last executing test programs: 12.727440878s ago: executing program 0 (id=8236): socket$inet6(0xa, 0x2, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffffdffffffffff, 0xfffffffffffffff9, 0x80000000000, 0x0, 0xfffffffffffff30a, 0x85}, &(0x7f0000000000)={0x1d, 0x26d7, 0x7ff, 0x0, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffd, 0x9}, 0x0, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r2, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r8, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000001c0)="f3670f185e180f3235000400000f30440f20c03508000000440f22c036646665f36526f20f22a5430f01c566ba4000edc4a39979250b00000008b9800000c00f3235010000000f30f245ab48b800000000000000800f23c00f21f83500000b000f23f8", 0x63}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r10, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f00000006c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x200000000000000, &(0x7f0000000600)='\x00'}) fsopen(&(0x7f0000000040)='ramfs\x00', 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x1a, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELOBJ={0x4c, 0x14, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0x0, 0x6, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWOBJ={0x0, 0x12, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_NAME={0x0, 0x2, 'syz2\x00'}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc0}}, 0xc008) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) ioctl$VIDIOC_G_AUDIO(r8, 0x80345621, &(0x7f00000003c0)) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) 12.375691206s ago: executing program 0 (id=8237): syz_open_dev$sg(0x0, 0x0, 0x8002) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x5, 0x0, 0x0, 0x7fffffff}]}) r0 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, 0x0) ppoll(&(0x7f0000000680)=[{0xffffffffffffffff, 0x49}], 0x1, 0x0, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f00000002c0)={{0x2, 0x4e22, @empty}, {0x6, @random="13e4cf10e209"}, 0x4e, {0x2, 0x4e23, @rand_addr=0x64010100}, 'bridge0\x00'}) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000700000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r5}, 0x38) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000003c0)='cubic', 0x5) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000108fdffffff0800000800000000", @ANYRES32=0x0, @ANYBLOB="00000000a304040008001b"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) sendto$inet(r2, 0x0, 0x0, 0x4044880, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r7, &(0x7f0000000140)=[{&(0x7f0000000300)=""/92, 0x5c}], 0x1, 0x10a6, 0x6) 11.838093462s ago: executing program 2 (id=8240): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(r1, 0x0, &(0x7f0000000000)={0x1, 0x3, 0x4, 0x8000000000000001}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @dev={0xac, 0x14, 0x14, 0x3a}}}}], 0x20}, 0x8840) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c00ee7edf17fd3c00000001010400000000141a00000200001018000280140001"], 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000180)="f7790066baa00066b86b42460f22c7d466ba420000b8e20066ef0f29902cbb0000c4e2b1ba8c88d90000006666f6440f386b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x38, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000140)=@x86={0x4d, 0x3, 0x7, 0x0, 0xf84, 0x8, 0x0, 0xe4, 0x5, 0x7, 0x7, 0x3, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, '\x00', 0x5, 0x3}) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r7 = socket$kcm(0xa, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x1, 0x3, &(0x7f00000013c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000001400)='syzkaller\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r8, 0xe400, 0x0}, 0x10) sendmsg$sock(r7, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18, 0xff97}, 0x0) 10.884842492s ago: executing program 2 (id=8241): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)='R', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000580)='\b', 0x1}], 0x1}}], 0x2, 0x4000001) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000180)={0x9, 0x203, 0x7, 0x3}, &(0x7f00000001c0)=0x10) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000b00)) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x40002) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3, 0x0, 0x400}, 0x30, 0x2) landlock_restrict_self(r2, 0x8) r3 = landlock_create_ruleset(&(0x7f00000000c0)={0x2, 0x3, 0x3}, 0x30, 0x0) landlock_restrict_self(r3, 0xf) landlock_restrict_self(r3, 0x6) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0xfffffffe, 0x12c}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000580)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x45}}}, &(0x7f0000000480)) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000200)=""/88) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000380)=""/131, 0x83}], 0x1, 0x80000001, 0x3) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x40) 10.465227807s ago: executing program 4 (id=8242): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=@newqdisc={0x11c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0xfff1, 0x7}, {0xffff, 0xffff}}, [@TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x7f, 0x3, 0x1004, 0x1, 0x10, 0x0, 0x6}}, {0x10, 0x2, [0x40, 0x3, 0x2, 0x9, 0x7, 0xd819]}}, {{0x1c, 0x1, {0x1, 0x8, 0xe490, 0x3, 0x1, 0x9d3a, 0x5, 0x1}}, {0x6, 0x2, [0x7]}}, {{0x1c, 0x1, {0x2, 0x5, 0xe, 0xfe4, 0x0, 0x1ff, 0xdf, 0x1}}, {0x6, 0x2, [0x8]}}, {{0x1c, 0x1, {0x2, 0x4, 0x6, 0x9, 0x1, 0x8ef, 0x10001, 0x6}}, {0x10, 0x2, [0x20, 0x800, 0x1000, 0x4, 0x6, 0x5]}}, {{0x1c, 0x1, {0xff, 0x3, 0x4, 0xfff, 0x1, 0x9, 0x400, 0x4}}, {0xc, 0x2, [0xb8, 0x3ff, 0x560f, 0x3c6]}}, {{0x1c, 0x1, {0x88, 0x3f, 0x1, 0x10001, 0x2, 0x40, 0x1, 0x6}}, {0x10, 0x2, [0x1000, 0x3, 0xfffc, 0x9, 0xe3e, 0x8d]}}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000004000000e27f000002"], 0x48) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r4, &(0x7f00000006c0)=ANY=[], 0xff2e) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x801, 0x257, 0x0, r5}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xaa0e, 0x9101, 0x1000000, 0x10000004, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x2, 0x0, 0x273, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x625e, 0x200, 0x1, 0x1d2}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x943, 0x0, 0x0}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000002060300"/20], 0x14}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x4}, 0x8) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000540)=ANY=[@ANYBLOB="8000000008021100000108021100000008e5ff640001000006020202020202010882848b960c12182400000000000009002cce04452f0e789f00"/76], 0x36) r12 = socket(0x400000000010, 0x3, 0x0) r13 = userfaultfd(0x80801) close_range(r13, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) socket$kcm(0x11, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) r14 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r14, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffa, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r14, 0x84, 0x64, &(0x7f0000000480), 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r14, 0x84, 0x6e, &(0x7f0000000200)=[@in6={0xa, 0x4e21, 0x8, @private0={0xfc, 0x0, '\x00', 0x3}, 0x7}], 0x1c) 9.946569559s ago: executing program 3 (id=8244): socket$nl_netfilter(0x10, 0x3, 0xc) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x8000, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$video(&(0x7f0000000040), 0x8, 0x101840) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x7, r1, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1004000}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000140)={0x28, 0x3, r2, r1, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000100)}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth1_to_hsr\x00', &(0x7f0000003f40)=@ethtool_gstrings={0x1b, 0x5}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x53, 0x0}) 9.725600627s ago: executing program 0 (id=8245): request_key(0x0, &(0x7f0000006180)={'syz', 0x0}, 0x0, 0xfffffffffffffffb) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x400000000a882, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000dae11c105e0484028fa4010203010902240001000000000904"], 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x14) unshare(0x40050480) r1 = syz_open_dev$cec(0x0, 0x0, 0x0) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000040)={0x1d, r3, 0x1, {0x0, 0x0, 0x1}}, 0x18) bind$can_raw(r2, &(0x7f0000000080)={0x1d, r3}, 0x10) syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000100)=0x21) r4 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) splice(r5, 0x0, r4, 0x0, 0x800, 0x0) ioctl$DRM_IOCTL_RM_MAP(r5, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000834000/0x3000)=nil}) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = syz_open_dev$cec(0x0, 0x0, 0x0) ioctl$CEC_S_MODE(r6, 0x40046109, 0x0) 9.679110061s ago: executing program 2 (id=8246): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_emit_ethernet(0x66, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$ARCH_MAP_VDSO_64(0x1e, 0x0, 0x3, 0x2003) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) write$binfmt_script(r3, &(0x7f0000000040)={'#! ', '', [{0x20, '\t\xbb\x9b\x81\xa61\xdd\xd6\xe6\xb3R\xb9\xdb?\xbe\xd3&n\xe2\xb6\xf5%\xb2\xdf\xf5\x83\xba\xeb\x93~\x88\xdc\xec[6=\x01p\xcd\x8ay\x0ez\\U\xae\x9fj@5q\xb2\x89\x00\x17\xe3\x82\x81\xbeS\xd8\x00\x1c\x10\xf8\xf3\xd4\xddI<%\xbb\xa6\xab\x9a\xe5\xec\x19\xfa\xcb\x94\x90u\x9b\x13W\xbd\x9f\xfa\x032-{\x96{\x12\xddy\xb8\x0e%\xabx/\x9cb\xfe\xccO\x00\xf0\xf2\x9dZ\x19_\xc7\xf2\vI'}]}, 0x7d) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0x1d) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r6, 0x5b) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000100), 0x0) read$watch_queue(r5, &(0x7f0000000000)=""/1, 0x1) keyctl$revoke(0x3, r4) open(0x0, 0x60840, 0x0) fsopen(&(0x7f0000000000)='nfs4\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000002140)=ANY=[]) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000000d80)) ioctl$VHOST_SET_FEATURES(r7, 0x4008af00, &(0x7f0000000080)=0x200000000) r8 = dup2(r7, r7) write$vhost_msg_v2(r8, &(0x7f0000000380)={0x2, 0x0, {&(0x7f0000000140)=""/106, 0x6a, 0x0, 0x2, 0x2}}, 0x48) write(r0, &(0x7f0000000180)='transport=tcp,traddr=127.0.0.1,trsvcid=4420,nqn=n', 0x31) 9.346762131s ago: executing program 1 (id=8247): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180)={r1, 0x20e, 0x900}, &(0x7f00000007c0)=ANY=[], 0x0, 0x0) 8.84624452s ago: executing program 1 (id=8248): r0 = socket(0x840000000002, 0x3, 0xff) syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="000068e04d2c5868310102030109723b6b0cffd85aea4023f7370224f800005e0e9e3459db000000000096197d09cdc31f6a6305e7d4835c2a1adfe70366b32b9543cb0471dc67b89b1ba19b9c4ebe2d1d381630fa7e146dd93dda121d1839469965fa404c7cec34f9a42b763e9a3fd44560e05524d57e7296", @ANYBLOB="0c3808f80c7a167a28710aa0c3ca08c8d701b94ecfdb28856032bfec2d024a0663880e5d430af57b59acae5d232049a12dde83698e297f637fdb91a443957b64923dc69fb6cca871772e4c2ef814fa3d4b1e153d32df13215774fd787c5d7ccd8d282bbea211cf04461e033f8b1378b13eb571bd8012d512beded7e198262e25c271e553973a865056307fa8ad04d8c92d66129bc6691daef86c806e"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000000000020ac050f0222000182830109022400010100000009040000020301020009210005000122000009058103c3"], 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x4, 0x8001, 0x0, 0x80000000b49, 0x200000000002, 0x4, 0xa, 0x3}, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) sendfile(r1, r1, 0x0, 0x7) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x6443) close(0x3) syz_mount_image$fuse(0x0, 0x0, 0x79d10e6378b0c7c3, 0x0, 0x0, 0x0, &(0x7f0000000340)="14f2b8e41bbff48a6b582f89f752df5d48b0165d429439bc9347b030ea7e9a7d98897256ee426fc4db104ec3c2c252c44bd32ed45b22aebe0eb22e7f867eb3d529d1f2728df962a47c02c107375a53da9adbee96b0028cd70ec2717997d35da2ba19db13e96764bc7e45af355eef28ebd874f201a910f17cf5876beea678e89b62c6f5a6bf9f32d0a7670c645660720455612b50d918634a7776c11499ad4854804f6db9f1d7b8cfdcb4e632135ebf29d54358899d2c8ef995d18c529894a023ca097aeda5b920478fffe61e") syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c20000"], 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x3, 0x2, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x3b, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x588}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$NILFS_IOCTL_GET_SUINFO(r4, 0x80186e84, &(0x7f0000000400)={&(0x7f0000000040)=[{0x9, 0x40}, {0x9, 0x6, 0x1}, {0x4, 0xffffffff, 0x2}, {0x4, 0x6, 0x3}, {0xc5f, 0x10, 0x2}, {0xffffffffffffffff}, {0x9, 0x1000, 0x1}, {0x6cf, 0x1000, 0x1}], 0x8, 0x10, 0x9, 0xfffffffffffffffc}) syz_open_dev$loop(&(0x7f0000000440), 0xffffffffffffffff, 0xb2000) r5 = socket(0x10, 0x803, 0x0) syz_usb_connect$uac3(0x0, 0xc5, &(0x7f0000000a00)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb3, 0x3, 0x1, 0x7, 0x0, 0x0, {0x8, 0xb, 0x1, 0x1, 0x1, 0x23, 0x30, 0xb}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xb, 0x1d, 0xffffff23}, [@processing_unit={0x9, 0x24, 0x9, 0x4, 0x2, [0x0]}, @mixer_unit={0xa, 0x24, 0x5, 0x3, 0x40, "8127a67e9b"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x2, 0x7d, 0x0, 0x0, 0x1}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x2, 0x5, 0xff, 0x8, 0x7}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x1, 0x4, 0x3, 0xa1, "2f1844"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0xc}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x5, 0x1, 0x7f, 0xd, 0xff}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x7, 0xb2, 0x4, {0xa, 0x25, 0x25, 0xe, 0x6, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x81}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0xc1, 0xf, 0x4, {0xa, 0x25, 0x25, 0x6, 0x8f, 0x9}}}}}}}}]}}, &(0x7f0000000dc0)={0xa, &(0x7f0000000b00)={0xa, 0x6, 0x0, 0x8, 0x80, 0xb5, 0x20, 0xd}, 0x46, &(0x7f0000000b40)={0x5, 0xf, 0x46, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x8, 0x7, 0x101}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x81, 0x7, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x3, 0xff, 0x6}, @ssp_cap={0x1c, 0x10, 0xa, 0x1, 0x4, 0xf2, 0xff0f, 0x4, [0x3f00, 0xffc000, 0xfe80f0, 0xff00]}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x3, 0x8}]}, 0x3, [{0x22, &(0x7f0000000bc0)=@string={0x22, 0x3, "47a7ad146dac9f9fcf9b0d86e8fdc9fd139c43886c02b2eec6ac512d7fd612ce"}}, {0xe0, &(0x7f0000000c80)=@string={0xe0, 0x3, "78c75e81e6e4603b3440067d36e3a659de2231cbe0af59cc159d46eb49e90111172ba16d00ccf8d7bc5cf22212a456d7836acea979d25d3d1463a4d368f9c9e1cbaeb199cd085f54b07f4f482918cc4eb4ea8ae45263d9e537da3ffb98093507fad98c4a99aec4c27fad14e30f65568c04742effaa5647b447d5bb2b3fa26c5f0d72a397a47c80bcb3fe54d907749980225e4fc51ceb45b79ae3f5919faf9c8a32d4fa3e3ec2ddfee44e87266381ba8ff9f61346e893e01db691e03daaf4ffaf5fae721243b17de8012fc4860b6766da2891d97008d4ceeeb6dba14914a7"}}, {0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x73c46406a0531418}}]}) r6 = syz_open_dev$radio(&(0x7f0000000340), 0x1, 0x2) ioctl$VIDIOC_QUERYMENU(r6, 0xc02c5625, &(0x7f0000000040)={0x98f907, 0x0, @value=0xfffffffffffffe01}) socket$packet(0x11, 0x3, 0x300) sendto(r5, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/92, 0x5c}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000700)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2101, &(0x7f0000003700)={0x77359400}) sendmsg$inet(r0, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000640)="97452a307eb495fe5dc48cc5595c4a9b8f52ac8e5c777b95ca109ff3", 0x1c}], 0x18, &(0x7f0000000600)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x37}, @private=0xa010101}}}], 0x20}, 0x400c804) 8.444084382s ago: executing program 3 (id=8249): r0 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000080)=0x2, 0x4) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz2\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz2/cgroup.procs\x00', 0x2, 0x25) write$cgroup_pid(r4, &(0x7f0000000100), 0x12) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f000059e000/0x400000)=nil) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz2/memory.limit_in_bytes\x00', 0x2, 0x0) write(r5, &(0x7f0000000280)='4096', 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, 0x0, 0x0) sendmmsg$unix(r7, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = userfaultfd(0x80801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r9, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r9, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x2402c004) ioctl$UFFDIO_ZEROPAGE(r8, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) 7.668538107s ago: executing program 2 (id=8250): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000000)={0xa4, 0x0, 0x1}) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000040)={[{0xbc74, 0x5, 0x0, 0x1c, 0x8, 0x4, 0x3, 0x1, 0xff, 0x5, 0x3, 0x9, 0xdd}, {0x6a, 0x9, 0xf, 0x9, 0x4, 0x3, 0x4, 0x0, 0x4, 0x3, 0x3a, 0xbf, 0x9}, {0x9, 0x8, 0xad, 0x3, 0x4, 0x0, 0x10, 0x6, 0x79, 0x7, 0xe, 0x9, 0x2}], 0xe5}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)={0x2c, 0x10, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x8, 0x1a, 0x0, 0x1, [@generic="98793389"]}, @nested={0x4, 0x37}]}, 0x2c}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @host16=0xc00, 0xffffffffffff7ff4, 0x3, 0x8ca}}], 0x38}) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x10, 0x17, 0x0, 0x2d92119, 0xfc, 0x2, 0x4, 0xff, 0x0, 0x6, 0x1, 0x0, 0x7, 0x7, 0x4, 0x7, 0x6, 0xfa, '\x00', 0x3, 0x1ff}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000003, 0x13, r6, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x1100000000000000, 0x6, 0x109e93, 0xffffffffffffffff, 0x400000, 0xd, 0x0, 0x2, 0x7fffffffffffffff, 0x5, 0x401, 0x6, 0x5, 0x20000001, 0xfffffffffffffffc], 0xd5d5c004, 0x1354}) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r7, 0xc058534f, &(0x7f00000001c0)={{0xf}, 0x1, 0x0, 0x2}) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f0000000200)=@x86={0x80, 0x4, 0x5, 0x0, 0x8, 0x5, 0x40, 0x7, 0xa, 0x0, 0xf9, 0x7, 0x0, 0x0, 0x2, 0x2, 0x84, 0xd, 0x84, '\x00', 0x4, 0x2}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x20, 0x0, 0x5, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 7.634163315s ago: executing program 3 (id=8251): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000d80), 0x0, 0x202) ioctl$FE_DISHNETWORK_SEND_LEGACY_CMD(r1, 0x6f50, 0xffffffff80000000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xb}, {0x0, 0x3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x20040084) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x14b400, 0x0) r7 = socket(0x400000000010, 0x4, 0x10000) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'ipvlan0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@gettclass={0x0, 0x2a, 0x100, 0x70bd27, 0x25dfdbf7, {0x0, 0x0, 0x0, r8, {0xffff, 0xe}, {0xfff1, 0xd}, {0x2230325c7fc82341, 0x2}}, ["", "", "", "", "", ""]}, 0x44}, 0x1, 0x0, 0x0, 0x4009895}, 0x97b65f37e49f45a0) r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) readv(r9, &(0x7f0000000600)=[{&(0x7f0000000500)=""/196, 0xc4}], 0x1) close(r6) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00'}) r10 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r10, &(0x7f0000000200)={&(0x7f0000000540)=@l2tp6={0xa, 0x0, 0xffff4245, @private1, 0x982df579, 0x1}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1}, 0x2000600d) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r11, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x1d, r11, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18, &(0x7f00000001c0)={&(0x7f0000000140)="5ab37158946b88213a", 0x9}, 0x1, 0x0, 0x0, 0x20008840}, 0x4000000) readv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000014c0)=""/4082, 0x35}], 0x1) 5.696897991s ago: executing program 1 (id=8252): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_usb_connect$uac2(0x3, 0x98, &(0x7f0000000580)=ANY=[@ANYBLOB="12010003000000401e040030400001020301090286000301003003080b00020109200609040000000101200009240102000626000311240803011500000000000200010000000c24030402030103"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x721401, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="640000000206059b868a100000000000070000001c0007800800114000000000080012400000ffff08000640000100000500010006000000050005000200000005000400000000080900020073797a300000000010000300686173683a69702c6d616300d16c"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x4004084) ioctl$SNDCTL_DSP_GETOSPACE(r3, 0x8010500c, &(0x7f0000000040)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000040)={[0x6, 0x8, 0x8000000000080, 0x25, 0x80000, 0x7f, 0x44236, 0x800, 0x81, 0x4, 0x8001, 0x1005, 0xd, 0xb2e, 0x0, 0xfffffdfffffffffd], 0xe000, 0xe8980}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r8, 0x0, 0x564) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, 0x0, &(0x7f0000000400)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) unshare(0x8040480) mmap(&(0x7f00005e9000/0x2000)=nil, 0x2000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) ustat(0xe0, &(0x7f0000000440)) setsockopt$inet_int(r0, 0x0, 0x21, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000004c0)=ANY=[@ANYRES8=0x0], 0x0) 3.92127918s ago: executing program 4 (id=8253): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r2, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f00000000c0)) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x1d}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x0, 0x0) 3.839562541s ago: executing program 3 (id=8254): unshare(0x4020680) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x34b501) openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x1, @loopback, 0x10}, {0xa, 0x4e1e, 0x800000d, @mcast1}, r1, 0x5}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in={{0x2, 0xce1f, @broadcast}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000480)={r5, @in6={{0xa, 0x4e22, 0x10646fc4, @private1={0xfc, 0x1, '\x00', 0x1}, 0xa}}}, &(0x7f0000000540)=0x84) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), 0xffffffffffffffff, r0}}, 0x18) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) lseek(r7, 0x851, 0x0) r8 = syz_open_dev$evdev(&(0x7f00000001c0), 0x2, 0x8000) ioctl$EVIOCSMASK(r8, 0x40104593, &(0x7f0000000080)={0x0, 0x0, 0x0}) ioctl$EVIOCSKEYCODE_V2(r8, 0x80104592, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x6a03, "285e5b00ff1200ed55fff0ff00"}) getsockopt$inet_int(r7, 0x0, 0xf, &(0x7f0000000240), &(0x7f0000000280)=0x4) signalfd(r7, &(0x7f0000000200)={[0x401]}, 0x8) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x7, 0x10}, 0xc) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000080)={0x15e1, 0x0, &(0x7f0000000040)=[r9, r6, r6]}, 0x3) r10 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) r11 = fsmount(r10, 0x0, 0x0) futimesat(r11, &(0x7f0000000280)='./bus\x00', 0x0) 3.760434361s ago: executing program 2 (id=8255): syz_open_dev$sg(0x0, 0x0, 0x8002) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x5, 0x0, 0x0, 0x7fffffff}]}) r0 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, 0x0) ppoll(&(0x7f0000000680)=[{0xffffffffffffffff, 0x49}], 0x1, 0x0, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f00000002c0)={{0x2, 0x4e22, @empty}, {0x6, @random="13e4cf10e209"}, 0x4e, {0x2, 0x4e23, @rand_addr=0x64010100}, 'bridge0\x00'}) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000700000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r5}, 0x38) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000003c0)='cubic', 0x5) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000108fdffffff0800000800000000", @ANYRES32=0x0, @ANYBLOB="00000000a304040008001b"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) sendto$inet(r2, 0x0, 0x0, 0x4044880, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r7, &(0x7f0000000140)=[{&(0x7f0000000300)=""/92, 0x5c}], 0x1, 0x10a6, 0x6) 3.740321589s ago: executing program 0 (id=8256): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)='R', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000580)='\b', 0x1}], 0x1}}], 0x2, 0x4000001) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000180)={0x9, 0x203, 0x7, 0x3}, &(0x7f00000001c0)=0x10) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000b00)) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x40002) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3, 0x0, 0x400}, 0x30, 0x2) landlock_restrict_self(r2, 0x8) r3 = landlock_create_ruleset(&(0x7f00000000c0)={0x2, 0x3, 0x3}, 0x30, 0x0) landlock_restrict_self(r3, 0xf) landlock_restrict_self(r3, 0x6) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0xfffffffe, 0x12c}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000580)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x45}}}, &(0x7f0000000480)) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000200)=""/88) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000380)=""/131, 0x83}], 0x1, 0x80000001, 0x3) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x40) 3.611131469s ago: executing program 3 (id=8257): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000780)=ANY=[@ANYBLOB="1800a0033f251925fe7a70800000000004000000040012808be2b4a3e03d22aadfe5202dcd35d235b969882410d7b3a4c113d1a75c60e57c653da33d791b46ec8bd5c8933b0bb843e2029a4c1735e3d461a0e7986d1ab0fb087bbf7117775691ed7ae0792a6c24cd1b1465f17922ea1b84628586f963936800c24c3c67f794651e25ad8ca21ef2c7db71699987f67b79ac95dfe51516fdc4bb3cb2140efd8aa066d4957ff1366cfffe9d10"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000180)=""/165, 0xa5}, {&(0x7f0000000240)=""/184, 0xb8}, {&(0x7f0000000300)=""/39, 0x27}, {&(0x7f0000000440)=""/231, 0xe7}, {&(0x7f0000000540)=""/151, 0x97}], 0x5) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) fsopen(&(0x7f0000000040)='virtiofs\x00', 0x1) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002280)=ANY=[@ANYBLOB="300000001d000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="40ed0ffd090002"], 0x94}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x84100040}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x10, 0x3f5, 0x100, 0x70bd28, 0x25dfdbfd, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000010) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000840)={'vxcan1\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x0, 0xff, 0x6}, 0xfe}, 0x18) sendmsg(r3, &(0x7f0000003d00)={&(0x7f00000005c0)=@can, 0x80, &(0x7f0000002a00)=[{&(0x7f0000000680)="0717e47c9be1ffe78a842b7f0f2b5677fb3f4abcca903454d39e80090b0eadd250e1a88cc62ec20d3d8a0a313a84", 0x2e}, {&(0x7f00000006c0)="8e9c2f161901cfee36", 0x9}, {&(0x7f00000017c0)="c8fb018c9d635c5c43972938b408a4b953ec1652c25471d05aec97d6f6c1a5acf3709f0a30d92902e43423f60daddf26841e0b5158cfd101bcfd7fd2abfd5e36ffe9e238a5212ec828ea2be7d056b57c5bc69528374846be1c745e355cbb8a67ce8c1cfb531a1b4be3c87779ad3fbca8b1a81382c4d8021ff197e091c8383589b77e3587748e9c53038aea697020b362a97707f9de055ddcaec81a061b1fe8141582dd4d698f4058d0397895ea7e02d65cdf422da77914974a0a6b2a4f50072d2209c3396bacea99a54a04aec4795385fa155e49778333a98680354cba693a0ae0e3c32f193805a361687d2e268f88963028cd6ce9273837d2a8a814ce3da4a5edb89de02275f80b67c0f4b8e4e4280264c65399018ea7fc2cca874beb788252f8cf59497a3a6f7262c93642d0ec8fbecc3bb9683580733ccc70a193aad432c5cbad0990b29f99c5a31cb23f677470ae35d00c8c08a6ad8430faf300f2ba4bc960a485c32c5069c721edbbf7b5d7b0724e76ff8d0bb2c0bfb40ca4c511b1365034f0d7feb41e279e3b0672cd54dea0afc7bfeb4660eef0c1ddd82da2dc45885e7b6e334828e61c42584aaa1aeea6a3139325ae34c465ce8a149bc9adeabe1d83df68edf000f85abc2311392e378dda115e5d8dcef3cb3a87c8bb64067eb3af2089e633c1a38bbdd8fdbf1b836479eb790e755c0a1e58fc4ddec548f139434463b640cde9ecbffebf8d22b70c64743adb863b8568bafc375174b9f21f171795acdd80af0347a47d37981545ee11c50cc9ae5644df3874f7ce95074693b2501074b1ff68ffb3b33d33d94daf6a9b3b6a3149b892904a1343b45881ece9d1f23f38a9375da9ef6403f11c5933a70996739fb677f747189e21c4b3b8c4b2b85a83a4e2ed812f6635b4a5f3d802b172f1d7ba6f3f412fcd8520e49cbbd81ecbb214a099a9f890688eb718ac08c0fdf891c1e32511966b916fa538b6b77f06d5780d729faf21024ee0b0b1538b1577eda667cf2cf3ebb2c802174c5403a202666d16918f93e4025c8f1f3e11b324d5273215599890e012c601676ba117c637a24d8d01fcecc2c6995eb0cd87575b33703c19a042f96d7562005649caf94d065c6ca15ce44974f014a595dc9c7968b6986a9c90c13bc927877a4e03b7ce6100574ccfedad71855e173e18593712356d223ae6409d7f6c5226ebea0fdc82627ea740e058e9e799b405421eab754c3ad1cdfaf5a3fefcd15e38966130bba3a51f208ce96c6e0fc071818810848de9fb949f481950e09b55b6b0da718016956cad85a4b6a36878d0f4ce664bc3004efb40923b604a70a53500371513e713a008b2b7445b2288abd5c3bcfa36c62672af34de86ea5ce89e3c2db40f9f65bef750262823f79bbf03f19fd0efa15353c6d1f6e0071cdd517bda44f04d51fc173e55011ab09191c8ccd908f8e343c0b64b31b4dd46602127aa20872b67e9c469510545f18ebff90930e96e6dbdbd7a5a04278493367d00b9721868bc4f2c5d98007fe66a488b2676f5fd6db244534bc3d352c67a43c5de620a7ba4b6148cf71e80046eb0669e9c806a68581125ab7731938ec6f3e11b67936f4f53b03c949264676c51e863a6d224ae001803b5cdfa450192b6e42c5597c2b3eff9e57957a58bd47cade4afbdcb4f489b096aed0e4acec5ff08e8f0d5ff5bfa081a07121ba345ed37cd33d2730a82ce4f24653a072f41474811492be311997ff2ed61debfe97fea25688f622acd496acea36268b4933ec0a9c31700de67db0032bf25f0d43d0f2ce49ca9f5a7b5864a0c42d3a866fe04d73c4e92dc94b7a35e376a779e1cfa783552072debb800d048ad6e67dc193c507ec8f2ec585debecf4e2b270850a117dfc068ef1a9c80d939e7474f8dc8d3e11bdd6a71880a223b75607c36e1ab0f4638a0af4130844c2ca24d0150267e2134e79b375abc907e095eedfcb59676e75707f9aeb32953e00b0085f63f84519300bcd1e05bc85f3670eeed5889351b985c8a702e902b41a030948120637fed28fb8c0419fe8caf05a4abb9ac1f454fceacd3044a749c949bfe7f5ae0e5d25bd90f07fbe05c728757207532c87bbc66ac3d3e666689d339752215af0747671624dd37a7fc4b0a8b20a699e207e7ed4e9ca28aa6d2f67cda346e0acf4012570b4d58c0a6d77d70a40185abb4a4358e790799e0d8af492edff1c627822f465ae64426d276a308d1847a19f0d76617d0641d734a1a5f116e4f41defdd93b3a211d85ed84ef3e7960e871a896ee364c24ad9a47d66bef157aa116aef905f00a7b2da6640943fe73a74296b6debacfc7cec2c4b6454bfa5036ac210117f5c4d8916e1c87998032d22b095f872c8711cb225a3b1318bb3884d47ac695d0b5b88cce69c7d591a6d7d2cc8927c0d85ecc91ac3f5f10fbd2ff106866771c5b314abe79fcc2e7e5bf738896530dd2e36485f4bf1b822f75dd0a6686dfa9920076c2f3d89c0b0c4659d4b95f3ca5a051053d6edce17ed21502864736d74015204a78b6c8c1eb79028b356203dcdff40e8c7fc134114f9c2c3d7a0494b14c2e6aae0af7e5f16d1c0e61ed31f75ff999b546683d22498e42d9290f992b7e5900b6eb1d8c9329a7f98dd64bdf1f44bd01e229db8a3764fe88bbdeb9cdd3ec30d6495b0b70d2848de7cbab551ceeb61b4c927fad79fc3ad529c929c6cd3f275fab41a5913d896297cca2c47abfe6156af04f432cdd294285fc58027f5d7ebbe2996e63d6af84064b46e0732cc08f06b63c065cfcaa27ddbff07630f8185718b5da1de9aef30fcd7446bc332dabb0d67fd5fa57e6d1355153dae184729cdc765e1e58e9a41a46421c4ef15628c2c5bd50887f68f0080f60e8957c74fa0ffaff7d4a217168bd4c05dd0ae62f0102f64c8bebdecc69cdf6977ece8d5cffc1f69fcb4f4eff72422d1d1057980c99fc9bfbe1b1613319b76e922eab7274ebc06b6c720f38cc8dcf535716c5eac5641a244c24e2f2ced2facb3fdc22a060dcc8a943a2c7d1223c229574bdbf2f835c2a71d561ec9afd9089e9da1e7eb06ae473ecd08c32ceb1b5f8503051a7a06c32a841a9415072a7bd71a1a6d5d1e6f1e5d90f37e468c98a7d4dfabf200aeb967bd035e064897794bffb4d1e5e11b2df88a761a5b5af32066767d7ce41b94464b49f6aedcf8484dda16dc5c483b992a6936457d1e797cbcf20884f41e8fd6b14669da63bfd7aa57aa4c6748165350a39dafd4d8c53314e37e5ce71d7468a4c5447b69922c05598fe0314fcab16d8dde54f69796d58d72d298ad3cac98f548df0d58624f462beb3c4e4216dbf3c8624926310cc459de2382436f24379ae74f5572e4afd111cd304762b6ab0d2392bc8611caae16461452d7b759bbcb6a8eeade5c2d0a58937b14440f37033d510d9fca997e0ebbe03dc8a95f5868b56e62ce0adacdbd3e66a317936fee831ee733ad0b0056e269ab9f83b803450ab49a063b832c0f51dcc49c682a514b4b2e937dbd995544fbc76c6bde48315827fdaf619bd17ec676d8ce2482eef705392acf81ad31b31e3c6ba89112a261b3ad05d91368e0d667979c2c226daf89c49cac54e30ffda71d55998d55bee7c1a38ccbfd845a8270a6a03f3b8698e3ad20dac21c7ccbb347caecf4efcde3f37f112e260f1c31bfb80f03ff933532f040ab0251e9460e8f09db1fc7302cb9857ef3a6389fe3dec4d6528de2cce0d4b383c46633c0f2af9ef57293a6a5b3e447d2377608ddd2f5ac97402e77d50401197397c333b75363badb7b97070d876b0c683108d542ca8e6869623eccd7f650fa45d6428b9f268a1cc6e184855e5a2fe06f6524f58a46e0034ca29ba4b8dacc71e7aff90777c50d4850b7a48c0841af8bec7aa296098675f25cfd6152e5351ab851cff6c9e49b684a18bd947e9bfb109d4e7d093f444a87715b3739d181b0bb8e7a7ccd1a62f883863e665a15e2b9bb1483686f8ead029c76bbab7c5be125cf09e7767472ad19b2530de7c0fb9a2fa6fe592a9dbfddb1c317fd3d78c9ec381bbe0a5b6d7761a8469af6fe8d217810f125f8c4a020e0bff854f9e33fdf9fda8464d1e53bbc8bef877c74ab2b5315e1c453106ae1da9b64b7f31a5f04bfabff43c579220228766ab04aa22fd7040447d799c6af435b29003271123dcbdd33f8c4ba4e7f0cfc9ea414b49a762697abfb7993696a0ddc73ef7cfc0075b295528fa192961b73478846ccf1cefbb8e1b80bb183caa37b649562a369765a1037081d85bec3f0b7f4a4a9500e716bb8428faedf7910b985652cb2a54317d6fbfa21b28e808cd29bf172f15587c73da1e4710469bed4843167219e7bb09590421eb14ae30c5fcf97030c6b9cf2bab672e8c6bf6e00620f7324d448ea301983bf8f201c1e9e0493556c408be276363aa9215affda7d71b861478ac9891d018d9aba44e6bf7be99471f404efbd9f724e7ccc355dc245075eb13941e672f82214ea66d9aec47273ea2cfe566717febe0753f38d8ff3c3d6a8481144a72a6959a62f6b3937381744c9012ca1378f3b4c3204fc0aec7d43adf5b7ace07c68eb072859f37880aefc57cf9ecdce228e716e941c584937d774c90d24501a7ef36432fd728ee6ba24251a8ed633b7f91c7ee50d621dbf7329eef0cbc6fabf3211ba71b0379038e0a8244f5345258bb6cf6b249c5b59555192fee6b1c7263752f5a12a62e259bf3d76506ecd8ca82c2ee7cb68391c4a5f60d6d0870266a189825ef9ef1c08581ee077bfd059d857bf3c9203edad015b8b30ba6c1b0dd29ab6c8fc3eae6f0b2ad2168e54f93ed2c43f0d4fc7835ca27c74fffa43e459231ef7a166784beea95ef20467a9bb7cd05e52f33980dfe30f84967fad1e9d10a90aaf1a7e153b36d1402ba94dfe1e441faab98b422067e7c8a87c2b5c30dce4eae1ec998b891e8c11a4d68e514f29e9b1439c68f9dd9632", 0xdbc}], 0x3}, 0x48004) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="5405168aa7f9ffec01d8a400000aac3cb4d3383122b01550b5dac81628ebfdd7ff6ff924a9211319138b0013fe819188f3bdf2b086642e6674a39751b9aa17f366e9a9b1637420f8cc019e8653c67ff85a02f4468464f5279e8a08952fefa7acb33a2aeee0af20a1b5ad6b6349e39438523dcaabbdc715a70bfb1a32eb5b93", @ANYRES16=r2, @ANYBLOB="000326bd7000ffdbdf25510000000a000600ffffffffffff00000a0006000802110000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x804) 3.492211529s ago: executing program 4 (id=8258): socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) r3 = memfd_create(&(0x7f00000001c0)='\xf1q\x97.\x8e\xc3\xfe\r\a\xee\xc9[\x9a%=\x01#\x00\r\x9a\xbf\xd9\xcb\xe4\"mqo\xa1\xd2dhV\xf3\n*_A\xef\xc7\xa4\xee\xb2z\xc0\r\n\xd2\xa3\x98_\xf6\xb6\f\xbdOS\t\xfe\x8a\xf9>\x05+\xfc\x9c\xa5y\xf8\x17Vo\x00l\v\xe5\xff\x92\xc9\xaeH\xeeK\x00S\xf6\xecz\x87iiO\xdauvJ\xad\x82\xa5\xa1]\xd5+=\xb4\xf0\x02\xadT\x81\x00\x00\x017\xc5\x8e\\\x00\x8a\x0e\xc50L \xd5\xf3\xee\xa8\x82-\xcb\x00\x00\x00\x00\x00\x00\x00\x04\xa6\x19\xe1\b\x84a\xb9^\xc4\xa3\xa2\xd8\x82\xd0\x8e\xd2\xd2m\xea\x92\xd4\x1f\x1d\xeb\xa0\xf7\x00\xf8\x00Wzh\xd6\x9a\x1d-\x03m^c\x05O\xa2wVA\xe2\xc0\"\xa9\x15\x1e\x13\x82o\xfe\x0e:\x1a\xbb_.Bt\xa7\x8c\v\x92\x90H\xb9\xfd\xf4c\f{\x86\xfd`\xce_k\x17\xf9r\xe8^\xc0N\x8b>\xd6:\x1d\x02z\xec\x9d\xd64/\xc7&\x91\xa3C\xd4\xf8\x16\x82aS]\xa0\x9a\x9bE{\xf6\xfc\x8b\xfb\x96k\xfc\xe3\xf3 \x1d\xd9@\xf6\xdcQG\'\xed(G\xb0\xba\xee8\xa5\xa8\x8c\xb1\xab\x8b\xc8e}\a\x1f\x84(\x85HB\x119\x8d\xab\\\\\xba\xb3\x89>~s1@\x9e\x8dD\xb5\x8c\xb6H\xbfJ5R\x06/.\xc5\xd4o\x0e\xa0\xdd\xb5\x8b\xddwU\xd91\xd2\xcfj\xc4=-\xdb\xa8\xb5r\x9f\xa3\x9f*}\r7B\x9e\xc20\xf5\xe8B\xd0\xb6\x00\xd52\xc9w\x8bAu,\x8b\xdc\xe7\xd8\x8d\x85\xd0\xa8\xf0\xfe\xa9\xf1\x92\x18?\xc1\x02w/\xef\xdb\x02\x87_\x89 \x14T\x9c\xc1\xf6ck\x14 \x18\x10\xb3`\xf4\'Oz\x12\xd2Wr\xc6\xba\x00\x99\x8b\xfd\xdbz\x1e\x1d\xd1\xadFb\xe7\xcb\xf52?\xfbH\xf7\x9bE\x13\xe9\xec\xea)A\x87\xfb+Y.\x85\xd5\xca\xf3F\x13L\xf3\xe7Kd\xe3\xe0*M\xdc\r\x06{.+0\xab\x86\xe7\"\xdf\x05\x90|\t}\x85\xfa\x8a=\xf7\xa0\xbd^F\xf1\'\x9c\xd7\xfc\x01p\x1frn\x83\x10u\xc6M\xfb\x92r\x1f\x8d!\xe5\xf3\xd2\x80!w\xf5\xa6\xac\v\xccr\xf7o\xbbq\x03\xd8\x90\x9a\x1d\xa6}\xf1\x88\x036\xfa\x15\xed9\xc52d\xb1\xd0:\x91\xb5K\xf0\x14\xf3d\x91w\xf2\xa2j\x91U\x02!&\x19\x12\xaeg\x12x\xb3\'xd\xddG5\xc9\xb1\x0e/\xfc\x81\xa6&\xdb\xb5e\x1d\xc9\xffK(\x9d\xdf\x8d\xc6N\xdb\xd50mY\xfbE.\x13\xddw\x8a\xef\xd2l[\x84\xbf\x0f\xa9\x18\xe9\xcfL5\xa7\x14\xcc\x92\xde\xf2X\xb6\xbb\xe3\xa4\xcc\xfb7[\xebS\x9cL\xed\xda\x04\xce/f\xa6<\xea\xee(t\x10G\x10r{\xa9\x9b\x85\xb93\xc7\x8a\'', 0x6) fcntl$addseals(r3, 0x409, 0xc) fallocate(r3, 0x3, 0x0, 0x40) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffffffffffffffff, 0xd, &(0x7f0000006680)) socket$pppl2tp(0x18, 0x1, 0x1) io_setup(0x2, &(0x7f0000000200)) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r5, 0x4020aed2, &(0x7f00000000c0)={0xffff1000, 0x301000, 0x8}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES16=r6], 0x20}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0xc3ffffffffffffff}, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000004780)={&(0x7f0000004680), 0xc, &(0x7f0000004740)={&(0x7f00000046c0)={0x7c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x771b}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xc}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xb87c}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x101}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xa}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f0000004600)={&(0x7f00000030c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000045c0)={&(0x7f0000003100)={0x1210, 0x15, 0x4, 0x70bd25, 0x25dfdbfd, {0x1a, 0x5}, [@INET_DIAG_REQ_BYTECODE={0x6e, 0x1, "440c0dd5580348febfb09ffc60e34f7cc9b722bd2f33caacc9d1f899d703c2216ce235c28c400419298b3d6bc08dcd41046e7b610037d50487015f313c0e4281736a021655cf37b2d7a4e8bfdd432f9c7bc16e5e327d006f6445aeb2bfad902ebe63950eac5aa961e132"}, @INET_DIAG_REQ_BYTECODE={0x1001, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x1f, 0x1, "d1800a2e364dc40ea9c6809729086c5ba132bae16306edcba3e44c"}, @INET_DIAG_REQ_BYTECODE={0xd2, 0x1, "7382b9d8e032243d58b269b43893c02edab1e25a29bc3d926faced2853cf7c4ba7bbbaa206a159e53ddb2f10708e8de4f3dc7a64cbf9dddc880e28137e9a226a85bbbaaec172d0d8cf3479b9584ac1588048efc0399a510868505444ccaa7bed012e6c5725f264e94dfe1097e85b80ef7ae78fbec1e23d03576f15c71290ad271075026ee8512f215e388f42b8b6714ba97db8734d8bf8f810f40598d50b7d289952cc4b4a5d84cd41b60d81e2254a48a775b32c0fb4f9141ba7c8fe6627981adc61117938b7e43a4a3d6b58b9ac"}, @INET_DIAG_REQ_BYTECODE={0x8d, 0x1, "bde6f738880e5006f1ca5421f2b2ab3fbcf55ff75f339c2813c145e78692592f1d4a0e4e1740cd5ece8a4e668a80337fc8be9936bdfdc93060cf11134971626206a8be33b665bef0f84597c93621a16662bd71dd86374eec338d81988c9d6a54279b8b80261f1331a3b237a5a755af7166d7e685b7cde664de9bdfe1f6b1e88350c363754bba1668eb"}]}, 0x1210}, 0x1, 0x0, 0x0, 0x40000}, 0x48880) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002f80)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)="7ec6932fd57f06cdb0e747", 0xb}, {&(0x7f00000000c0)="3a2a76d9736a9f66878005962c5513e55b1accba8e7ecbbddc4061fc3169ca1dd6df6f587ddd48eee719dae41f628ffb682edc5336e816a04c1926ed55f6ce7b7ab3612fdd755f1f1036b746173f8a4a58a8663f965b9a9172f7241ceab7394af5da1369c89531bbe0119ee9bcdaeb2e46bc43adfe766fb252", 0x79}, {&(0x7f0000000140)="4e9e224b553bd414c596ec323d78c70a0765e3c417aa643a7ee5f3f3bb7d87a970ca9d2711eeb7fb334d8598a9bc", 0x2e}], 0x3}}, {{&(0x7f00000001c0)={0xa, 0x4e21, 0x8, @mcast2, 0x2}, 0x1c, &(0x7f0000002500), 0x0, &(0x7f0000002580)=[@rthdrdstopts={{0x68, 0x29, 0x37, {0x2f, 0x9, '\x00', [@pad1, @ra={0x5, 0x2, 0x5}, @generic={0xf}, @enc_lim={0x4, 0x1, 0xff}, @calipso={0x7, 0x38, {0x3, 0xc, 0xb, 0x7, [0xc, 0x0, 0x9, 0x6, 0x1, 0x21]}}, @ra={0x5, 0x2, 0xbce}]}}}, @tclass={{0x14, 0x29, 0x43, 0xfff}}], 0x80}}, {{&(0x7f0000002640)={0xa, 0x4e23, 0x4, @mcast1, 0x10000}, 0x1c, 0x0, 0x0, &(0x7f0000002700)=[@hoplimit={{0x14, 0x29, 0x34, 0x8}}], 0x18}}, {{0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000002780)="855c0dc774cbfe1483cbe169bc29ca55e9e18a8165b2107122e4002fb5b56297902f23379fe34eca9e30ba27786d2966d8cb1d28911a30f3031df77ff6a4561240e7320658c9689040415148007529fcc97c4196ab4c9311b1e9eea8606f86a6705ce909c746bf6d35552e4ad4b4a7ff261ce08356fe957e2722073af4dea3997644602c04eefa591865a14cabab0c61f508a2", 0x93}, {&(0x7f0000002840)="a1e9758f0cbde0abe925c22a6e5cd85fd42f698ea37abdb1aae376f1847d6446509cdacc0ebb1cc64c152ec2778f4b4d1840c06bee051c164763ef36895fed4ca5ce388f33a333", 0x47}], 0x2}}, {{0x0, 0x0, &(0x7f0000002c00), 0x0, &(0x7f0000002c80)=[@rthdr_2292={{0x48, 0x29, 0x39, {0xc, 0x6, 0x2, 0x9, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @empty, @private0={0xfc, 0x0, '\x00', 0x1}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x5}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xfff}}, @dstopts={{0x48, 0x29, 0x37, {0xff, 0x5, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @hao={0xc9, 0x10, @mcast1}, @pad1, @calipso={0x7, 0x10, {0x2, 0x2, 0x6, 0x4800, [0x0]}}]}}}], 0xd8}}], 0x5, 0x4000000) bind$packet(r0, &(0x7f0000000200)={0x11, 0x4, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, 0x14) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000004640)=0x40) 3.236104834s ago: executing program 3 (id=8259): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1b) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x6a040000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000400)={0x43, 0x4, 0x2}, 0x10) (async) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r3) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x43}, 0x48) sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x30, r4, 0x1, 0xffffffff, 0x0, {0x2f}, [@handle=@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000041}, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r4, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x3}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40804}, 0x0) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=ANY=[@ANYBLOB="581300004100070127bd7000fefdffff047c000008004280040008000c0001800600060008"], 0x1358}, 0x1, 0x0, 0x0, 0x4048011}, 0xc0d4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) (async) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r7, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) (async) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, r4, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x4}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8000) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000fcdbdf253900000008000300", @ANYRES32=r10, @ANYBLOB="0800588004040280472c2885aa0dc1f99da998336ce5569eab97eaf9f01dfd809360d8193c293f6814b848efa04767c7023f6dbc1b00fd2ae322ff66b46164eb975a3c48782ab056b81dea80dcd8c8392f9180b3947fde00437d2ef725d0d19cccbcdc8e7ce444884c2743592282dcba635a28bdadaab0facac7f8bfd0fa917f995783ce6599db0c398de050113600dfa0343182be884fb5dfb239fa2efa1ee31ea03d3423e41840aac24fd61f39ec4f3555838c8f46eab1329b0e6c01d0c7e2d8c45efcf00b511ce80b9eaf1c068ec8d8194d5ca589b10f37a2bec0f95be3f0dec9508d0422"], 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x44000) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xa003201}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r5, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) fcntl$getown(r0, 0x9) syz_usb_connect(0x0, 0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100366003308801b02e32b8c010203010902340003fa01106609043bff03fd494a0509050f000002090e7f0705c2"], &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0}) 3.059952164s ago: executing program 4 (id=8260): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000001c0)={0x10, 0x0, 0xfffffffb, 0x80000000}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x4140045e}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000000240)={0x10, 0x0, 0x0, 0x51ee2927639cc674}, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000000340)={0x10, 0x0, 0x25dfdbfc, 0x400000}, 0xc) r9 = socket$netlink(0x10, 0x3, 0x8) bind$netlink(r9, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc) r10 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r10, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc) r11 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r11, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc) bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc) r12 = socket$netlink(0x10, 0x3, 0x4) writev(r12, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000006c600000000000000feff2c707f8f00ff", 0x58}], 0x1) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80402, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r14, 0xae60) ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x0) 2.613394732s ago: executing program 0 (id=8261): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) connect$vsock_stream(r1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) pipe2(&(0x7f00000000c0), 0x80080) listen(r3, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000001780)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x2, {{0x42, 0x4}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8800}, 0x20008000) sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) accept4(r3, 0x0, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x400000000000000) 2.488556562s ago: executing program 4 (id=8262): close(0x3) r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x413c, 0x0, 0x0, 0x158}, &(0x7f0000000280)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0x6d1, 0x0, 0x0, 0x1000, 0x5}}}, &(0x7f0000000300)=0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f00000002c0)={r1, &(0x7f00000000c0)='\x00', 0x244000, &(0x7f0000000100)={@_ha_fsid={[0x4, 0x8]}, {0x7, 0x9, 0x7, 0x1}}, 0xc, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000001c0)=0x9}) syz_ublk_setup_queues(r1, r6, &(0x7f0000000540)={0x0, 0x1aa5, 0x80, 0x2, 0x20000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3104, 0x1, 0x0, 0x21a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587d, 0x8000, 0x1, 0x69, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffe, 0x800, 0x10000, 0x400000, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6253, 0x200, 0x3, 0x0, 0x0, r1}}], 0x1, &(0x7f00000003c0)={0x2e, 0x38, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0xdbd, 0x0, 0x0}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x94) 2.348298249s ago: executing program 1 (id=8263): r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000040), 0x10000, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYRESDEC, @ANYRES8=r1, @ANYRESDEC=r0], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4044000) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000013906c08e90f01db9be9010203010902120001000000000904"], 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'ip6tnl0\x00', 0x0}) 1.998590657s ago: executing program 4 (id=8264): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000200000040341278560001010203010902270001010080320904000003fe03000007058102000200070502020002"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000780)={0xfc78, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x1}, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r2, 0x5b03, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x0, 0x0, 0x0, 0x8000, 0x900, 0xffffffffffffffff, 0xfffeffff}, 0x50) r3 = syz_io_uring_setup(0xf00, &(0x7f00000001c0)={0x0, 0x5964, 0x1000, 0x0, 0x4c}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r3, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r8, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f0000000000)) r9 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r9, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r9, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0x40}, 0x1000004, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x10, 0x29, 0x37}], 0x10}}], 0x1, 0x8080) syz_emit_ethernet(0x66, &(0x7f00000004c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x1000002, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0xfffff788}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x2, {0x0, 0xffff}}}}}}}}, 0x0) r10 = socket$kcm(0x2, 0x3, 0x2) r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='sched\x00') write$eventfd(r11, 0x0, 0x0) close(r10) r12 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r12, 0x6, 0x0, 0x0, 0x0) 1.499715753s ago: executing program 0 (id=8265): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket$vsock_stream(0x28, 0x1, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x42060680) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x40500, 0x0) ioctl$PTP_EXTTS_REQUEST(r2, 0x40103d02, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x408c0}, 0x4000000) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0x4000000a00}) fsopen(0x0, 0x0) socket(0x11, 0x6, 0xc) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r4, 0x5, 0x4002) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00'}) timer_settime(r6, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x80, 0x2, 0x0, 0x0, 0xffffeffa) r8 = userfaultfd(0x40000) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r8, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 1.382232056s ago: executing program 2 (id=8266): r0 = memfd_create(&(0x7f0000000980)='\x01\x00\x00\x00\x00\x00\x00\x00\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x1dbZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\x82\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xc0L\x1d\x98Zq\xce\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1j$S\xfc\xb1[N\x8d\xcfI\xc8\x91\xbd\x19\xcb\x8b\xf7\xca\x8d*\a\xf3\xf5C\xdd9X\xd7\x87\x1fuYG7}%)\xb9\x00\x00\x00\x00\x00\x00\x00\x80W\xe0I\xfd\xa3\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]^\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1f2\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x9e\x035\x8a@\xd4\x1c\xe0\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\x00\x00\xdb\xf9\xcb\x7fL\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d\xf5s\x03\x1a=\xcc\xd1\xa7\'\xa0\xaf\xf7\xec\xaf}\x0e\a\x00\x91U\xf9\x8e_f\x8e\x00\xc3r*\xc7\xaf\xe2\'\xe0f9\xde\n,\x8c8Y26\xa6u<\xca@\\\xdc\xf1\xb0\xb8\x9f\xc2o\x0f\x02I\xb6\xc3xH\xc3\x88(\xb6\x97~\xea)\'\xa3:\x8d\xebc>z\xae*\xc2\x14\xe9\x89#\xe2)\x9a\xb0hR\xffa\xf8\xde\xf7q4\xcfV\xbb\xc3t\xfa\xa9\x05>\xaea\x12\xce\x1cY\a\xb16\xb9\x12v\x1dN\xe1,_3\xa9\xa36\xaa.Cj\xd4\ah\x92j\x86\xe1\x1f\xec1\xb1!lI\xc7\xbf\x85\xdd\x03\xbd\xeb\xec\xf9\xf3\xaf\xe02AzX\x9aO\x93y;\xa7,\xbb\x11\xe6\x8fn\xa0m\xf8\xcf\x92\x19\xba,\x0e\x04\xbe\xbb\xdd\x00\xb1\xb6Enr\x17\xa4\xc5)\xcc}*yN\xdc\xc3\xe0\xf2\x10\xe00xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x4110}, 0x1}) io_uring_enter(r1, 0x2000, 0x2640, 0x9, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) splice(r2, 0x0, r1, 0x0, 0xffffffffffff7fff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x94) socket$can_raw(0x1d, 0x3, 0x1) r4 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000408106050000010000000109021900010100803209040000010a00000007058102"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x84) syz_usb_control_io(r4, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@gettfilter={0x24, 0x2e, 0x2, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xe, 0xfff3}, {0x10}, {0xf, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c404}, 0x48085) r5 = syz_usb_connect(0x3, 0x36, 0x0, 0x0) r6 = socket(0xa, 0xa, 0xfffffff9) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f0000000900)={0x0, 0x0, 0x3}, 0x1) io_uring_register$IORING_UNREGISTER_PBUF_RING(0xffffffffffffffff, 0x17, 0x0, 0x1) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r6, 0x0, 0x4000040) syz_usb_control_io$uac2(r5, 0x0, 0x0) 583.408318ms ago: executing program 1 (id=8267): unshare(0x4020680) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x34b501) openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x6, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x1, @loopback, 0x10}, {0xa, 0x4e1e, 0x800000d, @mcast1}, r1, 0x5}}, 0x48) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in={{0x2, 0xce1f, @broadcast}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000480)={r5, @in6={{0xa, 0x4e22, 0x10646fc4, @private1={0xfc, 0x1, '\x00', 0x1}, 0xa}}}, &(0x7f0000000540)=0x84) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r0}}, 0x18) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) lseek(r7, 0x851, 0x0) r8 = syz_open_dev$evdev(&(0x7f00000001c0), 0x2, 0x8000) ioctl$EVIOCSMASK(r8, 0x40104593, &(0x7f0000000080)={0x0, 0x0, 0x0}) ioctl$EVIOCSKEYCODE_V2(r8, 0x80104592, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x6a03, "285e5b00ff1200ed55fff0ff00"}) getsockopt$inet_int(r7, 0x0, 0xf, &(0x7f0000000240), &(0x7f0000000280)=0x4) signalfd(r7, &(0x7f0000000200)={[0x401]}, 0x8) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x7, 0x10}, 0xc) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000080)={0x15e1, 0x0, &(0x7f0000000040)=[r9, r6, r6]}, 0x3) r10 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) r11 = fsmount(r10, 0x0, 0x0) futimesat(r11, &(0x7f0000000280)='./bus\x00', 0x0) 0s ago: executing program 1 (id=8268): r0 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000080)=0x2, 0x4) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz2\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz2/cgroup.procs\x00', 0x2, 0x25) write$cgroup_pid(r4, &(0x7f0000000100), 0x12) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f000059e000/0x400000)=nil) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz2/memory.limit_in_bytes\x00', 0x2, 0x0) write(r5, &(0x7f0000000280)='4096', 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) connect$unix(r6, 0x0, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = userfaultfd(0x80801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r8, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x2402c004) ioctl$UFFDIO_ZEROPAGE(r7, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) kernel console output (not intermixed with test programs): 282.530595][ T5712] usb 2-1: MIDIStreaming interface descriptor not found [ 1282.566505][T29034] usb 1-1: Using ep0 maxpacket: 8 [ 1282.583612][T29034] usb 1-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 1282.597353][T15068] usb usb3-port1: unable to enumerate USB device [ 1282.608513][ T5712] usb 2-1: USB disconnect, device number 2 [ 1282.620055][T29034] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1282.654662][T29034] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1282.664538][T29034] usb 1-1: Product: syz [ 1282.664559][T29034] usb 1-1: Manufacturer: syz [ 1282.664573][T29034] usb 1-1: SerialNumber: syz [ 1282.722959][ T6050] udevd[6050]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1283.109005][T29034] usb 1-1: 1:1 : format type 0 is detected, processed as PCM [ 1283.109195][T29034] usb 1-1: 1:1 : sample bitwidth 177 in over sample bytes 2 [ 1283.134990][T29034] usb 1-1: 1:1: cannot set freq 137 to ep 0x1 [ 1283.150162][T29034] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1283.267264][T31555] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7854'. [ 1283.295991][T31555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7854'. [ 1283.351884][T29034] usb 1-1: USB disconnect, device number 67 [ 1283.402115][T31558] netlink: 'syz.1.7853': attribute type 4 has an invalid length. [ 1283.448850][T31558] netlink: 'syz.1.7853': attribute type 4 has an invalid length. [ 1283.472707][ T5712] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1283.502682][T31560] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1283.610883][ T5629] udevd[5629]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1283.636548][ T5712] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1283.637914][ T5712] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1283.637941][ T5712] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 1283.637965][ T5712] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1283.638010][ T5712] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 1283.655770][ T5712] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1283.655797][ T5712] usb 4-1: Product: syz [ 1283.655850][ T5712] usb 4-1: Manufacturer: syz [ 1283.655864][ T5712] usb 4-1: SerialNumber: syz [ 1283.696269][ T5712] usb 4-1: config 0 descriptor?? [ 1283.713773][ T5712] ums-isd200 4-1:0.0: USB Mass Storage device detected [ 1284.326313][ T5685] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1284.488210][ T5685] usb 3-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 1284.492182][ T5685] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1284.492209][ T5685] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 1284.492246][ T5685] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1284.607348][ T5685] idmouse 3-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 1286.217746][T26614] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1286.249395][ T5712] scsi host1: usb-storage 4-1:0.0 [ 1286.274078][ T5712] usb 4-1: USB disconnect, device number 12 [ 1286.367394][T26614] usb 1-1: New USB device found, idVendor=0421, idProduct=1234, bcdDevice= 1.00 [ 1286.383782][T26614] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1286.383829][T26614] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1286.383893][T26614] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1286.409091][T26614] cdc_phonet 1-1:1.0: probe with driver cdc_phonet failed with error -22 [ 1286.433146][T15068] usb 3-1: USB disconnect, device number 37 [ 1286.476017][T15068] idmouse 3-1:1.0: disconnected [ 1286.633107][T26614] usb 1-1: USB disconnect, device number 68 [ 1287.079947][T31616] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7873'. [ 1287.103405][T31616] batman_adv: batadv0: Adding interface: veth0 [ 1287.103477][T31616] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1287.103577][T31616] batman_adv: batadv0: Interface activated: veth0 [ 1287.138332][T15068] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1287.296906][T15068] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1287.297045][T15068] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1287.328993][T15068] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1287.340845][T15068] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1287.358578][T15068] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1287.373036][T15068] usb 2-1: Product: syz [ 1287.373156][T15068] usb 2-1: Manufacturer: syz [ 1287.373194][T15068] usb 2-1: SerialNumber: syz [ 1287.393936][T31622] syzkaller0: entered promiscuous mode [ 1287.393978][T31622] syzkaller0: entered allmulticast mode [ 1287.437820][T15068] usb 2-1: 0:1 : does not exist [ 1287.448034][ T5712] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1287.550059][T31625] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1287.605247][ T5712] usb 3-1: Using ep0 maxpacket: 8 [ 1287.606031][ T5712] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1287.607353][ T5712] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1287.607384][ T5712] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1287.607420][ T5712] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1287.607444][ T5712] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1287.607483][ T5712] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1287.754604][T31608] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1287.835401][ T5712] usb 3-1: GET_CAPABILITIES returned 0 [ 1287.835467][ T5712] usbtmc 3-1:16.0: can't read capabilities [ 1288.108426][T31632] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7879'. [ 1288.174861][T31635] binder: 31618:31635 ioctl 4001af72 200000000140 returned -22 [ 1288.175837][ C0] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1288.175944][ C0] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1288.176014][ C0] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1288.327461][T29034] usb 3-1: USB disconnect, device number 38 [ 1289.160746][T31647] syz.4.7880 (31647): drop_caches: 2 [ 1289.544729][T31655] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7885'. [ 1289.557178][T31655] hsr_slave_0: left promiscuous mode [ 1289.564862][T31651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7883'. [ 1289.578312][T31655] hsr_slave_1: left promiscuous mode [ 1289.633679][T31651] input: syz1 as /devices/virtual/input/input201 [ 1289.638495][T31656] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 1289.638521][T31656] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1289.638591][T31656] vhci_hcd vhci_hcd.0: Device attached [ 1289.661603][T31656] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(7) [ 1289.661628][T31656] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1289.662346][T31656] vhci_hcd vhci_hcd.0: Device attached [ 1289.815420][T31656] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(13) [ 1289.815449][T31656] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1289.815555][T31656] vhci_hcd vhci_hcd.0: Device attached [ 1289.849498][T31656] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(15) [ 1289.849528][T31656] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1289.868511][T31656] vhci_hcd vhci_hcd.0: Device attached [ 1289.886228][T26614] usb 39-1: new high-speed USB device number 3 using vhci_hcd [ 1289.900842][T31656] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(17) [ 1289.900872][T31656] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1289.919930][T31656] vhci_hcd vhci_hcd.0: Device attached [ 1290.200036][T15068] usb 2-1: unit 0 not found! [ 1290.401306][T31675] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7887'. [ 1290.436332][T15068] usb 2-1: USB disconnect, device number 3 [ 1290.602919][ T6050] udevd[6050]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1290.687106][T31666] vhci_hcd: connection closed [ 1290.689486][T31657] vhci_hcd: connection reset by peer [ 1290.693564][T31664] vhci_hcd: connection closed [ 1290.693828][T31662] vhci_hcd: connection closed [ 1290.694928][T19286] vhci_hcd vhci_hcd.3: stop threads [ 1290.694962][T19286] vhci_hcd vhci_hcd.3: release socket [ 1290.695079][T19286] vhci_hcd vhci_hcd.3: disconnect device [ 1290.695160][T31659] vhci_hcd: connection closed [ 1290.695502][T19286] vhci_hcd vhci_hcd.3: stop threads [ 1290.695518][T19286] vhci_hcd vhci_hcd.3: release socket [ 1290.695575][T19286] vhci_hcd vhci_hcd.3: disconnect device [ 1290.704412][T19286] vhci_hcd vhci_hcd.3: stop threads [ 1290.704433][T19286] vhci_hcd vhci_hcd.3: release socket [ 1290.704513][T19286] vhci_hcd vhci_hcd.3: disconnect device [ 1290.712565][T19286] vhci_hcd vhci_hcd.3: stop threads [ 1290.712585][T19286] vhci_hcd vhci_hcd.3: release socket [ 1290.712638][T19286] vhci_hcd vhci_hcd.3: disconnect device [ 1290.713742][T19286] vhci_hcd vhci_hcd.3: stop threads [ 1290.713760][T19286] vhci_hcd vhci_hcd.3: release socket [ 1290.713812][T19286] vhci_hcd vhci_hcd.3: disconnect device [ 1290.930841][T31683] syz.2.7889 (31683): drop_caches: 2 [ 1290.946126][T15068] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1291.106296][T15068] usb 2-1: Using ep0 maxpacket: 16 [ 1291.114265][T15068] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 1291.139533][T15068] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1291.150209][T15068] usb 2-1: Product: syz [ 1291.154967][T15068] usb 2-1: Manufacturer: syz [ 1291.161687][T15068] usb 2-1: SerialNumber: syz [ 1291.562084][T31691] sysfs: cannot create duplicate filename '/class/ieee80211/1ùà^!‚lü1”' [ 1291.572275][T31691] CPU: 1 UID: 0 PID: 31691 Comm: syz.3.7892 Tainted: G L syzkaller #0 PREEMPT(full) [ 1291.572304][T31691] Tainted: [L]=SOFTLOCKUP [ 1291.572312][T31691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1291.572326][T31691] Call Trace: [ 1291.572334][T31691] [ 1291.572343][T31691] dump_stack_lvl+0xe8/0x150 [ 1291.572373][T31691] sysfs_warn_dup+0x8e/0xa0 [ 1291.572391][T31691] sysfs_do_create_link_sd+0xc0/0x110 [ 1291.572409][T31691] device_add_class_symlinks+0x1cf/0x240 [ 1291.572430][T31691] device_add+0x467/0xb80 [ 1291.572447][T31691] wiphy_register+0x1fc8/0x2ff0 [ 1291.572472][T31691] ? __pfx_wiphy_register+0x10/0x10 [ 1291.572486][T31691] ? __pfx_netdev_run_todo+0x10/0x10 [ 1291.572501][T31691] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 1291.572518][T31691] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 1291.572536][T31691] ieee80211_register_hw+0x3d3d/0x4a50 [ 1291.572559][T31691] ? ieee80211_register_hw+0x1961/0x4a50 [ 1291.572589][T31691] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1291.572606][T31691] ? __asan_memset+0x22/0x50 [ 1291.572623][T31691] ? __hrtimer_setup+0x1b7/0x260 [ 1291.572639][T31691] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1291.572659][T31691] mac80211_hwsim_new_radio+0x3258/0x56b0 [ 1291.572697][T31691] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1291.572737][T31691] ? kstrndup+0xbd/0x160 [ 1291.572763][T31691] ? kstrndup+0xbd/0x160 [ 1291.572784][T31691] hwsim_new_radio_nl+0xd8b/0xf90 [ 1291.572810][T31691] genl_family_rcv_msg_doit+0x233/0x340 [ 1291.572833][T31691] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1291.572856][T31691] ? bpf_lsm_capable+0x9/0x20 [ 1291.572872][T31691] ? security_capable+0x7e/0x2c0 [ 1291.572895][T31691] genl_rcv_msg+0x614/0x7a0 [ 1291.572915][T31691] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1291.572930][T31691] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1291.572953][T31691] netlink_rcv_skb+0x226/0x4a0 [ 1291.572967][T31691] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1291.572983][T31691] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1291.573005][T31691] ? down_read+0x2be/0x330 [ 1291.573018][T31691] genl_rcv+0x28/0x40 [ 1291.573032][T31691] netlink_unicast+0x7bd/0x940 [ 1291.573050][T31691] netlink_sendmsg+0x813/0xb40 [ 1291.573063][T31691] ? lockdep_hardirqs_on+0x7b/0x110 [ 1291.573083][T31691] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1291.573100][T31691] ? apparmor_socket_sendmsg+0x98/0x360 [ 1291.573118][T31691] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1291.573130][T31691] sock_sendmsg_nosec+0x13a/0x180 [ 1291.573147][T31691] ____sys_sendmsg+0x54e/0x850 [ 1291.573161][T31691] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1291.573178][T31691] ? import_iovec+0x73/0xa0 [ 1291.573192][T31691] ___sys_sendmsg+0x2a5/0x360 [ 1291.573205][T31691] ? __lock_acquire+0x6df/0x2e50 [ 1291.573222][T31691] ? __pfx____sys_sendmsg+0x10/0x10 [ 1291.573236][T31691] ? futex_wait+0x2a2/0x390 [ 1291.573269][T31691] ? __fget_files+0x2a/0x420 [ 1291.573284][T31691] ? __fget_files+0x3a2/0x420 [ 1291.573304][T31691] __x64_sys_sendmsg+0x1b1/0x290 [ 1291.573317][T31691] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1291.573341][T31691] do_syscall_64+0x166/0x520 [ 1291.573357][T31691] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1291.573368][T31691] ? clear_bhb_loop+0x70/0xc0 [ 1291.573382][T31691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1291.573393][T31691] RIP: 0033:0x7fd7b139e159 [ 1291.573405][T31691] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1291.573415][T31691] RSP: 002b:00007fd7b230f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1291.573429][T31691] RAX: ffffffffffffffda RBX: 00007fd7b1625fa0 RCX: 00007fd7b139e159 [ 1291.573437][T31691] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000003 [ 1291.573445][T31691] RBP: 00007fd7b1435024 R08: 0000000000000000 R09: 0000000000000000 [ 1291.573452][T31691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1291.573459][T31691] R13: 00007fd7b1626038 R14: 00007fd7b1625fa0 R15: 00007fd7b174fa48 [ 1291.573484][T31691] [ 1292.063518][T15068] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1292.076838][T15068] usb 2-1: USB disconnect, device number 4 [ 1292.102929][T31689] bridge0: port 2(bridge_slave_1) entered disabled state [ 1292.103244][T31689] bridge0: port 1(bridge_slave_0) entered disabled state [ 1292.155267][ T6466] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1292.325176][ T6466] usb 3-1: Using ep0 maxpacket: 32 [ 1292.333816][ T6466] usb 3-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=82.92 [ 1292.344022][ T6466] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1292.356671][ T6466] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1292.356710][ T6466] usb 3-1: Product: syz [ 1292.356730][ T6466] usb 3-1: Manufacturer: syz [ 1292.356749][ T6466] usb 3-1: SerialNumber: syz [ 1292.391200][ T6466] kobil_sct 3-1:2.0: required endpoints missing [ 1292.690090][T31689] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1292.738982][T31689] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1292.827309][T31704] syz.1.7896 (31704): drop_caches: 2 [ 1292.897281][ T5712] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1293.055131][ T5712] usb 4-1: Using ep0 maxpacket: 16 [ 1293.060910][ T5712] usb 4-1: New USB device found, idVendor=fc08, idProduct=0101, bcdDevice=12.40 [ 1293.071471][ T5712] usb 4-1: config 1 has an invalid descriptor of length 33, skipping remainder of the config [ 1293.071511][ T5712] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1293.093459][ T5712] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1293.101584][ T5712] usb 4-1: Product: syz [ 1293.101626][ T5712] usb 4-1: Manufacturer: syz [ 1293.101646][ T5712] usb 4-1: SerialNumber: syz [ 1293.325000][T31698] fuse: Bad value for 'fd' [ 1293.537765][T31689] veth3: left allmulticast mode [ 1293.583672][T31695] tipc: Enabling of bearer rejected, failed to enable media [ 1293.597191][T19286] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1293.597254][T19286] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1293.597292][T19286] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1293.597327][T19286] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1293.597384][T19286] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1293.597409][T19286] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1293.597441][T19286] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1293.597466][T19286] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1293.670753][ T5685] usb 3-1: USB disconnect, device number 39 [ 1293.959811][ T5712] usb 4-1: USB disconnect, device number 13 [ 1294.404005][T31728] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7906'. [ 1294.644079][T31737] syz.4.7908 (31737): drop_caches: 2 [ 1294.948781][T31752] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7911'. [ 1294.978174][T26614] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 1296.865158][T26614] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1296.946780][T26819] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1297.017518][T26614] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1297.028619][T26614] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1297.028665][T26614] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1297.028702][T26614] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1297.028747][T26614] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1297.075971][T26614] usb 2-1: config 0 descriptor?? [ 1297.116171][T26819] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1297.127178][T26819] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1297.127222][T26819] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 1297.127284][T26819] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1297.127311][T26819] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 1297.175203][T26819] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1297.183671][T26819] usb 4-1: Product: syz [ 1297.187979][T26819] usb 4-1: Manufacturer: syz [ 1297.192659][T26819] usb 4-1: SerialNumber: syz [ 1297.216195][T26819] usb 4-1: config 0 descriptor?? [ 1297.233046][T31781] netlink: 'syz.2.7921': attribute type 4 has an invalid length. [ 1297.242863][T26819] ums-isd200 4-1:0.0: USB Mass Storage device detected [ 1297.309010][T31782] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7922'. [ 1297.345607][T31785] netlink: 'syz.2.7921': attribute type 4 has an invalid length. [ 1297.601584][T31787] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7922'. [ 1297.621467][T26614] plantronics 0003:047F:FFFF.0049: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1297.804747][T31773] netlink: 'syz.1.7918': attribute type 1 has an invalid length. [ 1298.016447][T31773] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1298.038950][T31798] mac80211_hwsim hwsim76 wlan1: entered promiscuous mode [ 1298.123854][T31798] bond1: (slave wlan1): Enslaving as an active interface with a down link [ 1298.179053][T31799] syz.0.7923 (31799): drop_caches: 2 [ 1298.644190][T31805] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7925'. [ 1299.165317][T26614] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1299.329083][T26614] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1299.343387][T26614] usb 5-1: config index 0 descriptor too short (asked for 9, got 0) [ 1299.351700][T26614] usb 5-1: can't read configurations, error -22 [ 1299.487564][T26614] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1299.657674][T26614] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1299.669003][T26614] usb 5-1: config index 0 descriptor too short (asked for 9, got 0) [ 1299.669053][T26614] usb 5-1: can't read configurations, error -22 [ 1299.669366][T26614] usb usb5-port1: attempt power cycle [ 1299.840300][T26819] scsi host1: usb-storage 4-1:0.0 [ 1299.890366][T26819] usb 4-1: USB disconnect, device number 14 [ 1300.015402][T26614] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1300.038244][T26614] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1300.052368][T26614] usb 5-1: config index 0 descriptor too short (asked for 9, got 0) [ 1300.052431][T26614] usb 5-1: can't read configurations, error -22 [ 1300.192572][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.192680][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.199298][T26614] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1300.231428][T26614] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1300.244661][T26614] usb 5-1: config index 0 descriptor too short (asked for 9, got 0) [ 1300.253771][T26614] usb 5-1: can't read configurations, error -22 [ 1300.260496][T26614] usb usb5-port1: unable to enumerate USB device [ 1300.325749][T29038] usb 2-1: reset high-speed USB device number 5 using dummy_hcd [ 1300.333189][T29038] usb 2-1: device reset changed ep0 maxpacket size! [ 1300.343178][T29034] usb 2-1: USB disconnect, device number 5 [ 1300.546433][T29034] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1300.715743][T29034] usb 2-1: Using ep0 maxpacket: 16 [ 1300.716039][T29038] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1300.717776][T29034] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 1300.720155][T29034] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1300.723929][T29034] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1300.723969][T29034] usb 2-1: Product: syz [ 1300.724000][T29034] usb 2-1: Manufacturer: syz [ 1300.724031][T29034] usb 2-1: SerialNumber: syz [ 1300.758738][T29034] usb 2-1: config 0 descriptor?? [ 1300.826822][T29034] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1300.867036][T29038] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1300.869618][T29038] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1300.869692][T29038] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1300.869748][T29038] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1300.886789][T29038] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1300.886856][T29038] usb 4-1: Product: syz [ 1300.886887][T29038] usb 4-1: Manufacturer: syz [ 1300.886925][T29038] usb 4-1: SerialNumber: syz [ 1300.921465][T29038] usb 4-1: config 0 descriptor?? [ 1300.923181][T31828] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1300.923474][T31828] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1300.948795][T29038] usb 4-1: ucan: probing device on interface #0 [ 1301.022487][T19283] usb 2-1: Failed to submit usb control message: -71 [ 1301.022621][T19283] usb 2-1: unable to send the bmi data to the device: -71 [ 1301.022684][T19283] usb 2-1: unable to get target info from device [ 1301.022716][T19283] usb 2-1: could not get target info (-71) [ 1301.022780][T19283] usb 2-1: could not probe fw (-71) [ 1301.023800][T29034] usb 2-1: USB disconnect, device number 6 [ 1301.623726][T29038] usb 4-1: ucan: device reported invalid tx-fifo size [ 1301.623776][T29038] usb 4-1: ucan: probe failed; try to update the device firmware [ 1301.894215][T31847] netlink: 'syz.1.7935': attribute type 4 has an invalid length. [ 1301.972983][T31847] netlink: 'syz.1.7935': attribute type 4 has an invalid length. [ 1302.055799][T29038] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1302.217186][T29038] usb 3-1: Using ep0 maxpacket: 32 [ 1302.225537][T29038] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1302.237665][T29038] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1302.237831][T29038] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1302.253913][T29038] usb 3-1: config 0 descriptor?? [ 1302.278074][T29038] hub 3-1:0.0: bad descriptor, ignoring hub [ 1302.288034][T31850] netlink: 80 bytes leftover after parsing attributes in process `syz.0.7936'. [ 1302.289148][T29038] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1302.324506][T29038] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1302.340091][T31850] input: syz0 as /devices/virtual/input/input206 [ 1302.656302][ T30] audit: type=1326 audit(1788222216.547:20236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31855 comm="syz.4.7938" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cda59e159 code=0x7ffc0000 [ 1302.656382][ T30] audit: type=1326 audit(1788222216.547:20237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31855 comm="syz.4.7938" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cda59e159 code=0x7ffc0000 [ 1302.713958][ T30] audit: type=1326 audit(1788222216.607:20238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31855 comm="syz.4.7938" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cda59e159 code=0x7ffc0000 [ 1302.714084][ T30] audit: type=1326 audit(1788222216.607:20239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31855 comm="syz.4.7938" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cda59e159 code=0x7ffc0000 [ 1302.771786][ T30] audit: type=1326 audit(1788222216.667:20240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31855 comm="syz.4.7938" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8cda59e159 code=0x7ffc0000 [ 1302.771892][ T30] audit: type=1326 audit(1788222216.667:20241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31855 comm="syz.4.7938" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cda59e159 code=0x7ffc0000 [ 1302.771967][ T30] audit: type=1326 audit(1788222216.667:20242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31855 comm="syz.4.7938" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cda59e159 code=0x7ffc0000 [ 1302.797723][ T30] audit: type=1326 audit(1788222216.697:20243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31855 comm="syz.4.7938" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cda59e159 code=0x7ffc0000 [ 1302.797823][ T30] audit: type=1326 audit(1788222216.697:20244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31855 comm="syz.4.7938" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cda59e159 code=0x7ffc0000 [ 1302.800140][ T30] audit: type=1326 audit(1788222216.697:20245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31855 comm="syz.4.7938" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8cda55e98e code=0x7ffc0000 [ 1302.856206][T31858] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7939'. [ 1303.067920][T29038] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1303.206087][T29038] usb 5-1: device descriptor read/64, error -71 [ 1303.446244][T29038] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1303.491855][T31865] tipc: Enabling of bearer rejected, failed to enable media [ 1303.585722][T29038] usb 5-1: device descriptor read/64, error -71 [ 1303.679293][T26614] usb 4-1: USB disconnect, device number 15 [ 1303.697357][T29038] usb usb5-port1: attempt power cycle [ 1304.037627][T29038] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 1304.061285][T29038] usb 5-1: device descriptor read/8, error -71 [ 1304.296119][T29038] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1304.320203][T29038] usb 5-1: device descriptor read/8, error -71 [ 1304.426510][T29038] usb usb5-port1: unable to enumerate USB device [ 1304.679221][T31890] netlink: zone id is out of range [ 1304.836086][T29038] usb 3-1: USB disconnect, device number 40 [ 1305.056065][T29038] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1305.216257][T29038] usb 4-1: Using ep0 maxpacket: 8 [ 1305.259553][T29038] usb 4-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 1305.278392][T29038] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1305.292154][T29038] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1305.359588][T29038] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1305.370082][T29038] usb 4-1: Product: syz [ 1305.376442][T29038] usb 4-1: Manufacturer: syz [ 1305.382313][T29038] usb 4-1: SerialNumber: syz [ 1305.612731][T31891] netlink: 'syz.3.7951': attribute type 15 has an invalid length. [ 1305.612777][T31891] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7951'. [ 1306.456286][T31917] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7961'. [ 1306.478045][T31917] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 1306.478073][T31917] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1306.478175][T31917] vhci_hcd vhci_hcd.0: Device attached [ 1306.502663][T31917] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(7) [ 1306.502689][T31917] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1306.502764][T31917] vhci_hcd vhci_hcd.0: Device attached [ 1306.577636][T31925] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(13) [ 1306.577666][T31925] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1306.595044][T31925] vhci_hcd vhci_hcd.0: Device attached [ 1306.667098][T26614] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 1306.718007][ T5712] usb 35-1: new high-speed USB device number 5 using vhci_hcd [ 1306.815088][T26614] usb 5-1: Using ep0 maxpacket: 16 [ 1306.817572][T26614] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1306.817638][T26614] usb 5-1: New USB device found, idVendor=045e, idProduct=0468, bcdDevice=b2.9c [ 1306.819119][T26614] usb 5-1: config 3 has an invalid interface number: 74 but max is 0 [ 1306.819144][T26614] usb 5-1: config 3 has an invalid descriptor of length 1, skipping remainder of the config [ 1306.819186][T26614] usb 5-1: config 3 has no interface number 0 [ 1306.819222][T26614] usb 5-1: config 3 interface 74 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 1306.819249][T26614] usb 5-1: config 3 interface 74 has no altsetting 0 [ 1306.824427][T26614] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1306.824450][T26614] usb 5-1: Product: syz [ 1306.824464][T26614] usb 5-1: Manufacturer: syz [ 1306.824479][T26614] usb 5-1: SerialNumber: syz [ 1307.103788][T31914] netlink: 'syz.4.7959': attribute type 32 has an invalid length. [ 1307.103859][T31914] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7959'. [ 1307.268738][T31933] loop3: detected capacity change from 0 to 4096 [ 1307.311480][T31914] bond2: Setting coupled_control to off (0) [ 1307.351216][T26614] usb 5-1: USB disconnect, device number 104 [ 1307.428036][T31920] vhci_hcd: connection closed [ 1307.428280][T31918] vhci_hcd: connection reset by peer [ 1307.428752][T22494] vhci_hcd vhci_hcd.1: stop threads [ 1307.428783][T22494] vhci_hcd vhci_hcd.1: release socket [ 1307.428831][T22494] vhci_hcd vhci_hcd.1: disconnect device [ 1307.429761][T31926] vhci_hcd: connection closed [ 1307.429939][T22494] vhci_hcd vhci_hcd.1: stop threads [ 1307.429955][T22494] vhci_hcd vhci_hcd.1: release socket [ 1307.429998][T22494] vhci_hcd vhci_hcd.1: disconnect device [ 1307.430621][T22494] vhci_hcd vhci_hcd.1: stop threads [ 1307.430638][T22494] vhci_hcd vhci_hcd.1: release socket [ 1307.430679][T22494] vhci_hcd vhci_hcd.1: disconnect device [ 1307.546264][T29038] usb 4-1: USB disconnect, device number 16 [ 1307.643565][ T5630] udevd[5630]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1307.670596][T31937] loop8: detected capacity change from 0 to 8 [ 1307.679674][T31937] Dev loop8: unable to read RDB block 8 [ 1307.686557][T31937] loop8: unable to read partition table [ 1307.693475][T31937] loop8: partition table beyond EOD, truncated [ 1307.700975][T31937] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1308.426079][T29038] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1308.587998][T29038] usb 5-1: Using ep0 maxpacket: 16 [ 1308.595624][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 1308.595660][ T30] audit: type=1326 audit(1788222222.487:20277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31962 comm="syz.0.7974" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f734039e159 code=0x7ffc0000 [ 1308.598298][ T30] audit: type=1326 audit(1788222222.497:20278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31962 comm="syz.0.7974" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f734039e159 code=0x7ffc0000 [ 1308.636231][T29038] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1308.647040][T31966] netlink: zone id is out of range [ 1308.672020][ T30] audit: type=1326 audit(1788222222.557:20279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31962 comm="syz.0.7974" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f734039df57 code=0x7ffc0000 [ 1308.672623][ T30] audit: type=1326 audit(1788222222.557:20280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31962 comm="syz.0.7974" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f734035ae51 code=0x7ffc0000 [ 1308.672812][ T30] audit: type=1326 audit(1788222222.557:20281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31962 comm="syz.0.7974" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f734039ef49 code=0x7ffc0000 [ 1308.673190][ T30] audit: type=1326 audit(1788222222.557:20282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31962 comm="syz.0.7974" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f734035aebb code=0x7ffc0000 [ 1308.673423][ T30] audit: type=1326 audit(1788222222.557:20283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31962 comm="syz.0.7974" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f734035a5ac code=0x7ffc0000 [ 1308.673735][ T30] audit: type=1326 audit(1788222222.577:20284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31962 comm="syz.0.7974" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f734039e159 code=0x7ffc0000 [ 1308.673951][ T30] audit: type=1326 audit(1788222222.577:20285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31962 comm="syz.0.7974" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f734035a60e code=0x7ffc0000 [ 1308.674136][ T30] audit: type=1326 audit(1788222222.577:20286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31962 comm="syz.0.7974" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f734039e159 code=0x7ffc0000 [ 1308.766160][T29038] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1308.766226][T29038] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1308.784929][T31953] input: syz0 as /devices/virtual/input/input207 [ 1308.915357][T26819] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1308.935378][T26614] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1308.936337][T29038] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1308.936393][T29038] usb 5-1: Product: syz [ 1308.936466][T29038] usb 5-1: Manufacturer: syz [ 1308.936498][T29038] usb 5-1: SerialNumber: syz [ 1309.001148][T29038] usb 5-1: config 0 descriptor?? [ 1309.016643][T29038] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1309.027623][T29038] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 1309.075290][T26819] usb 2-1: Using ep0 maxpacket: 8 [ 1309.076167][T26819] usb 2-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 1309.077132][T26819] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1309.077154][T26819] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1309.079161][T26819] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1309.079183][T26819] usb 2-1: Product: syz [ 1309.079197][T26819] usb 2-1: Manufacturer: syz [ 1309.079211][T26819] usb 2-1: SerialNumber: syz [ 1309.109083][T26614] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1309.111428][T26614] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1309.111457][T26614] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1309.111479][T26614] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1309.111516][T26614] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1309.117575][T26614] usb 1-1: config 0 descriptor?? [ 1309.289788][T31966] netlink: 'syz.1.7975': attribute type 15 has an invalid length. [ 1309.289838][T31966] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7975'. [ 1309.456015][T26819] usb 2-1: USB disconnect, device number 7 [ 1309.620770][T26614] usbhid 1-1:0.0: can't add hid device: -71 [ 1309.620898][T26614] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1309.632300][T26614] usb 1-1: USB disconnect, device number 69 [ 1309.648242][T29038] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1309.651343][ T5624] udevd[5624]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1309.679007][T29038] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 1309.955541][ T5685] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1310.115144][ T5685] usb 3-1: Using ep0 maxpacket: 8 [ 1310.115943][ T5685] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1310.134030][ T5685] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1310.134070][ T5685] usb 3-1: Product: syz [ 1310.134102][ T5685] usb 3-1: Manufacturer: syz [ 1310.134120][ T5685] usb 3-1: SerialNumber: syz [ 1310.140685][ T5685] usb 3-1: config 0 descriptor?? [ 1310.156673][ T5685] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1310.267477][T31985] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7981'. [ 1310.271075][T31985] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 1310.271100][T31985] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1310.271281][T31985] vhci_hcd vhci_hcd.0: Device attached [ 1310.276299][T31985] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(7) [ 1310.276323][T31985] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1310.276550][T31985] vhci_hcd vhci_hcd.0: Device attached [ 1310.390089][T29038] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 1310.399496][T29038] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 1310.409496][T29038] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 1310.428522][T29038] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 1310.430963][T31991] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(13) [ 1310.430987][T31991] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1310.431310][T31991] vhci_hcd vhci_hcd.0: Device attached [ 1311.134893][T31992] vhci_hcd: connection closed [ 1311.141575][T22498] vhci_hcd vhci_hcd.1: stop threads [ 1311.141635][T22498] vhci_hcd vhci_hcd.1: release socket [ 1311.141764][T22498] vhci_hcd vhci_hcd.1: disconnect device [ 1311.151640][T31988] vhci_hcd: connection closed [ 1311.152301][T22498] vhci_hcd vhci_hcd.1: stop threads [ 1311.152321][T22498] vhci_hcd vhci_hcd.1: release socket [ 1311.152373][T22498] vhci_hcd vhci_hcd.1: disconnect device [ 1311.257781][T29038] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 1311.277448][T29038] usb 5-1: USB disconnect, device number 105 [ 1311.390027][T32007] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7986'. [ 1311.417091][T32006] geneve2: left promiscuous mode [ 1311.435337][T19278] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1311.435399][T19278] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1311.435474][T19278] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1311.435513][T19278] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1311.990360][ T5685] gspca_sonixj: reg_r err -71 [ 1312.025732][ T5685] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 1312.035653][ T5685] usb 3-1: USB disconnect, device number 41 [ 1312.380597][T31986] vhci_hcd: connection reset by peer [ 1312.381325][T19278] vhci_hcd vhci_hcd.1: stop threads [ 1312.381358][T19278] vhci_hcd vhci_hcd.1: release socket [ 1312.381586][T19278] vhci_hcd vhci_hcd.1: disconnect device [ 1312.445179][ T5712] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 1312.510511][T32019] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7990'. [ 1313.176864][T15068] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1313.342744][T15068] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1313.357851][T15068] usb 2-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1313.359553][T15068] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1313.359650][T15068] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1313.400125][T15068] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1313.400217][T15068] usb 2-1: Product: syz [ 1313.400284][T15068] usb 2-1: Manufacturer: syz [ 1313.400321][T15068] usb 2-1: SerialNumber: syz [ 1313.436890][T15068] usb 2-1: config 0 descriptor?? [ 1313.469358][T15068] usb 2-1: selecting invalid altsetting 0 [ 1313.672120][T32036] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7996'. [ 1313.689511][T15068] usb 2-1: USB disconnect, device number 8 [ 1313.902273][T32035] netlink: 548 bytes leftover after parsing attributes in process `syz.0.7996'. [ 1313.913865][T32036] netlink: 548 bytes leftover after parsing attributes in process `syz.0.7996'. [ 1314.226233][T15068] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1314.396433][T15068] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1314.408037][T15068] usb 2-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1314.421396][T15068] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1314.425218][ T5712] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1314.432379][T15068] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1314.453899][T15068] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1314.453980][T15068] usb 2-1: Product: syz [ 1314.454045][T15068] usb 2-1: Manufacturer: syz [ 1314.454096][T15068] usb 2-1: SerialNumber: syz [ 1314.484614][T15068] usb 2-1: config 0 descriptor?? [ 1314.518220][T15068] usb 2-1: selecting invalid altsetting 0 [ 1314.565129][ T5685] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1314.602785][ T5712] usb 4-1: Using ep0 maxpacket: 16 [ 1314.604848][ T5712] usb 4-1: New USB device found, idVendor=0582, idProduct=0044, bcdDevice= 0.40 [ 1314.607835][ T5712] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 1088, setting to 64 [ 1314.610856][ T5712] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1314.610880][ T5712] usb 4-1: Product: à Œ [ 1314.610894][ T5712] usb 4-1: Manufacturer: 跉鿧ꆹ鎤𣏕餦腗‿é‹æ•¹æ— ã£¢å“·ç¥“箱◬磎é„媗ᄇ᫉믉ߜ檚ꬶá‹ä•”뿈婃嬌钰씀ᖜິ쩾æ®Çšäœå€Œá„ꇀ䀩厵ꔭ싊 [ 1314.610914][ T5712] usb 4-1: SerialNumber: á…‰ïƒí¥é€ï€™è£ì µèº¡â³é«¶â¹…᪕헟ç§â‚⣬ဆ﷓牧呂镻௢՘쪨鷓盃괼ã£ç®²æ•¶éŽ£ï¢–㊪莕唔顪⚣╚Ç벧é¹â‚©â‡’͆쥩堻⃰뱔篳äœå¾çŒ»îŸ‡ã§»â•šÖ´ãºŒç¢™î·žîŽä½·ç“Œç¡”ï·«ç–â»ê¥½é‡âˆ¾â“…ꄭ蚴路贊㮷î êºâ€è˜«èŒ¨ÊⲈ庴浤î¾ážç¹ƒï²–ເ船ꡕå§ï©…鈸ᠺɚ塓ཱུã’챤䵔௵轚争홎惎 [ 1314.725316][ T5685] usb 1-1: Using ep0 maxpacket: 16 [ 1314.726111][ T5685] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 1314.727503][ T5685] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1314.727526][ T5685] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1314.728918][ T5685] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1314.728941][ T5685] usb 1-1: SerialNumber: syz [ 1314.862625][ T5685] usb 1-1: 0:2 : does not exist [ 1315.022824][T32048] ip6t_rt: too many addresses specified [ 1315.150467][ T5712] usb 4-1: USB disconnect, device number 17 [ 1315.239441][ T5630] udevd[5630]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1315.349668][ T5685] usb 1-1: USB disconnect, device number 70 [ 1315.433118][ T5712] usb 2-1: USB disconnect, device number 9 [ 1316.019536][T32068] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8008'. [ 1316.033196][T32068] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1316.033224][T32068] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1316.036276][T32068] vhci_hcd vhci_hcd.0: Device attached [ 1316.069124][T32068] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(7) [ 1316.069153][T32068] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1316.069228][T32068] vhci_hcd vhci_hcd.0: Device attached [ 1316.118343][T32068] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(12) [ 1316.118374][T32068] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1316.118781][T32068] vhci_hcd vhci_hcd.0: Device attached [ 1316.123971][T32068] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(14) [ 1316.123995][T32068] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1316.124033][T32068] vhci_hcd vhci_hcd.0: Device attached [ 1316.127279][T32074] vhci_hcd: connection closed [ 1316.127546][T32079] vhci_hcd: connection closed [ 1316.127720][T32077] vhci_hcd: connection closed [ 1316.128083][T32070] vhci_hcd: connection closed [ 1316.134908][T19286] vhci_hcd vhci_hcd.2: stop threads [ 1316.134950][T19286] vhci_hcd vhci_hcd.2: release socket [ 1316.134970][T19286] vhci_hcd vhci_hcd.2: disconnect device [ 1316.135920][T19286] vhci_hcd vhci_hcd.2: stop threads [ 1316.135945][T19286] vhci_hcd vhci_hcd.2: release socket [ 1316.135964][T19286] vhci_hcd vhci_hcd.2: disconnect device [ 1316.136797][T19286] vhci_hcd vhci_hcd.2: stop threads [ 1316.136813][T19286] vhci_hcd vhci_hcd.2: release socket [ 1316.136831][T19286] vhci_hcd vhci_hcd.2: disconnect device [ 1316.137036][T19286] vhci_hcd vhci_hcd.2: stop threads [ 1316.137049][T19286] vhci_hcd vhci_hcd.2: release socket [ 1316.137067][T19286] vhci_hcd vhci_hcd.2: disconnect device [ 1316.458979][T32081] syz.1.8007 (32081): drop_caches: 2 [ 1316.474759][T32082] bond4: entered allmulticast mode [ 1316.487792][T32082] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1316.530589][T32087] sysfs: cannot create duplicate filename '/class/ieee80211/1ùà^!‚lü1”' [ 1316.539816][T32087] CPU: 0 UID: 0 PID: 32087 Comm: syz.3.8011 Tainted: G L syzkaller #0 PREEMPT(full) [ 1316.539859][T32087] Tainted: [L]=SOFTLOCKUP [ 1316.539868][T32087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1316.539880][T32087] Call Trace: [ 1316.539889][T32087] [ 1316.539897][T32087] dump_stack_lvl+0xe8/0x150 [ 1316.539936][T32087] sysfs_warn_dup+0x8e/0xa0 [ 1316.539967][T32087] sysfs_do_create_link_sd+0xc0/0x110 [ 1316.540000][T32087] device_add_class_symlinks+0x1cf/0x240 [ 1316.540036][T32087] device_add+0x467/0xb80 [ 1316.540067][T32087] wiphy_register+0x1fc8/0x2ff0 [ 1316.540110][T32087] ? __pfx_wiphy_register+0x10/0x10 [ 1316.540137][T32087] ? __pfx_netdev_run_todo+0x10/0x10 [ 1316.540162][T32087] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 1316.540193][T32087] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 1316.540226][T32087] ieee80211_register_hw+0x3d3d/0x4a50 [ 1316.540268][T32087] ? ieee80211_register_hw+0x1961/0x4a50 [ 1316.540322][T32087] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1316.540353][T32087] ? __asan_memset+0x22/0x50 [ 1316.540384][T32087] ? __hrtimer_setup+0x1b7/0x260 [ 1316.540411][T32087] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1316.540447][T32087] mac80211_hwsim_new_radio+0x3258/0x56b0 [ 1316.540505][T32087] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1316.540535][T32087] ? kstrndup+0xbd/0x160 [ 1316.540559][T32087] ? kstrndup+0xbd/0x160 [ 1316.540581][T32087] hwsim_new_radio_nl+0xd8b/0xf90 [ 1316.540628][T32087] genl_family_rcv_msg_doit+0x233/0x340 [ 1316.540667][T32087] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1316.540709][T32087] ? bpf_lsm_capable+0x9/0x20 [ 1316.540736][T32087] ? security_capable+0x7e/0x2c0 [ 1316.540777][T32087] genl_rcv_msg+0x614/0x7a0 [ 1316.540812][T32087] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1316.540850][T32087] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1316.540892][T32087] netlink_rcv_skb+0x226/0x4a0 [ 1316.540918][T32087] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1316.540951][T32087] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1316.540991][T32087] ? down_read+0x2be/0x330 [ 1316.541015][T32087] genl_rcv+0x28/0x40 [ 1316.541041][T32087] netlink_unicast+0x7bd/0x940 [ 1316.541075][T32087] netlink_sendmsg+0x813/0xb40 [ 1316.541109][T32087] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1316.541142][T32087] ? apparmor_socket_sendmsg+0x98/0x360 [ 1316.541174][T32087] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1316.541199][T32087] sock_sendmsg_nosec+0x13a/0x180 [ 1316.541231][T32087] ____sys_sendmsg+0x54e/0x850 [ 1316.541257][T32087] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1316.541288][T32087] ? import_iovec+0x73/0xa0 [ 1316.541315][T32087] ___sys_sendmsg+0x2a5/0x360 [ 1316.541335][T32087] ? __lock_acquire+0x6df/0x2e50 [ 1316.541361][T32087] ? __pfx____sys_sendmsg+0x10/0x10 [ 1316.541387][T32087] ? futex_wait+0x2a2/0x390 [ 1316.541447][T32087] ? __fget_files+0x2a/0x420 [ 1316.541473][T32087] ? __fget_files+0x3a2/0x420 [ 1316.541509][T32087] __x64_sys_sendmsg+0x1b1/0x290 [ 1316.541533][T32087] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1316.541577][T32087] do_syscall_64+0x166/0x520 [ 1316.541605][T32087] ? trace_irq_disable+0x3b/0x140 [ 1316.541624][T32087] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1316.541645][T32087] ? clear_bhb_loop+0x70/0xc0 [ 1316.541671][T32087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1316.541691][T32087] RIP: 0033:0x7fd7b139e159 [ 1316.541711][T32087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1316.541729][T32087] RSP: 002b:00007fd7b230f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1316.541751][T32087] RAX: ffffffffffffffda RBX: 00007fd7b1625fa0 RCX: 00007fd7b139e159 [ 1316.541767][T32087] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000003 [ 1316.541779][T32087] RBP: 00007fd7b1435024 R08: 0000000000000000 R09: 0000000000000000 [ 1316.541790][T32087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1316.541803][T32087] R13: 00007fd7b1626038 R14: 00007fd7b1625fa0 R15: 00007fd7b174fa48 [ 1316.541841][T32087] [ 1316.997027][T32090] netlink: 'syz.2.8013': attribute type 5 has an invalid length. [ 1317.005963][T32090] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8013'. [ 1317.059952][T32092] xt_hashlimit: size too large, truncated to 1048576 [ 1317.264794][T32100] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1317.463452][T32097] bond5: option mode: invalid value (255) [ 1317.476429][T32097] bond5 (unregistering): Released all slaves [ 1317.531691][T32104] netlink: 'syz.4.8018': attribute type 10 has an invalid length. [ 1317.888630][T32116] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1318.542652][T32123] netlink: zone id is out of range [ 1318.888269][T15068] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1319.096645][T15068] usb 1-1: Using ep0 maxpacket: 8 [ 1319.132534][T15068] usb 1-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 1319.156326][T15068] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1319.156386][T15068] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1319.174076][T15068] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1319.174120][T15068] usb 1-1: Product: syz [ 1319.174151][T15068] usb 1-1: Manufacturer: syz [ 1319.174182][T15068] usb 1-1: SerialNumber: syz [ 1319.512698][T32124] netlink: 'syz.0.8021': attribute type 15 has an invalid length. [ 1319.521517][T32124] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8021'. [ 1319.778713][T32136] netlink: 'syz.4.8024': attribute type 2 has an invalid length. [ 1322.184335][T32157] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8029'. [ 1322.194339][T32157] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8029'. [ 1322.338260][T15068] usb 1-1: USB disconnect, device number 71 [ 1322.517771][ T5630] udevd[5630]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1322.591730][T29038] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1322.755598][T29038] usb 4-1: Using ep0 maxpacket: 16 [ 1322.767291][T29038] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1322.784227][T29038] usb 4-1: config 0 has no interfaces? [ 1322.784305][T29038] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1322.810640][T29038] usb 4-1: config 0 descriptor?? [ 1323.200829][T32151] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8029'. [ 1323.503377][T29038] usb 4-1: USB disconnect, device number 18 [ 1323.624854][T32184] input: syz0 as /devices/virtual/input/input209 [ 1323.845116][ T5712] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1324.000562][ T5712] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1324.000636][ T5712] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 1324.019279][ T5712] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1324.019320][ T5712] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1324.019379][ T5712] usb 3-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 1324.019419][ T5712] usb 3-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 1324.019461][ T5712] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1324.019491][ T5712] usb 3-1: config 1 interface 1 has no altsetting 0 [ 1324.092941][ T5712] usb 3-1: string descriptor 0 read error: -22 [ 1324.093101][ T5712] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1324.325588][ T5712] usb 3-1: 2:0: failed to get current value for ch 0 (-32) [ 1325.832557][T32201] set_target_expiration: 23 callbacks suppressed [ 1325.841127][T32201] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 1326.516139][T29038] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1326.672998][T29038] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1326.678869][T29038] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1326.678959][T29038] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1326.679002][T29038] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1326.679039][T29038] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1326.729268][T29038] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1326.729356][T29038] usb 4-1: Product: syz [ 1326.729423][T29038] usb 4-1: Manufacturer: syz [ 1326.729457][T29038] usb 4-1: SerialNumber: syz [ 1327.377963][T32209] netlink: 'syz.1.8046': attribute type 4 has an invalid length. [ 1327.431492][T32210] netlink: 'syz.1.8046': attribute type 4 has an invalid length. [ 1327.440605][ T5712] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1327.632660][ T5712] usb 3-1: USB disconnect, device number 42 [ 1328.029148][T29038] cdc_ncm 4-1:1.0: bind() failure [ 1328.073708][T29038] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1328.093279][T29038] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1328.114314][T29038] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 1328.153471][T29038] usb 4-1: USB disconnect, device number 19 [ 1329.035416][ T5712] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1329.197462][ T5712] usb 5-1: Using ep0 maxpacket: 32 [ 1329.212117][ T5712] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1329.224177][ T5712] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1329.224227][ T5712] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1329.224254][ T5712] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1329.224281][ T5712] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1329.281507][ T5712] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1329.281553][ T5712] usb 5-1: Product: syz [ 1329.281589][ T5712] usb 5-1: Manufacturer: syz [ 1329.281607][ T5712] usb 5-1: SerialNumber: syz [ 1329.318076][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1329.343330][ T5712] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input210 [ 1329.347769][T29038] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1329.505884][T29038] usb 4-1: Using ep0 maxpacket: 16 [ 1329.507523][T29038] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1329.525970][T29038] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1329.526032][T29038] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1329.528680][T29038] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1329.528758][T29038] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1329.559623][T29038] usb 4-1: config 0 descriptor?? [ 1329.561514][T32227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1329.591310][T32227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1329.845199][ T5712] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1329.845239][ T5712] (id 0x00) [ 1330.097410][ T5712] rc_core: IR keymap rc-imon-pad not found [ 1330.097443][ T5712] Registered IR keymap rc-empty [ 1330.097557][ T5712] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1330.097580][ T5712] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1330.157894][ T5712] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0 [ 1330.178567][ T5712] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0/input211 [ 1330.193584][ T5712] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:106> initialized [ 1330.782247][T32249] FAULT_INJECTION: forcing a failure. [ 1330.782247][T32249] name failslab, interval 1, probability 0, space 0, times 0 [ 1330.796963][T32249] CPU: 0 UID: 0 PID: 32249 Comm: syz.0.8057 Tainted: G L syzkaller #0 PREEMPT(full) [ 1330.796995][T32249] Tainted: [L]=SOFTLOCKUP [ 1330.797003][T32249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1330.797015][T32249] Call Trace: [ 1330.797024][T32249] [ 1330.797033][T32249] dump_stack_lvl+0xe8/0x150 [ 1330.797067][T32249] should_fail_ex+0x410/0x560 [ 1330.797102][T32249] should_failslab+0xa8/0x100 [ 1330.797125][T32249] ? copy_fs_struct+0x4f/0x270 [ 1330.797148][T32249] kmem_cache_alloc_noprof+0xa1/0x600 [ 1330.797175][T32249] ? __asan_memset+0x22/0x50 [ 1330.797204][T32249] ? copy_fs_struct+0x4f/0x270 [ 1330.797231][T32249] copy_fs_struct+0x4f/0x270 [ 1330.797254][T32249] copy_fs+0xd2/0x280 [ 1330.797278][T32249] ? copy_process+0xd3c/0x43e0 [ 1330.797300][T32249] copy_process+0x1d33/0x43e0 [ 1330.797321][T32249] ? _parse_integer_limit+0x18f/0x1e0 [ 1330.797350][T32249] ? copy_process+0xd3c/0x43e0 [ 1330.797395][T32249] ? __pfx_copy_process+0x10/0x10 [ 1330.797418][T32249] ? get_pid_task+0x20/0x1f0 [ 1330.797435][T32249] ? get_pid_task+0x20/0x1f0 [ 1330.797458][T32249] kernel_clone+0x2d7/0x940 [ 1330.797487][T32249] ? __pfx_kernel_clone+0x10/0x10 [ 1330.797531][T32249] __x64_sys_clone+0x1b6/0x230 [ 1330.797560][T32249] ? __pfx___x64_sys_clone+0x10/0x10 [ 1330.797597][T32249] ? __pfx_ksys_write+0x10/0x10 [ 1330.797631][T32249] do_syscall_64+0x166/0x520 [ 1330.797658][T32249] ? trace_irq_disable+0x3b/0x140 [ 1330.797677][T32249] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1330.797696][T32249] ? clear_bhb_loop+0x70/0xc0 [ 1330.797718][T32249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1330.797736][T32249] RIP: 0033:0x7f734039e159 [ 1330.797755][T32249] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1330.797770][T32249] RSP: 002b:00007f7341267fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1330.797791][T32249] RAX: ffffffffffffffda RBX: 00007f7340625fa0 RCX: 00007f734039e159 [ 1330.797805][T32249] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000812c0000 [ 1330.797818][T32249] RBP: 00007f7341268090 R08: ffffffffffffffff R09: ffffffffffffffff [ 1330.797832][T32249] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1330.797843][T32249] R13: 00007f7340626038 R14: 00007f7340625fa0 R15: 00007f734074fa48 [ 1330.797895][T32249] [ 1331.084387][T32257] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 1331.084415][T32257] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1331.099009][T32257] vhci_hcd vhci_hcd.0: Device attached [ 1331.116904][T32257] netlink: 'syz.2.8059': attribute type 24 has an invalid length. [ 1331.116943][T32257] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8059'. [ 1331.116982][T32257] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1331.164358][T32258] vhci_hcd: connection closed [ 1331.167947][T21520] vhci_hcd vhci_hcd.2: stop threads [ 1331.168052][T21520] vhci_hcd vhci_hcd.2: release socket [ 1331.168090][T21520] vhci_hcd vhci_hcd.2: disconnect device [ 1331.260818][T29038] usbhid 4-1:0.0: can't add hid device: -71 [ 1331.261081][T29038] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1331.281309][T29038] usb 4-1: USB disconnect, device number 20 [ 1331.356834][T32262] netlink: 'syz.0.8060': attribute type 1 has an invalid length. [ 1331.416628][T32262] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1331.453740][T32262] veth5: entered allmulticast mode [ 1331.471817][T32262] bond5: (slave veth5): Enslaving as an active interface with a down link [ 1331.487711][T32264] imon:send_packet: packet tx failed (-71) [ 1331.491294][T29038] usb 5-1: USB disconnect, device number 106 [ 1331.512095][T32264] imon:vfd_write: send packet #4 failed [ 1331.512584][T32265] imon:send_packet: error submitting urb(-19) [ 1331.526315][T32265] imon:vfd_write: send packet #0 failed [ 1331.536364][T32262] bond5: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1331.571146][T32262] macvlan2: entered promiscuous mode [ 1331.571241][T32262] macvlan2: entered allmulticast mode [ 1331.581234][T32262] bond5: entered promiscuous mode [ 1331.619878][T32262] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1331.637858][T32262] bond5: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1331.674819][T32262] bond5: left promiscuous mode [ 1331.738578][T32269] FAULT_INJECTION: forcing a failure. [ 1331.738578][T32269] name failslab, interval 1, probability 0, space 0, times 0 [ 1331.751530][T32269] CPU: 0 UID: 0 PID: 32269 Comm: syz.1.8061 Tainted: G L syzkaller #0 PREEMPT(full) [ 1331.751561][T32269] Tainted: [L]=SOFTLOCKUP [ 1331.751568][T32269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1331.751581][T32269] Call Trace: [ 1331.751589][T32269] [ 1331.751598][T32269] dump_stack_lvl+0xe8/0x150 [ 1331.751633][T32269] should_fail_ex+0x410/0x560 [ 1331.751666][T32269] ? __alloc_skb+0x1db/0x7a0 [ 1331.751694][T32269] should_failslab+0xa8/0x100 [ 1331.751718][T32269] ? __alloc_skb+0x1db/0x7a0 [ 1331.751743][T32269] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 1331.751771][T32269] ? __alloc_skb+0x18d/0x7a0 [ 1331.751799][T32269] ? __alloc_skb+0x1db/0x7a0 [ 1331.751831][T32269] __alloc_skb+0x1db/0x7a0 [ 1331.751864][T32269] alloc_skb_with_frags+0xc6/0x760 [ 1331.751883][T32269] ? __pfx___css_rstat_updated+0x10/0x10 [ 1331.751915][T32269] sock_alloc_send_pskb+0x878/0x990 [ 1331.751953][T32269] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1331.751986][T32269] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 1331.752015][T32269] unix_dgram_sendmsg+0x4da/0x17b0 [ 1331.752117][T32269] ? rcu_is_watching+0x16/0xb0 [ 1331.752140][T32269] ? __up_read+0x29c/0x930 [ 1331.752170][T32269] ? __pfx___up_read+0x10/0x10 [ 1331.752194][T32269] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1331.752222][T32269] ? aa_sock_msg_perm+0x129/0x210 [ 1331.752256][T32269] ? apparmor_socket_sendmsg+0x98/0x360 [ 1331.752288][T32269] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1331.752311][T32269] sock_sendmsg_nosec+0x13a/0x180 [ 1331.752339][T32269] ____sys_sendmsg+0x54e/0x850 [ 1331.752366][T32269] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1331.752396][T32269] ? import_iovec+0x73/0xa0 [ 1331.752420][T32269] ___sys_sendmsg+0x2a5/0x360 [ 1331.752440][T32269] ? __lock_acquire+0x6df/0x2e50 [ 1331.752463][T32269] ? __pfx____sys_sendmsg+0x10/0x10 [ 1331.752492][T32269] ? kstrtouint+0x6e/0xe0 [ 1331.752543][T32269] ? __fget_files+0x2a/0x420 [ 1331.752567][T32269] ? __fget_files+0x3a2/0x420 [ 1331.752602][T32269] __sys_sendmmsg+0x273/0x4d0 [ 1331.752628][T32269] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1331.752659][T32269] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1331.752701][T32269] ? ksys_write+0x242/0x270 [ 1331.752731][T32269] ? __pfx_ksys_write+0x10/0x10 [ 1331.752765][T32269] __x64_sys_sendmmsg+0xa0/0xc0 [ 1331.752788][T32269] do_syscall_64+0x166/0x520 [ 1331.752815][T32269] ? trace_irq_disable+0x3b/0x140 [ 1331.752835][T32269] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1331.752855][T32269] ? clear_bhb_loop+0x70/0xc0 [ 1331.752880][T32269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1331.752901][T32269] RIP: 0033:0x7fdaed99e159 [ 1331.752921][T32269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1331.752939][T32269] RSP: 002b:00007fdaee829028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1331.752961][T32269] RAX: ffffffffffffffda RBX: 00007fdaedc25fa0 RCX: 00007fdaed99e159 [ 1331.752977][T32269] RDX: 0000000000000318 RSI: 00002000000bd000 RDI: 0000000000000005 [ 1331.752990][T32269] RBP: 00007fdaee829090 R08: 0000000000000000 R09: 0000000000000000 [ 1331.753003][T32269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1331.753016][T32269] R13: 00007fdaedc26038 R14: 00007fdaedc25fa0 R15: 00007fdaedd4fa48 [ 1331.753047][T32269] [ 1332.337419][T29038] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1332.516076][T29038] usb 3-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 1332.522204][T29038] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1332.522263][T29038] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 1332.522334][T29038] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1332.636461][T29038] idmouse 3-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 1332.685219][ T5712] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1332.837209][ T5712] usb 1-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 1332.849022][ T5712] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1332.860916][ T5712] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 1332.871947][ T5712] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1332.943182][ T5712] idmouse 1-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 1333.119562][T32287] FAULT_INJECTION: forcing a failure. [ 1333.119562][T32287] name failslab, interval 1, probability 0, space 0, times 0 [ 1333.119620][T32287] CPU: 0 UID: 0 PID: 32287 Comm: syz.2.8062 Tainted: G L syzkaller #0 PREEMPT(full) [ 1333.119649][T32287] Tainted: [L]=SOFTLOCKUP [ 1333.119657][T32287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1333.119670][T32287] Call Trace: [ 1333.119678][T32287] [ 1333.119687][T32287] dump_stack_lvl+0xe8/0x150 [ 1333.119721][T32287] should_fail_ex+0x410/0x560 [ 1333.119757][T32287] should_failslab+0xa8/0x100 [ 1333.119784][T32287] __kmalloc_noprof+0xfe/0x720 [ 1333.119812][T32287] ? __kasan_kmalloc+0x93/0xb0 [ 1333.119835][T32287] ? usb_alloc_urb+0x46/0x150 [ 1333.119860][T32287] ? usb_alloc_urb+0x46/0x150 [ 1333.119886][T32287] ? __kmalloc_cache_noprof+0x14d/0x600 [ 1333.119920][T32287] usb_alloc_urb+0x46/0x150 [ 1333.119948][T32287] usb_control_msg+0x118/0x3e0 [ 1333.119983][T32287] idmouse_open+0x2c7/0xee0 [ 1333.120022][T32287] ? __pfx_idmouse_open+0x10/0x10 [ 1333.120046][T32287] ? down_read+0x2be/0x330 [ 1333.120078][T32287] ? __pfx_idmouse_open+0x10/0x10 [ 1333.120097][T32287] usb_open+0x156/0x1e0 [ 1333.120126][T32287] chrdev_open+0x4d9/0x600 [ 1333.120151][T32287] ? __pfx_chrdev_open+0x10/0x10 [ 1333.120173][T32287] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 1333.120211][T32287] ? __pfx_chrdev_open+0x10/0x10 [ 1333.120231][T32287] do_dentry_open+0x816/0x1380 [ 1333.120266][T32287] vfs_open+0x3b/0x340 [ 1333.120286][T32287] ? path_openat+0x1428/0x1d60 [ 1333.120319][T32287] path_openat+0x1443/0x1d60 [ 1333.120368][T32287] do_file_open+0x23e/0x4a0 [ 1333.120404][T32287] ? __pfx_do_file_open+0x10/0x10 [ 1333.120455][T32287] ? _raw_spin_unlock+0x28/0x50 [ 1333.120479][T32287] ? alloc_fd+0x651/0x6c0 [ 1333.120515][T32287] do_sys_openat2+0x115/0x200 [ 1333.120541][T32287] ? __pfx_do_sys_openat2+0x10/0x10 [ 1333.120565][T32287] ? ksys_write+0x242/0x270 [ 1333.120594][T32287] ? __pfx_ksys_write+0x10/0x10 [ 1333.120624][T32287] __x64_sys_openat+0x138/0x170 [ 1333.120652][T32287] do_syscall_64+0x166/0x520 [ 1333.120679][T32287] ? trace_irq_disable+0x3b/0x140 [ 1333.120699][T32287] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1333.120720][T32287] ? clear_bhb_loop+0x70/0xc0 [ 1333.120745][T32287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1333.120764][T32287] RIP: 0033:0x7f6d42b5e98e [ 1333.120784][T32287] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1333.120801][T32287] RSP: 002b:00007f6d43a77b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1333.120821][T32287] RAX: ffffffffffffffda RBX: 00007f6d43a786c0 RCX: 00007f6d42b5e98e [ 1333.120836][T32287] RDX: 0000000000000002 RSI: 00007f6d43a77c00 RDI: ffffffffffffff9c [ 1333.120850][T32287] RBP: 00007f6d43a78090 R08: 0000000000000000 R09: 0000000000000000 [ 1333.120862][T32287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1333.120874][T32287] R13: 00007f6d42e26128 R14: 00007f6d42e26090 R15: 00007f6d42f4fa48 [ 1333.120904][T32287] [ 1333.211489][T32282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1333.212418][T32282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1333.805733][ T5712] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1333.864376][T26614] usb 3-1: USB disconnect, device number 43 [ 1333.880129][T26614] idmouse 3-1:1.0: disconnected [ 1333.966395][ T5712] usb 4-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 1333.977542][ T5712] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1333.977829][ T5712] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1333.977854][ T5712] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1333.977879][ T5712] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1333.977923][ T5712] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1333.987908][ T5712] usb 4-1: config 0 descriptor?? [ 1334.025811][ T5685] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1334.176601][ T5685] usb 5-1: Using ep0 maxpacket: 16 [ 1334.177503][ T5685] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1334.178660][ T5685] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1334.178689][ T5685] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1334.181017][ T5685] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1334.181041][ T5685] usb 5-1: Product: syz [ 1334.181055][ T5685] usb 5-1: Manufacturer: syz [ 1334.181069][ T5685] usb 5-1: SerialNumber: syz [ 1334.186996][ T5685] usb 5-1: config 0 descriptor?? [ 1334.196371][ T5685] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1334.196401][ T5685] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 1334.409636][ T5712] hid-rmi 0003:1532:011D.004A: unbalanced collection at end of report description [ 1334.410670][ T5712] hid-rmi 0003:1532:011D.004A: parse failed [ 1334.410787][ T5712] hid-rmi 0003:1532:011D.004A: probe with driver hid-rmi failed with error -22 [ 1334.804858][ T5685] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1334.813650][ T5685] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 1334.957374][ T5685] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 1334.957409][ T5685] em28xx 5-1:0.0: No AC97 audio processor [ 1334.973602][ T5685] usb 5-1: USB disconnect, device number 107 [ 1334.975763][ T5685] em28xx 5-1:0.0: Disconnecting em28xx [ 1334.986359][ T5685] em28xx: Freeing device [ 1335.025817][T29038] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1335.133077][T26614] usb 4-1: USB disconnect, device number 21 [ 1335.180262][T29038] usb 2-1: Using ep0 maxpacket: 32 [ 1335.188358][T29038] usb 2-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=c6.e0 [ 1335.207744][T29038] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1335.207785][T29038] usb 2-1: Product: syz [ 1335.207818][T29038] usb 2-1: Manufacturer: syz [ 1335.207846][T29038] usb 2-1: SerialNumber: syz [ 1335.402984][ T5685] usb 1-1: USB disconnect, device number 72 [ 1335.409926][ T5685] idmouse 1-1:1.0: disconnected [ 1335.443627][T32307] fuse: Invalid rootmode [ 1335.458176][T29038] ems_usb 2-1:91.0 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 1335.458470][T29038] ems_usb 2-1:91.0: probe with driver ems_usb failed with error -22 [ 1335.495431][T29038] usb 2-1: USB disconnect, device number 10 [ 1335.615159][T26614] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1335.661865][T32319] syzkaller1: entered promiscuous mode [ 1335.661902][T32319] syzkaller1: entered allmulticast mode [ 1335.775104][T26614] usb 4-1: Using ep0 maxpacket: 8 [ 1335.775830][T26614] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1335.777385][T26614] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1335.777408][T26614] usb 4-1: config 0 has no interface number 0 [ 1335.777446][T26614] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1335.777485][T26614] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1335.782603][T26614] usb 4-1: config 0 descriptor?? [ 1335.797089][T26614] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1335.866675][ T5712] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 1336.015776][ T5712] usb 5-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice=88.00 [ 1336.015847][ T5712] usb 5-1: too many configurations: 136, using maximum allowed: 8 [ 1336.017546][ T5712] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1336.017581][ T5712] usb 5-1: can't read configurations, error -61 [ 1336.145224][ T5712] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 1336.305941][ T5712] usb 5-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice=88.00 [ 1336.306030][ T5712] usb 5-1: too many configurations: 136, using maximum allowed: 8 [ 1336.308715][ T5712] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1336.308750][ T5712] usb 5-1: can't read configurations, error -61 [ 1336.309101][ T5712] usb usb5-port1: attempt power cycle [ 1336.646167][ T5712] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 1336.671376][ T5712] usb 5-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice=88.00 [ 1336.671462][ T5712] usb 5-1: too many configurations: 136, using maximum allowed: 8 [ 1336.677998][ T5712] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1336.678033][ T5712] usb 5-1: can't read configurations, error -61 [ 1336.795211][ T5712] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 1336.816353][ T5712] usb 5-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice=88.00 [ 1336.816441][ T5712] usb 5-1: too many configurations: 136, using maximum allowed: 8 [ 1336.818419][ T5712] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1336.818452][ T5712] usb 5-1: can't read configurations, error -61 [ 1336.818793][ T5712] usb usb5-port1: unable to enumerate USB device [ 1337.069866][ T5712] usb 4-1: USB disconnect, device number 22 [ 1337.135772][T29038] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1337.295979][T29038] usb 2-1: Using ep0 maxpacket: 8 [ 1337.309026][T29038] usb 2-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 1337.309133][T29038] usb 2-1: too many configurations: 87, using maximum allowed: 8 [ 1337.331144][T29038] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1337.331250][T29038] usb 2-1: can't read configurations, error -61 [ 1337.457080][T29038] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1337.512451][ T30] kauditd_printk_skb: 219 callbacks suppressed [ 1337.512503][ T30] audit: type=1326 audit(1788222251.407:20506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32363 comm="syz.2.8093" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6d42b9e159 code=0x0 [ 1337.625341][T29038] usb 2-1: Using ep0 maxpacket: 8 [ 1337.626660][T29038] usb 2-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 1337.626781][T29038] usb 2-1: too many configurations: 87, using maximum allowed: 8 [ 1337.629699][T29038] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1337.629770][T29038] usb 2-1: can't read configurations, error -61 [ 1337.630257][T29038] usb usb2-port1: attempt power cycle [ 1337.673885][ T5712] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1337.826825][ T5712] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1337.842214][ T5712] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1337.850608][ T5712] usb 1-1: Product: syz [ 1337.850630][ T5712] usb 1-1: Manufacturer: syz [ 1337.850645][ T5712] usb 1-1: SerialNumber: syz [ 1337.965782][T29038] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1337.987716][T29038] usb 2-1: Using ep0 maxpacket: 8 [ 1337.991115][T29038] usb 2-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 1337.991187][T29038] usb 2-1: too many configurations: 87, using maximum allowed: 8 [ 1337.994330][T29038] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1337.994395][T29038] usb 2-1: can't read configurations, error -61 [ 1338.125569][T29038] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1338.147255][T29038] usb 2-1: Using ep0 maxpacket: 8 [ 1338.151095][T29038] usb 2-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 1338.151166][T29038] usb 2-1: too many configurations: 87, using maximum allowed: 8 [ 1338.159019][T29038] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1338.159087][T29038] usb 2-1: can't read configurations, error -61 [ 1338.159518][T29038] usb usb2-port1: unable to enumerate USB device [ 1338.285795][ T5712] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1338.285873][ T5712] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 1338.309495][ T5712] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1338.309569][ T5712] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1338.331757][ T5712] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1338.342906][ T5712] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 1338.358088][ T5712] usb 1-1: USB disconnect, device number 73 [ 1338.596702][T26614] usb 3-1: new low-speed USB device number 44 using dummy_hcd [ 1338.751640][T26614] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1338.752825][T26614] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1338.752849][T26614] usb 3-1: config 0 has no interface number 0 [ 1338.752886][T26614] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1338.752912][T26614] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1338.752951][T26614] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1338.758534][T26614] usb 3-1: config 0 descriptor?? [ 1338.759213][T32375] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1338.771452][T26614] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1339.615867][T32397] netlink: 164 bytes leftover after parsing attributes in process `syz.0.8103'. [ 1340.487785][T32403] batman_adv: batadv0: Interface deactivated: veth0 [ 1341.251732][T32411] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8110'. [ 1341.286119][T32411] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 1341.286148][T32411] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1341.286315][T32411] vhci_hcd vhci_hcd.0: Device attached [ 1341.307871][T32411] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(7) [ 1341.307899][T32411] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1341.308008][T32411] vhci_hcd vhci_hcd.0: Device attached [ 1341.356806][T32411] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(11) [ 1341.356837][T32411] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1341.357343][T32411] vhci_hcd vhci_hcd.0: Device attached [ 1341.361201][T32417] vhci_hcd: connection closed [ 1341.361791][T32415] vhci_hcd: connection closed [ 1341.362021][T19280] vhci_hcd vhci_hcd.1: stop threads [ 1341.362107][T19280] vhci_hcd vhci_hcd.1: release socket [ 1341.362188][T32413] vhci_hcd: connection closed [ 1341.365143][T19280] vhci_hcd vhci_hcd.1: disconnect device [ 1341.365832][T19280] vhci_hcd vhci_hcd.1: stop threads [ 1341.365848][T19280] vhci_hcd vhci_hcd.1: release socket [ 1341.365865][T19280] vhci_hcd vhci_hcd.1: disconnect device [ 1341.373301][T19280] vhci_hcd vhci_hcd.1: stop threads [ 1341.373318][T19280] vhci_hcd vhci_hcd.1: release socket [ 1341.373337][T19280] vhci_hcd vhci_hcd.1: disconnect device [ 1341.529166][T26614] usb 3-1: USB disconnect, device number 44 [ 1342.453786][T32439] IPVS: set_ctl: invalid protocol: 28771 99.99.116.46:30067 [ 1342.576256][ T5685] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 1342.747445][ T5685] usb 4-1: New USB device found, idVendor=17ef, idProduct=60fe, bcdDevice= 0.40 [ 1342.753382][ T5685] usb 4-1: config 1 interface 0 altsetting 77 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 1342.753416][ T5685] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1342.760797][ T5685] usb 4-1: string descriptor 0 read error: -22 [ 1342.760940][ T5685] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1342.812214][T32445] bond4: left allmulticast mode [ 1342.885818][T32445] veth5: left allmulticast mode [ 1343.435989][ T30] audit: type=1326 audit(1788222257.327:20507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32452 comm="syz.4.8121" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8cda59e159 code=0x0 [ 1343.436607][T32432] netlink: 'syz.3.8116': attribute type 49 has an invalid length. [ 1343.448856][ T5685] hid_parser_main: 30 callbacks suppressed [ 1343.448878][ T5685] lenovo 0003:17EF:60FE.004B: unknown main item tag 0x0 [ 1343.448908][ T5685] lenovo 0003:17EF:60FE.004B: unknown main item tag 0x0 [ 1343.448936][ T5685] lenovo 0003:17EF:60FE.004B: unknown main item tag 0x0 [ 1343.448963][ T5685] lenovo 0003:17EF:60FE.004B: unknown main item tag 0x0 [ 1343.448990][ T5685] lenovo 0003:17EF:60FE.004B: unknown main item tag 0x0 [ 1343.449016][ T5685] lenovo 0003:17EF:60FE.004B: unknown main item tag 0x0 [ 1343.449042][ T5685] lenovo 0003:17EF:60FE.004B: unknown main item tag 0x0 [ 1343.449068][ T5685] lenovo 0003:17EF:60FE.004B: unknown main item tag 0x0 [ 1343.449094][ T5685] lenovo 0003:17EF:60FE.004B: unknown main item tag 0x0 [ 1343.449120][ T5685] lenovo 0003:17EF:60FE.004B: unknown main item tag 0x0 [ 1343.556906][T32457] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 1343.637477][ T5685] lenovo 0003:17EF:60FE.004B: hidraw0: USB HID v1.01 Device [HID 17ef:60fe] on usb-dummy_hcd.3-1/input0 [ 1343.791679][T32463] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8123'. [ 1343.821114][T32463] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 1343.821144][T32463] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1343.821256][T32463] vhci_hcd vhci_hcd.0: Device attached [ 1343.882332][T32463] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(7) [ 1343.882350][T32463] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1343.882453][T32463] vhci_hcd vhci_hcd.0: Device attached [ 1343.914244][T29038] usb 4-1: USB disconnect, device number 23 [ 1344.006241][T32463] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(11) [ 1344.006271][T32463] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1344.006486][T32463] vhci_hcd vhci_hcd.0: Device attached [ 1344.020933][T32464] vhci_hcd: connection closed [ 1344.021516][T32467] vhci_hcd: connection closed [ 1344.022227][T32469] vhci_hcd: connection closed [ 1344.029190][T19286] vhci_hcd vhci_hcd.0: stop threads [ 1344.029255][T19286] vhci_hcd vhci_hcd.0: release socket [ 1344.029790][T19286] vhci_hcd vhci_hcd.0: disconnect device [ 1344.036168][T19286] vhci_hcd vhci_hcd.0: stop threads [ 1344.036202][T19286] vhci_hcd vhci_hcd.0: release socket [ 1344.036707][T19286] vhci_hcd vhci_hcd.0: disconnect device [ 1344.038929][T19286] vhci_hcd vhci_hcd.0: stop threads [ 1344.038962][T19286] vhci_hcd vhci_hcd.0: release socket [ 1344.039122][T19286] vhci_hcd vhci_hcd.0: disconnect device [ 1344.049108][ T5685] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1345.246178][T32491] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8128'. [ 1346.197005][T32514] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8137'. [ 1346.242931][T32514] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 1346.242960][T32514] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1346.259219][T32514] vhci_hcd vhci_hcd.0: Device attached [ 1346.296290][T32514] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(7) [ 1346.296311][T32514] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1346.296417][T32514] vhci_hcd vhci_hcd.0: Device attached [ 1346.335112][ T5685] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1346.349014][T32514] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(11) [ 1346.349045][T32514] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1346.349166][T32514] vhci_hcd vhci_hcd.0: Device attached [ 1346.357398][T32519] vhci_hcd: connection closed [ 1346.362125][T32515] vhci_hcd: connection closed [ 1346.366141][T32517] vhci_hcd: connection closed [ 1346.367557][T22498] vhci_hcd vhci_hcd.3: stop threads [ 1346.367623][T22498] vhci_hcd vhci_hcd.3: release socket [ 1346.367658][T22498] vhci_hcd vhci_hcd.3: disconnect device [ 1346.368075][T22498] vhci_hcd vhci_hcd.3: stop threads [ 1346.368105][T22498] vhci_hcd vhci_hcd.3: release socket [ 1346.368145][T22498] vhci_hcd vhci_hcd.3: disconnect device [ 1346.390826][T22498] vhci_hcd vhci_hcd.3: stop threads [ 1346.390891][T22498] vhci_hcd vhci_hcd.3: release socket [ 1346.391011][T22498] vhci_hcd vhci_hcd.3: disconnect device [ 1346.516094][ T5685] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1346.528908][ T5685] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1346.539945][ T5685] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1346.539972][ T5685] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1346.540020][ T5685] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1346.576106][ T5685] usb 2-1: config 0 descriptor?? [ 1346.759214][T32528] netlink: 'syz.2.8139': attribute type 4 has an invalid length. [ 1346.773770][T32528] netlink: 'syz.2.8139': attribute type 4 has an invalid length. [ 1346.788449][T32512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1346.823668][T32512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1347.020328][ T5685] usbhid 2-1:0.0: can't add hid device: -71 [ 1347.027028][ T5685] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1347.048777][ T5685] usb 2-1: USB disconnect, device number 15 [ 1347.807947][T32542] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1347.948847][T32544] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8144'. [ 1348.151135][T32544] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1348.164179][T32545] bond1: (slave wlan1): Releasing active interface [ 1348.232826][T32545] bond2: (slave wlan1): Enslaving as an active interface with an up link [ 1350.116782][T29038] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1350.189325][T32585] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.8160'. [ 1350.202694][T32585] bridge_slave_0: left allmulticast mode [ 1350.210176][T32585] bridge_slave_0: left promiscuous mode [ 1350.216070][T32585] bridge0: port 1(bridge_slave_0) entered disabled state [ 1350.228281][T32585] bridge_slave_1: left allmulticast mode [ 1350.234113][T32585] bridge_slave_1: left promiscuous mode [ 1350.240699][T32585] bridge0: port 2(bridge_slave_1) entered disabled state [ 1350.251620][T32585] bond5: (slave veth0_to_bond): Releasing active interface [ 1350.262661][T32585] bond0: (slave bond_slave_0): Releasing backup interface [ 1350.269841][T29038] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1350.272008][T29038] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1350.272069][T29038] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1350.272107][T29038] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1350.272178][T29038] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1350.302264][T29038] usb 3-1: config 0 descriptor?? [ 1350.315322][ T5685] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1350.338067][T32585] bond0: (slave bond_slave_1): Releasing backup interface [ 1350.353670][T32585] team0: Port device team_slave_0 removed [ 1350.361569][T32585] team0: Port device team_slave_1 removed [ 1350.368087][T32585] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1350.375612][ T5712] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1350.384262][T32585] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1350.397518][T32585] bond0: (slave netdevsim1): Releasing backup interface [ 1350.410898][T32585] bond3: (slave gretap1): Releasing active interface [ 1350.418551][T32585] bond3: (slave gretap1): the permanent HWaddr of slave - b6:75:f8:ee:2a:81 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1350.440369][T32585] bond3: (slave veth3): Releasing active interface [ 1350.450437][T32585] bond5: (slave veth5): Releasing active interface [ 1350.495098][ T5685] usb 4-1: Using ep0 maxpacket: 16 [ 1350.496958][ T5685] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1350.498359][ T5685] usb 4-1: config 0 has no interfaces? [ 1350.501349][ T5685] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1350.501373][ T5685] usb 4-1: Product: syz [ 1350.501388][ T5685] usb 4-1: Manufacturer: syz [ 1350.501403][ T5685] usb 4-1: SerialNumber: syz [ 1350.507421][ T5685] usb 4-1: config 0 descriptor?? [ 1350.557235][ T5712] usb 2-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 1350.561167][ T5712] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1350.561194][ T5712] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 1350.561233][ T5712] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1350.636351][ T5712] idmouse 2-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 1350.718574][T32580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1350.722702][T32580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1350.737189][T32580] netlink: 'syz.3.8158': attribute type 28 has an invalid length. [ 1350.737211][T32580] netlink: 'syz.3.8158': attribute type 16 has an invalid length. [ 1350.746585][ T5712] usb 4-1: USB disconnect, device number 24 [ 1350.772391][T29038] hid_parser_main: 4007 callbacks suppressed [ 1350.780258][T29038] plantronics 0003:047F:FFFF.004C: unknown main item tag 0x0 [ 1350.790645][T29038] plantronics 0003:047F:FFFF.004C: unknown main item tag 0x0 [ 1350.814568][T29038] plantronics 0003:047F:FFFF.004C: hiddev1,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1350.954274][T32602] syz.0.8164 (32602): drop_caches: 2 [ 1350.972257][T32573] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8154'. [ 1350.987670][ T5712] usb 3-1: USB disconnect, device number 45 [ 1350.997253][T32601] fido_id[32601]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 1352.520362][T29038] usb 2-1: USB disconnect, device number 16 [ 1352.568891][T29038] idmouse 2-1:1.0: disconnected [ 1353.209203][T32632] xt_hashlimit: size too large, truncated to 1048576 [ 1353.383309][ T30] audit: type=1326 audit(1788222267.277:20508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32633 comm="syz.3.8174" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7b139e159 code=0x7ffc0000 [ 1353.411138][ T30] audit: type=1326 audit(1788222267.277:20509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32633 comm="syz.3.8174" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7b139e159 code=0x7ffc0000 [ 1353.411207][ T30] audit: type=1326 audit(1788222267.277:20510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32633 comm="syz.3.8174" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7b139e159 code=0x7ffc0000 [ 1353.478475][ T30] audit: type=1326 audit(1788222267.367:20511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32633 comm="syz.3.8174" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7b139e159 code=0x7ffc0000 [ 1353.478550][ T30] audit: type=1326 audit(1788222267.367:20512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32633 comm="syz.3.8174" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd7b139dec2 code=0x7ffc0000 [ 1353.478586][ T30] audit: type=1326 audit(1788222267.367:20513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32633 comm="syz.3.8174" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7fd7b139e159 code=0x7ffc0000 [ 1353.478626][ T30] audit: type=1326 audit(1788222267.367:20514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32633 comm="syz.3.8174" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fd7b139df57 code=0x7ffc0000 [ 1353.478663][ T30] audit: type=1326 audit(1788222267.367:20515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32633 comm="syz.3.8174" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7b139e159 code=0x7ffc0000 [ 1353.478702][ T30] audit: type=1326 audit(1788222267.367:20516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32633 comm="syz.3.8174" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7b139e159 code=0x7ffc0000 [ 1353.478741][ T30] audit: type=1326 audit(1788222267.367:20517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32633 comm="syz.3.8174" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fd7b135ae51 code=0x7ffc0000 [ 1353.819407][T29034] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 1353.843052][T32642] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8177'. [ 1353.979272][T29034] usb 4-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 1354.009419][T29034] usb 4-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 1354.018234][T29034] usb 4-1: Product: syz [ 1354.018260][T29034] usb 4-1: Manufacturer: syz [ 1354.018279][T29034] usb 4-1: SerialNumber: syz [ 1354.062034][T29034] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 1354.185153][ T5685] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1354.315129][ T5685] usb 2-1: device descriptor read/64, error -71 [ 1354.435740][T32654] xt_hashlimit: size too large, truncated to 1048576 [ 1354.436066][T32654] xt_hashlimit: invalid interval [ 1354.482832][T32634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1354.493251][T32634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1354.512088][T29034] vp7045: USB control message 'in' went wrong. [ 1354.512159][T29034] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1354.512226][T29034] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 1354.530515][T29034] usb 4-1: USB disconnect, device number 25 [ 1354.555929][ T5685] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1354.695335][ T5685] usb 2-1: device descriptor read/64, error -71 [ 1354.807235][ T5685] usb usb2-port1: attempt power cycle [ 1355.155212][ T5685] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1355.184933][ T5685] usb 2-1: device descriptor read/8, error -71 [ 1355.446488][ T5685] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1355.469160][ T5685] usb 2-1: device descriptor read/8, error -71 [ 1355.576859][ T5685] usb usb2-port1: unable to enumerate USB device [ 1355.725213][ T5712] usb 1-1: new full-speed USB device number 74 using dummy_hcd [ 1355.876287][ T5712] usb 1-1: not running at top speed; connect to a high speed hub [ 1355.876350][ T5712] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 1355.877315][ T5712] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1355.877371][ T5712] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1355.903944][ T5712] gspca_main: spca501-2.14.0 probing 0000:0000 [ 1356.130373][T32681] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8190'. [ 1356.405433][ T5712] gspca_spca501: reg write: error -110 [ 1356.405470][ T5712] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 1356.405575][ T5712] spca501 1-1:1.0: probe with driver spca501 failed with error -22 [ 1356.406444][ T5712] uvcvideo 1-1:1.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 1356.406528][ T5712] uvcvideo 1-1:1.0: Found UVC 1.00 device (0000:0000) [ 1356.406587][ T5712] uvcvideo 1-1:1.1: No supported video formats found. [ 1356.406601][ T5712] uvcvideo 1-1:1.1: Failed to initialize the device (-22). [ 1356.415794][ T5712] uvcvideo 1-1:1.0: probe with driver uvcvideo failed with error -22 [ 1357.234252][T32712] ptrace attach of ""[32715] was attempted by "ci-upstream-kasan-gce/syz-executor exec"[32712] [ 1357.380828][T32712] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8200'. [ 1357.458427][ T5712] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1357.629061][ T5712] usb 4-1: New USB device found, idVendor=07ff, idProduct=1800, bcdDevice=82.00 [ 1357.629116][ T5712] usb 4-1: too many configurations: 255, using maximum allowed: 8 [ 1357.647790][ T5712] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1357.647828][ T5712] usb 4-1: can't read configurations, error -61 [ 1357.775261][ T5712] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1357.926095][ T5712] usb 4-1: New USB device found, idVendor=07ff, idProduct=1800, bcdDevice=82.00 [ 1357.926160][ T5712] usb 4-1: too many configurations: 255, using maximum allowed: 8 [ 1357.932819][ T5712] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1357.932857][ T5712] usb 4-1: can't read configurations, error -61 [ 1357.940192][ T5712] usb usb4-port1: attempt power cycle [ 1358.295112][ T5712] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1358.326462][ T5712] usb 4-1: New USB device found, idVendor=07ff, idProduct=1800, bcdDevice=82.00 [ 1358.326525][ T5712] usb 4-1: too many configurations: 255, using maximum allowed: 8 [ 1358.328679][ T5712] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1358.328715][ T5712] usb 4-1: can't read configurations, error -61 [ 1358.445411][T29034] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1358.455096][ T5712] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1358.468215][ T5685] usb 1-1: USB disconnect, device number 74 [ 1358.510972][ T5712] usb 4-1: New USB device found, idVendor=07ff, idProduct=1800, bcdDevice=82.00 [ 1358.511043][ T5712] usb 4-1: too many configurations: 255, using maximum allowed: 8 [ 1358.524773][ T5712] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1358.524812][ T5712] usb 4-1: can't read configurations, error -61 [ 1358.525208][ T5712] usb usb4-port1: unable to enumerate USB device [ 1358.618833][T29034] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1358.631508][T29034] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1358.649467][T29034] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1358.649560][T29034] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1358.649603][T29034] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1358.701727][T29034] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1358.711369][T29034] usb 3-1: Product: syz [ 1358.711426][T29034] usb 3-1: Manufacturer: syz [ 1358.711461][T29034] usb 3-1: SerialNumber: syz [ 1358.737745][T29034] usb 3-1: config 0 descriptor?? [ 1358.935131][ T5685] usb 1-1: new full-speed USB device number 75 using dummy_hcd [ 1358.949429][T29034] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 1359.075444][ T5685] usb 1-1: device descriptor read/64, error -71 [ 1359.315132][ T5685] usb 1-1: new full-speed USB device number 76 using dummy_hcd [ 1359.471071][ T5685] usb 1-1: device descriptor read/64, error -71 [ 1359.508719][T32735] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8202'. [ 1359.508762][T32735] netlink: 35 bytes leftover after parsing attributes in process `syz.2.8202'. [ 1359.520286][T32735] netlink: 'syz.2.8202': attribute type 5 has an invalid length. [ 1359.520305][T32735] netlink: 'syz.2.8202': attribute type 6 has an invalid length. [ 1359.520318][T32735] netlink: 35 bytes leftover after parsing attributes in process `syz.2.8202'. [ 1359.575831][ T5685] usb usb1-port1: attempt power cycle [ 1359.588416][T32737] mac80211_hwsim hwsim76 wlan1: left promiscuous mode [ 1359.925139][ T5685] usb 1-1: new full-speed USB device number 77 using dummy_hcd [ 1359.947826][ T5685] usb 1-1: device descriptor read/8, error -71 [ 1360.194931][ T5685] usb 1-1: new full-speed USB device number 78 using dummy_hcd [ 1360.221172][ T5685] usb 1-1: device descriptor read/8, error -71 [ 1360.326545][ T5685] usb usb1-port1: unable to enumerate USB device [ 1360.453133][T32754] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8211'. [ 1360.466160][T32754] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1360.466188][T32754] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1360.468703][T32754] vhci_hcd vhci_hcd.0: Device attached [ 1360.489225][T32754] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(7) [ 1360.489254][T32754] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1360.489376][T32754] vhci_hcd vhci_hcd.0: Device attached [ 1360.522390][T32754] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(12) [ 1360.522416][T32754] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1360.527884][T32754] vhci_hcd vhci_hcd.0: Device attached [ 1360.529719][T32759] vhci_hcd: connection closed [ 1360.534006][T32757] vhci_hcd: connection closed [ 1360.534335][T32755] vhci_hcd: connection closed [ 1360.538041][T22494] vhci_hcd vhci_hcd.4: stop threads [ 1360.538075][T22494] vhci_hcd vhci_hcd.4: release socket [ 1360.538096][T22494] vhci_hcd vhci_hcd.4: disconnect device [ 1360.538372][T22494] vhci_hcd vhci_hcd.4: stop threads [ 1360.538388][T22494] vhci_hcd vhci_hcd.4: release socket [ 1360.538405][T22494] vhci_hcd vhci_hcd.4: disconnect device [ 1360.544034][T22494] vhci_hcd vhci_hcd.4: stop threads [ 1360.544051][T22494] vhci_hcd vhci_hcd.4: release socket [ 1360.544070][T22494] vhci_hcd vhci_hcd.4: disconnect device [ 1361.194606][T29034] usb 3-1: USB disconnect, device number 46 [ 1361.629475][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.629612][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.727556][ T319] syz.2.8218 (319): drop_caches: 2 [ 1362.207067][T29034] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 1362.368223][T29034] usb 5-1: Using ep0 maxpacket: 32 [ 1362.369696][T29034] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1362.378571][T29034] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1362.378642][T29034] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1362.378719][T29034] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1362.412953][T29034] usb 5-1: config 0 descriptor?? [ 1362.728983][ T338] netlink: 156 bytes leftover after parsing attributes in process `syz.0.8224'. [ 1362.754145][T29034] savu 0003:1E7D:2D5A.004D: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 1362.835303][ T5712] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 1362.892256][ T5685] usb 5-1: USB disconnect, device number 112 [ 1362.954423][ T341] fido_id[341]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 1362.995936][ T5712] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1363.009005][ T5712] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1363.020265][ T5712] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1363.020296][ T5712] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1363.020341][ T5712] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1363.060145][ T5712] usb 3-1: config 0 descriptor?? [ 1363.574150][ T5712] plantronics 0003:047F:FFFF.004E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1363.718732][ T52] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 1363.832357][ T30] kauditd_printk_skb: 163 callbacks suppressed [ 1363.839252][ T30] audit: type=1326 audit(1788222277.727:20681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=358 comm="syz.4.8231" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cda59e159 code=0x7ffc0000 [ 1363.867237][ T30] audit: type=1326 audit(1788222277.767:20682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=358 comm="syz.4.8231" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cda59e159 code=0x7ffc0000 [ 1363.892651][ T30] audit: type=1326 audit(1788222277.787:20683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=358 comm="syz.4.8231" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cda59e159 code=0x7ffc0000 [ 1363.892727][ T30] audit: type=1326 audit(1788222277.787:20684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=358 comm="syz.4.8231" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cda59e159 code=0x7ffc0000 [ 1363.892778][ T30] audit: type=1326 audit(1788222277.787:20685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=358 comm="syz.4.8231" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7f8cda59e159 code=0x7ffc0000 [ 1363.892822][ T30] audit: type=1326 audit(1788222277.787:20686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=358 comm="syz.4.8231" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cda59e159 code=0x7ffc0000 [ 1363.892865][ T30] audit: type=1326 audit(1788222277.787:20687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=358 comm="syz.4.8231" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cda59e159 code=0x7ffc0000 [ 1363.918003][ T30] audit: type=1326 audit(1788222277.797:20688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=358 comm="syz.4.8231" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cda59e159 code=0x7ffc0000 [ 1363.918069][ T30] audit: type=1326 audit(1788222277.797:20689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=358 comm="syz.4.8231" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cda59e159 code=0x7ffc0000 [ 1363.969010][ T30] audit: type=1326 audit(1788222277.847:20690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=358 comm="syz.4.8231" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cda59e159 code=0x7ffc0000 [ 1364.039696][ T360] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8231'. [ 1364.486176][T29034] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 1364.627652][T29034] usb 5-1: device descriptor read/64, error -71 [ 1364.826102][ T378] binder: 377:378 ioctl c0306201 2000000002c0 returned -14 [ 1364.834188][ T378] netlink: 6 bytes leftover after parsing attributes in process `syz.0.8236'. [ 1364.866603][T29034] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 1364.997286][T29034] usb 5-1: device descriptor read/64, error -71 [ 1365.064225][ T367] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8232'. [ 1365.106423][T29034] usb usb5-port1: attempt power cycle [ 1365.446021][T29034] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 1365.470408][T29034] usb 5-1: device descriptor read/8, error -71 [ 1365.640462][ T390] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1365.707058][T29034] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 1365.729344][T29034] usb 5-1: device descriptor read/8, error -71 [ 1365.762862][ T392] netlink: 'syz.1.8238': attribute type 4 has an invalid length. [ 1365.803783][ T392] netlink: 'syz.1.8238': attribute type 4 has an invalid length. [ 1365.837806][T29034] usb usb5-port1: unable to enumerate USB device [ 1365.851600][T15068] usb 3-1: USB disconnect, device number 47 [ 1366.157658][ T396] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3343437945 (53495007120 ns) > initial count (52285443328 ns). Using initial count to start timer. [ 1367.451207][ T410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1367.601759][ T409] syzkaller0: entered promiscuous mode [ 1367.601824][ T409] syzkaller0: entered allmulticast mode [ 1367.748894][ T412] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1368.125773][T15068] usb 1-1: new full-speed USB device number 79 using dummy_hcd [ 1368.276314][T15068] usb 1-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 1368.278276][T15068] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1368.290824][T15068] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1368.290915][T15068] usb 1-1: Product: syz [ 1368.291355][T15068] usb 1-1: Manufacturer: syz [ 1368.291405][T15068] usb 1-1: SerialNumber: syz [ 1368.352588][T15068] usb 1-1: config 0 descriptor?? [ 1368.830754][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 1368.973040][ T428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1368.973845][ T428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1368.986544][T15068] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1369.081451][ T420] nvme nvme0: failed to connect socket: -512 [ 1369.123620][T15068] usb 2-1: device descriptor read/64, error -71 [ 1369.368032][T15068] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1369.510066][T15068] usb 2-1: device descriptor read/64, error -71 [ 1369.625606][T15068] usb usb2-port1: attempt power cycle [ 1369.984904][T15068] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1370.018019][T15068] usb 2-1: device descriptor read/8, error -71 [ 1370.264863][T15068] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1370.292093][T15068] usb 2-1: device descriptor read/8, error -71 [ 1370.396456][T15068] usb usb2-port1: unable to enumerate USB device [ 1372.156148][T15068] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1372.329405][T15068] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1372.329539][T15068] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1372.332097][T15068] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1372.332156][T15068] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1372.340190][T15068] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1372.340249][T15068] usb 2-1: Product: syz [ 1372.340316][T15068] usb 2-1: Manufacturer: syz [ 1372.340350][T15068] usb 2-1: SerialNumber: syz [ 1372.379320][T15068] usb 2-1: 0:1 : does not exist [ 1372.636061][ T447] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1373.590839][T29038] usb 1-1: USB disconnect, device number 79 [ 1374.036107][ T467] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8257'. [ 1374.986012][T15068] usb 2-1: unit 0 not found! [ 1375.212192][T15068] usb 2-1: USB disconnect, device number 25 [ 1375.392394][ T5624] udevd[5624]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1375.645533][T15068] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1375.695945][ T472] netlink: 4912 bytes leftover after parsing attributes in process `syz.3.8259'. [ 1375.749733][ T471] netlink: 'syz.3.8259': attribute type 88 has an invalid length. [ 1375.795119][ T5685] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1375.807250][T15068] usb 2-1: Using ep0 maxpacket: 8 [ 1375.816641][T15068] usb 2-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 1375.824640][T15068] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1375.824681][T15068] usb 2-1: Product: syz [ 1375.824712][T15068] usb 2-1: Manufacturer: syz [ 1375.824742][T15068] usb 2-1: SerialNumber: syz [ 1375.853446][T15068] usb 2-1: config 0 descriptor?? [ 1375.884501][T15068] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 1375.885523][T15068] dvb-usb: bulk message failed: -22 (2/0) [ 1375.912041][T15068] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1375.913799][T15068] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 1375.913903][T15068] usb 2-1: media controller created [ 1375.957188][ T5685] usb 5-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 1375.961252][T15068] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1375.977515][ T5685] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1375.977583][ T5685] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1375.987875][T29038] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1376.019656][ T5685] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1376.019701][ T5685] usb 5-1: Product: syz [ 1376.019733][ T5685] usb 5-1: Manufacturer: syz [ 1376.019752][ T5685] usb 5-1: SerialNumber: syz [ 1376.086329][T15068] cxusb: set interface failed [ 1376.086409][T15068] dvb-usb: bulk message failed: -22 (1/0) [ 1376.136921][T29038] usb 4-1: Using ep0 maxpacket: 8 [ 1376.148787][T29038] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1376.148888][T29038] usb 4-1: New USB device found, idVendor=1b80, idProduct=e302, bcdDevice=8c.2b [ 1376.153737][T29038] usb 4-1: config 250 has an invalid interface number: 59 but max is 2 [ 1376.153778][T29038] usb 4-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 1376.153831][T29038] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 3 [ 1376.153868][T29038] usb 4-1: config 250 has no interface number 0 [ 1376.153939][T29038] usb 4-1: config 250 interface 59 altsetting 255 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 1376.154005][T29038] usb 4-1: config 250 interface 59 altsetting 255 has an endpoint descriptor with address 0xC2, changing to 0x82 [ 1376.154062][T29038] usb 4-1: config 250 interface 59 altsetting 255 endpoint 0x82 has invalid maxpacket 128, setting to 64 [ 1376.154105][T29038] usb 4-1: config 250 interface 59 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1376.154165][T29038] usb 4-1: config 250 interface 59 has no altsetting 0 [ 1376.161584][T29038] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1376.161636][T29038] usb 4-1: Product: syz [ 1376.161668][T29038] usb 4-1: Manufacturer: syz [ 1376.161698][T29038] usb 4-1: SerialNumber: syz [ 1376.295438][ T5685] usb 5-1: usb_control_msg returned -71 [ 1376.295506][ T5685] usbtmc 5-1:1.0: can't read capabilities [ 1376.314625][ T5685] usb 5-1: USB disconnect, device number 117 [ 1376.328771][T15068] DVB: Unable to find symbol mt352_attach() [ 1376.328866][T15068] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 1376.359176][ T5624] udevd[5624]: setting mode of /dev/bus/usb/005/117 to 020664 failed: No such file or directory [ 1376.359600][ T5624] udevd[5624]: setting owner of /dev/bus/usb/005/117 to uid=0, gid=0 failed: No such file or directory [ 1376.417343][T29034] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1376.450501][T29038] em28xx 4-1:250.59: New device syz syz @ 480 Mbps (1b80:e302, interface 59, class 59) [ 1376.450571][T29038] em28xx 4-1:250.59: Video interface 59 found: [ 1376.525898][ T498] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8265'. [ 1376.544498][T29038] em28xx 4-1:250.59: unknown em28xx chip ID (0) [ 1376.570067][T29034] usb 3-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 1376.573189][T29034] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1376.573254][T29034] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 1376.573553][T29034] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1376.590712][T15068] rc_core: IR keymap rc-dvico-portable not found [ 1376.590746][T15068] Registered IR keymap rc-empty [ 1376.642191][T29038] em28xx 4-1:250.59: reading from i2c device at 0xa0 failed (error=-5) [ 1376.642296][T29038] em28xx 4-1:250.59: board has no eeprom [ 1376.660418][T15068] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 1376.689038][T29034] idmouse 3-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 1376.690589][T15068] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input214 [ 1376.695975][T29038] em28xx 4-1:250.59: Identified as Pinnacle Dazzle DVC 90/100/101/107 / Kaiser Baas Video to DVD maker / Kworld DVD Maker 2 / Plextor ConvertX PX-AV100U (card=9) [ 1376.696038][T29038] em28xx 4-1:250.59: analog set to bulk mode. [ 1376.709467][T29039] em28xx 4-1:250.59: Registering V4L2 extension [ 1376.733384][T15068] dvb-usb: schedule remote query interval to 100 msecs. [ 1376.733424][T15068] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 1376.802204][T29033] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 1376.823214][T15068] usb 2-1: USB disconnect, device number 26 [ 1376.836642][T29031] dvb-usb: bulk message failed: -22 (1/0) [ 1376.859918][T29038] usb 4-1: USB disconnect, device number 30 [ 1376.968307][T29033] usb 5-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 1376.980523][T29033] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1376.980664][T29033] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1377.021521][T29033] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1377.021565][T29033] usb 5-1: Product: syz [ 1377.021596][T29033] usb 5-1: Manufacturer: syz [ 1377.021625][T29033] usb 5-1: SerialNumber: syz [ 1377.109442][T29038] em28xx 4-1:250.59: Disconnecting em28xx [ 1377.185137][T29039] em28xx 4-1:250.59: Config register raw data: 0xffffffed [ 1377.185211][T29039] em28xx 4-1:250.59: AC97 chip type couldn't be determined [ 1377.185239][T29039] em28xx 4-1:250.59: No AC97 audio processor [ 1377.356545][T29039] usb 4-1: Decoder not found [ 1377.356592][T29039] em28xx 4-1:250.59: failed to create media graph [ 1377.356623][T29039] em28xx 4-1:250.59: V4L2 device video103 deregistered [ 1377.360987][T29033] usb 5-1: usb_control_msg returned -32 [ 1377.361081][T29033] usbtmc 5-1:1.0: can't read capabilities [ 1377.471021][T15068] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 1377.693692][T29039] INFO: trying to register non-static key. [ 1377.699531][T29039] The code is fine but needs lockdep annotation, or maybe [ 1377.706635][T29039] you didn't initialize this object before use? [ 1377.712875][T29039] turning off the locking correctness validator. [ 1377.719200][T29039] CPU: 1 UID: 0 PID: 29039 Comm: kworker/1:17 Tainted: G L syzkaller #0 PREEMPT(full) [ 1377.730306][T29039] Tainted: [L]=SOFTLOCKUP [ 1377.734619][T29039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1377.744664][T29039] Workqueue: events request_module_async [ 1377.750429][T29039] Call Trace: [ 1377.753710][T29039] [ 1377.756649][T29039] dump_stack_lvl+0xe8/0x150 [ 1377.761259][T29039] assign_lock_key+0x133/0x150 [ 1377.766042][T29039] register_lock_class+0xcc/0x2e0 [ 1377.771059][T29039] __lock_acquire+0xaf/0x2e50 [ 1377.775740][T29039] ? irqentry_exit+0x218/0x910 [ 1377.780509][T29039] ? trace_irq_disable+0x3b/0x140 [ 1377.785539][T29039] ? __mutex_trylock_common+0x15f/0x270 [ 1377.791096][T29039] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1377.796984][T29039] lock_acquire+0x115/0x350 [ 1377.801478][T29039] ? __wake_up_common_lock+0x30/0x1f0 [ 1377.806867][T29039] ? rcu_is_watching+0x16/0xb0 [ 1377.811668][T29039] _raw_spin_lock_irqsave+0x40/0x60 [ 1377.816873][T29039] ? __wake_up_common_lock+0x30/0x1f0 [ 1377.822259][T29039] __wake_up_common_lock+0x30/0x1f0 [ 1377.827465][T29039] ? __pfx___mutex_lock+0x10/0x10 [ 1377.832500][T29039] __vb2_queue_cancel+0x2de/0xde0 [ 1377.837653][T29039] ? __vb2_cleanup_fileio+0x134/0x1f0 [ 1377.843059][T29039] vb2_core_queue_release+0x2f/0x150 [ 1377.848346][T29039] vb2_video_unregister_device+0x15b/0x200 [ 1377.854228][T29039] em28xx_v4l2_init+0x1c89/0x3150 [ 1377.859290][T29039] em28xx_init_extension+0x120/0x1d0 [ 1377.864574][T29039] ? process_scheduled_works+0x97a/0x1630 [ 1377.870296][T29039] process_scheduled_works+0xc3d/0x1630 [ 1377.875885][T29039] ? __pfx_process_scheduled_works+0x10/0x10 [ 1377.881893][T29039] ? assign_work+0x3cf/0x5d0 [ 1377.886482][T29039] worker_thread+0xa47/0xfb0 [ 1377.891082][T29039] ? __kthread_parkme+0x71/0x1f0 [ 1377.896077][T29039] kthread+0x38b/0x480 [ 1377.900170][T29039] ? __pfx_worker_thread+0x10/0x10 [ 1377.905287][T29039] ? __pfx_kthread+0x10/0x10 [ 1377.909871][T29039] ret_from_fork+0x514/0xb70 [ 1377.914477][T29039] ? __pfx_ret_from_fork+0x10/0x10 [ 1377.919583][T29039] ? __switch_to+0xc89/0x1420 [ 1377.924271][T29039] ? __pfx_kthread+0x10/0x10 [ 1377.928867][T29039] ret_from_fork_asm+0x1a/0x30 [ 1377.933674][T29039] [ 1377.936743][T29039] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 1377.948633][T29039] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 1377.957056][T29039] CPU: 1 UID: 0 PID: 29039 Comm: kworker/1:17 Tainted: G L syzkaller #0 PREEMPT(full) [ 1377.968193][T29039] Tainted: [L]=SOFTLOCKUP [ 1377.972508][T29039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1377.982546][T29039] Workqueue: events request_module_async [ 1377.988270][T29039] RIP: 0010:__wake_up_common_lock+0xd6/0x1f0 [ 1377.994265][T29039] Code: 0f 84 d4 00 00 00 44 8b 64 24 04 eb 13 48 ba 00 00 00 00 00 fc ff df 4c 39 fd 0f 84 ba 00 00 00 49 89 ee 48 89 e8 48 c1 e8 03 <80> 3c 10 00 74 12 4c 89 f7 e8 bc 67 97 00 48 ba 00 00 00 00 00 fc [ 1378.013873][T29039] RSP: 0018:ffffc90003867880 EFLAGS: 00010046 [ 1378.019955][T29039] RAX: 0000000000000000 RBX: ffff888060a31740 RCX: 0000000000000001 [ 1378.027930][T29039] RDX: dffffc0000000000 RSI: 0000000000000004 RDI: ffffc900038677e0 [ 1378.035890][T29039] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 1378.043860][T29039] R10: dffffc0000000000 R11: fffff5200070cefc R12: 0000000000000000 [ 1378.051818][T29039] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888060a317d0 [ 1378.059789][T29039] FS: 0000000000000000(0000) GS:ffff888124dda000(0000) knlGS:0000000000000000 [ 1378.068709][T29039] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1378.075300][T29039] CR2: 00002000008ec000 CR3: 0000000055724000 CR4: 00000000003526f0 [ 1378.083271][T29039] DR0: fffffffffffffffd DR1: 0000000100000005 DR2: 0000000000000002 [ 1378.091230][T29039] DR3: ffffffffefffff16 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1378.099200][T29039] Call Trace: [ 1378.102475][T29039] [ 1378.105408][T29039] __vb2_queue_cancel+0x2de/0xde0 [ 1378.110435][T29039] ? __vb2_cleanup_fileio+0x134/0x1f0 [ 1378.115819][T29039] vb2_core_queue_release+0x2f/0x150 [ 1378.121109][T29039] vb2_video_unregister_device+0x15b/0x200 [ 1378.126923][T29039] em28xx_v4l2_init+0x1c89/0x3150 [ 1378.131968][T29039] em28xx_init_extension+0x120/0x1d0 [ 1378.137257][T29039] ? process_scheduled_works+0x97a/0x1630 [ 1378.142985][T29039] process_scheduled_works+0xc3d/0x1630 [ 1378.148546][T29039] ? __pfx_process_scheduled_works+0x10/0x10 [ 1378.154536][T29039] ? assign_work+0x3cf/0x5d0 [ 1378.159128][T29039] worker_thread+0xa47/0xfb0 [ 1378.163738][T29039] ? __kthread_parkme+0x71/0x1f0 [ 1378.168684][T29039] kthread+0x38b/0x480 [ 1378.172768][T29039] ? __pfx_worker_thread+0x10/0x10 [ 1378.177879][T29039] ? __pfx_kthread+0x10/0x10 [ 1378.182476][T29039] ret_from_fork+0x514/0xb70 [ 1378.187090][T29039] ? __pfx_ret_from_fork+0x10/0x10 [ 1378.192211][T29039] ? __switch_to+0xc89/0x1420 [ 1378.196901][T29039] ? __pfx_kthread+0x10/0x10 [ 1378.201494][T29039] ret_from_fork_asm+0x1a/0x30 [ 1378.206255][T29039] [ 1378.209288][T29039] Modules linked in: [ 1378.213188][T29039] ---[ end trace 0000000000000000 ]--- [ 1378.218645][T29039] RIP: 0010:__wake_up_common_lock+0xd6/0x1f0 [ 1378.218673][T29039] Code: 0f 84 d4 00 00 00 44 8b 64 24 04 eb 13 48 ba 00 00 00 00 00 fc ff df 4c 39 fd 0f 84 ba 00 00 00 49 89 ee 48 89 e8 48 c1 e8 03 <80> 3c 10 00 74 12 4c 89 f7 e8 bc 67 97 00 48 ba 00 00 00 00 00 fc [ 1378.218683][T29039] RSP: 0018:ffffc90003867880 EFLAGS: 00010046 [ 1378.218693][T29039] RAX: 0000000000000000 RBX: ffff888060a31740 RCX: 0000000000000001 [ 1378.218701][T29039] RDX: dffffc0000000000 RSI: 0000000000000004 RDI: ffffc900038677e0 [ 1378.218709][T29039] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 1378.218715][T29039] R10: dffffc0000000000 R11: fffff5200070cefc R12: 0000000000000000 [ 1378.218722][T29039] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888060a317d0 [ 1378.218734][T29039] FS: 0000000000000000(0000) GS:ffff888124dda000(0000) knlGS:0000000000000000 [ 1378.218750][T29039] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1378.218764][T29039] CR2: 00002000008ec000 CR3: 0000000055724000 CR4: 00000000003526f0 [ 1378.218782][T29039] DR0: fffffffffffffffd DR1: 0000000100000005 DR2: 0000000000000002 [ 1378.218796][T29039] DR3: ffffffffefffff16 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1378.218818][T29039] Kernel panic - not syncing: Fatal exception [ 1378.336031][T29039] Kernel Offset: disabled [ 1378.340358][T29039] Rebooting in 86400 seconds..