last executing test programs: 6.29528137s ago: executing program 2 (id=2933): syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x400) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000080201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x5}}, 0x20) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000240)={0x1, 0x91cc, 0x2000000, 0x10000, 0x0, 0x0, 0x80, 0x0, 0xfffffffffffffffe}) mount$fuse(0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r5, 0xc0305602, &(0x7f00000001c0)={0x0, 0x7fffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x48, 0x2, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x8000) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r7, 0x5393, &(0x7f0000000000)) 5.623999484s ago: executing program 4 (id=2937): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x400) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0xffffffffffffffff, 0xfffffd08, 0xf8, @buffer={0x0, 0xd2, &(0x7f0000000480)=""/210}, &(0x7f0000000100)="512b13c530105f3df37e68ecffa6d52083e29ac56391796cbf358d18616ca83725c71e23adf0c988b85be85d8b6a47e603da4e801889f0d8db348e66b0d6c6d965053225f513016cb304fe88ab4823f1b84a6978dbef62f9fae0846db4dae56f7264d1e2db00383ea3c67d5f52b0fcd362f11f85f70a4712d7325c83679435ae2bed3ac437ecaa26af29668620c9f45451719e059de5ab159279fdb0b2af0d00765564d8cd549d167c7b68015c5fe63959177204a101b8cc13b54fd4fb83a104b7", &(0x7f0000000200)=""/147, 0x5, 0x8006, 0x1, &(0x7f00000002c0)}) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000b00)=ANY=[@ANYBLOB="1201000000000008d804dd0000000000000109022400010000a008090400fe01030001000921fffffd0122050009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000040)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="400305000000050426ed60dd258bb81225e3bb260897a92561d7a0870e5f0ef86b8e1f5b6db6ea0fbf8469ca6bc0000000007e44b5ca263f46e039899673c91f59786fedc2f1179f005eaaf32c2f0d2b87ecc99064dfa7321d5483f8b013b67ae733a33b9b62fc4e6beb3d63af2c344c6f4dcdc899bf78cc9a07dde28ed18e51cf674e56fe4a31ba8b8b1c51de1cd889eec382"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200000, 0x489ca46f5a3817a0) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) ioctl$EVIOCGMTSLOTS(r4, 0x8040450a, &(0x7f0000005880)=""/113) ioctl$EVIOCGREP(r4, 0x80084503, 0x0) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f00000006c0)={0x84, &(0x7f00000002c0)=ANY=[@ANYBLOB="202401"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x9) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r6, 0x707, &(0x7f0000000080)={&(0x7f00000000c0)=[{0x7fff, 0x9a51, 0x0, 0x0}], 0x1}) r7 = open_tree(r3, &(0x7f00000000c0)='./file0\x00', 0x101) r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r8, 0xc0d05604, &(0x7f00000002c0)={0x4, @sliced={0x8001, [0x6, 0x6, 0x6, 0x400, 0x8, 0x1ff, 0x3, 0xfffe, 0x79a, 0x6, 0x150a, 0x7fff, 0x7, 0x8, 0x6, 0x2, 0xfffb, 0x7, 0xfffd, 0x7, 0x80, 0x8000, 0x2, 0x4294, 0x4, 0x5, 0xeb95, 0x1, 0xa, 0x4, 0x5, 0x7, 0xf, 0x7f, 0xa62c, 0x7, 0xffff, 0x8, 0x40, 0x9, 0x6, 0x6, 0xf, 0x8, 0x193, 0x5000, 0x7, 0xfcc4], 0x6}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000006a0004002cbd7000fddbdf25020000000000000008000a000200000008000100000000000400090008000500", @ANYRES32=r9, @ANYBLOB="080001000200000008000500", @ANYRES32=0x0, @ANYBLOB="6e1bd87c5c760bd5f4eb205b2f5600fea82638122bd57dbf81d8313169c9faaf08fe2319d34f5d16bd3e8a779e102d51196b2b279a6c13b37c98c867be778c6315790cc3ac03edabc77286f26418375479f454c446208f6557ef9aeacc5d"], 0x44}, 0x1, 0x0, 0x0, 0x24004017}, 0x4048004) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000440)={'wlan1\x00'}) clock_gettime(0x0, &(0x7f0000000100)) 5.330164195s ago: executing program 2 (id=2940): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4ea2, @multicast1}, 0x10) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000040)=0xf733, 0xfe67) recvfrom$inet(r0, 0x0, 0x0, 0x100, 0x0, 0x0) 4.248087s ago: executing program 2 (id=2942): io_submit(0x0, 0x1, &(0x7f0000000100)=[0x0]) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040), 0xe09) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, &(0x7f00000001c0)={0x7, {{0xa, 0x4e20, 0x5, @mcast2, 0x81}}, {{0xa, 0x4e20, 0xfffffffb, @empty, 0x8000}}}, 0x108) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000400)={0x9, 0x100, 0x1, {0xffffffff, 0xbe0, 0xb, 0x10004}}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x11, 0x4, 0xfffffffb) mkdir(&(0x7f0000000480)='./bus\x00', 0x8) syz_emit_ethernet(0x4a, 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="81bd2bbd7000fbdbdf251400000018000780080002"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c8c5}, 0x80) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d001d"], 0x1c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x10}, {{0x0, 0x0, &(0x7f0000000440)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/44, 0x2c}, {&(0x7f0000000840)=""/10, 0xa}], 0x2, &(0x7f0000000580)=""/238, 0xee}, 0x5}], 0x3, 0x2040, 0x0) socket(0x10, 0x3, 0x4) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd00000080190000000000000800", [0x0, 0x3]}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) 4.199190387s ago: executing program 1 (id=2944): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="100a0500231a0500280012800b0001006272696467650000180002800600090009"], 0x48}, 0x1, 0xffffffa1, 0x0, 0x1}, 0x20040040) 3.916058354s ago: executing program 0 (id=2945): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000040000000000000000040000000a20000000000a05000000000001000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000018c0000000c0a01030000000000000000070000080900020073797a31000000000900010073797a3000000000600003805c000080080003400000000250000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002400000000000000010200001800e000100636f6e6e6c696d69740000000c000280080001"], 0x110}}, 0x0) 3.832168112s ago: executing program 0 (id=2946): r0 = socket$inet(0x2, 0x3, 0x4) r1 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) syz_io_uring_setup(0x10c, &(0x7f0000000380)={0x0, 0x0, 0x80, 0x2, 0x8a}, &(0x7f0000000400)=0x0, &(0x7f0000000280)=0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x12, 0xc, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0xfffffff8}, [@alu={0x4, 0x1, 0x7, 0x5, 0x7, 0xfffffffffffffedc, 0xfffffffffffffffc}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x3}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x40}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x6, 0x6b, &(0x7f0000000640)=""/107, 0x40f00, 0x44, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x1, 0xd, 0x2, 0xa}, 0x10, 0xffffffffffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000009c0)={r4, 0x0, 0xa3, 0x4f, &(0x7f0000000780)="f5c4c78526e9b8e2699f897e67e507dd65aa7f87aa952a977bc0e222b00c2d403174ddc9c5813e0169aa83075c7d18672fcb75b2545712b68c35a85f3dd749803147b370a5ef0484c7908f682f14422b758fba39581fc4eaacd0d56e849465885c10ad6660bf533eee0922ea93d81888825bd1583184ea862843a279dcd4aa18488c85f7f54a734cb670b75f4bcaa88496a1ad83a1c1922f977274b00a6d759decd03a", &(0x7f0000000840)=""/79, 0x7, 0x0, 0x33, 0x13, &(0x7f00000008c0)="8153f509e5e185dab95cd2eb10a5168ee88c2c5d139f6c65be9f97ed129218d6b020ede4cdddf1771ad2d03875d4995018ec62", &(0x7f0000000980)="1e75fb6000028b67c2237b65e5064d451f6df2", 0x0, 0x0, 0x80000000}, 0x50) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) r5 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0x47f6, 0x0, 0x2, 0x0, 0x300) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000480)={{{@in6=@empty, @in=@local}}, {{@in=@private}, 0x0, @in=@empty}}, &(0x7f00000001c0)=0xe8) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x49, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x3, 0x0, 0x9, 0xb5e}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r9, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r8, 0x0}]) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 3.823303725s ago: executing program 1 (id=2947): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x40080000, 0x0, 0x0, 0x7, 0xa15, 0x0, 0x0, 0x1}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0/file0\x00', 0x62) (fail_nth: 9) syz_fuse_handle_req(r0, &(0x7f0000006200)="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", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x90, 0x0, 0x8, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0xa000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f000000a200)="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", 0x2000, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x90, 0x0, 0x1, {0xffffffffffffffff, 0x3, 0x1000000, 0xffffffffffffff7a, 0x3ff, 0x803, {0x6, 0x8000000000000002, 0xfffffffffffffff8, 0xfe2b260, 0x8, 0x800000000000, 0x2, 0x689c, 0x81, 0x6000, 0x7, r2, 0x0, 0x4, 0xe4000000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.345281447s ago: executing program 3 (id=2948): close(0x3) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000002000007"], 0x30}}], 0x1, 0x2402c004) 3.13195184s ago: executing program 3 (id=2949): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001900010001000000fdc1df250214000000000000080001000a010101"], 0x2c}, 0x1, 0xba01}, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000380)={0x2, 0x0, 0x4, "3a90b613d18a168c9a1f758d905267a2252fdc2d671d6b6d2d3f9b708ae839a7", 0x32525942}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@ipv4_delrule={0x40, 0x21, 0x4, 0x70bd26, 0x25dfdbfe, {0x2, 0x14, 0x20, 0x0, 0x3, 0x0, 0x0, 0x8, 0x14}, [@FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x12}}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0xfffffffffffffe16, 0xd, 0x4}, @FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0xb84}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettfilter={0x3c, 0x2e, 0x100, 0x70bc25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0xfff1}, {0xe, 0xf}, {0x8, 0xffff}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xc0e}]}, 0x3c}}, 0x0) socket(0x2b, 0x80801, 0x1) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001400010600000000000000002bfa61bc"], 0x14}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x4000081}, 0x20050840) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r5, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x80, 0x34325241, 0x3, [0x2], [0x80ffff], [], [0x400000000000000]}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYRESOCT=0x0, @ANYRES32=0x0, @ANYRES8=0x0], 0x5c}, 0x1, 0x0, 0x0, 0x4c844}, 0x20040040) 3.10358733s ago: executing program 0 (id=2950): syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x400) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000080201, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x5}}, 0x20) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, &(0x7f00000001c0)={0x0, 0x7fffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x48, 0x2, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x8000) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r6, 0x5393, &(0x7f0000000000)) 3.085359217s ago: executing program 4 (id=2951): r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x42800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x1, 0x8001, 0x0, 0xb49, 0x200000000002, 0x9, 0x8, 0x5}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f0000000340)={0x45, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x400, @dev={0xac, 0x14, 0x14, 0xf}}}}, 0x108) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) sendto$inet6(r4, &(0x7f00000001c0)="16000006000000", 0x7, 0x0, &(0x7f000005ffe4)={0xa, 0x4e20, 0xfffffffd, @local}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0xfd, 0x5ae9}, {0x20, 0x7f, 0x6, 0xfffff00c}]}, 0x10) sendmmsg$inet(r6, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x88, 0x1, 0x0, 0x3}, 0xe) shutdown(r4, 0x1) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000000)=0x405e, 0x4) recvmmsg(r4, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000095, 0x0, 0xfffffffffffffffd}]}) r9 = eventfd2(0xa, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000000c0)={0xffffffffffffffff, 0xc8, 0x3, r9}) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 2.912161594s ago: executing program 3 (id=2952): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x9, 0x0, 0x7ffffdbd}]}) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_DEL_MFC(r0, 0x29, 0xcd, 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fsync(r1) 2.719102584s ago: executing program 1 (id=2953): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xa, {"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", 0x1000}}, 0x1006) syz_usb_connect$hid(0x2, 0x3c, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000010000400a1503120000000000010902240001008010000904421d1257ad0ea75d21090033012205f7d7af7d6f5876"], 0x0) ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x4b564d04}]}) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c20000010180c200"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b405000000400004611018000000000066050000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10, 0xffffffffffffffff}, 0x94) r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000001180)={0x0, &(0x7f0000001040)=[@nested_amd_inject_event={0x180, 0x38, {0x3, 0xe4, 0x3, 0x1, 0x2}}, @nested_load_syzos={0x136, 0x58, {0x0, 0x5, [@nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @control_area=0x3a, 0x3, 0x1ff, 0x7}}]}}, @nested_amd_vmload={0x182, 0x18, 0x3}, @wr_crn={0x67, 0x20, {0x4, 0x4}}, @out_dx={0x6a, 0x28, {0x2e06, 0x0, 0xccf}}, @enable_nested={0x12c, 0x18}], 0x108}) ioctl$KVM_GET_MSRS_cpu(r0, 0xc008ae88, &(0x7f00000011c0)={0x7, 0x0, [{0x39e, 0x0, 0x9}, {0xa48, 0x0, 0x400}, {0x8ce, 0x0, 0x80000001}, {0xbbe, 0x0, 0x7f}, {0x2a2, 0x0, 0x5}, {0x2f9, 0x0, 0x1000}, {0x9be, 0x0, 0xfffffffffffffffb}]}) 2.718536607s ago: executing program 3 (id=2954): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8001, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x8000, @empty, 0x9}, 0x1c) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x400) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000400)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[{}], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x1, 0x5, 0x5}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000780)={&(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0], 0x6, 0x7, 0x5, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f00000005c0)={&(0x7f0000000480)=[0x0], &(0x7f00000004c0)=[{}], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x5, 0x1, 0x0, r3}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f0000000640)={0x3, r2, r4, 0xdededede}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], 0x6, 0x0, 0xbbbbbbbb}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000240)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f0000000280)={0x8, r5, r6, 0xcccccccc}) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) recvmmsg(r0, &(0x7f0000001140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/19, 0x18}, 0xfffffffa}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 2.406799417s ago: executing program 0 (id=2955): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14, 0x800) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_open_dev$vim2m(0x0, 0x7, 0x2) connect$unix(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x48c, &(0x7f0000000600)={0x2, 'pimreg\x00', 0x1}, 0x18) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000300)={&(0x7f0000000380), &(0x7f0000000200)=[0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0), 0x0, 0x1, 0x5}) ioctl$DRM_IOCTL_MODE_GETENCODER(r3, 0xc01464a6, &(0x7f0000000140)) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020200020d88be92a7ce4a1f000000000002000100000000b932c390851d000600a2b18b4f0200"/64], 0x68}, 0x1, 0x7}, 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_ENUMOUTPUT(r7, 0xc0485630, &(0x7f0000000100)={0x1, "bb59e5a4a94522d3d3f206fed1bf7761d839ac1f26c31347f597973e01faad5d", 0x3, 0x7, 0x8, 0xc000c, 0x2}) r8 = memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pipe2(&(0x7f00000002c0)={0xffffffffffffffff}, 0x84000) splice(r9, 0x0, r8, &(0x7f0000000140)=0x8008, 0x7ffffffffffffffc, 0x3) 2.312165465s ago: executing program 3 (id=2956): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x140, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0xa, 0x0, 0x0, 0x0, 0x180, 0x0, 0x0, {}, {0x3f}, {}, {}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x4, 0x80, 0x0, 0xfffffffd, 0x26, 0x0, 0x1}) 1.703070076s ago: executing program 3 (id=2957): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000040)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0x300, 0x0, 0x0, 0x1a0, 0xd0, 0x578, 0x578, 0xd0, 0x578, 0x578, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x300}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3, 0x44}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) ioctl$KVM_SET_NESTED_STATE(r2, 0xc048aeca, &(0x7f0000001440)=@vmx={0x8, 0x0, 0x2080, {0x0, 0x10000}, {"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"}}) r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000400)={0x24, &(0x7f0000000040)={0x20, 0xc, 0x7, {0x7, 0x23, "36bd8cc7ad"}}, 0x0, 0x0, 0x0}, 0x0) 1.1661878s ago: executing program 4 (id=2958): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="273eebfecb7c0e923301b61c42cb1d11f41d00bdab2a3d983b065a56", 0x1c}, {&(0x7f0000000140)="10eba9fdb4cbab48929e1af151000000000000000000020000000000", 0x1c}], 0x2) 1.02352503s ago: executing program 4 (id=2959): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'macvlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000003140)=ANY=[@ANYBLOB="4400000010000304000000000000040000000400", @ANYRES32=0x0, @ANYBLOB="00a30000004000001c0012800b0001006d616373656300000c00028005000d000200000008000500", @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) 1.009815061s ago: executing program 0 (id=2960): sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000700)={0x490, 0x12, 0x20, 0x70bd0c, 0x25dfdbfc, {0x26, 0x5, 0x9, 0xf, {0x4e20, 0x4e22, [0x401, 0x101, 0x3ff, 0x290], [0x3, 0x1, 0xf, 0x7ff], 0x0, [0x9, 0xfff]}, 0xa, 0xffffffff}, [@INET_DIAG_REQ_BYTECODE={0x8d, 0x1, "21eccc1a41ed768d49dd2f87e899138a989a1a7bcec5f3440dc85ff1656a1b1b27a0da4fc05708bb64d129be8702e6b58e7dabd405d3d7316ad3a6c81ef273b7d5566f216f277124e60dc977ff7c58a8522a5cb05ed15f45a2c3eedd376e00ce6b847573101741b3cb165c624b5134c4ee932320d6d119f698426f8de37650b7c0aae6fa03c3f443df"}, @INET_DIAG_REQ_BYTECODE={0xad, 0x1, "263e590fcd21e2d122bc6e1a1a67f553aaf25cf7c5a8b6a9fb1194674b464a8f7134c50fb29afac2dbc34a48d93e5e3f2b0774fdf720b314040e6a45ba4f19e70d9eea3317d96bd815ff291c2f64e7f784373244b0b2e57d1e980ebde00aff791b5234412f64b3e7f70596e56f251049b70cb6c78a7180f9a036145814b3b720cd62044272fb7e5d4d30c628f24a2205fd50bc6df3586974a802d5906506fcbfa1cad7982e0f65fe2e"}, @INET_DIAG_REQ_BYTECODE={0x304, 0x1, "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"}]}, 0x490}, 0x1, 0x0, 0x0, 0x240008d0}, 0x800) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="d80000000001050500000000000000000a0000003c0002802c00018014000300fe800088ffffff0000000000000000bb14000400200100000000000000000000000000020c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff02000000000000000000000000000114000400fe800000000000000000000000000029080007400000000044000e8006000340000400002c000180140003000000000000000000000000000000000014000400"], 0xd8}}, 0x0) 956.037262ms ago: executing program 0 (id=2961): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x400) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0xffffffffffffffff, 0xfffffd08, 0xf8, @buffer={0x0, 0xd2, &(0x7f0000000480)=""/210}, &(0x7f0000000100)="512b13c530105f3df37e68ecffa6d52083e29ac56391796cbf358d18616ca83725c71e23adf0c988b85be85d8b6a47e603da4e801889f0d8db348e66b0d6c6d965053225f513016cb304fe88ab4823f1b84a6978dbef62f9fae0846db4dae56f7264d1e2db00383ea3c67d5f52b0fcd362f11f85f70a4712d7325c83679435ae2bed3ac437ecaa26af29668620c9f45451719e059de5ab159279fdb0b2af0d00765564d8cd549d167c7b68015c5fe63959177204a101b8cc13b54fd4fb83a104b7", &(0x7f0000000200)=""/147, 0x5, 0x8006, 0x1, &(0x7f00000002c0)}) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000b00)=ANY=[@ANYBLOB="1201000000000008d804dd0000000000000109022400010000a008090400fe01030001000921fffffd0122050009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000040)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="400305000000050426ed60dd258bb81225e3bb260897a92561d7a0870e5f0ef86b8e1f5b6db6ea0fbf8469ca6bc0000000007e44b5ca263f46e039899673c91f59786fedc2f1179f005eaaf32c2f0d2b87ecc99064dfa7321d5483f8b013b67ae733a33b9b62fc4e6beb3d63af2c344c6f4dcdc899bf78cc9a07dde28ed18e51cf674e56fe4a31ba8b8b1c51de1cd889eec382f0"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200000, 0x489ca46f5a3817a0) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) ioctl$EVIOCGMTSLOTS(r4, 0x8040450a, &(0x7f0000005880)=""/113) ioctl$EVIOCGREP(r4, 0x80084503, 0x0) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f00000006c0)={0x84, &(0x7f00000002c0)=ANY=[@ANYBLOB="202401"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x9) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r6, 0x707, &(0x7f0000000080)={&(0x7f00000000c0)=[{0x7fff, 0x9a51, 0x0, 0x0}], 0x1}) r7 = open_tree(r3, &(0x7f00000000c0)='./file0\x00', 0x101) r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r8, 0xc0d05604, &(0x7f00000002c0)={0x4, @sliced={0x8001, [0x6, 0x6, 0x6, 0x400, 0x8, 0x1ff, 0x3, 0xfffe, 0x79a, 0x6, 0x150a, 0x7fff, 0x7, 0x8, 0x6, 0x2, 0xfffb, 0x7, 0xfffd, 0x7, 0x80, 0x8000, 0x2, 0x4294, 0x4, 0x5, 0xeb95, 0x1, 0xa, 0x4, 0x5, 0x7, 0xf, 0x7f, 0xa62c, 0x7, 0xffff, 0x8, 0x40, 0x9, 0x6, 0x6, 0xf, 0x8, 0x193, 0x5000, 0x7, 0xfcc4], 0x6}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000006a0004002cbd7000fddbdf25020000000000000008000a000200000008000100000000000400090008000500", @ANYRES32=r9, @ANYBLOB="080001000200000008000500", @ANYRES32=0x0, @ANYBLOB="6e1bd87c5c760bd5f4eb205b2f5600fea82638122bd57dbf81d8313169c9faaf08fe2319d34f5d16bd3e8a779e102d51196b2b279a6c13b37c98c867be778c6315790cc3ac03edabc77286f26418375479f454c446208f6557ef9aeacc5d"], 0x44}, 0x1, 0x0, 0x0, 0x24004017}, 0x4048004) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000440)={'wlan1\x00'}) clock_gettime(0x0, &(0x7f0000000100)) 891.714197ms ago: executing program 4 (id=2962): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x18b040, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket(0x2, 0x80805, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) r2 = socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x97, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=r3, @ANYBLOB="ac141410e00000010000000038000000000000000000000007"], 0x58}, 0x0) 850.635174ms ago: executing program 4 (id=2963): bpf$PROG_LOAD(0x5, 0x0, 0xfe3f) socketpair$unix(0x1, 0x3, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000180)=0x5, 0x4) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x0, 0x1000000, 0x5e, 0x200000000000, 0x100000000000006}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002200)=@newtaction={0x4c, 0x1c, 0x1, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x1300}, [{0x38, 0x1, [@m_csum={0x34, 0xd, 0x0, 0x0, {{0x9}, {0x4}, {0x6, 0x6, "940b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x4}}}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2400c845}, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) sendfile(r2, r2, 0x0, 0x40008) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141101) dup(r3) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_GET_FEATURES(r4, 0x8008af00, &(0x7f0000000080)) syz_io_uring_setup(0x118d, &(0x7f00000000c0)={0x0, 0xd00d, 0x0, 0xffffffff, 0x25e}, &(0x7f00000003c0), &(0x7f0000000200)) r5 = syz_usb_connect(0x5, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x103a, 0x1000, 0x103a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) r7 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000240)="cc3a4ac0d0", 0x5}], 0x1) r8 = fspick(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) fsmount(r8, 0x1, 0xc) syz_open_dev$usbmon(&(0x7f0000000380), 0x8, 0x8000) munlock(&(0x7f0000821000/0x3000)=nil, 0x3000) socket$nl_route(0x10, 0x3, 0x0) 753.995175ms ago: executing program 1 (id=2964): ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000012edfffebfa32800000000000703000028feffff620af0fff8ffffff61a4f0ff000000003e040000000000003f000000000000005504000001ed0a002500000017ffffff46040000000000007b0a00fe000000006e04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be3619184e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9e104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d8582755a314d31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f1300010000949b3aab06b1e042ff2164d80c8ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fc8706869ada11390d4dbcf840fa68e7d7071b53ac29df826f8ae6d6e18c1e0600bf870768d5217e9bb5a05d9e224e67f1231bd236ed200073824d93c4e1a0f50a74bb4850486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee6330000000000000000000000000000000000004000000000000000038600008fb854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8265e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347926a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd239e4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cafffe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb66701f4578ba4cb9b706e605a88c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232697526e24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f6a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f80893220800c523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe917d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c827e02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007fe79d2d25e30830b92fca00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d07d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cf026657a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b53208ad8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2cccb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400090300000021911480a876fbba698801937e8b4264eb6f5137bdaa075f1488d22230592a79000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462ea2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783f26d0a52aefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd370c06c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c3500800000087de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af24e2bb7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c796369f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a8f01bc4b73cc31df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21c24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a3c08bfda74a143c855030ae004ac797c575c202d8091eb77565212548ead770d68000000000099347593f67da85d1c962bfb320d1553a74ec3bf003ba62b1784dbf0168a7e85f28b77bdebce96bf386a6dd5df162a16f2b7e8a4de0ffc464a87f91f81866d2ef0af71ebb07a739c3cb1b7000000000000"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x43}, 0x48) 651.94501ms ago: executing program 1 (id=2965): syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x400) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000080201, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x5}}, 0x20) mount$fuse(0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, &(0x7f00000001c0)={0x0, 0x7fffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x48, 0x2, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x8000) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r6, 0x5393, &(0x7f0000000000)) 400.52588ms ago: executing program 2 (id=2966): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000240)=0x5, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xfffe, 0x8, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}, 0xf5ffffff}], 0x400000000000172, 0x4001c00) 275.620334ms ago: executing program 2 (id=2967): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x12000000}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040015}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 203.381181ms ago: executing program 2 (id=2968): r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x42800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x1, 0x8001, 0x0, 0xb49, 0x200000000002, 0x9, 0x8, 0x5}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f0000000340)={0x45, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x400, @dev={0xac, 0x14, 0x14, 0xf}}}}, 0x108) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) sendto$inet6(r4, &(0x7f00000001c0)="16000006000000", 0x7, 0x0, &(0x7f000005ffe4)={0xa, 0x4e20, 0xfffffffd, @local}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0xfd, 0x5ae9}, {0x20, 0x7f, 0x6, 0xfffff00c}]}, 0x10) sendmmsg$inet(r6, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x88, 0x1, 0x0, 0x3}, 0xe) shutdown(r4, 0x1) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000000)=0x405e, 0x4) recvmmsg(r4, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000095, 0x0, 0xfffffffffffffffd}]}) r9 = eventfd2(0xa, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000000c0)={0xffffffffffffffff, 0xc8, 0x3, r9}) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 0s ago: executing program 1 (id=2969): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x3cfcc2, 0x0) sendfile(r2, r2, 0x0, 0x200000) r3 = userfaultfd(0x80001) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x501}) set_mempolicy(0x2, &(0x7f00000001c0)=0x6c76, 0x7) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000040)={0xf, {"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", 0x1000}}, 0x1006) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001440)={0x94, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfffffe01}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3ff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x43}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x24000001}, 0x40880) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x4) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000d76000/0x3000)=nil, 0x800000}) (fail_nth: 1) fsopen(0x0, 0x1) r4 = eventfd(0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000140), 0x10) r6 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679d, 0x80, 0x42000006, 0x20a}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, &(0x7f0000000240), 0x0, 0x2400c0c7, 0x1}) io_uring_enter(r6, 0x199b, 0x100, 0x0, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) kernel console output (not intermixed with test programs): different from the interface descriptor's value: 8 [ 596.387351][T11640] usb 5-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 596.412327][T11640] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.443158][T11640] usb 5-1: config 0 descriptor?? [ 596.699596][T11640] elecom 0003:056E:00FE.0028: unknown main item tag 0x4 [ 596.699905][ T5932] wacom 0003:056A:0010.0027: item fetching failed at offset 5/7 [ 596.718454][ T5932] wacom 0003:056A:0010.0027: parse failed [ 596.725894][ T5932] wacom 0003:056A:0010.0027: probe with driver wacom failed with error -22 [ 596.795225][T11640] elecom 0003:056E:00FE.0028: unknown main item tag 0x6 [ 596.977156][T11640] elecom 0003:056E:00FE.0028: unknown main item tag 0x0 [ 596.993155][T14094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 597.083085][T14094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.113958][T11640] elecom 0003:056E:00FE.0028: unknown main item tag 0x0 [ 597.129345][T11640] elecom 0003:056E:00FE.0028: unknown main item tag 0x0 [ 597.170851][T11640] elecom 0003:056E:00FE.0028: unknown main item tag 0x0 [ 597.193639][T11640] elecom 0003:056E:00FE.0028: unknown main item tag 0x0 [ 597.231504][T11640] elecom 0003:056E:00FE.0028: unknown main item tag 0x0 [ 597.244924][ T29] usb 2-1: USB disconnect, device number 99 [ 597.289047][T11640] elecom 0003:056E:00FE.0028: unknown main item tag 0x0 [ 597.457005][T11640] elecom 0003:056E:00FE.0028: unknown main item tag 0x0 [ 597.683271][ T7063] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 597.705402][ T7063] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 597.727176][ T7063] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 597.749790][T11640] elecom 0003:056E:00FE.0028: hidraw0: USB HID v0.00 Device [HID 056e:00fe] on usb-dummy_hcd.4-1/input0 [ 597.917291][T14124] FAULT_INJECTION: forcing a failure. [ 597.917291][T14124] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 597.924882][ T7063] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 597.938601][T14124] CPU: 1 UID: 0 PID: 14124 Comm: syz.2.2442 Tainted: G L syzkaller #0 PREEMPT(full) [ 597.938633][T14124] Tainted: [L]=SOFTLOCKUP [ 597.938640][T14124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 597.938651][T14124] Call Trace: [ 597.938660][T14124] [ 597.938668][T14124] dump_stack_lvl+0xe8/0x150 [ 597.938702][T14124] should_fail_ex+0x412/0x560 [ 597.938735][T14124] _copy_to_user+0x31/0xb0 [ 597.938759][T14124] simple_read_from_buffer+0xe1/0x170 [ 597.938791][T14124] proc_fail_nth_read+0x1bb/0x230 [ 597.938820][T14124] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 597.938849][T14124] ? rw_verify_area+0x2a6/0x4d0 [ 597.938869][T14124] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 597.938895][T14124] vfs_read+0x20c/0xa70 [ 597.938912][T14124] ? fdget_pos+0x246/0x320 [ 597.938933][T14124] ? __pfx___mutex_lock+0x10/0x10 [ 597.938957][T14124] ? __pfx_vfs_read+0x10/0x10 [ 597.938984][T14124] ? __fget_files+0x2a/0x420 [ 597.939014][T14124] ? __fget_files+0x3a0/0x420 [ 597.939037][T14124] ? __fget_files+0x2a/0x420 [ 597.939070][T14124] ksys_read+0x150/0x270 [ 597.939091][T14124] ? __pfx_ksys_read+0x10/0x10 [ 597.939120][T14124] do_syscall_64+0x14d/0xf80 [ 597.939140][T14124] ? trace_irq_disable+0x3b/0x150 [ 597.939167][T14124] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.939186][T14124] ? clear_bhb_loop+0x40/0x90 [ 597.939207][T14124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.939224][T14124] RIP: 0033:0x7f5586f5cfce [ 597.939241][T14124] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 597.939255][T14124] RSP: 002b:00007f5587d92fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 597.939275][T14124] RAX: ffffffffffffffda RBX: 00007f5587d936c0 RCX: 00007f5586f5cfce [ 597.939286][T14124] RDX: 000000000000000f RSI: 00007f5587d930a0 RDI: 0000000000000009 [ 597.939296][T14124] RBP: 00007f5587d93090 R08: 0000000000000000 R09: 0000000000000000 [ 597.939307][T14124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 597.939316][T14124] R13: 00007f5587216038 R14: 00007f5587215fa0 R15: 00007f558733fa48 [ 597.939346][T14124] [ 598.078780][ T5905] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 598.334925][T14129] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2443'. [ 598.392258][ T7063] usb 3-1: USB disconnect, device number 110 [ 598.849144][ T7063] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 599.040071][ T29] usb 5-1: USB disconnect, device number 89 [ 599.193608][ T7063] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 599.229547][ T7063] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 599.241469][ T7063] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 599.252349][ T7063] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.265235][T14146] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2448'. [ 599.307001][T14137] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 599.324941][ T7063] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 599.703324][ T29] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 599.776337][ T30] audit: type=1326 audit(1774394684.547:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14154 comm="syz.1.2452" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7febe419c799 code=0x0 [ 599.870778][T14160] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2452'. [ 599.890508][ T29] usb 1-1: Using ep0 maxpacket: 16 [ 599.906802][ T29] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 599.924986][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.938918][ T29] usb 1-1: Product: syz [ 599.943499][ T29] usb 1-1: Manufacturer: syz [ 599.948384][ T29] usb 1-1: SerialNumber: syz [ 600.146065][T14166] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2456'. [ 600.169488][T11640] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 600.341633][T11640] usb 2-1: Using ep0 maxpacket: 32 [ 600.477009][T11640] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 600.486008][T11640] usb 2-1: config 0 has no interface number 0 [ 600.508174][T11640] usb 2-1: config 0 interface 184 has no altsetting 0 [ 600.561424][T11640] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 600.571030][T11640] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.590598][T11640] usb 2-1: Product: syz [ 600.787188][T11640] usb 2-1: Manufacturer: syz [ 600.792408][T11640] usb 2-1: SerialNumber: syz [ 600.824780][T11640] usb 2-1: config 0 descriptor?? [ 601.560359][ T5905] usb 3-1: USB disconnect, device number 111 [ 601.756689][T14180] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2460'. [ 602.462101][ T29] usb 1-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 602.499994][ T29] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 602.546916][ T29] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 602.585737][ T29] usb 1-1: media controller created [ 602.654447][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 602.786619][ T29] zl10353_read_register: readreg error (reg=127, ret==-71) [ 603.430864][ T29] dvb_usb_gl861 1-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 603.468312][T11640] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 603.524130][T11640] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 603.537201][ T29] usb 1-1: USB disconnect, device number 102 [ 603.556873][T11640] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 603.595825][T11640] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 603.669921][T11640] usb 2-1: USB disconnect, device number 100 [ 603.862364][T14214] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2473'. [ 603.894494][ T30] audit: type=1326 audit(1774394688.667:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14211 comm="syz.1.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febe419c799 code=0x7ffc0000 [ 603.954213][ T30] audit: type=1326 audit(1774394688.667:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14211 comm="syz.1.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7febe419c799 code=0x7ffc0000 [ 603.977532][ T30] audit: type=1326 audit(1774394688.667:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14211 comm="syz.1.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febe419c799 code=0x7ffc0000 [ 604.057265][T14224] tipc: Started in network mode [ 604.057302][ T30] audit: type=1326 audit(1774394688.707:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14211 comm="syz.1.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7febe419c799 code=0x7ffc0000 [ 604.067657][T14224] tipc: Node identity 9e418c465fec, cluster identity 4711 [ 604.105071][T11640] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 604.122214][T14224] tipc: Enabled bearer , priority 0 [ 604.131209][T14226] syzkaller0: entered promiscuous mode [ 604.136689][T14226] syzkaller0: entered allmulticast mode [ 604.140555][ T30] audit: type=1326 audit(1774394688.837:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14211 comm="syz.1.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febe419c799 code=0x7ffc0000 [ 604.156200][T14214] tipc: Resetting bearer [ 604.199894][ T30] audit: type=1326 audit(1774394688.837:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14211 comm="syz.1.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febe419c799 code=0x7ffc0000 [ 604.258687][T11640] usb 1-1: Using ep0 maxpacket: 8 [ 604.269344][ T30] audit: type=1326 audit(1774394688.887:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14211 comm="syz.1.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7febe419c799 code=0x7ffc0000 [ 604.296768][T11640] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 604.313355][T14230] syzkaller0: entered promiscuous mode [ 604.319471][T11640] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 604.333091][ T30] audit: type=1326 audit(1774394688.887:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14211 comm="syz.1.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febe419c799 code=0x7ffc0000 [ 604.340806][T14230] syzkaller0: entered allmulticast mode [ 604.368545][T11640] usb 1-1: config 0 interface 0 has no altsetting 0 [ 604.394561][T11640] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 604.418856][ T30] audit: type=1326 audit(1774394688.887:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14211 comm="syz.1.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febe419c799 code=0x7ffc0000 [ 604.442821][T11640] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.462108][ T5905] tipc: Resetting bearer [ 604.487166][T11640] usb 1-1: config 0 descriptor?? [ 604.562780][ T5905] tipc: Disabling bearer [ 604.602700][T14238] xt_hashlimit: size too large, truncated to 1048576 [ 604.843517][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 604.878460][ T30] audit: type=1326 audit(1774394689.597:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14241 comm="syz.1.2483" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7febe419c799 code=0x0 [ 604.916904][T14248] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2483'. [ 604.928478][T14221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 604.937339][T14221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 605.001248][T11640] usbhid 1-1:0.0: can't add hid device: -71 [ 605.010559][T11640] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 605.043354][T11640] usb 1-1: USB disconnect, device number 103 [ 605.429075][ T5889] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 605.605938][ T5889] usb 2-1: Using ep0 maxpacket: 32 [ 605.615016][ T5889] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 605.627413][ T5889] usb 2-1: config 0 has no interface number 0 [ 605.645984][ T5889] usb 2-1: config 0 interface 184 has no altsetting 0 [ 605.683574][ T5889] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 605.697799][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.801921][ T5889] usb 2-1: Product: syz [ 605.806171][ T5889] usb 2-1: Manufacturer: syz [ 605.883281][ T5889] usb 2-1: SerialNumber: syz [ 605.910925][ T5889] usb 2-1: config 0 descriptor?? [ 606.268631][ T29] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 606.460121][ T29] usb 1-1: Using ep0 maxpacket: 16 [ 606.467436][ T29] usb 1-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 606.484732][ T29] usb 1-1: config 0 interface 0 has no altsetting 0 [ 606.493433][ T29] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 606.503242][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.515903][ T29] usb 1-1: config 0 descriptor?? [ 607.025717][ T29] mcp2221 0003:04D8:00DD.0029: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 608.153163][ T5889] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 608.168793][ T5889] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 608.181540][ T5889] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 608.194051][ T5889] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 608.383284][ T5889] usb 2-1: USB disconnect, device number 101 [ 608.949500][ T5889] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 609.032949][T14288] tipc: Enabled bearer , priority 0 [ 609.044904][T11640] usb 1-1: USB disconnect, device number 104 [ 609.071260][T14289] syzkaller0: entered promiscuous mode [ 609.076777][T14289] syzkaller0: entered allmulticast mode [ 609.119124][ T29] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 609.129610][ T5889] usb 4-1: Using ep0 maxpacket: 32 [ 609.157288][ T5889] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 609.241492][ T5889] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 609.250896][T14289] tipc: Resetting bearer [ 609.256346][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 609.274122][ T5889] usb 4-1: Product: syz [ 609.278464][ T5889] usb 4-1: Manufacturer: syz [ 609.283701][ T5889] usb 4-1: SerialNumber: syz [ 609.310724][ T29] usb 2-1: Using ep0 maxpacket: 8 [ 609.311678][T14289] tipc: Disabling bearer [ 609.317907][ T5889] usb 4-1: config 0 descriptor?? [ 609.349092][ T29] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 609.361837][T14281] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 609.370867][ T29] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 609.385340][ T29] usb 2-1: config 0 interface 0 has no altsetting 0 [ 609.386192][ T5889] hub 4-1:0.0: bad descriptor, ignoring hub [ 609.400343][ T29] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 609.409959][ T5889] hub 4-1:0.0: probe with driver hub failed with error -5 [ 609.417179][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.433636][ T29] usb 2-1: config 0 descriptor?? [ 609.500696][T14297] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2499'. [ 609.568774][T11640] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 609.720453][T11640] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 609.735885][T11640] usb 1-1: config 0 has no interfaces? [ 609.749624][T11640] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 609.769503][T14299] xt_hashlimit: size too large, truncated to 1048576 [ 609.774488][T11640] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.809195][T11640] usb 1-1: Product: syz [ 609.815281][T11640] usb 1-1: Manufacturer: syz [ 609.821340][T11640] usb 1-1: SerialNumber: syz [ 609.847038][T11640] usb 1-1: config 0 descriptor?? [ 610.079220][T14286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 610.092044][T14295] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2498'. [ 610.101538][T14295] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2498'. [ 610.123533][T14286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 610.173155][ T29] usbhid 2-1:0.0: can't add hid device: -71 [ 610.181792][ T29] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 610.230521][ T29] usb 2-1: USB disconnect, device number 102 [ 610.273327][ T5932] usb 1-1: USB disconnect, device number 105 [ 611.234889][T14316] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2505'. [ 611.458241][T14318] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2504'. [ 611.572717][ T30] audit: type=1326 audit(1774394696.327:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14314 comm="syz.1.2503" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7febe419c799 code=0x0 [ 611.641322][T14325] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2503'. [ 611.786789][T14328] vlan1: entered promiscuous mode [ 611.863535][T14321] input: syz0 as /devices/virtual/input/input59 [ 611.898659][T14321] input: failed to attach handler leds to device input59, error: -6 [ 611.923020][T14332] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2508'. [ 611.969129][ T5932] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 612.129374][ T5932] usb 2-1: Using ep0 maxpacket: 32 [ 612.201726][ T5932] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 612.214291][ T5932] usb 2-1: config 0 has no interface number 0 [ 612.221878][ T5932] usb 2-1: config 0 interface 184 has no altsetting 0 [ 612.262350][ T5932] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 612.278203][ T5932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.289815][ T5932] usb 2-1: Product: syz [ 612.294002][ T5932] usb 2-1: Manufacturer: syz [ 612.307906][ T5932] usb 2-1: SerialNumber: syz [ 612.317166][ T5932] usb 2-1: config 0 descriptor?? [ 612.527772][T14348] xt_hashlimit: size too large, truncated to 1048576 [ 612.663425][T14354] FAULT_INJECTION: forcing a failure. [ 612.663425][T14354] name failslab, interval 1, probability 0, space 0, times 0 [ 612.721690][T14354] CPU: 0 UID: 0 PID: 14354 Comm: syz.4.2514 Tainted: G L syzkaller #0 PREEMPT(full) [ 612.721721][T14354] Tainted: [L]=SOFTLOCKUP [ 612.721729][T14354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 612.721739][T14354] Call Trace: [ 612.721748][T14354] [ 612.721757][T14354] dump_stack_lvl+0xe8/0x150 [ 612.721791][T14354] should_fail_ex+0x412/0x560 [ 612.721824][T14354] should_failslab+0xa8/0x100 [ 612.721850][T14354] __kmalloc_noprof+0xe8/0x760 [ 612.721870][T14354] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 612.721904][T14354] tomoyo_realpath_from_path+0xe3/0x5d0 [ 612.721942][T14354] ? tomoyo_path_number_perm+0x219/0x630 [ 612.721966][T14354] tomoyo_path_number_perm+0x246/0x630 [ 612.721993][T14354] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 612.722020][T14354] ? __lock_acquire+0x6b5/0x2cf0 [ 612.722055][T14354] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 612.722097][T14354] ? __fget_files+0x2a/0x420 [ 612.722127][T14354] ? __fget_files+0x2a/0x420 [ 612.722151][T14354] ? __fget_files+0x3a0/0x420 [ 612.722176][T14354] ? __fget_files+0x2a/0x420 [ 612.722206][T14354] security_file_ioctl+0xc3/0x2a0 [ 612.722231][T14354] __se_sys_ioctl+0x47/0x170 [ 612.722255][T14354] do_syscall_64+0x14d/0xf80 [ 612.722276][T14354] ? trace_irq_disable+0x3b/0x150 [ 612.722301][T14354] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.722318][T14354] ? clear_bhb_loop+0x40/0x90 [ 612.722340][T14354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.722355][T14354] RIP: 0033:0x7fcf2fb9c799 [ 612.722371][T14354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 612.722386][T14354] RSP: 002b:00007fcf30a2c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 612.722405][T14354] RAX: ffffffffffffffda RBX: 00007fcf2fe15fa0 RCX: 00007fcf2fb9c799 [ 612.722419][T14354] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 612.722430][T14354] RBP: 00007fcf30a2c090 R08: 0000000000000000 R09: 0000000000000000 [ 612.722442][T14354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 612.722453][T14354] R13: 00007fcf2fe16038 R14: 00007fcf2fe15fa0 R15: 00007fcf2ff3fa48 [ 612.722483][T14354] [ 612.722521][T14354] ERROR: Out of memory at tomoyo_realpath_from_path. [ 612.788929][ T29] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 613.123890][ T29] usb 1-1: Using ep0 maxpacket: 8 [ 613.132728][ T29] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 613.152255][ T29] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 613.165804][ T29] usb 1-1: config 0 interface 0 has no altsetting 0 [ 613.174343][ T29] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 613.184623][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.223121][ T29] usb 1-1: config 0 descriptor?? [ 613.734197][T14375] netlink: 'syz.4.2519': attribute type 7 has an invalid length. [ 613.986533][T14351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 613.995722][T14351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 614.018327][ T29] usbhid 1-1:0.0: can't add hid device: -71 [ 614.024586][ T29] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 614.073644][ T29] usb 1-1: USB disconnect, device number 106 [ 614.249041][ T5932] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 614.270174][ T5932] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 614.386035][ T5932] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 614.398409][ T5932] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 614.466064][ T5932] usb 2-1: USB disconnect, device number 103 [ 614.489556][ T9] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 614.499431][ T7063] usb 4-1: USB disconnect, device number 98 [ 614.659816][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 614.683167][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 614.710451][ T9] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 614.738650][ T9] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 614.770107][ T9] usb 3-1: Manufacturer: syz [ 614.795156][ T9] usb 3-1: config 0 descriptor?? [ 614.991638][T14392] xt_hashlimit: size too large, truncated to 1048576 [ 615.519184][T14401] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2528'. [ 615.542852][T14401] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2528'. [ 615.647660][T14379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 615.659437][T14379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 615.789142][ T5932] usb 4-1: new low-speed USB device number 99 using dummy_hcd [ 615.929102][ T5932] usb 4-1: device descriptor read/64, error -71 [ 616.092142][ T9] uclogic 0003:256C:006D.002A: v1 frame probing failed: -71 [ 616.108687][ T29] usb 1-1: new full-speed USB device number 107 using dummy_hcd [ 616.109220][ T9] uclogic 0003:256C:006D.002A: failed probing parameters: -71 [ 616.366128][ T9] uclogic 0003:256C:006D.002A: probe with driver uclogic failed with error -71 [ 616.382031][ T9] usb 3-1: USB disconnect, device number 112 [ 616.420238][ T5932] usb 4-1: new low-speed USB device number 100 using dummy_hcd [ 616.510648][ T29] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 616.534506][ T29] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 616.560175][ T5932] usb 4-1: device descriptor read/64, error -71 [ 616.580783][ T29] usb 1-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 616.639229][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.670858][ T29] usb 1-1: config 0 descriptor?? [ 616.678086][ T5932] usb usb4-port1: attempt power cycle [ 617.012979][T14422] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 617.019541][T14422] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 617.058710][T14422] vhci_hcd vhci_hcd.0: Device attached [ 617.074516][ T5932] usb 4-1: new low-speed USB device number 101 using dummy_hcd [ 617.099873][ T5932] usb 4-1: device descriptor read/8, error -71 [ 617.240129][ T30] audit: type=1326 audit(1774394702.017:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14421 comm="syz.1.2534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febe419c799 code=0x7ffc0000 [ 617.284115][ T29] usbhid 1-1:0.0: can't add hid device: -71 [ 617.290191][ T29] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 617.299269][ T9] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 617.324365][ T30] audit: type=1326 audit(1774394702.017:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14421 comm="syz.1.2534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7febe419c799 code=0x7ffc0000 [ 617.347226][ T29] usb 1-1: USB disconnect, device number 107 [ 617.372733][T14422] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(12) [ 617.379352][T14422] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 617.387271][ T5932] usb 4-1: new low-speed USB device number 102 using dummy_hcd [ 617.417888][T14422] vhci_hcd vhci_hcd.0: Device attached [ 617.439413][ T30] audit: type=1326 audit(1774394702.017:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14421 comm="syz.1.2534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febe419c799 code=0x7ffc0000 [ 617.440982][ T5932] usb 4-1: device descriptor read/8, error -71 [ 617.555866][ T30] audit: type=1326 audit(1774394702.037:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14421 comm="syz.1.2534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febe419c799 code=0x7ffc0000 [ 617.641124][ T5932] usb usb4-port1: unable to enumerate USB device [ 617.647738][ T30] audit: type=1326 audit(1774394702.037:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14421 comm="syz.1.2534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7febe419e007 code=0x7ffc0000 [ 617.690370][ T30] audit: type=1326 audit(1774394702.037:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14421 comm="syz.1.2534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7febe415cfce code=0x7ffc0000 [ 617.734533][ T30] audit: type=1326 audit(1774394702.037:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14421 comm="syz.1.2534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7febe415cfce code=0x7ffc0000 [ 617.778728][T14433] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2536'. [ 617.787985][ T30] audit: type=1326 audit(1774394702.037:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14421 comm="syz.1.2534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7febe415cfce code=0x7ffc0000 [ 617.839393][T14427] vhci_hcd: connection closed [ 617.852077][ T30] audit: type=1326 audit(1774394702.037:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14421 comm="syz.1.2534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7febe415cfce code=0x7ffc0000 [ 617.879320][ T30] audit: type=1326 audit(1774394702.087:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14421 comm="syz.1.2534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febe419c799 code=0x7ffc0000 [ 617.904076][ T148] vhci_hcd vhci_hcd.1: stop threads [ 617.919357][ T148] vhci_hcd vhci_hcd.1: release socket [ 617.939887][ T148] vhci_hcd vhci_hcd.1: disconnect device [ 617.996010][T14423] vhci_hcd: connection reset by peer [ 618.009795][ T8851] vhci_hcd vhci_hcd.1: stop threads [ 618.016538][ T8851] vhci_hcd vhci_hcd.1: release socket [ 618.023004][ T8851] vhci_hcd vhci_hcd.1: disconnect device [ 618.068073][T14439] xt_hashlimit: size too large, truncated to 1048576 [ 618.225686][T14441] kAFS: unable to lookup cell 'ÿ' [ 618.234071][T14444] kAFS: unable to lookup cell '(,c¾Ì' [ 618.776775][T14454] FAULT_INJECTION: forcing a failure. [ 618.776775][T14454] name failslab, interval 1, probability 0, space 0, times 0 [ 618.803319][T14454] CPU: 0 UID: 0 PID: 14454 Comm: syz.3.2540 Tainted: G L syzkaller #0 PREEMPT(full) [ 618.803349][T14454] Tainted: [L]=SOFTLOCKUP [ 618.803357][T14454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 618.803368][T14454] Call Trace: [ 618.803375][T14454] [ 618.803383][T14454] dump_stack_lvl+0xe8/0x150 [ 618.803405][T14454] should_fail_ex+0x412/0x560 [ 618.803425][T14454] should_failslab+0xa8/0x100 [ 618.803441][T14454] __kmalloc_noprof+0xe8/0x760 [ 618.803454][T14454] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 618.803472][T14454] tomoyo_realpath_from_path+0xe3/0x5d0 [ 618.803492][T14454] ? tomoyo_path_number_perm+0x219/0x630 [ 618.803505][T14454] tomoyo_path_number_perm+0x246/0x630 [ 618.803520][T14454] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 618.803534][T14454] ? __lock_acquire+0x6b5/0x2cf0 [ 618.803554][T14454] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 618.803576][T14454] ? __fget_files+0x2a/0x420 [ 618.803593][T14454] ? __fget_files+0x2a/0x420 [ 618.803606][T14454] ? __fget_files+0x3a0/0x420 [ 618.803619][T14454] ? __fget_files+0x2a/0x420 [ 618.803635][T14454] security_file_ioctl+0xc3/0x2a0 [ 618.803649][T14454] __se_sys_ioctl+0x47/0x170 [ 618.803662][T14454] do_syscall_64+0x14d/0xf80 [ 618.803674][T14454] ? trace_irq_disable+0x3b/0x150 [ 618.803688][T14454] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.803698][T14454] ? clear_bhb_loop+0x40/0x90 [ 618.803711][T14454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.803721][T14454] RIP: 0033:0x7f7ef979c799 [ 618.803732][T14454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 618.803741][T14454] RSP: 002b:00007f7efa67c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 618.803754][T14454] RAX: ffffffffffffffda RBX: 00007f7ef9a15fa0 RCX: 00007f7ef979c799 [ 618.803762][T14454] RDX: 0000200000000000 RSI: 0000000000005393 RDI: 0000000000000008 [ 618.803769][T14454] RBP: 00007f7efa67c090 R08: 0000000000000000 R09: 0000000000000000 [ 618.803776][T14454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 618.803782][T14454] R13: 00007f7ef9a16038 R14: 00007f7ef9a15fa0 R15: 00007f7ef9b3fa48 [ 618.803797][T14454] [ 618.804372][T14454] ERROR: Out of memory at tomoyo_realpath_from_path. [ 619.203716][T14462] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2543'. [ 619.636345][T14482] xt_hashlimit: size too large, truncated to 1048576 [ 619.688640][ T5889] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 619.960865][ T5889] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 620.013027][ T5889] usb 1-1: config 0 has no interfaces? [ 620.030713][ T5889] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 620.040078][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.055770][ T5889] usb 1-1: Product: syz [ 620.070448][ T5889] usb 1-1: Manufacturer: syz [ 620.075117][ T5889] usb 1-1: SerialNumber: syz [ 620.089673][ T5889] usb 1-1: config 0 descriptor?? [ 620.331279][T14476] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2546'. [ 620.341137][T14476] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2546'. [ 620.445257][ T5932] usb 1-1: USB disconnect, device number 108 [ 621.024481][T14499] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2553'. [ 621.039200][T14499] netem: invalid attributes len -7 [ 621.044452][T14499] netem: change failed [ 621.162374][T14505] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2554'. [ 621.220498][T14505] syzkaller0: entered promiscuous mode [ 621.235168][T14505] syzkaller0: entered allmulticast mode [ 621.308616][ T5889] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 621.319086][ T7063] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 621.427993][T14509] FAULT_INJECTION: forcing a failure. [ 621.427993][T14509] name failslab, interval 1, probability 0, space 0, times 0 [ 621.441381][T14509] CPU: 0 UID: 0 PID: 14509 Comm: syz.3.2555 Tainted: G L syzkaller #0 PREEMPT(full) [ 621.441404][T14509] Tainted: [L]=SOFTLOCKUP [ 621.441409][T14509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 621.441415][T14509] Call Trace: [ 621.441421][T14509] [ 621.441426][T14509] dump_stack_lvl+0xe8/0x150 [ 621.441450][T14509] should_fail_ex+0x412/0x560 [ 621.441470][T14509] should_failslab+0xa8/0x100 [ 621.441492][T14509] __kmalloc_noprof+0xe8/0x760 [ 621.441504][T14509] ? tomoyo_encode+0x28b/0x550 [ 621.441525][T14509] tomoyo_encode+0x28b/0x550 [ 621.441542][T14509] tomoyo_realpath_from_path+0x58d/0x5d0 [ 621.441562][T14509] ? tomoyo_path_number_perm+0x219/0x630 [ 621.441575][T14509] tomoyo_path_number_perm+0x246/0x630 [ 621.441590][T14509] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 621.441604][T14509] ? __lock_acquire+0x6b5/0x2cf0 [ 621.441624][T14509] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 621.441647][T14509] ? __fget_files+0x2a/0x420 [ 621.441665][T14509] ? __fget_files+0x2a/0x420 [ 621.441678][T14509] ? __fget_files+0x3a0/0x420 [ 621.441691][T14509] ? __fget_files+0x2a/0x420 [ 621.441707][T14509] security_file_ioctl+0xc3/0x2a0 [ 621.441721][T14509] __se_sys_ioctl+0x47/0x170 [ 621.441735][T14509] do_syscall_64+0x14d/0xf80 [ 621.441747][T14509] ? trace_irq_disable+0x3b/0x150 [ 621.441762][T14509] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.441772][T14509] ? clear_bhb_loop+0x40/0x90 [ 621.441786][T14509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.441796][T14509] RIP: 0033:0x7f7ef979c799 [ 621.441809][T14509] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 621.441818][T14509] RSP: 002b:00007f7efa67c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 621.441831][T14509] RAX: ffffffffffffffda RBX: 00007f7ef9a15fa0 RCX: 00007f7ef979c799 [ 621.441839][T14509] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 621.441845][T14509] RBP: 00007f7efa67c090 R08: 0000000000000000 R09: 0000000000000000 [ 621.441852][T14509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 621.441857][T14509] R13: 00007f7ef9a16038 R14: 00007f7ef9a15fa0 R15: 00007f7ef9b3fa48 [ 621.441873][T14509] [ 621.441887][T14509] ERROR: Out of memory at tomoyo_realpath_from_path. [ 621.468959][ T5889] usb 5-1: Using ep0 maxpacket: 16 [ 621.489144][ T7063] usb 2-1: Using ep0 maxpacket: 32 [ 621.523280][ T5889] usb 5-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7 [ 621.671386][ T7063] usb 2-1: config 0 has an invalid interface number: 202 but max is 1 [ 621.710716][ T7063] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 621.722485][ T7063] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 621.735799][ T7063] usb 2-1: config 0 has no interface number 0 [ 621.742901][ T7063] usb 2-1: too many endpoints for config 0 interface 202 altsetting 87: 182, using maximum allowed: 30 [ 621.756091][ T7063] usb 2-1: config 0 interface 202 altsetting 87 endpoint 0x2 has invalid maxpacket 255, setting to 64 [ 621.768617][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.778017][ T5889] usb 5-1: Product: syz [ 621.786108][ T5889] usb 5-1: Manufacturer: syz [ 621.794843][ T5889] usb 5-1: SerialNumber: syz [ 621.794846][ T7063] usb 2-1: config 0 interface 202 altsetting 87 has 1 endpoint descriptor, different from the interface descriptor's value: 182 [ 621.794874][ T7063] usb 2-1: config 0 interface 202 has no altsetting 0 [ 621.841796][ T5889] usb 5-1: config 0 descriptor?? [ 621.852760][ T5889] hub 5-1:0.0: bad descriptor, ignoring hub [ 621.855885][ T7063] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.2b [ 621.871487][ T7063] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.883414][ T7063] usb 2-1: Product: syz [ 621.884762][ T5889] hub 5-1:0.0: probe with driver hub failed with error -5 [ 621.888098][ T7063] usb 2-1: Manufacturer: syz [ 621.902149][ T7063] usb 2-1: SerialNumber: syz [ 621.952194][ T7063] usb 2-1: config 0 descriptor?? [ 622.015318][ T7063] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 622.103606][T14500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 622.119525][T14499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 622.144258][T14500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 622.167900][T14501] loop2: detected capacity change from 0 to 7 [ 622.197653][T14501] loop2: [POWERTEC] p1 p2 [ 622.203448][T14501] loop2: p1 size 131072 extends beyond EOD, truncated [ 622.263094][T14499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 622.277803][T14501] loop2: p2 start 16974337 is beyond EOD, truncated [ 622.343724][ T5889] usb 2-1: USB disconnect, device number 104 [ 622.345876][ T8851] usb 2-1: Failed to submit usb control message: -71 [ 622.365765][ T8851] usb 2-1: unable to send the bmi data to the device: -71 [ 622.390983][ T29] usb 5-1: USB disconnect, device number 90 [ 622.397061][ T8851] usb 2-1: unable to get target info from device [ 622.397090][ T8851] usb 2-1: could not get target info (-71) [ 622.459949][ T9] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 622.472907][ T8851] usb 2-1: could not probe fw (-71) [ 622.495750][ T5827] udevd[5827]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 622.817589][T14525] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2559'. [ 623.178142][T14536] xt_hashlimit: size too large, truncated to 1048576 [ 623.804920][T14545] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2566'. [ 624.316149][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.324470][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.922323][T14562] blktrace: Concurrent blktraces are not allowed on nullb0 [ 625.101978][T14567] netlink: 39 bytes leftover after parsing attributes in process `syz.3.2572'. [ 625.111207][T14567] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2572'. [ 625.327436][ T7063] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 625.489379][ T7063] usb 1-1: Using ep0 maxpacket: 32 [ 625.497225][ T7063] usb 1-1: unable to get BOS descriptor or descriptor too short [ 625.514672][ T7063] usb 1-1: config 1 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 625.577213][ T7063] usb 1-1: config 1 interface 0 has no altsetting 0 [ 625.606982][ T7063] usb 1-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.40 [ 625.617153][ T7063] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.633686][ T7063] usb 1-1: Product: syz [ 625.647232][ T7063] usb 1-1: Manufacturer: syz [ 625.763753][ T7063] usb 1-1: SerialNumber: syz [ 625.894712][T14579] xt_hashlimit: size too large, truncated to 1048576 [ 626.117218][ T7063] appletouch 1-1:1.0: Failed to read mode from device. [ 626.131577][ T7063] appletouch 1-1:1.0: probe with driver appletouch failed with error -5 [ 626.182924][ T7063] usb 1-1: USB disconnect, device number 109 [ 626.647407][ T7063] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 626.846572][ T7063] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 626.867123][ T7063] usb 4-1: config 0 has no interface number 0 [ 626.888045][ T7063] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 626.902816][ T7063] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 627.142989][ T7063] usb 4-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 627.159974][ T7063] usb 4-1: New USB device found, idVendor=04d9, idProduct=a0c2, bcdDevice= 0.00 [ 627.170442][ T7063] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.213612][ T7063] usb 4-1: config 0 descriptor?? [ 627.214665][T14604] FAULT_INJECTION: forcing a failure. [ 627.214665][T14604] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 627.497443][T14612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 627.499753][ T7063] holtek_mouse 0003:04D9:A0C2.002B: item fetching failed at offset 2/41 [ 627.529483][T14612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 627.538763][T14604] CPU: 1 UID: 0 PID: 14604 Comm: syz.1.2585 Tainted: G L syzkaller #0 PREEMPT(full) [ 627.538794][T14604] Tainted: [L]=SOFTLOCKUP [ 627.538802][T14604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 627.538814][T14604] Call Trace: [ 627.538823][T14604] [ 627.538832][T14604] dump_stack_lvl+0xe8/0x150 [ 627.538868][T14604] should_fail_ex+0x412/0x560 [ 627.538901][T14604] _copy_to_user+0x31/0xb0 [ 627.538927][T14604] simple_read_from_buffer+0xe1/0x170 [ 627.538959][T14604] proc_fail_nth_read+0x1bb/0x230 [ 627.538989][T14604] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 627.539019][T14604] ? rw_verify_area+0x2a6/0x4d0 [ 627.539048][T14604] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 627.539072][T14604] vfs_read+0x20c/0xa70 [ 627.539087][T14604] ? fdget_pos+0x246/0x320 [ 627.539102][T14604] ? __pfx_do_recvmmsg+0x10/0x10 [ 627.539130][T14604] ? __pfx___mutex_lock+0x10/0x10 [ 627.539151][T14604] ? __pfx_vfs_read+0x10/0x10 [ 627.539171][T14604] ? __fget_files+0x2a/0x420 [ 627.539200][T14604] ? __fget_files+0x3a0/0x420 [ 627.539222][T14604] ? __fget_files+0x2a/0x420 [ 627.539253][T14604] ksys_read+0x150/0x270 [ 627.539274][T14604] ? __pfx_ksys_read+0x10/0x10 [ 627.539303][T14604] do_syscall_64+0x14d/0xf80 [ 627.539323][T14604] ? trace_irq_disable+0x3b/0x150 [ 627.539347][T14604] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.539363][T14604] ? clear_bhb_loop+0x40/0x90 [ 627.539384][T14604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.539402][T14604] RIP: 0033:0x7febe415cfce [ 627.539421][T14604] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 627.539436][T14604] RSP: 002b:00007febe50f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 627.539455][T14604] RAX: ffffffffffffffda RBX: 00007febe50f66c0 RCX: 00007febe415cfce [ 627.539468][T14604] RDX: 000000000000000f RSI: 00007febe50f60a0 RDI: 0000000000000004 [ 627.539478][T14604] RBP: 00007febe50f6090 R08: 0000000000000000 R09: 0000000000000000 [ 627.539488][T14604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 627.539499][T14604] R13: 00007febe4416038 R14: 00007febe4415fa0 R15: 00007febe453fa48 [ 627.539526][T14604] [ 627.593263][ T7063] holtek_mouse 0003:04D9:A0C2.002B: hid parse failed: -22 [ 628.129358][ T9] usb 2-1: new low-speed USB device number 105 using dummy_hcd [ 628.203953][ T7063] holtek_mouse 0003:04D9:A0C2.002B: probe with driver holtek_mouse failed with error -22 [ 628.264749][ T7063] usb 4-1: USB disconnect, device number 103 [ 628.299208][ T9] usb 2-1: Invalid ep0 maxpacket: 64 [ 628.348609][ T29] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 628.431471][ T9] usb 2-1: new low-speed USB device number 106 using dummy_hcd [ 628.498608][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 628.515344][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 628.534668][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 628.595866][ T29] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 628.641826][ T9] usb 2-1: Invalid ep0 maxpacket: 64 [ 628.651945][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 628.658141][ T9] usb usb2-port1: attempt power cycle [ 628.705587][ T29] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 628.734215][ T29] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 628.769004][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.783162][ T29] usb 5-1: config 0 descriptor?? [ 628.821405][T14616] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 629.049422][ T9] usb 2-1: new low-speed USB device number 107 using dummy_hcd [ 629.090784][ T9] usb 2-1: Invalid ep0 maxpacket: 64 [ 629.239483][ T9] usb 2-1: new low-speed USB device number 108 using dummy_hcd [ 629.280423][ T9] usb 2-1: Invalid ep0 maxpacket: 64 [ 629.288437][ T9] usb usb2-port1: unable to enumerate USB device [ 629.439069][ T7063] usb 1-1: new full-speed USB device number 110 using dummy_hcd [ 629.781230][ T7063] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 629.791424][ T7063] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 629.823746][ T7063] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 629.865915][ T7063] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 629.937164][ T7063] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 629.987893][ T7063] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 630.061390][ T7063] usb 1-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 630.076653][ T7063] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.089112][ T7063] usb 1-1: Product: syz [ 630.093311][ T7063] usb 1-1: Manufacturer: syz [ 630.097991][ T7063] usb 1-1: SerialNumber: syz [ 630.106343][ T7063] usb 1-1: config 0 descriptor?? [ 630.123636][ T5828] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 630.164698][ T7063] ti_usb_3410_5052 1-1:0.0: TI USB 5052 2 port adapter converter detected [ 630.174244][ T7063] ti_usb_3410_5052 1-1:0.0: missing endpoints [ 630.190340][ T5824] usb 5-1: USB disconnect, device number 91 [ 630.768364][T14656] netlink: 'syz.2.2599': attribute type 30 has an invalid length. [ 632.389793][ T5824] usb 1-1: USB disconnect, device number 110 [ 633.813688][T14697] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2610'. [ 633.969165][ T5824] usb 3-1: new full-speed USB device number 113 using dummy_hcd [ 634.130342][ T5824] usb 3-1: not running at top speed; connect to a high speed hub [ 634.150623][ T5824] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 634.161393][ T5824] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 634.388273][ T5824] usb 3-1: config 1 has no interface number 1 [ 634.396518][ T5824] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 634.455302][ T5824] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 634.509201][ T5824] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 634.519101][ T5824] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.527257][ T5824] usb 3-1: Product: syz [ 634.559987][ T5824] usb 3-1: Manufacturer: syz [ 634.567469][ T5824] usb 3-1: SerialNumber: syz [ 634.602248][T14708] netlink: 'syz.0.2612': attribute type 3 has an invalid length. [ 634.778334][T14708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2612'. [ 634.936196][ T5824] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 634.944593][ T5824] usb 3-1: 2:1: invalid format type 0x1022 is detected, processed as PCM [ 634.983317][ T5824] usb 3-1: 2:1 : sample bitwidth 43 in over sample bytes 4 [ 635.042840][T14713] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2613'. [ 635.130771][ T5824] usb 3-1: USB disconnect, device number 113 [ 635.282939][ T5823] udevd[5823]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 635.484178][T14719] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2616'. [ 635.797533][T14732] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2620'. [ 635.877639][T14733] bond6: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 635.917758][T14733] bond6 (unregistering): Released all slaves [ 637.778585][T14774] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2632'. [ 637.829487][T14774] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2632'. [ 637.930349][T14774] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 638.098995][ T5824] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 638.249184][ T5824] usb 5-1: Using ep0 maxpacket: 32 [ 638.265419][ T5824] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 638.307623][T14782] FAULT_INJECTION: forcing a failure. [ 638.307623][T14782] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 638.331079][ T5824] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 638.332766][T14782] CPU: 1 UID: 0 PID: 14782 Comm: syz.2.2635 Tainted: G L syzkaller #0 PREEMPT(full) [ 638.332793][T14782] Tainted: [L]=SOFTLOCKUP [ 638.332801][T14782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 638.332812][T14782] Call Trace: [ 638.332820][T14782] [ 638.332829][T14782] dump_stack_lvl+0xe8/0x150 [ 638.332864][T14782] should_fail_ex+0x412/0x560 [ 638.332897][T14782] _copy_from_user+0x2d/0xb0 [ 638.332919][T14782] scsi_ioctl+0x4d1/0x2130 [ 638.333046][T14782] ? __pfx_scsi_ioctl+0x10/0x10 [ 638.333090][T14782] ? kasan_quarantine_put+0xbb/0x1f0 [ 638.333129][T14782] ? scsi_block_when_processing_errors+0x3b6/0x480 [ 638.333151][T14782] ? __pfx_scsi_block_when_processing_errors+0x10/0x10 [ 638.333187][T14782] sg_ioctl+0x112f/0x2220 [ 638.333259][T14782] ? __pfx_sg_ioctl+0x10/0x10 [ 638.333284][T14782] ? __fget_files+0x2a/0x420 [ 638.333313][T14782] ? __fget_files+0x2a/0x420 [ 638.333337][T14782] ? __fget_files+0x3a0/0x420 [ 638.333360][T14782] ? __fget_files+0x2a/0x420 [ 638.333389][T14782] ? bpf_lsm_file_ioctl+0x9/0x20 [ 638.333413][T14782] ? __pfx_sg_ioctl+0x10/0x10 [ 638.333436][T14782] __se_sys_ioctl+0xfc/0x170 [ 638.333461][T14782] do_syscall_64+0x14d/0xf80 [ 638.333484][T14782] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.333503][T14782] ? clear_bhb_loop+0x40/0x90 [ 638.333525][T14782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.333543][T14782] RIP: 0033:0x7f5586f9c799 [ 638.333562][T14782] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 638.333577][T14782] RSP: 002b:00007f5587d93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 638.333598][T14782] RAX: ffffffffffffffda RBX: 00007f5587215fa0 RCX: 00007f5586f9c799 [ 638.333612][T14782] RDX: 0000200000000000 RSI: 0000000000005393 RDI: 0000000000000008 [ 638.333624][T14782] RBP: 00007f5587d93090 R08: 0000000000000000 R09: 0000000000000000 [ 638.333635][T14782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 638.333646][T14782] R13: 00007f5587216038 R14: 00007f5587215fa0 R15: 00007f558733fa48 [ 638.333676][T14782] [ 638.518633][ T29] usb 1-1: new full-speed USB device number 111 using dummy_hcd [ 638.806221][ T5824] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 638.816242][ T5824] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.819017][ T29] usb 1-1: device descriptor read/64, error -71 [ 638.825447][ T5824] usb 5-1: Product: syz [ 638.825470][ T5824] usb 5-1: Manufacturer: syz [ 638.825486][ T5824] usb 5-1: SerialNumber: syz [ 638.828350][ T5824] usb 5-1: config 0 descriptor?? [ 638.857304][ T5824] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input62 [ 638.912787][ T5824] usbtouchscreen 5-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -90 [ 638.943859][T14785] vlan5: entered promiscuous mode [ 639.021664][ T5824] usbtouchscreen 5-1:0.0: probe with driver usbtouchscreen failed with error -90 [ 639.099803][ T29] usb 1-1: new full-speed USB device number 112 using dummy_hcd [ 639.272477][T14777] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2632'. [ 639.312787][ T9] usb 5-1: USB disconnect, device number 92 [ 639.328671][ T29] usb 1-1: device descriptor read/64, error -71 [ 639.461738][ T29] usb usb1-port1: attempt power cycle [ 639.659176][ T5824] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 639.819824][ T29] usb 1-1: new full-speed USB device number 113 using dummy_hcd [ 639.838999][ T5824] usb 3-1: Using ep0 maxpacket: 32 [ 639.849193][ T29] usb 1-1: device descriptor read/8, error -71 [ 639.856448][ T5824] usb 3-1: unable to get BOS descriptor or descriptor too short [ 639.876015][ T5824] usb 3-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 639.909370][ T5824] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.974031][ T5824] usb 3-1: Product: syz [ 640.021987][ T5824] usb 3-1: Manufacturer: syz [ 640.026681][ T5824] usb 3-1: SerialNumber: syz [ 640.178725][ T29] usb 1-1: new full-speed USB device number 114 using dummy_hcd [ 640.219362][ T29] usb 1-1: device descriptor read/8, error -71 [ 640.347977][ T29] usb usb1-port1: unable to enumerate USB device [ 640.383699][ T5824] usb 3-1: USB disconnect, device number 114 [ 640.640572][T14807] blktrace: Concurrent blktraces are not allowed on nullb0 [ 640.829371][T14813] wg1: entered promiscuous mode [ 640.981247][ T5824] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 641.139691][ T5824] usb 4-1: Using ep0 maxpacket: 32 [ 641.165545][ T5824] usb 4-1: unable to get BOS descriptor or descriptor too short [ 641.203824][ T5824] usb 4-1: config 1 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 641.243096][ T5824] usb 4-1: config 1 interface 0 has no altsetting 0 [ 641.274429][ T5824] usb 4-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.40 [ 641.315318][ T5824] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.372501][ T5824] usb 4-1: Product: syz [ 641.384630][ T5824] usb 4-1: Manufacturer: syz [ 641.402555][ T5824] usb 4-1: SerialNumber: syz [ 641.789284][ T5824] appletouch 4-1:1.0: Failed to read mode from device. [ 641.796402][ T5824] appletouch 4-1:1.0: probe with driver appletouch failed with error -5 [ 641.867642][ T5824] usb 4-1: USB disconnect, device number 104 [ 642.976487][T14853] syz_tun: left allmulticast mode [ 642.995651][T14853] syz_tun: left promiscuous mode [ 643.056701][T14853] bridge0: port 1(syz_tun) entered disabled state [ 643.168281][T14853] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 643.358832][ T7063] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 643.499841][ T7063] usb 5-1: device descriptor read/64, error -71 [ 643.628980][ T5824] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 643.859083][ T7063] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 643.962542][ T5824] usb 3-1: unable to get BOS descriptor or descriptor too short [ 643.974487][ T5824] usb 3-1: config 129 has an invalid interface number: 135 but max is 0 [ 644.033422][ T7063] usb 5-1: device descriptor read/64, error -71 [ 644.058988][ T5824] usb 3-1: config 129 has an invalid interface number: 5 but max is 0 [ 644.087062][ T5824] usb 3-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 644.123100][ T5824] usb 3-1: config 129 has no interface number 0 [ 644.143748][ T5824] usb 3-1: config 129 has no interface number 1 [ 644.159047][ T7063] usb usb5-port1: attempt power cycle [ 644.168627][ T5824] usb 3-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 644.220747][ T5824] usb 3-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 644.253596][ T5824] usb 3-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 644.298955][ T5824] usb 3-1: config 129 interface 135 has no altsetting 0 [ 644.312104][ T5824] usb 3-1: config 129 interface 5 has no altsetting 0 [ 644.331613][ T5824] usb 3-1: string descriptor 0 read error: -22 [ 644.337981][ T5824] usb 3-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 644.354759][ T5824] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.441359][ T5824] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 644.454415][ T5824] usb 3-1: MIDIStreaming interface descriptor not found [ 644.514274][ T7063] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 644.575140][ T7063] usb 5-1: device descriptor read/8, error -71 [ 644.644959][T14856] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2659'. [ 644.842807][ T7063] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 644.852057][ T5905] usb 3-1: USB disconnect, device number 115 [ 644.896414][T14856] macvlan1 (unregistering): left allmulticast mode [ 644.903305][ T7063] usb 5-1: device descriptor read/8, error -71 [ 644.943073][T14856] macvlan1 (unregistering): left promiscuous mode [ 644.952097][ T29] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 645.029687][ T7063] usb usb5-port1: unable to enumerate USB device [ 645.118826][ T29] usb 1-1: Using ep0 maxpacket: 32 [ 645.126367][ T29] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 645.178263][ T29] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 645.187836][ T29] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 645.215627][ T29] usb 1-1: Product: syz [ 645.237117][ T29] usb 1-1: Manufacturer: syz [ 645.308754][ T29] usb 1-1: SerialNumber: syz [ 645.333112][ T29] usb 1-1: config 0 descriptor?? [ 645.339581][T14875] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 645.352681][ T29] hub 1-1:0.0: bad descriptor, ignoring hub [ 645.371475][ T29] hub 1-1:0.0: probe with driver hub failed with error -5 [ 645.505045][T14887] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2667'. [ 645.766651][T14892] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2668'. [ 646.002643][T14896] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 646.049777][T14896] tipc: Enabled bearer , priority 0 [ 646.088334][T14896] syzkaller0: entered promiscuous mode [ 646.094967][T14896] syzkaller0: entered allmulticast mode [ 646.106063][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 646.106084][ T30] audit: type=1326 audit(1774394730.877:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14895 comm="syz.2.2670" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5586f9c799 code=0x0 [ 646.823707][T14895] tipc: Resetting bearer [ 647.001674][T14895] tipc: Disabling bearer [ 647.261312][T14915] syzkaller0: entered promiscuous mode [ 647.266924][T14915] syzkaller0: entered allmulticast mode [ 648.116509][T14932] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2682'. [ 648.281950][ T5905] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 648.357938][T14938] fuse: Bad value for 'fd' [ 648.426689][ T5905] usb 3-1: device descriptor read/64, error -71 [ 648.688741][ T5905] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 648.878625][ T5905] usb 3-1: device descriptor read/64, error -71 [ 648.989287][ T5905] usb usb3-port1: attempt power cycle [ 649.338615][ T5905] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 649.365764][ T5905] usb 3-1: device descriptor read/8, error -71 [ 649.629254][ T5905] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 649.680750][ T5905] usb 3-1: device descriptor read/8, error -71 [ 649.799264][T14961] fuse: Bad value for 'fd' [ 649.804287][ T5905] usb usb3-port1: unable to enumerate USB device [ 649.954703][ T7063] usb 1-1: USB disconnect, device number 115 [ 650.396239][T14976] fuse: Invalid rootmode [ 650.429379][ T5905] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 650.472400][T14978] fuse: Bad value for 'fd' [ 650.559229][ T29] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 650.604724][ T5905] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 650.627042][ T5905] usb 2-1: config 0 has no interfaces? [ 650.654270][ T5905] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 650.673751][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.688960][ T5905] usb 2-1: Product: syz [ 650.698993][ T5905] usb 2-1: Manufacturer: syz [ 650.829780][ T5905] usb 2-1: SerialNumber: syz [ 650.836257][ T29] usb 5-1: too many configurations: 100, using maximum allowed: 8 [ 650.845978][ T29] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 650.860528][ T5905] usb 2-1: config 0 descriptor?? [ 650.865927][ T29] usb 5-1: can't read configurations, error -22 [ 651.008606][ T29] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 651.089171][T14970] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2694'. [ 651.100164][T14970] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2694'. [ 651.200147][ T29] usb 5-1: too many configurations: 100, using maximum allowed: 8 [ 651.221216][ T29] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 651.230032][ T29] usb 5-1: can't read configurations, error -22 [ 651.274642][ T29] usb usb5-port1: attempt power cycle [ 651.370614][ T7063] usb 2-1: USB disconnect, device number 109 [ 651.649324][ T29] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 651.949710][ T29] usb 5-1: too many configurations: 100, using maximum allowed: 8 [ 651.959894][ T29] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 651.967944][ T29] usb 5-1: can't read configurations, error -22 [ 652.280982][ T29] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 652.530037][ T29] usb 5-1: too many configurations: 100, using maximum allowed: 8 [ 653.129077][ T29] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 653.166026][ T29] usb 5-1: can't read configurations, error -22 [ 653.183246][ T29] usb usb5-port1: unable to enumerate USB device [ 653.467265][T15010] ipip0: entered promiscuous mode [ 653.474909][T15010] ipip0: entered allmulticast mode [ 653.649774][T15014] fuse: Invalid rootmode [ 653.729861][T15018] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2709'. [ 654.710256][T15046] netlink: 'syz.3.2717': attribute type 7 has an invalid length. [ 654.810463][ T5824] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 655.042184][ T5824] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 655.058945][ T5824] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 655.072639][ T5824] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 655.086551][ T5824] usb 1-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 655.100401][ T5824] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.184447][ T5824] usb 1-1: config 0 descriptor?? [ 655.227660][ T5824] em28xx 1-1:0.0: New device @ 480 Mbps (2040:1605, interface 0, class 0) [ 655.237666][ T5824] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 655.513168][ T5824] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 655.533659][ T5824] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 655.551268][ T5824] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 655.589758][ T5824] em28xx 1-1:0.0: No AC97 audio processor [ 655.627565][T15050] input: syz1 as /devices/virtual/input/input64 [ 655.667192][ T5824] usb 1-1: USB disconnect, device number 116 [ 655.771349][T15053] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2720'. [ 655.799788][ T5824] em28xx 1-1:0.0: Disconnecting em28xx [ 655.850310][ T5824] em28xx 1-1:0.0: Freeing device [ 656.416606][T15069] syzkaller1: entered promiscuous mode [ 656.422264][T15069] syzkaller1: entered allmulticast mode [ 656.548759][ T5905] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 656.710795][ T5905] usb 1-1: Using ep0 maxpacket: 16 [ 656.739240][ T5824] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 656.889975][ T5905] usb 1-1: config 0 has an invalid interface number: 213 but max is 1 [ 656.915241][ T5905] usb 1-1: config 0 has no interface number 1 [ 656.961442][ T5905] usb 1-1: config 0 interface 0 has no altsetting 0 [ 656.968154][ T30] audit: type=1326 audit(1774394741.737:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15076 comm="syz.3.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ef979c799 code=0x7ffc0000 [ 656.999597][ T5824] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 657.014800][ T5905] usb 1-1: New USB device found, idVendor=413c, idProduct=81d2, bcdDevice=25.e8 [ 657.024400][ T30] audit: type=1326 audit(1774394741.737:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15076 comm="syz.3.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ef979c799 code=0x7ffc0000 [ 657.063026][ T5824] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 657.063027][ T5905] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.063080][ T5824] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 657.176251][ T5824] usb 3-1: config 0 interface 0 has no altsetting 0 [ 657.227087][ T5905] usb 1-1: Product: syz [ 657.251967][ T5905] usb 1-1: Manufacturer: syz [ 657.260147][ T30] audit: type=1326 audit(1774394741.737:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15076 comm="syz.3.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f7ef9758bec code=0x7ffc0000 [ 657.262713][ T5824] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 657.283433][ T5905] usb 1-1: SerialNumber: syz [ 657.351852][ T5905] usb 1-1: config 0 descriptor?? [ 657.393887][ T5824] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 657.421735][ T5905] usb 1-1: selecting invalid altsetting 0 [ 657.449571][ T5824] usb 3-1: config 0 interface 0 has no altsetting 0 [ 657.468254][ T5905] usb 1-1: Could not set interface, error -22 [ 657.474617][ T30] audit: type=1326 audit(1774394741.737:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15076 comm="syz.3.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f7ef9758c4e code=0x7ffc0000 [ 657.504430][ T5824] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 657.551052][ T5824] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 657.600217][ T5824] usb 3-1: config 0 interface 0 has no altsetting 0 [ 657.619290][T15094] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2732'. [ 657.625181][ T30] audit: type=1326 audit(1774394741.737:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15076 comm="syz.3.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ef979c799 code=0x7ffc0000 [ 657.680549][T15061] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2721'. [ 657.709418][ T5824] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 657.729496][ T30] audit: type=1326 audit(1774394741.737:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15076 comm="syz.3.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7ef979c799 code=0x7ffc0000 [ 657.787753][ T5824] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 658.056074][ T30] audit: type=1326 audit(1774394741.737:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15076 comm="syz.3.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ef979c799 code=0x7ffc0000 [ 658.085808][ T5824] usb 3-1: config 0 interface 0 has no altsetting 0 [ 658.112467][ T5824] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 658.137002][ T5824] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 658.155613][ T5824] usb 3-1: config 0 interface 0 has no altsetting 0 [ 658.170396][ T5824] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 658.182776][ T5824] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 658.195966][ T5824] usb 3-1: config 0 interface 0 has no altsetting 0 [ 658.229478][ T30] audit: type=1326 audit(1774394741.737:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15076 comm="syz.3.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ef979c799 code=0x7ffc0000 [ 658.302358][ T5824] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 658.317971][ T30] audit: type=1326 audit(1774394741.737:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15076 comm="syz.3.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f7ef97594fb code=0x7ffc0000 [ 658.351097][ T5824] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 658.363187][ T5824] usb 3-1: config 0 interface 0 has no altsetting 0 [ 658.370599][ T30] audit: type=1326 audit(1774394741.737:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15076 comm="syz.3.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f7ef979c799 code=0x7ffc0000 [ 658.372321][ T5824] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 658.419229][ T5905] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 658.435826][ T5824] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 658.452604][ T5824] usb 3-1: config 0 interface 0 has no altsetting 0 [ 658.505376][ T5824] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 658.519384][ T5824] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 658.528110][ T5824] usb 3-1: Product: syz [ 658.540690][ T5824] usb 3-1: Manufacturer: syz [ 658.545483][ T5824] usb 3-1: SerialNumber: syz [ 658.567196][ T5824] usb 3-1: config 0 descriptor?? [ 658.615918][ T5905] usb 5-1: Using ep0 maxpacket: 32 [ 658.639594][ T5905] usb 5-1: config 164 has an invalid descriptor of length 218, skipping remainder of the config [ 658.644192][ T5824] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 658.727929][ T5905] usb 5-1: config 164 has 0 interfaces, different from the descriptor's value: 1 [ 658.774755][ T5905] usb 5-1: New USB device found, idVendor=045e, idProduct=0c5e, bcdDevice=98.d1 [ 658.838505][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.860352][ T5905] usb 5-1: Product: syz [ 658.864575][ T5905] usb 5-1: Manufacturer: syz [ 658.893614][ T5905] usb 5-1: SerialNumber: syz [ 658.912948][ T5905] r8152-cfgselector 5-1: Unknown version 0x0000 [ 659.144910][ T5824] usb 3-1: USB disconnect, device number 120 [ 659.163160][ T5824] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 659.250131][ T29] usb 1-1: USB disconnect, device number 117 [ 659.332760][ T5905] r8152-cfgselector 5-1: USB disconnect, device number 101 [ 659.341090][T15108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2736'. [ 659.527938][T15112] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2738'. [ 659.549047][T15115] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2739'. [ 659.564194][T15112] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2738'. [ 659.894092][T15126] xt_SECMARK: invalid mode: 2 [ 659.914232][T15124] macvlan5: entered promiscuous mode [ 659.966565][T15128] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2744'. [ 660.528243][T15144] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2750'. [ 660.573839][T15144] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 660.969687][ T9] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 661.143629][ T9] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 661.163430][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.203878][ T9] usb 3-1: Product: syz [ 661.217504][ T9] usb 3-1: Manufacturer: syz [ 661.248146][ T9] usb 3-1: SerialNumber: syz [ 661.256676][ T9] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 661.312559][ T5932] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 662.053458][T15165] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2756'. [ 662.057878][ T5824] usb 3-1: USB disconnect, device number 121 [ 662.109904][T15165] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2756'. [ 662.389825][ T5932] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 662.397094][ T5932] ath9k_htc: Failed to initialize the device [ 662.424634][ T5824] usb 3-1: ath9k_htc: USB layer deinitialized [ 662.816519][T15187] __nla_validate_parse: 1 callbacks suppressed [ 662.816567][T15187] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2762'. [ 663.706811][T15206] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2768'. [ 667.637400][T15206] bridge_slave_1: left allmulticast mode [ 667.649087][T15206] bridge_slave_1: left promiscuous mode [ 667.655147][T15206] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.664997][T15206] bridge_slave_0: left allmulticast mode [ 667.673177][T15206] bridge_slave_0: left promiscuous mode [ 667.679612][T15206] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.226957][T15226] fuse: Invalid rootmode [ 668.265663][T15221] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 668.637211][ T30] audit: type=1326 audit(1774394753.397:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15233 comm="syz.2.2776" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5586f9c799 code=0x0 [ 668.670020][T15244] netlink: 'syz.1.2778': attribute type 7 has an invalid length. [ 668.752462][T15248] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2776'. [ 669.029082][ T5932] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 669.168915][ T5905] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 669.218961][ T5932] usb 3-1: Using ep0 maxpacket: 32 [ 669.328559][ T5905] usb 4-1: Using ep0 maxpacket: 16 [ 669.336015][ T5905] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 669.340165][ T5932] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 669.399533][ T5905] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 669.454557][ T5932] usb 3-1: config 0 has no interface number 0 [ 669.461895][ T5932] usb 3-1: config 0 interface 184 has no altsetting 0 [ 669.489002][ T5905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.610671][ T5932] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 669.614718][ T5905] usb 4-1: config 0 descriptor?? [ 669.984869][ T5932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.090250][ T5932] usb 3-1: Product: syz [ 670.139057][ T5932] usb 3-1: Manufacturer: syz [ 670.246729][ T5905] mcp2221 0003:04D8:00DD.002C: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 670.263294][ T5932] usb 3-1: SerialNumber: syz [ 670.319057][ T5824] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 670.330898][ T5932] usb 3-1: config 0 descriptor?? [ 670.489973][ T5824] usb 5-1: Using ep0 maxpacket: 8 [ 670.516653][ T5824] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 670.551094][ T5824] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 670.596342][ T5824] usb 5-1: config 0 interface 0 has no altsetting 0 [ 670.618730][ T5824] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 670.681995][ T5824] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.746981][ T5824] usb 5-1: config 0 descriptor?? [ 671.210675][ T5824] mcp2221 0003:04D8:00DD.002D: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 671.342065][ T7063] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 671.409616][T15261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 671.423298][T15261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 671.439443][T11640] usb 5-1: USB disconnect, device number 102 [ 671.499484][ T7063] usb 2-1: Using ep0 maxpacket: 8 [ 671.506476][ T7063] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 671.519639][ T7063] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 671.531806][ T7063] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 671.543312][ T7063] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 671.564147][ T7063] usb 2-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 671.574153][ T7063] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.582264][ T7063] usb 2-1: Product: syz [ 671.586786][ T7063] usb 2-1: Manufacturer: syz [ 671.591509][ T7063] usb 2-1: SerialNumber: syz [ 671.599758][ T7063] usb 2-1: config 0 descriptor?? [ 671.613929][ C0] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 671.624471][ T7063] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input65 [ 671.889117][ T7063] rc_core: IR keymap rc-imon-pad not found [ 671.895122][ T7063] Registered IR keymap rc-empty [ 671.905458][ T7063] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 671.916831][ T7063] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 671.938774][T11640] usb 4-1: USB disconnect, device number 105 [ 672.041800][ T7063] rc rc0: iMON Remote (15c2:003b) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 672.081888][ T7063] input: iMON Remote (15c2:003b) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input66 [ 672.121958][T15277] fuse: Invalid rootmode [ 672.122653][ T7063] imon 2-1:0.0: iMON device (15c2:003b, intf0) on usb<2:110> initialized [ 672.735278][ T5932] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 672.803285][ T5932] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 672.835661][ T5932] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 672.861806][ T5932] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 672.917925][ T5932] usb 3-1: USB disconnect, device number 122 [ 673.055483][T15294] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2792'. [ 673.128899][T15294] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2792'. [ 673.198331][T15294] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2792'. [ 674.265131][T11640] usb 2-1: USB disconnect, device number 110 [ 674.357625][T15315] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2799'. [ 674.630175][T15319] tipc: Started in network mode [ 674.646112][T15319] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 674.670490][T15319] tipc: Enabled bearer , priority 10 [ 674.760754][ T5824] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 674.920311][ T5824] usb 3-1: Using ep0 maxpacket: 8 [ 674.930148][ T5824] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 674.941901][ T5824] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 674.958011][ T5824] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 674.969722][ T5824] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 674.982585][ T5824] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 674.994144][ T5824] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 675.004857][ T5824] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.017832][ T5824] usb 3-1: config 0 descriptor?? [ 675.025529][T15317] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 675.079499][ T7063] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 675.291442][ T7063] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 675.304156][ T7063] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 675.315847][ T7063] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 675.339069][ T7063] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 675.349246][ T7063] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.384608][ T7063] usb 5-1: config 0 descriptor?? [ 675.802560][ T5824] tipc: Node number set to 10005162 [ 675.949172][T11640] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 676.053325][ T7063] plantronics 0003:047F:FFFF.002E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 676.132882][T11640] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 676.141508][T11640] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 676.166985][T11640] usb 2-1: config 220 has no interface number 2 [ 676.192916][T11640] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 676.209217][ T5905] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 676.266654][T11640] usb 2-1: config 220 interface 0 has no altsetting 0 [ 676.281429][T11640] usb 2-1: config 220 interface 76 has no altsetting 0 [ 676.298533][T11640] usb 2-1: config 220 interface 1 has no altsetting 0 [ 676.313774][T15328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 676.323298][T15328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 676.341081][T11640] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 676.368685][ T5905] usb 4-1: Using ep0 maxpacket: 32 [ 676.375960][ T5905] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 676.394423][ T5905] usb 4-1: config 0 has no interface number 0 [ 676.400703][T11640] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.414746][ T5905] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 676.427684][T11640] usb 2-1: Product: syz [ 676.433331][T11640] usb 2-1: Manufacturer: syz [ 676.465730][ T5905] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 676.475750][T11640] usb 2-1: SerialNumber: syz [ 676.496087][ T5905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.525978][ T5905] usb 4-1: Product: syz [ 676.532685][ T5905] usb 4-1: Manufacturer: syz [ 676.542522][ T5905] usb 4-1: SerialNumber: syz [ 676.568897][ T5905] usb 4-1: config 0 descriptor?? [ 676.591145][ T5905] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 676.604974][ T5905] em28xx 4-1:0.132: Video interface 132 found: [ 676.733250][T11640] usb 2-1: selecting invalid altsetting 0 [ 676.740126][T11640] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 676.760306][T11640] uvcvideo 2-1:220.0: No valid video chain found. [ 676.773295][T11640] usb 2-1: selecting invalid altsetting 0 [ 676.779565][T11640] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 676.791494][T11640] usb 2-1: USB disconnect, device number 111 [ 676.793793][T15350] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2811'. [ 676.882898][ T29] usb 5-1: USB disconnect, device number 103 [ 676.989464][ T5905] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 677.022664][T15354] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2813'. [ 677.172296][ T5834] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 677.203851][T15356] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2814'. [ 677.400835][ T5905] em28xx 4-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=0) [ 677.424205][ T5905] em28xx 4-1:0.132: board has no eeprom [ 677.600755][T11640] usb 3-1: USB disconnect, device number 123 [ 677.616322][T15344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 677.639560][T15344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 677.798540][ T5905] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 677.807784][ T5905] em28xx 4-1:0.132: analog set to bulk mode. [ 677.815152][ T29] em28xx 4-1:0.132: Registering V4L2 extension [ 677.842467][ T5905] usb 4-1: USB disconnect, device number 106 [ 677.904808][ T5905] em28xx 4-1:0.132: Disconnecting em28xx [ 678.206645][ T29] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 678.223245][ T29] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 678.267645][T15375] macsec0: entered promiscuous mode [ 678.293855][ T29] em28xx 4-1:0.132: No AC97 audio processor [ 678.328382][ T29] usb 4-1: Decoder not found [ 678.353020][ T29] em28xx 4-1:0.132: failed to create media graph [ 678.385040][ T29] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 678.454291][ T29] em28xx 4-1:0.132: Remote control support is not available for this card. [ 678.485760][ T5905] em28xx 4-1:0.132: Closing input extension [ 678.540465][ T5905] em28xx 4-1:0.132: Freeing device [ 678.901956][ T5905] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 679.106286][ T5905] usb 3-1: device descriptor read/64, error -71 [ 679.378573][ T5905] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 679.530226][ T5905] usb 3-1: device descriptor read/64, error -71 [ 679.649046][ T5905] usb usb3-port1: attempt power cycle [ 680.018609][ T5905] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 680.039286][ T5905] usb 3-1: device descriptor read/8, error -71 [ 680.228729][ T5824] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 680.288659][ T5905] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 680.362851][ T5905] usb 3-1: device descriptor read/8, error -71 [ 680.390869][ T5824] usb 2-1: Using ep0 maxpacket: 8 [ 680.397516][ T5824] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 680.430584][ T5824] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 680.443550][ T5824] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 680.478771][ T5824] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 680.479377][ T5905] usb usb3-port1: unable to enumerate USB device [ 680.490272][ T5824] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 680.553495][ T5824] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 680.565958][ T5824] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.631003][ T5824] usb 2-1: config 0 descriptor?? [ 680.665013][T15411] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 682.320754][T15444] blktrace: Concurrent blktraces are not allowed on nullb0 [ 682.781204][ T5824] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 682.801970][ T5834] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 683.007858][ T5824] usb 1-1: Using ep0 maxpacket: 32 [ 683.059904][ T5824] usb 1-1: unable to get BOS descriptor or descriptor too short [ 683.144538][ T7063] usb 2-1: USB disconnect, device number 112 [ 683.189775][ T5824] usb 1-1: config 1 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 683.249415][ T5824] usb 1-1: config 1 interface 0 has no altsetting 0 [ 683.284290][ T5824] usb 1-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.40 [ 683.313452][ T5824] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.409719][ T5824] usb 1-1: Product: syz [ 683.499297][ T5824] usb 1-1: Manufacturer: syz [ 683.503963][ T5824] usb 1-1: SerialNumber: syz [ 684.038010][ T5824] appletouch 1-1:1.0: Failed to read mode from device. [ 684.053423][ T5824] appletouch 1-1:1.0: probe with driver appletouch failed with error -5 [ 684.114021][ T5824] usb 1-1: USB disconnect, device number 118 [ 684.146937][ T29] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 684.295510][T15466] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2841'. [ 684.344338][ T29] usb 2-1: Using ep0 maxpacket: 32 [ 684.361682][ T29] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 684.378109][ T29] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 684.386383][ T29] usb 2-1: can't read configurations, error -61 [ 684.578558][ T29] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 684.791773][ T29] usb 2-1: Using ep0 maxpacket: 32 [ 684.827704][ T29] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 684.967936][ T29] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 685.000649][ T29] usb 2-1: can't read configurations, error -61 [ 685.089220][ T29] usb usb2-port1: attempt power cycle [ 685.099890][ T7063] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 685.239124][ T7063] usb 4-1: device descriptor read/64, error -71 [ 685.439203][ T29] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 685.469300][ T29] usb 2-1: Using ep0 maxpacket: 32 [ 685.475319][ T29] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 685.479633][ T7063] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 685.495501][ T29] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 685.503829][ T29] usb 2-1: can't read configurations, error -61 [ 685.619165][ T7063] usb 4-1: device descriptor read/64, error -71 [ 685.641366][ T29] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 685.669244][ T5824] usb 1-1: new full-speed USB device number 119 using dummy_hcd [ 685.670247][ T29] usb 2-1: Using ep0 maxpacket: 32 [ 685.686513][ T29] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 685.697480][ T29] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 685.705571][ T29] usb 2-1: can't read configurations, error -61 [ 685.719143][ T29] usb usb2-port1: unable to enumerate USB device [ 685.729547][ T7063] usb usb4-port1: attempt power cycle [ 685.751991][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.758722][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.832176][ T5824] usb 1-1: unable to get BOS descriptor or descriptor too short [ 685.841484][ T5824] usb 1-1: not running at top speed; connect to a high speed hub [ 685.855747][ T5824] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 4 [ 685.879057][ T5824] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 90, changing to 4 [ 685.910188][ T5824] usb 1-1: New USB device found, idVendor=041e, idProduct=3042, bcdDevice= 0.40 [ 685.922818][ T5824] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.932219][ T5824] usb 1-1: Product: syz [ 685.936490][ T5824] usb 1-1: Manufacturer: syz [ 685.941792][ T5824] usb 1-1: SerialNumber: syz [ 685.961313][T15489] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2848'. [ 686.080679][ T7063] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 686.109939][ T7063] usb 4-1: device descriptor read/8, error -71 [ 686.173421][ T5824] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 686.182282][ T5824] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 686.279515][ T5824] usb 1-1: USB disconnect, device number 119 [ 686.346053][T15289] udevd[15289]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 686.389258][ T7063] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 686.437719][ T7063] usb 4-1: device descriptor read/8, error -71 [ 686.551333][ T7063] usb usb4-port1: unable to enumerate USB device [ 688.080504][T15525] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2859'. [ 689.449582][ T30] audit: type=1326 audit(1774394774.217:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15556 comm="syz.2.2871" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5586f9c799 code=0x0 [ 689.856465][T15570] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2871'. [ 690.141847][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 690.312168][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 690.511197][ T9] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 690.525584][ T9] usb 3-1: config 0 has no interface number 0 [ 690.559980][ T9] usb 3-1: config 0 interface 184 has no altsetting 0 [ 690.613688][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 690.657422][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.750389][ T9] usb 3-1: Product: syz [ 690.754639][ T9] usb 3-1: Manufacturer: syz [ 690.838380][ T5828] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 690.899206][ T9] usb 3-1: SerialNumber: syz [ 690.912683][ T9] usb 3-1: config 0 descriptor?? [ 690.951286][ T5828] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 690.971811][ T5828] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 690.980716][ T5828] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 691.004271][ T5828] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 691.106370][ T5834] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 691.114208][ T5834] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 691.123052][ T5834] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 691.134631][ T5834] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 691.142807][ T5834] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 692.053330][T15581] chnl_net:caif_netlink_parms(): no params data found [ 692.069747][ T5824] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 692.329384][ T5824] usb 4-1: Using ep0 maxpacket: 32 [ 692.347519][ T5824] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 692.362723][ T5824] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 692.437572][ T5824] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 692.450161][ T5824] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.459536][ T5824] usb 4-1: Product: syz [ 692.464420][ T5824] usb 4-1: Manufacturer: syz [ 692.471276][ T5824] usb 4-1: SerialNumber: syz [ 692.567014][ T5824] usb 4-1: config 0 descriptor?? [ 692.607461][ T5824] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input68 [ 692.673765][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 692.686183][ T5824] usbtouchscreen 4-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -90 [ 692.696289][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 692.710887][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 692.722224][ T9] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 692.736245][ T9] usb 3-1: USB disconnect, device number 2 [ 692.773501][ T5824] usbtouchscreen 4-1:0.0: probe with driver usbtouchscreen failed with error -90 [ 692.827682][T15581] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.836841][T15589] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2878'. [ 692.845160][T15581] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.857676][ T5824] usb 4-1: USB disconnect, device number 111 [ 692.883305][T15581] bridge_slave_0: entered allmulticast mode [ 692.906475][T15581] bridge_slave_0: entered promiscuous mode [ 692.952388][T15581] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.966741][T15581] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.975890][T15581] bridge_slave_1: entered allmulticast mode [ 692.983430][T15581] bridge_slave_1: entered promiscuous mode [ 693.022802][T15581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 693.050082][T15581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 693.106883][T15581] team0: Port device team_slave_0 added [ 693.130059][T15581] team0: Port device team_slave_1 added [ 693.183182][T15581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 693.198549][T15581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 693.266353][T15581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 693.277040][ T5828] Bluetooth: hci5: command tx timeout [ 693.305109][T15581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 693.331801][T15581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 693.444038][T15581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 694.009913][T15581] hsr_slave_0: entered promiscuous mode [ 694.054061][T15581] hsr_slave_1: entered promiscuous mode [ 694.067971][T15581] debugfs: 'hsr0' already exists in 'hsr' [ 694.076396][T15635] netlink: 'syz.1.2888': attribute type 7 has an invalid length. [ 694.224313][T15581] Cannot create hsr debugfs directory [ 694.469691][ T29] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 694.579093][ T5824] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 694.650656][ T29] usb 4-1: Using ep0 maxpacket: 16 [ 694.688648][ T29] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 694.711926][T15581] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.843889][ T5824] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 694.844762][ T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 694.866487][ T5824] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 694.933123][ T5824] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 694.989214][T15581] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.060836][ T29] usb 4-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 695.106896][ T5824] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 695.108775][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.162159][T15581] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.195397][ T5824] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 695.222102][ T5824] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 695.225972][ T29] usb 4-1: Product: syz [ 695.256638][ T29] usb 4-1: Manufacturer: syz [ 695.266367][ T29] usb 4-1: SerialNumber: syz [ 695.292319][ T29] usb 4-1: config 0 descriptor?? [ 695.295322][ T5824] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 695.339725][ T29] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input69 [ 695.388911][ T5824] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 695.388931][ T5828] Bluetooth: hci5: command tx timeout [ 695.388952][ T5824] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 695.434468][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 695.443356][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 695.450739][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 695.458090][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 695.465499][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 695.472865][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 695.480194][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 695.487512][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 695.488191][ T5824] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 695.494864][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 695.495074][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 695.495292][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 695.495484][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 695.536274][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 695.543662][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 695.550988][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 695.552218][ T5182] usb 4-1: control msg error: -71 [ 695.558323][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 695.571511][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 695.578918][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 695.586385][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 695.593891][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 695.601233][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 695.608580][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 695.615999][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 695.623332][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 695.630666][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 695.638037][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 695.645266][ C1] usb 4-1: pegasus_irq - usb_submit_urb failed with result -1 [ 695.648152][ T5824] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 695.725427][ T29] usb 4-1: USB disconnect, device number 112 [ 695.737849][T15581] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.752311][ T5824] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 695.856695][ T5824] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 695.870808][ T5824] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 695.902439][ T5824] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 695.952595][ T5824] usb 3-1: New USB device found, idVendor=04b4, idProduct=0000, bcdDevice= 0.00 [ 696.012132][ T5824] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.120057][ T5824] usb 3-1: config 0 descriptor?? [ 696.564269][T15581] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 696.607544][T15581] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 696.624709][T15581] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 696.657216][ T5824] hid_parser_main: 49 callbacks suppressed [ 696.657240][ T5824] hid-generic 0003:04B4:0000.002F: unknown main item tag 0x0 [ 696.666734][T15581] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 696.694847][ T5824] hid-generic 0003:04B4:0000.002F: unknown main item tag 0x0 [ 696.792713][ T5824] hid-generic 0003:04B4:0000.002F: hidraw0: USB HID v0.06 Device [HID 04b4:0000] on usb-dummy_hcd.2-1/input0 [ 697.048033][T15581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 697.070559][T15581] 8021q: adding VLAN 0 to HW filter on device team0 [ 697.084143][ T8851] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.091335][ T8851] bridge0: port 1(bridge_slave_0) entered forwarding state [ 697.188365][ T8849] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.188550][ T8849] bridge0: port 2(bridge_slave_1) entered forwarding state [ 697.374959][T15581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 697.428758][ T5828] Bluetooth: hci5: command tx timeout [ 697.492347][T15581] veth0_vlan: entered promiscuous mode [ 697.523106][T15581] veth1_vlan: entered promiscuous mode [ 697.582183][T15581] veth0_macvtap: entered promiscuous mode [ 697.653877][T15581] veth1_macvtap: entered promiscuous mode [ 697.683770][T15581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 697.845690][T15581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 697.986791][ T5889] usb 3-1: USB disconnect, device number 3 [ 698.097403][ T8849] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.172342][ T8849] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.205230][ T8849] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.257345][ T8849] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.050892][ T8849] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 699.086274][ T8849] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 699.140821][T15695] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2903'. [ 699.173021][ T1003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 699.182509][ T1003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 699.510970][ T5828] Bluetooth: hci5: command tx timeout [ 700.165645][T15710] netlink: 'syz.3.2906': attribute type 9 has an invalid length. [ 700.174344][T15710] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2906'. [ 702.217849][T15733] vlan1: entered promiscuous mode [ 702.698004][T15738] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2914'. [ 702.819270][ T7063] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 702.846651][T15738] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2914'. [ 702.857440][T15738] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2914'. [ 702.979082][ T7063] usb 1-1: Using ep0 maxpacket: 32 [ 703.000993][ T7063] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 703.019319][ T7063] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 703.041427][ T7063] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 703.084462][ T7063] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.117089][ T7063] usb 1-1: Product: syz [ 703.125426][ T7063] usb 1-1: Manufacturer: syz [ 703.172901][ T7063] usb 1-1: SerialNumber: syz [ 703.204422][ T7063] usb 1-1: config 0 descriptor?? [ 703.253122][ T7063] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input70 [ 703.540354][ T7063] usbtouchscreen 1-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -90 [ 703.574666][T15755] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2913'. [ 703.652629][ T7063] usbtouchscreen 1-1:0.0: probe with driver usbtouchscreen failed with error -90 [ 703.682916][ T7063] usb 1-1: USB disconnect, device number 120 [ 703.907237][T15758] vivid-007: ================= START STATUS ================= [ 703.924627][T15758] vivid-007: Enable Output Cropping: true grabbed [ 703.933527][T15758] vivid-007: Enable Output Composing: true grabbed [ 703.940981][T15758] vivid-007: Enable Output Scaler: true grabbed [ 703.947426][T15758] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 703.955452][T15758] vivid-007: Transmit Mode: HDMI grabbed [ 703.962022][T15758] vivid-007: Hotplug Present: 0x00000000 [ 703.967932][T15758] vivid-007: RxSense Present: 0x00000000 [ 703.974321][T15758] vivid-007: EDID Present: 0x00000000 [ 703.980948][T15758] vivid-007: ================== END STATUS ================== [ 704.329143][ T7063] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 704.606803][ T7063] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 704.640785][ T7063] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 704.734613][ T7063] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 704.766986][T15775] netlink: 'syz.2.2922': attribute type 7 has an invalid length. [ 704.788043][ T7063] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.837864][ T7063] usb 4-1: config 0 descriptor?? [ 704.860968][ T30] audit: type=1326 audit(1774394789.577:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15776 comm="syz.1.2923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febe419c799 code=0x7ffc0000 [ 704.975667][T15779] Lens A: ================= START STATUS ================= [ 704.983565][ T30] audit: type=1326 audit(1774394789.577:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15776 comm="syz.1.2923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febe419c799 code=0x7ffc0000 [ 705.057969][ T30] audit: type=1326 audit(1774394789.577:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15776 comm="syz.1.2923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7febe419c799 code=0x7ffc0000 [ 705.085828][T15779] Lens A: Focus, Absolute: 0 [ 705.199065][T15779] Lens A: ================== END STATUS ================== [ 705.248951][ T30] audit: type=1326 audit(1774394789.577:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15776 comm="syz.1.2923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febe419c799 code=0x7ffc0000 [ 705.382104][ T30] audit: type=1326 audit(1774394789.577:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15776 comm="syz.1.2923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febe419c799 code=0x7ffc0000 [ 705.453635][ T30] audit: type=1326 audit(1774394789.577:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15776 comm="syz.1.2923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7febe419c799 code=0x7ffc0000 [ 705.661209][ T30] audit: type=1326 audit(1774394789.577:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15776 comm="syz.1.2923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febe419c799 code=0x7ffc0000 [ 705.794756][ T30] audit: type=1326 audit(1774394789.577:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15776 comm="syz.1.2923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febe419c799 code=0x7ffc0000 [ 705.850752][ T30] audit: type=1326 audit(1774394789.577:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15776 comm="syz.1.2923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7febe419c799 code=0x7ffc0000 [ 705.921548][ T30] audit: type=1326 audit(1774394789.577:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15776 comm="syz.1.2923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febe419c799 code=0x7ffc0000 [ 706.845375][ T5905] usb 4-1: USB disconnect, device number 113 [ 707.545970][T15810] mac80211_hwsim hwsim8 wlan1 (unregistering): left promiscuous mode [ 707.848872][ T5905] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 708.024085][T15823] mac80211_hwsim hwsim28 wlan1: entered promiscuous mode [ 708.051011][T15823] macvlan2: entered promiscuous mode [ 708.078499][ T5905] usb 2-1: Using ep0 maxpacket: 8 [ 708.139077][ T5905] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 708.231167][ T5905] usb 2-1: New USB device found, idVendor=17a1, idProduct=0128, bcdDevice= 5.f6 [ 708.321489][ T9] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 708.338525][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.378952][ T5905] usb 2-1: Product: syz [ 708.415157][ T5905] usb 2-1: Manufacturer: syz [ 708.428868][ T5905] usb 2-1: SerialNumber: syz [ 708.465042][ T5905] usb 2-1: config 0 descriptor?? [ 708.489256][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 708.514438][ T5905] gspca_main: t613-2.14.0 probing 17a1:0128 [ 708.597592][ T9] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 708.655493][ T9] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 708.666452][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 708.673575][ T9] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 708.741753][ T5905] gspca_t613: unknown sensor 0000 [ 708.749239][ T5905] t613 2-1:0.0: probe with driver t613 failed with error -22 [ 708.783458][ T5905] usb 2-1: USB disconnect, device number 117 [ 708.819070][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.852973][ T9] usb 5-1: config 0 descriptor?? [ 709.288249][ T9] mcp2221 0003:04D8:00DD.0030: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 709.480168][T15822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 709.501275][T15822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 709.522007][T15843] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2944'. [ 709.613671][ T9] usb 5-1: USB disconnect, device number 104 [ 709.831401][ T5905] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 709.843429][T15850] FAULT_INJECTION: forcing a failure. [ 709.843429][T15850] name failslab, interval 1, probability 0, space 0, times 0 [ 709.857674][T15850] CPU: 0 UID: 0 PID: 15850 Comm: syz.1.2947 Tainted: G L syzkaller #0 PREEMPT(full) [ 709.857703][T15850] Tainted: [L]=SOFTLOCKUP [ 709.857709][T15850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 709.857719][T15850] Call Trace: [ 709.857730][T15850] [ 709.857737][T15850] dump_stack_lvl+0xe8/0x150 [ 709.857767][T15850] should_fail_ex+0x412/0x560 [ 709.857795][T15850] should_failslab+0xa8/0x100 [ 709.857820][T15850] __kmalloc_cache_noprof+0x88/0x660 [ 709.857839][T15850] ? create_new_entry+0x15e/0x7b0 [ 709.857920][T15850] create_new_entry+0x15e/0x7b0 [ 709.857945][T15850] ? tomoyo_path_number_perm+0x5bb/0x630 [ 709.857973][T15850] ? tomoyo_path_number_perm+0x219/0x630 [ 709.857994][T15850] ? __pfx_create_new_entry+0x10/0x10 [ 709.858038][T15850] fuse_mkdir+0x2fb/0x420 [ 709.858063][T15850] ? __pfx_fuse_mkdir+0x10/0x10 [ 709.858101][T15850] ? lookup_one_qstr_excl+0x1d8/0x360 [ 709.858128][T15850] ? apparmor_path_mkdir+0x323/0x3d0 [ 709.858157][T15850] ? inode_permission+0x346/0x5f0 [ 709.858182][T15850] ? bpf_lsm_inode_mkdir+0x9/0x20 [ 709.858207][T15850] vfs_mkdir+0x413/0x630 [ 709.858236][T15850] filename_mkdirat+0x285/0x510 [ 709.858264][T15850] ? __pfx_filename_mkdirat+0x10/0x10 [ 709.858290][T15850] ? do_getname+0x151/0x250 [ 709.858317][T15850] __se_sys_mkdirat+0x35/0x150 [ 709.858351][T15850] do_syscall_64+0x14d/0xf80 [ 709.858373][T15850] ? trace_irq_disable+0x3b/0x150 [ 709.858399][T15850] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.858418][T15850] ? clear_bhb_loop+0x40/0x90 [ 709.858438][T15850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.858455][T15850] RIP: 0033:0x7febe419c799 [ 709.858473][T15850] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 709.858488][T15850] RSP: 002b:00007febe50f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 709.858509][T15850] RAX: ffffffffffffffda RBX: 00007febe4415fa0 RCX: 00007febe419c799 [ 709.858523][T15850] RDX: 0000000000000062 RSI: 0000200000000900 RDI: ffffffffffffff9c [ 709.858537][T15850] RBP: 00007febe50f6090 R08: 0000000000000000 R09: 0000000000000000 [ 709.858549][T15850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 709.858560][T15850] R13: 00007febe4416038 R14: 00007febe4415fa0 R15: 00007febe453fa48 [ 709.858592][T15850] [ 710.413081][T15857] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2949'. [ 710.446172][T15857] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.2949'. [ 710.518540][ T5905] usb 3-1: Using ep0 maxpacket: 32 [ 710.534851][ T5905] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 710.544018][ T5905] usb 3-1: config 0 has no interface number 0 [ 710.551394][ T5905] usb 3-1: config 0 interface 184 has no altsetting 0 [ 710.588536][ T5905] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 710.597956][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.607111][ T5905] usb 3-1: Product: syz [ 710.611569][ T5905] usb 3-1: Manufacturer: syz [ 710.616746][ T5905] usb 3-1: SerialNumber: syz [ 710.635419][ T5905] usb 3-1: config 0 descriptor?? [ 711.333736][ T5889] usb 2-1: new full-speed USB device number 118 using dummy_hcd [ 711.867323][ T5889] usb 2-1: config 0 has an invalid interface number: 66 but max is 0 [ 711.878636][ T5889] usb 2-1: config 0 has an invalid descriptor of length 93, skipping remainder of the config [ 711.892788][ T5889] usb 2-1: config 0 has no interface number 0 [ 711.921628][ T5889] usb 2-1: config 0 interface 66 altsetting 29 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 711.937429][ T5889] usb 2-1: config 0 interface 66 has no altsetting 0 [ 711.944873][ T5889] usb 2-1: New USB device found, idVendor=150a, idProduct=1203, bcdDevice= 0.00 [ 711.959226][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.037183][ T5889] usb 2-1: config 0 descriptor?? [ 712.281216][ T5889] usb 2-1: string descriptor 0 read error: -71 [ 712.299155][ T7063] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 712.322786][ T5889] usb 2-1: USB disconnect, device number 118 [ 712.439908][ T7063] usb 4-1: device descriptor read/64, error -71 [ 712.583889][T15888] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2960'. [ 712.699621][ T7063] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 712.753367][T15894] netlink: 'syz.4.2963': attribute type 7 has an invalid length. [ 712.762176][T15894] netlink: 'syz.4.2963': attribute type 8 has an invalid length. [ 712.839784][ T7063] usb 4-1: device descriptor read/64, error -71 [ 712.899163][ T5824] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 712.954891][ T7063] usb usb4-port1: attempt power cycle [ 713.019239][ T9] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 713.049102][ T5824] usb 1-1: Using ep0 maxpacket: 8 [ 713.057245][ T5824] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 713.075739][ T5824] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 713.090335][ T5824] usb 1-1: config 0 interface 0 has no altsetting 0 [ 713.097416][ T5824] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 713.108348][ T5824] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.123204][ T5824] usb 1-1: config 0 descriptor?? [ 713.127866][ T5905] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 713.149079][ T5905] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 713.166583][ T5905] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 713.181883][ T9] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 713.185051][ T5905] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 713.209651][ T5905] usb 3-1: USB disconnect, device number 4 [ 713.219420][ T9] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 713.239884][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.255572][ T9] usb 5-1: Product: syz [ 713.260724][ T9] usb 5-1: Manufacturer: syz [ 713.265419][ T9] usb 5-1: SerialNumber: syz [ 713.283234][ T9] usb 5-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 713.299208][ T7063] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 713.330606][ T7063] usb 4-1: device descriptor read/8, error -71 [ 713.553300][ T5824] mcp2221 0003:04D8:00DD.0031: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 713.599255][ T7063] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 713.635384][ T7063] usb 4-1: device descriptor read/8, error -71 [ 713.691597][ T9] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 713.724365][ T9] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 713.749934][ T7063] usb usb4-port1: unable to enumerate USB device [ 713.755582][T15890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 714.119276][T15890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 714.152170][T15911] FAULT_INJECTION: forcing a failure. [ 714.152170][T15911] name failslab, interval 1, probability 0, space 0, times 0 [ 714.172736][T15890] ------------[ cut here ]------------ [ 714.178841][T15890] usb 5-1: BOGUS control dir, pipe 80006980 doesn't match bRequestType c0 [ 714.187378][T15890] WARNING: drivers/usb/core/urb.c:413 at usb_submit_urb+0x1053/0x18b0, CPU#0: syz.0.2961/15890 [ 714.198221][T15890] Modules linked in: [ 714.202838][T15890] CPU: 0 UID: 0 PID: 15890 Comm: syz.0.2961 Tainted: G L syzkaller #0 PREEMPT(full) [ 714.214105][T15890] Tainted: [L]=SOFTLOCKUP [ 714.218631][T15890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 714.229347][T15890] RIP: 0010:usb_submit_urb+0x1115/0x18b0 [ 714.234980][T15890] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c1 f2 ff ff 89 e9 [ 714.256203][T15890] RSP: 0018:ffffc900030f78c8 EFLAGS: 00010246 [ 714.262584][T15890] RAX: 0000000000000000 RBX: ffff888034ee2500 RCX: 0000000080006980 [ 714.271172][T15890] RDX: ffff888038245000 RSI: ffffffff8c7f1ee0 RDI: ffffffff901eefc0 [ 714.279745][T15890] RBP: 1ffff1100aba041c R08: 00000000000000c0 R09: 0000000000000000 [ 714.287739][T15890] R10: ffffc900030f79c0 R11: fffff5200061ef44 R12: ffff88804a715100 [ 714.296182][T15890] R13: ffff888055d020e0 R14: 0000000080006980 R15: ffff888038245000 [ 714.305015][T15890] FS: 00007fd8163f66c0(0000) GS:ffff88812545d000(0000) knlGS:0000000000000000 [ 714.314521][T15890] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 714.321551][T15890] CR2: 0000200000126030 CR3: 000000001ff98000 CR4: 00000000003526f0 [ 714.329958][T15890] DR0: 0000000000000000 DR1: 0000000000001000 DR2: 000000000000008e [ 714.337922][T15890] DR3: 000000000000057a DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 714.346226][T15890] Call Trace: [ 714.349901][T15890] [ 714.352827][T15890] ? __init_swait_queue_head+0xa9/0x150 [ 714.358402][T15890] usb_start_wait_urb+0x13f/0x5b0 [ 714.364002][T15890] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 714.370156][T15890] usb_control_msg+0x234/0x3e0 [ 714.374955][T15890] gl861_ctrl_msg+0x207/0x420 [ 714.380318][T15890] ? __pfx_gl861_ctrl_msg+0x10/0x10 [ 714.385533][T15890] gl861_i2c_master_xfer+0x439/0x6a0 [ 714.391293][T15890] __i2c_transfer+0x79a/0x2020 [ 714.396136][T15890] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 714.402456][T15890] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 714.408265][T15890] ? i2c_transfer+0xc8/0x2d0 [ 714.413325][T15890] i2c_transfer+0x1cc/0x2d0 [ 714.417827][T15890] i2cdev_ioctl_rdwr+0x460/0x740 [ 714.423133][T15890] i2cdev_ioctl+0x6a5/0x880 [ 714.427664][T15890] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 714.432914][T15890] ? __fget_files+0x3a0/0x420 [ 714.437592][T15890] ? __fget_files+0x2a/0x420 [ 714.442534][T15890] ? bpf_lsm_file_ioctl+0x9/0x20 [ 714.447548][T15890] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 714.452879][T15890] __se_sys_ioctl+0xfc/0x170 [ 714.457467][T15890] do_syscall_64+0x14d/0xf80 [ 714.462406][T15890] ? trace_irq_disable+0x3b/0x150 [ 714.467436][T15890] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.473866][T15890] ? clear_bhb_loop+0x40/0x90 [ 714.479001][T15890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.484894][T15890] RIP: 0033:0x7fd81819c799 [ 714.489662][T15890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 714.509625][T15890] RSP: 002b:00007fd8163f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 714.518039][T15890] RAX: ffffffffffffffda RBX: 00007fd818415fa0 RCX: 00007fd81819c799 [ 714.526471][T15890] RDX: 0000200000000080 RSI: 0000000000000707 RDI: 0000000000000008 [ 714.534920][T15890] RBP: 00007fd818232c99 R08: 0000000000000000 R09: 0000000000000000 [ 714.543227][T15890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 714.551544][T15890] R13: 00007fd818416038 R14: 00007fd818415fa0 R15: 00007fd81853fa48 [ 714.559855][T15890] [ 714.562885][T15890] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 714.570152][T15890] CPU: 0 UID: 0 PID: 15890 Comm: syz.0.2961 Tainted: G L syzkaller #0 PREEMPT(full) [ 714.581163][T15890] Tainted: [L]=SOFTLOCKUP [ 714.585480][T15890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 714.595520][T15890] Call Trace: [ 714.598796][T15890] [ 714.601730][T15890] vpanic+0x56c/0xa60 [ 714.605727][T15890] ? __pfx__printk+0x10/0x10 [ 714.610297][T15890] ? __pfx_vpanic+0x10/0x10 [ 714.614787][T15890] ? is_bpf_text_address+0x292/0x2b0 [ 714.620063][T15890] ? is_bpf_text_address+0x26/0x2b0 [ 714.625252][T15890] panic+0xc5/0xd0 [ 714.628984][T15890] ? __pfx_panic+0x10/0x10 [ 714.633399][T15890] __warn+0x315/0x4f0 [ 714.637367][T15890] ? usb_submit_urb+0x1053/0x18b0 [ 714.642377][T15890] ? usb_submit_urb+0x1053/0x18b0 [ 714.647388][T15890] __report_bug+0x29a/0x540 [ 714.651980][T15890] ? usb_submit_urb+0x1053/0x18b0 [ 714.656988][T15890] ? __pfx___report_bug+0x10/0x10 [ 714.662001][T15890] ? lockdep_hardirqs_on+0x7a/0x110 [ 714.667188][T15890] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 714.672982][T15890] report_bug_entry+0x19a/0x290 [ 714.677821][T15890] ? usb_submit_urb+0x1115/0x18b0 [ 714.682827][T15890] ? usb_submit_urb+0x111a/0x18b0 [ 714.687830][T15890] handle_bug+0xce/0x200 [ 714.692060][T15890] exc_invalid_op+0x1a/0x50 [ 714.696565][T15890] asm_exc_invalid_op+0x1a/0x20 [ 714.701398][T15890] RIP: 0010:usb_submit_urb+0x1115/0x18b0 [ 714.707017][T15890] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c1 f2 ff ff 89 e9 [ 714.726695][T15890] RSP: 0018:ffffc900030f78c8 EFLAGS: 00010246 [ 714.732755][T15890] RAX: 0000000000000000 RBX: ffff888034ee2500 RCX: 0000000080006980 [ 714.740721][T15890] RDX: ffff888038245000 RSI: ffffffff8c7f1ee0 RDI: ffffffff901eefc0 [ 714.748696][T15890] RBP: 1ffff1100aba041c R08: 00000000000000c0 R09: 0000000000000000 [ 714.756652][T15890] R10: ffffc900030f79c0 R11: fffff5200061ef44 R12: ffff88804a715100 [ 714.764810][T15890] R13: ffff888055d020e0 R14: 0000000080006980 R15: ffff888038245000 [ 714.772780][T15890] ? usb_submit_urb+0x10a4/0x18b0 [ 714.777801][T15890] ? __init_swait_queue_head+0xa9/0x150 [ 714.783339][T15890] usb_start_wait_urb+0x13f/0x5b0 [ 714.788442][T15890] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 714.794120][T15890] usb_control_msg+0x234/0x3e0 [ 714.798900][T15890] gl861_ctrl_msg+0x207/0x420 [ 714.803583][T15890] ? __pfx_gl861_ctrl_msg+0x10/0x10 [ 714.808771][T15890] gl861_i2c_master_xfer+0x439/0x6a0 [ 714.814044][T15890] __i2c_transfer+0x79a/0x2020 [ 714.818800][T15890] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 714.824714][T15890] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 714.830514][T15890] ? i2c_transfer+0xc8/0x2d0 [ 714.835106][T15890] i2c_transfer+0x1cc/0x2d0 [ 714.839618][T15890] i2cdev_ioctl_rdwr+0x460/0x740 [ 714.844581][T15890] i2cdev_ioctl+0x6a5/0x880 [ 714.849070][T15890] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 714.854073][T15890] ? __fget_files+0x3a0/0x420 [ 714.858739][T15890] ? __fget_files+0x2a/0x420 [ 714.863406][T15890] ? bpf_lsm_file_ioctl+0x9/0x20 [ 714.868333][T15890] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 714.873344][T15890] __se_sys_ioctl+0xfc/0x170 [ 714.877922][T15890] do_syscall_64+0x14d/0xf80 [ 714.882498][T15890] ? trace_irq_disable+0x3b/0x150 [ 714.887508][T15890] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.893557][T15890] ? clear_bhb_loop+0x40/0x90 [ 714.898222][T15890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.904100][T15890] RIP: 0033:0x7fd81819c799 [ 714.908521][T15890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 714.928113][T15890] RSP: 002b:00007fd8163f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 714.936517][T15890] RAX: ffffffffffffffda RBX: 00007fd818415fa0 RCX: 00007fd81819c799 [ 714.944563][T15890] RDX: 0000200000000080 RSI: 0000000000000707 RDI: 0000000000000008 [ 714.952519][T15890] RBP: 00007fd818232c99 R08: 0000000000000000 R09: 0000000000000000 [ 714.960472][T15890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 714.968424][T15890] R13: 00007fd818416038 R14: 00007fd818415fa0 R15: 00007fd81853fa48 [ 714.976407][T15890] [ 714.979699][T15890] Kernel Offset: disabled [ 714.984012][T15890] Rebooting in 86400 seconds..