last executing test programs: 4m43.352549543s ago: executing program 1 (id=250): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000141100006c07010033d43afffe800000000000000007000000000010ff02000000000000000000000000000183"], 0x340a) 4m43.199814943s ago: executing program 1 (id=251): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000140)={0x63, @time={0xffff7fff, 0x5}, 0x4, {0x5, 0x8}, 0x40, 0x1, 0x2}) r2 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r2, &(0x7f0000000200), 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0xe802, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r6, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x240488b0}, 0x40800) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000300)={0x7fffffff, 0xfc}, 0x10) sendmsg$kcm(r7, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) pipe(0x0) 4m42.95250358s ago: executing program 1 (id=252): inotify_init1(0x800) socket$inet6(0xa, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2, 0xa, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000600000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0) 4m42.792139131s ago: executing program 1 (id=253): r0 = socket(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="5c00000030000504010000000000000000000000480001804400018009000100676174650000000034000280180002000000000000000000000000000000000000008100100005800c000100000000000000000008000a0078563412", 0x5c}], 0x1}, 0x0) 4m42.743965551s ago: executing program 1 (id=254): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='atkb', 0x4) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='children\x00') pread64(r0, &(0x7f0000000680)=""/253, 0xfd, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='tcpci 0x2', 0x9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b26, &(0x7f0000000000)={'virt_wifi0\x00', @random="f8ff00400400"}) 4m42.62279662s ago: executing program 1 (id=255): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000005000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00fb0000"]}, 0x108) 4m27.35069355s ago: executing program 32 (id=255): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000005000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00fb0000"]}, 0x108) 1m50.789720895s ago: executing program 3 (id=1177): r0 = openat$comedi(0xffffff9c, 0x0, 0x0, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x0, 0x80000002}) 1m50.619458638s ago: executing program 3 (id=1180): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x200000, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)="f6ae04", 0x3}], 0x1}}], 0x1, 0x4404c880) sendto$inet6(r0, &(0x7f0000000240)="0126bb", 0x3, 0x24003b80, 0x0, 0x0) 1m50.410866543s ago: executing program 3 (id=1181): r0 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x40000) mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000070)='./proc\x00', &(0x7f00000000d0)='proc\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000100)={0x4, &(0x7f0000000080)=[{}, {0x0}, {}, {}]}) prctl$PR_SET_PDEATHSIG(0x1, 0x38) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f00000001c0)={r2, 0x1}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/net/ipv4/icmp_ratelimit\x00', 0x48802, 0x100) read$FUSE(r3, 0x0, 0x600) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x3d, [0x6, 0xc95a, 0xfffffff3, 0x8, 0x80, 0x1, 0x4, 0x7f, 0x1ff, 0x4d, 0x7, 0x62, 0xa, 0x0, 0xffff2d37, 0x1dd2, 0x6, 0x6, 0x0, 0x80000001, 0x7, 0x7, 0x3, 0x6, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x3, 0xe661, 0xf2a, 0x1000007, 0x3, 0x8001, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x41, 0x8f, 0x5, 0x1, 0x4, 0x5, 0x4, 0x5, 0x0, 0x80, 0x400, 0x5, 0x6, 0x4, 0x4, 0x1, 0x40], [0x10000007, 0x20010012, 0x10b, 0x8000, 0x2, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x6c9, 0x1ff, 0xfffffffe, 0x3, 0x0, 0x7, 0x10000005, 0x2f, 0xe, 0x313, 0x78, 0xea4, 0xa, 0xc8, 0x4, 0x80, 0x5, 0x400, 0x1, 0x6, 0x400001, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0xfffdffff, 0x6, 0x1000004, 0x9, 0x4, 0x9, 0x8, 0x9, 0x7, 0x5, 0xffffffff, 0x3, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x8, 0x3, 0x4, 0x0, 0x7, 0x80000006, 0x9, 0x48c93690, 0x2, 0x20ff], [0x7, 0x1, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x3, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x6, 0x101, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x40002, 0xf, 0x8, 0x84, 0x6cfd, 0x400d, 0x3b, 0x1000, 0x200, 0x80, 0x3, 0x4, 0x2, 0xa6, 0x9e, 0x7, 0x53cf697b, 0x1, 0x4, 0x54fe12da, 0xbf, 0x5, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x3, 0xfffffffc, 0x5, 0x6, 0x6, 0x6, 0x51bf, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0x104, 0x80000000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x8000014c, 0x60a7, 0x6, 0x2, 0xffffffff, 0x80000003, 0x6, 0x8, 0xff, 0x3, 0x3, 0xffef, 0x3, 0x8, 0x100, 0x9602, 0xa, 0x4, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x5, 0xa1f, 0x8, 0x9, 0x1, 0x6c0b, 0x0, 0x2, 0x5, 0xb1c, 0x1, 0x200, 0x1002, 0xfff]}, 0x45c) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) read$FUSE(r1, 0x0, 0x11) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}) mmap(&(0x7f00008a9000/0x13000)=nil, 0x13000, 0x1000001, 0x11, r4, 0x2000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) 1m49.21791331s ago: executing program 3 (id=1189): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000003100)={0x0, 0x0, &(0x7f00000030c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000ffdbdf251900000008000300", @ANYRES32=r3, @ANYBLOB="ae642e0f08090000"], 0x24}, 0x1, 0x0, 0x0, 0x2000c0d4}, 0x40) r4 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001ca37b10720c1300bebaaf0203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r4, 0x0, &(0x7f0000000040)={0x34, &(0x7f0000000100)=ANY=[@ANYRES64=r4], 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a"], 0x20}}, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0) r6 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000cc0), 0x109080, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r6, 0x4058587a, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) umount2(&(0x7f00000002c0)='./file0/file0\x00', 0x8) r7 = syz_open_dev$loop(&(0x7f0000000000), 0x6, 0x400) ioctl$BLKGETSIZE64(r7, 0x80081272, &(0x7f0000000080)) 1m47.277169956s ago: executing program 3 (id=1202): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r1 = socket$inet_udp(0x2, 0x2, 0x0) write$tun(r0, &(0x7f0000000440)={@val={0x0, 0x6007}, @void, @ipv6=@gre_packet={0x8, 0x6, "c51a2e", 0x1199, 0x2f, 0xff, @private2, @ipv4={'\x00', '\xff\xff', @broadcast}, {[@dstopts={0x1d, 0x4, '\x00', [@jumbo={0xc2, 0x4, 0x2}, @jumbo={0xc2, 0x4, 0x4}, @calipso={0x7, 0x10, {0x2, 0x2, 0x9c, 0x1, [0x401]}}, @ra={0x5, 0x2, 0x1}, @padn={0x1, 0x1, [0x0]}]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xf, 0x1, [0x4, 0xeeec], "c254338d23c905567c082a0e74d3da"}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [0x0, 0x4, 0x8001], "e9585dfc9a106ded6afc1e5c285740da4e7a050b96e9c53640e023124451d3c8a24e7b39f0fe1fcbc28e5e29d87be28239a0603fc445539f6516f7a6509b08c888cff31ceb3b19fc8b5ccea01a27d44d274b1564c613edecca10f2e72382efaf505cc427d00bf1fba6a70e0f59287597f56ef28b049a6151768228d10f0f0525e17359c1b5726a1298ac6b4ce0de12c063ffd4368df84006bd06d56e88ba5fed4e23409ce99df0da"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "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"}, {0x8, 0x88be, 0x2, {{0xc, 0x1, 0x4, 0x1, 0x0, 0x1, 0x5, 0x3}, 0x1, {0x7fff}}}, {0x8, 0x22eb, 0x1, {{0xb, 0x2, 0x2, 0x1, 0x0, 0x0, 0x7, 0x7f}, 0x2, {0xcc94, 0x9, 0x0, 0xb, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2, "045169bf2275ecc9e7a42d24542d636990b3528327ad75b4f3d0dcecaa794c1dd6c358534742fb6c5df573679499064efd2f21bbc2fbed5357534c68c0b67d1871457125a9075898402be37a9e4654cace443281ddedbe45e861cede857cef1298163053"}}}}}, 0x11c5) (async, rerun: 64) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) (async, rerun: 64) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'syzkaller1\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x0, 0x1}}}) (async) write$tun(r0, &(0x7f0000000380)={@void, @val={0x1, 0x5, 0x1c, 0x10, 0x14, 0x6}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x40, 0x11, 0x0, @dev={0xac, 0x14, 0x0, 0x2}, @dev={0xac, 0x14, 0x0, 0x1}}, {0x1234, 0x4e22, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x0, "1abd6f05f0d7633e548669fdc573161e08ca803ac177590bcfa13882301102b3", "386182376f8aa3a51090c00884b5c9fe", {"cbac46504da2b4e9c89f50c8031d0743", "80c6b042dffad13a3cc5ae365aee8bae"}}}}}, 0x82) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r2, &(0x7f0000000080)=']', 0x1, 0x4000010, &(0x7f00000001c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x42}}, 0xf) sendto$inet(r2, &(0x7f0000000200)="c9f5fce96c881567377f90bf8b7fac8102fbef167e6a79e018ff85824d47b11f447483cfada024a167e789c589f8a0b4333d7e39dd5323f7d7fd974ad9df53f620fa8f5521e8d746855d8e400700d3dd82008e391f3be6ca0ef1eb979e71b29079e9dff65543e6b926eb2e57fe857e5cd665ba8512095dd2e797b3b783c860794d2417cc8f785fcc7f5947f4586ada5c640e5ae84a2623d257f5d2bf", 0x9c, 0xc884, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000300)="ab", 0x1, 0x40861, &(0x7f0000000000)={0x2, 0xe22, @local}, 0x10) 1m46.807574315s ago: executing program 3 (id=1206): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000141100006c07010033d43afffe800000000000000007000000000010ff02000000000000000000000000000191"], 0x340a) 1m45.927314635s ago: executing program 33 (id=1206): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000141100006c07010033d43afffe800000000000000007000000000010ff02000000000000000000000000000191"], 0x340a) 1m27.385979456s ago: executing program 2 (id=1309): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000141100006c07010033d43afffe800000000000000200000000000010ff02000000000000000000000000000183"], 0x340a) 1m27.0159213s ago: executing program 2 (id=1310): inotify_init1(0x800) socket$inet6(0xa, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2, 0xa, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000004000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0) 1m26.759855955s ago: executing program 2 (id=1311): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000141100006c07010033d43afffe8000000000ff000000000000000010ff02000000000000000000000000000187"], 0x340a) 1m26.43149041s ago: executing program 2 (id=1314): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x30, r1, 0x5, 0xfffffffc, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x8000}]}, 0x30}, 0x1, 0x0, 0x0, 0x2404c041}, 0x1000000000000000) 1m26.344389331s ago: executing program 2 (id=1316): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000001540)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r6 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x17d) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) (async) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x40049366, 0x0) (async) ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x40049366, 0x0) syz_ublk_setup_queues(r5, r4, &(0x7f0000000340)={0x0, 0x0, 0x10, 0x1, 0x257}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x880000, 0x20, 0x1000000, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x800, 0x0, 0x22a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f6d, 0x8c, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb4ac, 0x20, 0x8, 0x9d7c}}], 0x1, &(0x7f00000014c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_usb_disconnect(0xffffffffffffffff) (async) syz_usb_disconnect(0xffffffffffffffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1m24.551472461s ago: executing program 2 (id=1327): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) (async, rerun: 64) syz_usb_connect(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0xbf, 0xe1, 0xdc, 0x40, 0x2c7c, 0x30a, 0xcfd0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x72, 0x4, 0x10, 0x6, "", [{{0x9, 0x4, 0x31, 0xe8, 0x2, 0xff, 0x6d, 0x83, 0x3, [], [{{0x9, 0x5, 0x2, 0x2, 0x3ff, 0xff, 0x10, 0x3}}, {{0x9, 0x5, 0xeb3925d0f91dd4ca, 0x2, 0x10, 0x10, 0x2, 0x81}}]}}]}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x101, 0x7, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x54}, 0x8404) (async, rerun: 32) read$FUSE(r0, &(0x7f00000001c0)={0x2020}, 0x2020) (async, rerun: 32) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x8040) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) (rerun: 32) setuid(0xee01) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000002c0)='bic', 0x3) (async, rerun: 64) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a00001400028010000b800c000a"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000b00), 0xffffffffffffffff) (async) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r9, 0x112, 0xf, 0x0, &(0x7f0000000080)=0x4c) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000b40)={'wpan0\x00', 0x0}) (rerun: 32) sendmsg$NL802154_CMD_GET_INTERFACE(r6, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="cfa22dbd7000fedbdf250500000008000300", @ANYRES32=r10, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000814}, 0xc0000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) (async) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x28, r12, 0x21, 0x72bd25, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c00178008"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 1m8.691198197s ago: executing program 34 (id=1327): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) (async, rerun: 64) syz_usb_connect(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0xbf, 0xe1, 0xdc, 0x40, 0x2c7c, 0x30a, 0xcfd0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x72, 0x4, 0x10, 0x6, "", [{{0x9, 0x4, 0x31, 0xe8, 0x2, 0xff, 0x6d, 0x83, 0x3, [], [{{0x9, 0x5, 0x2, 0x2, 0x3ff, 0xff, 0x10, 0x3}}, {{0x9, 0x5, 0xeb3925d0f91dd4ca, 0x2, 0x10, 0x10, 0x2, 0x81}}]}}]}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x101, 0x7, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x54}, 0x8404) (async, rerun: 32) read$FUSE(r0, &(0x7f00000001c0)={0x2020}, 0x2020) (async, rerun: 32) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x8040) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) (rerun: 32) setuid(0xee01) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000002c0)='bic', 0x3) (async, rerun: 64) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a00001400028010000b800c000a"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000b00), 0xffffffffffffffff) (async) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r9, 0x112, 0xf, 0x0, &(0x7f0000000080)=0x4c) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000b40)={'wpan0\x00', 0x0}) (rerun: 32) sendmsg$NL802154_CMD_GET_INTERFACE(r6, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="cfa22dbd7000fedbdf250500000008000300", @ANYRES32=r10, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000814}, 0xc0000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) (async) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x28, r12, 0x21, 0x72bd25, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c00178008"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 7.57942561s ago: executing program 4 (id=1958): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa0, 0xffb, 0x2, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x8, 0x9, 0x3, 0x3, 0x1, 0xfffffffc, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x240d43ee, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x8, 0x11000, 0x80000000, 0xbab4, 0x79b, 0x2, 0x1, 0x7f, 0x3, 0x2, 0x7, 0x8000, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xae, 0x7f, 0x8, 0x180000, 0x4007, 0x8b, 0x5, 0x2b3, 0xf7, 0x5, 0xfffffffe, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x753, 0x0, 0x1005, 0x80005, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x488b, 0x84, 0x100, 0x10, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xdda, 0xd, 0x29e, 0xfffffffd, 0x2, 0x2, 0x5, 0x8, 0x0, 0x7fff, 0x2, 0x3f, 0x8, 0xcb, 0x3, 0x400, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff02000000000003000000000000000189"], 0x340a) 7.310074679s ago: executing program 4 (id=1962): syz_open_dev$video4linux(&(0x7f0000000140), 0x1, 0xc0000) (async) r0 = syz_open_dev$video4linux(&(0x7f0000000140), 0x1, 0xc0000) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) readahead(r0, 0x100000000, 0x6) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) close_range(r1, r1, 0x0) (async) close_range(r1, r1, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r3, 0x110, 0x4, &(0x7f0000000040)=0x2, 0x4) (async) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r3, 0x110, 0x4, &(0x7f0000000040)=0x2, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a0004000100080017"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) connect$rxrpc(r3, &(0x7f0000000080)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) (async) connect$rxrpc(r3, &(0x7f0000000080)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) connect$rxrpc(r2, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000400)) (async) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000400)) syz_usb_connect$rtl8150(0x4, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfd74}}]}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 4.160923859s ago: executing program 4 (id=1994): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000141100006c07010033d43afffe800000000000000000000300000010ff0200000000000000000000000000018b"], 0x340a) 3.826566133s ago: executing program 4 (id=1997): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000141100006c07010033d43afffe800000000000000000000000070010ff02000000000000000000000000000183"], 0x340a) 3.492124086s ago: executing program 4 (id=2001): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/notes', 0x40280, 0x100) read$msr(r1, 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x80800, 0x0) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r2, 0x3b65, 0x4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x40000000, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dc5, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0x3, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x2000004, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x4, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x5, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x3, 0x6, 0x43b, 0x2, 0x9, 0x2, 0x7fffffff, 0x8, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8000007f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x9, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0xe75, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0xd, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x7, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0xffff, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4010000100001002dbd700000000000e0000001000000000000000000000000ff0100000000000000000000000000010000000000000000", @ANYBLOB="000000000000000000000000000000000000000032000000ff010000000000000000000000000001000000000000000005000000000000000000000000000000000000000000000000000000000000000400000000000000fe"], 0x1a4}}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}}, 0x8004) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r10, 0x6a, 0x1, 0x0, &(0x7f0000000640)) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="f0000000100013070000000000000000fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000000000000000dec7183b0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0100000000000000000000000000000000000033000000fe8000000000000000000000000000aa00000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000028bd70000000000002"], 0xf0}}, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f0000000140)={0xc, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000002c0)={0x28, 0x0, r11, 0x0, &(0x7f0000013000/0x3000)=nil, 0x3000, 0x2}) 3.31181246s ago: executing program 6 (id=2003): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a300000000734000000030a010100fff400000000000100000009000b0073797a31000000000900010073797a300000000008000a400000000414000000020a05"], 0x90}, 0x1, 0x0, 0x0, 0x40000c0}, 0x4000) 3.135787934s ago: executing program 6 (id=2006): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000002f00090027bd700000000000040000000c00180002ac0f"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x4) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_FPU(r3, 0x41a0ae8d, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$pppl2tp(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @loopback}, 0x80004, 0x0, 0xffffffff}}, 0x2e) munmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000080), 0xb, 0x281) r8 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r8, &(0x7f0000000100)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x3456, @local}}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg(r8, &(0x7f0000000100)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x3456, @local}}, 0x80, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000001001000001000000010000000000000014"], 0x2c}, 0x0) close(r8) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000001100)={r6, 0x0, {0x0, 0x0, 0x0, 0x4718, 0x0, 0x0, 0x0, 0x0, 0x14, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "244333795f045158d97405000000000000040000000100", [0xfffffffffeff7ffc, 0xffffffffffffffff]}}) 2.880521023s ago: executing program 6 (id=2008): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) (async, rerun: 32) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async, rerun: 32) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)='Z', 0x1}], 0x1, 0x0, 0x0, 0x30008040}, 0x40080d1) (async) accept(r1, 0x0, 0x0) (async) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040b00d80550000010200010902240001010080320904000000ff0000000904000101ff00000007058102400000"], 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0) (async) syz_usb_disconnect(r2) 2.767866632s ago: executing program 4 (id=2009): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000700)={0x20, 0x1405, 0x1, 0x70bd2c, 0x25dfdbfe, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008001}, 0x40440c0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202"], 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xfffffffd, 0xfffffffd}, 0x20) connect$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, '\x00', 0x10}, 0x7, 0xfffffffd}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)={0x24, 0x2d, 0x1, 0x2, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x5, 0x1, 0x0, 0x0, @binary='g'}]}]}, 0x24}], 0x1}, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f0000000040)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e21, 0x10, @loopback, 0x400}}, 0x0, 0x0, 0x840, 0x0, "947116a1a606754bab1cb61212bb07a2bd205f00f81bef965a071f0d1aadd97b9640d9a0cd9ea71a5e9aec7f03d4406a7710c42cb5e754b089928abcd7589d209bc45b4064028eb7fafaa8b125736e00"}, 0xd8) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000880)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x20, 0x0, 0x1, 0xff}}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) r7 = dup2(r6, r5) sendmsg$inet_sctp(r7, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000081}, 0x20002044) getsockopt$inet_mptcp_buf(r7, 0x11c, 0x2, &(0x7f00000000c0)=""/222, &(0x7f0000000200)=0xde) 2.311613892s ago: executing program 5 (id=2013): inotify_init1(0x800) socket$inet6(0xa, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2, 0xa, 0x2) socket(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}, 0x1, 0x0, 0x20000000}, 0x0) 2.036234355s ago: executing program 5 (id=2015): r0 = socket(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="5c00000030000504010000000000000000000000480001804400018009000100676174650000000034000280180002000000000000000000000000000000000000000008100005800c000100000000000000000008000a0078563412", 0x5c}], 0x1}, 0x0) 1.99006176s ago: executing program 5 (id=2016): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a300000000734000000030a010100fff500000000000100000009000b0073797a31000000000900010073797a300000000008000a400000000414000000020a05"], 0x90}, 0x1, 0x0, 0x0, 0x40000c0}, 0x4000) 1.855925041s ago: executing program 5 (id=2018): fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=@ng={0x4, 0xc, "3ec76810624b"}, 0x8, 0x4) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) execveat(r0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)={[&(0x7f00000000c0)='\x00', &(0x7f0000000100)=')\xf9\x00', &(0x7f0000000140)='@(\',\x00', &(0x7f0000000180)='\x00', &(0x7f00000001c0)='&\xb0\x00', &(0x7f0000000200)='-\x00', &(0x7f0000000240)='\x00', &(0x7f0000000280)='^:!]-\x00']}, &(0x7f00000004c0)={[&(0x7f0000000340)='\x00', &(0x7f0000000380)=')\\!!\x00', &(0x7f00000003c0)='@\x00', &(0x7f0000000400)='\x9d!#\x00', &(0x7f0000000440)='security.ima\x00', &(0x7f0000000480)='security.ima\x00']}, 0x1000) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x70c80, 0x1b57e4056696b4cc, 0x10}, 0x18) name_to_handle_at(r1, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)=@reiserfs_2={0x8, 0x2, {0x7, 0x6ed}}, &(0x7f0000000600), 0x400) readlinkat(r0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)=""/4096, 0x1000) setns(r0, 0x10000000) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x7) ioctl$KVM_CLEAR_DIRTY_LOG(r2, 0xc018aec0, &(0x7f0000001a80)={0x10200, 0x100, 0x3c0, &(0x7f0000001680)=[0x4, 0x7, 0x5, 0x50, 0x7f, 0x1, 0xfffffffffffffbff, 0xfffffffffffffffa, 0x9, 0xf2d6, 0xaa89, 0x7, 0x100000000000, 0xfffffffffffffffd, 0x81, 0x4, 0xfffffffffffffff7, 0xfffffffffffffffa, 0x3929, 0x3, 0x1, 0x5, 0x9, 0x4, 0x3, 0x1, 0x100000000, 0x6, 0x5, 0x7, 0x80, 0x1, 0x0, 0x7fff, 0x4, 0x9, 0x2, 0x8, 0x7f, 0x8, 0x10, 0x13f, 0x8, 0x9, 0x2, 0x5e694900, 0x800, 0x2, 0x8, 0x8, 0x1, 0x8, 0x2000000000000000, 0xb, 0xd73, 0x4, 0xfffffffffffffffd, 0x10, 0xfff, 0x5, 0x8, 0x6, 0x7, 0x0, 0x9, 0x0, 0x6, 0x80000000, 0xe6, 0x2, 0x7, 0xfd, 0xe54, 0x1, 0x1, 0x3, 0x1, 0x6, 0xa0, 0xc, 0xff, 0xb24, 0x3, 0x3, 0xc, 0x0, 0x80, 0xf, 0x1, 0xb3, 0xe3, 0x40, 0x4, 0x2, 0x734, 0x8, 0x0, 0xd04, 0x3, 0x0, 0x7, 0x7, 0x1, 0x1, 0x6, 0x9, 0x86, 0x4, 0x7, 0x96, 0x0, 0x1, 0x9, 0x1431, 0xb06b, 0x0, 0x800, 0xffffffffffffff77, 0xa9bd, 0x3, 0xb9, 0x4bc, 0xe855, 0xfffffffffffffffd, 0x0, 0x4a24, 0x8000000000000000, 0x47]}) ioctl$PPPIOCGIDLE32(r0, 0x8008743f, &(0x7f0000001ac0)) execve(&(0x7f0000001b00)='./file0/file0\x00', &(0x7f0000001dc0)={[&(0x7f0000001b40)='\x00', &(0x7f0000001b80)='\x9d!#\x00', &(0x7f0000001bc0)='J&)$\x00', &(0x7f0000001c00)=')\xf9\x00', &(0x7f0000001c40)=')\xf9\x00', &(0x7f0000001c80)='&\xb0\x00', &(0x7f0000001cc0)='\x00', &(0x7f0000001d00)='-\x00', &(0x7f0000001d40)=')\xf9\x00', &(0x7f0000001d80)='\x9d!#\x00']}, &(0x7f0000001ec0)={[&(0x7f0000001e40)='-+,^*\x00', &(0x7f0000001e80)='@\x00']}) pipe2$9p(&(0x7f0000001f80)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000001f00)='./file0\x00', &(0x7f0000001f40), 0x80402, &(0x7f0000001fc0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_fscache}, {@cache_fscache}, {@ignoreqv}, {@version_u}, {@cache_mmap}, {@access_any}], [{@obj_user={'obj_user', 0x3d, '}*%$\'\\{$)'}}]}}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000002080)={0x0, 0x0}) ioctl$SG_BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000002100)={'\x00', 0x0, 0x5ff5239b, 0x4389, 0x1, 0x3ff, r4}) r5 = syz_open_dev$sndpcmc(&(0x7f0000002180), 0x5, 0x20800) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r5, 0xc0984124, &(0x7f00000021c0)) r6 = accept4$vsock_stream(r0, &(0x7f0000002280)={0x28, 0x0, 0x0, @hyper}, 0x10, 0x1000) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f00000022c0), &(0x7f0000002300)=0x4) lstat(&(0x7f00000023c0)='./file0/file0\x00', &(0x7f0000002400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000002340)='./file0/../file0\x00', &(0x7f0000002380), 0x1000, &(0x7f0000002480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}, {@version_u}, {@version_L}], [{@context={'context', 0x3d, 'staff_u'}}, {@uid_gt={'uid>', r7}}, {@hash}, {@appraise}, {@subj_role}, {@appraise}]}}) readlinkat(r0, &(0x7f0000002540)='./file0/../file0\x00', &(0x7f0000002580)=""/175, 0xaf) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000, 0x7, &(0x7f0000ffb000/0x3000)=nil) rename(&(0x7f0000002640)='./file0/../file0\x00', &(0x7f0000002680)='./file0\x00') sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000027c0)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002780)={&(0x7f0000002700)={0x5c, 0x0, 0x606, 0x70bd2d, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_MS_ADDR6={0x14, 0xc, @mcast1}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_MS_ADDR6={0x14, 0xc, @loopback}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}]}, 0x5c}}, 0x4040) ioctl$int_out(r1, 0x5462, &(0x7f0000002800)) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000002840), &(0x7f0000002880)=0x4) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000002940)={{0x1, 0x1, 0x18, r2, {r7, r8}}, './file0/../file0\x00'}) mount$9p_fd(0x0, &(0x7f00000028c0)='./file0/../file0/file0\x00', &(0x7f0000002900), 0x1110000, &(0x7f0000002980)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@fscache}, {@privport}], [{@smackfsfloor={'smackfsfloor', 0x3d, '(-]]H-(-+\'{'}}, {@hash}, {@smackfsdef={'smackfsdef', 0x3d, '&\xb0\x00'}}, {@fsname={'fsname', 0x3d, '\\\\\x8e):^'}}, {@dont_appraise}, {@subj_type={'subj_type', 0x3d, ')[$^]\t#'}}, {@permit_directio}, {@context={'context', 0x3d, 'sysadm_u'}}, {@uid_eq={'uid', 0x3d, r9}}]}}) setxattr$trusted_overlay_origin(&(0x7f0000002a80)='./file0/../file0\x00', &(0x7f0000002ac0), &(0x7f0000002b00), 0x2, 0x3) 1.814908064s ago: executing program 5 (id=2019): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa0, 0xffb, 0x2, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x8, 0x9, 0x3, 0x3, 0x1, 0xfffffffc, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x240d43ee, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x8, 0x11000, 0x80000000, 0xbab4, 0x79b, 0x2, 0x1, 0x7f, 0x3, 0x2, 0x7, 0x8000, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xae, 0x7f, 0x8, 0x180000, 0x4007, 0x8b, 0x5, 0x2b3, 0xf7, 0x5, 0xfffffffe, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x753, 0x0, 0x1005, 0x80005, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x488b, 0x84, 0x100, 0x10, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xdda, 0xd, 0x29e, 0xfffffffd, 0x2, 0x2, 0x5, 0x8, 0x0, 0x7fff, 0x2, 0x3f, 0x8, 0xcb, 0x3, 0x400, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff02000000000008000000000000000189"], 0x340a) 1.603512032s ago: executing program 5 (id=2022): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xcb}, 0x2a, 0xfffffffffffffff9) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, &(0x7f0000000240)=ANY=[@ANYRESHEX=r0, @ANYRES64=0x0, @ANYRES16=r0], 0x20, r0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac3(r1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x4c, &(0x7f000002eff0)={0x2000000000000040, &(0x7f0000000000)=[{}]}, 0x10) recvmmsg(r3, &(0x7f0000007340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r4, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x4, 0xee}) fcntl$lock(r4, 0x7, &(0x7f00000000c0)={0x0, 0x2, 0x2, 0x73e9}) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) sendmmsg$unix(r2, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8050}}], 0x1, 0x4000000) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000640)={0x84, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000004c0)={0x18, &(0x7f0000000280)={0x0, 0x14}, 0x0, 0x0, 0x0, 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="640000001900010029bd7000000000001d01090050000f8008002100ff0012b2f20ac3fe91411e78a8e013b2e41cd5a206f297ea895a1f2b3633014ae9ddab83c642", @ANYRES32=r5, @ANYBLOB="440045800c004700e70800000000000031008f80c26f33dbdc9a0f"], 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x804) syz_usb_control_io(r1, &(0x7f00000007c0)={0x2c, &(0x7f00000001c0)={0x0, 0x21, 0x66, {0x66, 0x0, "74e9773d39a83d5d7a99334623ecfa06cce067eb39bec8ea106635b5350fe9d527430f686b0b579963006be9ad388df9eb0ca63aa3cf732106882f60f1549a0e025988abaf9085126c74597f08cd4f2a98af28c1f810aaad15233b1a13f44b4f6bd2f3fb"}}, &(0x7f0000000480)={0x0, 0x3, 0x7f, @string={0x7f, 0x3, "bf13cfbad161016f33796b366bf0b34c66bb270055ed9d371ba893d66d76a36d2eba711d21f5c0c947108c0b386a68b907ba2da7740722badba81ea786016e40b035945a94dadd518ebf18de300cdca024109688e8b3ede95677ec69207f914b00d1f605a2ec509e895086fbdc7fda3212d327aaaead5841dc0e2675be"}}, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000740)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x0, 0x0, 0x6, "f576035e", "ea94e69e"}}, &(0x7f0000000780)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x50, 0x3, 0x8, 0x6, 0x4, 0x2, 0x8}}}, &(0x7f0000000d40)={0x84, &(0x7f00000008c0)={0x0, 0xf, 0x9c, "2570031f41814cbb654edf5844ad8bdddb44f9af1724f31fe5a1e64d6e8965764fa9758aa03313da546527139b2eef9c29afe3254145cbe4b6c17164768f08046046a36df8fa807c8a80083f6610d5450a07abbcceaac381178d92bc22795970d0d4faa5fbc8fe89e72bd0e95c557bd5eb73fce09bf8a1a2256012b60be40f310251efaf4a08dea21187f31102dbd527c8dfe8989c619a5f3c091e46"}, &(0x7f0000000980)={0x0, 0xa, 0x1}, &(0x7f00000009c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000a00)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000000a40)={0x20, 0x0, 0x8, {0x120, 0x599d390424b93a66, [0xff]}}, &(0x7f0000000a80)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000ac0)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000b00)={0x40, 0xb, 0x2, ']M'}, &(0x7f0000000b40)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000b80)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000bc0)={0x40, 0x17, 0x6, @random="7b1aea2bebbb"}, &(0x7f0000000c00)={0x40, 0x19, 0x2, 'K\x00'}, &(0x7f0000000c40)={0x40, 0x1a, 0x2}, &(0x7f0000000c80)={0x40, 0x1c, 0x1, 0xe}, &(0x7f0000000cc0)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000d00)={0x40, 0x21, 0x1, 0x9}}) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000440)={0x28, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x404c081}, 0x0) ptrace(0x10, r6) ptrace$setregs(0xd, r6, 0xfffffffffffffffc, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") socket$nl_netfilter(0x10, 0x3, 0xc) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) 1.306900716s ago: executing program 0 (id=2024): inotify_init1(0x800) socket$inet6(0xa, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2, 0xa, 0x2) socket(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}, 0x1, 0x0, 0x24000000}, 0x0) 1.196178884s ago: executing program 0 (id=2025): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000400)="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", 0x1d8, r1) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}) mmap(&(0x7f00008a9000/0x13000)=nil, 0x13000, 0x1000001, 0x11, r2, 0x2000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SET_IRQCHIP(r4, 0x4020aeb2, &(0x7f00000006c0)={0x0, 0x0, @ioapic={0x100010000, 0x101, 0x0, 0x2, 0x0, [{0x6, 0x6, 0x8, '\x00', 0xaf}, {0x2, 0x0, 0x2, '\x00', 0x5b}, {0x60, 0x4, 0x8, '\x00', 0x8}, {0x5, 0x6, 0x3, '\x00', 0xf1}, {0xfc, 0x0, 0x9, '\x00', 0x43}, {0x4, 0x79, 0xc5, '\x00', 0x5}, {0x94, 0x2, 0xb, '\x00', 0xfe}, {0xf, 0x0, 0x6}, {0x1, 0x4, 0x8, '\x00', 0x13}, {0x1, 0x10, 0x57, '\x00', 0x9}, {0x8, 0x4, 0x1, '\x00', 0x6}, {0x80, 0x6, 0x6, '\x00', 0x48}, {0x5, 0x3, 0x8, '\x00', 0xff}, {0x6, 0x3, 0xa3, '\x00', 0x2}, {0x7, 0x0, 0x4, '\x00', 0x6}, {0xd, 0x7, 0x7, '\x00', 0x86}, {0x8, 0x80, 0x7d, '\x00', 0xb}, {0x3, 0x7, 0x81, '\x00', 0xb}, {0x78, 0x7, 0x2, '\x00', 0x7}, {0x3, 0x3, 0xb6, '\x00', 0x7}, {0x5, 0x2, 0x5, '\x00', 0x9}, {0x1, 0x9, 0x9, '\x00', 0x81}, {0xf9, 0xd, 0x81, '\x00', 0x81}, {0xfd, 0x3, 0x80, '\x00', 0x6}]}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000140)={0x0, 0x0, {0x9, 0x9a82, 0x300e, 0x9, 0x8, 0x6}}) 1.149805053s ago: executing program 6 (id=2026): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.pending_reads\x00', 0x80000, 0x11) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f00000000c0)={0x0, 'virt_wifi0\x00', 0x1}, 0x18) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000100)="0f20c035000001000f22c08f693001fdc744240013000000c7442402e7000000ff2c24c42245b66a7d0f01df67400fc75a0fc7442400ce000000c74424027b00c0feff1c240fc72ac744240060000000c74424024458cd3bff1c240fc79d8000c0fe", 0x62}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 751.76274ms ago: executing program 6 (id=2027): r0 = socket(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="5c00000030000504010000000000000000000000480001804400018009000100676174650000000034000280180002000000000000000000000000000000000000000014100005800c000100000000000000000008000a0078563412", 0x5c}], 0x1}, 0x0) 587.709312ms ago: executing program 6 (id=2028): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x440100, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000180)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x2900, 0x100) mknodat(r1, &(0x7f0000000200)='./proc/mtrr\x00', 0x8000, 0xffff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r2, 0x400c4d07, &(0x7f0000000a00)) syz_usb_connect(0x5, 0x8c6, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x418}}]}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x440100, 0x0) (async) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000180)) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x2900, 0x100) (async) mknodat(r1, &(0x7f0000000200)='./proc/mtrr\x00', 0x8000, 0xffff) (async) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) (async) ioctl(r2, 0x400c4d07, &(0x7f0000000a00)) (async) syz_usb_connect(0x5, 0x8c6, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x418}}]}) (async) 432.51478ms ago: executing program 0 (id=2029): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff02f5ffffffffffffff000000000001"], 0xfdef) 301.371066ms ago: executing program 0 (id=2030): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000141100006c07010033d43afffe800000000000000000000700000010ff0200000000000000000000000000018b"], 0x340a) 112.065189ms ago: executing program 0 (id=2031): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000000)={@void, @void, @eth={@broadcast, @remote, @val={@void, {0x8100, 0x4, 0x1, 0x3}}, {@llc={0x4, {@snap={0x0, 0x1, "ab", "8d2d96", 0x88b8}}}}}}, 0x1a) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x100, 0x5b6102) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f00000001c0)=""/136) 0s ago: executing program 0 (id=2032): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa0, 0xffb, 0x2, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x8, 0x9, 0x3, 0x3, 0x1, 0xfffffffc, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x240d43ee, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x8, 0x11000, 0x80000000, 0xbab4, 0x79b, 0x2, 0x1, 0x7f, 0x3, 0x2, 0x7, 0x8000, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xae, 0x7f, 0x8, 0x180000, 0x4007, 0x8b, 0x5, 0x2b3, 0xf7, 0x5, 0xfffffffe, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x753, 0x0, 0x1005, 0x80005, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x488b, 0x84, 0x100, 0x10, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xdda, 0xd, 0x29e, 0xfffffffd, 0x2, 0x2, 0x5, 0x8, 0x0, 0x7fff, 0x2, 0x3f, 0x8, 0xcb, 0x3, 0x400, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff02000000000010000000000000000189"], 0x340a) kernel console output (not intermixed with test programs): th: 249 > 9 [ 295.068501][ T8918] netlink: 'syz.4.1213': attribute type 4 has an invalid length. [ 295.074979][ T5628] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 295.089693][ T5628] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 295.098137][ T5628] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 295.117548][ T8918] netlink: 'syz.4.1213': attribute type 4 has an invalid length. [ 295.397496][ T6057] bridge_slave_1: left allmulticast mode [ 295.397570][ T6057] bridge_slave_1: left promiscuous mode [ 295.401502][ T6057] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.445183][ T6057] bridge_slave_0: left allmulticast mode [ 295.445267][ T6057] bridge_slave_0: left promiscuous mode [ 295.459317][ T6057] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.474287][ T8931] nfs: Unknown parameter 'tieo' [ 295.504616][ T9] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 295.635600][ T9] usb 1-1: device descriptor read/64, error -71 [ 295.671978][ T1219] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 295.822732][ T1219] usb 5-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 295.823931][ T1219] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 295.823958][ T1219] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 295.823994][ T1219] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.830169][ T1219] spcp8x5 5-1:1.0: SPCP8x5 converter detected [ 295.834720][ T1219] usb 5-1: SPCP8x5 converter now attached to ttyUSB0 [ 295.872341][ T9] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 296.003184][ T9] usb 1-1: device descriptor read/64, error -71 [ 296.115101][ T9] usb usb1-port1: attempt power cycle [ 296.191466][ T1219] usb 5-1: USB disconnect, device number 31 [ 296.248059][ T1219] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 296.252361][ T1219] spcp8x5 5-1:1.0: device disconnected [ 296.459647][ T9] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 296.477656][ T9] usb 1-1: device descriptor read/8, error -71 [ 296.495276][ T8939] netlink: 'syz.2.1217': attribute type 11 has an invalid length. [ 296.715260][ T9] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 296.732861][ T9] usb 1-1: device descriptor read/8, error -71 [ 296.843927][ T9] usb usb1-port1: unable to enumerate USB device [ 297.175440][ T5631] Bluetooth: hci1: command tx timeout [ 297.247038][ T6057] hsr_slave_0: left promiscuous mode [ 297.254059][ T6057] hsr_slave_1: left promiscuous mode [ 297.255147][ T6057] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 297.255185][ T6057] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 297.264369][ T6057] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 297.264393][ T6057] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 297.313201][ T6057] veth1_vlan: left promiscuous mode [ 297.313342][ T6057] veth0_vlan: left promiscuous mode [ 297.672223][ T9] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 297.823161][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 297.828942][ T9] usb 3-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 297.841750][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 297.855880][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 297.855966][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.889234][ T9] usb 3-1: config 0 descriptor?? [ 297.899809][ T9] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 298.005785][ T6057] team0 (unregistering): Port device team_slave_1 removed [ 298.048822][ T6057] team0 (unregistering): Port device team_slave_0 removed [ 298.325949][ T8971] netlink: 'syz.0.1230': attribute type 4 has an invalid length. [ 298.382273][ T8972] netlink: 'syz.0.1230': attribute type 4 has an invalid length. [ 298.911915][ T49] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 298.959792][ T8987] netlink: 'syz.0.1233': attribute type 11 has an invalid length. [ 298.975974][ T8916] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.976176][ T8916] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.976330][ T8916] bridge_slave_0: entered allmulticast mode [ 298.986771][ T8916] bridge_slave_0: entered promiscuous mode [ 298.994898][ T8916] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.995020][ T8916] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.995179][ T8916] bridge_slave_1: entered allmulticast mode [ 299.004552][ T8916] bridge_slave_1: entered promiscuous mode [ 299.062901][ T49] usb 5-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 299.064084][ T49] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 299.067583][ T49] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 299.067609][ T49] usb 5-1: Product: syz [ 299.067623][ T49] usb 5-1: Manufacturer: syz [ 299.149059][ T8916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 299.168029][ T8916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 299.182218][ T5631] Bluetooth: hci3: command 0x041b tx timeout [ 299.252626][ T5628] Bluetooth: hci1: command tx timeout [ 299.281427][ T8916] team0: Port device team_slave_0 added [ 299.290635][ T8916] team0: Port device team_slave_1 added [ 299.469682][ T8916] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.469727][ T8916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 299.469785][ T8916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.478492][ T8916] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.478543][ T8916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 299.478572][ T8916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.648839][ T49] input: Samsung SUR40 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input18 [ 299.705337][ T8916] hsr_slave_0: entered promiscuous mode [ 299.714211][ T8916] hsr_slave_1: entered promiscuous mode [ 299.721563][ T8916] debugfs: 'hsr0' already exists in 'hsr' [ 299.728045][ T8916] Cannot create hsr debugfs directory [ 299.754264][ T49] usb 5-1: USB disconnect, device number 32 [ 300.171794][ T9052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1240'. [ 300.285069][ T49] usb 3-1: USB disconnect, device number 39 [ 300.802187][ T5725] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 300.964477][ T5725] usb 3-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 300.982985][ T5725] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.983034][ T5725] usb 3-1: Product: syz [ 300.983055][ T5725] usb 3-1: Manufacturer: syz [ 300.983075][ T5725] usb 3-1: SerialNumber: syz [ 301.002732][ T8916] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 301.033390][ T5725] usb 3-1: config 0 descriptor?? [ 301.045416][ T5725] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 301.070436][ T8916] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 301.071385][ T8916] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 301.090194][ T8916] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 301.098242][ T8916] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 301.114582][ T8916] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 301.116295][ T8916] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 301.128944][ T8916] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 301.312808][ T49] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 301.332236][ T5628] Bluetooth: hci1: command tx timeout [ 301.357558][ T5725] sonixb 3-1:0.0: Error reading register 00: -71 [ 301.367307][ T8916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.376734][ T5725] usb 3-1: USB disconnect, device number 40 [ 301.401013][ T8916] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.429950][ T6056] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.430141][ T6056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.452348][ T49] usb 5-1: device descriptor read/64, error -71 [ 301.465210][ T6056] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.465369][ T6056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.702120][ T49] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 301.836654][ T49] usb 5-1: device descriptor read/64, error -71 [ 301.949019][ T49] usb usb5-port1: attempt power cycle [ 301.997017][ T9081] netlink: 'syz.0.1245': attribute type 4 has an invalid length. [ 302.012053][ T9083] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 302.016138][ T9081] netlink: 'syz.0.1245': attribute type 4 has an invalid length. [ 302.292321][ T49] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 302.314559][ T49] usb 5-1: device descriptor read/8, error -71 [ 302.435204][ T9095] netlink: 'syz.2.1249': attribute type 11 has an invalid length. [ 302.573838][ T49] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 302.604396][ T49] usb 5-1: device descriptor read/8, error -71 [ 302.712385][ T49] usb usb5-port1: unable to enumerate USB device [ 302.737692][ T8916] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 303.241357][ T9109] FAULT_INJECTION: forcing a failure. [ 303.241357][ T9109] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 303.241431][ T9109] CPU: 1 UID: 0 PID: 9109 Comm: syz.2.1254 Tainted: G L syzkaller #0 PREEMPT(full) [ 303.241461][ T9109] Tainted: [L]=SOFTLOCKUP [ 303.241468][ T9109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 303.241479][ T9109] Call Trace: [ 303.241486][ T9109] [ 303.241494][ T9109] dump_stack_lvl+0xe8/0x150 [ 303.241522][ T9109] should_fail_ex+0x410/0x560 [ 303.241553][ T9109] _copy_from_user+0x2d/0xb0 [ 303.241574][ T9109] comedi_unlocked_ioctl+0xaec/0x1af0 [ 303.241618][ T9109] ? kasan_quarantine_put+0xbb/0x1f0 [ 303.241644][ T9109] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 303.241677][ T9109] ? tomoyo_path_number_perm+0x219/0x5f0 [ 303.241703][ T9109] ? tomoyo_path_number_perm+0x219/0x5f0 [ 303.241729][ T9109] ? do_vfs_ioctl+0x116f/0x1530 [ 303.241758][ T9109] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 303.241796][ T9109] ? hook_file_ioctl+0x1f2/0x600 [ 303.241845][ T9109] ? __fget_files+0x2a/0x420 [ 303.241870][ T9109] ? __fget_files+0x3a2/0x420 [ 303.241890][ T9109] ? __fget_files+0x2a/0x420 [ 303.241914][ T9109] ? bpf_lsm_file_ioctl+0x9/0x20 [ 303.241936][ T9109] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 303.241972][ T9109] __se_sys_ioctl+0xfc/0x170 [ 303.242000][ T9109] do_syscall_64+0x166/0x520 [ 303.242020][ T9109] ? trace_irq_disable+0x3b/0x140 [ 303.242044][ T9109] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.242064][ T9109] ? clear_bhb_loop+0x70/0xc0 [ 303.242087][ T9109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.242105][ T9109] RIP: 0033:0x7fc3e059e0d9 [ 303.242124][ T9109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 303.242141][ T9109] RSP: 002b:00007fc3e13eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 303.242163][ T9109] RAX: ffffffffffffffda RBX: 00007fc3e0825fa0 RCX: 00007fc3e059e0d9 [ 303.242177][ T9109] RDX: 0000200000000000 RSI: 000000008028640c RDI: 0000000000000003 [ 303.242191][ T9109] RBP: 00007fc3e13eb090 R08: 0000000000000000 R09: 0000000000000000 [ 303.242203][ T9109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.242215][ T9109] R13: 00007fc3e0826038 R14: 00007fc3e0825fa0 R15: 00007fff51abf1e8 [ 303.242246][ T9109] [ 303.422564][ T5628] Bluetooth: hci1: command tx timeout [ 303.752140][ T1219] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 303.901912][ T1219] usb 3-1: Using ep0 maxpacket: 32 [ 303.911064][ T1219] usb 3-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 303.925568][ T1219] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 303.925667][ T1219] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 303.925716][ T1219] usb 3-1: config 1 interface 1 has no altsetting 0 [ 303.961430][ T1219] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.961478][ T1219] usb 3-1: Product: syz [ 303.961517][ T1219] usb 3-1: Manufacturer: syz [ 303.961538][ T1219] usb 3-1: SerialNumber: syz [ 304.004076][ T1219] snd-ua101 3-1:1.1: invalid num_altsetting [ 304.015262][ T1219] snd-ua101 3-1:1.0: invalid num_altsetting [ 304.033892][ T1219] usb 3-1: selecting invalid altsetting 0 [ 304.043713][ T1219] usb 3-1: selecting invalid altsetting 0 [ 304.049668][ T1219] usbtest 3-1:1.1: probe with driver usbtest failed with error -22 [ 304.058881][ T1219] usb 3-1: selecting invalid altsetting 0 [ 304.064892][ T1219] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 304.067107][ T1219] usb 3-1: selecting invalid altsetting 0 [ 304.067144][ T1219] snd-ua101 3-1:1.1: probe with driver snd-ua101 failed with error -22 [ 304.096254][ T8916] veth0_vlan: entered promiscuous mode [ 304.140244][ T8916] veth1_vlan: entered promiscuous mode [ 304.246612][ T9114] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 304.247866][ T5705] usb 3-1: USB disconnect, device number 41 [ 304.409076][ T8916] veth0_macvtap: entered promiscuous mode [ 304.429450][ T8916] veth1_macvtap: entered promiscuous mode [ 304.498652][ T8916] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 304.528186][ T8916] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 304.622265][ T7256] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.624437][ T7256] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.624475][ T7256] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.624505][ T7256] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.677494][ T9124] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1259'. [ 304.738815][ T9124] bond0: (slave bond_slave_0): Releasing backup interface [ 304.925147][ T9124] bond_slave_0: entered promiscuous mode [ 304.925210][ T9124] bond_slave_0: entered allmulticast mode [ 305.285890][ T7256] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.285933][ T7256] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.460813][ T7256] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.460854][ T7256] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.607493][ T5705] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 305.756037][ T5705] usb 5-1: Using ep0 maxpacket: 16 [ 305.759627][ T5705] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c0c, bcdDevice= 0.00 [ 305.760771][ T5705] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 227, changing to 11 [ 305.760801][ T5705] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 305.760839][ T5705] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.772976][ T5705] usb 5-1: config 0 descriptor?? [ 305.971239][ T9136] netlink: 'syz.0.1263': attribute type 11 has an invalid length. [ 306.221320][ T9145] netlink: 'syz.0.1264': attribute type 11 has an invalid length. [ 306.238712][ T5705] hid_parser_main: 48 callbacks suppressed [ 306.238778][ T5705] corsair-psu 0003:1B1C:1C0C.0018: unknown main item tag 0x0 [ 306.238811][ T5705] corsair-psu 0003:1B1C:1C0C.0018: unknown main item tag 0x0 [ 306.238834][ T5705] corsair-psu 0003:1B1C:1C0C.0018: unknown main item tag 0x0 [ 306.238857][ T5705] corsair-psu 0003:1B1C:1C0C.0018: unknown main item tag 0x0 [ 306.238880][ T5705] corsair-psu 0003:1B1C:1C0C.0018: unknown main item tag 0x0 [ 306.238903][ T5705] corsair-psu 0003:1B1C:1C0C.0018: unknown main item tag 0x0 [ 306.238927][ T5705] corsair-psu 0003:1B1C:1C0C.0018: unknown main item tag 0x0 [ 306.238950][ T5705] corsair-psu 0003:1B1C:1C0C.0018: unknown main item tag 0x0 [ 306.238973][ T5705] corsair-psu 0003:1B1C:1C0C.0018: unknown main item tag 0x0 [ 306.238996][ T5705] corsair-psu 0003:1B1C:1C0C.0018: unknown main item tag 0x0 [ 306.243499][ T5705] corsair-psu 0003:1B1C:1C0C.0018: unexpected long global item [ 306.247425][ T5705] corsair-psu 0003:1B1C:1C0C.0018: probe with driver corsair-psu failed with error -22 [ 306.338271][ T9140] option changes via remount are deprecated (pid=9139 comm=syz.5.1208) [ 306.431207][ T30] usb 5-1: USB disconnect, device number 37 [ 306.561954][ T5705] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 306.734918][ T5705] usb 6-1: unable to get BOS descriptor or descriptor too short [ 306.735011][ T5705] usb 6-1: New USB device found, idVendor=1235, idProduct=8210, bcdDevice= 0.40 [ 306.736389][ T5705] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 306.739165][ T5705] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.739188][ T5705] usb 6-1: Product: syz [ 306.739202][ T5705] usb 6-1: Manufacturer: syz [ 306.739216][ T5705] usb 6-1: SerialNumber: syz [ 306.973352][ T49] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 306.999387][ T5705] usb 6-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8210); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 307.001359][ T5705] usb 6-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 307.125002][ T49] usb 3-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 307.127251][ T49] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.127301][ T49] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.313186][ T5705] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 307.367196][ T5705] usb 6-1: USB disconnect, device number 2 [ 307.586173][ T49] wacom 0003:056A:033B.0019: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 307.607966][ T49] wacom 0003:056A:033B.0019: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.2-1/input0 [ 307.627487][ T49] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:056A:033B.0019/input/input19 [ 307.975811][ T9156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.989636][ T9156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.208237][ T5705] usb 3-1: USB disconnect, device number 42 [ 308.865098][ T9184] FAULT_INJECTION: forcing a failure. [ 308.865098][ T9184] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 308.891001][ T9184] CPU: 0 UID: 0 PID: 9184 Comm: syz.4.1280 Tainted: G L syzkaller #0 PREEMPT(full) [ 308.891041][ T9184] Tainted: [L]=SOFTLOCKUP [ 308.891050][ T9184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 308.891063][ T9184] Call Trace: [ 308.891072][ T9184] [ 308.891081][ T9184] dump_stack_lvl+0xe8/0x150 [ 308.891116][ T9184] should_fail_ex+0x410/0x560 [ 308.891150][ T9184] _copy_to_user+0x31/0xb0 [ 308.891174][ T9184] do_insn_ioctl+0x2e3/0x5b0 [ 308.891204][ T9184] comedi_unlocked_ioctl+0xe06/0x1af0 [ 308.891252][ T9184] ? kasan_quarantine_put+0xbb/0x1f0 [ 308.891282][ T9184] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 308.891319][ T9184] ? tomoyo_path_number_perm+0x219/0x5f0 [ 308.891349][ T9184] ? tomoyo_path_number_perm+0x219/0x5f0 [ 308.891379][ T9184] ? do_vfs_ioctl+0x116f/0x1530 [ 308.891411][ T9184] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 308.891452][ T9184] ? hook_file_ioctl+0x1f2/0x600 [ 308.891502][ T9184] ? __fget_files+0x2a/0x420 [ 308.891532][ T9184] ? __fget_files+0x3a2/0x420 [ 308.891555][ T9184] ? __fget_files+0x2a/0x420 [ 308.891584][ T9184] ? bpf_lsm_file_ioctl+0x9/0x20 [ 308.891610][ T9184] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 308.891642][ T9184] __se_sys_ioctl+0xfc/0x170 [ 308.891684][ T9184] do_syscall_64+0x166/0x520 [ 308.891707][ T9184] ? trace_irq_disable+0x3b/0x140 [ 308.891736][ T9184] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.891759][ T9184] ? clear_bhb_loop+0x70/0xc0 [ 308.891786][ T9184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.891806][ T9184] RIP: 0033:0x7fd43579e0d9 [ 308.891831][ T9184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 308.891850][ T9184] RSP: 002b:00007fd4366f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 308.891875][ T9184] RAX: ffffffffffffffda RBX: 00007fd435a25fa0 RCX: 00007fd43579e0d9 [ 308.891891][ T9184] RDX: 0000200000000000 RSI: 000000008028640c RDI: 0000000000000003 [ 308.891906][ T9184] RBP: 00007fd4366f4090 R08: 0000000000000000 R09: 0000000000000000 [ 308.891920][ T9184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.891933][ T9184] R13: 00007fd435a26038 R14: 00007fd435a25fa0 R15: 00007ffebe1c7228 [ 308.891968][ T9184] [ 308.992653][ T5705] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 309.174835][ T5705] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 309.182818][ T5705] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 309.182878][ T5705] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 309.182900][ T5705] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 309.182920][ T5705] usb 1-1: config 1 interface 0 has no altsetting 0 [ 309.182952][ T5705] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.204049][ T5705] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 309.276593][ T9190] netlink: 'syz.4.1282': attribute type 11 has an invalid length. [ 309.302598][ T30] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 309.422474][ T5705] scsi host1: usb-storage 1-1:1.0 [ 309.452626][ T30] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 309.453654][ T30] usb 3-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 309.453685][ T30] usb 3-1: config 0 interface 0 has no altsetting 0 [ 309.453716][ T30] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.458882][ T30] usb 3-1: config 0 descriptor?? [ 309.655173][ T9196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.655772][ T9196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.722073][ T9200] nfs: Bad value for 'retrans' [ 309.876774][ T5348] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 309.905650][ T30] kovaplus 0003:1E7D:2D50.001A: invalid report_count 1591645534 [ 309.905707][ T30] kovaplus 0003:1E7D:2D50.001A: item 0 4 1 9 parsing failed [ 309.907950][ T30] kovaplus 0003:1E7D:2D50.001A: parse failed [ 309.908021][ T30] kovaplus 0003:1E7D:2D50.001A: probe with driver kovaplus failed with error -22 [ 310.072670][ T1219] usb 3-1: USB disconnect, device number 43 [ 310.510390][ T7256] scsi 1:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 310.670489][ T7256] sd 1:0:0:0: Attached scsi generic sg1 type 0 [ 310.893524][ T5348] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 310.942848][ T9191] sddr09: could not read card info [ 311.054344][ T5348] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 311.055506][ T5348] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 311.055537][ T5348] usb 6-1: config 0 interface 0 has no altsetting 0 [ 311.057508][ T5348] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 311.057529][ T5348] usb 6-1: Product: syz [ 311.057543][ T5348] usb 6-1: Manufacturer: syz [ 311.057557][ T5348] usb 6-1: SerialNumber: syz [ 311.069164][ T5348] usb 6-1: config 0 descriptor?? [ 311.098703][ T5348] usb 6-1: selecting invalid altsetting 0 [ 311.419557][ T5348] usb 6-1: USB disconnect, device number 4 [ 311.698949][ T9234] netlink: 'syz.2.1298': attribute type 11 has an invalid length. [ 311.819258][ T1219] usb 1-1: USB disconnect, device number 52 [ 311.863226][ T7255] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 311.863311][ T7255] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 311.863475][ T7255] sd 1:0:0:0: [sdb] Write Protect is off [ 311.863643][ T7255] sd 1:0:0:0: [sdb] Asking for cache data failed [ 311.863717][ T7255] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 312.150148][ T7255] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 312.332901][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 312.501940][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 312.507835][ T9] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 312.523460][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.523507][ T9] usb 6-1: Product: syz [ 312.523544][ T9] usb 6-1: Manufacturer: syz [ 312.523564][ T9] usb 6-1: SerialNumber: syz [ 312.574861][ T9] usb 6-1: config 0 descriptor?? [ 312.588088][ T9] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 312.969288][ T9253] nfs: Bad value for 'retrans' [ 312.980727][ T9255] netlink: 'syz.2.1307': attribute type 4 has an invalid length. [ 312.986451][ T9255] netlink: 'syz.2.1307': attribute type 4 has an invalid length. [ 313.125496][ T1219] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 313.225037][ T9] gspca_ov534_9: reg_w failed -71 [ 313.282409][ T1219] usb 1-1: Using ep0 maxpacket: 32 [ 313.286223][ T1219] usb 1-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=82.92 [ 313.287266][ T1219] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 313.294392][ T1219] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.294419][ T1219] usb 1-1: Product: syz [ 313.294434][ T1219] usb 1-1: Manufacturer: syz [ 313.294447][ T1219] usb 1-1: SerialNumber: syz [ 313.318840][ T1219] kobil_sct 1-1:2.0: required endpoints missing [ 313.512218][ T9] gspca_ov534_9: Unknown sensor 0000 [ 313.513895][ T9] ov534_9 6-1:0.0: probe with driver ov534_9 failed with error -22 [ 313.517342][ T9] usb 6-1: USB disconnect, device number 5 [ 313.522065][ T9251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.527074][ T9251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.528291][ T9251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.545262][ T9251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.546434][ T9251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.549462][ T9251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.557196][ T9251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.565763][ T9251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.575497][ T9251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.575987][ T9251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.834257][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 313.982485][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 313.984910][ T9] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1c0c, bcdDevice= 0.00 [ 313.987202][ T9] usb 6-1: config 0 has an invalid descriptor of length 64, skipping remainder of the config [ 313.987227][ T9] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 313.987262][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.999434][ T9] usb 6-1: rejected 1 configuration due to insufficient available bus power [ 313.999460][ T9] usb 6-1: no configuration chosen from 1 choice [ 314.528401][ T9282] mmap: syz.4.1318 (9282) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 315.142974][ T30] usb 6-1: USB disconnect, device number 6 [ 315.217197][ T9286] netlink: 'syz.4.1319': attribute type 4 has an invalid length. [ 315.251088][ T9286] netlink: 'syz.4.1319': attribute type 4 has an invalid length. [ 315.398121][ T9293] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1321'. [ 315.967620][ T1219] usb 1-1: USB disconnect, device number 53 [ 316.821994][ T9] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 316.823377][ T9333] netlink: 'syz.4.1335': attribute type 11 has an invalid length. [ 316.978994][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 316.979067][ T9] usb 1-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 316.985323][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.985352][ T9] usb 1-1: Product: syz [ 316.985367][ T9] usb 1-1: Manufacturer: syz [ 316.985380][ T9] usb 1-1: SerialNumber: syz [ 317.019545][ T9337] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 317.023944][ T9337] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 317.025119][ T9337] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 317.026072][ T9337] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 317.026960][ T9337] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 317.028087][ T9337] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 317.029082][ T9337] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 317.029968][ T9337] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 317.030887][ T9337] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 317.031770][ T9337] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 317.034005][ T9337] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 317.034931][ T9337] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 317.035821][ T9337] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 317.036705][ T9337] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 317.041217][ T9337] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 317.045043][ T9337] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 317.050467][ T9] keyspan 1-1:1.0: Keyspan 4 port adapter converter detected [ 317.060990][ T9337] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 317.076452][ T9] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 317.079248][ T9337] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 317.081464][ T9337] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 317.090217][ T9] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 317.091475][ T9337] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 317.095126][ T9337] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 317.099917][ T9337] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 317.105638][ T9] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 317.107076][ T9337] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 317.120796][ T9337] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 317.129303][ T9] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 317.130523][ T9337] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 317.147422][ T9337] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 317.153692][ T9337] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 317.159823][ T9337] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 317.198270][ T9337] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 317.201071][ T9337] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 317.206361][ T9337] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 317.214620][ T9337] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 317.217528][ T9337] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 317.578318][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.578392][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.744476][ T9373] netlink: 'syz.5.1351': attribute type 4 has an invalid length. [ 318.770897][ T9373] netlink: 'syz.5.1351': attribute type 4 has an invalid length. [ 319.421257][ T9394] comedi comedi0: pcl812: I/O base address not correctly aligned [ 319.437260][ T9395] comedi comedi0: pcl812: I/O base address not correctly aligned [ 319.542637][ T5712] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 319.599074][ T9] usb 1-1: USB disconnect, device number 54 [ 319.647487][ T9] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 319.685436][ T9399] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 319.702956][ T5712] usb 5-1: Using ep0 maxpacket: 32 [ 319.707368][ T5712] usb 5-1: New USB device found, idVendor=069a, idProduct=0001, bcdDevice=51.c5 [ 319.710269][ T5712] usb 5-1: config 76 has an invalid descriptor of length 0, skipping remainder of the config [ 319.726681][ T5712] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.726709][ T5712] usb 5-1: Product: syz [ 319.726723][ T5712] usb 5-1: Manufacturer: syz [ 319.726736][ T5712] usb 5-1: SerialNumber: syz [ 319.793558][ T9] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 319.805600][ T5712] pwc: Askey VC010 type 1 USB webcam detected. [ 319.807187][ T9] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 319.823146][ T9] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 319.846806][ T9] keyspan 1-1:1.0: device disconnected [ 319.998430][ T5712] pwc: send_video_command error -71 [ 319.998466][ T5712] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 319.998593][ T5712] Philips webcam 5-1:76.0: probe with driver Philips webcam failed with error -71 [ 320.004259][ T5712] usb 5-1: USB disconnect, device number 38 [ 320.202054][ T9] usb 1-1: new full-speed USB device number 55 using dummy_hcd [ 320.227993][ T9408] dummy0: entered allmulticast mode [ 320.346494][ T9413] dummy0: left allmulticast mode [ 320.361323][ T9] usb 1-1: New USB device found, idVendor=0421, idProduct=0070, bcdDevice=46.26 [ 320.362764][ T9] usb 1-1: config 14 has an invalid interface number: 217 but max is 0 [ 320.362790][ T9] usb 1-1: config 14 contains an unexpected descriptor of type 0x1, skipping [ 320.362807][ T9] usb 1-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 320.362825][ T9] usb 1-1: config 14 has 2 interfaces, different from the descriptor's value: 1 [ 320.362844][ T9] usb 1-1: config 14 has no interface number 1 [ 320.362882][ T9] usb 1-1: config 14 interface 217 has no altsetting 0 [ 320.364942][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.364963][ T9] usb 1-1: Product: syz [ 320.364977][ T9] usb 1-1: Manufacturer: syz [ 320.364990][ T9] usb 1-1: SerialNumber: syz [ 320.596455][ T9404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.611366][ T9404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.693154][ T9419] netlink: 'syz.5.1368': attribute type 4 has an invalid length. [ 320.700331][ T9] rndis_host 1-1:14.217: skipping garbage [ 320.700356][ T9] rndis_host 1-1:14.217: rndis: master #0/ffff888079b27000 slave #1/0000000000000000 [ 320.702391][ T9] cdc_acm 1-1:14.217: skipping garbage [ 320.706665][ T9419] netlink: 'syz.5.1368': attribute type 4 has an invalid length. [ 320.733498][ T9] usb 1-1: USB disconnect, device number 55 [ 322.054878][ T30] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 322.213968][ T30] usb 1-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 322.228436][ T30] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 322.228490][ T30] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 322.228539][ T30] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 180, changing to 11 [ 322.228572][ T30] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 41877, setting to 1024 [ 322.228628][ T30] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.283394][ T9445] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 322.290861][ T9445] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 322.303754][ T30] pl2303 1-1:1.0: pl2303 converter detected [ 322.314951][ T30] usb 1-1: pl2303 converter now attached to ttyUSB0 [ 322.365537][ T9458] netlink: 'syz.4.1385': attribute type 4 has an invalid length. [ 322.379176][ T9458] netlink: 'syz.4.1385': attribute type 4 has an invalid length. [ 322.672332][ T9445] pl2303 ttyUSB0: pl2303_get_line_request - failed: -110 [ 322.674352][ T9445] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 322.682733][ T9445] pl2303 1-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 322.683364][ T9445] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 323.372908][ T9444] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 323.375770][ T9444] pl2303 ttyUSB0: error sending break = -32 [ 323.379327][ T9] usb 1-1: USB disconnect, device number 56 [ 323.442921][ T9] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 323.448681][ T9] pl2303 1-1:1.0: device disconnected [ 324.064719][ T9502] netlink: 'syz.0.1401': attribute type 4 has an invalid length. [ 324.070104][ T9502] netlink: 'syz.0.1401': attribute type 4 has an invalid length. [ 324.542194][ T9] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 324.666568][ T9516] netlink: 'syz.0.1407': attribute type 4 has an invalid length. [ 324.666625][ T9516] netlink: 'syz.0.1407': attribute type 5 has an invalid length. [ 324.666658][ T9516] netlink: 'syz.0.1407': attribute type 27 has an invalid length. [ 324.667741][ T9516] fuse: Bad value for 'group_id' [ 324.667760][ T9516] fuse: Bad value for 'group_id' [ 324.700631][ T9] usb 6-1: not running at top speed; connect to a high speed hub [ 324.700668][ T9] usb 6-1: New USB device found, idVendor=0b48, idProduct=1004, bcdDevice= 1.00 [ 324.701619][ T9] usb 6-1: config 1 has an invalid interface number: 1 but max is 0 [ 324.701660][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 324.701678][ T9] usb 6-1: config 1 has no interface number 0 [ 324.704260][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.704284][ T9] usb 6-1: Product: syz [ 324.704298][ T9] usb 6-1: Manufacturer: syz [ 324.704312][ T9] usb 6-1: SerialNumber: syz [ 324.723744][ T9] usb 6-1: selecting invalid altsetting 1 [ 324.748225][ T9] dvb_ttusb_budget: ttusb_init_controller: error [ 324.748245][ T9] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 324.829287][ T9519] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1409'. [ 324.949818][ T9] DVB: Unable to find symbol ves1820_attach() [ 325.015277][ T9] DVB: Unable to find symbol stv0297_attach() [ 325.015328][ T9] dvb_ttusb_budget: no frontend driver found for device [0b48:1004] [ 325.019599][ T9] usb 6-1: USB disconnect, device number 7 [ 325.121969][ T1219] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 325.255502][ T1219] usb 5-1: device descriptor read/64, error -71 [ 325.495846][ T1219] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 325.567675][ T9535] netlink: 'syz.5.1415': attribute type 11 has an invalid length. [ 325.635214][ T1219] usb 5-1: device descriptor read/64, error -71 [ 325.743793][ T1219] usb usb5-port1: attempt power cycle [ 326.082205][ T1219] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 326.103938][ T1219] usb 5-1: device descriptor read/8, error -71 [ 326.341926][ T1219] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 326.364768][ T1219] usb 5-1: device descriptor read/8, error -71 [ 326.472324][ T1219] usb usb5-port1: unable to enumerate USB device [ 326.749920][ T9558] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 327.370167][ T9575] netlink: 'syz.5.1431': attribute type 11 has an invalid length. [ 327.692089][ T9] usb 1-1: new full-speed USB device number 57 using dummy_hcd [ 327.733800][ T5348] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 327.844528][ T9] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 327.855586][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.855646][ T9] usb 1-1: Product: syz [ 327.855677][ T9] usb 1-1: Manufacturer: syz [ 327.855693][ T9] usb 1-1: SerialNumber: syz [ 327.859139][ T9] usb 1-1: config 0 descriptor?? [ 327.874696][ T9] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 327.911897][ T5348] usb 6-1: Using ep0 maxpacket: 16 [ 327.917739][ T5348] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1c0c, bcdDevice= 0.00 [ 327.929945][ T5348] usb 6-1: config 0 has an invalid descriptor of length 77, skipping remainder of the config [ 327.929993][ T5348] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 327.930058][ T5348] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.962096][ T5348] usb 6-1: config 0 descriptor?? [ 328.177282][ T9] gspca_stk1135: reg_w 0x0 err -71 [ 328.178346][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 328.178359][ T9] gspca_stk1135: Sensor write failed [ 328.178383][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 328.178392][ T9] gspca_stk1135: Sensor write failed [ 328.178416][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 328.178425][ T9] gspca_stk1135: Sensor read failed [ 328.178448][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 328.178457][ T9] gspca_stk1135: Sensor read failed [ 328.178465][ T9] gspca_stk1135: Detected sensor type unknown (0x0) [ 328.178492][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 328.178502][ T9] gspca_stk1135: Sensor read failed [ 328.178526][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 328.178536][ T9] gspca_stk1135: Sensor read failed [ 328.178560][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 328.178569][ T9] gspca_stk1135: Sensor write failed [ 328.178592][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 328.178601][ T9] gspca_stk1135: Sensor write failed [ 328.178681][ T9] stk1135 1-1:0.0: probe with driver stk1135 failed with error -71 [ 328.189242][ T9] usb 1-1: USB disconnect, device number 57 [ 328.975656][ T9611] netlink: 'syz.0.1444': attribute type 4 has an invalid length. [ 328.997658][ T9611] netlink: 'syz.0.1444': attribute type 4 has an invalid length. [ 329.198710][ T9617] netlink: 'syz.4.1447': attribute type 11 has an invalid length. [ 329.508476][ T9625] netlink: 11 bytes leftover after parsing attributes in process `syz.4.1450'. [ 330.529518][ T9] usb 6-1: USB disconnect, device number 8 [ 330.678013][ T9648] netlink: 'syz.5.1459': attribute type 11 has an invalid length. [ 331.960689][ T5631] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 331.975501][ T5631] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 331.987788][ T5631] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 331.997520][ T5631] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 332.006303][ T5631] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 332.901097][ T9689] tmpfs: Bad value for 'mpol' [ 333.167404][ T9314] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.380825][ T5712] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 333.486472][ T9698] binder: 9694:9698 ioctl c0306201 200000000080 returned -14 [ 333.494945][ T9314] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.528483][ T9701] netlink: 'syz.0.1475': attribute type 11 has an invalid length. [ 333.534767][ T5712] usb 6-1: Using ep0 maxpacket: 16 [ 333.535638][ T5712] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1c0c, bcdDevice= 0.00 [ 333.537015][ T5712] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 227, changing to 11 [ 333.537045][ T5712] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 333.537084][ T5712] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.546200][ T5712] usb 6-1: config 0 descriptor?? [ 333.764863][ T9314] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.887169][ T9314] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.981281][ T5712] hid_parser_main: 189 callbacks suppressed [ 333.981730][ T5712] corsair-psu 0003:1B1C:1C0C.001B: unknown main item tag 0x0 [ 333.981767][ T5712] corsair-psu 0003:1B1C:1C0C.001B: unknown main item tag 0x0 [ 333.981791][ T5712] corsair-psu 0003:1B1C:1C0C.001B: unknown main item tag 0x0 [ 333.982990][ T5712] corsair-psu 0003:1B1C:1C0C.001B: unknown main item tag 0x0 [ 333.983018][ T5712] corsair-psu 0003:1B1C:1C0C.001B: unknown main item tag 0x0 [ 333.983041][ T5712] corsair-psu 0003:1B1C:1C0C.001B: unknown main item tag 0x0 [ 333.983065][ T5712] corsair-psu 0003:1B1C:1C0C.001B: unknown main item tag 0x0 [ 333.983089][ T5712] corsair-psu 0003:1B1C:1C0C.001B: unknown main item tag 0x0 [ 333.983112][ T5712] corsair-psu 0003:1B1C:1C0C.001B: unknown main item tag 0x0 [ 333.983136][ T5712] corsair-psu 0003:1B1C:1C0C.001B: unknown main item tag 0x0 [ 333.985002][ T5712] corsair-psu 0003:1B1C:1C0C.001B: unexpected long global item [ 333.985948][ T5712] corsair-psu 0003:1B1C:1C0C.001B: probe with driver corsair-psu failed with error -22 [ 334.042182][ T5622] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 334.052038][ T5628] Bluetooth: hci4: command tx timeout [ 334.181166][ T5712] usb 6-1: USB disconnect, device number 9 [ 334.199885][ T9712] netlink: 'syz.0.1479': attribute type 1 has an invalid length. [ 334.200401][ T9712] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.1479'. [ 334.202020][ T5622] usb 5-1: device descriptor read/64, error -71 [ 334.372562][ T9314] bridge_slave_1: left allmulticast mode [ 334.372613][ T9314] bridge_slave_1: left promiscuous mode [ 334.372867][ T9314] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.406155][ T9314] bridge_slave_0: left allmulticast mode [ 334.406216][ T9314] bridge_slave_0: left promiscuous mode [ 334.406486][ T9314] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.441971][ T5622] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 334.572311][ T5622] usb 5-1: device descriptor read/64, error -71 [ 334.682469][ T5622] usb usb5-port1: attempt power cycle [ 334.879217][ T9314] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 334.905696][ T9314] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 334.926608][ T9314] bond0 (unregistering): Released all slaves [ 334.982984][ T5725] syz1: Port: 1 Link DOWN [ 334.995094][ T9305] smbdirect: ib_dev[syz1] removed [ 335.023746][ T5622] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 335.046664][ T5622] usb 5-1: device descriptor read/8, error -71 [ 335.087944][ T9] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 335.256177][ T9] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 335.257568][ T9] usb 6-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 335.257602][ T9] usb 6-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 335.257625][ T9] usb 6-1: config 1 interface 0 has no altsetting 0 [ 335.259880][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.259904][ T9] usb 6-1: Product: syz [ 335.259919][ T9] usb 6-1: Manufacturer: syz [ 335.259932][ T9] usb 6-1: SerialNumber: syz [ 335.274292][ T9724] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 335.274433][ T9724] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 335.281913][ T5622] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 335.302522][ T5622] usb 5-1: device descriptor read/8, error -71 [ 335.412504][ T5622] usb usb5-port1: unable to enumerate USB device [ 335.497369][ T9724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.498187][ T9724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.548062][ T9662] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.548239][ T9662] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.548449][ T9662] bridge_slave_0: entered allmulticast mode [ 335.591167][ T9662] bridge_slave_0: entered promiscuous mode [ 335.694877][ T9662] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.695050][ T9662] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.695258][ T9662] bridge_slave_1: entered allmulticast mode [ 335.699452][ T9662] bridge_slave_1: entered promiscuous mode [ 335.847172][ T9] rtl8150 6-1:1.0: couldn't reset the device [ 335.847534][ T9] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 335.869365][ T9] usb 6-1: USB disconnect, device number 10 [ 335.920389][ T9314] hsr_slave_0: left promiscuous mode [ 335.927022][ T9314] hsr_slave_1: left promiscuous mode [ 335.928761][ T9314] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 335.928786][ T9314] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 335.950474][ T9314] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 335.950533][ T9314] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 335.976219][ T9314] veth1_macvtap: left promiscuous mode [ 335.976293][ T9314] veth0_macvtap: left promiscuous mode [ 335.976395][ T9314] veth1_vlan: left promiscuous mode [ 335.976462][ T9314] veth0_vlan: left promiscuous mode [ 336.132120][ T5628] Bluetooth: hci4: command tx timeout [ 336.388371][ T9735] netlink: 'syz.5.1486': attribute type 11 has an invalid length. [ 336.655180][ T9314] team0 (unregistering): Port device team_slave_1 removed [ 336.700618][ T9314] team0 (unregistering): Port device team_slave_0 removed [ 336.780656][ T9746] netlink: 'syz.5.1490': attribute type 4 has an invalid length. [ 336.847691][ T9747] netlink: 'syz.5.1490': attribute type 4 has an invalid length. [ 337.043511][ T9662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.091500][ T9662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.204402][ T9662] team0: Port device team_slave_0 added [ 337.213824][ T9662] team0: Port device team_slave_1 added [ 337.262664][ T9662] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.262702][ T9662] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 337.262757][ T9662] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.265602][ T9662] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.265626][ T9662] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 337.266994][ T9662] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.586111][ T9662] hsr_slave_0: entered promiscuous mode [ 337.597950][ T9662] hsr_slave_1: entered promiscuous mode [ 337.612870][ T9314] IPVS: stop unused estimator thread 0... [ 337.620580][ T9662] debugfs: 'hsr0' already exists in 'hsr' [ 337.620633][ T9662] Cannot create hsr debugfs directory [ 338.121966][ T9] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 338.212249][ T5628] Bluetooth: hci4: command tx timeout [ 338.252747][ T9] usb 6-1: device descriptor read/64, error -71 [ 338.276395][ T9662] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 338.290607][ T9662] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 338.299926][ T9662] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 338.311596][ T9662] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 338.321195][ T9662] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 338.338424][ T9662] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 338.340042][ T9662] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 338.357405][ T9662] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 338.466163][ T9773] netdevsim netdevsim0: Direct firmware load for þ failed with error -2 [ 338.466231][ T9773] netdevsim netdevsim0: Falling back to sysfs fallback for: þ [ 338.493209][ T9] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 338.570606][ T9662] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.605196][ T9662] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.619306][ T9314] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.619443][ T9314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.625265][ T9] usb 6-1: device descriptor read/64, error -71 [ 338.633189][ T9314] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.633295][ T9314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.732842][ T9] usb usb6-port1: attempt power cycle [ 339.072004][ T9] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 339.093455][ T9] usb 6-1: device descriptor read/8, error -71 [ 339.261786][ T9662] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.332332][ T9] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 339.354201][ T9] usb 6-1: device descriptor read/8, error -71 [ 339.457754][ T9789] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 339.464355][ T9] usb usb6-port1: unable to enumerate USB device [ 339.797893][ T9662] veth0_vlan: entered promiscuous mode [ 339.819815][ T9662] veth1_vlan: entered promiscuous mode [ 339.891140][ T9662] veth0_macvtap: entered promiscuous mode [ 339.926744][ T9662] veth1_macvtap: entered promiscuous mode [ 339.969755][ T9662] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 339.992013][ T5622] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 340.011530][ T9662] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.053737][ T9305] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.097429][ T9313] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.122121][ T9307] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.144051][ T5622] usb 1-1: Using ep0 maxpacket: 8 [ 340.145033][ T5622] usb 1-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 340.149046][ T5622] usb 1-1: too many endpoints for config 0 interface 0 altsetting 5: 34, using maximum allowed: 30 [ 340.149091][ T5622] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.149116][ T5622] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 34 [ 340.149140][ T5622] usb 1-1: config 0 interface 0 has no altsetting 0 [ 340.149173][ T5622] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.156700][ T5622] usb 1-1: config 0 descriptor?? [ 340.253723][ T9314] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.292286][ T5628] Bluetooth: hci4: command tx timeout [ 340.356038][ T84] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.356088][ T84] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.410964][ T9305] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.411049][ T9305] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.565535][ T9805] netlink: 'syz.4.1505': attribute type 4 has an invalid length. [ 340.584437][ T9805] netlink: 'syz.4.1505': attribute type 4 has an invalid length. [ 340.705149][ T9809] sg_write: data in/out 394205/258 bytes for SCSI command 0x0-- guessing data in; [ 340.705149][ T9809] program syz.6.1466 not setting count and/or reply_len properly [ 340.998693][ T5622] hid-alps 0003:044E:120C.001C: read register address error (0,c370) [ 340.998858][ T5622] hid-alps 0003:044E:120C.001C: failed T4_PRM_ID_CONFIG_3 (-22) [ 341.025841][ T5622] hid-alps 0003:044E:120C.001C: hidraw0: USB HID v0.00 Joystick [HID 044e:120c] on usb-dummy_hcd.0-1/input0 [ 341.467925][ T5348] usb 1-1: USB disconnect, device number 58 [ 341.720428][ T9838] ieee802154 phy0 wpan0: encryption failed: -22 [ 341.788038][ T9840] netlink: 'syz.5.1518': attribute type 29 has an invalid length. [ 341.800516][ T9841] netlink: 'syz.5.1518': attribute type 29 has an invalid length. [ 341.800856][ T9841] netlink: 'syz.5.1518': attribute type 29 has an invalid length. [ 341.801112][ T9841] netlink: 'syz.5.1518': attribute type 29 has an invalid length. [ 341.801327][ T9841] netlink: 'syz.5.1518': attribute type 29 has an invalid length. [ 341.801540][ T9841] netlink: 'syz.5.1518': attribute type 29 has an invalid length. [ 341.843366][ T9841] netlink: 'syz.5.1518': attribute type 29 has an invalid length. [ 341.843673][ T9841] netlink: 'syz.5.1518': attribute type 29 has an invalid length. [ 341.892042][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 342.041939][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 342.048048][ T9] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 342.063862][ T9] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 22, changing to 7 [ 342.079115][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.087547][ T9] usb 7-1: Product: 鲜散䰫é½ã¹¾ë‡­ë¦†ê²£ê©œé»à³¬áŽ™æŠÄ¡ç®›ï¨¶á¶¬ìš›ãª•å£¼à¾ˆá¦ã‘¯î¢ã–°çµ§ã¹¥Â政鑋瓖쭪甠쯱毡綸؎燅嶇싛樞蟻﨧é¥è¨¶â¶‚íŽë¦•ê—¨èä°æ’° [ 342.087578][ T9] usb 7-1: Manufacturer: ã€íŽ¶î•£ã‹šç–﹛釓┓è…셗䳂ì°å°šî§ê–„㚯ê‹âµªã¢¤áŸ„繭ৎ풇윽ᰈꗒ䲟烖ä·âŽŒë¦€ê³†âŸ§è§„ੰᴳ㡻䞉æ—勔꽣â“₽î‹â¬±ä»¡ [ 342.087600][ T9] usb 7-1: SerialNumber: ♙஖茅ﴦ铕Ḷࢪ㦼튀巒뀸䧑纕ᒖ‌痯æªçˆàµ½ë–«î•©é”¤éŽ³Ã”ߋӞ뼜ꉡ㙪ꬻæ©åŠ´í”©ã¯î§ç·Ÿç¿â¬é¹¾ã³™ä‚„悔鴪셰䪻䅗ꩇ똫檶⇔국樧冱馩ؚ慢帇î³ï²î‘™åªï‡¹ä‚®ä¿¥ç§¸êšƒâ‰­ê–°å„•ç¤ä†œè¸žã¸¶ë£¦áŽ«í†¦í­á·± [ 342.252978][ T9852] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 342.386959][ T9] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 342.596768][ T9] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 342.705804][ T9] usb 7-1: USB disconnect, device number 2 [ 342.870399][ T49] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 343.016019][ T49] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 343.017269][ T49] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.017303][ T49] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 343.017361][ T49] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.035559][ T49] usb 6-1: config 0 descriptor?? [ 343.373424][ T9875] fuse: Bad value for 'group_id' [ 343.373491][ T9875] fuse: Bad value for 'group_id' [ 343.455814][ T49] hid_parser_main: 187 callbacks suppressed [ 343.455882][ T49] cp2112 0003:10C4:EA90.001D: unknown main item tag 0x0 [ 343.455922][ T49] cp2112 0003:10C4:EA90.001D: unknown main item tag 0x0 [ 343.455953][ T49] cp2112 0003:10C4:EA90.001D: unknown main item tag 0x0 [ 343.455976][ T49] cp2112 0003:10C4:EA90.001D: unknown main item tag 0x0 [ 343.456006][ T49] cp2112 0003:10C4:EA90.001D: unknown main item tag 0x0 [ 343.456029][ T49] cp2112 0003:10C4:EA90.001D: unknown main item tag 0x0 [ 343.456052][ T49] cp2112 0003:10C4:EA90.001D: unknown main item tag 0x0 [ 343.520678][ T49] cp2112 0003:10C4:EA90.001D: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 343.647244][ T49] cp2112 0003:10C4:EA90.001D: Part Number: 0x00 Device Version: 0x00 [ 343.847997][ T49] cp2112 0003:10C4:EA90.001D: error requesting SMBus config [ 343.857813][ T49] cp2112 0003:10C4:EA90.001D: probe with driver cp2112 failed with error -32 [ 344.263993][ T49] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 344.362826][ T9898] syzkaller1: entered promiscuous mode [ 344.362875][ T9898] syzkaller1: entered allmulticast mode [ 344.367846][ T9898] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1543'. [ 344.438178][ T49] usb 7-1: unable to get BOS descriptor or descriptor too short [ 344.440627][ T49] usb 7-1: not running at top speed; connect to a high speed hub [ 344.440660][ T49] usb 7-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 344.442908][ T49] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 344.443482][ T49] usb 7-1: language id specifier not provided by device, defaulting to English [ 344.451530][ T49] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.451558][ T49] usb 7-1: Manufacturer: 妵éŠçƒ¶â·Šé¼•â†«î¡’㧸疌Ῐ֙ⳉ妮ᅜÛ憾ₒ [ 344.451575][ T49] usb 7-1: SerialNumber: syz [ 344.792948][ T9907] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1545'. [ 344.793036][ T9907] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1545'. [ 344.816301][ T9889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.817904][ T9889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.890776][ T9889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.896330][ T9889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.937148][ T49] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 344.938643][ T49] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 345.038310][ T9910] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1546'. [ 345.130198][ T49] usb 7-1: USB disconnect, device number 3 [ 345.501871][ C0] Unknown status report in ack skb [ 345.576730][ T5725] usb 6-1: USB disconnect, device number 15 [ 346.262145][ T5622] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 346.380526][ T9946] CIFS: enabling forcegid mount option implicitly because gid= option is specified [ 346.391444][ T9946] CIFS mount error: No usable UNC path provided in device string! [ 346.391444][ T9946] [ 346.391581][ T9946] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 346.422329][ T9] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 346.572142][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 346.578199][ T9] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c0c, bcdDevice= 0.00 [ 346.590999][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 227, changing to 11 [ 346.603235][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 346.603299][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.640171][ T9] usb 1-1: config 0 descriptor?? [ 347.094924][ T5622] usb 7-1: device descriptor read/64, error -71 [ 347.104229][ T9] corsair-psu 0003:1B1C:1C0C.001E: unknown main item tag 0x0 [ 347.112461][ T9] corsair-psu 0003:1B1C:1C0C.001E: unknown main item tag 0x0 [ 347.112522][ T9] corsair-psu 0003:1B1C:1C0C.001E: unknown main item tag 0x0 [ 347.129965][ T9] corsair-psu 0003:1B1C:1C0C.001E: unexpected long global item [ 347.138754][ T9] corsair-psu 0003:1B1C:1C0C.001E: probe with driver corsair-psu failed with error -22 [ 347.296366][ T5348] usb 1-1: USB disconnect, device number 59 [ 347.332680][ T5622] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 347.491958][ T5622] usb 7-1: Using ep0 maxpacket: 16 [ 347.497980][ T5622] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 347.508884][ T5622] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 347.518883][ T5622] usb 7-1: config 1 has an invalid descriptor of length 15, skipping remainder of the config [ 347.529293][ T5622] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 347.529324][ T5622] usb 7-1: config 1 has no interface number 1 [ 347.529372][ T5622] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 347.529423][ T5622] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x89 has an invalid bInterval 201, changing to 7 [ 347.572680][ T5622] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.581065][ T5622] usb 7-1: Product: syz [ 347.588238][ T5622] usb 7-1: Manufacturer: syz [ 347.593090][ T5622] usb 7-1: SerialNumber: syz [ 347.609056][ T5622] usb 7-1: 2:1 : no or invalid class specific endpoint descriptor [ 347.617558][ T5622] usb 7-1: found format II with max.bitrate = 0, frame size=0 [ 347.625428][ T5622] usb 7-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 347.637389][ T9973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.637850][ T9973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.870392][ T5622] usb 7-1: USB disconnect, device number 5 [ 348.515327][ T9999] Bluetooth: ISO socket layer initialized [ 348.681936][ T49] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 348.857808][ T49] usb 7-1: Using ep0 maxpacket: 16 [ 348.858544][ T49] usb 7-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 348.859494][ T49] usb 7-1: config 0 has an invalid interface number: 132 but max is 0 [ 348.859524][ T49] usb 7-1: config 0 has no interface number 0 [ 348.861438][ T49] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.861459][ T49] usb 7-1: Product: syz [ 348.861474][ T49] usb 7-1: Manufacturer: syz [ 348.861488][ T49] usb 7-1: SerialNumber: syz [ 348.901206][ T49] usb 7-1: config 0 descriptor?? [ 348.915772][ T49] hub 7-1:0.132: bad descriptor, ignoring hub [ 348.915802][ T49] hub 7-1:0.132: probe with driver hub failed with error -5 [ 348.939000][ T49] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.132/input/input23 [ 348.972246][T10012] validate_nla: 13 callbacks suppressed [ 348.978433][T10012] netlink: 'syz.0.1589': attribute type 29 has an invalid length. [ 349.256689][T10018] netlink: 'syz.6.1582': attribute type 10 has an invalid length. [ 349.285402][T10018] team0: Port device macvlan1 added [ 349.301969][ T9] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 349.355671][T10020] netlink: 'syz.5.1592': attribute type 16 has an invalid length. [ 349.355741][T10020] netlink: 'syz.5.1592': attribute type 3 has an invalid length. [ 349.356132][T10020] netlink: 31362 bytes leftover after parsing attributes in process `syz.5.1592'. [ 349.362089][T10020] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1592'. [ 349.363002][T10020] block nbd0: server does not support multiple connections per device. [ 349.368150][T10020] block nbd0: shutting down sockets [ 349.462162][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 349.472640][ T9] usb 1-1: New USB device found, idVendor=044e, idProduct=121e, bcdDevice= 0.00 [ 349.483104][T10022] netlink: 'syz.5.1593': attribute type 11 has an invalid length. [ 349.498927][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 227, changing to 11 [ 349.498981][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 349.499049][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.532859][ T49] usb 7-1: USB disconnect, device number 6 [ 349.555166][ T9] usb 1-1: config 0 descriptor?? [ 349.794456][ T5725] hid-generic 0005:07C0:05DF.001F: item fetching failed at offset 0/1 [ 349.796492][T10028] overlayfs: failed to resolve './bus/file0': -2 [ 349.812462][ T5725] hid-generic 0005:07C0:05DF.001F: probe with driver hid-generic failed with error -22 [ 350.005651][ T9] hid_parser_main: 194 callbacks suppressed [ 350.014428][ T9] hid-alps 0003:044E:121E.0020: unknown main item tag 0x0 [ 350.015446][ T9] hid-alps 0003:044E:121E.0020: unknown main item tag 0x0 [ 350.019441][ T9] hid-alps 0003:044E:121E.0020: unknown main item tag 0x0 [ 350.019501][ T9] hid-alps 0003:044E:121E.0020: unknown main item tag 0x0 [ 350.019534][ T9] hid-alps 0003:044E:121E.0020: unknown main item tag 0x0 [ 350.019564][ T9] hid-alps 0003:044E:121E.0020: unknown main item tag 0x0 [ 350.019594][ T9] hid-alps 0003:044E:121E.0020: unknown main item tag 0x0 [ 350.019623][ T9] hid-alps 0003:044E:121E.0020: unknown main item tag 0x0 [ 350.019651][ T9] hid-alps 0003:044E:121E.0020: unknown main item tag 0x0 [ 350.019679][ T9] hid-alps 0003:044E:121E.0020: unknown main item tag 0x0 [ 350.021575][ T9] hid-alps 0003:044E:121E.0020: unexpected long global item [ 350.109060][ T9] hid-alps 0003:044E:121E.0020: parse failed [ 350.116113][ T9] hid-alps 0003:044E:121E.0020: probe with driver hid-alps failed with error -22 [ 350.197614][ T30] usb 1-1: USB disconnect, device number 60 [ 350.246834][ T49] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 350.382703][ T49] usb 6-1: device descriptor read/64, error -71 [ 350.625155][ T49] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 350.761909][ T49] usb 6-1: device descriptor read/64, error -71 [ 350.864778][ T9] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 350.883158][ T49] usb usb6-port1: attempt power cycle [ 351.021956][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 351.027892][ T9] usb 7-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 351.041774][ T9] usb 7-1: config 0 has an invalid interface number: 34 but max is 0 [ 351.044908][ T9] usb 7-1: config 0 has no interface number 0 [ 351.045476][ T9] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 351.045511][ T9] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 351.094010][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.094059][ T9] usb 7-1: Product: syz [ 351.094091][ T9] usb 7-1: Manufacturer: syz [ 351.094111][ T9] usb 7-1: SerialNumber: syz [ 351.121064][ T9] usb 7-1: config 0 descriptor?? [ 351.128382][T10045] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 351.136290][T10045] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 351.241949][ T49] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 351.267428][ T49] usb 6-1: device descriptor read/8, error -71 [ 351.346603][T10045] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 351.358956][T10045] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 351.370637][T10051] netlink: 'syz.0.1607': attribute type 4 has an invalid length. [ 351.454469][T10053] netlink: 'syz.0.1608': attribute type 11 has an invalid length. [ 351.511947][ T49] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 351.532521][ T49] usb 6-1: device descriptor read/8, error -71 [ 351.644376][ T49] usb usb6-port1: unable to enumerate USB device [ 351.781980][ T9] asix 7-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 351.782034][ T9] asix 7-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 351.782305][ T9] asix 7-1:0.34: probe with driver asix failed with error -61 [ 352.472019][ T9] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 352.622220][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 352.637857][ T9] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 352.649889][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 352.658308][ T9] usb 1-1: config 0 has no interface number 0 [ 352.668371][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.668415][ T9] usb 1-1: Product: syz [ 352.668437][ T9] usb 1-1: Manufacturer: syz [ 352.668455][ T9] usb 1-1: SerialNumber: syz [ 352.678394][ T9] usb 1-1: config 0 descriptor?? [ 352.689649][ T9] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 352.865808][ T5725] usb 7-1: USB disconnect, device number 7 [ 353.184777][ T9] gspca_spca1528: reg_w err -71 [ 353.202059][ T9] spca1528 1-1:0.1: probe with driver spca1528 failed with error -71 [ 353.206740][ T9] usb 1-1: USB disconnect, device number 61 [ 353.774218][ T9] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 353.922492][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 353.923329][ T9] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1c0c, bcdDevice= 0.00 [ 353.924749][ T9] usb 7-1: config index 0 descriptor too short (asked for 9, got 0) [ 353.924783][ T9] usb 7-1: can't read configurations, error -22 [ 353.978980][T10093] netlink: 'syz.0.1622': attribute type 4 has an invalid length. [ 353.997702][T10093] netlink: 'syz.0.1622': attribute type 4 has an invalid length. [ 354.055578][ T9] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 354.220282][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 354.222257][ T9] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1c0c, bcdDevice= 0.00 [ 354.223687][ T9] usb 7-1: config index 0 descriptor too short (asked for 9, got 0) [ 354.223719][ T9] usb 7-1: can't read configurations, error -22 [ 354.223984][ T9] usb usb7-port1: attempt power cycle [ 354.553384][ T9] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 354.574784][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 354.575347][ T9] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1c0c, bcdDevice= 0.00 [ 354.576719][ T9] usb 7-1: config index 0 descriptor too short (asked for 9, got 0) [ 354.576751][ T9] usb 7-1: can't read configurations, error -22 [ 354.621945][ T5705] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 354.712136][ T9] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 354.743761][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 354.749902][ T9] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1c0c, bcdDevice= 0.00 [ 354.767156][ T9] usb 7-1: config index 0 descriptor too short (asked for 9, got 0) [ 354.767215][ T9] usb 7-1: can't read configurations, error -22 [ 354.772063][ T5705] usb 6-1: Using ep0 maxpacket: 32 [ 354.772811][ T5705] usb 6-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice=3f.bf [ 354.773762][ T5705] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 354.773806][ T5705] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 354.773825][ T5705] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 354.773850][ T5705] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 354.773874][ T5705] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 354.773897][ T5705] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 354.773916][ T5705] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 354.776279][ T9] usb usb7-port1: unable to enumerate USB device [ 354.778491][ T5705] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.778518][ T5705] usb 6-1: Product: syz [ 354.778532][ T5705] usb 6-1: Manufacturer: syz [ 354.778546][ T5705] usb 6-1: SerialNumber: syz [ 354.781632][ T5705] usb 6-1: config 0 descriptor?? [ 354.782552][T10106] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 354.784647][ T5705] usb 6-1: NFC: Reader power on cmd error -90 [ 354.784667][ T5705] pn533_usb 6-1:0.0: NFC: Couldn't poweron the reader (error -90) [ 354.784789][ T5705] pn533_usb 6-1:0.0: probe with driver pn533_usb failed with error -90 [ 354.999256][ T5705] usb 6-1: USB disconnect, device number 20 [ 355.331115][ T49] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 355.482865][ T49] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 355.483681][ T49] usb 1-1: config 0 has no interfaces? [ 355.485618][ T49] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.485641][ T49] usb 1-1: Product: syz [ 355.485655][ T49] usb 1-1: Manufacturer: syz [ 355.485669][ T49] usb 1-1: SerialNumber: syz [ 355.490124][ T49] usb 1-1: config 0 descriptor?? [ 356.568905][T10129] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1634'. [ 356.604499][T10131] netlink: 'syz.4.1636': attribute type 4 has an invalid length. [ 356.664058][T10131] netlink: 'syz.4.1636': attribute type 4 has an invalid length. [ 356.941889][ T49] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 357.072151][ T49] usb 7-1: device descriptor read/64, error -71 [ 357.314644][ T49] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 357.325444][T10147] nvme_fabrics: missing parameter 'host_traddr=%s' [ 357.444418][ T49] usb 7-1: device descriptor read/64, error -71 [ 357.554247][ T49] usb usb7-port1: attempt power cycle [ 357.712801][T10154] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 357.892869][ T49] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 357.939970][ T49] usb 7-1: device descriptor read/8, error -71 [ 357.967774][T10160] netlink: 'syz.0.1647': attribute type 11 has an invalid length. [ 358.173750][ T49] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 358.194141][ T30] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 358.200841][ T49] usb 7-1: device descriptor read/8, error -71 [ 358.214194][T10171] netlink: 'syz.4.1651': attribute type 4 has an invalid length. [ 358.266647][T10172] netlink: 'syz.4.1651': attribute type 4 has an invalid length. [ 358.307148][ T49] usb usb7-port1: unable to enumerate USB device [ 358.342703][ T30] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 358.343753][ T30] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 358.343777][ T30] usb 6-1: config 0 has no interface number 0 [ 358.347288][ T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.347312][ T30] usb 6-1: Product: syz [ 358.347326][ T30] usb 6-1: Manufacturer: syz [ 358.347340][ T30] usb 6-1: SerialNumber: syz [ 358.367366][ T30] usb 6-1: config 0 descriptor?? [ 358.573876][ T30] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 358.588364][ T30] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 358.590707][ T30] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 358.590820][ T30] usb 6-1: media controller created [ 358.642414][ T30] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 359.418819][T10191] netlink: 'syz.0.1660': attribute type 11 has an invalid length. [ 361.006973][ T5725] usb 6-1: USB disconnect, device number 21 [ 361.336961][ T5628] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 361.528911][T10229] netlink: 'syz.6.1675': attribute type 11 has an invalid length. [ 362.944617][ T5705] usb 7-1: new low-speed USB device number 16 using dummy_hcd [ 363.036274][T10272] netlink: 'syz.0.1693': attribute type 11 has an invalid length. [ 363.113679][ T5705] usb 7-1: unable to get BOS descriptor or descriptor too short [ 363.113766][ T5705] usb 7-1: New USB device found, idVendor=2a39, idProduct=3fb0, bcdDevice= 0.40 [ 363.123096][ T5705] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 363.123123][ T5705] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 363.125922][ T5705] usb 7-1: string descriptor 0 read error: -22 [ 363.126049][ T5705] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.453523][T10274] can0: slcan on ttyS3. [ 363.585450][ T5705] usb 7-1: USB disconnect, device number 16 [ 363.741697][T10273] can0 (unregistered): slcan off ttyS3. [ 363.972315][T10284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.974493][T10284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.372326][ T5705] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 364.525603][ T5705] usb 7-1: unable to get BOS descriptor or descriptor too short [ 364.525685][ T5705] usb 7-1: New USB device found, idVendor=0586, idProduct=1000, bcdDevice=aa.5e [ 364.526671][ T5705] usb 7-1: config 0 has an invalid interface number: 86 but max is 0 [ 364.526694][ T5705] usb 7-1: config 0 has no interface number 0 [ 364.526733][ T5705] usb 7-1: config 0 interface 86 altsetting 4 bulk endpoint 0xC has invalid maxpacket 32 [ 364.526756][ T5705] usb 7-1: config 0 interface 86 has no altsetting 0 [ 364.530742][ T5705] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.530776][ T5705] usb 7-1: Product: syz [ 364.530791][ T5705] usb 7-1: Manufacturer: syz [ 364.530804][ T5705] usb 7-1: SerialNumber: syz [ 364.536483][ T5705] usb 7-1: config 0 descriptor?? [ 364.537301][T10290] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 364.750789][ T5628] Bluetooth: hci4: hcon ffff8880346c8000 sent 1 < count 8 [ 364.753100][T10290] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 364.761157][ T5705] omninet 7-1:0.86: required endpoints missing [ 364.770357][ T5705] usb 7-1: USB disconnect, device number 17 [ 365.154144][T10307] netlink: 'syz.0.1707': attribute type 11 has an invalid length. [ 365.596638][T10319] nvmet: adding nsid 1 to subsystem testsubsys [ 365.839647][T10327] netlink: 'syz.5.1715': attribute type 4 has an invalid length. [ 365.993119][ T49] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 366.142643][ T49] usb 7-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 366.143831][ T49] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.143862][ T49] usb 7-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 366.143888][ T49] usb 7-1: config 0 interface 0 has no altsetting 0 [ 366.143920][ T49] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.149940][ T49] usb 7-1: config 0 descriptor?? [ 366.362850][ T49] usbhid 7-1:0.0: can't add hid device: -71 [ 366.363000][ T49] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 366.369211][ T49] usb 7-1: USB disconnect, device number 18 [ 366.440614][T10341] netlink: 'syz.0.1722': attribute type 11 has an invalid length. [ 366.657537][T10345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.659290][T10345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.922438][ T30] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 368.080635][ T30] usb 7-1: unable to get BOS descriptor or descriptor too short [ 368.082037][ T30] usb 7-1: New USB device found, idVendor=fc08, idProduct=0101, bcdDevice= 0.40 [ 368.086672][ T30] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.086701][ T30] usb 7-1: Product: syz [ 368.086715][ T30] usb 7-1: Manufacturer: syz [ 368.086729][ T30] usb 7-1: SerialNumber: syz [ 368.315317][ T30] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 368.315456][ T30] usb 7-1: MIDIStreaming interface descriptor not found [ 368.436253][ T30] usb 7-1: USB disconnect, device number 19 [ 369.992753][T10437] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1756'. [ 370.182081][T10444] netlink: 'syz.0.1758': attribute type 4 has an invalid length. [ 370.233279][T10444] netlink: 'syz.0.1758': attribute type 4 has an invalid length. [ 370.464808][T10449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.478910][T10449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.738608][T10464] IPVS: set_ctl: invalid protocol: 60 172.20.20.44:20001 [ 371.605349][T10492] netlink: 'syz.6.1777': attribute type 4 has an invalid length. [ 371.627780][T10492] netlink: 'syz.6.1777': attribute type 4 has an invalid length. [ 371.941909][ T5725] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 372.061602][T10503] netlink: 'syz.0.1782': attribute type 1 has an invalid length. [ 372.070987][T10503] netlink: 'syz.0.1782': attribute type 268 has an invalid length. [ 372.079571][T10503] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1782'. [ 372.102038][ T5725] usb 7-1: Using ep0 maxpacket: 8 [ 372.107927][ T5725] usb 7-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 372.120694][ T5725] usb 7-1: config 0 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 19, changing to 8 [ 372.120756][ T5725] usb 7-1: config 0 interface 0 has no altsetting 0 [ 372.120807][ T5725] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.153682][ T5725] usb 7-1: config 0 descriptor?? [ 372.536216][T10514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.550622][T10514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.583669][ T5725] hid_parser_main: 187 callbacks suppressed [ 372.589934][ T5725] lenovo 0003:17EF:6067.0021: unknown main item tag 0x0 [ 372.597339][ T5725] lenovo 0003:17EF:6067.0021: unknown main item tag 0x0 [ 372.605131][ T5725] lenovo 0003:17EF:6067.0021: unknown main item tag 0x0 [ 372.605201][ T5725] lenovo 0003:17EF:6067.0021: unknown main item tag 0x0 [ 372.605233][ T5725] lenovo 0003:17EF:6067.0021: unknown main item tag 0x0 [ 372.605263][ T5725] lenovo 0003:17EF:6067.0021: unknown main item tag 0x0 [ 372.605293][ T5725] lenovo 0003:17EF:6067.0021: unknown main item tag 0x0 [ 372.605331][ T5725] lenovo 0003:17EF:6067.0021: unknown main item tag 0x0 [ 372.605361][ T5725] lenovo 0003:17EF:6067.0021: unknown main item tag 0x0 [ 372.605390][ T5725] lenovo 0003:17EF:6067.0021: unknown main item tag 0x0 [ 372.622143][ T49] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 372.676863][ T5725] lenovo 0003:17EF:6067.0021: hidraw0: USB HID v0.7b Device [HID 17ef:6067] on usb-dummy_hcd.6-1/input0 [ 372.775142][ T49] usb 6-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 372.778274][ T49] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD6, changing to 0x86 [ 372.778306][ T49] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 372.778330][ T49] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 372.782444][ T49] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.782468][ T49] usb 6-1: Product: syz [ 372.782482][ T49] usb 6-1: Manufacturer: syz [ 372.782496][ T49] usb 6-1: SerialNumber: syz [ 372.789591][ T49] usb 6-1: config 0 descriptor?? [ 372.822508][ T5705] usb 7-1: USB disconnect, device number 20 [ 372.997196][ T49] powermate: unknown product id 0240 [ 372.997253][ T49] powermate: Expected payload of 3--6 bytes, found 0 bytes! [ 372.997856][ T49] powermate 6-1:0.0: probe with driver powermate failed with error -5 [ 373.005259][ T49] usb 6-1: USB disconnect, device number 22 [ 373.764302][T10533] netlink: 'syz.6.1795': attribute type 11 has an invalid length. [ 374.122124][ T5725] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 374.295399][ T5725] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 374.306142][ T5725] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 374.306188][ T5725] usb 7-1: config 0 has no interface number 0 [ 374.331070][ T5725] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.331860][ T5725] usb 7-1: Product: syz [ 374.332615][ T5725] usb 7-1: Manufacturer: syz [ 374.333466][ T5725] usb 7-1: SerialNumber: syz [ 374.372023][ T5725] usb 7-1: config 0 descriptor?? [ 374.783943][T10553] overlayfs: upper fs does not support tmpfile. [ 375.287775][T10544] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 375.298425][T10544] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 375.306363][T10544] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 375.338516][T10544] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 375.348795][T10544] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 375.355281][T10544] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 375.368700][T10544] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 375.380844][T10544] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 375.388558][T10544] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 375.404159][T10544] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 375.420576][ T5725] dvb_usb_ec168 7-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 375.443108][T10538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.443612][T10538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.447759][ T5705] usb 7-1: USB disconnect, device number 21 [ 375.831384][T10573] netlink: 'syz.0.1808': attribute type 11 has an invalid length. [ 376.106130][T10583] FAULT_INJECTION: forcing a failure. [ 376.106130][T10583] name failslab, interval 1, probability 0, space 0, times 0 [ 376.106202][T10583] CPU: 1 UID: 0 PID: 10583 Comm: syz.6.1812 Tainted: G L syzkaller #0 PREEMPT(full) [ 376.106231][T10583] Tainted: [L]=SOFTLOCKUP [ 376.106238][T10583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 376.106256][T10583] Call Trace: [ 376.106320][T10583] [ 376.106374][T10583] dump_stack_lvl+0xe8/0x150 [ 376.106521][T10583] should_fail_ex+0x410/0x560 [ 376.106635][T10583] should_failslab+0xa8/0x100 [ 376.106692][T10583] ? vm_area_dup+0x28/0x760 [ 376.106763][T10583] kmem_cache_alloc_noprof+0xa1/0x600 [ 376.106799][T10583] ? kmem_cache_alloc_noprof+0x31f/0x600 [ 376.106821][T10583] ? mas_alloc_nodes+0x291/0x350 [ 376.106901][T10583] ? vm_area_dup+0x28/0x760 [ 376.106930][T10583] vm_area_dup+0x28/0x760 [ 376.106952][T10583] ? __split_vma+0x1b7/0xa60 [ 376.106974][T10583] __split_vma+0x1d7/0xa60 [ 376.106998][T10583] ? mas_next_slot+0xc91/0xd70 [ 376.107019][T10583] ? __pfx___split_vma+0x10/0x10 [ 376.107051][T10583] ? mas_find+0x6d6/0xcb0 [ 376.107075][T10583] vms_gather_munmap_vmas+0x4e3/0x1370 [ 376.107117][T10583] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 376.107158][T10583] ? mas_walk+0x37e/0x490 [ 376.107193][T10583] mmap_region+0x92e/0x2240 [ 376.107227][T10583] ? __pfx_mmap_region+0x10/0x10 [ 376.107250][T10583] ? __lock_acquire+0x6df/0x2e50 [ 376.107300][T10583] ? __lock_acquire+0x6df/0x2e50 [ 376.107337][T10583] ? __lock_acquire+0x6df/0x2e50 [ 376.107406][T10583] ? arch_get_unmapped_area_topdown+0x269/0xb50 [ 376.107461][T10583] ? kstrtoull+0x137/0x1d0 [ 376.107531][T10583] ? mm_get_unmapped_area+0xd3/0x100 [ 376.107558][T10583] ? shmem_get_unmapped_area+0x2cf/0x8f0 [ 376.107580][T10583] ? cap_mmap_addr+0xaf/0x100 [ 376.107665][T10583] ? bpf_lsm_mmap_addr+0x9/0x50 [ 376.107699][T10583] ? security_mmap_addr+0x71/0x240 [ 376.107755][T10583] do_mmap+0xe0a/0x1300 [ 376.107784][T10583] ? __pfx_do_mmap+0x10/0x10 [ 376.107815][T10583] ? vm_mmap_pgoff+0x1dd/0x4e0 [ 376.107841][T10583] ? down_write_killable+0x17e/0x240 [ 376.107890][T10583] ? __pfx_down_write_killable+0x10/0x10 [ 376.107912][T10583] ? __fget_files+0x2a/0x420 [ 376.107949][T10583] ? apparmor_mmap_file+0xbe/0xe0 [ 376.107998][T10583] vm_mmap_pgoff+0x272/0x4e0 [ 376.108033][T10583] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 376.108057][T10583] ? ksys_write+0x242/0x270 [ 376.108082][T10583] ? __pfx_ksys_write+0x10/0x10 [ 376.108107][T10583] ? ksys_mmap_pgoff+0xf3/0x760 [ 376.108128][T10583] ? __x64_sys_mmap+0x7f/0x140 [ 376.108164][T10583] do_syscall_64+0x166/0x520 [ 376.108202][T10583] ? trace_irq_disable+0x3b/0x140 [ 376.108238][T10583] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.108274][T10583] ? clear_bhb_loop+0x70/0xc0 [ 376.108298][T10583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.108316][T10583] RIP: 0033:0x7f6fc1b9e0d9 [ 376.108358][T10583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 376.108397][T10583] RSP: 002b:00007f6fc2adc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 376.108441][T10583] RAX: ffffffffffffffda RBX: 00007f6fc1e25fa0 RCX: 00007f6fc1b9e0d9 [ 376.108455][T10583] RDX: 0000000000000002 RSI: 0000000000b36000 RDI: 0000200000000000 [ 376.108468][T10583] RBP: 00007f6fc2adc090 R08: ffffffffffffffff R09: 0000000000004000 [ 376.108481][T10583] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000001 [ 376.108493][T10583] R13: 00007f6fc1e26038 R14: 00007f6fc1e25fa0 R15: 00007ffecbef76b8 [ 376.108524][T10583] [ 376.152138][ T5698] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 376.304484][ T5698] usb 6-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 376.305592][ T5698] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.305622][ T5698] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 376.305660][ T5698] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.612513][ T5628] Bluetooth: hci2: command 0x0406 tx timeout [ 376.834078][T10597] netlink: 'syz.0.1818': attribute type 4 has an invalid length. [ 376.850563][ T5698] hid-picolcd 0003:04D8:C002.0022: reserved main item tag 0xe [ 376.869475][T10597] netlink: 'syz.0.1818': attribute type 4 has an invalid length. [ 376.923379][ T5698] input: HID 04d8:c002 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/0003:04D8:C002.0022/input/input25 [ 377.062137][ T5698] rc_core: IR keymap rc-rc6-mce not found [ 377.062191][ T5698] Registered IR keymap rc-empty [ 377.065004][ T5698] rc rc0: HID 04d8:c002 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/0003:04D8:C002.0022/rc/rc0 [ 377.069715][ T5698] input: HID 04d8:c002 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/0003:04D8:C002.0022/rc/rc0/input26 [ 377.081700][ T5698] hid-picolcd 0003:04D8:C002.0022: No report with id 0x92 found [ 377.176420][ T5698] usb 6-1: USB disconnect, device number 23 [ 377.332068][ T5628] Bluetooth: hci3: command 0x041b tx timeout [ 377.422113][ T5628] Bluetooth: hci4: command 0x0c1a tx timeout [ 377.422128][ T5631] Bluetooth: hci1: command 0x0c1a tx timeout [ 377.811710][T10616] netlink: 'syz.5.1826': attribute type 11 has an invalid length. [ 377.923674][ T5712] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 378.053643][ T5712] usb 7-1: device descriptor read/64, error -71 [ 378.114263][T10624] FAULT_INJECTION: forcing a failure. [ 378.114263][T10624] name failslab, interval 1, probability 0, space 0, times 0 [ 378.128595][T10624] CPU: 1 UID: 0 PID: 10624 Comm: syz.0.1830 Tainted: G L syzkaller #0 PREEMPT(full) [ 378.128632][T10624] Tainted: [L]=SOFTLOCKUP [ 378.128641][T10624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 378.128654][T10624] Call Trace: [ 378.128664][T10624] [ 378.128674][T10624] dump_stack_lvl+0xe8/0x150 [ 378.128708][T10624] should_fail_ex+0x410/0x560 [ 378.128745][T10624] should_failslab+0xa8/0x100 [ 378.128767][T10624] ? mas_alloc_nodes+0x291/0x350 [ 378.128788][T10624] kmem_cache_alloc_noprof+0xa1/0x600 [ 378.128817][T10624] ? mas_alloc_nodes+0x291/0x350 [ 378.128845][T10624] mas_alloc_nodes+0x291/0x350 [ 378.128870][T10624] mas_preallocate+0x42a/0x840 [ 378.128892][T10624] ? rcu_is_watching+0x16/0xb0 [ 378.128944][T10624] ? trace_kmem_cache_alloc+0x29/0xe0 [ 378.128972][T10624] ? __pfx_mas_preallocate+0x10/0x10 [ 378.129007][T10624] ? __mas_set_range+0x11a/0x3a0 [ 378.129034][T10624] __split_vma+0x2fb/0xa60 [ 378.129062][T10624] ? mas_next_slot+0xc91/0xd70 [ 378.129085][T10624] ? __pfx___split_vma+0x10/0x10 [ 378.129121][T10624] ? mas_find+0x6d6/0xcb0 [ 378.129147][T10624] vms_gather_munmap_vmas+0x4e3/0x1370 [ 378.129198][T10624] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 378.129236][T10624] ? mas_walk+0x37e/0x490 [ 378.129287][T10624] mmap_region+0x92e/0x2240 [ 378.129326][T10624] ? __pfx_mmap_region+0x10/0x10 [ 378.129352][T10624] ? __lock_acquire+0x6df/0x2e50 [ 378.129389][T10624] ? __lock_acquire+0x6df/0x2e50 [ 378.129433][T10624] ? lock_acquire+0x115/0x350 [ 378.129509][T10624] ? arch_get_unmapped_area_topdown+0x269/0xb50 [ 378.129560][T10624] ? kstrtoull+0x137/0x1d0 [ 378.129588][T10624] ? mm_get_unmapped_area+0xd3/0x100 [ 378.129618][T10624] ? shmem_get_unmapped_area+0x2cf/0x8f0 [ 378.129642][T10624] ? cap_mmap_addr+0xaf/0x100 [ 378.129670][T10624] ? bpf_lsm_mmap_addr+0x9/0x50 [ 378.129693][T10624] ? security_mmap_addr+0x71/0x240 [ 378.129728][T10624] do_mmap+0xe0a/0x1300 [ 378.129761][T10624] ? __pfx_do_mmap+0x10/0x10 [ 378.129799][T10624] ? vm_mmap_pgoff+0x1dd/0x4e0 [ 378.129828][T10624] ? down_write_killable+0x17e/0x240 [ 378.129858][T10624] ? __pfx_down_write_killable+0x10/0x10 [ 378.129882][T10624] ? __fget_files+0x2a/0x420 [ 378.129905][T10624] ? apparmor_mmap_file+0xbe/0xe0 [ 378.129936][T10624] vm_mmap_pgoff+0x272/0x4e0 [ 378.129975][T10624] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 378.130004][T10624] ? ksys_write+0x242/0x270 [ 378.130032][T10624] ? __pfx_ksys_write+0x10/0x10 [ 378.130062][T10624] ? ksys_mmap_pgoff+0xf3/0x760 [ 378.130085][T10624] ? __x64_sys_mmap+0x7f/0x140 [ 378.130118][T10624] do_syscall_64+0x166/0x520 [ 378.130140][T10624] ? trace_irq_disable+0x3b/0x140 [ 378.130166][T10624] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.130189][T10624] ? clear_bhb_loop+0x70/0xc0 [ 378.130215][T10624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.130235][T10624] RIP: 0033:0x7fdf86b9e0d9 [ 378.130258][T10624] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 378.130287][T10624] RSP: 002b:00007fdf879ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 378.130311][T10624] RAX: ffffffffffffffda RBX: 00007fdf86e25fa0 RCX: 00007fdf86b9e0d9 [ 378.130326][T10624] RDX: 0000000000000002 RSI: 0000000000b36000 RDI: 0000200000000000 [ 378.130341][T10624] RBP: 00007fdf879ea090 R08: ffffffffffffffff R09: 0000000000004000 [ 378.130355][T10624] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000001 [ 378.130368][T10624] R13: 00007fdf86e26038 R14: 00007fdf86e25fa0 R15: 00007ffed93fbe18 [ 378.130402][T10624] [ 378.311976][ T5712] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 378.452098][ T5712] usb 7-1: device descriptor read/64, error -71 [ 378.479346][T10630] netlink: 'syz.5.1833': attribute type 4 has an invalid length. [ 378.479835][T10630] netlink: 'syz.5.1833': attribute type 4 has an invalid length. [ 378.554798][ T5712] usb usb7-port1: attempt power cycle [ 378.893865][ T5712] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 378.923992][ T5712] usb 7-1: device descriptor read/8, error -71 [ 379.015054][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.015149][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.171946][ T5712] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 379.194632][ T5712] usb 7-1: device descriptor read/8, error -71 [ 379.302798][ T5712] usb usb7-port1: unable to enumerate USB device [ 379.412121][ T5628] Bluetooth: hci3: command 0x041b tx timeout [ 379.492106][ T5628] Bluetooth: hci4: command 0x0c1a tx timeout [ 379.493163][ T5631] Bluetooth: hci1: command 0x0c1a tx timeout [ 379.952039][ T5725] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 380.092260][ T5725] usb 6-1: device descriptor read/64, error -71 [ 380.357453][ T5725] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 380.482552][ T5725] usb 6-1: device descriptor read/64, error -71 [ 380.581001][T10655] netlink: 'syz.0.1843': attribute type 11 has an invalid length. [ 380.592532][ T5725] usb usb6-port1: attempt power cycle [ 380.675981][T10657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.692998][T10657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.932181][ T5725] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 380.952678][ T5725] usb 6-1: device descriptor read/8, error -71 [ 381.132195][ T5622] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 381.201954][ T5725] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 381.223148][ T5725] usb 6-1: device descriptor read/8, error -71 [ 381.305786][ T5622] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 381.308638][ T5622] usb 7-1: config index 0 descriptor too short (expected 71, got 53) [ 381.308697][ T5622] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 25964, setting to 1024 [ 381.308723][ T5622] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 381.311637][ T5622] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.311661][ T5622] usb 7-1: Product: syz [ 381.311675][ T5622] usb 7-1: Manufacturer: syz [ 381.311689][ T5622] usb 7-1: SerialNumber: syz [ 381.343246][ T5725] usb usb6-port1: unable to enumerate USB device [ 381.366766][T10661] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 381.425632][T10665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.437870][T10665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.492240][ T5628] Bluetooth: hci3: command 0x041b tx timeout [ 381.573425][ T5628] Bluetooth: hci4: command 0x0c1a tx timeout [ 381.583026][ T5628] Bluetooth: hci1: command 0x0c1a tx timeout [ 381.620689][T10661] mos7720 7-1:1.0: Moschip 2 port adapter converter detected [ 381.660854][ T5698] usb 7-1: USB disconnect, device number 26 [ 381.661245][ C0] usb 7-1: mos7720_interrupt_callback - Error -19 submitting control urb [ 381.667499][T10661] usb 7-1: mos7720: usb_control_msg() failed: -71 [ 381.694813][T10661] usb 7-1: Moschip 2 port adapter converter now attached to ttyUSB0 [ 381.709355][T10661] usb 7-1: Moschip 2 port adapter converter now attached to ttyUSB1 [ 381.727240][ T5698] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0 [ 381.743948][ T5698] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1 [ 381.758170][ T5698] mos7720 7-1:1.0: device disconnected [ 381.919030][T10661] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1846'. [ 382.031175][T10671] netlink: 'syz.4.1850': attribute type 4 has an invalid length. [ 382.037464][T10671] netlink: 'syz.4.1850': attribute type 4 has an invalid length. [ 382.173928][T10674] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 382.195056][ T5725] usb 7-1: new full-speed USB device number 27 using dummy_hcd [ 382.343710][ T5725] usb 7-1: not running at top speed; connect to a high speed hub [ 382.343780][ T5725] usb 7-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 382.345199][ T5725] usb 7-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 382.345223][ T5725] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 382.345271][ T5725] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.365960][ T5725] uvcvideo 7-1:1.0: Found Unit with invalid ID 0 [ 382.559343][ T5725] usb 7-1: string descriptor 0 read error: -71 [ 382.578733][ T5725] uvcvideo 7-1:1.0: Found UVC 0.00 device (046d:0825) [ 382.578964][ T5725] uvcvideo 7-1:1.0: No streaming interface found for terminal 32770. [ 382.619783][ T5725] usb 7-1: USB disconnect, device number 27 [ 382.945014][T10688] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 382.963844][T10688] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 382.964094][T10688] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 382.964274][T10688] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 383.078342][T10695] netlink: 'syz.5.1858': attribute type 11 has an invalid length. [ 383.144888][T10698] sg_write: data in/out 441308/182 bytes for SCSI command 0x2d-- guessing data in; [ 383.144888][T10698] program syz.5.1860 not setting count and/or reply_len properly [ 383.402427][ T49] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 383.557999][ T49] usb 6-1: unable to get BOS descriptor or descriptor too short [ 383.558073][ T49] usb 6-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40 [ 383.578932][ T49] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 383.578978][ T49] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 383.604061][ T49] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.604108][ T49] usb 6-1: Product: syz [ 383.604139][ T49] usb 6-1: Manufacturer: syz [ 383.604157][ T49] usb 6-1: SerialNumber: syz [ 383.677293][T10719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.686788][T10719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.692974][T10720] netlink: 'syz.4.1867': attribute type 4 has an invalid length. [ 383.705954][T10720] netlink: 'syz.4.1867': attribute type 4 has an invalid length. [ 383.716925][T10719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.726603][T10719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.928655][ T49] usb 6-1: selecting invalid altsetting 1 [ 383.934761][ T49] snd-usb-us122l 6-1:1.1: usb_set_interface error [ 383.943367][ T5622] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 383.943374][ T49] snd-usb-us122l 6-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 383.968090][ T49] usb 6-1: USB disconnect, device number 28 [ 384.092695][ T5622] usb 7-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 384.094007][ T5622] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 384.094037][ T5622] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 51016, setting to 1024 [ 384.094078][ T5622] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.155992][ T5622] usb 7-1: config 0 descriptor?? [ 384.157179][T10714] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 384.513445][T10734] netlink: 'syz.5.1875': attribute type 11 has an invalid length. [ 384.972396][ T5622] usbhid 7-1:0.0: can't add hid device: -71 [ 384.972540][ T5622] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 384.980388][ T5622] usb 7-1: USB disconnect, device number 28 [ 385.012541][ T5631] Bluetooth: hci1: command 0x0c1a tx timeout [ 385.012678][ T5621] Bluetooth: hci2: command 0x0406 tx timeout [ 385.014573][ T5628] Bluetooth: hci4: command 0x0c1a tx timeout [ 385.018984][ T4932] Bluetooth: hci3: command 0x041b tx timeout [ 385.131292][T10746] netlink: 'syz.5.1881': attribute type 4 has an invalid length. [ 385.184430][T10752] netlink: 'syz.5.1881': attribute type 4 has an invalid length. [ 385.509559][T10762] netlink: 'syz.4.1886': attribute type 11 has an invalid length. [ 386.231931][ T5705] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 386.307599][ T31] audit: type=1807 audit(1787615248.247:6): UNKNOWN=¯#s3£»3Ó?buÃ[wk?—‹Þéd~Ã:oÖ¯Öby`O¾ÁFÉlÇ’^´æBµ res=0 [ 386.320765][ T31] audit: type=1802 audit(1787615248.247:7): pid=10792 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.4.1898" res=0 errno=0 [ 386.326956][T10792] netlink: 'syz.4.1898': attribute type 5 has an invalid length. [ 386.330961][T10791] ima: policy update failed [ 386.333829][ T31] audit: type=1802 audit(1787615248.267:8): pid=10791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.1898" res=0 errno=0 [ 386.370769][ T5705] usb 6-1: device descriptor read/64, error -71 [ 386.602140][ T5705] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 386.624495][ T4932] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 386.624570][ T4932] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 386.624634][ T4932] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 386.624683][ T4932] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 386.624730][ T4932] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 386.624777][ T4932] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 386.624824][ T4932] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 386.624895][ T4932] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 386.624939][ T4932] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 386.624996][ T4932] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 386.625041][ T4932] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 386.625091][ T4932] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 386.625132][ T4932] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 386.625173][ T4932] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 386.625213][ T4932] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 386.625255][ T4932] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 386.625296][ T4932] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 386.625343][ T4932] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 386.625392][ T4932] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 386.625440][ T4932] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 386.625486][ T4932] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 386.625534][ T4932] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 386.625581][ T4932] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 386.625628][ T4932] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 386.625675][ T4932] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 386.625722][ T4932] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 386.625775][ T4932] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 386.625822][ T4932] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 386.625869][ T4932] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 386.625916][ T4932] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 386.625962][ T4932] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 386.628036][ T4932] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 386.628111][ T4932] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 386.628159][ T4932] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 386.628208][ T4932] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 386.628257][ T4932] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 386.628305][ T4932] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 386.628353][ T4932] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 386.636451][ T4932] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 386.636501][ T4932] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 386.636545][ T4932] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 386.636588][ T4932] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 386.636628][ T4932] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 386.636671][ T4932] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 386.636713][ T4932] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 386.636791][ T4932] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 386.636836][ T4932] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 386.636878][ T4932] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 386.636918][ T4932] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 386.636959][ T4932] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 386.637023][ T4932] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 386.637074][ T4932] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 386.637117][ T4932] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 386.637160][ T4932] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 386.637204][ T4932] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 386.637245][ T4932] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 386.637287][ T4932] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 386.637331][ T4932] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 386.637374][ T4932] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 386.637418][ T4932] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 386.637461][ T4932] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 386.637504][ T4932] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 386.637548][ T4932] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 386.637590][ T4932] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 386.637633][ T4932] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 386.743229][ T5705] usb 6-1: device descriptor read/64, error -71 [ 386.855485][ T5705] usb usb6-port1: attempt power cycle [ 386.984929][T10811] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1904'. [ 387.283820][ T5705] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 387.314764][ T5705] usb 6-1: device descriptor read/8, error -71 [ 387.518689][T10823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.519258][T10823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.551967][ T5705] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 387.592342][ T5705] usb 6-1: device descriptor read/8, error -71 [ 387.702231][ T5705] usb usb6-port1: unable to enumerate USB device [ 388.225144][T10833] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1914'. [ 388.732052][ T9] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 388.861894][ T9] usb 7-1: device descriptor read/64, error -71 [ 389.115024][ T9] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 389.255470][ T9] usb 7-1: device descriptor read/64, error -71 [ 389.373063][ T9] usb usb7-port1: attempt power cycle [ 389.725886][ T9] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 389.744293][ T9] usb 7-1: device descriptor read/8, error -71 [ 389.983746][ T9] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 390.003791][ T9] usb 7-1: device descriptor read/8, error -71 [ 390.116492][ T9] usb usb7-port1: unable to enumerate USB device [ 390.736367][T10882] dns_resolver: Unsupported server list version (0) [ 391.053133][T10890] validate_nla: 1 callbacks suppressed [ 391.060306][T10890] netlink: 'syz.0.1938': attribute type 4 has an invalid length. [ 391.091028][T10890] netlink: 'syz.0.1938': attribute type 4 has an invalid length. [ 391.272716][ T84] IPVS: starting estimator thread 0... [ 391.374195][T10898] IPVS: using max 30 ests per chain, 72000 per kthread [ 391.508022][T10902] netlink: 'syz.0.1942': attribute type 11 has an invalid length. [ 392.417770][ T9] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 392.549692][T10929] netlink: 'syz.0.1953': attribute type 4 has an invalid length. [ 392.562216][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 392.567800][ T9] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 392.570548][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.570579][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 392.570620][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.583119][ T9] usb 6-1: config 0 descriptor?? [ 392.625786][T10929] netlink: 'syz.0.1953': attribute type 4 has an invalid length. [ 393.324097][T10951] Sensor B: ================= START STATUS ================= [ 393.324162][T10951] Sensor B: Test Pattern: 75% Colorbar [ 393.324215][T10951] Sensor B: Show Information: All [ 393.324246][T10951] Sensor B: Vertical Flip: false [ 393.324277][T10951] Sensor B: Horizontal Flip: false [ 393.324308][T10951] Sensor B: Brightness: 128 [ 393.324340][T10951] Sensor B: Contrast: 128 [ 393.324370][T10951] Sensor B: Hue: 0 [ 393.324401][T10951] Sensor B: Saturation: 128 [ 393.324431][T10951] Sensor B: Pixel Rate: 160000000 [ 393.324464][T10951] Sensor B: Horizontal Blanking: 800 [ 393.324495][T10951] Sensor B: Vertical Blanking: 3223 [ 393.324526][T10951] Sensor B: ================== END STATUS ================== [ 393.592251][T10959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.601469][T10959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 393.602485][T10960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.603013][T10960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.010469][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 394.010613][ T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 394.014453][ T9] usb 6-1: USB disconnect, device number 33 [ 394.307083][T10971] netlink: 'syz.6.1970': attribute type 4 has an invalid length. [ 394.321165][T10971] netlink: 'syz.6.1970': attribute type 4 has an invalid length. [ 394.454550][T10976] overlayfs: unescaped trailing colons in lowerdir mount option. [ 395.436052][T10998] netlink: 'syz.5.1980': attribute type 2 has an invalid length. [ 395.436099][T10998] netlink: 164 bytes leftover after parsing attributes in process `syz.5.1980'. [ 395.471414][T10998] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1980'. [ 395.537266][T10998] team0: Port device team_slave_1 removed [ 395.558339][T11001] netlink: 'syz.0.1982': attribute type 4 has an invalid length. [ 395.588283][T11001] netlink: 'syz.0.1982': attribute type 4 has an invalid length. [ 396.045193][T11018] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1987'. [ 396.045967][T11018] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1987'. [ 396.728500][T11031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.742576][T11031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.908974][T11047] validate_nla: 1 callbacks suppressed [ 396.909040][T11047] netlink: 'syz.5.1998': attribute type 4 has an invalid length. [ 396.962237][T11048] netlink: 'syz.5.1998': attribute type 4 has an invalid length. [ 397.219116][T11058] netlink: 'syz.6.2003': attribute type 11 has an invalid length. [ 397.411393][ T4932] Bluetooth: hci2: connection err: -111 [ 397.427261][T11064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.437177][T11064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.650722][T11064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.678005][T11064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.954715][ T5712] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 398.102833][ T5712] usb 7-1: New USB device found, idVendor=0db0, idProduct=5580, bcdDevice= 0.00 [ 398.105134][ T5712] usb 7-1: config index 0 descriptor too short (expected 36, got 27) [ 398.105184][ T5712] usb 7-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 398.107640][ T5712] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 398.107663][ T5712] usb 7-1: Product: syz [ 398.107678][ T5712] usb 7-1: Manufacturer: syz [ 398.120093][ T5712] dvb-usb: found a 'MSI Mega Sky 580 DVB-T USB2.0' in warm state. [ 398.128685][ T5712] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 398.129985][ T5712] dvbdev: DVB: registering new adapter (MSI Mega Sky 580 DVB-T USB2.0) [ 398.130037][ T5712] usb 7-1: media controller created [ 398.183513][ T5712] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 398.390700][ T5712] DVB: Unable to find symbol mt352_attach() [ 398.390807][ T5712] dvb-usb: no frontend was attached by 'MSI Mega Sky 580 DVB-T USB2.0' [ 398.405730][ T5712] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input28 [ 398.411683][ T5712] dvb-usb: schedule remote query interval to 100 msecs. [ 398.411707][ T5712] dvb-usb: MSI Mega Sky 580 DVB-T USB2.0 successfully initialized and connected. [ 398.424260][ T5712] dvb_usb_m920x 7-1:1.0: probe with driver dvb_usb_m920x failed with error -71 [ 398.431453][ T5712] usb 7-1: USB disconnect, device number 33 [ 398.514158][ T5725] m920x_read = error: -19 [ 398.514214][ T5725] dvb-usb: error while querying for an remote control event. [ 398.578626][T11097] netlink: 'syz.5.2016': attribute type 11 has an invalid length. [ 398.635743][ T9] m920x_read = error: -19 [ 398.635810][ T9] dvb-usb: error while querying for an remote control event. [ 398.754241][ T5712] m920x_read = error: -19 [ 398.754878][ T5712] dvb-usb: error while querying for an remote control event. [ 398.861966][ T5712] m920x_read = error: -19 [ 398.862027][ T5712] dvb-usb: error while querying for an remote control event. [ 398.955491][T11108] netlink: 'syz.0.2021': attribute type 2 has an invalid length. [ 398.955549][T11108] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2021'. [ 398.960324][T11108] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2021'. [ 398.989477][T11109] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 399.017629][T11108] team0: Port device team_slave_1 removed [ 399.020796][ T9] m920x_read = error: -19 [ 399.020823][ T9] dvb-usb: error while querying for an remote control event. [ 399.122125][ T5712] m920x_read = error: -19 [ 399.122232][ T5712] dvb-usb: error while querying for an remote control event. [ 399.231975][ T9] m920x_read = error: -19 [ 399.232034][ T9] dvb-usb: error while querying for an remote control event. [ 399.261891][ T5698] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 399.341922][ T9] m920x_read = error: -19 [ 399.341981][ T9] dvb-usb: error while querying for an remote control event. [ 399.412459][ T5698] usb 6-1: Using ep0 maxpacket: 32 [ 399.418407][ T5698] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 399.431345][ T5698] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.439561][ T5698] usb 6-1: Product: syz [ 399.444911][ T5698] usb 6-1: Manufacturer: syz [ 399.449650][ T5698] usb 6-1: SerialNumber: syz [ 399.462012][ T9] m920x_read = error: -19 [ 399.462064][ T9] dvb-usb: error while querying for an remote control event. [ 399.474407][ T5698] usb 6-1: config 0 descriptor?? [ 399.489900][ T5698] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 399.507048][ T4932] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 399.507963][ T4932] Bluetooth: hci2: Injecting HCI hardware error event [ 399.513491][ T4932] Bluetooth: hci2: hardware error 0x00 [ 399.574664][ T9] m920x_read = error: -19 [ 399.574724][ T9] dvb-usb: error while querying for an remote control event. [ 399.684799][ T9] m920x_read = error: -19 [ 399.684855][ T9] dvb-usb: error while querying for an remote control event. [ 399.792394][ T9] m920x_read = error: -19 [ 399.794290][ T9] dvb-usb: error while querying for an remote control event. [ 399.903606][ T9] m920x_read = error: -19 [ 399.903663][ T9] dvb-usb: error while querying for an remote control event. [ 399.952345][T11125] MTRR 1 not used [ 400.021950][ T5725] m920x_read = error: -19 [ 400.022008][ T5725] dvb-usb: error while querying for an remote control event. [ 400.132166][ T5725] m920x_read = error: -19 [ 400.132227][ T5725] dvb-usb: error while querying for an remote control event. [ 400.195336][ T9] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 400.241959][ T5712] m920x_read = error: -19 [ 400.242014][ T5712] dvb-usb: error while querying for an remote control event. [ 400.325713][ T9] usb 7-1: device descriptor read/64, error -71 [ 400.351954][ T5725] m920x_read = error: -19 [ 400.352015][ T5725] dvb-usb: error while querying for an remote control event. [ 400.471984][ T5712] m920x_read = error: -19 [ 400.472045][ T5712] dvb-usb: error while querying for an remote control event. [ 400.574370][ T9] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 400.617382][ T5725] m920x_read = error: -19 [ 400.617446][ T5725] dvb-usb: error while querying for an remote control event. [ 400.672461][ T310] ------------[ cut here ]------------ [ 400.672497][ T310] time_after(jiffies, timeout) [ 400.672524][ T310] WARNING: io_uring/io_uring.c:2356 at io_ring_exit_work+0x4d0/0x9a0, CPU#0: kworker/u8:6/310 [ 400.695485][ T310] Modules linked in: [ 400.699525][ T310] CPU: 0 UID: 0 PID: 310 Comm: kworker/u8:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 400.710574][ T310] Tainted: [L]=SOFTLOCKUP [ 400.714973][ T310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 400.725949][ T310] Workqueue: iou_exit io_ring_exit_work [ 400.733493][ T310] RIP: 0010:io_ring_exit_work+0x4d0/0x9a0 [ 400.739264][ T310] Code: c6 05 dd 09 5a 0f 01 48 c7 c7 00 f1 6a 8c be 25 00 00 00 48 c7 c2 e0 e7 6a 8c e8 db 93 78 00 e9 70 fe ff ff e8 51 e4 9c 00 90 <0f> 0b 90 b8 70 17 00 00 48 89 44 24 38 eb 9a c7 84 24 b0 00 00 00 [ 400.759815][ T310] RSP: 0018:ffffc90003267940 EFLAGS: 00010293 [ 400.766363][ T310] RAX: ffffffff812af24f RBX: 0000000100002676 RCX: ffff8880223c1f40 [ 400.774780][ T310] RDX: 0000000000000000 RSI: fffffffffffffffa RDI: 0000000000000000 [ 400.783183][ T310] RBP: ffffc90003267ad0 R08: ffffc900032678c7 R09: 1ffff9200064cf18 [ 400.791598][ T310] R10: dffffc0000000000 R11: fffff5200064cf19 R12: dffffc0000000000 [ 400.799688][ T310] R13: 0000000100002670 R14: 0000000000002000 R15: ffff888029fa8000 [ 400.807728][ T310] FS: 0000000000000000(0000) GS:ffff88812488a000(0000) knlGS:0000000000000000 [ 400.816738][ T310] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 400.823398][ T310] CR2: 0000200000003000 CR3: 000000006607c000 CR4: 00000000003526f0 [ 400.831591][ T310] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 400.840593][ T310] DR3: 000000000000000c DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 400.849285][ T310] Call Trace: [ 400.852852][ T310] [ 400.855849][ T310] ? __pfx_io_ring_exit_work+0x10/0x10 [ 400.861359][ T310] ? rcu_is_watching+0x16/0xb0 [ 400.866311][ T310] ? process_scheduled_works+0x97a/0x1630 [ 400.872147][ T310] process_scheduled_works+0xc3d/0x1630 [ 400.877755][ T310] ? __pfx_process_scheduled_works+0x10/0x10 [ 400.883851][ T310] ? assign_work+0x3cf/0x5d0 [ 400.888474][ T310] worker_thread+0xa47/0xfb0 [ 400.893174][ T310] ? __kthread_parkme+0x71/0x1f0 [ 400.898170][ T310] kthread+0x38b/0x480 [ 400.902347][ T310] ? __pfx_worker_thread+0x10/0x10 [ 400.907593][ T310] ? __pfx_kthread+0x10/0x10 [ 400.912313][ T310] ret_from_fork+0x514/0xb70 [ 400.916948][ T310] ? __pfx_ret_from_fork+0x10/0x10 [ 400.922177][ T310] ? __switch_to+0xc89/0x1420 [ 400.926934][ T310] ? __pfx_kthread+0x10/0x10 [ 400.931566][ T310] ret_from_fork_asm+0x1a/0x30 [ 400.937415][ T310] [ 400.940474][ T310] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 400.947789][ T310] CPU: 0 UID: 0 PID: 310 Comm: kworker/u8:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 400.958845][ T310] Tainted: [L]=SOFTLOCKUP [ 400.963205][ T310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 400.973297][ T310] Workqueue: iou_exit io_ring_exit_work [ 400.978896][ T310] Call Trace: [ 400.982208][ T310] [ 400.985173][ T310] vpanic+0x56d/0xa60 [ 400.989204][ T310] ? __pfx__printk+0x10/0x10 [ 400.993843][ T310] ? __pfx_vpanic+0x10/0x10 [ 400.998399][ T310] ? is_bpf_text_address+0x292/0x2b0 [ 401.003738][ T310] ? is_bpf_text_address+0x26/0x2b0 [ 401.008969][ T310] panic+0xc5/0xd0 [ 401.012746][ T310] ? __pfx_panic+0x10/0x10 [ 401.017196][ T310] ? ret_from_fork_asm+0x1a/0x30 [ 401.022179][ T310] __warn+0x315/0x4c0 [ 401.026284][ T310] ? io_ring_exit_work+0x4d0/0x9a0 [ 401.031433][ T310] ? io_ring_exit_work+0x4d0/0x9a0 [ 401.036578][ T310] __report_bug+0x276/0x570 [ 401.041210][ T310] ? io_ring_exit_work+0x4d0/0x9a0 [ 401.046352][ T310] ? __pfx___report_bug+0x10/0x10 [ 401.051404][ T310] ? trace_contention_end+0x3d/0x140 [ 401.056707][ T310] ? __mutex_lock+0x30b/0x1550 [ 401.061518][ T310] ? io_ring_exit_work+0x4d0/0x9a0 [ 401.066662][ T310] report_bug+0x16b/0x220 [ 401.071019][ T310] ? io_ring_exit_work+0x4d0/0x9a0 [ 401.076183][ T310] ? io_ring_exit_work+0x4d2/0x9a0 [ 401.081313][ T310] handle_bug+0x9c/0x200 [ 401.085629][ T310] exc_invalid_op+0x1a/0x50 [ 401.090158][ T310] asm_exc_invalid_op+0x1a/0x20 [ 401.095123][ T310] RIP: 0010:io_ring_exit_work+0x4d0/0x9a0 [ 401.100875][ T310] Code: c6 05 dd 09 5a 0f 01 48 c7 c7 00 f1 6a 8c be 25 00 00 00 48 c7 c2 e0 e7 6a 8c e8 db 93 78 00 e9 70 fe ff ff e8 51 e4 9c 00 90 <0f> 0b 90 b8 70 17 00 00 48 89 44 24 38 eb 9a c7 84 24 b0 00 00 00 [ 401.120499][ T310] RSP: 0018:ffffc90003267940 EFLAGS: 00010293 [ 401.126634][ T310] RAX: ffffffff812af24f RBX: 0000000100002676 RCX: ffff8880223c1f40 [ 401.134634][ T310] RDX: 0000000000000000 RSI: fffffffffffffffa RDI: 0000000000000000 [ 401.142630][ T310] RBP: ffffc90003267ad0 R08: ffffc900032678c7 R09: 1ffff9200064cf18 [ 401.150625][ T310] R10: dffffc0000000000 R11: fffff5200064cf19 R12: dffffc0000000000 [ 401.158619][ T310] R13: 0000000100002670 R14: 0000000000002000 R15: ffff888029fa8000 [ 401.166627][ T310] ? io_ring_exit_work+0x4cf/0x9a0 [ 401.171976][ T310] ? __pfx_io_ring_exit_work+0x10/0x10 [ 401.177558][ T310] ? rcu_is_watching+0x16/0xb0 [ 401.182346][ T310] ? process_scheduled_works+0x97a/0x1630 [ 401.188099][ T310] process_scheduled_works+0xc3d/0x1630 [ 401.193691][ T310] ? __pfx_process_scheduled_works+0x10/0x10 [ 401.199708][ T310] ? assign_work+0x3cf/0x5d0 [ 401.204335][ T310] worker_thread+0xa47/0xfb0 [ 401.208957][ T310] ? __kthread_parkme+0x71/0x1f0 [ 401.213937][ T310] kthread+0x38b/0x480 [ 401.218055][ T310] ? __pfx_worker_thread+0x10/0x10 [ 401.223215][ T310] ? __pfx_kthread+0x10/0x10 [ 401.227843][ T310] ret_from_fork+0x514/0xb70 [ 401.232465][ T310] ? __pfx_ret_from_fork+0x10/0x10 [ 401.237608][ T310] ? __switch_to+0xc89/0x1420 [ 401.242333][ T310] ? __pfx_kthread+0x10/0x10 [ 401.246949][ T310] ret_from_fork_asm+0x1a/0x30 [ 401.251943][ T310] [ 401.255142][ T310] Kernel Offset: disabled [ 401.259495][ T310] Rebooting in 86400 seconds..