [ 1333.406365][T20534] netlink: 'syz.0.3845': attribute type 4 has an invalid length. [ 1333.600981][ T9845] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1333.623637][ T9845] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 1333.655833][ T9845] usb 5-1: USB disconnect, device number 100 [ 1334.009945][T20541] fuse: Unknown parameter '•ð^0x000000000000000a' [ 1334.031592][ T9843] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1334.059454][T20542] loop5: detected capacity change from 0 to 3 [ 1334.079480][T20542] loop5: p1 < > p4 [ 1334.127637][T20542] loop5: partition table partially beyond EOD, truncated [ 1334.162489][T20542] loop5: p1 start 4 is beyond EOD, truncated [ 1334.171622][ T9843] usb 3-1: device descriptor read/64, error -71 [ 1334.270015][ T5194] loop5: p1 < > p4 [ 1334.275134][ T5194] loop5: partition table partially beyond EOD, truncated [ 1334.325649][ T5194] loop5: p1 start 4 is beyond EOD, truncated [ 1334.402977][ T5894] usb 4-1: new full-speed USB device number 72 using dummy_hcd [ 1334.411666][ T9843] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1334.561752][ T9843] usb 3-1: device descriptor read/64, error -71 [ 1334.565170][ T5894] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1334.583513][ T5894] usb 4-1: not running at top speed; connect to a high speed hub [ 1334.623269][ T5894] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 1334.637409][ T5894] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1334.651561][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1334.659614][ T5894] usb 4-1: Product: syz [ 1334.672040][ T9843] usb usb3-port1: attempt power cycle [ 1334.691587][ T5894] usb 4-1: Manufacturer: syz [ 1334.696242][ T5894] usb 4-1: SerialNumber: syz [ 1334.933894][ T5894] usb 4-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 1334.956999][ T5894] usb 4-1: found format II with max.bitrate = 512, frame size=4095 [ 1334.972355][T17416] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1334.985201][ T5894] usb 4-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 1335.003299][ T5894] usb 4-1: found format II with max.bitrate = 512, frame size=4095 [ 1335.093686][ T9843] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1335.095377][T13717] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1335.110866][T13717] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1335.119995][T13717] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1335.127712][ T9843] usb 3-1: device descriptor read/8, error -71 [ 1335.137730][ T5894] usb 4-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 1335.177765][T17416] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1335.186965][T17416] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1335.195436][T17416] usb 5-1: Product: syz [ 1335.204643][T17416] usb 5-1: Manufacturer: syz [ 1335.209618][T17416] usb 5-1: SerialNumber: syz [ 1335.350501][T13717] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1335.497782][ T9843] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1335.542818][ T9843] usb 3-1: device descriptor read/8, error -71 [ 1335.738143][ T9843] usb usb3-port1: unable to enumerate USB device [ 1335.763387][ T5894] usb 4-1: USB disconnect, device number 72 [ 1335.953592][T20560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1335.962358][T17416] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1335.975338][T20560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1335.989441][T17416] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1336.656282][T17416] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPROTO [ 1336.672203][T17416] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1336.685785][T17416] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1336.714140][T17416] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 1336.735875][T17416] usb 5-1: USB disconnect, device number 101 [ 1337.159581][T20585] IPVS: set_ctl: invalid protocol: 94 172.20.20.170:20001 [ 1337.472272][ T9843] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1337.651567][ T9843] usb 1-1: device descriptor read/64, error -71 [ 1337.903028][ T9843] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1338.052359][ T9843] usb 1-1: device descriptor read/64, error -71 [ 1338.162120][ T9843] usb usb1-port1: attempt power cycle [ 1338.411812][T20608] netlink: 'syz.3.3870': attribute type 7 has an invalid length. [ 1338.541917][ T9843] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1338.582482][ T9843] usb 1-1: device descriptor read/8, error -71 [ 1338.583065][T20619] syzkaller0: entered promiscuous mode [ 1338.603870][T20619] syzkaller0: entered allmulticast mode [ 1338.821662][ T9843] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1338.883954][ T9843] usb 1-1: device descriptor read/8, error -71 [ 1339.007012][ T9843] usb usb1-port1: unable to enumerate USB device [ 1339.029350][T20628] random: crng reseeded on system resumption [ 1339.561906][ T5894] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1339.631597][ T9843] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 1339.735396][ T5894] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1339.745014][ T5894] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1339.761713][ T9843] usb 5-1: device descriptor read/64, error -71 [ 1339.765168][ T5894] usb 6-1: Product: syz [ 1339.781912][ T5894] usb 6-1: Manufacturer: syz [ 1339.792343][ T5894] usb 6-1: SerialNumber: syz [ 1340.002184][ T9843] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1340.154932][ T9843] usb 5-1: device descriptor read/64, error -71 [ 1340.183100][ T9849] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1340.278713][ T9843] usb usb5-port1: attempt power cycle [ 1340.286345][ T5894] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1340.287301][T20632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1340.310403][T20632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1340.343410][ T5894] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1340.370464][T20645] kAFS: unparsable volume name [ 1340.411778][ T9849] usb 4-1: Using ep0 maxpacket: 8 [ 1340.423211][ T9849] usb 4-1: config 8 has an invalid interface number: 188 but max is 0 [ 1340.436662][ T9849] usb 4-1: config 8 has no interface number 0 [ 1340.449007][ T9849] usb 4-1: config 8 interface 188 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 1340.461016][ T9849] usb 4-1: config 8 interface 188 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1340.472412][ T9849] usb 4-1: config 8 interface 188 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1340.488679][ T9849] usb 4-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=8f.67 [ 1340.498076][ T9849] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1340.506192][ T9849] usb 4-1: Product: syz [ 1340.510611][ T9849] usb 4-1: Manufacturer: syz [ 1340.526423][ T9849] usb 4-1: SerialNumber: syz [ 1340.621761][ T9843] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 1340.769114][ T9843] usb 5-1: device descriptor read/8, error -71 [ 1340.849882][ T5894] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1340.862971][ T5894] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1340.873440][ T5894] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1340.892164][ T5894] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 1340.941407][ T5894] usb 6-1: USB disconnect, device number 54 [ 1340.948426][ T9849] vmk80xx 4-1:8.188: driver 'vmk80xx' failed to auto-configure device. [ 1341.009142][ T9849] vmk80xx 4-1:8.188: probe with driver vmk80xx failed with error -22 [ 1341.037881][ T9849] usb 4-1: USB disconnect, device number 73 [ 1341.091795][ T9843] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1341.112474][ T9843] usb 5-1: device descriptor read/8, error -71 [ 1341.221867][ T9843] usb usb5-port1: unable to enumerate USB device [ 1341.331649][T20662] __nla_validate_parse: 52 callbacks suppressed [ 1341.331703][T20662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3886'. [ 1341.347496][T20662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3886'. [ 1341.360138][T20662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3886'. [ 1341.370126][T20662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3886'. [ 1341.409796][T20662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3886'. [ 1341.430144][T20662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3886'. [ 1341.451900][T20662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3886'. [ 1341.472293][T20662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3886'. [ 1341.485973][T20664] fuse: Bad value for 'fd' [ 1341.504669][T20662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3886'. [ 1341.533170][T20662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3886'. [ 1341.534238][T20668] netlink: 'syz.0.3886': attribute type 4 has an invalid length. [ 1343.121773][ T5894] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1343.281930][T17416] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1343.293324][ T5894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1343.312109][ T5894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1343.329577][ T5894] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1343.344942][ T5894] usb 4-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 1343.354763][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1343.414782][ T5894] usb 4-1: config 0 descriptor?? [ 1343.447583][T17416] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1343.461577][T17416] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1343.533305][T17416] usb 1-1: Product: syz [ 1343.538107][T17416] usb 1-1: Manufacturer: syz [ 1343.543809][T17416] usb 1-1: SerialNumber: syz [ 1343.846307][ T5894] usbhid 4-1:0.0: can't add hid device: -71 [ 1343.858235][ T5894] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1343.945047][ T5894] usb 4-1: USB disconnect, device number 74 [ 1344.171034][T20701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1344.187513][T17416] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1344.213116][T20701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1344.220936][T17416] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1344.231855][T16351] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1344.432905][T16351] usb 6-1: device descriptor read/64, error -71 [ 1344.675804][T16351] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1344.755771][T17416] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1344.805404][T17416] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1344.827014][T17416] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1344.835884][T16351] usb 6-1: device descriptor read/64, error -71 [ 1344.861799][T17416] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 1344.897990][T17416] usb 1-1: USB disconnect, device number 67 [ 1344.964821][T16351] usb usb6-port1: attempt power cycle [ 1345.276976][T20737] xt_hashlimit: size too large, truncated to 1048576 [ 1345.332030][T16351] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1345.362384][T16351] usb 6-1: device descriptor read/8, error -71 [ 1345.462101][T20744] xt_hashlimit: size too large, truncated to 1048576 [ 1345.611683][T16351] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1345.633544][T16351] usb 6-1: device descriptor read/8, error -71 [ 1345.764922][T16351] usb usb6-port1: unable to enumerate USB device [ 1345.812729][ T5894] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 1345.831325][ T5894] hid-generic 0000:0000:0000.0032: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1346.522742][T20765] FAULT_INJECTION: forcing a failure. [ 1346.522742][T20765] name failslab, interval 1, probability 0, space 0, times 0 [ 1346.581327][T20765] CPU: 0 UID: 0 PID: 20765 Comm: syz.2.3914 Tainted: G L syzkaller #0 PREEMPT(full) [ 1346.581363][T20765] Tainted: [L]=SOFTLOCKUP [ 1346.581372][T20765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1346.581384][T20765] Call Trace: [ 1346.581393][T20765] [ 1346.581403][T20765] dump_stack_lvl+0xe8/0x150 [ 1346.581445][T20765] should_fail_ex+0x412/0x560 [ 1346.581484][T20765] should_failslab+0xa8/0x100 [ 1346.581513][T20765] __kmalloc_noprof+0xe8/0x760 [ 1346.581537][T20765] ? tomoyo_encode+0x28b/0x550 [ 1346.581564][T20765] tomoyo_encode+0x28b/0x550 [ 1346.581592][T20765] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1346.581635][T20765] ? tomoyo_path_number_perm+0x219/0x630 [ 1346.581664][T20765] tomoyo_path_number_perm+0x246/0x630 [ 1346.581697][T20765] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1346.581729][T20765] ? __lock_acquire+0x6b5/0x2cf0 [ 1346.581769][T20765] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1346.581821][T20765] ? __fget_files+0x2a/0x420 [ 1346.581845][T20765] ? __fget_files+0x2a/0x420 [ 1346.581864][T20765] ? __fget_files+0x3a0/0x420 [ 1346.581882][T20765] ? __fget_files+0x2a/0x420 [ 1346.581907][T20765] security_file_ioctl+0xc3/0x2a0 [ 1346.581939][T20765] __se_sys_ioctl+0x47/0x170 [ 1346.581967][T20765] do_syscall_64+0x14d/0xf80 [ 1346.581994][T20765] ? trace_irq_disable+0x3b/0x150 [ 1346.582014][T20765] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1346.582037][T20765] ? clear_bhb_loop+0x40/0x90 [ 1346.582063][T20765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1346.582085][T20765] RIP: 0033:0x7f64b1b9c819 [ 1346.582107][T20765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1346.582125][T20765] RSP: 002b:00007f64b296f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1346.582148][T20765] RAX: ffffffffffffffda RBX: 00007f64b1e15fa0 RCX: 00007f64b1b9c819 [ 1346.582163][T20765] RDX: 0000200000000a40 RSI: 0000000000008993 RDI: 0000000000000003 [ 1346.582177][T20765] RBP: 00007f64b296f090 R08: 0000000000000000 R09: 0000000000000000 [ 1346.582190][T20765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1346.582203][T20765] R13: 00007f64b1e16038 R14: 00007f64b1e15fa0 R15: 00007f64b1f3fa48 [ 1346.582234][T20765] [ 1346.861934][T20765] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1347.294285][T20777] syzkaller0: entered promiscuous mode [ 1347.310207][T20777] syzkaller0: entered allmulticast mode [ 1347.384663][T20777] tipc: Enabled bearer , priority 0 [ 1347.413453][T20774] tipc: Resetting bearer [ 1347.453996][T20774] tipc: Disabling bearer [ 1347.561890][ T9849] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1347.739474][ T9849] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1347.759904][ T9849] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1347.775522][ T9849] usb 5-1: Product: syz [ 1347.789226][ T9849] usb 5-1: Manufacturer: syz [ 1347.810379][ T9849] usb 5-1: SerialNumber: syz [ 1347.971613][ T5894] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1348.131930][ T5894] usb 3-1: Using ep0 maxpacket: 32 [ 1348.142870][ T5894] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1348.160146][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1348.184887][ T5894] usb 3-1: Product: syz [ 1348.194984][ T5894] usb 3-1: Manufacturer: syz [ 1348.210557][ T5894] usb 3-1: SerialNumber: syz [ 1348.236357][ T5894] usb 3-1: config 0 descriptor?? [ 1348.373113][T20780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1348.384308][T20780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1348.402005][ T9849] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1348.415917][ T9849] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1348.660758][ T9849] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 1348.679857][ T9849] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1348.690844][ T9849] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1348.702025][ T9849] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 1348.717121][ T9849] usb 5-1: USB disconnect, device number 106 [ 1348.828390][ T5894] airspy 3-1:0.0: Board ID: 00 [ 1348.833584][ T5894] airspy 3-1:0.0: Firmware version: [ 1349.112037][ T9845] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1349.253282][ T9845] usb 1-1: device descriptor read/64, error -71 [ 1349.429422][T20826] syzkaller0: entered promiscuous mode [ 1349.436087][T20826] syzkaller0: entered allmulticast mode [ 1349.481735][T20826] tipc: Enabled bearer , priority 0 [ 1349.505858][T20824] tipc: Resetting bearer [ 1349.511916][ T9845] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1349.525093][T20830] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1349.568955][T20824] tipc: Disabling bearer [ 1349.661791][ T9845] usb 1-1: device descriptor read/64, error -71 [ 1349.771907][ T9845] usb usb1-port1: attempt power cycle [ 1349.821721][T17416] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1350.001424][T17416] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1350.042244][T17416] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1350.060644][T17416] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1350.085164][T17416] usb 5-1: New USB device found, idVendor=1235, idProduct=8210, bcdDevice= 0.40 [ 1350.094562][T17416] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1350.111619][ T9845] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1350.119491][T17416] usb 5-1: Product: syz [ 1350.129846][T17416] usb 5-1: Manufacturer: syz [ 1350.136452][T17416] usb 5-1: SerialNumber: syz [ 1350.145882][ T9845] usb 1-1: device descriptor read/8, error -71 [ 1350.321822][ T5894] airspy 3-1:0.0: usb_control_msg() failed -110 request 12 [ 1350.331027][ T5894] airspy 3-1:0.0: Registered as swradio24 [ 1350.339665][ T5894] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1350.411702][ T9845] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1350.452512][ T9845] usb 1-1: device descriptor read/8, error -71 [ 1350.456231][T20831] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1350.569532][T17280] usb 4-1: new full-speed USB device number 75 using dummy_hcd [ 1350.695107][ T9845] usb usb1-port1: unable to enumerate USB device [ 1350.819165][T17280] usb 4-1: config 8 has an invalid interface number: 177 but max is 0 [ 1350.830970][T17280] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1350.860916][T17280] usb 4-1: config 8 has no interface number 0 [ 1350.877503][T17280] usb 4-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1350.924722][ T5894] usb 3-1: USB disconnect, device number 60 [ 1350.984877][T17280] usb 4-1: config 8 interface 177 has no altsetting 0 [ 1350.998670][T17280] usb 4-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1351.036040][T17280] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1351.073398][T17280] ir_toy 4-1:8.177: required endpoints not found [ 1351.195397][T17416] usb 5-1: USB disconnect, device number 107 [ 1351.441903][T17280] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1351.518098][T20863] __nla_validate_parse: 50 callbacks suppressed [ 1351.518115][T20863] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3943'. [ 1351.533586][T20863] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3943'. [ 1351.543726][T20863] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3943'. [ 1351.553300][T20863] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3943'. [ 1351.572202][T20863] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3943'. [ 1351.581643][T20863] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3943'. [ 1351.590558][T20863] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3943'. [ 1351.600922][T20863] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3943'. [ 1351.623897][T20863] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3943'. [ 1351.641285][T17280] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1351.650687][T20863] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3943'. [ 1351.659749][T17280] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1351.669230][T17280] usb 6-1: Product: syz [ 1351.678077][T17280] usb 6-1: Manufacturer: syz [ 1351.688191][T17280] usb 6-1: SerialNumber: syz [ 1351.688633][T20863] netlink: 'syz.2.3943': attribute type 4 has an invalid length. [ 1352.897896][T17280] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1352.910620][T20859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1352.920095][T17280] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1352.938844][T20859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1352.950279][T17280] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1352.963362][T17280] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1352.973702][T17280] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1352.986123][T17280] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 1353.004465][T17280] usb 6-1: USB disconnect, device number 59 [ 1353.091644][ T9845] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 1353.135120][T20878] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 1353.247132][ T9845] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 52, changing to 7 [ 1353.271093][ T9845] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 9272, setting to 1024 [ 1353.286056][ T9845] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1353.306478][ T9845] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1353.317135][ T9845] usb 5-1: config 0 descriptor?? [ 1353.541869][T16351] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1353.551930][ T9845] ath6kl: Failed to submit usb control message: -71 [ 1353.567016][ T9845] ath6kl: unable to send the bmi data to the device: -71 [ 1353.576090][ T9845] ath6kl: Unable to send get target info: -71 [ 1353.598633][ T9845] ath6kl: Failed to init ath6kl core: -71 [ 1353.605268][T17416] usb 1-1: new low-speed USB device number 72 using dummy_hcd [ 1353.616299][ T9845] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1353.643148][ T9845] usb 5-1: USB disconnect, device number 108 [ 1353.687940][T20890] tap0: tun_chr_ioctl cmd 1074025677 [ 1353.693945][T20890] tap0: linktype set to 823 [ 1353.721604][T16351] usb 3-1: Using ep0 maxpacket: 16 [ 1353.728877][T16351] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1353.740047][T16351] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1353.750504][T16351] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1353.764091][T16351] usb 3-1: config 0 descriptor?? [ 1353.791909][T17416] usb 1-1: Invalid ep0 maxpacket: 64 [ 1353.870642][ T5894] usb 4-1: USB disconnect, device number 75 [ 1353.901181][T20894] syzkaller0: entered promiscuous mode [ 1353.901932][T20892] 0: reclassify loop, rule prio 0, protocol 800 [ 1353.945098][T17416] usb 1-1: new low-speed USB device number 73 using dummy_hcd [ 1353.952695][T20894] syzkaller0: entered allmulticast mode [ 1354.114218][T17416] usb 1-1: Invalid ep0 maxpacket: 64 [ 1354.123764][T17416] usb usb1-port1: attempt power cycle [ 1354.185623][T16351] mcp2221 0003:04D8:00DD.0033: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 1354.460105][T20907] netlink: 'syz.5.3956': attribute type 4 has an invalid length. [ 1354.591946][T17416] usb 1-1: new low-speed USB device number 74 using dummy_hcd [ 1354.622968][T17416] usb 1-1: Invalid ep0 maxpacket: 64 [ 1354.781877][T17416] usb 1-1: new low-speed USB device number 75 using dummy_hcd [ 1354.803905][T17416] usb 1-1: Invalid ep0 maxpacket: 64 [ 1354.810260][T17416] usb usb1-port1: unable to enumerate USB device [ 1354.829527][ T5894] usb 3-1: USB disconnect, device number 61 [ 1355.001649][T17280] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1355.145873][T20913] xt_hashlimit: size too large, truncated to 1048576 [ 1355.152726][T17280] usb 4-1: Using ep0 maxpacket: 8 [ 1355.168752][T17280] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 1355.177833][T17280] usb 4-1: config 0 has no interface number 0 [ 1355.188185][T17280] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1355.199573][T17280] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1355.209557][T17280] usb 4-1: Product: syz [ 1355.218068][T17280] usb 4-1: Manufacturer: syz [ 1355.231635][T20914] xt_hashlimit: size too large, truncated to 1048576 [ 1355.241757][T17280] usb 4-1: SerialNumber: syz [ 1355.263755][T17280] usb 4-1: config 0 descriptor?? [ 1355.503892][T20911] create_pit_timer: 16 callbacks suppressed [ 1355.503912][T20911] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1355.534578][T20911] kvm: pic: single mode not supported [ 1355.651758][T17416] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 1355.666612][T20927] FAULT_INJECTION: forcing a failure. [ 1355.666612][T20927] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1355.681223][T20927] CPU: 0 UID: 0 PID: 20927 Comm: syz.2.3961 Tainted: G L syzkaller #0 PREEMPT(full) [ 1355.681255][T20927] Tainted: [L]=SOFTLOCKUP [ 1355.681263][T20927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1355.681276][T20927] Call Trace: [ 1355.681291][T20927] [ 1355.681300][T20927] dump_stack_lvl+0xe8/0x150 [ 1355.681336][T20927] should_fail_ex+0x412/0x560 [ 1355.681372][T20927] _copy_from_user+0x2d/0xb0 [ 1355.681399][T20927] kstrtouint_from_user+0xd6/0x180 [ 1355.681423][T20927] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1355.681460][T20927] proc_fail_nth_write+0x8e/0x210 [ 1355.681501][T20927] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1355.681538][T20927] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1355.681570][T20927] vfs_write+0x29a/0xb90 [ 1355.681602][T20927] ? __pfx_vfs_write+0x10/0x10 [ 1355.681628][T20927] ? __fget_files+0x2a/0x420 [ 1355.681652][T20927] ? __fget_files+0x3a0/0x420 [ 1355.681669][T20927] ? __fget_files+0x2a/0x420 [ 1355.681697][T20927] ksys_write+0x150/0x270 [ 1355.681722][T20927] ? __pfx_ksys_write+0x10/0x10 [ 1355.681757][T20927] do_syscall_64+0x14d/0xf80 [ 1355.681784][T20927] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1355.681805][T20927] ? clear_bhb_loop+0x40/0x90 [ 1355.681830][T20927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1355.681850][T20927] RIP: 0033:0x7f64b1b5d04e [ 1355.681872][T20927] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1355.681890][T20927] RSP: 002b:00007f64b296efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1355.681914][T20927] RAX: ffffffffffffffda RBX: 00007f64b296f6c0 RCX: 00007f64b1b5d04e [ 1355.681929][T20927] RDX: 0000000000000001 RSI: 00007f64b296f0a0 RDI: 0000000000000004 [ 1355.681942][T20927] RBP: 00007f64b296f090 R08: 0000000000000000 R09: 0000000000000000 [ 1355.681955][T20927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1355.681967][T20927] R13: 00007f64b1e16038 R14: 00007f64b1e15fa0 R15: 00007f64b1f3fa48 [ 1355.682001][T20927] [ 1355.938337][T17280] uvcvideo 4-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1355.948149][T17280] uvcvideo 4-1:0.31: Entity type for entity Output 32774 was not initialized! [ 1355.959297][T17280] uvcvideo 4-1:0.31: Failed to create links for entity 5 [ 1355.968157][T17280] uvcvideo 4-1:0.31: Failed to register entities (-22). [ 1355.987888][T17416] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1355.999650][T17416] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1356.012308][T17280] usb 4-1: USB disconnect, device number 76 [ 1356.021541][T17416] usb 5-1: Product: syz [ 1356.026876][T17416] usb 5-1: Manufacturer: syz [ 1356.046439][T17416] usb 5-1: SerialNumber: syz [ 1356.471572][T17280] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 1356.588210][T20920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1356.596972][T17416] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1356.610287][T20920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1356.618612][T17416] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1356.660061][T17280] usb 3-1: config 8 has an invalid interface number: 177 but max is 0 [ 1356.667712][T17416] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1356.770330][T17280] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1356.798197][T17280] usb 3-1: config 8 has no interface number 0 [ 1356.817939][T17280] usb 3-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1356.841719][T17280] usb 3-1: config 8 interface 177 has no altsetting 0 [ 1357.093804][T17280] usb 3-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1357.103107][T17280] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1357.128526][T17416] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1357.157076][T17416] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1357.166389][T17280] ir_toy 3-1:8.177: required endpoints not found [ 1357.233660][T20951] __nla_validate_parse: 51 callbacks suppressed [ 1357.233677][T20951] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3968'. [ 1357.253091][T20951] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3968'. [ 1357.259239][T20952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3968'. [ 1357.271164][T20952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3968'. [ 1357.318984][T20954] IPv4: Oversized IP packet from 127.202.26.0 [ 1357.336184][T20952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3968'. [ 1357.397142][T20952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3968'. [ 1357.409702][T20952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3968'. [ 1357.419869][T20952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3968'. [ 1357.442579][T20952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3968'. [ 1357.611771][T20952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3968'. [ 1357.626365][T20963] netlink: 'syz.0.3968': attribute type 4 has an invalid length. [ 1358.172000][T17416] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 1358.229480][T17416] usb 5-1: USB disconnect, device number 109 [ 1358.851207][T20968] sctp: [Deprecated]: syz.4.3972 (pid 20968) Use of int in max_burst socket option. [ 1358.851207][T20968] Use struct sctp_assoc_value instead [ 1358.904009][T20968] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1359.745997][T20987] macvtap1: entered allmulticast mode [ 1359.762518][T20987] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1359.885390][T20983] binder: BINDER_SET_CONTEXT_MGR already set [ 1359.891728][T20983] binder: 20982:20983 ioctl 4018620d 200000001000 returned -16 [ 1359.900086][T20983] binder: 20982:20983 ioctl 4008af03 200000000c00 returned -22 [ 1359.942230][T20987] team0: Device macvtap1 is already an upper device of the team interface [ 1360.183068][ T9843] usb 3-1: USB disconnect, device number 62 [ 1360.314016][T20992] bridge0: entered promiscuous mode [ 1360.320907][T20992] ip6gretap0: entered promiscuous mode [ 1360.400637][T20998] netlink: 'syz.2.3979': attribute type 21 has an invalid length. [ 1360.453593][T20998] netlink: 'syz.2.3979': attribute type 21 has an invalid length. [ 1360.592150][ T9849] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1360.631632][T17280] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1360.699584][T21008] syzkaller0: entered promiscuous mode [ 1360.707592][T21008] syzkaller0: entered allmulticast mode [ 1360.755529][ T9849] usb 6-1: Invalid ep0 maxpacket: 9 [ 1360.769846][T21008] tipc: Enabled bearer , priority 0 [ 1360.785773][T17280] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1360.808141][T17280] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1360.817086][T21007] tipc: Resetting bearer [ 1360.826633][T17280] usb 1-1: Product: syz [ 1360.842062][T17280] usb 1-1: Manufacturer: syz [ 1360.847029][T17280] usb 1-1: SerialNumber: syz [ 1360.875149][T21007] tipc: Disabling bearer [ 1360.891645][ T9849] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1360.999943][T21021] netlink: 'syz.2.3986': attribute type 4 has an invalid length. [ 1361.051638][ T9849] usb 6-1: Invalid ep0 maxpacket: 9 [ 1361.063904][ T9849] usb usb6-port1: attempt power cycle [ 1361.328026][T17280] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1361.328942][T20997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1361.348834][T17280] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1361.360341][T20997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1361.411571][ T9849] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1361.433469][ T9849] usb 6-1: Invalid ep0 maxpacket: 9 [ 1361.647857][T17280] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1361.660336][ T9849] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1361.683252][T17280] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1361.696754][ T9849] usb 6-1: Invalid ep0 maxpacket: 9 [ 1361.723655][ T9849] usb usb6-port1: unable to enumerate USB device [ 1361.890438][T17280] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1362.032527][T17280] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 1362.050666][T17280] usb 1-1: USB disconnect, device number 76 [ 1362.247381][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.254230][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.307030][ T9849] usb 4-1: new full-speed USB device number 77 using dummy_hcd [ 1362.531879][T17416] usb 3-1: new low-speed USB device number 63 using dummy_hcd [ 1362.647731][ T9849] usb 4-1: config 8 has an invalid interface number: 177 but max is 0 [ 1362.666569][ T9849] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1362.681616][T17416] usb 3-1: device descriptor read/64, error -71 [ 1362.715011][ T9849] usb 4-1: config 8 has no interface number 0 [ 1362.754411][ T9849] usb 4-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1362.781543][ T9849] usb 4-1: config 8 interface 177 has no altsetting 0 [ 1362.834569][T13717] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1362.850538][T13717] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1362.871990][ T9849] usb 4-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1362.887335][T13717] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1362.913033][T13717] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1362.931804][ T9849] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1362.941555][T17416] usb 3-1: new low-speed USB device number 64 using dummy_hcd [ 1363.056368][ T9849] ir_toy 4-1:8.177: required endpoints not found [ 1363.093361][T17416] usb 3-1: device descriptor read/64, error -71 [ 1363.381663][ T9849] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 1363.381909][T17416] usb usb3-port1: attempt power cycle [ 1363.564608][ T9849] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 1363.573097][ T9849] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1363.600658][ T9849] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1363.638873][ T9849] usb 5-1: config 220 has no interface number 2 [ 1363.661579][ T9849] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1363.708517][ T9849] usb 5-1: config 220 interface 0 has no altsetting 0 [ 1363.721114][ T9849] usb 5-1: config 220 interface 76 has no altsetting 0 [ 1363.739382][ T9849] usb 5-1: config 220 interface 1 has no altsetting 0 [ 1363.752275][T17416] usb 3-1: new low-speed USB device number 65 using dummy_hcd [ 1363.763756][ T9849] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1363.783136][T17416] usb 3-1: device descriptor read/8, error -71 [ 1363.783494][ T9849] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1363.817933][ T9849] usb 5-1: Product: syz [ 1363.828917][ T9849] usb 5-1: Manufacturer: syz [ 1363.841173][ T9849] usb 5-1: SerialNumber: syz [ 1364.011674][T21060] syzkaller0: entered promiscuous mode [ 1364.017301][T21060] syzkaller0: entered allmulticast mode [ 1364.039436][T17416] usb 3-1: new low-speed USB device number 66 using dummy_hcd [ 1364.099661][T21060] tipc: Enabled bearer , priority 0 [ 1364.136753][T17416] usb 3-1: device descriptor read/8, error -71 [ 1364.181994][T21059] tipc: Resetting bearer [ 1364.259726][T21059] tipc: Disabling bearer [ 1364.266723][T17416] usb usb3-port1: unable to enumerate USB device [ 1364.768497][T21072] __nla_validate_parse: 109 callbacks suppressed [ 1364.768521][T21072] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4001'. [ 1364.849527][ T9849] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1364.868777][ T9849] uvcvideo 5-1:220.0: No valid video chain found. [ 1364.879000][ T9849] usb 5-1: selecting invalid altsetting 0 [ 1364.907120][ T9849] usb 5-1: selecting invalid altsetting 0 [ 1364.916355][ T9849] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 1364.930807][ T9849] usb 5-1: USB disconnect, device number 110 [ 1364.992279][ T5894] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1365.151812][ T5894] usb 1-1: Using ep0 maxpacket: 16 [ 1365.160720][ T5894] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1365.182616][ T5894] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 1365.219015][ T5894] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1365.240382][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1365.263995][ T5894] usb 1-1: Product: syz [ 1365.268206][ T5894] usb 1-1: Manufacturer: syz [ 1365.274578][T16351] usb 4-1: USB disconnect, device number 77 [ 1365.284589][ T5894] usb 1-1: SerialNumber: syz [ 1365.391853][T17416] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1365.609988][ T5894] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 1365.624320][ T5894] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1365.768498][T17416] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1365.777893][T17416] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1365.779904][ T5894] usb 1-1: USB disconnect, device number 77 [ 1365.831587][T17416] usb 3-1: Product: syz [ 1365.836944][T17416] usb 3-1: Manufacturer: syz [ 1365.871504][T17416] usb 3-1: SerialNumber: syz [ 1365.872137][ T6417] udevd[6417]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1366.301836][T21087] macsec1: entered promiscuous mode [ 1366.318325][T21087] mac80211_hwsim hwsim44 wlan0: entered promiscuous mode [ 1366.350503][T21087] macsec1: entered allmulticast mode [ 1366.368633][T21087] mac80211_hwsim hwsim44 wlan0: entered allmulticast mode [ 1366.403600][T21093] syzkaller0: entered promiscuous mode [ 1366.409215][T21093] syzkaller0: entered allmulticast mode [ 1366.434573][T21093] tipc: Enabled bearer , priority 0 [ 1366.444447][T21092] tipc: Resetting bearer [ 1366.474011][T21092] tipc: Disabling bearer [ 1366.550658][T17416] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1366.563563][T21074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1366.572040][ T9845] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1366.592297][T17416] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1366.604610][T21074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1366.632257][T17416] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1366.817783][T17416] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1366.838684][T17416] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1366.886153][ T9845] usb 4-1: Using ep0 maxpacket: 32 [ 1366.892022][T17416] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 1366.913579][ T9845] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1366.937928][T17416] usb 3-1: USB disconnect, device number 67 [ 1366.961591][ T9845] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1366.968380][ T9845] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1367.085884][ T9845] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1367.102442][ T9845] usb 4-1: config 0 descriptor?? [ 1367.566078][ T9845] corsair-cpro 0003:1B1C:0C10.0034: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.3-1/input0 [ 1367.674996][ T9845] corsair-cpro 0003:1B1C:0C10.0034: probe with driver corsair-cpro failed with error -71 [ 1367.708034][ T9845] usb 4-1: USB disconnect, device number 78 [ 1367.770051][T21118] fido_id[21118]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1367.815123][ T5894] usb 3-1: new full-speed USB device number 68 using dummy_hcd [ 1367.993610][ T5894] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1368.011716][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1368.042603][ T5894] usb 3-1: config 0 descriptor?? [ 1368.051074][ T5894] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1368.101624][T16351] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1368.293648][T16351] usb 1-1: Using ep0 maxpacket: 16 [ 1368.309482][T16351] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1368.322066][T16351] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1368.433859][T16351] usb 1-1: Product: syz [ 1368.438462][T16351] usb 1-1: Manufacturer: syz [ 1368.451196][T16351] usb 1-1: SerialNumber: syz [ 1368.463894][ T5894] gp8psk: usb in 128 operation failed. [ 1368.470175][ T5894] gp8psk: usb in 137 operation failed. [ 1368.481641][ T5894] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1368.498171][ T5894] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1368.499599][T16351] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1368.567660][T16351] r8152-cfgselector 1-1: config 0 descriptor?? [ 1368.590853][ T5894] usb 3-1: USB disconnect, device number 68 [ 1369.043929][ T5894] r8152-cfgselector 1-1: USB disconnect, device number 78 [ 1369.852433][T16351] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1370.047423][T16351] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1370.066917][T16351] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1370.091837][T16351] usb 1-1: Product: syz [ 1370.109434][T16351] usb 1-1: Manufacturer: syz [ 1370.118552][T16351] usb 1-1: SerialNumber: syz [ 1370.531619][ T5894] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 1370.581665][ T9845] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1370.595855][T16351] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1370.609111][T21143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1370.620739][T21143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1370.671707][ T5894] usb 5-1: device descriptor read/64, error -71 [ 1370.672561][T16351] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1370.694612][T16351] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1370.707913][T16351] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1370.731111][T21179] netlink: 92 bytes leftover after parsing attributes in process `syz.3.4035'. [ 1370.747955][T16351] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1370.764161][ T9845] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1370.774857][ T9845] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1370.785157][ T9845] usb 6-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 1370.797237][ T9845] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1370.805921][ T9845] usb 6-1: Product: syz [ 1370.810359][ T9845] usb 6-1: Manufacturer: syz [ 1370.827342][ T9845] usb 6-1: SerialNumber: syz [ 1370.883274][T16351] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 1370.893561][ T9845] usb 6-1: config 0 descriptor?? [ 1370.911567][ T5894] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 1370.916171][ T9845] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1370.930606][T16351] usb 1-1: USB disconnect, device number 79 [ 1370.978211][ T9845] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1370.989508][ T9845] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 1371.034048][ T9845] usb 6-1: media controller created [ 1371.051621][ T5894] usb 5-1: device descriptor read/64, error -71 [ 1371.087081][ T9845] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1371.163443][ T5894] usb usb5-port1: attempt power cycle [ 1371.201969][T21185] ¾x9ÿ„⃪ןã: renamed from lo [ 1371.271231][ T9845] DVB: Unable to find symbol tda10046_attach() [ 1371.287167][ T9845] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 1371.309367][ T9845] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 1371.394161][T21187] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4036'. [ 1371.581676][ T5894] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 1371.612373][ T5894] usb 5-1: device descriptor read/8, error -71 [ 1371.654014][T17280] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1371.823757][T17280] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1371.834601][T17280] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1371.871573][ T5894] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 1371.922104][T17280] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1371.942451][ T5894] usb 5-1: device descriptor read/8, error -71 [ 1371.957282][T17280] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1371.964059][ T9845] dvb_usb_m920x 6-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 1371.971626][T17280] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1371.996426][T17280] usb 1-1: Product: syz [ 1372.000674][T17280] usb 1-1: Manufacturer: syz [ 1372.051733][T17280] usb 1-1: SerialNumber: syz [ 1372.062282][ T5894] usb usb5-port1: unable to enumerate USB device [ 1372.092145][ T9845] usb 6-1: USB disconnect, device number 64 [ 1372.483263][ T5894] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1372.741595][ T5894] usb 4-1: Using ep0 maxpacket: 16 [ 1372.754322][ T5894] usb 4-1: config 0 has no interfaces? [ 1372.763005][ T5894] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1372.773940][ T5894] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1372.806468][ T5894] usb 4-1: Manufacturer: syz [ 1372.823171][ T5894] usb 4-1: config 0 descriptor?? [ 1373.135102][T17280] cdc_ncm 1-1:1.0: SET_NTB_FORMAT failed [ 1373.163511][T17280] cdc_ncm 1-1:1.0: bind() failure [ 1373.345433][T17280] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1373.352530][T17280] cdc_ncm 1-1:1.1: bind() failure [ 1373.418113][T17280] usb 1-1: USB disconnect, device number 80 [ 1373.590422][T21208] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4042'. [ 1373.647205][T21197] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1373.706206][T21208] fuse: Unknown parameter 'dont_hash' [ 1373.839693][T21197] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1374.106975][T21212] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4044'. [ 1374.116892][T21212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4044'. [ 1374.381416][T16351] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 1374.706434][T16351] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1374.716018][T16351] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1374.731904][T16351] usb 5-1: Product: syz [ 1374.743401][T16351] usb 5-1: Manufacturer: syz [ 1374.755170][T16351] usb 5-1: SerialNumber: syz [ 1375.220313][T16351] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1375.221126][T21217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1375.236223][T16351] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1375.255326][T21217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1375.334555][T21231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4050'. [ 1375.394608][T21236] loop5: detected capacity change from 0 to 7 [ 1375.405524][T16351] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1375.431208][T21236] Dev loop5: unable to read RDB block 7 [ 1375.443169][T16351] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1375.451655][T21236] loop5: unable to read partition table [ 1375.463078][T16351] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1375.495018][T21236] loop5: partition table beyond EOD, truncated [ 1375.495285][T17280] usb 4-1: USB disconnect, device number 79 [ 1375.554369][T21236] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1375.591183][T16351] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 1375.645529][T16351] usb 5-1: USB disconnect, device number 115 [ 1375.711831][T21233] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4048'. [ 1376.011803][T17416] usb 6-1: new full-speed USB device number 65 using dummy_hcd [ 1376.253523][T17416] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1376.442258][T17416] usb 6-1: config 1 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1376.616356][T17416] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1376.625557][T17416] usb 6-1: New USB device found, idVendor=2087, idProduct=0703, bcdDevice= 0.40 [ 1376.640504][T17416] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1376.670012][T17416] usb 6-1: Product: syz [ 1376.680197][T17416] usb 6-1: Manufacturer: syz [ 1376.684988][T17416] usb 6-1: SerialNumber: syz [ 1376.905352][T17416] usbhid 6-1:1.0: couldn't find an input interrupt endpoint [ 1376.998248][T17416] usb 6-1: USB disconnect, device number 65 [ 1377.030744][T21260] binder: BINDER_SET_CONTEXT_MGR already set [ 1377.037100][T21260] binder: 21254:21260 ioctl 4018620d 200000004a80 returned -16 [ 1377.061604][ T9849] usb 5-1: new full-speed USB device number 116 using dummy_hcd [ 1377.265456][ T9849] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1377.274592][ T9849] usb 5-1: not running at top speed; connect to a high speed hub [ 1377.286683][ T9849] usb 5-1: config 1 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1377.320066][ T9849] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1377.346455][ T9849] usb 5-1: string descriptor 0 read error: -22 [ 1377.354105][ T9849] usb 5-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.40 [ 1377.371950][ T9849] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1377.419822][T21258] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1377.602014][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1377.683986][T21268] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4059'. [ 1377.709547][T21268] netlink: 'syz.3.4059': attribute type 10 has an invalid length. [ 1377.717724][T21268] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4059'. [ 1377.853651][ T9849] gt683r_led 0003:1770:FF00.0035: unknown main item tag 0x2 [ 1377.863221][ T9849] gt683r_led 0003:1770:FF00.0035: unknown main item tag 0x7 [ 1377.870739][ T9849] gt683r_led 0003:1770:FF00.0035: unknown global tag 0xe [ 1377.880097][ T9849] gt683r_led 0003:1770:FF00.0035: item 0 1 1 14 parsing failed [ 1378.104287][ T9849] gt683r_led 0003:1770:FF00.0035: hid parsing failed [ 1378.121236][ T9849] gt683r_led 0003:1770:FF00.0035: probe with driver gt683r_led failed with error -22 [ 1378.226391][T21271] netlink: 'syz.0.4058': attribute type 7 has an invalid length. [ 1378.687866][ T9849] usb 5-1: USB disconnect, device number 116 [ 1379.148508][ T9845] IPVS: starting estimator thread 0... [ 1379.241576][T21284] IPVS: using max 29 ests per chain, 69600 per kthread [ 1379.906999][ T30] audit: type=1326 audit(1775728605.816:4026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21289 comm="syz.4.4064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18e959c819 code=0x7ffc0000 [ 1379.987512][ T30] audit: type=1326 audit(1775728605.816:4027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21289 comm="syz.4.4064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18e959c819 code=0x7ffc0000 [ 1380.068609][ T30] audit: type=1326 audit(1775728605.826:4029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21289 comm="syz.4.4064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f18e959c819 code=0x7ffc0000 [ 1380.120770][ T30] audit: type=1326 audit(1775728605.826:4030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21289 comm="syz.4.4064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18e959c819 code=0x7ffc0000 [ 1380.153332][ T30] audit: type=1326 audit(1775728605.826:4031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21289 comm="syz.4.4064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18e959c819 code=0x7ffc0000 [ 1380.201731][ T9849] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1380.240394][ T30] audit: type=1326 audit(1775728605.816:4028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21289 comm="syz.4.4064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18e959c819 code=0x7ffc0000 [ 1380.265586][ T30] audit: type=1326 audit(1775728605.826:4032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21289 comm="syz.4.4064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18e959c819 code=0x7ffc0000 [ 1380.288608][ T30] audit: type=1326 audit(1775728605.826:4033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21289 comm="syz.4.4064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f18e959c819 code=0x7ffc0000 [ 1380.311862][ T30] audit: type=1326 audit(1775728605.826:4034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21289 comm="syz.4.4064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18e959c819 code=0x7ffc0000 [ 1380.419628][ T9849] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1380.449923][ T9849] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1380.461541][ T30] audit: type=1326 audit(1775728605.826:4035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21289 comm="syz.4.4064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18e959c819 code=0x7ffc0000 [ 1380.520271][ T9849] usb 1-1: Product: syz [ 1380.542619][ T9849] usb 1-1: Manufacturer: syz [ 1380.552304][ T9849] usb 1-1: SerialNumber: syz [ 1380.651533][T21306] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4069'. [ 1381.058589][ T9849] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1381.058617][T21293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1381.058987][T21293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1381.105797][ T9849] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1381.164531][ T9849] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1381.205999][ T9849] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1381.226464][ T9849] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1381.273349][ T9849] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 1381.293307][ T9849] usb 1-1: USB disconnect, device number 81 [ 1381.456526][T21323] tipc: Enabling of bearer rejected, failed to enable media [ 1381.465783][T21318] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4070'. [ 1381.612492][T21330] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1381.841841][ T9849] usb 5-1: new full-speed USB device number 117 using dummy_hcd [ 1381.852288][ T9845] usb 4-1: new full-speed USB device number 80 using dummy_hcd [ 1381.930452][T21333] [U]  [ 1382.023484][ T9845] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1382.034850][T17280] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1382.042639][ T9845] usb 4-1: config 1 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1382.043501][ T9849] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1382.056428][ T9845] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1382.096039][ T9845] usb 4-1: New USB device found, idVendor=2087, idProduct=0703, bcdDevice= 0.40 [ 1382.105717][ T9845] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1382.105776][ T9849] usb 5-1: not running at top speed; connect to a high speed hub [ 1382.114040][ T9845] usb 4-1: Product: syz [ 1382.132093][ T9845] usb 4-1: Manufacturer: syz [ 1382.138835][ T9845] usb 4-1: SerialNumber: syz [ 1382.139944][ T9849] usb 5-1: config 233 has an invalid interface number: 77 but max is 0 [ 1382.157001][ T9849] usb 5-1: config 233 has no interface number 0 [ 1382.233101][T17280] usb 6-1: Using ep0 maxpacket: 8 [ 1382.701371][ T9845] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 1382.749109][ T9845] usb 4-1: USB disconnect, device number 80 [ 1382.984379][ T9849] usb 5-1: New USB device found, idVendor=0421, idProduct=042d, bcdDevice=67.12 [ 1382.999989][T17280] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1383.020250][ T9849] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1383.069880][T17280] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1383.084528][ T9849] usb 5-1: Product: syz [ 1383.117178][ T9849] usb 5-1: Manufacturer: syz [ 1383.161771][ T9849] usb 5-1: SerialNumber: syz [ 1383.181710][T17280] usb 6-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1383.231359][T17280] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1383.414974][T17280] usb 6-1: Product: syz [ 1383.475190][T17280] usb 6-1: Manufacturer: syz [ 1383.481792][T21317] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4072'. [ 1383.521993][T17280] usb 6-1: SerialNumber: syz [ 1383.616921][T21350] Cannot find del_set index 2 as target [ 1383.923937][T17280] usb 6-1: config 0 descriptor?? [ 1384.331718][ T9845] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1384.555470][ T9845] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1384.597886][ T9849] rndis_host 5-1:233.77: skipping garbage [ 1384.612961][ T9849] usb 5-1: bad CDC descriptors [ 1384.635011][ T9849] cdc_acm 5-1:233.77: skipping garbage [ 1384.677381][ T9849] usb 5-1: USB disconnect, device number 117 [ 1384.832111][ T9845] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1384.960925][ T9845] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1385.023210][ T9845] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1385.085965][T21354] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1385.117571][ T9845] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1385.311635][ T9849] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1385.386005][T16351] usb 3-1: USB disconnect, device number 69 [ 1385.531642][ T9845] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 1385.546382][ T9849] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1385.565022][ T9849] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1385.691638][ T9845] usb 5-1: device descriptor read/64, error -71 [ 1385.698752][ T9849] usb 4-1: Product: syz [ 1385.707166][T16351] usb 6-1: USB disconnect, device number 66 [ 1385.750100][ T9849] usb 4-1: Manufacturer: syz [ 1385.761312][ T9849] usb 4-1: SerialNumber: syz [ 1385.901591][T17280] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1385.931641][ T9845] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 1386.061565][ T9845] usb 5-1: device descriptor read/64, error -71 [ 1386.081137][T17280] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1386.090387][T17280] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1386.101730][T17280] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1386.121841][T17280] usb 1-1: config 1 has no interface number 1 [ 1386.135219][T17280] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1386.172089][ T9845] usb usb5-port1: attempt power cycle [ 1386.188384][T17280] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1386.225605][T17280] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1386.239016][T21365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1386.247926][ T9849] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1386.252077][T21365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1386.259853][T17280] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1386.280672][ T9849] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1386.300706][T17280] usb 1-1: Product: syz [ 1386.311900][T17280] usb 1-1: Manufacturer: syz [ 1386.316605][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 1386.324520][ T9849] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1386.346368][ T9849] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1386.360377][T17280] usb 1-1: SerialNumber: syz [ 1386.374191][ T9849] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1386.396292][ T9849] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 1386.427961][ T9849] usb 4-1: USB disconnect, device number 81 [ 1386.511731][ T9845] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 1386.534747][ T9845] usb 5-1: device descriptor read/8, error -71 [ 1386.605750][T17280] usb 1-1: No endpoint at altset 1, falling back to MIDI 1.0 [ 1386.628757][T17280] usb 1-1: MIDIStreaming interface descriptor not found [ 1386.771730][ T9845] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 1386.792397][ T9845] usb 5-1: device descriptor read/8, error -71 [ 1386.819266][T17280] usb 1-1: USB disconnect, device number 82 [ 1386.877188][ T6094] udevd[6094]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1386.929311][ T9845] usb usb5-port1: unable to enumerate USB device [ 1387.799319][T21391] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20000 [ 1387.986704][T21389] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4092'. [ 1388.044487][T16351] usb 1-1: new full-speed USB device number 83 using dummy_hcd [ 1388.188097][T21405] IPVS: stopping backup sync thread 21410 ... [ 1388.191758][T21410] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan1, syncid = 4, id = 0 [ 1388.223351][T16351] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1388.239313][T16351] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1388.254139][T16351] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1388.263691][T16351] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1388.272188][ T9845] usb 3-1: new full-speed USB device number 70 using dummy_hcd [ 1388.284185][T16351] usb 1-1: Product: syz [ 1388.290647][T16351] usb 1-1: Manufacturer: syz [ 1388.320222][T16351] usb 1-1: SerialNumber: syz [ 1388.434471][ T9845] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1388.463412][ T9845] usb 3-1: config 1 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1388.497212][ T9845] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1388.517272][ T9845] usb 3-1: New USB device found, idVendor=2087, idProduct=0703, bcdDevice= 0.40 [ 1388.529115][ T9845] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1388.541023][ T9845] usb 3-1: Product: syz [ 1388.545836][ T9845] usb 3-1: Manufacturer: syz [ 1388.552705][ T9845] usb 3-1: SerialNumber: syz [ 1388.763569][T16351] usb 1-1: cannot find UAC_HEADER [ 1388.783425][ T9845] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 1388.815856][ T9845] usb 3-1: USB disconnect, device number 70 [ 1388.875053][T16351] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1388.892083][T16351] usb 1-1: USB disconnect, device number 83 [ 1388.915560][ T6417] udevd[6417]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1388.992239][ T5894] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 1389.063177][T21434] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4104'. [ 1389.082140][T21434] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4104'. [ 1389.101065][ T30] kauditd_printk_skb: 269 callbacks suppressed [ 1389.101087][ T30] audit: type=1400 audit(1775728614.966:4305): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="\" pid=21430 comm="syz.5.4104" [ 1389.171565][ T5894] usb 5-1: Using ep0 maxpacket: 32 [ 1389.183036][ T5894] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 1389.191330][ T5894] usb 5-1: config 0 has no interface number 0 [ 1389.205419][ T5894] usb 5-1: config 0 interface 67 altsetting 0 has a duplicate endpoint with address 0x82, skipping [ 1389.236240][ T5894] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1389.255856][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1389.271621][ T5894] usb 5-1: Product: syz [ 1389.277596][ T5894] usb 5-1: Manufacturer: syz [ 1389.289067][ T5894] usb 5-1: SerialNumber: syz [ 1389.300515][ T5894] usb 5-1: config 0 descriptor?? [ 1389.321295][ T5894] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1389.402378][ T5894] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -22 [ 1390.069573][T21429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1390.090583][T21429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1390.114961][ T5894] usb 5-1: USB disconnect, device number 122 [ 1390.545400][T21450] lo: MTU too low for tipc bearer [ 1390.566432][T21450] tipc: Enabling of bearer rejected, failed to enable media [ 1390.591347][T21450] FAULT_INJECTION: forcing a failure. [ 1390.591347][T21450] name failslab, interval 1, probability 0, space 0, times 0 [ 1390.625718][T21450] CPU: 1 UID: 0 PID: 21450 Comm: syz.3.4109 Tainted: G L syzkaller #0 PREEMPT(full) [ 1390.625763][T21450] Tainted: [L]=SOFTLOCKUP [ 1390.625771][T21450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1390.625784][T21450] Call Trace: [ 1390.625793][T21450] [ 1390.625803][T21450] dump_stack_lvl+0xe8/0x150 [ 1390.625840][T21450] should_fail_ex+0x412/0x560 [ 1390.625879][T21450] should_failslab+0xa8/0x100 [ 1390.625907][T21450] ? skb_clone+0x212/0x3a0 [ 1390.625936][T21450] kmem_cache_alloc_noprof+0x87/0x650 [ 1390.625977][T21450] skb_clone+0x212/0x3a0 [ 1390.626009][T21450] __netlink_deliver_tap+0x404/0x850 [ 1390.626048][T21450] ? netlink_deliver_tap+0x2e/0x1b0 [ 1390.626073][T21450] netlink_deliver_tap+0x19c/0x1b0 [ 1390.626098][T21450] netlink_sendskb+0x68/0x140 [ 1390.626132][T21450] netlink_unicast+0x3a3/0x9b0 [ 1390.626180][T21450] ? __pfx_netlink_unicast+0x10/0x10 [ 1390.626223][T21450] netlink_rcv_skb+0x2b6/0x4b0 [ 1390.626247][T21450] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1390.626277][T21450] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1390.626320][T21450] ? down_read+0x272/0x2e0 [ 1390.626353][T21450] ? genl_rcv+0xd/0x40 [ 1390.626382][T21450] genl_rcv+0x28/0x40 [ 1390.626415][T21450] netlink_unicast+0x80f/0x9b0 [ 1390.626456][T21450] ? __pfx_netlink_unicast+0x10/0x10 [ 1390.626490][T21450] ? netlink_sendmsg+0x650/0xb40 [ 1390.626510][T21450] ? skb_put+0x11b/0x210 [ 1390.626539][T21450] netlink_sendmsg+0x813/0xb40 [ 1390.626573][T21450] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1390.626601][T21450] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1390.626635][T21450] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1390.626663][T21450] ____sys_sendmsg+0x972/0x9f0 [ 1390.626710][T21450] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1390.626757][T21450] ? import_iovec+0x73/0xa0 [ 1390.626787][T21450] ___sys_sendmsg+0x2a5/0x360 [ 1390.626821][T21450] ? __pfx____sys_sendmsg+0x10/0x10 [ 1390.626895][T21450] ? __fget_files+0x2a/0x420 [ 1390.626915][T21450] ? __fget_files+0x3a0/0x420 [ 1390.626948][T21450] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1390.626979][T21450] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1390.627018][T21450] ? __pfx_ksys_write+0x10/0x10 [ 1390.627055][T21450] do_syscall_64+0x14d/0xf80 [ 1390.627082][T21450] ? trace_irq_disable+0x3b/0x150 [ 1390.627101][T21450] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1390.627123][T21450] ? clear_bhb_loop+0x40/0x90 [ 1390.627150][T21450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1390.627171][T21450] RIP: 0033:0x7f8c9d99c819 [ 1390.627193][T21450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1390.627211][T21450] RSP: 002b:00007f8c9e871028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1390.627241][T21450] RAX: ffffffffffffffda RBX: 00007f8c9dc15fa0 RCX: 00007f8c9d99c819 [ 1390.627257][T21450] RDX: 0000000004044844 RSI: 0000200000000300 RDI: 0000000000000003 [ 1390.627272][T21450] RBP: 00007f8c9e871090 R08: 0000000000000000 R09: 0000000000000000 [ 1390.627286][T21450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1390.627299][T21450] R13: 00007f8c9dc16038 R14: 00007f8c9dc15fa0 R15: 00007f8c9dd3fa48 [ 1390.627334][T21450] [ 1391.075033][T21456] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4111'. [ 1391.388459][T21468] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4113'. [ 1391.405272][ T5894] usb 5-1: new full-speed USB device number 123 using dummy_hcd [ 1391.646847][ T5894] usb 5-1: config 8 has an invalid interface number: 177 but max is 0 [ 1391.665392][ T5894] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1391.773305][ T5894] usb 5-1: config 8 has no interface number 0 [ 1391.807575][ T5894] usb 5-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1391.862034][T21476] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 1391.868675][T21476] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1391.882666][T21476] vhci_hcd vhci_hcd.0: Device attached [ 1391.887219][ T5894] usb 5-1: config 8 interface 177 has no altsetting 0 [ 1391.926904][ T5894] usb 5-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1391.958445][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1392.070547][ T5894] ir_toy 5-1:8.177: required endpoints not found [ 1392.124260][T16351] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 1392.465040][T17280] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1392.811609][T17280] usb 3-1: device descriptor read/64, error -71 [ 1393.103313][T17280] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1393.254129][T17280] usb 3-1: device descriptor read/64, error -71 [ 1393.385028][T17280] usb usb3-port1: attempt power cycle [ 1393.732075][T17280] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1393.743487][T21495] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4118'. [ 1393.757538][T17280] usb 3-1: device descriptor read/8, error -71 [ 1393.951633][ T5894] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1394.005035][T17280] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1394.032127][T17280] usb 3-1: device descriptor read/8, error -71 [ 1394.106080][ T5894] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1394.117823][ T5894] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1394.126927][ T5894] usb 6-1: Product: syz [ 1394.134107][ T5894] usb 6-1: Manufacturer: syz [ 1394.142358][T17280] usb usb3-port1: unable to enumerate USB device [ 1394.150277][ T5894] usb 6-1: SerialNumber: syz [ 1394.181640][ T9849] usb 1-1: new full-speed USB device number 84 using dummy_hcd [ 1394.311822][ T9849] usb 1-1: device descriptor read/64, error -71 [ 1394.346541][T17280] usb 5-1: USB disconnect, device number 123 [ 1394.554712][ T9849] usb 1-1: new full-speed USB device number 85 using dummy_hcd [ 1394.612591][ T5894] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1394.629717][ T5894] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 1394.643031][ T5894] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1394.659379][ T5894] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1394.669735][ T5894] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1394.682107][ T5894] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 1394.699383][ T5894] usb 6-1: USB disconnect, device number 68 [ 1394.753497][ T9849] usb 1-1: device descriptor read/64, error -71 [ 1394.778695][T21511] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4125'. [ 1394.823351][T21477] vhci_hcd: connection reset by peer [ 1394.834347][ T77] vhci_hcd vhci_hcd.2: stop threads [ 1394.843531][ T77] vhci_hcd vhci_hcd.2: release socket [ 1394.855501][ T77] vhci_hcd vhci_hcd.2: disconnect device [ 1394.872158][ T9849] usb usb1-port1: attempt power cycle [ 1394.974293][T21517] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4128'. [ 1395.221937][ T9849] usb 1-1: new full-speed USB device number 86 using dummy_hcd [ 1395.242653][ T9849] usb 1-1: device descriptor read/8, error -71 [ 1395.541849][ T9849] usb 1-1: new full-speed USB device number 87 using dummy_hcd [ 1395.572250][ T9849] usb 1-1: device descriptor read/8, error -71 [ 1395.605936][T21529] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4132'. [ 1395.686873][ T9849] usb usb1-port1: unable to enumerate USB device [ 1395.751586][ T5894] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1395.834141][T21531] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4133'. [ 1395.879022][T21533] FAULT_INJECTION: forcing a failure. [ 1395.879022][T21533] name failslab, interval 1, probability 0, space 0, times 0 [ 1395.902422][T21533] CPU: 1 UID: 0 PID: 21533 Comm: syz.2.4134 Tainted: G L syzkaller #0 PREEMPT(full) [ 1395.902460][T21533] Tainted: [L]=SOFTLOCKUP [ 1395.902469][T21533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1395.902482][T21533] Call Trace: [ 1395.902492][T21533] [ 1395.902502][T21533] dump_stack_lvl+0xe8/0x150 [ 1395.902538][T21533] should_fail_ex+0x412/0x560 [ 1395.902574][T21533] should_failslab+0xa8/0x100 [ 1395.902604][T21533] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1395.902639][T21533] ? __alloc_skb+0x186/0x7d0 [ 1395.902662][T21533] ? __alloc_skb+0x1d0/0x7d0 [ 1395.902684][T21533] ? __local_bh_enable_ip+0xd0/0x130 [ 1395.902716][T21533] __alloc_skb+0x1d0/0x7d0 [ 1395.902745][T21533] netlink_sendmsg+0x5d4/0xb40 [ 1395.902778][T21533] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1395.902804][T21533] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1395.902837][T21533] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1395.902863][T21533] ____sys_sendmsg+0x972/0x9f0 [ 1395.902900][T21533] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1395.902934][T21533] ? import_iovec+0x73/0xa0 [ 1395.902962][T21533] ___sys_sendmsg+0x2a5/0x360 [ 1395.902995][T21533] ? __pfx____sys_sendmsg+0x10/0x10 [ 1395.903057][T21533] ? __fget_files+0x2a/0x420 [ 1395.903075][T21533] ? __fget_files+0x3a0/0x420 [ 1395.903105][T21533] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1395.903135][T21533] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1395.903171][T21533] ? __pfx_ksys_write+0x10/0x10 [ 1395.903206][T21533] do_syscall_64+0x14d/0xf80 [ 1395.903232][T21533] ? trace_irq_disable+0x3b/0x150 [ 1395.903251][T21533] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1395.903274][T21533] ? clear_bhb_loop+0x40/0x90 [ 1395.903299][T21533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1395.903320][T21533] RIP: 0033:0x7f64b1b9c819 [ 1395.903341][T21533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1395.903359][T21533] RSP: 002b:00007f64b296f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1395.903382][T21533] RAX: ffffffffffffffda RBX: 00007f64b1e15fa0 RCX: 00007f64b1b9c819 [ 1395.903398][T21533] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 1395.903411][T21533] RBP: 00007f64b296f090 R08: 0000000000000000 R09: 0000000000000000 [ 1395.903424][T21533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1395.903436][T21533] R13: 00007f64b1e16038 R14: 00007f64b1e15fa0 R15: 00007f64b1f3fa48 [ 1395.903468][T21533] [ 1395.910662][T21531] syzkaller0: entered promiscuous mode [ 1396.162806][T21531] syzkaller0: entered allmulticast mode [ 1396.183866][ T5894] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 56, changing to 9 [ 1396.195282][ T5894] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 8703, setting to 1024 [ 1396.207482][ T5894] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1396.217389][ T5894] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1396.254354][ T5894] usb 6-1: config 0 descriptor?? [ 1396.463795][T21543] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4137'. [ 1396.718845][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058bdd000: rx timeout, send abort [ 1397.213404][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058226c00: rx timeout, send abort [ 1397.227158][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058bdd000: abort rx timeout. Force session deactivation [ 1397.281915][T16351] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 1397.365597][ T5894] ath6kl: Failed to submit usb control message: -110 [ 1397.372465][ T5894] ath6kl: unable to send the bmi data to the device: -110 [ 1397.379583][ T5894] ath6kl: Unable to send get target info: -110 [ 1397.386807][ T5894] ath6kl: Failed to init ath6kl core: -110 [ 1397.406799][ T5894] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 1397.721745][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058226c00: abort rx timeout. Force session deactivation [ 1398.534637][T16351] usb 6-1: USB disconnect, device number 69 [ 1398.580874][T21556] netlink: 'syz.5.4140': attribute type 10 has an invalid length. [ 1398.688288][T21556] dummy0: entered allmulticast mode [ 1398.709741][T21556] team0: Port device dummy0 added [ 1398.828005][ T30] audit: type=1326 audit(1775728624.746:4306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21560 comm="syz.3.4141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c9d99c819 code=0x7ffc0000 [ 1398.893442][ T30] audit: type=1326 audit(1775728624.746:4307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21560 comm="syz.3.4141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c9d99c819 code=0x7ffc0000 [ 1398.916677][ T30] audit: type=1326 audit(1775728624.756:4308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21560 comm="syz.3.4141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c9d99c819 code=0x7ffc0000 [ 1399.001264][ T30] audit: type=1326 audit(1775728624.756:4309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21560 comm="syz.3.4141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c9d99c819 code=0x7ffc0000 [ 1399.120946][ T30] audit: type=1326 audit(1775728624.776:4310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21560 comm="syz.3.4141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f8c9d99c819 code=0x7ffc0000 [ 1399.144617][ T30] audit: type=1326 audit(1775728624.776:4311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21560 comm="syz.3.4141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c9d99c819 code=0x7ffc0000 [ 1399.167466][T16351] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1399.179541][ T30] audit: type=1326 audit(1775728624.776:4312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21560 comm="syz.3.4141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c9d99c819 code=0x7ffc0000 [ 1399.334094][T16351] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1399.348505][T16351] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1399.358230][ T30] audit: type=1326 audit(1775728624.786:4313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21560 comm="syz.3.4141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c9d99c819 code=0x7ffc0000 [ 1399.369467][T16351] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1399.395553][ T30] audit: type=1326 audit(1775728624.786:4314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21560 comm="syz.3.4141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c9d99c819 code=0x7ffc0000 [ 1399.428803][ T30] audit: type=1326 audit(1775728624.786:4315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21560 comm="syz.3.4141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f8c9d99c819 code=0x7ffc0000 [ 1399.480321][T16351] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1399.503038][T21567] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1399.516129][T16351] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1399.543923][T21579] netlink: 'syz.4.4143': attribute type 7 has an invalid length. [ 1399.901540][ T5894] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1399.969362][T16351] usb 1-1: USB disconnect, device number 88 [ 1400.064789][ T5894] usb 4-1: Using ep0 maxpacket: 32 [ 1400.087029][ T5894] usb 4-1: config index 0 descriptor too short (expected 164, got 36) [ 1400.100477][ T5894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1400.129258][ T5894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1400.141945][ T5894] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1400.153947][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1400.174486][ T5894] usb 4-1: config 0 descriptor?? [ 1400.301671][ T9843] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1400.508120][T21594] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4151'. [ 1400.728355][T21596] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1400.806521][ T5894] logitech 0003:046D:C29C.0036: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.3-1/input0 [ 1401.037755][ T5894] logitech 0003:046D:C29C.0036: no inputs found [ 1401.072381][T17280] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1401.082922][ T5894] usb 4-1: USB disconnect, device number 82 [ 1401.156459][ T9849] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1401.250500][T17280] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1401.259905][T17280] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1401.287557][T17280] usb 3-1: Product: syz [ 1401.305198][T17280] usb 3-1: Manufacturer: syz [ 1401.309937][T17280] usb 3-1: SerialNumber: syz [ 1401.315265][ T9849] usb 1-1: Using ep0 maxpacket: 8 [ 1401.328007][ T9849] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1401.338863][ T9849] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1401.391127][ T9849] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1401.401529][ T9849] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1401.416006][ T9849] usb 1-1: Product: syz [ 1401.420362][ T9849] usb 1-1: Manufacturer: syz [ 1401.433482][T17280] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1401.461060][ T9849] usb 1-1: SerialNumber: syz [ 1401.484553][ T5894] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1401.498290][ T9849] usb 1-1: config 0 descriptor?? [ 1402.001287][T21614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4156'. [ 1402.618711][T21621] netlink: 136 bytes leftover after parsing attributes in process `syz.3.4158'. [ 1402.669700][T21621] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1402.818507][ T9845] usb 3-1: USB disconnect, device number 75 [ 1403.217795][T16351] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1403.446395][T16351] usb 4-1: Using ep0 maxpacket: 32 [ 1403.453720][ T5894] usb 3-1: Service connection timeout for: 258 [ 1403.468154][ T5894] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1403.468318][T16351] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1403.510190][ T5894] ath9k_htc: Failed to initialize the device [ 1403.573050][ T9845] usb 3-1: ath9k_htc: USB layer deinitialized [ 1403.678940][T16351] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=8a.0a [ 1403.689879][T16351] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1403.714158][T16351] usb 4-1: Product: syz [ 1403.718377][T16351] usb 4-1: Manufacturer: syz [ 1403.890497][T16351] usb 4-1: SerialNumber: syz [ 1403.898937][T16351] usb 4-1: config 0 descriptor?? [ 1403.936836][T16351] xr_serial 4-1:0.0: failed to claim sibling interface: -16 [ 1403.944573][T16351] xr_serial 4-1:0.0: probe with driver xr_serial failed with error -16 [ 1404.039642][ T5894] usb 1-1: USB disconnect, device number 89 [ 1404.144111][T17280] usb 4-1: USB disconnect, device number 83 [ 1404.511656][ T5894] usb 3-1: new low-speed USB device number 76 using dummy_hcd [ 1404.521568][ T9849] usb 6-1: new full-speed USB device number 71 using dummy_hcd [ 1404.671022][ T5894] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1404.691747][ T5894] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1404.711349][ T9849] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1404.731248][ T9849] usb 6-1: not running at top speed; connect to a high speed hub [ 1404.742811][ T5894] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1404.760565][ T9849] usb 6-1: config 8 has an invalid interface number: 69 but max is 0 [ 1404.769759][ T5894] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1404.780883][ T9849] usb 6-1: config 8 has no interface number 0 [ 1404.791591][ T9831] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 1404.864235][T21661] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4170'. [ 1404.874931][T21661] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4170'. [ 1404.892357][ T9849] usb 6-1: config 8 interface 69 has no altsetting 0 [ 1404.904124][ T5894] usb 3-1: string descriptor 0 read error: -22 [ 1404.911709][ T5894] usb 3-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 1404.922567][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 1404.931279][ T9849] usb 6-1: language id specifier not provided by device, defaulting to English [ 1404.971225][ T5894] usb 3-1: 0:2 : does not exist [ 1404.988475][ T9849] usb 6-1: New USB device found, idVendor=05c6, idProduct=9079, bcdDevice=87.a6 [ 1405.002105][ T9849] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1405.111701][ T9831] usb 5-1: Using ep0 maxpacket: 8 [ 1405.124301][ T9831] usb 5-1: config 0 has an invalid interface number: 99 but max is 0 [ 1405.132684][ T9831] usb 5-1: config 0 has no interface number 0 [ 1405.145212][ T5894] usb-storage 3-1:1.1: USB Mass Storage device detected [ 1405.154730][ T9831] usb 5-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89 [ 1405.329082][ T9831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1405.363906][T21663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1405.387564][T21663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1405.493965][ T9831] usb 5-1: config 0 descriptor?? [ 1405.676063][ T9831] usb-storage 5-1:0.99: USB Mass Storage device detected [ 1405.697847][T21647] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1405.699736][ T9831] usb-storage 5-1:0.99: device ignored [ 1405.727335][ T9849] uvcvideo 6-1:8.69: Found UVC 0.00 device (05c6:9079) [ 1405.742610][ T9849] uvcvideo 6-1:8.69: No valid video chain found. [ 1405.837548][T21647] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4167'. [ 1406.058373][ T5894] usb 3-1: us122l: couldn't allocate write buffer [ 1406.067884][ T5894] snd-usb-us122l 3-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 1406.097603][ T5894] usb 3-1: USB disconnect, device number 76 [ 1406.446200][T21643] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1407.788239][T17416] usb 5-1: USB disconnect, device number 124 [ 1407.967058][ T5894] usb 6-1: USB disconnect, device number 71 [ 1408.391658][T17416] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 1408.611728][T17416] usb 5-1: device descriptor read/64, error -71 [ 1408.817631][T21730] bridge0: port 4(hsr0) entered blocking state [ 1408.824167][T21730] bridge0: port 4(hsr0) entered disabled state [ 1408.831608][T21730] hsr0: entered allmulticast mode [ 1408.839320][T21730] hsr_slave_0: entered allmulticast mode [ 1408.845098][T21730] hsr_slave_1: entered allmulticast mode [ 1408.852970][T21730] hsr0: entered promiscuous mode [ 1408.858875][T21730] bridge0: port 4(hsr0) entered blocking state [ 1408.865205][T21730] bridge0: port 4(hsr0) entered forwarding state [ 1408.872053][T17416] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 1409.021999][T17416] usb 5-1: device descriptor read/64, error -71 [ 1409.264229][T17416] usb usb5-port1: attempt power cycle [ 1409.642903][T17416] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 1409.682296][T17416] usb 5-1: device descriptor read/8, error -71 [ 1409.921539][ T9845] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1409.931625][T17416] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1409.957407][T17416] usb 5-1: device descriptor read/8, error -71 [ 1410.051553][ T9845] usb 3-1: device descriptor read/64, error -71 [ 1410.073678][T17416] usb usb5-port1: unable to enumerate USB device [ 1410.201528][ T5894] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1410.331599][ T9845] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1410.433286][ T5894] usb 1-1: Using ep0 maxpacket: 16 [ 1410.453216][ T5894] usb 1-1: too many configurations: 221, using maximum allowed: 8 [ 1410.491023][ T5894] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1410.501628][ T9845] usb 3-1: device descriptor read/64, error -71 [ 1410.517408][ T5894] usb 1-1: can't read configurations, error -61 [ 1410.611943][ T9845] usb usb3-port1: attempt power cycle [ 1410.661572][ T5894] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 1410.731729][ C1] [ 1410.734113][ C1] ============================================ [ 1410.740257][ C1] WARNING: possible recursive locking detected [ 1410.746402][ C1] syzkaller #0 Tainted: G L [ 1410.752491][ C1] -------------------------------------------- [ 1410.758659][ C1] syz.2.4184/21737 is trying to acquire lock: [ 1410.764742][ C1] ffff88801e380fb0 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 1410.773837][ C1] [ 1410.773837][ C1] but task is already holding lock: [ 1410.781203][ C1] ffff888069fe4fb0 (&hsr->seqnr_lock){+.-.}-{3:3}, at: send_hsr_supervision_frame+0x380/0xcb0 [ 1410.791571][ C1] [ 1410.791571][ C1] other info that might help us debug this: [ 1410.799644][ C1] Possible unsafe locking scenario: [ 1410.799644][ C1] [ 1410.807086][ C1] CPU0 [ 1410.810362][ C1] ---- [ 1410.813647][ C1] lock(&hsr->seqnr_lock); [ 1410.818150][ C1] lock(&hsr->seqnr_lock); [ 1410.822740][ C1] [ 1410.822740][ C1] *** DEADLOCK *** [ 1410.822740][ C1] [ 1410.830872][ C1] May be due to missing lock nesting notation [ 1410.830872][ C1] [ 1410.839204][ C1] 8 locks held by syz.2.4184/21737: [ 1410.844394][ C1] #0: ffffc90000a08ce0 ((&hsr->announce_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd4/0x640 [ 1410.854395][ C1] #1: ffffffff8e75e5a0 (rcu_read_lock){....}-{1:3}, at: hsr_announce+0x89/0x370 [ 1410.863523][ C1] #2: ffff888069fe4fb0 (&hsr->seqnr_lock){+.-.}-{3:3}, at: send_hsr_supervision_frame+0x380/0xcb0 [ 1410.874214][ C1] #3: ffffffff8e75e5a0 (rcu_read_lock){....}-{1:3}, at: hsr_forward_skb+0xb3/0x2860 [ 1410.883685][ C1] #4: ffffffff8e75e600 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x277/0x3890 [ 1410.893610][ C1] #5: ffffffff8e75e5a0 (rcu_read_lock){....}-{1:3}, at: br_dev_xmit+0x193/0x1980 [ 1410.902909][ C1] #6: ffffffff8e75e600 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x277/0x3890 [ 1410.912831][ C1] #7: ffffffff8e75e5a0 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360 [ 1410.921971][ C1] [ 1410.921971][ C1] stack backtrace: [ 1410.928026][ C1] CPU: 1 UID: 0 PID: 21737 Comm: syz.2.4184 Tainted: G L syzkaller #0 PREEMPT(full) [ 1410.928043][ C1] Tainted: [L]=SOFTLOCKUP [ 1410.928048][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1410.928056][ C1] Call Trace: [ 1410.928062][ C1] [ 1410.928068][ C1] dump_stack_lvl+0xe8/0x150 [ 1410.928086][ C1] print_deadlock_bug+0x279/0x290 [ 1410.928103][ C1] __lock_acquire+0x253f/0x2cf0 [ 1410.928120][ C1] ? skb_network_protocol+0x234/0x3f0 [ 1410.928136][ C1] ? netif_skb_features+0xdf0/0x1480 [ 1410.928150][ C1] lock_acquire+0xf0/0x2e0 [ 1410.928164][ C1] ? hsr_dev_xmit+0x237/0x360 [ 1410.928175][ C1] ? __pfx_netif_skb_features+0x10/0x10 [ 1410.928190][ C1] ? hsr_dev_xmit+0x237/0x360 [ 1410.928199][ C1] _raw_spin_lock_bh+0x36/0x50 [ 1410.928212][ C1] ? hsr_dev_xmit+0x237/0x360 [ 1410.928222][ C1] hsr_dev_xmit+0x237/0x360 [ 1410.928231][ C1] ? hsr_dev_xmit+0x2d/0x360 [ 1410.928241][ C1] dev_hard_start_xmit+0x2d8/0x870 [ 1410.928260][ C1] __dev_queue_xmit+0x16d1/0x3890 [ 1410.928276][ C1] ? __dev_queue_xmit+0x277/0x3890 [ 1410.928291][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 1410.928305][ C1] ? ebt_do_table+0x2665/0x2830 [ 1410.928316][ C1] ? __local_bh_enable_ip+0xd0/0x130 [ 1410.928330][ C1] ? ebt_do_table+0x2665/0x2830 [ 1410.928342][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1410.928362][ C1] ? br_nf_post_routing+0x219/0xfe0 [ 1410.928381][ C1] br_dev_queue_push_xmit+0x370/0x4a0 [ 1410.928397][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1410.928412][ C1] NF_HOOK+0x360/0x3f0 [ 1410.928427][ C1] ? NF_HOOK+0xa2/0x3f0 [ 1410.928440][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1410.928454][ C1] ? finish_task_switch+0x245/0x920 [ 1410.928467][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1410.928484][ C1] br_forward_finish+0xd3/0x130 [ 1410.928499][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1410.928513][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 1410.928528][ C1] NF_HOOK+0x360/0x3f0 [ 1410.928543][ C1] ? NF_HOOK+0xa2/0x3f0 [ 1410.928557][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1410.928572][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 1410.928587][ C1] ? __skb_clone+0x483/0x7a0 [ 1410.928601][ C1] ? br_handle_vlan+0x61/0x530 [ 1410.928614][ C1] __br_forward+0x397/0x540 [ 1410.928629][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 1410.928644][ C1] br_flood+0x6ee/0xb80 [ 1410.928661][ C1] ? br_dev_xmit+0x193/0x1980 [ 1410.928673][ C1] br_dev_xmit+0x12bd/0x1980 [ 1410.928684][ C1] ? br_dev_xmit+0x193/0x1980 [ 1410.928696][ C1] ? __pfx_br_dev_xmit+0x10/0x10 [ 1410.928709][ C1] ? netdev_txq_to_tc+0x9d0/0x9d0 [ 1410.928724][ C1] dev_hard_start_xmit+0x2d8/0x870 [ 1410.928742][ C1] __dev_queue_xmit+0x16d1/0x3890 [ 1410.928756][ C1] ? handle_softirqs+0x22a/0x870 [ 1410.928770][ C1] ? finish_task_switch+0x245/0x920 [ 1410.928782][ C1] ? __schedule+0x15e5/0x52d0 [ 1410.928795][ C1] ? __dev_queue_xmit+0x277/0x3890 [ 1410.928812][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1410.928829][ C1] ? __copy_skb_header+0xa3/0x4a0 [ 1410.928843][ C1] ? __asan_memcpy+0x40/0x70 [ 1410.928853][ C1] ? __skb_clone+0x63/0x7a0 [ 1410.928867][ C1] ? __skb_clone+0x483/0x7a0 [ 1410.928880][ C1] ? hsr_addr_subst_dest+0x30d/0xa90 [ 1410.928904][ C1] ? skb_clone+0x246/0x3a0 [ 1410.928918][ C1] hsr_forward_skb+0x157b/0x2860 [ 1410.928933][ C1] ? hsr_forward_skb+0xb3/0x2860 [ 1410.928945][ C1] ? __pfx_hsr_forward_skb+0x10/0x10 [ 1410.928957][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1410.928969][ C1] ? __asan_memset+0x22/0x50 [ 1410.928979][ C1] ? __skb_pad+0x405/0x610 [ 1410.928995][ C1] send_hsr_supervision_frame+0x731/0xcb0 [ 1410.929009][ C1] ? __pfx_send_hsr_supervision_frame+0x10/0x10 [ 1410.929021][ C1] hsr_announce+0x1db/0x370 [ 1410.929031][ C1] ? hsr_announce+0x89/0x370 [ 1410.929041][ C1] ? __pfx_hsr_announce+0x10/0x10 [ 1410.929054][ C1] call_timer_fn+0x192/0x640 [ 1410.929068][ C1] ? __pfx_hsr_announce+0x10/0x10 [ 1410.929077][ C1] ? call_timer_fn+0xd4/0x640 [ 1410.929090][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1410.929106][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1410.929118][ C1] ? __pfx_hsr_announce+0x10/0x10 [ 1410.929128][ C1] __run_timer_base+0x652/0x8b0 [ 1410.929141][ C1] ? ktime_get+0x45/0x200 [ 1410.929153][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 1410.929167][ C1] ? sched_clock_cpu+0x74/0x440 [ 1410.929183][ C1] run_timer_softirq+0xb7/0x170 [ 1410.929196][ C1] handle_softirqs+0x22a/0x870 [ 1410.929210][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 1410.929226][ C1] __irq_exit_rcu+0x5f/0x150 [ 1410.929239][ C1] irq_exit_rcu+0x9/0x30 [ 1410.929252][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1410.929267][ C1] [ 1410.929271][ C1] [ 1410.929275][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1410.929288][ C1] RIP: 0010:finish_task_switch+0x245/0x920 [ 1410.929302][ C1] Code: 00 00 48 85 db 0f 85 e8 01 00 00 e9 56 05 00 00 4c 8b 75 d0 49 83 c4 48 4c 89 e7 e8 d5 4b 1d 0a e8 f0 94 38 00 fb 4c 8b 65 c0 <49> 8d bc 24 80 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 1410.929312][ C1] RSP: 0018:ffffc900052ff958 EFLAGS: 00000202 [ 1410.929323][ C1] RAX: 000000000000286d RBX: 0000000000000000 RCX: 0000000080000001 [ 1410.929332][ C1] RDX: 0000000000000000 RSI: ffffffff8defba0d RDI: ffffffff8c27d580 [ 1410.929340][ C1] RBP: ffffc900052ff9b0 R08: ffffffff9011d8b7 R09: 1ffffffff2023b16 [ 1410.929348][ C1] R10: dffffc0000000000 R11: fffffbfff2023b17 R12: ffff88802ee88000 [ 1410.929356][ C1] R13: dffffc0000000000 R14: ffff88801dac8000 R15: ffff8880b873b998 [ 1410.929368][ C1] ? finish_task_switch+0x240/0x920 [ 1410.929382][ C1] __schedule+0x15e5/0x52d0 [ 1410.929400][ C1] ? timerqueue_add+0x1d0/0x200 [ 1410.929416][ C1] ? __pfx___schedule+0x10/0x10 [ 1410.929431][ C1] ? schedule+0x90/0x360 [ 1410.929444][ C1] schedule+0x164/0x360 [ 1410.929457][ C1] do_nanosleep+0x1c2/0x620 [ 1410.929469][ C1] ? do_nanosleep+0x80/0x620 [ 1410.929480][ C1] ? __pfx_do_nanosleep+0x10/0x10 [ 1410.929492][ C1] ? __hrtimer_setup+0x181/0x200 [ 1410.929506][ C1] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 1410.929523][ C1] hrtimer_nanosleep+0x188/0x390 [ 1410.929539][ C1] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 1410.929555][ C1] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 1410.929571][ C1] ? __pfx_get_timespec64+0x10/0x10 [ 1410.929587][ C1] __se_sys_clock_nanosleep+0x35b/0x3b0 [ 1410.929604][ C1] ? __pfx___se_sys_clock_nanosleep+0x10/0x10 [ 1410.929622][ C1] do_syscall_64+0x14d/0xf80 [ 1410.929637][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1410.929648][ C1] ? clear_bhb_loop+0x40/0x90 [ 1410.929660][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1410.929671][ C1] RIP: 0033:0x7f64b1b5d04e [ 1410.929682][ C1] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1410.929692][ C1] RSP: 002b:00007f64b1f3fb28 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 1410.929703][ C1] RAX: ffffffffffffffda RBX: 000055559075c500 RCX: 00007f64b1b5d04e [ 1410.929711][ C1] RDX: 00007f64b1f3fb80 RSI: 0000000000000000 RDI: 0000000000000000 [ 1410.929718][ C1] RBP: 00007f64b1e17da0 R08: 0000000000000000 R09: 0000000000000000 [ 1410.929725][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000158daf [ 1410.929732][ C1] R13: 00007f64b1e1618c R14: 0000000000158de1 R15: 00007f64b1e16180 [ 1410.929744][ C1] [ 1411.671531][ T5894] usb 1-1: Using ep0 maxpacket: 16 [ 1411.682679][ T5894] usb 1-1: too many configurations: 221, using maximum allowed: 8 [ 1411.901547][ T9845] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1411.951067][ T9845] usb 3-1: device descriptor read/8, error -71 [ 1411.963510][ T5894] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1411.971122][ T5894] usb 1-1: can't read configurations, error -61 [ 1411.979860][ T5894] usb usb1-port1: attempt power cycle [ 1412.191591][ T9845] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1412.212118][ T9845] usb 3-1: device descriptor read/8, error -71 [ 1412.321609][ T5894] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1412.322054][ T9845] usb usb3-port1: unable to enumerate USB device [ 1412.351982][ T5894] usb 1-1: Using ep0 maxpacket: 16 [ 1412.357803][ T5894] usb 1-1: too many configurations: 221, using maximum allowed: 8 [ 1412.367341][ T5894] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1412.375156][ T5894] usb 1-1: can't read configurations, error -61 [ 1412.511668][ T5894] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1412.532865][ T5894] usb 1-1: Using ep0 maxpacket: 16 [ 1412.541250][ T5894] usb 1-1: too many configurations: 221, using maximum allowed: 8 [ 1412.551081][ T5894] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1412.558916][ T5894] usb 1-1: can't read configurations, error -61 [ 1412.565706][ T5894] usb usb1-port1: unable to enumerate USB device