last executing test programs: 9.720120987s ago: executing program 4 (id=4448): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000104000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000001400001c00128009000100626f6e64000000000c000280080013"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000800) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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"/654], 0x294}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 8.970957875s ago: executing program 4 (id=4451): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0x1, 0x4, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0xa6}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xf2b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000540)={0xaa, 0x310}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) readv(r5, &(0x7f0000000200)=[{&(0x7f0000000100)=""/155, 0x9b}], 0x1) syz_open_dev$evdev(&(0x7f0000001a80), 0x910, 0x200) 7.712581201s ago: executing program 1 (id=4457): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0xa53, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xffc, 0x6, 0x1, {0x22, 0x16f}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xd, 0x5}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$binderfs_ctrl(0xffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022070002000000000000004f"], 0x0}, 0x0) 7.701100849s ago: executing program 4 (id=4458): setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x23) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='cdg', 0x3) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=@newqdisc={0x54, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xffe0}, {0xf}, {0xe, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0xfffffffd, 0x0, 0x4, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4040c04) modify_ldt$write2(0x11, &(0x7f00000001c0)={0x1, 0x20000800, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}, 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="ce", 0x1}], 0x1}}], 0x1, 0x20040001) r1 = openat$drirender128(0xffffff9c, &(0x7f00000000c0), 0x50000, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000100)) 5.835120311s ago: executing program 3 (id=4462): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001400)={0x1, &(0x7f00000013c0)=[{0x6, 0x10, 0x6, 0x1ff}]}) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x9, 0x7fff0000}]}) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x401, 0x12, r0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x11000) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000b80)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000b40), 0x106}}, 0x20) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r5, &(0x7f0000000200)='m', 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f0000000100)) r7 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r7, 0x4122, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000780), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240), 0x111, 0x6}}, 0x20) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x200, &(0x7f00000006c0), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340), 0x2, 0x1}}, 0x20) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="06010000246837f73199aee6fd1c291b3091ec1a06000000975ad8ec030f5919f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e91ac5b1ed92f35389580994bb0df9bce07e7a80921888f984139f488d256a67fec0cbb5c4e93d5c151d97f676ab93b1efbd46f600dc964231e3257bf358448fddf894c0cdfa9115adbe5b19bc912fcbc8aac7719b649b1ff1267491da", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 5.52248178s ago: executing program 1 (id=4463): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xb1, 0x2, 0x7ffc1ff8}]}) (async) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x1, 0x4, &(0x7f0000000340)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) sched_getaffinity(0x0, 0x0, 0x0) r0 = io_uring_setup(0x6f2e, &(0x7f0000000000)={0x0, 0x77fe, 0x40, 0x1, 0x395}) (async, rerun: 32) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f40)={0x18, 0x1a, &(0x7f0000001000)=ANY=[@ANYBLOB="180000200600000000000008000000001827000036b963b4d269b4b923415d9671ca03b0aa7711bc0fe2a869d71fba33e4d1763aad0566c66d354232ba612c70300bcbce58bd260272e3e1361577b2917455c78526b82e89301896b7f8a4bf797321e8838d6017be27584a", @ANYRES32=0x1, @ANYBLOB="000000002eb3000018450000040000000000000000000000b7080000000000007b8af8ff00000000b7080000000100007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000018110000", @ANYRES32=0x1, @ANYBLOB="000000000000000018000000ff0f000000000000e7000000185400000c00000000000000000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x3, 0xf, &(0x7f0000000140)=""/15, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0xa, 0x4, 0x659f}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000280)=[0xffffffffffffffff], &(0x7f0000000ec0)=[{0x5, 0x1, 0x2, 0x41216520f9595e25}, {0x1, 0x4, 0xe, 0x5}, {0x3, 0x5, 0x2, 0x7}, {0x2, 0x2, 0x1, 0xea77b93f3d6b0f9a}, {0x1, 0x5, 0x0, 0x3}], 0x10, 0x7}, 0x94) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000012c0)={r1, 0xe0, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000000dc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000e00)=[0x0], 0x0, 0x81, &(0x7f0000000e40)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000e80), &(0x7f0000001140), 0x8, 0x9d, 0x8, 0x8, &(0x7f0000001180)}}, 0x10) (async) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_proto_private(r2, 0x891f, &(0x7f0000000000)="8b2fd43a") syz_clone3(&(0x7f00000001c0)={0x42323080, &(0x7f00000000c0), 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0}, 0x78) 5.33377693s ago: executing program 4 (id=4464): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000440)=""/247, 0x26) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x31, @tick=0xfffff797, 0x0, {0xfd, 0x2}, 0x0, 0x0, 0x4}) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) write(r2, &(0x7f0000000000)="240000001a005f0400f9f407000904018000000000000000000000000800020040000000", 0x24) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x4048aec9, &(0x7f0000000080)={0x1, 0x0, @ioapic={0x4, 0x7, 0x3, 0x2, 0x0, [{0xf, 0x0, 0x0, '\x00', 0xe}, {0x6, 0x0, 0x0, '\x00', 0xfc}, {0x1, 0x1, 0x7, '\x00', 0x3}, {0xfa, 0x8, 0x11, '\x00', 0xa0}, {0x1, 0xa}, {0xa, 0x3, 0x5}, {0xb8, 0xd6, 0xd, '\x00', 0x59}, {0xb, 0x1, 0xc, '\x00', 0x3}, {0x9, 0x7, 0x81, '\x00', 0x7}, {0x4, 0x6, 0x4, '\x00', 0x9}, {0x7, 0x5, 0xd, '\x00', 0xa}, {0x0, 0x4b, 0x45, '\x00', 0xc2}, {0x8, 0x4, 0x8, '\x00', 0x3}, {0x0, 0x3, 0xc5, '\x00', 0x7}, {0x5, 0xfd, 0x0, '\x00', 0x2}, {0xfe, 0x4, 0x6, '\x00', 0x9}, {0xc2, 0x9, 0x6, '\x00', 0x1}, {0x4, 0x7, 0x4, '\x00', 0x2}, {0xab, 0xef, 0x40, '\x00', 0x6}, {0x8, 0x0, 0x80, '\x00', 0x7}, {0x5, 0x3, 0x2, '\x00', 0x86}, {0x9, 0x49, 0xa, '\x00', 0xb0}, {0x86, 0x8e, 0x9, '\x00', 0x9}, {0x56, 0x3, 0x4, '\x00', 0x77}]}}) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req={0x9, 0x100, 0x4, 0xffffffff}, 0x10) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f0000000080)) tkill(r0, 0x7) 5.280557322s ago: executing program 1 (id=4465): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) r3 = inotify_init() r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r5, 0x0) connect$unix(r4, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r4, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) bind$unix(r4, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) close_range(r3, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x0) 4.966885485s ago: executing program 1 (id=4466): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r1 = openat$ttynull(0xffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000180)={0x1, 0x1, 0x40000000, 0xffffffff, 0x5, "15deef17db45842b73b09026544e9a75971a0f", 0xffff, 0x7}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000080)) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usbip_server_init(0x1) syz_usbip_server_init(0x3) syz_usbip_server_init(0x2) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) syz_usbip_server_init(0x0) syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) syz_usbip_server_init(0x0) r2 = syz_io_uring_setup(0x12c5, &(0x7f0000000200)={0x0, 0x5eda, 0x10100, 0x7ffffffd, 0x126}, &(0x7f0000000140)=0x0, &(0x7f0000000040)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RENAMEAT={0x23, 0x18, 0x0, 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0xa, 0x4000, @fd_index, 0x8, 0x0, 0x0, 0x8}) io_uring_enter(r2, 0x7330, 0x0, 0x0, 0x0, 0x0) 4.836935957s ago: executing program 0 (id=4467): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000040)={0x4, 0x100000, 0x0, 0xfffffffffffffffd}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) syz_open_procfs(0xffffffffffffffff, 0x0) unshare(0x28040600) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = fanotify_init(0x200, 0x800) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x7, 0x7, [@empty]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) fanotify_mark(r3, 0x80, 0x50000022, r2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000003c0)={'dummy0\x00', &(0x7f0000000180)=@ethtool_perm_addr={0x25}}) 4.552462215s ago: executing program 0 (id=4468): mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0xffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@ipv4_newroute={0xfffffffffffffd68, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_CLASS={0x1c}}}}]}, 0x38}}, 0x0) 4.220197698s ago: executing program 0 (id=4469): socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000180)=0x4, 0x4) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGPKT(r3, 0x80045438, &(0x7f0000000440)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) bind$can_j1939(r5, &(0x7f0000000040)={0x1d, r6, 0x8000000000000003}, 0x18) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x3f, 0x40206}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x8}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x50}, 0x1, 0x4000, 0x0, 0x44000}, 0x0) 4.176157082s ago: executing program 3 (id=4470): r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(0xffffffffffffffff, 0x80044dfe, &(0x7f00000001c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) socket(0x1e, 0x805, 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r5, &(0x7f0000000080)="008e", 0x2, 0xd1, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) recvfrom$unix(r6, 0x0, 0x0, 0x10102, 0x0, 0x0) splice(r3, 0x0, r4, 0x0, 0xfffd, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x1000000) 3.733352298s ago: executing program 4 (id=4471): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x300, 0x0, 0x2000, {0x0, 0x0, 0x0, 0x0, 0xe315}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x48}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 3.612963853s ago: executing program 1 (id=4472): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000300)=[@in6={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @remote}, 0x5}], 0x1c) setsockopt(r1, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) lseek(r1, 0x4, 0x0) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}]}, &(0x7f0000000440)=0x10) r3 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f0000000040)=0xfffffffb, 0x2) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000080)={r2, 0x2}, &(0x7f00000000c0)=0x8) socket$inet6_sctp(0xa, 0x5, 0x84) (async) close(0x3) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000300)=[@in6={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @remote}, 0x5}], 0x1c) (async) setsockopt(r1, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) (async) lseek(r1, 0x4, 0x0) (async) shutdown(r0, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}]}, &(0x7f0000000440)=0x10) (async) socket(0x2, 0x3, 0xff) (async) setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f0000000040)=0xfffffffb, 0x2) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000080)={r2, 0x2}, &(0x7f00000000c0)=0x8) (async) 2.834807657s ago: executing program 4 (id=4474): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000280), 0xffff}, 0x38) syz_io_uring_setup(0x24fa, &(0x7f0000000240)={0x0, 0x0, 0x40, 0x4}, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000340)={0x5, 0x3, 0x5, 0x1}) socket(0x2, 0x80805, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x81, 0x1ff, 0x801, 0x1}, 0x1c) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bind$tipc(r6, 0x0, 0x0) recvmmsg$unix(r5, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)=""/41, 0x29}], 0x1}}], 0x1, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x10}) ioctl$KVM_RUN(r4, 0xae80, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r7 = syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_ep_write(r7, 0x6, 0x5, &(0x7f0000000180)="c52508c840") r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000000340)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x8000}}) umount2(&(0x7f0000000300)='./file0\x00', 0x4) umount2(&(0x7f0000000240)='./file0\x00', 0x4) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000008100"], 0x50) write$UHID_CREATE2(r9, &(0x7f00000001c0)=ANY=[@ANYBLOB="1f"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 2.820935055s ago: executing program 3 (id=4475): socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r0 = openat$ttynull(0xffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000180)={0x1, 0x1, 0x40000000, 0xffffffff, 0x5, "15deef17db45842b73b09026544e9a75971a0f", 0xffff, 0x7}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000080)) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000300)=0x4, 0x4) writev(r2, &(0x7f0000000500)=[{&(0x7f0000000000)="f1", 0x1}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) syz_usbip_server_init(0x1) syz_usbip_server_init(0x3) syz_usbip_server_init(0x2) syz_usbip_server_init(0x0) syz_usbip_server_init(0x3) syz_usbip_server_init(0x5) syz_usbip_server_init(0x3) syz_usbip_server_init(0x0) syz_io_uring_setup(0x12c5, &(0x7f0000000200)={0x0, 0x5eda, 0x10100, 0x7ffffffd, 0x126}, &(0x7f0000000140)=0x0, &(0x7f0000000040)=0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RENAMEAT={0x23, 0x58, 0x0, 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) 2.55798727s ago: executing program 2 (id=4476): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) (async) process_vm_writev(0x0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000340)=""/70, 0x46}], 0x2, &(0x7f0000000c00)=[{&(0x7f0000000580)=""/161, 0xa1}, {&(0x7f0000000780)=""/176, 0xb0}, {&(0x7f0000000840)=""/195, 0xc3}, {&(0x7f0000000680)=""/48, 0x30}, {&(0x7f00000009c0)=""/22, 0x16}, {&(0x7f0000000a00)=""/240, 0xf0}, {&(0x7f0000000b00)=""/237, 0xed}], 0x7, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0xd55, {0x4, 0x2, 0x0, 0x9, 0x20000009, 0x40, {0x200000000006, 0xfffffffffffffffb, 0x4, 0x100000001, 0x0, 0x10000000, 0x6, 0x3, 0x80000002, 0xc000, 0x3, 0x0, 0x0, 0x0, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$security_capability(r0, &(0x7f00000001c0), 0x0, 0x0, 0x2) (async) syz_open_dev$usbmon(0x0, 0x4, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0xe101, 0x0) ioctl$TCSETS(r2, 0x40045431, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd368a6acfbb9f167}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3000000}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x50}, 0x1, 0x0, 0x0, 0x24000080}, 0x8000) (async) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x30, r3, 0x1, 0xea, 0x25dfdbfd, {{}, {0x0, 0x3}, {0x14, 0x19, {0x0, 0x0, 0x0, 0x100000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4004018}, 0x0) (async) r6 = socket(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) getsockname$packet(r8, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x4}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newtfilter={0x68, 0x28, 0x575ac7824d421509, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r9, {0xa}, {0x6}, {0xe, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x3c, 0x2, [@TCA_BPF_ACT={0x38, 0x1, [@m_tunnel_key={0x34, 0x4, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x68}}, 0x40) (async) socket(0x10, 0x3, 0x0) 2.493218221s ago: executing program 1 (id=4477): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000280), 0xffff}, 0x38) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f3, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000100)={'tunl0\x00', 0x0, 0x0, 0x10, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x3c, 0x14, 0x0, 0xfffc, 0xfb, 0x89, 0x0, @private=0xa010100, @local}}}}) connect$unix(r3, &(0x7f0000000080)=@abs, 0x6e) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000040)={0x40000000}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x924924924924c31, 0x3ec0) readv(r3, &(0x7f00000005c0)=[{&(0x7f00000000c0)=""/175, 0xaf}], 0x1) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000008100000000000000fdffffff2e24", @ANYRES32], 0x50) write$UHID_CREATE2(r7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1f"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r8 = io_uring_setup(0x3c91, &(0x7f0000000900)={0x0, 0x1246, 0x0, 0x1, 0x60}) r9 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r10 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOGETCMAP(r10, 0x4604, &(0x7f00000001c0)={0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r11, &(0x7f0000000300)=[{&(0x7f0000000540)=']', 0x1}, {&(0x7f0000000080)="c146", 0x2}], 0x2) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_clone(0x4907011, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40800) r12 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r12, 0x1, 0x32, 0x0, 0x0) syz_usb_control_io$rtl8150(r9, 0x0, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1.500043935s ago: executing program 2 (id=4478): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'dummy0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0xf9, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0xd8e, 0x1, 0x9, 0x5, 0x1, 0x37, 0x92fb, 0xc}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4804) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@getqdisc={0x24, 0x26, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xb}, {0xa, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00'}) 1.309929666s ago: executing program 0 (id=4479): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0x1, 0x4, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0xa6}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xf2b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000540)={0xaa, 0x310}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) readv(r5, &(0x7f0000000200)=[{&(0x7f0000000100)=""/155, 0x9b}], 0x1) syz_open_dev$evdev(&(0x7f0000001a80), 0x910, 0x200) 1.264920466s ago: executing program 3 (id=4480): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000280)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x38}}, @in6={0xa, 0x4e24, 0xd4, @empty, 0x9b}, @in={0x2, 0x4e24, @rand_addr=0x64010102}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, @in6={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xef6}], 0x84) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x88800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) syz_open_dev$sndmidi(&(0x7f0000000080), 0x3022, 0x40) syz_emit_ethernet(0x3a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004508002c0000000000299078010000000000000000000000001890780400"/58], 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x1, 0x6, 0xfffffffffffffffe, 0x4, 0x10003, 0x0, 0x5, 0x5, 0x7d, 0xfffffffffffffffe, 0xffffffffffffffff, 0x5, 0x2, 0x1, 0xb9, 0x8d], 0xeeee8000, 0x240984}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.204200373s ago: executing program 2 (id=4481): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x6, 0x5, 0xfe, "ff00"}) r1 = syz_open_pts(r0, 0x141701) ioctl$TCSBRK(r1, 0x5409, 0x100) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, 0x0) r3 = fanotify_init(0x200, 0x40000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0500000077000000430000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000ff03000027000000001400"/25], 0x50) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f0000000140)={r6, 0xe0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0xfffffec6, 0x0, 0x0, 0x0, 0x80003ffc, 0x8, 0x0, 0x0}}, 0x10) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, 0x0, 0xc000) connect$unix(r5, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000001c0)=@newlink={0x60, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x600a4, 0xc0}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0xffffffff}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0xa}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x60}}, 0x8000) ioctl$SNDCTL_SEQ_GETOUTCOUNT(0xffffffffffffffff, 0x4004510d, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) time(0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='.\x00', 0x10000a0) getuid() pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r8) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r9, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x58, r10, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0xca, 0x67}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="acfb7524", @ANYRES16=0x0, @ANYBLOB="00022dbd7000fbdbdf25750000000c00990000000000300000007801f080040005000500070099000000050007008100000005000f00e2000000040009000a00080008021100000100000a000200a2d1e618911400000400040038010c8003010200b1077984e4aa7d0779ebea10807b340c85df83b8cfd93c83869b0c83fd0a297ad812d8e770380bb7ed05f9b239ce46ae82c6074ce1ca2faf746fecab765e6ef4b643b3bb8b352ed8f3c20a8320ab133eb6f3d94320f67a81d59049cea193ab4cf33df3e541d71645c4d4468d85518ebcf9ca5f2dbd1f8ef56c199bba8a0d1d6d471fd5bba3b81f9b9e10ccc4768dd88f8888709e03206657b0cee642274a3103acf13fe09c3374884b9ea9b73e62d326c3b790295593ee78e6688a075934e1f35661bea8623a35a81c317153304068e8331c9aee1142cf777f2bd30685a8b03eaddcfb6ad76894b214eb8a92fc202335f649093b88199cc43c8d973dd98c04000500030001000000040001000500030000000000050003000500000005000300070000000400010005000300070000002800f08005000100000000000a0008000802110000000000040004000a00080008021100000100001001f08008000a00030000000500010002000000fc000b00dd529ff361f8c369e9d85dd3a9396cb3112692aebf9eeea8ff614106b0db74cc9c88bc333a0df6dd8f9dd6500ab01a2e8492d2cda20a9eae21d10b7af1cc831369b30a3d6659c8b7a1b2ab76d6a124861190a5830f85189967b36d10de135238f6a48cd3fc28cdd87d0c1d96a3dffe25e0f3fef51155062c5fd5364364ad00bf029d60bfd9c2fd2080ec3eadb21d01f28b902debf32f798db3e64c6887aaa4d818da1326a2afc5ea6b87addf37bd6d937740b1d4b7a51ab8c850de34c421b8cc1cdb5f528c4fa9db630d55f5c37da8da4ac18fc4c9444b250b2a4c3941972b15606345bab0f312fc1ca12d847e59d4d1ce966714610fb74dcc02f08005000f007f00000004000500050007008100000005000100020000000400050005000300010000000a000200901688a2dc8c00000a000800080211000001000088020d804400000042cd1dfeb8e5b2c5eb7ff9ce12ade64d09306fa44135cfe2a69f86129daa40a2a78520b52fb4cff6f1153f2ae4c9ec4466559ba51e137e0146464aaec4f7972e39000000a48d9df27625ab5d83793c835313016543475686790813537d37d3c195d9a3c9455206124d8230581402f52bd36fe1fcd2ac7ed647000000af000000a061798f8b10bf8b8f34b18d743e17e1a6fb86434c3eccb930f4e786cc52618125b20f3c0e66a3da0c414d6eab1563059a11e003a53f41bb5a607647518023595acead5003a6f14e0b80e33092b2cb8d34a884927f5e1c07c608926aac06384d4334cdf902954b0725baaf0c3dd869cefabadae435483789af619c418656c370cc86039c50d5a3f9bf6c45fb44bfa5d6392dbf0c111db7dd90178a735bc7d517d026660318ddade9e1083900570000004003e88bd190a4816c7fad497a38daa67ce23ca6a655384202941914ecb962a6b9ff810bcaafb8b7f650fdb48c04263b1aee2fcae9a38aca58e72bfd18996c179f862fa5b8b61c7e49aa9e217f5826ec80024800fc0000008c72d43dc88706b60b7597bcf338117f8d2c957067373c3862923a34f5693fbf44c021d279fcccee350bfe78c3b80a7bf2e75474115bdb4d7121bebf3b63add5339a124bfef69bdc22abace114255ebd6be6e036bde15ca7f041fd7956fd06f75288985734f0525e586e81073a99c1616888ff69bc30ea65eb9be85f628f1d085845c8b1a2950e10183d03037548d7d3e7c822eb92805aeacbc394145edd23280e7922166cb671d24f00ad469ec963fb6722de406cf1faf15aae59e1d53527a58337e15e3fc0c8f12e1ebec9e98b49736801a8c171d891a3e8871d80c3b0617da3764accc73aeb74444a5ed30c1f736c70f76d3d9bc2d90e1000f080050007000b000000040005000001f080fc000e80f500000098c5ae72045240ceeab078bbb6a63c9938b19645bec93425f733a0afcae5a241090b108d406a84cc255dd0784491a0bb0e0f2cab7a52444a88a13b3d9b3a37f2d4b0eef21d745575d4c302a376854ab822b637eb390e64a99572771068aa906dde74cda2b5f7ab7f1f368576cb9f8d9ea44b7869ce8c1931c6ef68dfc58d06aa6797e353cbf8b49e5e0e8e92505613737be5e930a0e4ce1da504b5061df9afdce9d188b5172e1b18d6c0f4ac35928f2a0cbed606207867b50231957832bb0f9e8d8409e0adfcec8117aecad0a7932f9e7b8ef1952de9a5939c51bc9aab4e76b1ba085475a946b2ed27161912a7b078747a0000004024f0800500100010000000050007001c0000009c010e80bd000000de45f426cb67ea8190df2402097d70bce1ce910ed326df709d585d8854ba2c62e9ddf312ded2c1aea461b6079c9e7fb81bcb513facb0d5572e7003533d1b878ddc8cb10c2595ddaa7ab3f8e1fbf70d0b87607683a7830fe16e49775967b5f62908065a6da7a7358bdbf14c797e137c1a8a0fcca211148ba7a12b092402ca3301b596fa06fed090caad1079723772c9f818be70035c24882533499d4a3911b580eb4c033bac909494f51f4715161cced11afdc31249d27b3631000000d500000002988f6ddc017a8e64bcf20cc1a49c6bb844565b046ea1bc47f2ec4014b6707754eab3a4e81871c76c8886ad9b1f7029737be725cad21de00c5866cf8d35d344391a5982cd07505f52306bca8c28f332483b801831686a16c5be8daf53907301ebae57a4a7a0ccf8cec3450ade70f7b3a5f66832225e65b470ae37cca1b346705b02b9dbea866c48005049c735b1c5426dc75cc73c2ac8db3b1944b3648f27b9c142317e9416337269b122785488e7a81f7bf62e642be6ec38d647e9017824f965c06513b107e0ac4ec39976dcf8171f3e00000008000a001f00000070220d8004100000e814c5cf189211be6becee0861000b8288b2782f2233996ac07ee5a9e802e1ec2cf20f5f82e098ef59b336c9b737ed7b6b93cae5782f6df1abd53d4f8662fb5fba75bfb5f7ced5119d6c87a66f038964ddc4a65afcb2936c722691a1db30ea565f4a4f9b1cf7f35396158040259c703098d8f8f381cee7587dbe211ceecf1c69ed0315643c6f48b8a7061d479e9b7fbbc1b373a94638bff7d003145c0af84920e4acf431b5f2f836e4449e58053e1e43c3ba1cf0197af317f1b035fb4b0d50ed0891b35dccf968b66e0d9875a210c38d673d13e2060a8000a942140b0859e94043fea79add38fef09e16a4b1808bb6525db8b6047d349dc91a139ead1a1428967f92861fd08e7bb1c2a86b7c088e1732d86b24a63d610a6b2620e31811685b782a2fe8030a137f13e9d3faff34f7cf84fd407eb701adeabdf223e6387f4e31f3793c23959289a9e0291d9e356845d2ffbcdefde4e8406c204baf210891bc06c5116d593b501bfaa8828ff562bcd8f4fd9f32c585cd746d53bf671819d0937872ab273cb4e68d8f8bf5e976657249d38b0ba94a08517c84fe291e5a07fb4284972c891ffc30f4d4df68f97790432fc31b3ec4b84d97857f2e09287eb9b1870c2693230d4c5be4061c0b24f9717c643eb9571e5771ea7c4cf9296ff846cd47b8635a600bd62810e8f1f75de80b743a7c48a6f76f56d1aad9b2360e72a66b5c753cbfa6b8064d44694f8f5c806609e251525f5bcea06383f20ad87c69aead87222e654ad4d6c9b6b69253cf405f0e3fcd865f1668be4bf414f738e238ba6447a8d764aa8f41517889e2d412626faf09a72e9dee91fd1862505a3e999ecbd71776ba1482ad1577faffd80d3ab783089c3e8f78899d7b6fea85ba266838dd659ec420efaf9247666664c606f631d050bd0ee405760db5e4537f3a603239fdc76ea98e00ca5e41d7278e226ab0c5ca0b84a7615cd3e41caec3614605f99b52c12d8523658e60d4448ad815448a69a45522b8a5fe8b178e1a433c84da2c40e74098ce2bbc6d8394e13234f4ff46b796e24c027a17ce0a520ee708b8f50cb9f203bd5b60f49a282449cae0bef6d56677e5899f39f7db96d280415c5b00c558cb735acf59e412b89a9acb39611871f20cbe71148a6b782ddbe04ab65fd568da48b8f880108407b146f649e5b20edc94b9461b9a06901aae0c75ee41a4f573bf7c83d7a027c0240d628b94141302aa16a75aef494e263829eb76816625f9f052c9eb631569bf608da88eeffd6e8d21686dd53422c1616d6694f5512356eaed2eb01e82b18820290ba03e8e33a858fe68a143996e656cfdae47824347d9d18cb85686114ab8ceb50f3437a96be4d6fb5c572ab52a25552a142d48b2dd987c5ca43937ce9563cc3b40fd1ca9ce316d5191b3311424d9d40776d41166315e135a4eb2d966e42e0436ca3a47e3c771b26c9cfd22c7d89a24ace8bfa9c8f8e9e6758e18fef1b0335c0427f2b7875e677ffa36d430b11427773c83a316e7c563d010b7bf5477d56eeb764f55ecc93baebdbd734e8335402608f35e83f0d0fb1cc181820015bc5859ac4921fc51df3ed10075dac95fd52aff828ec571e57e9eed8f6c58c42e7c1daf99fa0ef2a12c14b9f439506009b8e9757f281ed89ca3e73551c6dcccb57e0c876bf1afb70c7f33f8694c5cdebac6b04f76b22724028fe87242f7ca40b9b95482e71a132541811c5413890fc0f3c5a1c2416c317e1ebd63924c0fd9c1f5efd61ad5e8727a93ac78e38fae2cf5f745b29ad9d9f025509be42f64a64f5922daa224a432484dfb9f899b0ed824593780c74102e85279fea82acd6b4dbe5d2ba7ea3e2884812c4a82dd3c745019e43bb696aebf73924235f30b3894c0e2776dfedcd195fad065d64bdcc4aa88a7990c56f1ec3df5c95e3df58230ba76b0770cdf9534c13118a74dd18ef2f228f86889b5f54f35431ca13ead3b3e9759414d242e2e0f113a285f3d1fe0b75e8179173543078828c7d6ee3c588ce922cf82095889c96e7c306e15228256f611e67f22e84f849ca21afe25a64e23296c29c9e0b65aed70738414b2b816a2eb1c589e242f02087aba110589a7a8a615456652fb24082e6022ce14c06d1b2cf1b4b47caef618b137873c7c67cbb70363d1be5e4b77a9cdd2c3e57a2fb384443d2ecd4892f390400f215279cb9043795a28c62fab6b813896f7111c8a22698c00c8c7a5e91355cd40683cb2c9de271b5a99188a50b2d01a63eaff70afeb0425788a2574138b91d8b1d80bcfe1cc07a9ef1ff83a80fff185f523073010410466349d5773d23ee479b9e1a9f0c26f46bb75678140f7593ae851545c35d3289c15ba38cd2d72ff3855a64c95dd3f470282b1c71541cd8f0ab2f2ff771dc2b8780649a7951d053e98b0d162dab35fe51d9e177794e695de40a931e5c3174f04e420249f46f228b5e1596fff38f6f93157033157751ccca14db1a275c803a6b6bb629b4f95c65bb40e7dae8841a7b06355517db79081322d029f1d2836f489e6ffb06caf2d9c191127f84485eb097cbe9cf68634f90d014c471228293478bb4cad988de4378722710c437a0228903a4786fcd90fa1899ad8e970a329dbb74676570baa09c60d8196656bf43ddb25c14bd0348a1ed97f96ee2eb57ce42158cb8155a3b7c843527101c73388de75812eb86bd2d2815bb59e7a2923a23e62d63b444d832fc580657caef0e9a7c5e79f6bc633d5a97b1b459b70dc09eba11cfab38a23c72c396fae4e2480f6efe7c8d65bb73aa9c1c0570d2ae5d3cd71027b8201317310903f70fc704ad390de75016455fd3f23b77de1941757e4f06aaa28983319110e61b3d08c520fa8d6d9694bb740fe43a4846ad19e1ee57d7cfadff756c933ba4b636337b26982b29f4137275b9ad70a291c95780d5273fe986cc8999dc193608712dfd21d3d0354c2cd392ebe2063f3c2def33632ab2ba06d664916e8fe567377b08d8c507fb28921f7dfa54283fd7abadc686711842b63372fd9b70ad8458f0d6257676c72272e3dd7cf5eece90ffaafcb7ef7efbdf3395d2a99fa00a498456c9a992744c8f4476a8cdef12cb56260a81d474fd1184dc854d3a735968a70ecac60cfef2ed12c498de2f670fec7bb3413e62574f0ae3fa97619f718d817601e6e461834294b0f5e8daf1bf33df248ece87711806756aa3325e43babd58df112fa5c85ab53934fad8a3c008867df369bc2d677f49d1b5cc29ad551870d70b8058c4c1a88d7ddb7954fdfd593573be7d1d1c2f749cc91aa2be485044e76607ff72ec86288a0c333cc6e97a4be93cf189792de88fc9fbf8ab5f637963cd575dbc68f1174ba91e7b9a94ff6a8f0c74c53a7f12f410fbe7d8252a64a2dd32f2983aee76a09048023ac23a8bd1ae334c8743c16425b6568b8ba3957670c47193996a7889402061a61ca37b360522935482a951e7b3b23c21db264eb93679637a30d6d0ab1e454d1677db8bc91aeccf7e15ba576cb3a4e851dffe2c572034e3c7f1c5eecdb2a77e5f1757331548f7846918332f0f0a1cdd2a4753200cc12f22e823fcc1baef877fd154793dbebccda179bc1c7bc7577ca46c46f59982b59fb3cf203fdc8fc452543c29c53b1829e27e2c5aa61c64da327b2bcb08507515a579589aff7621132f4ba17653a0a598769a374a0a2aeabaaf69ff7a7243719bf3df2ace127f845af144eaf68608e60834e7dd4b8804af9e313d9776436a32eeefeb9fa069e0b5567f479402f2193de71896e0633acca7de21757f421448f7056b8a4c729fb4ff51479a26b0d7c079095cb687d2d59857bca35b24501389dfd763b288bbca245ac088ca275a6d35cca39a919351ec7497319f6d8fccbb4e79548b8a53c716907cd32a6c1ac4c3dba94d0f0384b7acc296bd31a35d92ad29dcb4f8f1cdfd7efcc8a17e696c7ebdfbedfbd3fa790e2e8e962fec98f4add9b668320636587886d278b65a59b730dfd3b8e9c57c2f72616e4ed7035d3836b136ca89b773e42e319a8df81cd73c11a3e3522459749dd75986f7392994a644b8b1f46045cf695879bff3357fe8aefa4326138a1271d2848a3fd6f3a4d30ab710336dfe790be35d945cc6481baf0910cb31579c2453aa1ccd861029e3485236c13a6972ce8eaeefe61752d0583db8bc190dc342fe987bd5ebbdad7f2b4382d2104b49dcd6b404344bc6af9355c1c6cef512e46ed3e877b33add287bbc70924c74d1e8a9e68d39ce3053153789a19841f737102787d811a7987ac63329a5f7be6a3a4c7dcea2acef202602c71ed7b0010de32f0f584d84674f56a08adda03482cd7732575f5e3b4feed9aceb7cf310c02992c15501844c12cfe3861daebc39b56d26f3eddd8d7de5612f20f65552649f69d68fc20e108c174d40a49ad5471e8f31b0a4814731989aa914667ea8faf92f72676ec211bf8b85d431176fe9dc2fa483d5dba33de192026119f42957d0fcdfe2286d406ca5668979f92708c3476a01613056fd057cfe9982eea93f6594beb5e776c2d01d05c8a91ad0d1f24a57b83b0f9a99c71229668e4570189ec4163a18daf6537eb4a3ff9c48eb64d0c0fd381a3937f1c44a7398e193e02397b340839455a2b8f130d6f0649ae82146bcf8e3bc9afe4c8ba1d44aa16c87cc0dcd5066df8ed343a9244685727787e2a6224337d38aedba92c1d1094e9b9a273944f4faa1c88a1accf8f2a017c4860b3c490ccfcc1ea2f75cef554b52b34cb6b089b970fd81067402f152351aa807dc5299a2f511b9369b88c3cc0e0b0415e2230431c5dc8b1fac787bb04fc7294f4453179d98c2d5ea9974f87a3802684cf761c9911d0f883cbfa12f6d640370bfe0f7869007ae16bcb214b450c3a823f7f143efff591df4c354a071a35448207a17c2d41bd96767ebd718af866e32590e1641eae941fb511314bc38e4adf0ce1c73cd61cecd4a4c48e4dc8a980183e90f33708fda0df34b80c41627f4805667b41a16d0158744decf25878fdfc6d68bfdc8897465b50cba5e414b242dba366f19f6f7415022771ad8a02a6d388ac149272b4877e9023ce67f4c9e8b3984441bc415d3a9e7416f83a124014a22c0e06ae9bd84edd15ec6f33eda8f34f10cd3dd797fe0567177eb37dd7442a59e416540bacefb3a59b40304e845e3c648335d51b490cfc348c48343bd76fbd6a7003e90c62ab156285dc265a74f9af9449d07e5fe5a961df3467a368c2a9d2e9d42c52291a64659fb2f6184967eb035406810e8c892c68afe7e8ace9944abe21a4dfd5c96f8c0cdcd3b5bdec6adf8c82b0c3263606df02e0a9dd5c12cb6529ddaf71f0ac245db9e5e9ebf62a9995171e1218b8d1017f6c7e9eb7f33a28dc993169e134500e38fab9ecb6ebba1af328d4888d1a75de002e12c90b497541553648abbffa677a8bb0d8b690d6d7e5764ce5cc4c3bcae07fc35a0033b64e8339702141b28344f5bc9242d7ba7023ca264e83a975bd89c207a8dd18de9b54fba7c637f92796ba9874d40bd4106ce7b86a8892b00b8fd3350f13e722d3ee0cf8b07c4df86dee788fde5c4bdfa8d1d6e7a6ffe86bed4b4abf263be15f46c756d042ef044a74044acaee45f9ef0d780aa8f1bef63b7fadd0ee43ff95f1ce8a8201f328c434b7c26daeba6f840db09aa6b11c06c31d1673ca0ea106e66901146784ba663002d747f6ac237913b0a161280dde5b001de67cefbc9dc6ba60ca56c14be5da2458945837e53f7e61107d0329842ff7ce76ebe9d6cc3c79b8506235a92ba404100000fcdafdafc2327f1c7bc005e48028b7a1c2a351a79cac5a556524ad1fcdfe0adc2e02e87c633a34ecc290e6b9b927a82dc4e563bdeab724a6637c42244af1123499115a4e032de4837f68adeaa1db601835290d89d73346bdf7e95e3d103ec49e0187bd8ea40af13ae3d5e06415913a2930d6c97cd061d7e2e416fc492bf6729be7220e0351cdce79b4fec39100d2874b9c49cf555c77a28a504ed24ba30c908a5abfa2e99ad5211c0ee13e57acf90ad30c79abeefbcd41eb71166e8776c70722d57523048cc3905c8861334eb00080362d9f0e02ae7a530923d1dfc8302d6f0f9653223c79b07914bead4e39e1a56720e1634def664abc66987343519bad4cb45962d9184d6d0d4f9f88b8269d52dfe425dbdcdd58a08f91e8e0eae293f21864c61f5d369188a384eefb3ccc31e6b7dbdeae6e671a1a2d6e159f2918229a5bf83cfde01ca9a1a3dec057a416acd80c87139a3f6d180e7659c5d59ef69561d6c792c0d9e540670a1ea36d3643095c798f7e814b188ed8c03fbe1d4602a6c8157e1fec680c538bd2fbac0a6480f2a0b4fb5eefcaeb1c2f6922755cc5fb8b276841e4101ddb2a6de48a43bad765fcaf9b63c069d3890c6ec42e15bf5d8b501ae88362ead5f6cea39e18d3181556f2631251e2fcb10564d38ae62ccb5038992404cb001be507f1bbf35eb11590d504afda40feda52b72d473bfb16b1d6126e9867d4cf9cd3d2fc17e56318b479066fb12116c3fa69bf824f8274d35aefe828749ad5914855ef8efa01b89fc63beaff796e072063e517975cde65d0d3d56025c53eeec01d2dcf77971e56f34596f78f0d8331c57877986c0cd64c09654333ce59f70862104a02a0972af119cab91e1e4c03986be46876919bbd7042508c04421439a89167feaf52c3c583d0a5d6ff2a4ef6da6383a953c478313677ef2eaf7105d54e0cb83dcd1800b3e98a234766d6ec3f9e6bf19af40f712bdb73a1f8e7a4c14d9deb7df77894fea9a703f523721d8a4418592c66a658a586822ed061414d65fffa74f0ff02d3324d3fe5f05d510a2070a114d071417f944643ad846134e2943a34ffa0c4ed8c4f644adc5409830b796c744e7b8acf9f3e03567a863bf0cd77d4f78ce7fff58212ab0ad607a99fe8a9aac7759f4b036ae203258a7e8f6b176f88055a42a05fc810719c121e0db7058ce620520e0d941a34feb6ca379632a5dbc2dc949e91c4057a5c76d5c28be086ad3e1ce43eeea2a22f2913d204ad4d1036b1c9b7c81bfafe341fab6b7e1dbeeaf9ef1757ffce19ca8032da22f9bef899864632d7439f53f56757f28d1c05db877d8ce9e84c2655dc8f5a79bf2919dcc8adb3d25e44d6da5c198fce49aae501441e50cb1f37958550553d68c54af8c93b33096304c239ba312aa1338d935054e102605de93edb1c323c55c29caaece878736254b132ab9caf631e89fe84e95de37ef8fb9dd32ad05b517d79093ae05a9df3fccf5e247158733e56d76e90dd2e54e0c8b6f33dec63c80df9d8d6263f42c4ed74aae35aa63dbe5d41b53b1b54931bf1af87dfadfacea6040c874ee9317c506d61b6bc26e109abff97166b433e05e4c7f185d7fd5d131488ef2fd0c5aab4552083cf65392e7d9da4e8c8da0deeadc67f3ed12d9de0b257dd99f07e41de438428e8b03584cf46b1e8d7251fb9f04d061cb70bab4edb0c60ccb46157d150d4347e85eff9324fc6ed0681744378473829cb451fb6c7bb6775198ad21fd6ae28167ec6e1321de6e84816d80e0d9b492218310d6ce6ae15fd3363601822bc42c159b7506d16270cf41de526e0e5e311c2d4b711cd454c27bb0eda3f922bf66c8e1e301ce478944bbece04f8816f2dadfee5e10c55fbc5cacafef9c184a7d0d12a9353db3da7f340bf96164cdfc833784a63348e887a559c26d105a0ee399c4f37285625af27a39a871d0b4ee9dc586c3df5bce1af3146f58147af55129da7340c7cb8bf7e6dd6f3df26c093c5377965925dffe8f86eb03c985fa0c972476979051c4f849814cefca9c3c87aac0e8cf8e4cf6a483bbf4219ea7aaf9fa15cb5eb9628c9f84ca93c13e186bc428a23e3b2d682739b692de8d5f2f6161a5378f1c5586fda95fde8d1c2ba9c95c5f5513c94982105961ee10136b1697af0fa07cc94e2a85f63e4b086020b658a56ee352897c93ee6a039ba3c7de883775ee509ffc0d96f888a70121b2683d49ea8883c10f8b1ac6efc3b1b0e1a9c130c6dbdcb67f7e831ee4510173580fcf49f2d4f18f724b32cf4b0c57c821072fcecd8e989b41cf0bdc58840ba26f24b89f08e9e7323f932b52051c3825274f6d89b845823bdb20a30f28b40d4a29f69bf9d86c4a27ad588ec456fb2bb593abbec209869ec77bc297fd2aacb5215eefaf5a055048e9cfd95f7ccd664450e9ca3add050c8964008495231200461a04cc4e912c60be59abbd05d1a4fcf4a0750276975ec134fcd9707f6064200a25b657396dedef460669e8cd8adabc29bc9841997368544372f7f18c10ab6cba2b147e79a40a00fb4f8199bff606a0e328c9262d71aebaebf85fdcc48c4d59a6c09036aef04eba25e5138e9a5b5a84037cd839c9d5e70c75eeb390e2f73502f5902f762b2eb1a7b5914890f193e5b2cbf2d33b46055b8500b5ab87e6a7c61c7ec89772d5823cdbecc9b77f1a8ce93ce8ce1e10025c982ba95dfb11763d105c957ce1042fbd11cf385d0bc97eb3d4887059e6d9e6381222d9573a469dbc88216a6fc19d0d239ff619c64c11f5d0e5a2521ee3bc000968f8fa0ddd325eb1c7cfe07e095baaefbb92d20027dfe0533e1524b572293733f2463b219a637881c98bca63de777e7fc3a238db45ff506defeb0b1dff4c4136051255eda6cbbdb5c46c091977247e211e394d030144f830a45750ebb9bc29739e2fdc59f8e4264f8ad144b456e191e1aa40e91725b803fe32e038242fbf9800a57649324aaa7c33ab29112fa871f326254c103f3845a14c59132308fb360dda3e62147eef7326e7c230cb2c139993eb644ed78a324f7640ab61b046971faa5b708d7be8c75e779323ea5eab365b69ecd52bfcb8d905e865f0d21d8726a244f688fe75b7cb8ed85314d60bd869b613e90d03b25ba27d15e8c8dff98b76e16bdaa228916b8547ee4e64e154b1339c5b08f3502b39a1089463ce0ff507cd66d553353dcead30daef19174b5f5ebc0e131fa04c6dd88a1937df7cf5416e0f9d4978066269a4adddfc7b0aa50c59fdaea656965dfc15b6f6387b2c08cce2d3b1f1833da79d5d9796680a40ea7165a8085d45d45c7988070ec5db3c8f71c9b6dd88f0a2ef3dc2979528681e3d05ee7b592d85fffb8cb32b082556ffd4d5a96131f56b8a68cf1830b4564ca9134e478774da07db29a196089f793d98b5598452310b32a640472756f6cbb3aa5222507d361ff91596628f6761a9d227376736d4f03150f95b1aa049bc0d1d78e6623cfd41d1069e3e8fce58cd12ce05d0d8ef03afbb7f6e0dc95de38914ebf5379880fe4c6398a69ef248ea9fd4c77b4daf72d145f8e3349cae265b2735b4b0638cd61bed13e7226d9ada76af9eb39197a54628923635427993a82f27c5b000e765130b1cb0d97e1028a5b693bed22d5cb3f005fda80f4f906bd95815b8004b0c86c63e8ea1ad160fa7c52d87e9a62f65afe38eef4c4f8c1f7e13fb8f809f6706e35031354d5ca2ebca83b1e7f30843294b052acc8f229845d9337ed8cdf9b2f8ee5ccdef630394d77bc06d28e4faa409ff0803a0f87827a783aa8a3edef40eed79b075f412a5739f576cef6af4fe93d27642001546b56f5ed8ad39e3a5450b38570fa8d826569d198a42f5eb085620abff6d72fb1c0f68b2ad6f317fb4e50ec10cec78979b1fce4587fbad59d9c04db57e3fa0a8a7e4261277c9a7623308b1d9f8d5de4b22ce0f2145872c339d3686ddeaa37850d3acd5982556695f02a399ad600efc4c7b433904d5361545009e9ffa72ebf476f763020f8badfda4e223c3821df79c51069b6f7aca0cd1ec8976003014443d13d1d6eae4bce8900c9100e17eb45bf1a20eec8bf9f8082d236f0d94b864f2ed7aad53bf0c806851be530dbd5f7348a3c1232570946b9029b753f9f27febc21ebf6290bb32250356c53325e5157fa70050e6dcc4a12f9aa9400a1b7370a7309e0ee4c594a151eef207c3033ba9c0f19b2d9b36a0fc0203b56f3a9519e0d1c841ae33a0cf6c21cb074c37b1697ee386e25d02e7391a58b60eaaad4daa68555f2d73da3160057ceee2691d74226005fb65b091bd7a98a1ef2b41345a301900cdd60f9c2c1919d18f433941062cf90ae7e5595771db65567e237c1d1884628c73aeb7bbe940f252b8cf3a3105c6288b7138680f9df1f458664dd26c5d7162f4ff3d85443b280d911524179149d98d062021510af44475cf23882eb0329886b4dcfe27d751662f92173ff2e36fe509cb601fae541b63e7b246fc1090706a715f89464bd072b5dc6dc3b5e1b79ef679462a40b06c88a052f7428b406b529b9508fe965c9072ec42b51b2a39ef711266c0e865db5b87a15f2513d6f510163c86aefbce1a50338c8a2f80dc8358ed9e084dafa7a4a1d8884b2c8ef3ec46dbbb6876e727dac53a9ebcb4d2f4edaebc3b1418db4340294dc0b7625c59e767b15698b21600ac76010c5345ebc2c0863f929718b9a5fc663935a36cc77a4b8f71a21c568de30158c02488d497edd8611be9815f051b49d78a2ed8fe0002a90a7ebb44582c19d04c35b079bdffd870db2e376a48d34a6053535c7d94bd48b14e2817c4208e8104fde09c69dc28729ad259dff895b119796b10563b65b76c3081736a67e5bfd70701562aff95bfebde3453f28868ebea4cd73fed7fe94fa03f57c7df1abd733e2287577d6d4b975f2c515cd14ff0faa095492c6cd45ae24e894774298769be53032f1a9431b786c22a02cd75afcf42ccf14fc0d7f82a5938307d4b6d79ca5c5f1a455d0aad4e835427123bf12b1f87381ea799dbbe576e230ef9223cd244a6da3805cdff22a664541cfaa36b179a4d43abe326fd1e56fb4b0d65a010646f5a57e9ad3595576e6413b1fcf8f0859338dae5f881ea7d4ed3429b261b743ee07c88e57b378f9bc7e079202d2ceec13fcddcbb8dc6ce5258e9310cdb1b3738281ee2e68c6c7d3e0cd7e699c76b1112ac15d7e876d945f2d7ffa49fa356bc6c7c3468d552bc12b8f424f19d4657abe5d91e27e6a4f35a8365d392583ba5c6f787a6612e880f4d7e950d5741793144d54aeec44926dbcd3c90c3c61f5ee9d3862cef2277f6bf5bfefb8ae521e93c7de4f7895ca72e92f25688a39762aa6d3ec539159e9d63f5ad35bbd03aefdf73c4a3940b1ccba2f5b001ffd9d3bf89adc0fa29a5d3d88193ec90d971a802701b990dbaba8235cfb71d24367d597433272a0a03686793ef6fa12c9f337ea3eaf3b86e14170f09b22570c1e652505a9db861677ccb13a010874eaf4043b0f157513f9d1a33bcb2234bfef1f811c7d0d173c590e7407a52bc9a2a044e2ba9c74c6db25ff1de0b591fb21fd9f57713761b698767a09f2720a8ab621a9ac5d815bb8ce80b61878e405f818500b8f6ddfc1bf19c0401e2ee741c557d08733e547d7663000fdac206b471e47cd23bedcea56991057563cbf3c229b335a955035ea8693ee2694736689d985cfab1b657cb76a5439453a4ce805e0d599288166481dbb6acf5a7a1136265dd416586756c1f92a7ae8e7216d23d941310530ba94ef6250c5afdb1e52000000e68378317faef869992f2bc1dcdb14063e8c4ab08a76c31a8c6f95cc059a754b757cb75c763fbef487d72ba63215466ccd2cf453a8962968ed370eea4e9bb39fc45960d7342ba1384337443e46bc00005900000065c3eb2743c9b6fee2aec5d79b9a880ff89291f776cd211ba49b7b88eb5198e3e1939007f1bff2aa07b751fb28318b0fded610e213fcbc887fa6cf987ef2d5cf13226fb28fac2dbc1ee9e7c4aeab7c5f1b44b3f98b000000de00000088320ef1279aa228786107ab3a19b4ba46a9b6fb60da909a301ff25ab5eadb01bcb49bb05eee6b7f501ce51296d71ccb5355157dcf86bb8ccbd718da48d4e1231ea652ac00a83dcad98c3fc83c960eb1b547fe04ce3cf7f5e550eefe11aa1174231dc50ed63c26849d41bf47e8a8c08c4ec5442ba7178427b51d9706df00efb6dcd9cf1ed03abb0b7336fb3fc018dc73ed44a26ded29918fa031057890d26c28d7b4f169d1f07a575b2c5ac81fe3ed61a3b898d36a522bfc061d9ae46aec845becbbd2ad647b47e2d14032fcae638b95379ee0f86ffe08e73c6b00005f00000041b95a6f12268f4aedeb85f50ccd5fc44ac804576d1156eb902f86eee9baa1c3c315b1664eef5f1ab8b97ad4b0d9d062a06c84530c917f0cd98a2ff97e25430b27c5d060d8a40d3711f6e8ed7311cd62bf07b4cdecbcee5b4a40100009000000040d18ace600000068000000320818d7f4f44d6b3ced1fcfbe852721729c971e79554ad3517a589a1f72e17c793e159285109a4da8ed712a3bb8deeff27a05823591c66c235e6dad0d60a1e31fecf181f1361514b1f0288627fbb436ee1fe3602e3cb6b41e49d2288119f3e066e1e19705000300050000000a000800080211000000000004000400"], 0x2aec}, 0x1, 0x0, 0x0, 0x200400c4}, 0x4000000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) 925.662359ms ago: executing program 3 (id=4482): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x0, 0x10000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0xaa}, @IFLA_GRE_ENCAP_TYPE={0x6}]}}}]}, 0x40}}, 0x90) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r6 = accept4$alg(r5, 0x0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000000300)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="146f7917d5eadaa2da68c8e328afe2ad6a41cef9b5291be9b05c31391449be2eb96dfde10819b2d07711f4c1b74093eac692", 0x32}], 0x1, &(0x7f0000000580)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40}], 0x1, 0x2004001) io_setup(0xff, &(0x7f0000000380)=0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x6}, @IFLA_GRE_IKEY={0x8, 0x4, 0x7ff}]}}}]}, 0x48}}, 0x0) io_submit(r7, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r6, &(0x7f0000000340), 0x41}]) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000540)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x503, 0x4070bd29, 0xffffbffc, {0x0, 0x0, 0x0, 0x0, 0x68315}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0x2}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5, 0x1b, 0x17}]}}}]}, 0x4c}}, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000280)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000280), 0x2, r9}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000380)=[r9], &(0x7f00000003c0)=[0x401], &(0x7f00000001c0)=[r11, r11], &(0x7f0000000180), 0x0, 0x8000000000009}) 475.959627ms ago: executing program 3 (id=4483): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r3, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SUBDIVIDE(r3, 0xc0045009, &(0x7f0000000140)=0x1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f00000003c0)}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@getchain={0x54, 0x66, 0x8, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xb}, {0x0, 0xffe0}, {0x4, 0xe}}, [{0x8, 0xb, 0x8001}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0xe}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x2}]}, 0x54}}, 0x0) socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000400)={'#! ', './file1/../file0', [], 0xa, "0002783348b29e7bcaf3e29c2593b929f38db16e33ea96f57d49c226f35d"}, 0x32) write$UHID_INPUT(r4, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) socket$nl_netfilter(0x10, 0x3, 0xc) mbind(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x2, &(0x7f0000000000)=0x101, 0x29, 0x0) set_mempolicy_home_node(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x4, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x9a0, 0x482}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040854}, 0x24014080) r6 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14, 0x800) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f00000001c0)=@req={0x7fffffff, 0xf0a, 0xfb, 0x10}, 0x10) r7 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x0) syz_usb_disconnect(r7) syz_usb_connect$cdc_ecm(0x5, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a4400000000101090244000101000000090400001202060000052406000005240000000d240f00e50000008700060000090581030002"], 0x0) ioctl$EVIOCRMFF(r7, 0x4004550f, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000200), 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0x8c) 300.848265ms ago: executing program 2 (id=4484): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x40000000, 0xfffffffd, {0x7, r1}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x2, 0x1, {@ip4=@loopback}}}]}, 0x38}, 0x1, 0x0, 0x86ddffff, 0x4}, 0x0) 239.761291ms ago: executing program 0 (id=4485): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0xd51f5000) 218.072248ms ago: executing program 2 (id=4486): socket$vsock_stream(0x28, 0x5, 0x28) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xeed42, 0x0) sendfile(r0, r0, 0x0, 0x200000) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000005c0), 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000000108010a0000020600024000f500003100024080f300"/36], 0x24}, 0x1, 0x0, 0x0, 0x4000030}, 0x80000c8) recvmmsg(r1, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000c80)=[{0x0}, {&(0x7f0000000a40)=""/147, 0x93}], 0x2}, 0x10001}], 0x1, 0x10002, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, &(0x7f0000000380)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0) write$vga_arbiter(r3, &(0x7f0000000280)=@other={'decodes', ' ', 'io'}, 0xb) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000180)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000180)=0x2, 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) prctl$PR_GET_NAME(0x10, &(0x7f00000000c0)=""/223) r4 = memfd_create(&(0x7f00000002c0)='%\x00#D)\xdeA\x02\n,\x06\x89\x96\x8f\xd3F\x9fe\xf7\x9f\x9f\x0f\xeb\v\xc3\x86%0\x05\x9d4\xfa\x92H\x89m\x14>4\xe4\xb4m\fF\xaf\x9d&\x05\xcf\xc1HZ\x9a\xa3X\xaa;t\x12\'\xf5\x18PvY', 0x6) preadv2(r4, &(0x7f0000000340)=[{&(0x7f0000000180)=""/157, 0x9d}], 0x1, 0x0, 0x0, 0x0) close(r0) 116.182853ms ago: executing program 0 (id=4487): socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000180)=0x4, 0x4) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGPKT(r3, 0x80045438, &(0x7f0000000440)) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) syz_usbip_server_init(0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000040)={0x1d, r5, 0x8000000000000003}, 0x18) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x3f, 0x40206}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x8}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x50}, 0x1, 0x4000, 0x0, 0x44000}, 0x0) 0s ago: executing program 2 (id=4488): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x581341) ioctl$VT_ACTIVATE(r0, 0x4b3c, 0x3) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x4000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="004a189409d6ff03f1ad9f73b80328bd7000fbdbdf25"], 0x1c}, 0x1, 0x0, 0x0, 0x6004805}, 0x4) umount2(&(0x7f0000000480)='./file0\x00', 0x7) rmdir(&(0x7f0000000000)='./file0\x00') r4 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), 0x0, 0x0, 0xfffffffffffffffd) r5 = socket$packet(0x11, 0x3, 0x300) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x4, &(0x7f0000020440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@generic={&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x18}, 0x14) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000980)=r6, 0x4) syz_emit_ethernet(0x120, &(0x7f00000009c0)={@local, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x2a, 0x112, 0x66, 0x0, 0x3, 0x2f, 0x0, @rand_addr=0x64010102, @private=0xa010101}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [], "1de4bff8bbd7b944a9578fec1f247f6fb2677dd6b715b9460801987c0b371e1e48ecf2e8d565776a4202e91eab466f2a7d7854f348f0febc6e4c026708b187c45bbb23fc6da8689b4a9f59d3f6a18523b346976074dc88b7608de8812cee728846a681b6a471ccb1bac1466ec12e555f5934354236eb3bcb1621361eb3c0b32c99b15fbc061abfdeab4794debd83e2c2489648c7185a44cd2f6808344c13232935c75f495a5215ff4a946486b5de4325cf8959ffaf8931a00848"}, {0x0, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x3, {{0x6, 0x1, 0x91, 0x3, 0x0, 0x2, 0x1, 0xb}, 0x1, {0x7ff}}}, {0x8, 0x22eb, 0x2, {{0x0, 0x2, 0x6c, 0x0, 0x0, 0x3, 0x6, 0xff}, 0x2, {0x1, 0x1ff, 0x0, 0x3, 0x0, 0x1, 0x1}}}, {0x8, 0x6558, 0x3}}}}}}, 0x0) add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000006900), 0x0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={0x0, r4, r4}, 0x0, 0x0, &(0x7f0000000180)={0x0}) r7 = syz_open_dev$loop(&(0x7f0000000000), 0xf01c, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000002c0)={r8, 0x0, {0x2a00, 0x80010000, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x1e, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea8a1d91bec8d4b5a6d80b8785d9600010000000000000094d75396dccd0ff600000000a81b00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x1]}}) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, r8) unshare(0x20000) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20000000) close_range(r9, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): T21240] vhci_hcd: connection closed [ 1074.270378][T21235] vhci_hcd: connection reset by peer [ 1074.292103][ T1330] vhci_hcd vhci_hcd.3: release socket [ 1074.304269][ T1330] vhci_hcd vhci_hcd.3: disconnect device [ 1074.344419][ T1330] vhci_hcd vhci_hcd.3: stop threads [ 1074.349704][ T1330] vhci_hcd vhci_hcd.3: release socket [ 1074.379536][ T1330] vhci_hcd vhci_hcd.3: disconnect device [ 1074.398695][ T1330] vhci_hcd vhci_hcd.3: stop threads [ 1074.413944][ T1330] vhci_hcd vhci_hcd.3: release socket [ 1074.419513][ T1330] vhci_hcd vhci_hcd.3: disconnect device [ 1074.529897][ T1330] vhci_hcd vhci_hcd.3: stop threads [ 1074.563433][ T1330] vhci_hcd vhci_hcd.3: release socket [ 1074.585864][ T1330] vhci_hcd vhci_hcd.3: disconnect device [ 1074.612006][ T1330] vhci_hcd vhci_hcd.3: stop threads [ 1074.623946][ T1330] vhci_hcd vhci_hcd.3: release socket [ 1074.638525][ T1330] vhci_hcd vhci_hcd.3: disconnect device [ 1075.784196][T21275] netlink: 'syz.3.4027': attribute type 10 has an invalid length. [ 1075.821570][T21275] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4027'. [ 1075.853096][T21275] dummy0: entered promiscuous mode [ 1075.859205][T21275] bridge0: port 3(dummy0) entered blocking state [ 1075.865812][T21275] bridge0: port 3(dummy0) entered disabled state [ 1075.914355][T21275] dummy0: entered allmulticast mode [ 1075.966129][T21275] bridge0: port 3(dummy0) entered blocking state [ 1075.972715][T21275] bridge0: port 3(dummy0) entered forwarding state [ 1076.574936][T21282] netlink: 'syz.1.4028': attribute type 10 has an invalid length. [ 1076.599692][T21282] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4028'. [ 1076.617226][T21282] dummy0: entered promiscuous mode [ 1076.658360][T21282] bridge0: port 3(dummy0) entered blocking state [ 1076.679352][T21282] bridge0: port 3(dummy0) entered disabled state [ 1076.690327][T21282] dummy0: entered allmulticast mode [ 1076.706242][T21282] bridge0: port 3(dummy0) entered blocking state [ 1076.712806][T21282] bridge0: port 3(dummy0) entered forwarding state [ 1077.495624][T21297] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(15) [ 1077.502299][T21297] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1077.564019][T21297] vhci_hcd vhci_hcd.0: Device attached [ 1077.585202][T21304] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(18) [ 1077.591870][T21304] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1077.630867][T21304] vhci_hcd vhci_hcd.0: Device attached [ 1077.698952][T21308] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(17) [ 1077.700503][T21297] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1077.705607][T21308] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1077.708910][T21308] vhci_hcd vhci_hcd.0: Device attached [ 1077.961574][ T10] usb 37-1: new low-speed USB device number 31 using vhci_hcd [ 1077.972059][T21297] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(20) [ 1077.978732][T21297] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1077.994659][T21297] vhci_hcd vhci_hcd.0: Device attached [ 1078.010714][T21320] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 1078.017287][T21320] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1078.022521][T21304] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(26) [ 1078.031427][T21304] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1078.039653][T21320] vhci_hcd vhci_hcd.0: Device attached [ 1078.106684][T21297] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1078.123652][T21304] vhci_hcd vhci_hcd.0: Device attached [ 1078.138954][T21319] vhci_hcd: connection closed [ 1078.139130][ T1112] vhci_hcd vhci_hcd.2: stop threads [ 1078.146394][T21309] vhci_hcd: connection closed [ 1078.150930][ T1112] vhci_hcd vhci_hcd.2: release socket [ 1078.151463][T21302] vhci_hcd: connection reset by peer [ 1078.167447][T21317] vhci_hcd: connection closed [ 1078.167540][T21305] vhci_hcd: connection closed [ 1078.175438][ T131] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 1078.190230][ T1112] vhci_hcd vhci_hcd.2: disconnect device [ 1078.251511][ T1112] vhci_hcd vhci_hcd.2: stop threads [ 1078.257200][ T1112] vhci_hcd vhci_hcd.2: release socket [ 1078.262740][ T1112] vhci_hcd vhci_hcd.2: disconnect device [ 1078.273466][T21321] vhci_hcd: connection closed [ 1078.278256][ T1112] vhci_hcd vhci_hcd.2: stop threads [ 1078.309915][ T1112] vhci_hcd vhci_hcd.2: release socket [ 1078.391372][ T1112] vhci_hcd vhci_hcd.2: disconnect device [ 1078.397761][ T1112] vhci_hcd vhci_hcd.2: stop threads [ 1078.403018][ T1112] vhci_hcd vhci_hcd.2: release socket [ 1078.418041][ T1112] vhci_hcd vhci_hcd.2: disconnect device [ 1078.445107][ T1112] vhci_hcd vhci_hcd.2: stop threads [ 1078.450496][ T1112] vhci_hcd vhci_hcd.2: release socket [ 1078.454069][ T6134] usb 33-1: new low-speed USB device number 33 using vhci_hcd [ 1078.464506][T21322] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 1078.477828][ T1112] vhci_hcd vhci_hcd.2: disconnect device [ 1078.494355][ T1112] vhci_hcd vhci_hcd.0: stop threads [ 1078.505161][ T1112] vhci_hcd vhci_hcd.0: release socket [ 1078.514742][ T1112] vhci_hcd vhci_hcd.0: disconnect device [ 1079.006414][ T12] wlan1: Trigger new scan to find an IBSS to join [ 1079.113961][ T30] audit: type=1326 audit(1766069901.797:13089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21324 comm="syz.1.4039" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23539 code=0x7fc00000 [ 1079.262377][T21338] batadv_slave_0: entered promiscuous mode [ 1079.268591][T21338] batadv_slave_0: entered allmulticast mode [ 1079.277163][T21338] netlink: 'syz.2.4043': attribute type 8 has an invalid length. [ 1079.359143][ T5920] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 1079.389374][T21341] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 1079.395966][T21341] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1079.417493][T21341] vhci_hcd vhci_hcd.0: Device attached [ 1079.624292][T21342] vhci_hcd: connection closed [ 1079.634881][ T5968] vhci_hcd vhci_hcd.4: stop threads [ 1079.674678][ T5968] vhci_hcd vhci_hcd.4: release socket [ 1079.684713][ T5968] vhci_hcd vhci_hcd.4: disconnect device [ 1079.694378][T17672] usb 41-1: new low-speed USB device number 34 using vhci_hcd [ 1079.702887][T17672] usb 41-1: enqueue for inactive port 0 [ 1079.724582][ T5940] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1079.774037][T17672] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 1079.925326][ T5940] usb 2-1: Using ep0 maxpacket: 16 [ 1079.964926][ T5940] usb 2-1: config index 0 descriptor too short (expected 4495, got 71) [ 1079.973283][ T5940] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 1079.993705][ T5940] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1080.019875][ T5940] usb 2-1: config 0 has no interface number 0 [ 1080.145479][ T5940] usb 2-1: New USB device found, idVendor=046c, idProduct=14e0, bcdDevice= 0.01 [ 1080.156016][ T5940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1080.213816][ T5940] usb 2-1: Product: syz [ 1080.218477][ T5940] usb 2-1: Manufacturer: syz [ 1080.230976][ T5940] usb 2-1: SerialNumber: syz [ 1080.360631][ T5940] usb 2-1: config 0 descriptor?? [ 1080.386401][ T5940] uvcvideo 2-1:0.105: probe with driver uvcvideo failed with error -22 [ 1080.414389][T21356] netlink: 'syz.0.4046': attribute type 10 has an invalid length. [ 1080.422391][T21356] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4046'. [ 1080.526625][T21357] netlink: 'syz.3.4048': attribute type 10 has an invalid length. [ 1080.534717][T21357] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4048'. [ 1081.846404][T21364] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4049'. [ 1082.112400][ T6011] wlan1: Trigger new scan to find an IBSS to join [ 1082.198833][T21368] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(15) [ 1082.205495][T21368] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1082.296376][ T5940] usb 2-1: USB disconnect, device number 89 [ 1082.304960][T21375] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(18) [ 1082.311602][T21375] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1082.327508][T21373] openvswitch: netlink: Key type 31 is not supported [ 1082.351976][T21375] vhci_hcd vhci_hcd.0: Device attached [ 1082.362231][T21378] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(21) [ 1082.368879][T21378] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1082.392713][T21378] vhci_hcd vhci_hcd.0: Device attached [ 1082.406389][T21368] vhci_hcd vhci_hcd.0: Device attached [ 1082.427333][T21375] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1082.622615][T21368] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(17) [ 1082.629290][T21368] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1082.751781][T21375] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(26) [ 1082.753369][T21378] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1082.758451][T21375] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1082.808425][T17672] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1082.852113][T21368] vhci_hcd vhci_hcd.0: Device attached [ 1083.005707][T21375] vhci_hcd vhci_hcd.0: Device attached [ 1083.015908][T21384] vhci_hcd: connection closed [ 1083.016333][T21383] vhci_hcd: connection closed [ 1083.017480][T21376] vhci_hcd: connection closed [ 1083.023067][T21379] vhci_hcd: connection closed [ 1083.027472][T21371] vhci_hcd: connection closed [ 1083.037053][ T5968] vhci_hcd vhci_hcd.2: stop threads [ 1083.053707][ T5968] vhci_hcd vhci_hcd.2: release socket [ 1083.084002][T17672] usb 4-1: Using ep0 maxpacket: 8 [ 1083.089280][ T5968] vhci_hcd vhci_hcd.2: disconnect device [ 1083.089312][T21372] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 1083.106924][ T5968] vhci_hcd vhci_hcd.2: stop threads [ 1083.113276][T17672] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1083.127434][ T5968] vhci_hcd vhci_hcd.2: release socket [ 1083.138240][ T5968] vhci_hcd vhci_hcd.2: disconnect device [ 1083.152216][T17672] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1083.172758][ T5968] vhci_hcd vhci_hcd.2: stop threads [ 1083.188436][T17672] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1083.201397][ T5968] vhci_hcd vhci_hcd.2: release socket [ 1083.212809][ T5968] vhci_hcd vhci_hcd.2: disconnect device [ 1083.233967][T17672] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1083.248107][ T5968] vhci_hcd vhci_hcd.2: stop threads [ 1083.270668][ T5968] vhci_hcd vhci_hcd.2: release socket [ 1083.292751][ T5968] vhci_hcd vhci_hcd.2: disconnect device [ 1083.298831][T17672] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1083.316622][ T5968] vhci_hcd vhci_hcd.2: stop threads [ 1083.322807][T17672] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1083.330957][ T5968] vhci_hcd vhci_hcd.2: release socket [ 1083.350769][ T6011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1083.360541][ T5968] vhci_hcd vhci_hcd.2: disconnect device [ 1083.427246][ T10] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 1083.574250][ T6134] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1083.675047][T17672] usb 4-1: GET_CAPABILITIES returned 0 [ 1083.722908][T17672] usbtmc 4-1:16.0: can't read capabilities [ 1083.878850][T21382] netlink: 'syz.3.4052': attribute type 10 has an invalid length. [ 1083.931363][T21382] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4052'. [ 1083.971655][T21382] team0: entered promiscuous mode [ 1083.982471][T21382] team_slave_0: entered promiscuous mode [ 1084.009235][T21382] team_slave_1: entered promiscuous mode [ 1084.026372][T21382] team0: entered allmulticast mode [ 1084.041861][T21382] team_slave_0: entered allmulticast mode [ 1084.058554][T21382] team_slave_1: entered allmulticast mode [ 1084.103658][T21382] bridge0: port 4(team0) entered blocking state [ 1084.153658][T21382] bridge0: port 4(team0) entered disabled state [ 1084.173421][T21382] bridge0: port 4(team0) entered blocking state [ 1084.179899][T21382] bridge0: port 4(team0) entered forwarding state [ 1084.334005][T21411] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 1084.340686][T21411] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1084.354693][T21411] vhci_hcd vhci_hcd.0: Device attached [ 1084.492188][T21403] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4052'. [ 1084.530158][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1084.539597][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1084.548664][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1084.557762][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1084.566878][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1084.624483][ T5920] usb 41-1: new low-speed USB device number 35 using vhci_hcd [ 1084.672540][T21412] vhci_hcd: connection closed [ 1084.674168][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1084.688032][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1084.697113][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1084.706203][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1084.715285][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1084.733273][T17376] vhci_hcd vhci_hcd.4: stop threads [ 1084.738670][T17376] vhci_hcd vhci_hcd.4: release socket [ 1084.744217][T17376] vhci_hcd vhci_hcd.4: disconnect device [ 1084.754382][ T5920] usb 41-1: enqueue for inactive port 0 [ 1084.761862][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1084.771030][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1084.824351][ T5920] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 1084.923247][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1084.932453][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1084.941523][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1084.950611][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1085.014924][T21416] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4060'. [ 1085.336891][T21410] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 1085.343440][T21410] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1085.415091][T21410] vhci_hcd vhci_hcd.0: Device attached [ 1085.460869][T21418] vhci_hcd: connection closed [ 1085.467693][T20661] vhci_hcd vhci_hcd.0: stop threads [ 1085.483470][T20661] vhci_hcd vhci_hcd.0: release socket [ 1085.499211][T20661] vhci_hcd vhci_hcd.0: disconnect device [ 1086.370466][T21428] netlink: 'syz.4.4062': attribute type 10 has an invalid length. [ 1086.394456][T21428] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4062'. [ 1086.546734][ T6134] usb 4-1: USB disconnect, device number 93 [ 1086.984625][T21439] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(15) [ 1086.991383][T21439] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1087.004571][T21439] vhci_hcd vhci_hcd.0: Device attached [ 1087.035123][T21439] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(17) [ 1087.041781][T21439] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1087.079947][T21439] vhci_hcd vhci_hcd.0: Device attached [ 1087.134138][T21446] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(19) [ 1087.140891][T21446] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1087.190737][T21439] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1087.229880][T21446] vhci_hcd vhci_hcd.0: Device attached [ 1087.260329][T21439] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(21) [ 1087.267083][T21439] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1087.290791][ T6134] usb 33-1: new low-speed USB device number 34 using vhci_hcd [ 1087.333966][T21452] fuse: Unknown parameter '0xffffffffffffffff0x0000000000000007' [ 1087.335645][T21439] vhci_hcd vhci_hcd.0: Device attached [ 1087.356187][T21455] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1087.403415][T21446] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(26) [ 1087.410169][T21446] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1087.480951][T21446] vhci_hcd vhci_hcd.0: Device attached [ 1087.529864][T21453] vhci_hcd: connection closed [ 1087.530070][ T5976] vhci_hcd vhci_hcd.0: stop threads [ 1087.547174][T21450] vhci_hcd: connection closed [ 1087.547921][T21447] vhci_hcd: connection closed [ 1087.552950][T21444] vhci_hcd: connection closed [ 1087.557992][T21440] vhci_hcd: connection reset by peer [ 1087.584024][ T5976] vhci_hcd vhci_hcd.0: release socket [ 1087.609298][ T5976] vhci_hcd vhci_hcd.0: disconnect device [ 1087.634513][ T5976] vhci_hcd vhci_hcd.0: stop threads [ 1087.655686][ T5976] vhci_hcd vhci_hcd.0: release socket [ 1087.681505][ T5976] vhci_hcd vhci_hcd.0: disconnect device [ 1087.701498][ T5976] vhci_hcd vhci_hcd.0: stop threads [ 1087.714040][T21459] kAFS: unable to lookup cell '' [ 1087.725810][ T5976] vhci_hcd vhci_hcd.0: release socket [ 1087.745882][ T5976] vhci_hcd vhci_hcd.0: disconnect device [ 1087.757625][T21459] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1087.772174][ T5976] vhci_hcd vhci_hcd.0: stop threads [ 1087.782327][ T5976] vhci_hcd vhci_hcd.0: release socket [ 1087.812174][ T5976] vhci_hcd vhci_hcd.0: disconnect device [ 1087.831527][ T5976] vhci_hcd vhci_hcd.0: stop threads [ 1087.837773][ T5976] vhci_hcd vhci_hcd.0: release socket [ 1087.869946][ T5976] vhci_hcd vhci_hcd.0: disconnect device [ 1088.470174][T21478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4078'. [ 1088.593989][ T10] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1088.674047][ T5920] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1088.757133][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 1088.779892][ T10] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1088.788752][ T10] usb 2-1: config 0 has no interface number 0 [ 1088.795339][ T10] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1088.808674][ T10] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1088.823016][ T10] usb 2-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 1088.835912][ T5920] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1088.859598][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1088.868046][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1088.908830][ T5920] usb 5-1: config 0 descriptor?? [ 1088.914383][T21490] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 1088.920942][T21490] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1088.930264][ T10] usb 2-1: config 0 descriptor?? [ 1088.948968][ T5920] cp210x 5-1:0.0: cp210x converter detected [ 1088.950457][T21490] vhci_hcd vhci_hcd.0: Device attached [ 1089.220786][ T5839] usb 37-1: new low-speed USB device number 32 using vhci_hcd [ 1089.256992][T21491] vhci_hcd: connection reset by peer [ 1089.267603][ T1330] vhci_hcd vhci_hcd.2: stop threads [ 1089.273461][ T1330] vhci_hcd vhci_hcd.2: release socket [ 1089.279847][ T1330] vhci_hcd vhci_hcd.2: disconnect device [ 1089.413972][ T5940] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 1089.514139][ T10] usbhid 2-1:0.1: can't add hid device: -71 [ 1089.544060][ T10] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 1089.571413][ T10] usb 2-1: USB disconnect, device number 90 [ 1089.608678][ T5940] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1089.618540][ T5940] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1089.629091][ T5940] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1089.652704][ T5940] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice=20.41 [ 1089.665059][ T5940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1089.673334][ T5940] usb 1-1: Product: syz [ 1089.677641][ T5940] usb 1-1: Manufacturer: syz [ 1089.682744][ T5940] usb 1-1: SerialNumber: syz [ 1089.900441][ T5940] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 101 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1090.110746][ T5940] usb 1-1: USB disconnect, device number 101 [ 1090.159184][ T5940] usblp0: removed [ 1091.419414][T21515] trusted_key: syz.2.4084 sent an empty control message without MSG_MORE. [ 1091.489957][ T5920] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 1091.503154][ T5920] cp210x 5-1:0.0: querying part number failed [ 1091.546165][ T5920] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1091.585277][ T5920] usb 5-1: USB disconnect, device number 97 [ 1091.631937][ T5920] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1091.659685][ T5920] cp210x 5-1:0.0: device disconnected [ 1092.056448][T21522] can: request_module (can-proto-3) failed. [ 1092.434183][ T6134] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1092.466200][T21539] openvswitch: netlink: Key type 31 is not supported [ 1094.374015][ T5839] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 1094.664917][T21556] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 1094.671586][T21556] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1094.813555][T21556] vhci_hcd vhci_hcd.0: Device attached [ 1095.102265][T21557] vhci_hcd: connection closed [ 1095.108465][ T4481] vhci_hcd vhci_hcd.0: stop threads [ 1095.124536][ T4481] vhci_hcd vhci_hcd.0: release socket [ 1095.130865][ T4481] vhci_hcd vhci_hcd.0: disconnect device [ 1095.164517][ T5940] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1095.566213][ T1112] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1095.845188][T21565] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(15) [ 1095.851824][T21565] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1095.933974][T21565] vhci_hcd vhci_hcd.0: Device attached [ 1095.951046][T21569] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(18) [ 1095.957713][T21569] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1096.033189][T21565] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(17) [ 1096.039836][T21565] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1096.105539][T21574] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1096.127754][T21569] vhci_hcd vhci_hcd.0: Device attached [ 1096.139541][T21565] vhci_hcd vhci_hcd.0: Device attached [ 1096.196952][ T5839] usb 37-1: new low-speed USB device number 33 using vhci_hcd [ 1096.231878][T21565] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(20) [ 1096.238511][T21565] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1096.294058][T21569] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(26) [ 1096.300736][T21569] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1096.311482][T21574] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1096.370735][T21565] vhci_hcd vhci_hcd.0: Device attached [ 1096.407668][T21569] vhci_hcd vhci_hcd.0: Device attached [ 1096.432100][T21580] vhci_hcd: connection closed [ 1096.432314][T20661] vhci_hcd vhci_hcd.2: stop threads [ 1096.463944][T20661] vhci_hcd vhci_hcd.2: release socket [ 1096.479725][T20661] vhci_hcd vhci_hcd.2: disconnect device [ 1096.567617][T21578] vhci_hcd: connection closed [ 1096.567902][ T5976] vhci_hcd vhci_hcd.2: stop threads [ 1096.585332][T21567] vhci_hcd: connection reset by peer [ 1096.591351][ T5976] vhci_hcd vhci_hcd.2: release socket [ 1096.599721][T21590] netlink: 'syz.4.4100': attribute type 10 has an invalid length. [ 1096.608724][T21590] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4100'. [ 1096.618553][T21572] vhci_hcd: connection closed [ 1096.618774][T21570] vhci_hcd: connection closed [ 1096.758641][ T5976] vhci_hcd vhci_hcd.2: disconnect device [ 1096.788137][ T5976] vhci_hcd vhci_hcd.2: stop threads [ 1096.823925][ T5976] vhci_hcd vhci_hcd.2: release socket [ 1097.029330][ T5976] vhci_hcd vhci_hcd.2: disconnect device [ 1097.044275][ T5976] vhci_hcd vhci_hcd.2: stop threads [ 1097.052220][T21598] FAULT_INJECTION: forcing a failure. [ 1097.052220][T21598] name failslab, interval 1, probability 0, space 0, times 0 [ 1097.065287][ T5976] vhci_hcd vhci_hcd.2: release socket [ 1097.071163][ T5976] vhci_hcd vhci_hcd.2: disconnect device [ 1097.169168][ T5976] vhci_hcd vhci_hcd.2: stop threads [ 1097.174705][T21598] CPU: 0 UID: 0 PID: 21598 Comm: syz.1.4104 Tainted: G L syzkaller #0 PREEMPT(full) [ 1097.174737][T21598] Tainted: [L]=SOFTLOCKUP [ 1097.174744][T21598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1097.174757][T21598] Call Trace: [ 1097.174765][T21598] [ 1097.174775][T21598] dump_stack_lvl+0x189/0x250 [ 1097.174805][T21598] ? __pfx____ratelimit+0x10/0x10 [ 1097.174839][T21598] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1097.174863][T21598] ? __pfx__printk+0x10/0x10 [ 1097.174909][T21598] should_fail_ex+0x414/0x560 [ 1097.174946][T21598] should_failslab+0xa8/0x100 [ 1097.174973][T21598] __kmalloc_cache_noprof+0x84/0x700 [ 1097.174996][T21598] ? sctp_add_bind_addr+0x8c/0x370 [ 1097.175030][T21598] sctp_add_bind_addr+0x8c/0x370 [ 1097.175062][T21598] sctp_copy_local_addr_list+0x30b/0x4e0 [ 1097.175094][T21598] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 1097.175122][T21598] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1097.175154][T21598] ? sctp_v4_is_any+0x35/0x60 [ 1097.175182][T21598] ? sctp_copy_one_addr+0x93/0x360 [ 1097.175213][T21598] sctp_bind_addr_copy+0xb3/0x3c0 [ 1097.175242][T21598] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1097.175270][T21598] sctp_connect_new_asoc+0x2e0/0x690 [ 1097.175294][T21598] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1097.175312][T21598] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1097.175339][T21598] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1097.175359][T21598] ? security_sctp_bind_connect+0x7e/0x2e0 [ 1097.175383][T21598] sctp_sendmsg+0x155c/0x2840 [ 1097.175415][T21598] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1097.175434][T21598] ? aa_sk_perm+0x15f/0x920 [ 1097.175461][T21598] ? aa_sk_perm+0x7ee/0x920 [ 1097.175490][T21598] ? __pfx_aa_sk_perm+0x10/0x10 [ 1097.175518][T21598] ? sock_rps_record_flow+0x19/0x410 [ 1097.175549][T21598] ? inet_sendmsg+0x2f4/0x370 [ 1097.175580][T21598] __sock_sendmsg+0x19c/0x270 [ 1097.175621][T21598] ____sys_sendmsg+0x52d/0x820 [ 1097.175656][T21598] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1097.175703][T21598] ___sys_sendmsg+0x21f/0x2a0 [ 1097.175761][T21598] ? __pfx____sys_sendmsg+0x10/0x10 [ 1097.175789][T21598] ? kstrtoull+0x12f/0x1d0 [ 1097.175856][T21598] ? __fget_files+0x2a/0x420 [ 1097.175882][T21598] ? __fget_files+0x3a0/0x420 [ 1097.175920][T21598] __sys_sendmmsg+0x28e/0x430 [ 1097.175952][T21598] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1097.175988][T21598] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1097.176032][T21598] ? ksys_write+0x22a/0x250 [ 1097.176051][T21598] ? exc_page_fault+0x82/0x100 [ 1097.176073][T21598] ? __pfx_ksys_write+0x10/0x10 [ 1097.176100][T21598] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 1097.176131][T21598] __do_fast_syscall_32+0x1f7/0x590 [ 1097.176156][T21598] ? rcu_is_watching+0x15/0xb0 [ 1097.176180][T21598] ? do_fast_syscall_32+0x34/0x80 [ 1097.176209][T21598] do_fast_syscall_32+0x34/0x80 [ 1097.176233][T21598] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1097.176259][T21598] RIP: 0023:0xf7f23539 [ 1097.176277][T21598] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1097.176297][T21598] RSP: 002b:00000000f541655c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 1097.176320][T21598] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000880 [ 1097.176335][T21598] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 1097.176348][T21598] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1097.176360][T21598] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1097.176373][T21598] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1097.176405][T21598] [ 1097.176516][ T5976] vhci_hcd vhci_hcd.2: release socket [ 1097.588287][T21594] netlink: 'syz.0.4102': attribute type 10 has an invalid length. [ 1097.602107][T21594] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4102'. [ 1097.816935][ T5976] vhci_hcd vhci_hcd.2: disconnect device [ 1098.774735][ T39] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1098.814077][T17672] usb 2-1: new full-speed USB device number 91 using dummy_hcd [ 1098.964021][ T39] usb 4-1: Using ep0 maxpacket: 32 [ 1098.975822][ T39] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1098.987364][T17672] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 1098.995967][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1099.034021][T17672] usb 2-1: config 0 has no interface number 0 [ 1099.054028][ T39] usb 4-1: config 0 descriptor?? [ 1099.078889][T17672] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1099.101501][T17672] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1099.120592][T17672] usb 2-1: Product: syz [ 1099.133895][T17672] usb 2-1: Manufacturer: syz [ 1099.138659][T17672] usb 2-1: SerialNumber: syz [ 1099.175185][T17672] usb 2-1: config 0 descriptor?? [ 1099.424984][ T39] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 1099.443016][T21624] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(20) [ 1099.449766][T21624] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1099.478057][T21624] vhci_hcd vhci_hcd.0: Device attached [ 1099.500413][ T39] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1099.523728][ T39] dib0700: firmware download failed at 7 with -22 [ 1099.524722][T21628] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(22) [ 1099.537808][T21628] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1099.576837][T21628] vhci_hcd vhci_hcd.0: Device attached [ 1099.586861][T21624] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(25) [ 1099.593496][T21624] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1099.619415][ T39] usb 4-1: USB disconnect, device number 94 [ 1099.667431][T21624] vhci_hcd vhci_hcd.0: Device attached [ 1099.669036][T21635] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1099.698167][T21624] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(24) [ 1099.704819][T21624] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1099.740341][T21624] vhci_hcd vhci_hcd.0: Device attached [ 1099.761441][T17672] keyspan 2-1:0.133: Keyspan 1 port adapter converter detected [ 1099.780982][T21628] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(31) [ 1099.787663][T21628] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1099.825224][T17672] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 81 [ 1099.827805][T21628] vhci_hcd vhci_hcd.0: Device attached [ 1099.833370][T17672] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 1 [ 1099.888982][T17672] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 2 [ 1099.896877][T21624] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(30) [ 1099.903482][T21624] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1099.942657][T17672] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1099.975381][T21638] IPv6: addrconf: prefix option has invalid lifetime [ 1099.982098][T21638] IPv6: addrconf: prefix option has invalid lifetime [ 1099.988857][T21638] IPv6: addrconf: prefix option has invalid lifetime [ 1100.003450][T21624] vhci_hcd vhci_hcd.0: Device attached [ 1100.056921][T21631] vhci_hcd: connection closed [ 1100.057029][T21629] vhci_hcd: connection closed [ 1100.057389][T21625] vhci_hcd: connection closed [ 1100.073578][T21636] vhci_hcd: connection closed [ 1100.089331][ T5920] usb 2-1: USB disconnect, device number 91 [ 1100.102986][ T5920] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1100.112610][ T61] vhci_hcd vhci_hcd.2: stop threads [ 1100.122186][ T61] vhci_hcd vhci_hcd.2: release socket [ 1100.155122][ T61] vhci_hcd vhci_hcd.2: disconnect device [ 1100.182581][T21645] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 1100.189153][T21645] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1100.197904][ T5920] keyspan 2-1:0.133: device disconnected [ 1100.213999][ T61] vhci_hcd vhci_hcd.2: stop threads [ 1100.231187][T21645] vhci_hcd vhci_hcd.0: Device attached [ 1100.284174][ T61] vhci_hcd vhci_hcd.2: release socket [ 1100.317678][ T61] vhci_hcd vhci_hcd.2: disconnect device [ 1100.341406][ T61] vhci_hcd vhci_hcd.2: stop threads [ 1100.357361][ T61] vhci_hcd vhci_hcd.2: release socket [ 1100.377919][ T61] vhci_hcd vhci_hcd.2: disconnect device [ 1100.452397][T17672] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1100.468665][T21648] vhci_hcd: connection closed [ 1100.493413][ T61] vhci_hcd vhci_hcd.2: stop threads [ 1100.516048][ T61] vhci_hcd vhci_hcd.2: release socket [ 1100.524108][ T39] usb 33-1: new low-speed USB device number 36 using vhci_hcd [ 1100.544288][T21649] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 1100.546391][ T61] vhci_hcd vhci_hcd.2: disconnect device [ 1100.564934][ T61] vhci_hcd vhci_hcd.0: stop threads [ 1100.570942][ T61] vhci_hcd vhci_hcd.0: release socket [ 1100.577638][ T61] vhci_hcd vhci_hcd.0: disconnect device [ 1100.627354][T17672] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1100.643344][T17672] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1100.664206][T17672] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1100.693253][T17672] usb 4-1: config 0 descriptor?? [ 1100.717072][T17672] pwc: Askey VC010 type 2 USB webcam detected. [ 1100.846549][T21642] vhci_hcd: connection closed [ 1100.846951][ T61] vhci_hcd vhci_hcd.2: stop threads [ 1100.860946][T21640] vhci_hcd: connection closed [ 1100.862036][ T61] vhci_hcd vhci_hcd.2: release socket [ 1100.925128][ T61] vhci_hcd vhci_hcd.2: disconnect device [ 1100.942182][ T61] vhci_hcd vhci_hcd.2: stop threads [ 1100.963205][ T61] vhci_hcd vhci_hcd.2: release socket [ 1100.980549][ T61] vhci_hcd vhci_hcd.2: disconnect device [ 1101.118685][T17672] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1101.136444][T17672] pwc: recv_control_msg error -32 req 02 val 2700 [ 1101.159165][ T5940] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1101.244072][T17672] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1101.275679][T17672] pwc: recv_control_msg error -32 req 04 val 1000 [ 1101.315083][ T5839] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 1101.324740][T17672] pwc: recv_control_msg error -32 req 04 val 1300 [ 1101.406048][ T5940] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1101.424713][ T5940] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1101.444031][ T5940] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1101.458305][T17672] pwc: recv_control_msg error -32 req 04 val 1400 [ 1101.483649][ T5940] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice=20.41 [ 1101.503659][T17672] pwc: recv_control_msg error -32 req 02 val 2000 [ 1101.516876][ T5940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1101.526443][T17672] pwc: recv_control_msg error -32 req 02 val 2100 [ 1101.556322][ T5940] usb 2-1: Product: syz [ 1101.560555][ T5940] usb 2-1: Manufacturer: syz [ 1101.568132][T17672] pwc: recv_control_msg error -32 req 04 val 1500 [ 1101.587691][ T5940] usb 2-1: SerialNumber: syz [ 1101.592845][T17672] pwc: recv_control_msg error -32 req 02 val 2500 [ 1101.607565][T17672] pwc: recv_control_msg error -32 req 02 val 2400 [ 1101.634343][T17672] pwc: recv_control_msg error -32 req 02 val 2600 [ 1101.641989][T17672] pwc: recv_control_msg error -32 req 02 val 2900 [ 1101.650471][T17672] pwc: recv_control_msg error -32 req 02 val 2800 [ 1101.906884][ T5940] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 92 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1102.025856][ T5920] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1102.108302][ T5940] usb 2-1: USB disconnect, device number 92 [ 1102.129605][ T5940] usblp0: removed [ 1102.211212][ T5920] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1102.235187][T17672] pwc: recv_control_msg error -71 req 04 val 1200 [ 1102.254231][ T5920] usb 3-1: New USB device found, idVendor=05a4, idProduct=8003, bcdDevice= 0.00 [ 1102.259245][T17672] pwc: Registered as video103. [ 1102.263328][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1102.314496][T17672] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input79 [ 1102.348354][ T5920] usb 3-1: config 0 descriptor?? [ 1102.366454][T17672] usb 4-1: USB disconnect, device number 95 [ 1102.439673][T21665] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4120'. [ 1102.586873][ T10] usb usb38-port1: attempt power cycle [ 1102.779709][ T5920] ortek 0003:05A4:8003.0022: unknown main item tag 0x0 [ 1102.793994][ T5920] ortek 0003:05A4:8003.0022: unknown main item tag 0x0 [ 1102.833217][ T5920] ortek 0003:05A4:8003.0022: unknown main item tag 0x0 [ 1102.843786][ T5920] ortek 0003:05A4:8003.0022: unknown main item tag 0x0 [ 1102.874246][ T5920] ortek 0003:05A4:8003.0022: unknown main item tag 0x0 [ 1102.896680][ T5920] ortek 0003:05A4:8003.0022: hidraw0: USB HID v0.00 Device [HID 05a4:8003] on usb-dummy_hcd.2-1/input0 [ 1103.014776][T17672] usb 3-1: USB disconnect, device number 94 [ 1103.162078][ T10] usb usb38-port1: unable to enumerate USB device [ 1103.268298][T21673] fido_id[21673]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1103.562649][ T5920] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 1103.775720][ T5920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1103.869909][ T5920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1103.891179][ T5920] usb 1-1: New USB device found, idVendor=044f, idProduct=b320, bcdDevice= 0.00 [ 1103.953941][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1103.982429][ T5920] usb 1-1: config 0 descriptor?? [ 1104.176315][T21685] netlink: 'syz.3.4125': attribute type 10 has an invalid length. [ 1104.223962][T21685] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4125'. [ 1104.408565][ T5920] thrustmaster 0003:044F:B320.0023: unknown main item tag 0x0 [ 1104.416852][ T10] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1104.431377][ T5920] thrustmaster 0003:044F:B320.0023: unknown main item tag 0x0 [ 1104.569768][ T5920] thrustmaster 0003:044F:B320.0023: unknown main item tag 0x0 [ 1104.577411][ T5920] thrustmaster 0003:044F:B320.0023: unbalanced collection at end of report description [ 1104.587837][ T5920] thrustmaster 0003:044F:B320.0023: parse failed [ 1104.597422][ T5920] thrustmaster 0003:044F:B320.0023: probe with driver thrustmaster failed with error -22 [ 1104.684012][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 1104.725213][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1104.736814][ T10] usb 3-1: config 13 has an invalid interface number: 50 but max is 0 [ 1104.745664][ T10] usb 3-1: config 13 has no interface number 0 [ 1104.751895][ T10] usb 3-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 16 [ 1104.762188][ T10] usb 3-1: config 13 interface 50 has no altsetting 0 [ 1104.773011][ T10] usb 3-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 1104.782533][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1104.820310][ T10] usb 3-1: Product: syz [ 1104.830505][ T10] usb 3-1: Manufacturer: syz [ 1104.862215][ T10] usb 3-1: SerialNumber: syz [ 1104.895463][T21690] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1105.180388][ T30] audit: type=1326 audit(1766069927.817:13090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21700 comm="syz.3.4132" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f77539 code=0x0 [ 1105.262545][ T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1105.284384][ T10] usb 3-1: MIDIStreaming interface descriptor not found [ 1105.421017][ T10] usb 3-1: USB disconnect, device number 95 [ 1105.662537][ T39] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1105.803194][T21714] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4133'. [ 1106.045982][T18374] usb 1-1: USB disconnect, device number 102 [ 1106.308501][T21725] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4135'. [ 1106.412789][T21725] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4135'. [ 1106.573650][T21735] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4138'. [ 1107.884738][ T5837] Bluetooth: hci2: command 0x0406 tx timeout [ 1108.273933][T21750] ªªªªªª: renamed from vlan0 (while UP) [ 1108.994121][T21770] netlink: 'syz.4.4149': attribute type 10 has an invalid length. [ 1109.002624][T21770] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4149'. [ 1111.691424][T21819] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4165'. [ 1112.721795][T21827] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4168'. [ 1112.767609][T21827] netlink: 'syz.0.4168': attribute type 30 has an invalid length. [ 1112.821766][ T5936] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1112.843134][T21827] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4168'. [ 1112.896085][T21827] netlink: 'syz.0.4168': attribute type 30 has an invalid length. [ 1112.934940][ T5936] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1112.943984][ T61] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1112.973433][T21828] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 1112.980012][T21828] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1113.015073][T21828] vhci_hcd vhci_hcd.0: Device attached [ 1113.061700][T20661] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1113.216693][T21831] vhci_hcd: connection closed [ 1113.232491][ T61] vhci_hcd vhci_hcd.2: stop threads [ 1113.246366][T21827] netlink: 'syz.0.4168': attribute type 6 has an invalid length. [ 1113.267484][ T61] vhci_hcd vhci_hcd.2: release socket [ 1113.281360][ T61] vhci_hcd vhci_hcd.2: disconnect device [ 1113.295656][T21827] netlink: 'syz.0.4168': attribute type 6 has an invalid length. [ 1113.409368][T21844] IPVS: set_ctl: invalid protocol: 47 255.255.255.255:20001 [ 1113.556619][T21853] vivid-007: disconnect [ 1114.297730][T21846] vivid-007: reconnect [ 1114.666610][T21865] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4178'. [ 1114.700094][T21874] tipc: Enabled bearer , priority 0 [ 1114.715637][T21874] syzkaller0: entered promiscuous mode [ 1114.721174][T21874] syzkaller0: entered allmulticast mode [ 1114.727164][T21872] netlink: 'syz.2.4178': attribute type 10 has an invalid length. [ 1115.719345][T21860] fuse: Unknown parameter 'grouk id' [ 1115.798104][T21883] tipc: Started in network mode [ 1115.803252][T21883] tipc: Node identity 7a0f6679cfef, cluster identity 4711 [ 1115.820865][T21883] tipc: Enabled bearer , priority 0 [ 1115.844992][T21885] tipc: Resetting bearer [ 1115.851853][T21873] tipc: Resetting bearer [ 1115.872191][T21873] tipc: Disabling bearer [ 1115.886246][T11092] tipc: Node number set to 3805486469 [ 1115.901940][T21883] tipc: Disabling bearer [ 1116.010695][ T5920] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1116.046816][T20661] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1116.153993][ T5920] usb 5-1: device descriptor read/64, error -71 [ 1116.207841][T21898] netlink: 'syz.1.4189': attribute type 10 has an invalid length. [ 1116.215800][T21898] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4189'. [ 1116.414152][ T5920] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1116.585722][ T5920] usb 5-1: device descriptor read/64, error -71 [ 1116.598846][T21902] batman_adv: batadv0: Adding interface: gretap1 [ 1116.613269][T21902] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1116.643140][T21902] batman_adv: batadv0: Interface activated: gretap1 [ 1116.715795][ T5920] usb usb5-port1: attempt power cycle [ 1116.936311][T21903] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 1116.944741][T21903] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1116.966332][T21903] vhci_hcd vhci_hcd.0: Device attached [ 1117.084225][T21904] vhci_hcd: connection closed [ 1117.098655][ T61] vhci_hcd vhci_hcd.3: stop threads [ 1117.113389][ T61] vhci_hcd vhci_hcd.3: release socket [ 1117.119818][ T61] vhci_hcd vhci_hcd.3: disconnect device [ 1117.153997][ T5920] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1117.174076][T11092] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 1117.182588][ T5920] usb 5-1: device descriptor read/8, error -71 [ 1117.393684][T21910] netlink: 'syz.0.4192': attribute type 21 has an invalid length. [ 1117.649629][ T5920] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1117.684370][ T5920] usb 5-1: device descriptor read/8, error -71 [ 1117.837902][ T5920] usb usb5-port1: unable to enumerate USB device [ 1117.988041][T21917] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(14) [ 1117.994676][T21917] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1118.070342][T21922] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(15) [ 1118.077012][T21922] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1118.094997][T21917] vhci_hcd vhci_hcd.0: Device attached [ 1118.105956][T21922] vhci_hcd vhci_hcd.0: Device attached [ 1118.119932][T21925] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(17) [ 1118.126583][T21925] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1118.137595][T21930] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(17) [ 1118.144242][T21930] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1118.159041][T21925] vhci_hcd vhci_hcd.0: Device attached [ 1118.175065][T21922] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(20) [ 1118.181705][T21922] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1118.184588][T21917] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(16) [ 1118.195857][T21917] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1118.222936][T21917] vhci_hcd vhci_hcd.0: Device attached [ 1118.225090][T21930] vhci_hcd vhci_hcd.0: Device attached [ 1118.252854][T21917] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1118.271943][T21917] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(25) [ 1118.278600][T21917] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1118.283525][T21939] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1118.301769][T21922] vhci_hcd vhci_hcd.0: Device attached [ 1118.309010][T21917] vhci_hcd vhci_hcd.0: Device attached [ 1118.324107][T21917] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(27) [ 1118.324991][T21930] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(24) [ 1118.330858][T21917] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1118.337462][T21930] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1118.354237][T21930] vhci_hcd vhci_hcd.0: Device attached [ 1118.373959][T18374] usb 35-1: new low-speed USB device number 33 using vhci_hcd [ 1118.386370][T21917] vhci_hcd vhci_hcd.0: Device attached [ 1118.388206][T21925] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1118.408552][T21922] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(22) [ 1118.415174][T21922] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1118.440172][T21940] vhci_hcd: connection closed [ 1118.440329][ T5968] vhci_hcd vhci_hcd.3: stop threads [ 1118.452636][T21937] vhci_hcd: connection closed [ 1118.453462][T21933] vhci_hcd: connection closed [ 1118.458514][T21926] vhci_hcd: connection closed [ 1118.463156][ T5968] vhci_hcd vhci_hcd.3: release socket [ 1118.463360][T21919] vhci_hcd: connection closed [ 1118.478817][T21930] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1118.493063][T11092] usb 39-1: new low-speed USB device number 30 using vhci_hcd [ 1118.500996][ T5968] vhci_hcd vhci_hcd.3: disconnect device [ 1118.518668][T21920] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 1118.526254][ T5968] vhci_hcd vhci_hcd.3: stop threads [ 1118.534628][T21922] vhci_hcd vhci_hcd.0: Device attached [ 1118.541983][T21945] vhci_hcd: connection closed [ 1118.544223][T21935] vhci_hcd: connection closed [ 1118.549077][T21923] vhci_hcd: connection reset by peer [ 1118.560058][T21931] vhci_hcd: connection closed [ 1118.560232][T21941] vhci_hcd: connection closed [ 1118.565368][ T5968] vhci_hcd vhci_hcd.3: release socket [ 1118.579596][ T5968] vhci_hcd vhci_hcd.3: disconnect device [ 1118.586279][ T5968] vhci_hcd vhci_hcd.3: stop threads [ 1118.591653][ T5968] vhci_hcd vhci_hcd.3: release socket [ 1118.597804][ T5968] vhci_hcd vhci_hcd.3: disconnect device [ 1118.604457][ T5968] vhci_hcd vhci_hcd.3: stop threads [ 1118.610242][ T5968] vhci_hcd vhci_hcd.3: release socket [ 1118.619013][ T5968] vhci_hcd vhci_hcd.3: disconnect device [ 1118.629519][ T5968] vhci_hcd vhci_hcd.3: stop threads [ 1118.637666][ T5968] vhci_hcd vhci_hcd.3: release socket [ 1118.645847][ T5968] vhci_hcd vhci_hcd.3: disconnect device [ 1118.652422][ T5968] vhci_hcd vhci_hcd.1: stop threads [ 1118.659642][ T5968] vhci_hcd vhci_hcd.1: release socket [ 1118.666597][ T5968] vhci_hcd vhci_hcd.1: disconnect device [ 1118.672959][ T5968] vhci_hcd vhci_hcd.1: stop threads [ 1118.679060][ T5968] vhci_hcd vhci_hcd.1: release socket [ 1118.692206][ T5968] vhci_hcd vhci_hcd.1: disconnect device [ 1118.698932][ T5968] vhci_hcd vhci_hcd.1: stop threads [ 1118.704832][ T5968] vhci_hcd vhci_hcd.1: release socket [ 1118.710610][ T5968] vhci_hcd vhci_hcd.1: disconnect device [ 1118.717220][ T5968] vhci_hcd vhci_hcd.1: stop threads [ 1118.727077][ T5968] vhci_hcd vhci_hcd.1: release socket [ 1118.732870][ T5968] vhci_hcd vhci_hcd.1: disconnect device [ 1118.741173][ T5968] vhci_hcd vhci_hcd.1: stop threads [ 1118.749334][ T5968] vhci_hcd vhci_hcd.1: release socket [ 1118.761530][ T5968] vhci_hcd vhci_hcd.1: disconnect device [ 1119.228729][ T30] audit: type=1326 audit(1766069941.917:13091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21951 comm="syz.0.4200" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf709d539 code=0x0 [ 1119.362916][T21963] IPv6: addrconf: prefix option has invalid lifetime [ 1120.451527][T21975] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 1120.458113][T21975] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1120.514238][T21975] vhci_hcd vhci_hcd.0: Device attached [ 1120.566282][T21980] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(18) [ 1120.572921][T21980] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1120.584335][T21980] vhci_hcd vhci_hcd.0: Device attached [ 1120.592900][T21980] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(20) [ 1120.599635][T21980] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1120.608992][T21980] vhci_hcd vhci_hcd.0: Device attached [ 1120.617855][T21980] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(22) [ 1120.624503][T21980] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1120.634295][T21980] vhci_hcd vhci_hcd.0: Device attached [ 1120.643564][T21980] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1120.659007][T21980] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(26) [ 1120.665669][T21980] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1120.674763][T21980] vhci_hcd vhci_hcd.0: Device attached [ 1120.683532][T21980] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(28) [ 1120.690182][T21980] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1120.701499][T21980] vhci_hcd vhci_hcd.0: Device attached [ 1120.713557][T21980] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(30) [ 1120.720190][T21980] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1120.728698][T21980] vhci_hcd vhci_hcd.0: Device attached [ 1120.738488][T21980] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1120.747884][T11228] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 1120.751757][T21994] vhci_hcd: connection closed [ 1120.759953][ T5920] usb 41-1: new low-speed USB device number 36 using vhci_hcd [ 1120.775239][T21992] vhci_hcd: connection closed [ 1120.775404][ T1330] vhci_hcd vhci_hcd.3: stop threads [ 1120.779215][T21985] vhci_hcd: connection closed [ 1120.784168][ T1330] vhci_hcd vhci_hcd.3: release socket [ 1120.786420][T21983] vhci_hcd: connection closed [ 1120.800257][T21989] vhci_hcd: connection closed [ 1120.818905][ T1330] vhci_hcd vhci_hcd.3: disconnect device [ 1120.836127][T21977] vhci_hcd: connection reset by peer [ 1120.856465][ T1330] vhci_hcd vhci_hcd.3: stop threads [ 1120.861749][ T1330] vhci_hcd vhci_hcd.3: release socket [ 1120.885245][ T1330] vhci_hcd vhci_hcd.3: disconnect device [ 1120.894530][ T1330] vhci_hcd vhci_hcd.3: stop threads [ 1120.899992][ T1330] vhci_hcd vhci_hcd.3: release socket [ 1120.907329][ T1330] vhci_hcd vhci_hcd.3: disconnect device [ 1120.914809][ T1330] vhci_hcd vhci_hcd.3: stop threads [ 1120.920152][ T1330] vhci_hcd vhci_hcd.3: release socket [ 1120.926913][ T1330] vhci_hcd vhci_hcd.3: disconnect device [ 1120.932949][ T1330] vhci_hcd vhci_hcd.3: stop threads [ 1120.939126][ T1330] vhci_hcd vhci_hcd.3: release socket [ 1120.947083][ T1330] vhci_hcd vhci_hcd.3: disconnect device [ 1120.953172][ T1330] vhci_hcd vhci_hcd.4: stop threads [ 1120.959261][ T1330] vhci_hcd vhci_hcd.4: release socket [ 1120.966220][ T1330] vhci_hcd vhci_hcd.4: disconnect device [ 1121.172226][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1121.179172][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1121.342208][T21996] vhci_hcd: connection closed [ 1121.342566][ T1330] vhci_hcd vhci_hcd.3: stop threads [ 1121.405417][ T1330] vhci_hcd vhci_hcd.3: release socket [ 1121.427894][ T1330] vhci_hcd vhci_hcd.3: disconnect device [ 1122.506629][ T5940] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 1122.664273][ T5940] usb 5-1: device descriptor read/64, error -71 [ 1122.731486][T22034] netlink: 'syz.0.4224': attribute type 10 has an invalid length. [ 1122.779100][T22034] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4224'. [ 1122.924056][ T5940] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1122.934565][ T10] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1123.094035][ T5940] usb 5-1: device descriptor read/64, error -71 [ 1123.117896][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1123.141278][ T10] usb 3-1: too many endpoints for config 1 interface 1 altsetting 0: 255, using maximum allowed: 30 [ 1123.153717][ T10] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1123.175211][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1123.231258][ T5940] usb usb5-port1: attempt power cycle [ 1123.453468][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1123.475000][T18374] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 1123.543728][ T10] usb 3-1: Product: syz [ 1123.624082][ T10] usb 3-1: Manufacturer: syz [ 1123.632588][ T10] usb 3-1: SerialNumber: syz [ 1123.637426][T11092] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 1123.664285][ T5940] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 1123.721106][ T5940] usb 5-1: device descriptor read/8, error -71 [ 1123.876553][ T10] cdc_ncm 3-1:1.0: skipping garbage [ 1123.994192][ T5940] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1124.036336][ T5940] usb 5-1: device descriptor read/8, error -71 [ 1124.164494][ T5940] usb usb5-port1: unable to enumerate USB device [ 1124.606361][T22050] libceph: resolve '. [ 1124.606361][T22050] #)|.زf͹Dza×ïÅ2sˆoÖw¿úÕ?£'Ê%ÐKAq‰f»CÖê¨Âz¿e­Sb3L)Hyúo¤¶ÿÿÿÿÿÿÿ÷ǤÜYšM¤¨ìó¤h‡E$ [ 1124.606361][T22050] ' (ret=-3): failed [ 1124.893925][T22029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1124.903333][T22029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1124.941368][ T10] cdc_ncm 3-1:1.0: bind() failure [ 1124.965210][T17672] usb usb40-port1: attempt power cycle [ 1125.029809][ T10] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1125.044334][ T10] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1125.068249][ T10] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 1125.097968][ T10] usb 3-1: USB disconnect, device number 96 [ 1125.453649][T22052] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 1125.460238][T22052] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1125.470256][T22052] vhci_hcd vhci_hcd.0: Device attached [ 1125.553909][T22053] vhci_hcd: connection closed [ 1125.554249][ T5976] vhci_hcd vhci_hcd.0: stop threads [ 1125.567409][ T5976] vhci_hcd vhci_hcd.0: release socket [ 1125.575681][ T5976] vhci_hcd vhci_hcd.0: disconnect device [ 1125.635201][T17672] usb usb40-port1: unable to enumerate USB device [ 1125.953958][ T5920] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 1126.143965][T17672] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1126.463950][T17672] usb 3-1: Using ep0 maxpacket: 32 [ 1126.473252][T17672] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1126.486430][T17672] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1126.544361][T17672] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1126.589407][T17672] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1126.653261][T17672] usb 3-1: config 0 descriptor?? [ 1127.135022][T17672] ft260 0003:0403:6030.0024: unknown main item tag 0x7 [ 1127.358096][T22079] bridge0: port 3(dummy0) entered disabled state [ 1127.364766][T22079] bridge0: port 2(bridge_slave_1) entered disabled state [ 1127.368523][T17672] ft260 0003:0403:6030.0024: chip code: 6424 8183 [ 1127.373075][T22079] bridge0: port 1(bridge_slave_0) entered disabled state [ 1127.547214][T17672] ft260 0003:0403:6030.0024: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 1127.565586][ T6011] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1127.787680][T17672] ft260 0003:0403:6030.0024: failed to retrieve status: -32, no wakeup [ 1127.955743][T22088] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1128.049351][T22059] i2c i2c-1: adapter quirk: 2nd comb msg must be read (addr 0x0081, size 0, write) [ 1128.096040][T18374] usb 3-1: USB disconnect, device number 97 [ 1128.312864][T22093] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1128.409500][T22079] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1128.423228][T22079] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1128.532804][T22079] veth1_vlan: left allmulticast mode [ 1128.548930][T22079] batman_adv: batadv0: Interface deactivated: gretap1 [ 1128.577024][T22091] netlink: 'syz.1.4241': attribute type 1 has an invalid length. [ 1128.591452][T22091] netlink: 'syz.1.4241': attribute type 4 has an invalid length. [ 1128.604422][T22091] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4241'. [ 1128.613776][ T61] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1128.630960][ T61] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1128.748032][ T61] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1128.768151][ T61] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1128.810623][ T61] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1128.837495][ T61] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1128.884326][ T61] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1128.911695][ T61] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1128.949326][T22105] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4245'. [ 1129.682226][T22122] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4251'. [ 1130.147102][T22130] tc_dump_action: action bad kind [ 1130.764113][ T5920] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1130.985492][ T5920] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1131.013576][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1131.035595][ T5920] usb 5-1: Product: syz [ 1131.045924][ T5920] usb 5-1: Manufacturer: syz [ 1131.054399][ T5920] usb 5-1: SerialNumber: syz [ 1131.091984][ T5920] usb 5-1: config 0 descriptor?? [ 1131.109493][ T5920] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1131.383998][T18374] usb 4-1: new full-speed USB device number 96 using dummy_hcd [ 1131.549611][T18374] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 1131.577801][T18374] usb 4-1: config 0 has no interface number 0 [ 1131.599828][T18374] usb 4-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 1131.633726][T18374] usb 4-1: config 0 interface 2 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1131.693102][T18374] usb 4-1: config 0 interface 2 has no altsetting 0 [ 1131.712174][T18374] usb 4-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 1131.742482][T18374] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1131.777422][T18374] usb 4-1: Product: syz [ 1131.799187][T18374] usb 4-1: Manufacturer: syz [ 1131.814469][T18374] usb 4-1: SerialNumber: syz [ 1131.845069][T18374] usb 4-1: config 0 descriptor?? [ 1131.876627][T22146] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1131.923994][ T39] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1132.165520][ T39] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1132.177409][T22154] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 1, id = 0 [ 1132.199742][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1132.237999][ T39] usb 2-1: Product: syz [ 1132.252672][T22155] x_tables: duplicate underflow at hook 3 [ 1132.260436][ T39] usb 2-1: Manufacturer: syz [ 1132.269845][ T39] usb 2-1: SerialNumber: syz [ 1132.330547][ T39] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1132.438253][T17672] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1132.499905][ T5920] gspca_sunplus: reg_r err -71 [ 1132.505292][ T5920] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 1132.536106][ T5920] usb 5-1: USB disconnect, device number 106 [ 1132.807229][T18374] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1132.835522][T18374] usb 4-1: invalid MIDI in EP 0 [ 1132.999750][T18374] snd-usb-audio 4-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 1133.051317][T18374] usb 4-1: USB disconnect, device number 96 [ 1133.120648][T20537] udevd[20537]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1133.614074][T17672] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1133.771605][T17672] ath9k_htc: Failed to initialize the device [ 1133.821624][T17672] usb 2-1: ath9k_htc: USB layer deinitialized [ 1135.214913][ T5920] usb 2-1: USB disconnect, device number 93 [ 1135.560708][T22181] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 1136.296382][T22179] syzkaller0: entered promiscuous mode [ 1136.314506][T22179] syzkaller0: entered allmulticast mode [ 1136.705942][ T5920] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1137.035640][ T5920] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1137.059047][ T5920] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1137.109531][ T5920] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1137.118759][ T5920] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1137.131195][ T5920] usb 5-1: Manufacturer: syz [ 1137.305496][ T5920] usb 5-1: config 0 descriptor?? [ 1138.240873][T22214] binder: 22210:22214 ioctl c0306201 0 returned -14 [ 1138.360788][ T5920] usbhid 5-1:0.0: can't add hid device: -32 [ 1138.366991][ T5920] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 1138.984308][T22227] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(15) [ 1138.991076][T22227] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1139.007965][T22227] vhci_hcd vhci_hcd.0: Device attached [ 1139.016019][T22227] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(17) [ 1139.022656][T22227] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1139.030653][T22227] vhci_hcd vhci_hcd.0: Device attached [ 1139.039289][T22227] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(19) [ 1139.045929][T22227] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1139.053959][T22227] vhci_hcd vhci_hcd.0: Device attached [ 1139.060267][T22227] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1139.073274][T22227] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(23) [ 1139.079914][T22227] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1139.118390][T22227] vhci_hcd vhci_hcd.0: Device attached [ 1139.138931][T22240] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(26) [ 1139.145612][T22240] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1139.156412][T22240] vhci_hcd vhci_hcd.0: Device attached [ 1139.175180][T22227] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1139.200237][T22227] FAULT_INJECTION: forcing a failure. [ 1139.200237][T22227] name failslab, interval 1, probability 0, space 0, times 0 [ 1139.214877][T22227] CPU: 0 UID: 0 PID: 22227 Comm: syz.2.4283 Tainted: G L syzkaller #0 PREEMPT(full) [ 1139.214909][T22227] Tainted: [L]=SOFTLOCKUP [ 1139.214916][T22227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1139.214928][T22227] Call Trace: [ 1139.214936][T22227] [ 1139.214944][T22227] dump_stack_lvl+0x189/0x250 [ 1139.214971][T22227] ? __pfx____ratelimit+0x10/0x10 [ 1139.215003][T22227] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1139.215026][T22227] ? __pfx__printk+0x10/0x10 [ 1139.215055][T22227] ? __lock_acquire+0x6b6/0x2cf0 [ 1139.215085][T22227] should_fail_ex+0x414/0x560 [ 1139.215113][T22227] should_failslab+0xa8/0x100 [ 1139.215134][T22227] __kmalloc_noprof+0xdf/0x800 [ 1139.215150][T22227] ? io_alloc_ocqe+0xd4/0x5a0 [ 1139.215172][T22227] ? io_cqe_cache_refill+0x29b/0x490 [ 1139.215194][T22227] io_alloc_ocqe+0xd4/0x5a0 [ 1139.215215][T22227] ? io_get_cqe_overflow+0x6bb/0x730 [ 1139.215239][T22227] io_cqe_overflow_locked+0x26/0x40 [ 1139.215259][T22227] __io_submit_flush_completions+0x28a/0xfc0 [ 1139.215280][T22227] ? io_submit_fail_init+0x3c2/0x570 [ 1139.215305][T22227] io_submit_sqes+0x1c2f/0x2140 [ 1139.215348][T22227] __se_sys_io_uring_enter+0x2e0/0x2b60 [ 1139.215368][T22227] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 1139.215391][T22227] ? vfs_write+0x956/0xb30 [ 1139.215413][T22227] ? ksys_write+0x1cb/0x250 [ 1139.215430][T22227] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 1139.215448][T22227] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 1139.215465][T22227] ? __pfx_vfs_write+0x10/0x10 [ 1139.215482][T22227] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1139.215501][T22227] ? __fget_files+0x3a0/0x420 [ 1139.215526][T22227] ? fput+0xa0/0xd0 [ 1139.215547][T22227] ? ksys_write+0x22a/0x250 [ 1139.215563][T22227] ? __pfx_ksys_write+0x10/0x10 [ 1139.215580][T22227] ? __ia32_sys_io_uring_enter+0x21/0xf0 [ 1139.215602][T22227] __do_fast_syscall_32+0x1f7/0x590 [ 1139.215620][T22227] ? rcu_is_watching+0x15/0xb0 [ 1139.215637][T22227] ? do_fast_syscall_32+0x34/0x80 [ 1139.215658][T22227] do_fast_syscall_32+0x34/0x80 [ 1139.215675][T22227] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1139.215694][T22227] RIP: 0023:0xf7f51539 [ 1139.215708][T22227] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1139.215721][T22227] RSP: 002b:00000000f544655c EFLAGS: 00000206 ORIG_RAX: 00000000000001aa [ 1139.215738][T22227] RAX: ffffffffffffffda RBX: 000000000000001d RCX: 0000000000007330 [ 1139.215748][T22227] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1139.215757][T22227] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1139.215766][T22227] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1139.215775][T22227] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1139.215797][T22227] [ 1139.520981][T22242] vhci_hcd: connection closed [ 1139.521252][ T5968] vhci_hcd vhci_hcd.2: stop threads [ 1139.544154][T22236] vhci_hcd: connection closed [ 1139.554358][T17672] usb 37-1: new low-speed USB device number 35 using vhci_hcd [ 1139.661805][T22228] vhci_hcd: connection closed [ 1139.662102][T22232] vhci_hcd: connection closed [ 1139.662504][ T10] usb 5-1: USB disconnect, device number 107 [ 1139.683940][T22234] vhci_hcd: connection closed [ 1139.728265][ T5968] vhci_hcd vhci_hcd.2: release socket [ 1139.738656][T22229] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 1139.745613][ T5968] vhci_hcd vhci_hcd.2: disconnect device [ 1139.752377][ T5968] vhci_hcd vhci_hcd.2: stop threads [ 1139.758097][ T5968] vhci_hcd vhci_hcd.2: release socket [ 1139.763696][ T5968] vhci_hcd vhci_hcd.2: disconnect device [ 1139.770071][ T5968] vhci_hcd vhci_hcd.2: stop threads [ 1139.776165][ T5968] vhci_hcd vhci_hcd.2: release socket [ 1139.781722][ T5968] vhci_hcd vhci_hcd.2: disconnect device [ 1139.788407][ T5968] vhci_hcd vhci_hcd.2: stop threads [ 1139.793695][ T5968] vhci_hcd vhci_hcd.2: release socket [ 1139.801071][ T5968] vhci_hcd vhci_hcd.2: disconnect device [ 1139.808263][ T5968] vhci_hcd vhci_hcd.2: stop threads [ 1139.813612][ T5968] vhci_hcd vhci_hcd.2: release socket [ 1139.819603][ T5968] vhci_hcd vhci_hcd.2: disconnect device [ 1140.247022][T22261] netlink: 'syz.2.4290': attribute type 16 has an invalid length. [ 1140.285986][T22261] netlink: 'syz.2.4290': attribute type 17 has an invalid length. [ 1140.324227][ T30] audit: type=1326 audit(1766069963.017:13092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22247 comm="syz.1.4286" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f23539 code=0x0 [ 1140.364140][T22261] bridge0: port 3(dummy0) entered blocking state [ 1140.370706][T22261] bridge0: port 3(dummy0) entered forwarding state [ 1140.386493][T22261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1140.395780][T22261] 8021q: adding VLAN 0 to HW filter on device team0 [ 1140.407993][T22261] bridge0: port 3(dummy0) entered disabled state [ 1140.419215][T22261] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1140.462327][T22269] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4291'. [ 1140.527176][T22269] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4291'. [ 1140.659338][T22278] loop2: detected capacity change from 0 to 7 [ 1140.668544][T21715] Dev loop2: unable to read RDB block 7 [ 1140.675123][T21715] loop2: AHDI p1 p2 p3 [ 1140.679600][T21715] loop2: partition table partially beyond EOD, truncated [ 1140.688229][T21715] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1140.696291][T21715] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1140.707737][T22278] Dev loop2: unable to read RDB block 7 [ 1140.715066][T22278] loop2: AHDI p1 p2 p3 [ 1140.724348][T22278] loop2: partition table partially beyond EOD, truncated [ 1140.757540][T22280] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(19) [ 1140.764310][T22280] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1140.797890][T22278] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1140.814136][T22280] vhci_hcd vhci_hcd.0: Device attached [ 1140.823008][T22278] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1140.848084][T22283] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(22) [ 1140.854851][T22283] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1140.874546][T22283] vhci_hcd vhci_hcd.0: Device attached [ 1140.927871][T22278] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(21) [ 1140.934544][T22278] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1140.972319][T22280] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1140.984282][T22278] vhci_hcd vhci_hcd.0: Device attached [ 1141.013437][T22278] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(25) [ 1141.020103][T22278] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1141.054667][T22280] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(30) [ 1141.061377][T22280] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1141.081588][T22278] vhci_hcd vhci_hcd.0: Device attached [ 1141.110676][T22280] vhci_hcd vhci_hcd.0: Device attached [ 1141.127546][T22283] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(33) [ 1141.134213][T22283] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1141.186760][T22278] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1141.188550][T22283] vhci_hcd vhci_hcd.0: Device attached [ 1141.292977][T22286] vhci_hcd: connection closed [ 1141.293254][T22284] vhci_hcd: connection closed [ 1141.315413][T22281] vhci_hcd: connection closed [ 1141.322940][T22288] vhci_hcd: connection closed [ 1141.442549][T20658] vhci_hcd vhci_hcd.2: stop threads [ 1141.516045][T20658] vhci_hcd vhci_hcd.2: release socket [ 1141.543111][T20658] vhci_hcd vhci_hcd.2: disconnect device [ 1141.555017][T20658] vhci_hcd vhci_hcd.2: stop threads [ 1141.594009][T20658] vhci_hcd vhci_hcd.2: release socket [ 1141.599567][T20658] vhci_hcd vhci_hcd.2: disconnect device [ 1141.625088][T20658] vhci_hcd vhci_hcd.2: stop threads [ 1141.630454][T20658] vhci_hcd vhci_hcd.2: release socket [ 1141.667324][T20658] vhci_hcd vhci_hcd.2: disconnect device [ 1141.683323][T20658] vhci_hcd vhci_hcd.2: stop threads [ 1141.702628][T20658] vhci_hcd vhci_hcd.2: release socket [ 1141.718250][T20658] vhci_hcd vhci_hcd.2: disconnect device [ 1141.914004][ T5920] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 1141.934033][T22314] netlink: 'syz.4.4303': attribute type 10 has an invalid length. [ 1141.957458][T22314] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4303'. [ 1141.975157][T22296] vhci_hcd: connection closed [ 1141.975628][T22292] vhci_hcd: connection closed [ 1141.984115][ T61] vhci_hcd vhci_hcd.2: stop threads [ 1142.019509][ T61] vhci_hcd vhci_hcd.2: release socket [ 1142.044424][ T61] vhci_hcd vhci_hcd.2: disconnect device [ 1142.081673][ T61] vhci_hcd vhci_hcd.2: stop threads [ 1142.093918][ T5920] usb 1-1: Using ep0 maxpacket: 16 [ 1142.101698][ T5920] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1142.109550][ T61] vhci_hcd vhci_hcd.2: release socket [ 1142.109699][ T61] vhci_hcd vhci_hcd.2: disconnect device [ 1142.125518][ T5920] usb 1-1: config 2 has an invalid interface number: 124 but max is 0 [ 1142.143946][ T5920] usb 1-1: config 2 has no interface number 0 [ 1142.150255][ T5920] usb 1-1: config 2 interface 124 altsetting 100 bulk endpoint 0x5 has invalid maxpacket 8 [ 1142.170778][ T5920] usb 1-1: config 2 interface 124 has no altsetting 0 [ 1142.195627][ T5920] usb 1-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=bb.c4 [ 1142.217811][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1142.241511][ T5920] usb 1-1: Product: syz [ 1142.252748][ T5920] usb 1-1: Manufacturer: syz [ 1142.265607][ T5920] usb 1-1: SerialNumber: syz [ 1142.293743][T22304] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1142.395170][ T30] audit: type=1326 audit(1766069965.077:13093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22315 comm="syz.1.4305" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23539 code=0x7ffc0000 [ 1142.508485][ T30] audit: type=1326 audit(1766069965.077:13094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22315 comm="syz.1.4305" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23539 code=0x7ffc0000 [ 1142.538617][ T5920] kvaser_usb 1-1:2.124: error -ENODEV: Cannot get usb endpoint(s) [ 1142.575215][ T30] audit: type=1326 audit(1766069965.077:13095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22315 comm="syz.1.4305" exe="/root/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf7f23539 code=0x7ffc0000 [ 1142.597928][ T5920] usb 1-1: USB disconnect, device number 103 [ 1142.924262][ T30] audit: type=1326 audit(1766069965.077:13096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22315 comm="syz.1.4305" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23539 code=0x7ffc0000 [ 1143.101228][ T30] audit: type=1326 audit(1766069965.077:13097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22315 comm="syz.1.4305" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23539 code=0x7ffc0000 [ 1143.143957][T18374] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1143.202565][ T30] audit: type=1326 audit(1766069965.077:13098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22315 comm="syz.1.4305" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f23539 code=0x7ffc0000 [ 1143.310797][T18374] usb 2-1: config 0 has no interfaces? [ 1143.316563][T18374] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1143.339455][ T30] audit: type=1326 audit(1766069965.077:13099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22315 comm="syz.1.4305" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23539 code=0x7ffc0000 [ 1143.372943][T18374] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1143.432557][T18374] usb 2-1: config 0 descriptor?? [ 1143.552714][ T30] audit: type=1326 audit(1766069965.077:13100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22315 comm="syz.1.4305" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23539 code=0x7ffc0000 [ 1143.642310][T22341] libceph: resolve 'cc' (ret=-3): failed [ 1143.683915][ T30] audit: type=1326 audit(1766069965.077:13101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22315 comm="syz.1.4305" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f23539 code=0x7ffc0000 [ 1144.045544][ T10] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 1144.214044][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 1144.222310][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1144.234141][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1144.253538][ T10] usb 1-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 1144.296139][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1144.344472][ T10] usb 1-1: config 0 descriptor?? [ 1144.777519][ T10] kye 0003:0458:5016.0025: control desc unexpectedly large [ 1144.800363][ T10] input: HID 0458:5016 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5016.0025/input/input80 [ 1144.834682][T17672] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 1144.923238][ T10] input: HID 0458:5016 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5016.0025/input/input81 [ 1145.024439][ T10] kye 0003:0458:5016.0025: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.0-1/input0 [ 1145.472901][T18374] usb 2-1: USB disconnect, device number 94 [ 1145.935985][ C0] kye 0003:0458:5016.0025: usb_submit_urb(ctrl) failed: -1 [ 1146.090601][ T10] usb 1-1: reset high-speed USB device number 104 using dummy_hcd [ 1146.237714][ T39] usb usb38-port1: attempt power cycle [ 1146.835036][ T39] usb usb38-port1: unable to enumerate USB device [ 1146.885108][ T6134] usb 1-1: USB disconnect, device number 104 [ 1147.323944][ T6134] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 1147.407260][ T5976] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1147.533960][ T6134] usb 1-1: Using ep0 maxpacket: 32 [ 1147.557583][T22398] trusted_key: encrypted_key: insufficient parameters specified [ 1147.586360][ T6134] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 1147.613983][ T6134] usb 1-1: config 0 has no interface number 0 [ 1147.620146][ T6134] usb 1-1: config 0 interface 89 has no altsetting 0 [ 1147.651121][ T6134] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1147.680856][ T6134] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1147.809972][ T6134] usb 1-1: Product: syz [ 1147.814255][ T6134] usb 1-1: Manufacturer: syz [ 1147.818861][ T6134] usb 1-1: SerialNumber: syz [ 1147.846377][ T6134] usb 1-1: config 0 descriptor?? [ 1147.879535][ T6134] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1147.890369][ T6134] em28xx 1-1:0.89: Video interface 89 found: bulk [ 1148.475290][ T6134] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 1148.674022][ T10] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1148.699644][T22416] netlink: 'syz.2.4334': attribute type 10 has an invalid length. [ 1148.715043][T22416] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4334'. [ 1148.884540][T22381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1148.923316][T22381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1148.959682][ T10] usb 2-1: device descriptor read/64, error -71 [ 1149.263987][ T10] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1149.438022][ T10] usb 2-1: device descriptor read/64, error -71 [ 1149.554224][ T10] usb usb2-port1: attempt power cycle [ 1149.656043][T22421] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1149.903954][ T10] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1149.945265][ T10] usb 2-1: device descriptor read/8, error -71 [ 1149.964378][ T6134] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1149.975502][ T6134] em28xx 1-1:0.89: board has no eeprom [ 1150.044359][ T6134] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 1150.051749][ T6134] em28xx 1-1:0.89: analog set to bulk mode. [ 1150.067090][ T5920] em28xx 1-1:0.89: Registering V4L2 extension [ 1150.185068][ T5920] em28xx 1-1:0.89: reading from i2c device at 0x4a failed (error=-5) [ 1150.213914][ T10] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1150.230855][ T5920] em28xx 1-1:0.89: reading from i2c device at 0x48 failed (error=-5) [ 1150.249201][ T5920] em28xx 1-1:0.89: reading from i2c device at 0x42 failed (error=-5) [ 1150.258195][ T10] usb 2-1: device descriptor read/8, error -71 [ 1150.270147][ T5920] em28xx 1-1:0.89: reading from i2c device at 0x40 failed (error=-5) [ 1150.293079][ T5920] em28xx 1-1:0.89: Config register raw data: 0xfffffffb [ 1150.309902][ T5920] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 1150.321114][ T5920] em28xx 1-1:0.89: No AC97 audio processor [ 1150.414369][ T10] usb usb2-port1: unable to enumerate USB device [ 1150.445834][ T5920] usb 1-1: Decoder not found [ 1150.451158][ T5920] em28xx 1-1:0.89: failed to create media graph [ 1150.458310][ T5920] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 1150.468963][ T5920] em28xx 1-1:0.89: Registering snapshot button... [ 1150.480922][ T5920] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input82 [ 1150.519430][ T5920] em28xx 1-1:0.89: Remote control support is not available for this card. [ 1150.692954][ T39] usb 1-1: USB disconnect, device number 105 [ 1150.700514][ T39] em28xx 1-1:0.89: Disconnecting em28xx [ 1150.707234][ T39] em28xx 1-1:0.89: Closing input extension [ 1150.729553][ T39] em28xx 1-1:0.89: Deregistering snapshot button [ 1150.773458][ T39] em28xx 1-1:0.89: Freeing device [ 1150.824100][ T5920] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1150.893732][T22440] netlink: 'syz.3.4342': attribute type 1 has an invalid length. [ 1150.903002][T22440] netlink: 'syz.3.4342': attribute type 2 has an invalid length. [ 1150.994034][ T5920] usb 3-1: Using ep0 maxpacket: 8 [ 1151.017018][ T5920] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1151.033999][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1151.065699][ T5920] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1151.072799][ T5920] pvrusb2: ********** [ 1151.078914][ T5920] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1151.091859][ T5920] pvrusb2: Important functionality might not be entirely working. [ 1151.109156][ T5920] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1151.126050][ T5920] pvrusb2: ********** [ 1151.519078][ T2344] pvrusb2: Invalid write control endpoint [ 1151.751433][ T39] usb 3-1: USB disconnect, device number 98 [ 1152.109217][T22465] netlink: 'syz.1.4348': attribute type 10 has an invalid length. [ 1152.130663][T22465] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4348'. [ 1152.510958][ T2344] pvrusb2: Invalid write control endpoint [ 1152.554364][ T2344] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1152.604154][ T2344] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1152.636287][ T2344] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1152.751946][ T2344] pvrusb2: Device being rendered inoperable [ 1152.787810][ T2344] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1152.837883][ T2344] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1152.936664][ T2344] pvrusb2: Attached sub-driver cx25840 [ 1152.943780][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1152.956083][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1153.164959][T22472] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 1153.171550][T22472] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1153.183334][T22472] vhci_hcd vhci_hcd.0: Device attached [ 1153.362771][T22473] vhci_hcd: connection closed [ 1153.398660][ T1330] vhci_hcd vhci_hcd.4: stop threads [ 1153.424469][T22476] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4350'. [ 1153.446799][ T1330] vhci_hcd vhci_hcd.4: release socket [ 1153.463007][ T1330] vhci_hcd vhci_hcd.4: disconnect device [ 1153.599990][T22481] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 1153.606578][T22481] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1153.633035][T22481] vhci_hcd vhci_hcd.0: Device attached [ 1153.906385][T22487] random: crng reseeded on system resumption [ 1153.964233][ T39] usb 37-1: new low-speed USB device number 36 using vhci_hcd [ 1154.494166][T22482] vhci_hcd: connection reset by peer [ 1154.500026][ T61] vhci_hcd vhci_hcd.2: stop threads [ 1154.516402][ T61] vhci_hcd vhci_hcd.2: release socket [ 1154.534416][ T61] vhci_hcd vhci_hcd.2: disconnect device [ 1154.726666][T22505] tipc: Enabled bearer , priority 0 [ 1154.746076][T22505] syzkaller0: entered promiscuous mode [ 1154.751937][T22505] syzkaller0: entered allmulticast mode [ 1154.784608][T22505] tipc: Resetting bearer [ 1154.794847][T22504] tipc: Resetting bearer [ 1154.835995][T22504] tipc: Disabling bearer [ 1154.863927][T18374] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 1154.998830][T18374] usb 5-1: device descriptor read/64, error -71 [ 1155.244533][T18374] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 1155.393979][T18374] usb 5-1: device descriptor read/64, error -71 [ 1155.519174][T18374] usb usb5-port1: attempt power cycle [ 1155.741611][T22526] ALSA: seq fatal error: cannot create timer (-16) [ 1155.932170][T22531] netlink: 'syz.0.4364': attribute type 10 has an invalid length. [ 1155.940221][T22531] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4364'. [ 1155.949773][T22531] ipvlan1: entered promiscuous mode [ 1155.955168][T22531] ipvlan1: entered allmulticast mode [ 1155.960572][T22531] veth0_vlan: entered allmulticast mode [ 1155.970503][T22531] bridge0: port 4(ipvlan1) entered blocking state [ 1155.977471][T22531] bridge0: port 4(ipvlan1) entered disabled state [ 1155.991956][T18374] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 1156.034160][T22531] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1156.077755][T18374] usb 5-1: device descriptor read/8, error -71 [ 1156.327526][T18374] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 1156.343982][ T6134] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1156.355827][T18374] usb 5-1: device descriptor read/8, error -71 [ 1156.464448][T18374] usb usb5-port1: unable to enumerate USB device [ 1156.504748][ T6134] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 1156.513520][ T6134] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1156.703135][ T6134] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1156.757387][ T6134] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1156.788165][ T6134] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1156.808829][ T6134] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1156.853973][ T6134] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1156.889398][ T6134] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1156.909386][ T6134] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1156.964471][ T6134] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1156.996379][ T6134] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1157.056100][ T6134] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1157.075096][ T6134] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1157.105049][ T6134] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1157.123073][ T6134] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1157.141299][ T6134] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1157.152075][ T6134] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1157.195185][ T6134] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1157.223178][ T6134] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1157.236660][ T6134] usb 3-1: Product: syz [ 1157.240853][ T6134] usb 3-1: Manufacturer: syz [ 1157.263939][ T6134] usb 3-1: SerialNumber: syz [ 1157.287112][ T6134] usb 3-1: config 0 descriptor?? [ 1157.307608][ T6134] yurex 3-1:0.0: Could not find endpoints [ 1157.474788][T22548] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1157.510534][T18374] usb 3-1: USB disconnect, device number 99 [ 1157.544553][T22549] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 1157.551125][T22549] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1157.566283][T22549] vhci_hcd vhci_hcd.0: Device attached [ 1157.754038][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 1157.754056][ T30] audit: type=1326 audit(1766069980.447:13136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22553 comm="syz.4.4374" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f15539 code=0x0 [ 1157.819263][T17672] usb 39-1: new low-speed USB device number 31 using vhci_hcd [ 1157.824517][T22550] vhci_hcd: connection closed [ 1157.827155][ T5968] vhci_hcd vhci_hcd.3: stop threads [ 1157.863262][ T5968] vhci_hcd vhci_hcd.3: release socket [ 1157.893991][ T5968] vhci_hcd vhci_hcd.3: disconnect device [ 1157.924052][ T30] audit: type=1326 audit(1766069980.607:13137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22559 comm="syz.4.4376" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f15539 code=0x0 [ 1158.625253][T22571] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 1158.631896][T22571] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1158.708109][T22572] vhci_hcd: connection closed [ 1158.718185][T22571] vhci_hcd vhci_hcd.0: Device attached [ 1158.892596][ T5976] vhci_hcd vhci_hcd.1: stop threads [ 1158.898375][ T5976] vhci_hcd vhci_hcd.1: release socket [ 1158.909160][ T5976] vhci_hcd vhci_hcd.1: disconnect device [ 1158.966053][T22579] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(15) [ 1158.972696][T22579] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1158.984044][T22579] vhci_hcd vhci_hcd.0: Device attached [ 1159.036627][T22579] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(17) [ 1159.043268][T22579] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1159.067499][T22579] vhci_hcd vhci_hcd.0: Device attached [ 1159.096075][ T39] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 1159.109831][T22579] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(19) [ 1159.116478][T22579] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1159.153300][T22579] vhci_hcd vhci_hcd.0: Device attached [ 1159.170108][T22592] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1159.217283][T22579] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(21) [ 1159.224043][T22579] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1159.231839][ T5940] usb 33-1: new low-speed USB device number 37 using vhci_hcd [ 1159.271615][T22579] vhci_hcd vhci_hcd.0: Device attached [ 1159.278979][T22592] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(26) [ 1159.285619][T22592] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1159.333487][T22592] vhci_hcd vhci_hcd.0: Device attached [ 1159.335147][T22579] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1159.481566][T22595] vhci_hcd: connection closed [ 1159.481929][ T5976] vhci_hcd vhci_hcd.0: stop threads [ 1159.493479][T22590] vhci_hcd: connection closed [ 1159.493792][T22587] vhci_hcd: connection closed [ 1159.494011][T22584] vhci_hcd: connection reset by peer [ 1159.497741][T22593] vhci_hcd: connection closed [ 1159.503632][ T5976] vhci_hcd vhci_hcd.0: release socket [ 1159.522283][ T5976] vhci_hcd vhci_hcd.0: disconnect device [ 1159.535231][ T5976] vhci_hcd vhci_hcd.0: stop threads [ 1159.540521][ T5976] vhci_hcd vhci_hcd.0: release socket [ 1159.548557][ T5976] vhci_hcd vhci_hcd.0: disconnect device [ 1159.555506][ T5976] vhci_hcd vhci_hcd.0: stop threads [ 1159.560846][ T5976] vhci_hcd vhci_hcd.0: release socket [ 1159.568994][ T5976] vhci_hcd vhci_hcd.0: disconnect device [ 1159.575799][ T5976] vhci_hcd vhci_hcd.0: stop threads [ 1159.581084][ T5976] vhci_hcd vhci_hcd.0: release socket [ 1159.586780][ T5976] vhci_hcd vhci_hcd.0: disconnect device [ 1159.592737][ T5976] vhci_hcd vhci_hcd.0: stop threads [ 1159.609195][ T5976] vhci_hcd vhci_hcd.0: release socket [ 1159.619575][ T5976] vhci_hcd vhci_hcd.0: disconnect device [ 1159.697190][T22601] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4383'. [ 1159.847971][T22610] netlink: 'syz.2.4387': attribute type 3 has an invalid length. [ 1159.925593][T22616] netlink: 'syz.4.4385': attribute type 5 has an invalid length. [ 1159.938894][T22616] ip6erspan0: entered promiscuous mode [ 1160.003993][ T10] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1160.134339][ T10] usb 2-1: device descriptor read/64, error -71 [ 1160.352193][T22626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4391'. [ 1160.374466][ T10] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 1160.513951][ T10] usb 2-1: device descriptor read/64, error -71 [ 1160.645742][ T10] usb usb2-port1: attempt power cycle [ 1160.793254][T22634] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 1160.799849][T22634] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1160.822529][T22634] vhci_hcd vhci_hcd.0: Device attached [ 1161.090010][ T10] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1161.135003][ T10] usb 2-1: device descriptor read/8, error -71 [ 1161.412276][T22645] syzkaller0: entered promiscuous mode [ 1161.434207][ T10] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1161.454245][T22645] syzkaller0: entered allmulticast mode [ 1161.479448][ T10] usb 2-1: device descriptor read/8, error -71 [ 1161.605649][ T10] usb usb2-port1: unable to enumerate USB device [ 1161.689179][T22635] vhci_hcd: connection closed [ 1161.689426][ T1330] vhci_hcd vhci_hcd.0: stop threads [ 1161.701023][ T1330] vhci_hcd vhci_hcd.0: release socket [ 1161.712178][ T1330] vhci_hcd vhci_hcd.0: disconnect device [ 1161.874811][T22650] netlink: 'syz.3.4397': attribute type 10 has an invalid length. [ 1161.924784][T22650] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4397'. [ 1162.001929][T22653] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4398'. [ 1162.254227][T22659] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 1162.260806][T22659] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1162.268665][ T39] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1162.336852][T22659] vhci_hcd vhci_hcd.0: Device attached [ 1162.463979][ T39] usb 3-1: Using ep0 maxpacket: 32 [ 1162.494408][ T39] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 1162.528165][ T39] usb 3-1: config 0 has no interface number 0 [ 1162.596648][T22660] vhci_hcd: connection closed [ 1162.597154][ T61] vhci_hcd vhci_hcd.4: stop threads [ 1162.618437][ T61] vhci_hcd vhci_hcd.4: release socket [ 1162.628638][ T61] vhci_hcd vhci_hcd.4: disconnect device [ 1162.634202][ T10] usb 41-1: new low-speed USB device number 38 using vhci_hcd [ 1162.635653][ T39] usb 3-1: config 0 interface 132 has no altsetting 0 [ 1162.662050][ T39] usb 3-1: New USB device found, idVendor=0525, idProduct=9901, bcdDevice=39.75 [ 1162.672562][ T39] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1162.690941][ T39] usb 3-1: Product: syz [ 1162.699771][ T39] usb 3-1: Manufacturer: syz [ 1162.715260][ T39] usb 3-1: SerialNumber: syz [ 1162.765607][ T39] usb 3-1: config 0 descriptor?? [ 1162.804013][ T6134] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1162.914136][T17672] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 1162.975058][ T39] cdc_subset 3-1:0.132: probe with driver cdc_subset failed with error -71 [ 1162.977510][ T6134] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 1163.006079][ T6134] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1163.035702][ T39] usb 3-1: USB disconnect, device number 100 [ 1163.038900][ T6134] usb 4-1: config 0 has no interface number 0 [ 1163.138395][ T6134] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1163.170247][ T6134] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1163.218236][ T6134] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1163.243879][ T6134] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1163.263945][ T6134] usb 4-1: Product: syz [ 1163.274833][ T6134] usb 4-1: Manufacturer: syz [ 1163.279490][ T6134] usb 4-1: SerialNumber: syz [ 1163.302853][ T6134] usb 4-1: config 0 descriptor?? [ 1163.990409][T22684] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1164.023981][ T30] audit: type=1326 audit(1766069986.707:13138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22687 comm="syz.1.4410" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23539 code=0x7ffc0000 [ 1164.111397][ T30] audit: type=1326 audit(1766069986.707:13139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22687 comm="syz.1.4410" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23539 code=0x7ffc0000 [ 1164.183370][ T30] audit: type=1326 audit(1766069986.707:13140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22687 comm="syz.1.4410" exe="/root/syz-executor" sig=0 arch=40000003 syscall=395 compat=1 ip=0xf7f23539 code=0x7ffc0000 [ 1164.225153][ T30] audit: type=1326 audit(1766069986.707:13141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22687 comm="syz.1.4410" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23539 code=0x7ffc0000 [ 1164.239253][T22695] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4411'. [ 1164.268125][ T30] audit: type=1326 audit(1766069986.707:13142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22687 comm="syz.1.4410" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23539 code=0x7ffc0000 [ 1164.301388][T22695] netlink: 'syz.0.4411': attribute type 15 has an invalid length. [ 1164.319771][T22695] netlink: 'syz.0.4411': attribute type 18 has an invalid length. [ 1164.334791][ T30] audit: type=1326 audit(1766069986.707:13143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22687 comm="syz.1.4410" exe="/root/syz-executor" sig=0 arch=40000003 syscall=396 compat=1 ip=0xf7f23539 code=0x7ffc0000 [ 1164.357357][ T5940] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1164.374592][T17672] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1164.391752][ T30] audit: type=1326 audit(1766069986.707:13144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22687 comm="syz.1.4410" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23539 code=0x7ffc0000 [ 1164.428455][ T30] audit: type=1326 audit(1766069986.717:13145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22687 comm="syz.1.4410" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f23539 code=0x7ffc0000 [ 1164.480074][ T39] usb 4-1: USB disconnect, device number 97 [ 1164.504111][T22695] vxlan2: entered promiscuous mode [ 1164.518891][ T30] audit: type=1326 audit(1766069986.717:13146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22687 comm="syz.1.4410" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23539 code=0x7ffc0000 [ 1164.542142][T17672] usb 2-1: Using ep0 maxpacket: 8 [ 1164.553595][ T44] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1164.568811][T17672] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1164.596792][T17672] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1164.600875][ T44] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1164.615876][ T30] audit: type=1326 audit(1766069986.737:13147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22687 comm="syz.1.4410" exe="/root/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7f23539 code=0x7ffc0000 [ 1164.649146][ T44] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1164.668331][ T44] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1164.680674][T17672] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1164.737001][T17672] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1164.764437][T17672] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1164.784308][T17672] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1165.027198][T17672] usb 2-1: GET_CAPABILITIES returned 0 [ 1165.036797][T17672] usbtmc 2-1:16.0: can't read capabilities [ 1165.258936][T17672] usb 2-1: USB disconnect, device number 103 [ 1165.968351][T22710] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4416'. [ 1166.839432][T22733] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 1166.846026][T22733] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1167.074224][T22733] vhci_hcd vhci_hcd.0: Device attached [ 1167.343948][ T5940] usb 33-1: new low-speed USB device number 38 using vhci_hcd [ 1167.367641][T22734] vhci_hcd: connection reset by peer [ 1167.373519][ T5968] vhci_hcd vhci_hcd.0: stop threads [ 1167.394098][ T5968] vhci_hcd vhci_hcd.0: release socket [ 1167.491978][ T5968] vhci_hcd vhci_hcd.0: disconnect device [ 1167.744979][ T10] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 1168.098705][T22746] sctp: [Deprecated]: syz.3.4426 (pid 22746) Use of int in max_burst socket option. [ 1168.098705][T22746] Use struct sctp_assoc_value instead [ 1168.388457][T22751] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1169.013917][ T10] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 1169.177448][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1169.187660][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1169.200710][ T10] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1169.209911][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1169.218026][ T10] usb 5-1: Product: syz [ 1169.222211][ T10] usb 5-1: Manufacturer: syz [ 1169.226887][ T10] usb 5-1: SerialNumber: syz [ 1169.234583][ T10] usb 5-1: config 0 descriptor?? [ 1169.244382][ T10] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1169.261494][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1169.275948][ T10] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 1169.286056][ T10] usb 5-1: media controller created [ 1169.327544][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1169.508769][ T10] DVB: Unable to find symbol tda10046_attach() [ 1169.515177][ T10] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 1169.524539][ T10] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 1169.729603][T22770] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1169.953747][T22777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1169.992316][T22777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1170.005257][T11092] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1170.173976][T11092] usb 3-1: Using ep0 maxpacket: 8 [ 1170.184300][ T5920] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1170.215530][T11092] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1170.231146][T11092] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1170.253772][T11092] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1170.278381][T11092] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1170.296097][T11092] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1170.312693][T11092] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1170.322243][T11092] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1170.373921][ T5920] usb 4-1: Using ep0 maxpacket: 16 [ 1170.386661][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 57681, setting to 1024 [ 1170.401970][ T5920] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1170.411604][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1170.419894][ T5920] usb 4-1: Product: syz [ 1170.424989][ T5920] usb 4-1: Manufacturer: syz [ 1170.429728][ T5920] usb 4-1: SerialNumber: syz [ 1170.456579][ T5920] usb 4-1: config 0 descriptor?? [ 1170.477550][ T5920] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1170.487989][ T5920] em28xx 4-1:0.0: DVB interface 0 found: isoc [ 1170.633013][T22770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1170.647338][T22770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1170.663569][T11092] usb 3-1: GET_CAPABILITIES returned cf [ 1170.669879][T11092] usbtmc 3-1:16.0: can't read capabilities [ 1170.736451][ T5920] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1170.885500][ T5920] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1170.902847][T11092] usb 3-1: USB disconnect, device number 101 [ 1170.913544][ T5920] em28xx 4-1:0.0: board has no eeprom [ 1171.003953][ T5920] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1171.013672][ T5920] em28xx 4-1:0.0: dvb set to isoc mode. [ 1171.027076][ T6134] em28xx 4-1:0.0: Binding DVB extension [ 1171.073281][ T5920] usb 4-1: USB disconnect, device number 98 [ 1171.088701][ T5920] em28xx 4-1:0.0: Disconnecting em28xx [ 1171.141349][ T30] kauditd_printk_skb: 69 callbacks suppressed [ 1171.141368][ T30] audit: type=1326 audit(1766069993.827:13217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22786 comm="syz.1.4440" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23539 code=0x7ffc0000 [ 1171.205119][ T30] audit: type=1326 audit(1766069993.867:13218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22786 comm="syz.1.4440" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23539 code=0x7ffc0000 [ 1171.231202][ T30] audit: type=1326 audit(1766069993.867:13219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22786 comm="syz.1.4440" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f23539 code=0x7ffc0000 [ 1171.237290][ T6134] em28xx 4-1:0.0: Registering input extension [ 1171.268176][ T5920] em28xx 4-1:0.0: Closing input extension [ 1171.268889][T22787] tipc: Enabled bearer , priority 0 [ 1171.298827][ T5920] em28xx 4-1:0.0: Freeing device [ 1171.306847][T22787] syzkaller0: entered promiscuous mode [ 1171.312358][T22787] syzkaller0: entered allmulticast mode [ 1171.374299][ T30] audit: type=1326 audit(1766069993.867:13220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22786 comm="syz.1.4440" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23539 code=0x7ffc0000 [ 1171.447975][ T30] audit: type=1326 audit(1766069993.867:13221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22786 comm="syz.1.4440" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23539 code=0x7ffc0000 [ 1171.533586][T22795] tipc: Resetting bearer [ 1171.547322][ T30] audit: type=1326 audit(1766069993.867:13222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22786 comm="syz.1.4440" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f23539 code=0x7ffc0000 [ 1171.627111][T22786] tipc: Resetting bearer [ 1171.639596][ T30] audit: type=1326 audit(1766069993.867:13223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22786 comm="syz.1.4440" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23539 code=0x7ffc0000 [ 1171.736293][ T30] audit: type=1326 audit(1766069993.867:13224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22786 comm="syz.1.4440" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23539 code=0x7ffc0000 [ 1171.737734][ T10] dvb_usb_m920x 5-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 1171.824813][T22786] tipc: Disabling bearer [ 1171.837875][T22797] random: crng reseeded on system resumption [ 1171.857352][ T10] usb 5-1: USB disconnect, device number 112 [ 1171.930452][ T30] audit: type=1326 audit(1766069993.867:13225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22786 comm="syz.1.4440" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f23539 code=0x7ffc0000 [ 1172.003513][ T30] audit: type=1326 audit(1766069993.867:13226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22786 comm="syz.1.4440" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23539 code=0x7ffc0000 [ 1172.314129][T22809] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 1172.320701][T22809] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1172.492625][T22809] vhci_hcd vhci_hcd.0: Device attached [ 1172.711965][T22810] vhci_hcd: connection reset by peer [ 1172.718756][ T4481] vhci_hcd vhci_hcd.0: stop threads [ 1172.755043][T22819] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4448'. [ 1172.765865][T22819] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4448'. [ 1172.775056][T22819] netlink: 'syz.4.4448': attribute type 19 has an invalid length. [ 1172.856863][ T4481] vhci_hcd vhci_hcd.0: release socket [ 1172.874495][ T4481] vhci_hcd vhci_hcd.0: disconnect device [ 1172.885603][T22817] bond1: option lp_interval: invalid value (0) [ 1172.894157][T22817] bond1: option lp_interval: allowed values 1 - 2147483647 [ 1172.906776][T22821] netlink: 'syz.2.4450': attribute type 10 has an invalid length. [ 1172.915871][T22821] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4450'. [ 1172.933404][T22817] bond1 (unregistering): Released all slaves [ 1172.948004][ T5940] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1173.729490][T22830] fuse: Unknown parameter 'iŒvÝÓƒid' [ 1174.175172][T22841] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1174.804125][ T5940] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 1175.016655][ T5940] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1175.084818][T22845] bridge0: port 3(dummy0) entered disabled state [ 1175.091361][T22845] bridge0: port 2(bridge_slave_1) entered disabled state [ 1175.098656][T22845] bridge0: port 1(bridge_slave_0) entered disabled state [ 1175.124186][ T5940] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0a53, bcdDevice= 0.00 [ 1175.152159][ T5940] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1175.179162][ T5940] usb 2-1: config 0 descriptor?? [ 1175.830242][ T5940] usbhid 2-1:0.0: can't add hid device: -71 [ 1175.837399][ T5940] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1175.871826][ T5940] usb 2-1: USB disconnect, device number 104 [ 1176.337936][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 1176.337956][ T30] audit: type=1326 audit(1766069999.027:13267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22875 comm="syz.3.4462" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f77539 code=0x0 [ 1176.579028][ T30] audit: type=1326 audit(1766069999.267:13268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22881 comm="syz.1.4463" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23539 code=0x7ffc0000 [ 1176.614901][T22884] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4461'. [ 1176.654017][T22884] openvswitch: netlink: Flow key attr not present in new flow. [ 1176.662029][ T30] audit: type=1326 audit(1766069999.317:13269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22881 comm="syz.1.4463" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f23539 code=0x7ffc0000 [ 1176.712082][ T30] audit: type=1326 audit(1766069999.317:13270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22881 comm="syz.1.4463" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f23539 code=0x7ffc0000 [ 1176.757646][ T1330] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1176.807574][ T1330] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1176.838816][ T1330] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1176.852967][ T30] audit: type=1326 audit(1766069999.317:13271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22881 comm="syz.1.4463" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f23539 code=0x7ffc0000 [ 1176.880331][ T1330] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1176.943910][ T30] audit: type=1326 audit(1766069999.317:13272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22881 comm="syz.1.4463" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f23539 code=0x7ffc0000 [ 1177.007288][ T30] audit: type=1326 audit(1766069999.317:13273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22881 comm="syz.1.4463" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f23539 code=0x7ffc0000 [ 1177.104234][ T30] audit: type=1326 audit(1766069999.317:13274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22881 comm="syz.1.4463" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f23539 code=0x7ffc0000 [ 1177.180886][ T30] audit: type=1326 audit(1766069999.317:13275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22881 comm="syz.1.4463" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f23539 code=0x7ffc0000 [ 1177.203672][ T30] audit: type=1326 audit(1766069999.327:13276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22881 comm="syz.1.4463" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f23539 code=0x7ffc0000 [ 1177.517439][T22898] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(15) [ 1177.524136][T22898] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1177.542240][T22898] vhci_hcd vhci_hcd.0: Device attached [ 1177.634946][T22902] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(17) [ 1177.641618][T22902] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1177.650893][T22902] vhci_hcd vhci_hcd.0: Device attached [ 1177.661618][T22898] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(19) [ 1177.668249][T22898] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1177.676912][T22898] vhci_hcd vhci_hcd.0: Device attached [ 1177.690501][T22898] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1177.703000][T22898] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(23) [ 1177.709650][T22898] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1177.718411][T22898] vhci_hcd vhci_hcd.0: Device attached [ 1177.729315][T22898] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(25) [ 1177.735955][T22898] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1177.744124][T22898] vhci_hcd vhci_hcd.0: Device attached [ 1177.761455][T22898] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1177.784795][T22858] usb 35-1: new low-speed USB device number 35 using vhci_hcd [ 1177.828093][T22911] vhci_hcd: connection closed [ 1177.828342][ T61] vhci_hcd vhci_hcd.1: stop threads [ 1177.835547][T22899] vhci_hcd: connection reset by peer [ 1177.853603][T22903] vhci_hcd: connection closed [ 1177.854032][T22909] vhci_hcd: connection closed [ 1177.864290][T22907] vhci_hcd: connection closed [ 1177.873897][ T61] vhci_hcd vhci_hcd.1: release socket [ 1177.894677][ T61] vhci_hcd vhci_hcd.1: disconnect device [ 1177.976567][ T61] vhci_hcd vhci_hcd.1: stop threads [ 1177.981822][ T61] vhci_hcd vhci_hcd.1: release socket [ 1178.000051][ T61] vhci_hcd vhci_hcd.1: disconnect device [ 1178.009255][ T61] vhci_hcd vhci_hcd.1: stop threads [ 1178.018049][ T61] vhci_hcd vhci_hcd.1: release socket [ 1178.023753][ T61] vhci_hcd vhci_hcd.1: disconnect device [ 1178.029716][ T61] vhci_hcd vhci_hcd.1: stop threads [ 1178.042546][ T61] vhci_hcd vhci_hcd.1: release socket [ 1178.056764][ T61] vhci_hcd vhci_hcd.1: disconnect device [ 1178.064862][ T61] vhci_hcd vhci_hcd.1: stop threads [ 1178.093032][ T61] vhci_hcd vhci_hcd.1: release socket [ 1178.110808][ T61] vhci_hcd vhci_hcd.1: disconnect device [ 1178.245200][T22919] netlink: 'syz.3.4470': attribute type 10 has an invalid length. [ 1178.264379][T22919] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4470'. [ 1179.287815][T22925] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 1179.294417][T22925] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1179.302999][T22925] vhci_hcd vhci_hcd.0: Device attached [ 1179.512710][T22926] vhci_hcd: connection closed [ 1179.514102][T20661] vhci_hcd vhci_hcd.0: stop threads [ 1179.530891][T20661] vhci_hcd vhci_hcd.0: release socket [ 1179.560853][T20661] vhci_hcd vhci_hcd.0: disconnect device [ 1179.648417][T22941] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(19) [ 1179.655096][T22941] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1179.676473][T22941] vhci_hcd vhci_hcd.0: Device attached [ 1179.715690][T22941] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(21) [ 1179.722350][T22941] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1179.751052][T22941] vhci_hcd vhci_hcd.0: Device attached [ 1179.764041][T22856] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 1179.798540][T22950] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(24) [ 1179.805181][T22950] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1179.824604][T22950] vhci_hcd vhci_hcd.0: Device attached [ 1179.854690][T22941] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1179.874179][T22941] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(27) [ 1179.880828][T22941] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1179.903941][ T6396] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 1179.904955][T22941] vhci_hcd vhci_hcd.0: Device attached [ 1179.914774][ T6395] usb 39-1: new low-speed USB device number 32 using vhci_hcd [ 1179.966554][T22856] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1179.993843][T22856] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1180.016233][T22941] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(29) [ 1180.022908][T22941] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1180.054058][ T6396] usb 2-1: device descriptor read/64, error -71 [ 1180.072477][T22856] usb 5-1: Product: syz [ 1180.081584][T22856] usb 5-1: Manufacturer: syz [ 1180.091740][T22856] usb 5-1: SerialNumber: syz [ 1180.103929][T22941] vhci_hcd vhci_hcd.0: Device attached [ 1180.112777][T22957] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1180.134695][T22950] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(32) [ 1180.141345][T22950] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1180.180178][T22950] vhci_hcd vhci_hcd.0: Device attached [ 1180.231023][T22955] vhci_hcd: connection closed [ 1180.231330][ T44] vhci_hcd vhci_hcd.3: stop threads [ 1180.241568][T22951] vhci_hcd: connection closed [ 1180.243956][T22953] vhci_hcd: connection closed [ 1180.250930][T22947] vhci_hcd: connection closed [ 1180.255837][T22944] vhci_hcd: connection reset by peer [ 1180.271804][ T44] vhci_hcd vhci_hcd.3: release socket [ 1180.294560][ T44] vhci_hcd vhci_hcd.3: disconnect device [ 1180.300815][ T6396] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 1180.348898][ T44] vhci_hcd vhci_hcd.3: stop threads [ 1180.354453][ T44] vhci_hcd vhci_hcd.3: release socket [ 1180.360181][ T44] vhci_hcd vhci_hcd.3: disconnect device [ 1180.366300][ T44] vhci_hcd vhci_hcd.3: stop threads [ 1180.373914][ T44] vhci_hcd vhci_hcd.3: release socket [ 1180.381535][ T44] vhci_hcd vhci_hcd.3: disconnect device [ 1180.392742][ T44] vhci_hcd vhci_hcd.3: stop threads [ 1180.400533][ T44] vhci_hcd vhci_hcd.3: release socket [ 1180.408266][ T44] vhci_hcd vhci_hcd.3: disconnect device [ 1180.419268][ T44] vhci_hcd vhci_hcd.3: stop threads [ 1180.427472][ T44] vhci_hcd vhci_hcd.3: release socket [ 1180.434393][ T6396] usb 2-1: device descriptor read/64, error -71 [ 1180.436778][ T44] vhci_hcd vhci_hcd.3: disconnect device [ 1180.544288][ T6396] usb usb2-port1: attempt power cycle [ 1180.695663][T22961] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4478'. [ 1180.786711][T22958] vhci_hcd: connection closed [ 1180.787541][ T44] vhci_hcd vhci_hcd.3: stop threads [ 1180.806926][ T44] vhci_hcd vhci_hcd.3: release socket [ 1180.812794][ T44] vhci_hcd vhci_hcd.3: disconnect device [ 1180.886621][ T6396] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 1180.924815][ T6396] usb 2-1: device descriptor read/8, error -71 [ 1181.166377][ T6396] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 1181.254664][ T6396] usb 2-1: device descriptor read/8, error -71 [ 1181.348912][T22973] bond2: option tlb_dynamic_lb: invalid value (23) [ 1181.358327][T22973] bond2 (unregistering): Released all slaves [ 1181.365403][ T6396] usb usb2-port1: unable to enumerate USB device [ 1182.004466][T22984] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem [ 1182.173984][T22857] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1182.244980][T22989] [ 1182.247348][T22989] ====================================================== [ 1182.254386][T22989] WARNING: possible circular locking dependency detected [ 1182.261441][T22989] syzkaller #0 Tainted: G L [ 1182.267437][T22989] ------------------------------------------------------ [ 1182.274456][T22989] syz.2.4488/22989 is trying to acquire lock: [ 1182.280521][T22989] ffff88801aec0a20 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0x9e/0x450 [ 1182.290829][T22989] [ 1182.290829][T22989] but task is already holding lock: [ 1182.298192][T22989] ffff888024f86938 (&q->q_usage_counter(io)#25){++++}-{0:0}, at: lo_ioctl+0x1604/0x1c50 [ 1182.307938][T22989] [ 1182.307938][T22989] which lock already depends on the new lock. [ 1182.307938][T22989] [ 1182.318335][T22989] [ 1182.318335][T22989] the existing dependency chain (in reverse order) is: [ 1182.327353][T22989] [ 1182.327353][T22989] -> #2 (&q->q_usage_counter(io)#25){++++}-{0:0}: [ 1182.335985][T22989] blk_alloc_queue+0x52f/0x610 [ 1182.341283][T22989] __blk_mq_alloc_disk+0x15c/0x340 [ 1182.346925][T22989] loop_add+0x411/0xad0 [ 1182.351607][T22989] loop_init+0xd9/0x170 [ 1182.356288][T22989] do_one_initcall+0x1fb/0x820 [ 1182.361579][T22989] do_initcall_level+0x104/0x190 [ 1182.367057][T22989] do_initcalls+0x59/0xa0 [ 1182.371920][T22989] kernel_init_freeable+0x334/0x4b0 [ 1182.377638][T22989] kernel_init+0x1d/0x1d0 [ 1182.382493][T22989] ret_from_fork+0x599/0xb30 [ 1182.387636][T22989] ret_from_fork_asm+0x1a/0x30 [ 1182.392965][T22989] [ 1182.392965][T22989] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 1182.400200][T22989] fs_reclaim_acquire+0x72/0x100 [ 1182.405699][T22989] kmem_cache_alloc_noprof+0x45/0x710 [ 1182.411610][T22989] __kernfs_iattrs+0xd9/0x320 [ 1182.416810][T22989] kernfs_iop_setattr+0xea/0x3f0 [ 1182.422269][T22989] notify_change+0xc1a/0xf40 [ 1182.427390][T22989] do_truncate+0x1a4/0x220 [ 1182.432336][T22989] path_openat+0x359d/0x3dd0 [ 1182.437442][T22989] do_filp_open+0x1fa/0x410 [ 1182.442487][T22989] do_sys_openat2+0x121/0x200 [ 1182.447686][T22989] __x64_sys_openat+0x138/0x170 [ 1182.453059][T22989] do_syscall_64+0xfa/0xf80 [ 1182.458097][T22989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1182.464507][T22989] [ 1182.464507][T22989] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 1182.473015][T22989] __lock_acquire+0x15a6/0x2cf0 [ 1182.478388][T22989] lock_acquire+0x117/0x340 [ 1182.483520][T22989] down_read+0x47/0x2e0 [ 1182.488207][T22989] kernfs_iop_getattr+0x9e/0x450 [ 1182.493662][T22989] vfs_getattr_nosec+0x2e1/0x430 [ 1182.499119][T22989] loop_assign_backing_file+0x222/0x400 [ 1182.505190][T22989] lo_ioctl+0x167f/0x1c50 [ 1182.510060][T22989] lo_compat_ioctl+0x298/0x330 [ 1182.515345][T22989] compat_blkdev_ioctl+0x5d8/0x770 [ 1182.520993][T22989] __ia32_compat_sys_ioctl+0x543/0x840 [ 1182.526970][T22989] __do_fast_syscall_32+0x1f7/0x590 [ 1182.532705][T22989] do_fast_syscall_32+0x34/0x80 [ 1182.538072][T22989] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1182.544921][T22989] [ 1182.544921][T22989] other info that might help us debug this: [ 1182.544921][T22989] [ 1182.555143][T22989] Chain exists of: [ 1182.555143][T22989] &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#25 [ 1182.555143][T22989] [ 1182.569576][T22989] Possible unsafe locking scenario: [ 1182.569576][T22989] [ 1182.577025][T22989] CPU0 CPU1 [ 1182.582383][T22989] ---- ---- [ 1182.587752][T22989] lock(&q->q_usage_counter(io)#25); [ 1182.593128][T22989] lock(fs_reclaim); [ 1182.599632][T22989] lock(&q->q_usage_counter(io)#25); [ 1182.607547][T22989] rlock(&root->kernfs_iattr_rwsem); [ 1182.612920][T22989] [ 1182.612920][T22989] *** DEADLOCK *** [ 1182.612920][T22989] [ 1182.621061][T22989] 3 locks held by syz.2.4488/22989: [ 1182.626254][T22989] #0: ffff888025053448 (&lo->lo_mutex){+.+.}-{4:4}, at: lo_ioctl+0x11e4/0x1c50 [ 1182.635315][T22989] #1: ffff888024f86938 (&q->q_usage_counter(io)#25){++++}-{0:0}, at: lo_ioctl+0x1604/0x1c50 [ 1182.645501][T22989] #2: ffff888024f86970 (&q->q_usage_counter(queue)#9){+.+.}-{0:0}, at: lo_ioctl+0x1604/0x1c50 [ 1182.650622][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1182.655907][T22989] [ 1182.655907][T22989] stack backtrace: [ 1182.655923][T22989] CPU: 0 UID: 0 PID: 22989 Comm: syz.2.4488 Tainted: G L syzkaller #0 PREEMPT(full) [ 1182.655950][T22989] Tainted: [L]=SOFTLOCKUP [ 1182.655989][T22989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1182.656055][T22989] Call Trace: [ 1182.656088][T22989] [ 1182.656119][T22989] dump_stack_lvl+0x189/0x250 [ 1182.656257][T22989] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1182.656314][T22989] ? __pfx__printk+0x10/0x10 [ 1182.656399][T22989] ? print_lock_name+0xde/0x100 [ 1182.656484][T22989] print_circular_bug+0x2e2/0x300 [ 1182.656560][T22989] check_noncircular+0x12e/0x150 [ 1182.656642][T22989] __lock_acquire+0x15a6/0x2cf0 [ 1182.656722][T22989] ? kernfs_iop_getattr+0x9e/0x450 [ 1182.656777][T22989] lock_acquire+0x117/0x340 [ 1182.656824][T22989] ? kernfs_iop_getattr+0x9e/0x450 [ 1182.656899][T22989] down_read+0x47/0x2e0 [ 1182.656972][T22989] ? kernfs_iop_getattr+0x9e/0x450 [ 1182.657028][T22989] kernfs_iop_getattr+0x9e/0x450 [ 1182.657094][T22989] vfs_getattr_nosec+0x2e1/0x430 [ 1182.657162][T22989] loop_assign_backing_file+0x222/0x400 [ 1182.657244][T22989] ? __pfx_loop_assign_backing_file+0x10/0x10 [ 1182.657312][T22989] ? schedule+0x91/0x360 [ 1182.657426][T22989] lo_ioctl+0x167f/0x1c50 [ 1182.657527][T22989] ? __pfx_lo_ioctl+0x10/0x10 [ 1182.657619][T22989] ? lock_release+0x4b/0x3b0 [ 1182.657672][T22989] ? lock_release+0x4b/0x3b0 [ 1182.657725][T22989] ? __lock_acquire+0x6b6/0x2cf0 [ 1182.657789][T22989] ? __lock_acquire+0x6b6/0x2cf0 [ 1182.657845][T22989] ? __lock_acquire+0x6b6/0x2cf0 [ 1182.657899][T22989] ? __lock_acquire+0x6b6/0x2cf0 [ 1182.657969][T22989] ? __lock_acquire+0x6b6/0x2cf0 [ 1182.658024][T22989] ? load_gs_index+0x169/0x190 [ 1182.658092][T22989] ? __pfx_load_gs_index+0x10/0x10 [ 1182.658166][T22989] ? __lock_acquire+0x6b6/0x2cf0 [ 1182.658230][T22989] ? __switch_to+0xda8/0x1670 [ 1182.658317][T22989] ? finish_task_switch+0x162/0x940 [ 1182.658402][T22989] ? __lock_acquire+0x6b6/0x2cf0 [ 1182.658472][T22989] ? __lock_acquire+0x6b6/0x2cf0 [ 1182.658527][T22989] ? __lock_acquire+0x6b6/0x2cf0 [ 1182.658582][T22989] ? __lock_acquire+0x6b6/0x2cf0 [ 1182.658643][T22989] ? __lock_acquire+0x6b6/0x2cf0 [ 1182.658697][T22989] ? __lock_acquire+0x6b6/0x2cf0 [ 1182.658795][T22989] ? is_bpf_text_address+0x26/0x2b0 [ 1182.658910][T22989] ? is_bpf_text_address+0x292/0x2b0 [ 1182.658999][T22989] ? is_bpf_text_address+0x26/0x2b0 [ 1182.659091][T22989] ? kernel_text_address+0xa5/0xe0 [ 1182.659167][T22989] ? __kernel_text_address+0xd/0x40 [ 1182.659235][T22989] ? unwind_get_return_address+0x4d/0x90 [ 1182.659309][T22989] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1182.659389][T22989] ? arch_stack_walk+0xfc/0x150 [ 1182.659510][T22989] ? stack_trace_save+0x9c/0xe0 [ 1182.659583][T22989] ? stack_depot_save_flags+0x40/0x850 [ 1182.659672][T22989] ? __pfx_format_decode+0x10/0x10 [ 1182.659743][T22989] ? kasan_save_track+0x4f/0x80 [ 1182.659798][T22989] ? kasan_save_track+0x3e/0x80 [ 1182.659851][T22989] ? kasan_save_free_info+0x46/0x50 [ 1182.659925][T22989] ? __kasan_slab_free+0x5c/0x80 [ 1182.659996][T22989] ? kfree+0x1c0/0x660 [ 1182.660062][T22989] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 1182.660116][T22989] ? security_file_ioctl_compat+0xcb/0x2d0 [ 1182.660176][T22989] ? __ia32_compat_sys_ioctl+0x128/0x840 [ 1182.660235][T22989] ? __do_fast_syscall_32+0x1f7/0x590 [ 1182.660312][T22989] ? do_fast_syscall_32+0x34/0x80 [ 1182.660388][T22989] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1182.660479][T22989] ? __asan_memset+0x22/0x50 [ 1182.660531][T22989] ? blk_get_meta_cap+0x18c/0x750 [ 1182.660615][T22989] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 1182.660687][T22989] lo_compat_ioctl+0x298/0x330 [ 1182.660745][T22989] ? __pfx_lo_compat_ioctl+0x10/0x10 [ 1182.660807][T22989] ? blkdev_common_ioctl+0x11d9/0x2c40 [ 1182.660903][T22989] ? kasan_quarantine_put+0xdd/0x220 [ 1182.660956][T22989] ? lockdep_hardirqs_on+0x98/0x140 [ 1182.661010][T22989] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 1182.661100][T22989] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1182.661161][T22989] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1182.661231][T22989] ? do_vfs_ioctl+0xbe8/0x1430 [ 1182.661282][T22989] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1182.661366][T22989] ? __pfx_lo_compat_ioctl+0x10/0x10 [ 1182.661438][T22989] compat_blkdev_ioctl+0x5d8/0x770 [ 1182.661514][T22989] ? __fget_files+0x2a/0x420 [ 1182.661594][T22989] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 1182.661679][T22989] ? __fget_files+0x2a/0x420 [ 1182.661748][T22989] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 1182.661820][T22989] __ia32_compat_sys_ioctl+0x543/0x840 [ 1182.661880][T22989] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1182.661943][T22989] ? __se_sys_futex_time32+0x360/0x3e0 [ 1182.662018][T22989] ? rcu_is_watching+0x15/0xb0 [ 1182.662090][T22989] ? __do_fast_syscall_32+0xbe/0x590 [ 1182.662168][T22989] __do_fast_syscall_32+0x1f7/0x590 [ 1182.662206][T22989] ? lockdep_hardirqs_on+0x98/0x140 [ 1182.662227][T22989] ? do_fast_syscall_32+0x34/0x80 [ 1182.662298][T22989] ? irqentry_exit+0x10f/0x660 [ 1182.662363][T22989] do_fast_syscall_32+0x34/0x80 [ 1182.662437][T22989] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1182.662509][T22989] RIP: 0023:0xf7f51539 [ 1182.662560][T22989] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1182.662606][T22989] RSP: 002b:00000000f544655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1182.662667][T22989] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000004c06 [ 1182.662706][T22989] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000000 [ 1182.662743][T22989] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1182.662774][T22989] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1182.662805][T22989] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1182.662858][T22989] [ 1182.764278][T22857] usb 4-1: Using ep0 maxpacket: 16 [ 1182.817140][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1182.908510][T22856] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1183.260153][T22858] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 1183.268165][T22857] usb 4-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1183.279220][T22857] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 121, changing to 10 [ 1183.290516][T22857] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1183.303566][T22856] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1183.316906][T22856] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1183.326859][T22857] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1183.337510][T22857] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1183.337975][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 1183.338015][ T30] audit: type=1326 audit(1766070006.027:13289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22988 comm="syz.2.4488" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x0 [ 1183.346893][T22856] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 1183.383627][T22857] usb 4-1: SerialNumber: syz [ 1183.396234][T22857] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 1183.417210][T22856] usb 5-1: USB disconnect, device number 113 [ 1183.522417][T22992] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 1183.528970][T22992] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1183.537659][T22992] vhci_hcd vhci_hcd.0: Device attached [ 1183.649863][T22993] vhci_hcd: connection closed [ 1183.650051][ T5936] vhci_hcd vhci_hcd.0: stop threads [ 1183.660312][ T5936] vhci_hcd vhci_hcd.0: release socket [ 1183.667049][ T5936] vhci_hcd vhci_hcd.0: disconnect device [ 1183.725049][T22856] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1184.652500][ T6396] usb 4-1: USB disconnect, device number 99 [ 1185.074169][ T6395] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 1186.334459][T22862] usb usb40-port1: attempt power cycle [ 1186.895194][T22862] usb usb40-port1: unable to enumerate USB device