last executing test programs: 3m26.354225522s ago: executing program 2 (id=1381): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000005c0)={0x0, 0xffffffffffffffef, &(0x7f0000000600)=[{&(0x7f0000000640)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00", 0x28}, {&(0x7f0000000680)="83d2ff5f00000080d2898a0cc6d6703b87eb28f77b09bc7e64f918fa3be4664d327d90424d550300280000000000000000000001", 0x34}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) 3m26.238411483s ago: executing program 2 (id=1383): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2c, 0x200, {0x0, 0x0, 0x12, 0x0, {0xc, 0xd}, {0xffff, 0xffff}, {0x2, 0x5}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x853, 0x1ff, 0x43ff, 0x1, 0x8005}, 0x0, 0x10000000, 0x2, 0x5, 0x6, 0x19, 0x13, 0xa, 0x0, 0xfffffffe, {0x4, 0x2521, 0xff, 0x9, 0x81, 0x8}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4048810}, 0x2404c040) r0 = socket$netlink(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101b02, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="7400000002060104000000000000000006000002050005000200000005000400000000001400078008001240001000000800134000005bad050001000700000005000100070000000900020073"], 0x74}}, 0x44004) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000140003801000"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x4048804) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x50}}, 0x44840) sendmsg$NFT_BATCH(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000c4000000003280004800800024000ad50120800014000000000140004"], 0xa4}, 0x1, 0x0, 0x0, 0x20040001}, 0x40810) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x200, 0x0) unshare(0x2a020400) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup/pids.max\x00', 0xe84c0, 0x83) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[], 0x78}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, 0x0, 0x0) write$P9_RWSTAT(0xffffffffffffffff, &(0x7f0000000900)={0x7, 0x7f, 0xfffe}, 0x14) r9 = syz_open_dev$dri(&(0x7f0000000940), 0x1ff, 0x2600) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000980)={0x0, 0x0, 0x0, &(0x7f00000009c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETENCODER(r9, 0xc01464a6, &(0x7f0000000a00)={r10}) r11 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_RUN(r11, 0xae80, 0x0) epoll_create1(0x80000) ioctl$KVM_RUN(r5, 0xae80, 0x0) r12 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r12, 0xc00caee0, &(0x7f0000000b40)={0x4}) 3m25.926994946s ago: executing program 2 (id=1388): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x103001) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f00000000c0)) r1 = inotify_init() r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a010400000000000000000200ffff34000480300001800e000100696d6d6564696174650000001c0002800800014000000000100002800c00028008000180ffffffff0900010073797a30000000000900020073797a320000000014000000110001"], 0x88}}, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000080)="0f00000000000000", 0x8) r4 = openat$binderfs_log(0xffffff9c, &(0x7f00000004c0)='./binderfs/binder_logs/transaction_log\x00', 0x0, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000000680)=0x1, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) r5 = creat(&(0x7f0000000140)='./file0\x00', 0x1f0) r6 = openat$nsim_new_device(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) writev(r6, &(0x7f0000000240)=[{&(0x7f0000000280)="38f5", 0x2}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = open(&(0x7f0000000300)='./file0\x00', 0x60840, 0xa2) fcntl$getownex(r8, 0x11, 0x0) r9 = socket(0x10, 0x80002, 0x2) bind$netlink(r9, &(0x7f00000005c0)={0x10, 0x0, 0x1}, 0xc) connect$netlink(r9, &(0x7f0000000600), 0xc) sendmsg$NL80211_CMD_GET_INTERFACE(r5, &(0x7f00000003c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000480)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x5, 0x57}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4850}, 0x80) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000640)=[@in6={0xa, 0x4e23, 0x3f, @empty, 0x5}], 0x1c) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000580)={0x0, 0x3}, 0x8) close_range(r1, 0xffffffffffffffff, 0x0) 3m25.713096579s ago: executing program 2 (id=1391): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a8d000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002e0000000000005faf9dfb78c7699c74e891a0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) (fail_nth: 2) 3m25.630286214s ago: executing program 2 (id=1392): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000004c0)='./file0\x00', 0x200000, 0x0, 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup\x00', 0x9801) move_mount(r2, &(0x7f0000000540)='.\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x0) (async) umount2(&(0x7f00000005c0)='./file0\x00', 0x1) r3 = socket$unix(0x1, 0x1, 0x0) (async, rerun: 64) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x3f, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) (async, rerun: 64) r4 = add_key$user(&(0x7f0000000180), &(0x7f0000000240), &(0x7f0000000280), 0x390, 0xfffffffffffffffd) (async, rerun: 64) r5 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000340)="01", 0x1, 0xffffffffffffffff) (async, rerun: 64) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x28, 0x24, 0x107, 0x70bd2e, 0x25dfdbfb, {0x2, 0x7c}, [@nested={0x14, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x3}, @typed={0x8, 0x5, 0x0, 0x0, @fd}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0x48080) (async) keyctl$dh_compute(0x17, &(0x7f0000000380)={r5, r4, r5}, 0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={'cbcmac(seed-generic)\x00'}}) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (rerun: 64) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x17, 0x2, {{0x5, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x4, 0x0, 0xa, 0x2006, 0x6, 0x7, 0x18, 0x15, 0x4, 0x4, {0x7391, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) 3m24.823480272s ago: executing program 2 (id=1393): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0xe000000, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000540)="89", 0x1}, {&(0x7f0000000580)="25b2b3cbea4056eb", 0x8}], 0x2, 0x0, 0x0, 0x900}, 0x0) 3m9.56364774s ago: executing program 32 (id=1393): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0xe000000, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000540)="89", 0x1}, {&(0x7f0000000580)="25b2b3cbea4056eb", 0x8}], 0x2, 0x0, 0x0, 0x900}, 0x0) 7.121247522s ago: executing program 5 (id=2595): r0 = socket(0x18, 0x80000, 0x1) socket$key(0xf, 0x3, 0x2) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0], 0x0) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000140)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000001c0)={0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="200e02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000240)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000340)={0x1c, &(0x7f00000003c0)=ANY=[@ANYBLOB="001602"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r1, 0x0, &(0x7f0000000400)={0x88, &(0x7f00000004c0)={0x40, 0x3, 0x9, "02fc297681e1b7b922769c9d00fec7d7b689b35d0b0b939d183b3e4c3440adbe47d93f03762c85a843cc2a3b57566d3abb11de4b206c8adeab96493a6341c63825b8f321480ec7b85ff6df99eb82ebb7990fee9b032bfe3e237e065521c1ff00"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$uac2(r1, 0x0, 0x0) syz_usb_control_io$uac3(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$inet_udp(0x2, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)=']', 0x1, 0x4008000, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000540)={[0x8aba, 0x4, 0x4, 0x804, 0x7, 0xf, 0x120000, 0x4, 0x0, 0x100000008, 0x8000000000000001, 0x2, 0x4, 0x101, 0x3, 0x1], 0x8000000, 0x141200}) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000600)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(r4, 0xae80, 0x0) setsockopt$MRT_DONE(r0, 0x0, 0xc9, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) epoll_create1(0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x20000) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e0000000109021200"], 0x0) 5.835683785s ago: executing program 3 (id=2605): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="c4000000190001000000000000004000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087", @ANYRES32], 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ff, 0xfffffffffffffffb}, {0x0, 0x3, 0x200000000000000}}}, 0xb8}}, 0x2c000010) 5.693954834s ago: executing program 3 (id=2606): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000180)={0x80a0000, 0x110000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8d80, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000003c0)={0x2, 0x0, [{0x40000002, 0x0, 0x6}, {0x40000002}]}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000080)=@dellinkprop={0x34, 0x6c, 0x1, 0x709d27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x1a, 0x289c}, [@IFLA_ALT_IFNAME={0x14, 0x45, 'netdevsim0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r6) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x40) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)=ANY=[@ANYRES64=r8], 0x68}, 0x1, 0x0, 0x0, 0x20044884}, 0x24008040) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r9) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') r10 = inotify_init1(0x800) inotify_add_watch(r10, &(0x7f0000000040)='./file0\x00', 0x80000401) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) openat$fuse(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) 4.053319972s ago: executing program 5 (id=2616): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000300)={0x1d, r1}, 0x10) sendmmsg$sock(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="010000000300000064000000000000000000000000000000000000000000580f020000000000000000000000000000000200000001000000020000000100"/72, 0x48}], 0x1}}], 0x1, 0x0) 3.868175588s ago: executing program 5 (id=2617): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = memfd_create(&(0x7f0000000380)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) syz_usb_connect(0x3, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8=r0, @ANYBLOB="b23d"], 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = dup2(r1, r2) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0x98fded4, 0x400000) ioctl$EVIOCSABS0(r4, 0x401845c0, &(0x7f0000000240)={0x7, 0x5, 0x400, 0x1000, 0xf, 0x5}) r5 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) write$P9_RVERSION(r5, &(0x7f0000002200)=ANY=[], 0xfffffcd9) ioctl$SNDCTL_DSP_SETTRIGGER(r5, 0x40045010, &(0x7f0000000140)=0x8) r6 = syz_open_dev$loop(&(0x7f0000000000), 0xffff, 0x14f600) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a30"], 0x30}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="a788b9a48d1de6603c475fe3cfa8a27d7c8425073f756d1cefddc08a6dd4c4c0a5323f8f93d65682bc4974397001a396624e1bd23560952dee5736311e3d06e60f168e59f8a3125595ff42643b55d9addf2ea3fa011611a8c539558baf2581e9a8b722f2108f58cb3d552779ea51ba9462992a9156243c50c162d06280d116e26d280aacfb494b66c66bb4df665381440690afc4854f4a", 0x97) r7 = openat$cgroup_ro(r3, &(0x7f0000000780)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_misc(r7, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000000000000000400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00040000170000000400", "f4bd00000080190000002c88f16b00", [0x100000000, 0x7ffffffffffffffe]}}) openat$userfaultfd(0xffffff9c, &(0x7f0000000000), 0x80800, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0xae, &(0x7f0000000640)=ANY=[@ANYBLOB="0180c20000000180c200000086dd6001012000783afffe8000001000000000000000000000bbff020000000000000000000000000001860090780000000000533b8f8b413e402900000000000000000aa78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af180200900000000004002600040000000101fe906d17efe3"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8932, &(0x7f0000000740)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x1, 0x200000006c832, 0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$kcm(0x29, 0x2, 0x0) r9 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) ioctl$CEC_TRANSMIT(r9, 0xc0386105, &(0x7f0000000080)={0x3ff, 0x4, 0x7, 0x7, 0x4, 0x4, "fd9a21e2895a445164ebc69c9edd8546", 0x4, 0x5, 0x5, 0x10, 0xe, 0x0, 0x33}) 3.65500785s ago: executing program 0 (id=2618): r0 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) 3.651397336s ago: executing program 3 (id=2619): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000001a80)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x1, {{@in=@loopback, @in6=@empty, 0x0, 0x0, 0x0, 0x8000, 0x2, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x3, 0x4000}, {0x0, 0x0, 0x100000000000000}, 0x3}, [@tmpl={0x184, 0x5, [{{@in=@local, 0xffffffff, 0x33}, 0x0, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {{@in6=@remote, 0x0, 0x33}, 0x0, @in6=@dev, 0x0, 0x4}, {{@in6=@mcast2, 0x0, 0x6c}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x3}, 0x4, 0x0, 0x0, 0x2}, {{@in6=@local, 0x0, 0x33}, 0x0, @in=@empty}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x6c}, 0x2, @in=@rand_addr=0x64010101, 0x0, 0x4, 0x2, 0xfd, 0x0, 0x2, 0x8}, {{@in=@remote, 0x0, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x3506, 0x0, 0x0, 0x0, 0x0, 0x9}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 3.593373419s ago: executing program 3 (id=2620): syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000002540)={0x1, 0x1000}, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000025c0)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000002600)={0x0, 0x0, &(0x7f0000002640)={&(0x7f0000002680)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000002700)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000002780)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000300000105000300070000000900020073797a31"], 0x64}}, 0x4800) r3 = socket$inet6(0xa, 0x3, 0x3) syz_usb_connect$hid(0x0, 0x9f21d88eb2fac37f, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002800)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000002840)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000028c0), 0x318, 0x0) recvmmsg(r4, &(0x7f0000002900), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000002940)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000002980)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$dri(0x0, 0x0, 0x8140) listen(0xffffffffffffffff, 0x8) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ppoll(&(0x7f0000002a00)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000002a40)={0x2, &(0x7f0000002a80)=[{0x20, 0x0, 0x8, 0xfffff038}, {0x6, 0x3}]}, 0x8) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmmsg(r6, &(0x7f0000002ac0), 0x4000190, 0xc03e) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000002b00)={{{@in=@empty, @in6=@remote, 0x4e24, 0x0, 0x4e21, 0x2, 0xa, 0x2a11bad3d5f03f04, 0x30, 0x2f}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x100000000, 0xfffffffffffffffb, 0x2, 0x8, 0x7fff}, {0x4, 0xfffffffffffffffa, 0x5, 0x9}, 0x10001, 0x0, 0x1, 0x0, 0x2, 0x3}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x33}, 0xa, @in=@remote, 0xfffffffe, 0x0, 0x0, 0x17, 0x0, 0x0, 0xfffffffb}}, 0xe8) socket$nl_netfilter(0x10, 0x3, 0xc) 3.52500751s ago: executing program 0 (id=2621): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x42, 0x1b6) pwrite64(r0, &(0x7f0000000300)="0000010042", 0x5, 0x1be) pwrite64(r0, &(0x7f0000000340)="55aa", 0x2, 0x1fe) pwrite64(r0, &(0x7f0000000380)='PRIVHEAD', 0x8, 0xc00) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca00090506"], 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0x4fa, &(0x7f0000000080)=ANY=[@ANYBLOB="120100022502aa10120a105d"], 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000000004882, 0x0) io_submit(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000180)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, r2, 0x0, 0x3000, 0x1000000, 0x0, 0x10}]) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x550c, 0x0) pwrite64(r0, &(0x7f00000003c0)="0002000b", 0x4, 0xc0c) pwrite64(r0, &(0x7f0000000400)='12345678-1234-1234-1234-123456789612', 0x24, 0xc30) pwrite64(r0, &(0x7f0000000440)='\x00\x00\x00\x00\x00\x00\a', 0x7, 0xd23) pwrite64(r0, &(0x7f0000000480)='\x00\x00\x00\x00\x00\x00\b', 0x7, 0xd2b) pwrite64(r0, &(0x7f00000004c0)='P', 0x1, 0x1e8000) r3 = syz_open_dev$loop(&(0x7f00000006c0), 0x0, 0x2) ioctl$LOOP_SET_FD(r3, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 3.190989602s ago: executing program 4 (id=2622): syz_open_dev$I2C(&(0x7f0000000080), 0x6, 0x4000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000004c0)={0x1, 0x2, 0x0, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000500)={{0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0xb, 0x1, 0x0, 0x3, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xffff}, {0x0, 0x522}, 0x1}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)={[], 0x0, 0x20002}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000700)="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", 0x2000, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f00000002c0)=0x1, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000300)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2, 0x9, 0x1}, 0x1c) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'team_slave_1\x00', 0x0}) sendto$packet(r5, &(0x7f0000000400)="cd", 0x1, 0x20004090, &(0x7f0000000440)={0x11, 0x88a8, r6, 0x1, 0x2, 0x6, @link_local}, 0x14) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0x3c, &(0x7f0000002700)=0x1, 0x4) recvmmsg(r7, &(0x7f0000002740)=[{{0x0, 0x0, 0x0}, 0xa248}], 0x1, 0x40000000, 0x0) r8 = syz_open_dev$video4linux(&(0x7f0000000340), 0xffffffff, 0x200) r9 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$inet6_int(r7, 0x29, 0x1d, &(0x7f0000002780)=0x4, 0x4) setsockopt$sock_attach_bpf(r9, 0x29, 0x24, &(0x7f0000000140), 0x4) sendmsg$kcm(r9, &(0x7f0000000180)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x294003a, @mcast1, 0x9, 0x100040}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000280)="f4000900062b3325fe80000000000000dc8b850f238466ccfe807a000000ad6e911b51818462b4003a00", 0x2a}], 0x1}, 0x0) ioctl$VIDIOC_ENCODER_CMD(r8, 0xc028564d, &(0x7f00000000c0)={0x3, 0x1, [0x1, 0x25d9, 0x3, 0x1000, 0x8, 0xfffffff8, 0x1000, 0x3]}) r10 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r10, 0xc0405602, &(0x7f0000000040)={0xa, 0x2, 0x80, "b43d7fdde5cad79117674100000000000000eb3f000700", 0x34565559}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000100)={0x4, 0x0, 0x2018, 0xd9, 0x81, 0x7f, 0x6}) ioctl$VIDIOC_G_EXT_CTRLS(r8, 0xc040564a, &(0x7f0000000380)={0xa30000, 0x1, 0x2c000000, 0xffffffffffffffff, 0x0, 0x0}) 2.424111987s ago: executing program 5 (id=2623): capset(&(0x7f00000002c0)={0x20080522}, &(0x7f0000000300)={0x200002, 0x200003, 0xffc, 0x5, 0x7}) r0 = syz_open_dev$evdev(&(0x7f0000000400), 0x0, 0x140) fremovexattr(r0, &(0x7f0000000540)=@known='system.posix_acl_access\x00') socket$netlink(0x10, 0x3, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x82802, 0xf) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r2, r2, 0x0, 0x20000005) sched_setattr(0x0, &(0x7f0000000500)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_io_uring_setup(0x6c9a, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0x5, &(0x7f00000003c0)=ANY=[@ANYRES64=r0], &(0x7f00000006c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, @fallback=0x18, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x1000200, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='children\x00') r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r4, 0x0, 0x489, &(0x7f0000000000)={{0x84, @multicast1, 0x4e20, 0x3, 'ovf\x00', 0x0, 0x60000000, 0xd}, {@rand_addr=0x64010102, 0x4e23, 0x1, 0x8, 0x48001, 0x38}}, 0x44) read$eventfd(r3, &(0x7f0000000740), 0x8) 2.169295605s ago: executing program 4 (id=2624): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0x0, 0x11203}}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e80)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000480000000820000095000000000000002ba7e1d30c04aa8b3382022ce2a1d97411a0f6b599e83f24a3aa81d36bb7019c13bd23212fb56f040026fbfefc4a056bdc17487902317142fac7e7be168c1886d0d4d94f2f4eb45c652fbc1626cca2a28d67893547db51ee988e6e06c8cedf7ceb9fc40400ae5e4aa74c92c6a51cbf9b0a4def23d410f6accd364158a4591c559f76c0130bfc4e90a6341865c3f5ab3e89cf6c662ed4148d3b3e22278d00031e5388ee5c867de2c6211d6ececb0c18ce74c4dae15cb7947c491b8bea3fd2f73902ebcfcf4982277d9800011b405bbf7b02433a9bcd715f5888b2007f000000001c000000010000000000000600000000309329170ee5b567e70f00c484d339c480f70006a10f58fa64533500000000000000000000000031000000000000001208e75a89faffbfb11b7dc6ea31001e846c12423a169f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d617de7a6520655a80d0900f4d433623c850af895abba14f6fbd7fbad1f98e26ad4deaf1a4f294b2a431ab9142f3a06d54740a4bc5e3abd378af7c9676a08ef74c48785f895b4ec8d1141d5e8744d7f09ab4df6027bf48cabecead649f96ea24d3287a7b01ab84d336f3c0f45a0642d6f2c494160cb7f46ce680eeb80157eb23f9902519ac655fa73103170cbc496d7122034b85e7e87a2db762cbb253fbd76b9117c1a11d18aa2040c5f0c289906000000000000005ffe91ff799a11d9b219c00c369a12bf8685b862d0dbdd956cbda1bae489bcef5ae59136aaadc59609f4d42617c0e6066938b521a0f2e2467a6c435ad5b800262a5da053ced5e95394e500000072737638ac44fb61310e2df511c60b3c88113996a81fb64bce5eb95ce91738640ff7ae6ed6b62086e699955926934389cdf9bcffff3ffd86fe9ce05268bf8a3958f2206cdc7095682c14f10be1075832956762b2dcc6251e7b74cb1da627e332765511c58215bf84d253e8778e6e8ffe4ea50b076446f35efffc806b340658342d2d9e1ef68c6ef3e98407d2fcefb34a0000000000000000895ddbb76122b1222e4da37177fe833e4fcaa67997e92a206ebd085bd9f90008d3fdd528efe6c1dca17f45ba5e8bd3153a0077bb43f8a63dd390d18f0239b41da1a52383a4c6768ca1bb66b8fb3c5000f6f246fd20356a60769b461b6cdf133de073b1df08ae09268b0073bb97d88d741a5546e76caf4b6b1387ff37ec13d262dae0260be74cdf7bb6d3107597430ef5bbd476bb9d69b2aef9f3cb644b4bf01ccf16d40720939daf2af469bdfb361b9c015dd026fd0fffe3c66f5c343afb78a7cfd852f3e05c089887d7df2ff4f9982030019421af6b78ff9c444a17091875cfe4eab0e7f50eb69c860b1613a6b4f5af04f9c635d8d646c89f8b85f820ce7464c731deba39f9ff7b815f7b0acba754c01ed8bf1bba0010a8c6a2b966d861f9dd547abf2e9b23e5607f00f80b58fd76e4bc46c84799aa792cdaeb6cfb858e577dacff607ba513250e13ae696cd6ed7d318190a93b9ee07927efca6b8d1f5980994690bbe002db5146439d906a0d4aef065214b15666cdca81091b69acee2c7ce0821fc19e0891f0b53469f935c5ac420100010000000000fb53faf4420638489e6a1c696d8c414a87b60000000000080000b6be15579518540000bc2d061827ae6349a045b780893771524a424335b9fc34616ee9f09141057262530b7c2f7c9b969938779736ece7b470078ac0b1b4b528000000009866e99948a9096672ec9f3800c2fc35ba6516e542624c47bdba76a816c3a3dd6c3fa87a3ec91df199a9af91a7babf2b8d0e7b77e6dfb4bbc9817847b705000000a1000000000000ab8353f3800f045b90b0eaab6d731199c9447eabbc8c740183aff5389742e47de5000000826a570d14310700cf2ae3366ebdb7f1000000000000333c00e6addbf4c71ffad6bfb5babb49109f92a5a52042c425190a6e3f1a8a3abfe6059da9c952cf35c98ce7616355493d280f2d0be99e18fd0900c769e7eb4edc1c03a33676080000007229e0237c1e34641848531712ff09e89fb062a3e66f4f3c9d7a7fc9aab1ced0ae679733830039cb61ea0691f0b4e0b33194404e643243c3841e1e7fe301f7f47a7f89512d92e83624e3de705bdfbfd0e5e381398e9d5428a00cc8a6d097d97e6ac8bd09b1a5577920a650114a522c1e2dcdc4f606fcbcee91770a9fada34d38cd7976a9228a0a0dd8661be8162e966aac26bea4c11458cd6ce22ddf7054cdd0a60ef3ec000000000000000000425cb75dc7ec92e9a5d29f9c99697d2a98ae0a9f35e4196c3faeb7a690bf897846f6f0f1c163d6075119169d55d10da9ad0e4b2c636d200000009baaf94e2b2c48e70d8453f832eecfb1de2a3f38a5c986de9e37737dac74db251d5e9ea2b8ed39e91a7a17d01b49f7aaff7c4c73c3484bdcab362838ed940035b270a3646ef55b9f070ae14466b3acef9f8b28fb938a237e2e068ae4a6bce4407b54cc14614c2cdf877f000000000000000000000000bdcf23144e6c16b9235552aed83b6428f34d88c258a9ad16386bba51b60838fb11bc193a206b5a25"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8001}}, './file0\x00'}) mmap$snddsp_control(&(0x7f0000ffb000/0x4000)=nil, 0x1000, 0x3000001, 0x30, r6, 0x83000000) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) getgid() setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000040)=r4, 0x4) write$tun(r2, 0x0, 0xfdef) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x40c0}, 0x4080) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) ioctl$EVIOCGPROP(r8, 0x40047438, &(0x7f0000000180)=""/246) writev(r8, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 1.631658616s ago: executing program 4 (id=2627): r0 = syz_open_dev$audion(&(0x7f0000000040), 0x8, 0x1e0601) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x12c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.609610875s ago: executing program 1 (id=2628): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x1a4, r2, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7f}]}, @TIPC_NLA_NODE={0xa0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "12fa1b9c65714854f99f4cdaab941ed05dd342deee0b58e28844417b3fdf96711488"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "8f90fc9585dddd5e9531d8cdfcb2e138d977a6d520473b9ab0187b855038a8f2d8edc185"}}]}, @TIPC_NLA_MEDIA={0xd8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x900}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x45d}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0x4}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x14}, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x1, 0x19, &(0x7f0000001600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xffffffffffffffff}}, @call={0x85, 0x0, 0x0, 0x2a}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f000001af40)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f000001af80)={r4, 0xfca804a0, 0x10, 0x38, &(0x7f000001b000)="b800000500000000", &(0x7f000001b040)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.405064617s ago: executing program 4 (id=2629): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000020900020073797a31000000000900010073797a310000000014000380100000800c000180060001000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a01010084000000f9ff000a0000090900020073797a31000000200900010073797a310000000014000380100000800c0001800600010058"], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) 1.273298017s ago: executing program 1 (id=2630): r0 = socket(0x2, 0x3, 0x67) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)={0x1}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000014000000080016000000000018000180140002006e657464657673696d3000000000000008001500000000020800130000000200080014"], 0x4c}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r5, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x1}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x40064) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r6, 0x4020e504, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x20000000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0xeda7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x3, 0x3f8, 0x0, 0x0, 0x2004cb, 0x3, 0x0, 0xfffffffffffffff8, 0x0, 0x9, 0x2000000000003ff, 0x2], 0x2000, 0x200206}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) socket(0x2, 0x3, 0x67) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)={0x1}) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000014000000080016000000000018000180140002006e657464657673696d3000000000000008001500000000020800130000000200080014"], 0x4c}}, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r5, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x1}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x40064) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) (async) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r6, 0x4020e504, 0x0) (async) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x20000000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0xeda7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x3, 0x3f8, 0x0, 0x0, 0x2004cb, 0x3, 0x0, 0xfffffffffffffff8, 0x0, 0x9, 0x2000000000003ff, 0x2], 0x2000, 0x200206}) (async) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) 1.236467453s ago: executing program 4 (id=2631): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'netdevsim0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x29, 0x11, 0x20000a2e, 0xc00000c, 0x2, 0x3, 0x27ff, 0x400, 0x3000000}}) syz_io_uring_setup(0x24d2, &(0x7f0000007c40)={0x0, 0x201b, 0x40, 0x1, 0x95}, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000380)={0x0, 0x0, 0x6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000780)={r2, 0x74e0, 0x10000}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000340)=0x1, 0x12) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0), 0x12) 1.071371808s ago: executing program 4 (id=2632): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[@ANYRESOCT=r0]) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000280)=""/134) 909.988015ms ago: executing program 0 (id=2633): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x2c, 0x0, 0x1, 0x0, 0x0, 0x4050}, 0x400c000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000180)={&(0x7f00000001c0), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000340)=""/179, 0xa000}], 0x3}, 0x0) sendmsg$inet(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)='>', 0x33fe0}], 0x1}, 0x0) (async) r3 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) (async) pipe2$watch_queue(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x1c) (async) add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, r3) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) (async) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x488}) (async) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) (async) mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='setgroups\x00') 679.625229ms ago: executing program 1 (id=2634): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x8c6a9000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000068a0000001f0000040000001801000020696c2500000000002020207b1ad8ff000000007ba1000000000000070100000400ffffb702000008000000b70300000200b000850000002e01020095"], &(0x7f00000004c0)='GPL\x00', 0xa, 0xffa, &(0x7f0000000a00)=""/4090, 0x0, 0xa8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94) 633.557359ms ago: executing program 1 (id=2635): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000300)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000340), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000380)=0xcde, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000100001060000000000000000070000000000000000000000000000010b00033264756d6d7930000008001f0004000000180012000a00010064756d6d79"], 0x4c}], 0x1, 0x0, 0x0, 0x4040001}, 0x0) 622.481796ms ago: executing program 0 (id=2636): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000025c0)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x17, &(0x7f00000026c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ffffc, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0xfffe, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x4, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffff7}, {0x14}}], {{0x5, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2, 0xfffffff7}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 368.359296ms ago: executing program 1 (id=2637): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0xc8041, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x7fffffff, 0x80a0000, 0x1, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x9, 0x4, 0x2, 0x180, 0x5, 0x4, 0xf1, 0x50, 0x12, 0x2, 0x0, 0x29, 0x0, 0x6, 0x0, 0x8000000bdb], 0x54000, 0x43102}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x2, 0x1000000000, 0x0, 0x10043, 0x6, 0x7, 0x2004cb, 0xffffffffffffffff, 0x1000007, 0xd2, 0x2, 0x9, 0x3, 0x3ff, 0x7], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x60000, 0xeeee0000, 0x10, 0x8, 0xb, 0xe4, 0x40, 0x10, 0x0, 0x2e, 0x80}, {0x5000, 0x0, 0x8, 0x0, 0x42, 0x5, 0x5, 0x6, 0x5, 0x5, 0x2, 0x87}, {0xfec00000, 0x1, 0x3, 0x5, 0x7, 0x7, 0x0, 0x7, 0x3, 0x5, 0x5, 0x5}, {0x1, 0xf000, 0x3, 0x6, 0x4, 0x62, 0xb, 0x0, 0x2, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x0, 0x15, 0x7, 0xab, 0x9, 0x6, 0x3, 0xf7, 0x83}, {0x1000, 0xeeee0000, 0x9, 0xa0, 0xb1, 0x8, 0x2, 0xa0, 0x4, 0xf, 0x5, 0x7}, {0xeeef0000, 0x26000, 0x4, 0x5, 0x7, 0xd1, 0x7, 0x3, 0x9, 0x81, 0x9, 0x70}, {0x200000, 0x4000, 0x14, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0x9, 0xb0, 0x9}, {0xffff2000, 0x30}, {0x8000000, 0x7}, 0x80010000, 0x0, 0x0, 0x2024, 0x0, 0x400, 0x3000, [0x9, 0x100000000000201, 0x5b, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 349.655463ms ago: executing program 0 (id=2638): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0x0, 0x11203}}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8001}}, './file0\x00'}) mmap$snddsp_control(&(0x7f0000ffb000/0x4000)=nil, 0x1000, 0x3000001, 0x30, r6, 0x83000000) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) getgid() setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000040)=r4, 0x4) write$tun(r2, 0x0, 0xfdef) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x40c0}, 0x4080) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) ioctl$EVIOCGPROP(r8, 0x40047438, &(0x7f0000000180)=""/246) writev(r8, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 178.394594ms ago: executing program 3 (id=2639): add_key$fscrypt_v1(&(0x7f0000002380), &(0x7f00000023c0)={'fscrypt:', @desc3}, &(0x7f0000002400)={0x0, "6ae13f4eb7972c3da82e5285650040eb799383a7cc10053d7f010100000000000000d729f30672b4456185611417030d9f1f2f164a1f4e0700000000000000f1", 0x2a}, 0x48, 0xfffffffffffffffc) r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @auto=[0x37, 0x57, 0x35, 0x39, 0x30, 0x38, 0x36, 0x35, 0x30, 0x34, 0x64, 0x35, 0x37, 0x65, 0x31, 0x30]}, &(0x7f0000000080)={0x0, "c965603d593ec78dc0a5b8fbfc3ecbf9a9b22ba8a00f7607e07b994de98f2cb0894dd3696fc80994f89c6618c56a01d9b9587a2481c243543bd3777573651927", 0x33}, 0x48, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000100)='id_legacy\x00', &(0x7f0000000140)='logon\x00') 128.434387ms ago: executing program 5 (id=2640): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x8042, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x2}) write$P9_RSTATu(r0, &(0x7f0000000100)={0x239, 0x2, 0x0, {{0x500, 0xf8, 0x0, 0x0, {}, 0x0, 0xf7ffffff, 0x3, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x1d, '\xd2\x99\x98\x80\x14\x98l\xe9\x82\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e\x97\xa5\x9ad', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x239) 23.963568ms ago: executing program 3 (id=2641): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x1a4, r2, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7f}]}, @TIPC_NLA_NODE={0xa0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "12fa1b9c65714854f99f4cdaab941ed05dd342deee0b58e28844417b3fdf96711488"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "8f90fc9585dddd5e9531d8cdfcb2e138d977a6d520473b9ab0187b855038a8f2d8edc185"}}]}, @TIPC_NLA_MEDIA={0xd8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x900}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x45d}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0x4}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x14}, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x1, 0x19, &(0x7f0000001600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xffffffffffffffff}}, @call={0x85, 0x0, 0x0, 0x2a}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f000001af40)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f000001af80)={r4, 0xfca804a0, 0x10, 0x38, &(0x7f000001b000)="b800000500000000", &(0x7f000001b040)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 22.84297ms ago: executing program 1 (id=2651): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000f50900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c20098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xec}}, 0x0) 18.671058ms ago: executing program 5 (id=2642): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'netdevsim0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x29, 0x11, 0x20000a2e, 0xc00000c, 0x2, 0x3, 0x27ff, 0x400, 0x3000000}}) syz_io_uring_setup(0x24d2, &(0x7f0000007c40)={0x0, 0x201b, 0x40, 0x1, 0x95}, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000380)={0x0, 0x0, 0x6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000780)={r2, 0x74e0, 0x10000}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000340)=0x1, 0x12) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0), 0x12) 0s ago: executing program 0 (id=2643): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x1a7a40) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c00)=ANY=[@ANYBLOB="0006000046529e0b42111533d206ff24004f0a7c1067254168"], 0xa8}}, 0x0) write$P9_RCREATE(r1, &(0x7f0000000a00)={0x18, 0x73, 0x1, {{0x4, 0x3, 0x7}, 0x8}}, 0x18) write$binfmt_misc(r1, &(0x7f0000000a40), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000a80)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x4, 0x48dd, 0x1000100, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac100875397bdb22d0000b420a1a93c9e01177d3d058dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x100000000, 0x7]}}) kernel console output (not intermixed with test programs): initialized): usbnet_get_endpoints failed: -22 [ 409.996288][ T9583] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -22 [ 410.016872][T12013] usb 6-1: Using ep0 maxpacket: 32 [ 410.017990][T12013] usb 6-1: New USB device found: idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 410.039898][T12013] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 410.039926][T12013] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 410.039959][T12013] usb 6-1: config 0 has no interface number 0 [ 410.039996][T12013] usb 6-1: config 0 interface 184 altsetting 7 endpoint 0x6 has invalid wMaxPacketSize 0 [ 410.040016][T12013] usb 6-1: config 0 interface 184 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 410.040038][T12013] usb 6-1: config 0 interface 184 has no altsetting 0 [ 410.073901][T12013] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.073929][T12013] usb 6-1: Product: syz [ 410.073943][T12013] usb 6-1: Manufacturer: syz [ 410.073957][T12013] usb 6-1: SerialNumber: syz [ 410.098187][ T5767] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 410.116017][ T5767] usb 5-1: USB disconnect, device number 100 [ 410.170931][T12013] usb 6-1: config 0 descriptor?? [ 410.188500][T12013] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 410.188713][T12013] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -22 [ 410.246278][ T195] usb 1-1: USB disconnect, device number 94 [ 410.387550][ T5767] usb 6-1: USB disconnect, device number 28 [ 410.687879][ T9584] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 410.807806][ T5767] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 410.828694][ T195] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 410.838935][ T9584] usb 1-1: Using ep0 maxpacket: 32 [ 410.844620][ T9584] usb 1-1: New USB device found: idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 410.845828][ T9584] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 410.845852][ T9584] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 410.845871][ T9584] usb 1-1: config 0 has no interface number 0 [ 410.845909][ T9584] usb 1-1: config 0 interface 184 altsetting 7 endpoint 0x6 has invalid wMaxPacketSize 0 [ 410.845928][ T9584] usb 1-1: config 0 interface 184 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 410.845941][ T9584] usb 1-1: config 0 interface 184 has no altsetting 0 [ 410.848310][ T9584] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.848333][ T9584] usb 1-1: Product: syz [ 410.848347][ T9584] usb 1-1: Manufacturer: syz [ 410.848361][ T9584] usb 1-1: SerialNumber: syz [ 410.853309][ T9584] usb 1-1: config 0 descriptor?? [ 410.863176][ T9584] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 410.865776][ T9584] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -22 [ 410.916767][T12312] loop3: detected capacity change from 0 to 7 [ 410.920014][T12312] Dev loop3: unable to read RDB block 7 [ 410.920132][T12312] loop3: unable to read partition table [ 410.920334][T12312] loop3: partition table beyond EOD, truncated [ 410.920350][T12312] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 410.958228][ T5767] usb 4-1: Using ep0 maxpacket: 32 [ 410.963804][ T5767] usb 4-1: New USB device found: idVendor=046d, idProduct=c31c, bcdDevice=0.40 [ 410.965613][ T5767] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 410.965641][ T5767] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 410.965677][ T5767] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.972061][ T5767] usb 4-1: config 0 descriptor?? [ 410.979634][ T195] usb 6-1: Using ep0 maxpacket: 32 [ 410.980385][ T195] usb 6-1: New USB device found: idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 410.981608][ T195] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 410.981629][ T195] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 410.981647][ T195] usb 6-1: config 0 has no interface number 0 [ 410.981684][ T195] usb 6-1: config 0 interface 184 altsetting 7 endpoint 0x6 has invalid wMaxPacketSize 0 [ 410.981704][ T195] usb 6-1: config 0 interface 184 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 410.981729][ T195] usb 6-1: config 0 interface 184 has no altsetting 0 [ 410.988959][ T5767] hub 4-1:0.0: USB hub found [ 410.993867][ T195] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.993924][ T195] usb 6-1: Product: syz [ 410.993939][ T195] usb 6-1: Manufacturer: syz [ 410.993952][ T195] usb 6-1: SerialNumber: syz [ 411.002182][ T195] usb 6-1: config 0 descriptor?? [ 411.015328][ T195] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 411.016263][ T195] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -22 [ 411.198966][ T5767] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 411.407457][T12322] loop3: detected capacity change from 0 to 7 [ 411.411009][T12322] Dev loop3: unable to read RDB block 7 [ 411.411051][T12322] loop3: unable to read partition table [ 411.411309][T12322] loop3: partition table beyond EOD, truncated [ 411.412808][T12322] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 411.496088][T12324] loop0: detected capacity change from 0 to 3904 [ 411.556294][T12324] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 411.556333][T12324] ldm_validate_privheads(): Disk read failed. [ 411.557800][T12324] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 411.557819][T12324] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 411.557831][T12324] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 2. [ 411.557843][T12324] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 3. [ 411.557857][T12324] ldm_validate_tocblocks(): Failed to find a valid TOCBLOCK. [ 411.557928][T12324] loop0: [ 411.557947][T12324] loop0: partition table partially beyond EOD, truncated [ 411.633233][ T5767] hid-generic 0003:046D:C31C.0013: unknown main item tag 0x0 [ 411.671550][ T5767] hid-generic 0003:046D:C31C.0013: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.3-1/input0 [ 412.058402][ T5767] usb 4-1: USB disconnect, device number 97 [ 412.656863][ T195] usb 1-1: USB disconnect, device number 95 [ 412.691925][ T5002] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 412.691947][ T5002] ldm_validate_privheads(): Disk read failed. [ 412.694075][ T5002] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 412.694098][ T5002] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 412.694116][ T5002] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 2. [ 412.694126][ T5002] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 3. [ 412.694133][ T5002] ldm_validate_tocblocks(): Failed to find a valid TOCBLOCK. [ 412.694167][ T5002] loop0: [ 412.694179][ T5002] loop0: partition table partially beyond EOD, truncated [ 412.781118][ T5767] usb 6-1: USB disconnect, device number 29 [ 412.832236][T12349] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2206'. [ 412.885453][T12350] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2203'. [ 413.204459][T12356] tipc: Enabling of bearer rejected, failed to enable media [ 413.238420][ T5767] usb 6-1: new full-speed USB device number 30 using dummy_hcd [ 413.390120][ T5767] usb 6-1: not running at top speed; connect to a high speed hub [ 413.390159][ T5767] usb 6-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 413.391655][ T5767] usb 6-1: config 1 has an invalid interface number: 65 but max is 1 [ 413.391680][ T5767] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 413.391699][ T5767] usb 6-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 413.391718][ T5767] usb 6-1: config 1 has no interface number 2 [ 413.391766][ T5767] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 413.391779][ T5767] usb 6-1: config 1 interface 1 has no altsetting 0 [ 413.396720][ T5767] usb 6-1: string descriptor 0 read error: -22 [ 413.396842][ T5767] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.272068][ T5767] usb 6-1: selecting invalid altsetting 0 [ 414.272177][ T5767] usb 6-1: selecting invalid altsetting 0 [ 414.272232][ T5767] cdc_ncm 6-1:1.0: bind() failure [ 414.319464][ T5767] cdc_ncm 6-1:1.65: CDC Union missing and no IAD found [ 414.319513][ T5767] cdc_ncm 6-1:1.65: bind() failure [ 414.362336][ T5767] usb 6-1: selecting invalid altsetting 0 [ 414.362369][ T5767] cdc_ncm 6-1:1.1: probe with driver cdc_ncm failed with error -22 [ 414.374359][ T5767] usb 6-1: selecting invalid altsetting 0 [ 414.374389][ T5767] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -22 [ 414.375165][ T5767] usb 6-1: selecting invalid altsetting 0 [ 414.375187][ T5767] usbtest 6-1:1.1: probe with driver usbtest failed with error -22 [ 414.419673][ T5767] usb 6-1: USB disconnect, device number 30 [ 414.714900][T12384] vlan2: entered promiscuous mode [ 414.757816][ T5767] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 414.909489][ T5767] usb 6-1: New USB device found: idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 414.911391][ T5767] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 414.915071][ T5767] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.915087][ T5767] usb 6-1: Product: syz [ 414.915095][ T5767] usb 6-1: Manufacturer: syz [ 414.915103][ T5767] usb 6-1: SerialNumber: syz [ 414.988488][ T5767] usb 6-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 415.112328][T12388] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2218'. [ 415.137738][ T9583] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 415.299496][ T9583] usb 2-1: Using ep0 maxpacket: 32 [ 415.300680][ T9583] usb 2-1: New USB device found: idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 415.302266][ T9583] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 415.302292][ T9583] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 415.302310][ T9583] usb 2-1: config 0 has no interface number 0 [ 415.302343][ T9583] usb 2-1: config 0 interface 184 altsetting 7 endpoint 0x6 has invalid wMaxPacketSize 0 [ 415.302356][ T9583] usb 2-1: config 0 interface 184 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 415.302369][ T9583] usb 2-1: config 0 interface 184 has no altsetting 0 [ 415.305676][ T9583] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.305699][ T9583] usb 2-1: Product: syz [ 415.305932][ T9583] usb 2-1: Manufacturer: syz [ 415.305947][ T9583] usb 2-1: SerialNumber: syz [ 415.410321][ T9583] usb 2-1: config 0 descriptor?? [ 415.417549][ T5767] usb 6-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 415.424429][ T9583] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 415.424566][ T9583] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -22 [ 415.545052][ T5767] usb 6-1: USB disconnect, device number 31 [ 415.624965][ T9583] usb 2-1: USB disconnect, device number 84 [ 416.057777][ T9583] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 416.078778][ T5767] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 416.199679][ T9583] usb 4-1: device descriptor read/64, error -71 [ 416.229055][ T5767] usb 2-1: Using ep0 maxpacket: 32 [ 416.230010][ T5767] usb 2-1: New USB device found: idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 416.233080][ T5767] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 416.233104][ T5767] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 416.233120][ T5767] usb 2-1: config 0 has no interface number 0 [ 416.233142][ T5767] usb 2-1: config 0 interface 184 altsetting 7 endpoint 0x6 has invalid wMaxPacketSize 0 [ 416.233153][ T5767] usb 2-1: config 0 interface 184 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 416.233167][ T5767] usb 2-1: config 0 interface 184 has no altsetting 0 [ 416.280523][ T5767] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.280549][ T5767] usb 2-1: Product: syz [ 416.280564][ T5767] usb 2-1: Manufacturer: syz [ 416.280577][ T5767] usb 2-1: SerialNumber: syz [ 416.342136][ T5767] usb 2-1: config 0 descriptor?? [ 416.359672][ T5767] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 416.366449][ T5767] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -22 [ 416.460574][ T9583] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 416.601404][ T9583] usb 4-1: device descriptor read/64, error -71 [ 416.707998][ T9583] usb usb4-port1: attempt power cycle [ 416.952677][T12410] loop0: detected capacity change from 0 to 3904 [ 416.999880][T12410] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 416.999902][T12410] ldm_validate_privheads(): Disk read failed. [ 417.000109][T12410] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 417.000121][T12410] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 417.000128][T12410] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 2. [ 417.000135][T12410] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 3. [ 417.000142][T12410] ldm_validate_tocblocks(): Failed to find a valid TOCBLOCK. [ 417.000168][T12410] loop0: [ 417.000178][T12410] loop0: partition table partially beyond EOD, truncated [ 417.069082][ T9583] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 417.098361][ T9583] usb 4-1: device descriptor read/8, error -71 [ 417.244978][T12414] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2224'. [ 417.337873][ T9583] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 417.360746][ T9583] usb 4-1: device descriptor read/8, error -71 [ 417.468131][ T9583] usb usb4-port1: unable to enumerate USB device [ 418.122034][ T9583] usb 2-1: USB disconnect, device number 85 [ 418.617833][ T9583] usb 2-1: new low-speed USB device number 86 using dummy_hcd [ 418.750533][T12441] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2230'. [ 418.766740][T12013] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 418.778535][ T9583] usb 2-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 418.789773][ T9583] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 418.789800][ T9583] usb 2-1: config 0 has no interface number 0 [ 418.789840][ T9583] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 418.789864][ T9583] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 418.789904][ T9583] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.795814][ T9583] usb 2-1: config 0 descriptor?? [ 418.796882][T12430] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 418.865459][ T9583] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 418.917780][ T5767] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 418.936141][T12013] usb 6-1: New USB device found: idVendor=1235, idProduct=8201, bcdDevice=1.00 [ 418.938040][T12013] usb 6-1: config index 0 descriptor too short (expected 69, got 51) [ 418.938082][T12013] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 418.970214][T12013] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.970582][T12013] usb 6-1: Product: syz [ 418.970598][T12013] usb 6-1: Manufacturer: syz [ 418.970612][T12013] usb 6-1: SerialNumber: syz [ 419.009711][T12013] usb 6-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8201); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 419.081479][ T5767] usb 5-1: New USB device found: idVendor=04dd, idProduct=8005, bcdDevice=0.00 [ 419.099972][ T5767] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 419.100023][ T5767] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 419.133663][ T5767] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.133690][ T5767] usb 5-1: Product: syz [ 419.133704][ T5767] usb 5-1: Manufacturer: syz [ 419.133718][ T5767] usb 5-1: SerialNumber: syz [ 419.200736][ T5767] usb 5-1: unsupported MDLM descriptors [ 419.241760][T12013] usb 6-1: Error initialising Scarlett Gen 2 Mixer Driver: -71 [ 419.387587][T12013] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 419.420226][T12013] usb 6-1: USB disconnect, device number 32 [ 419.495806][ T8040] udevd[8040]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 419.613330][ T5767] usb 5-1: USB disconnect, device number 101 [ 420.615537][T12457] syzkaller0: entered promiscuous mode [ 420.615553][T12457] syzkaller0: entered allmulticast mode [ 420.651843][T12457] tipc: Enabled bearer , priority 0 [ 420.729183][T12456] tipc: Resetting bearer [ 420.936692][T12456] tipc: Disabling bearer [ 420.974883][T12461] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2237'. [ 421.254316][T12488] netlink: 'syz.4.2240': attribute type 7 has an invalid length. [ 421.279111][T12491] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2239'. [ 421.321301][T12013] usb 2-1: USB disconnect, device number 86 [ 421.659337][ T9583] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 421.809709][ T9583] usb 1-1: New USB device found: idVendor=08ca, idProduct=0110, bcdDevice=1.00 [ 421.816806][ T9583] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 421.845620][ T9583] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.845648][ T9583] usb 1-1: Product: syz [ 421.845662][ T9583] usb 1-1: Manufacturer: syz [ 421.845674][ T9583] usb 1-1: SerialNumber: syz [ 421.881972][ T9583] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 422.011512][ T5767] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 422.160958][ T5767] usb 6-1: New USB device found: idVendor=04dd, idProduct=8005, bcdDevice=0.00 [ 422.162536][ T5767] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 422.162581][ T5767] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 422.217569][ T5767] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.217598][ T5767] usb 6-1: Product: syz [ 422.217815][ T5767] usb 6-1: Manufacturer: syz [ 422.217830][ T5767] usb 6-1: SerialNumber: syz [ 422.271335][ T5767] usb 6-1: unsupported MDLM descriptors [ 422.614773][T12013] usb 6-1: USB disconnect, device number 33 [ 422.762819][ T9583] gspca_mr97310a: reg read [21] error -71 [ 422.762940][ T9583] mr97310a 1-1:1.0: probe with driver mr97310a failed with error -71 [ 422.796114][ T9583] usb 1-1: USB disconnect, device number 96 [ 423.224770][T12555] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2256'. [ 423.879470][T12582] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2264'. [ 423.959404][T12585] loop5: detected capacity change from 0 to 7 [ 423.962987][T12585] Dev loop5: unable to read RDB block 7 [ 423.963018][T12585] loop5: AHDI p1 p2 p4 [ 423.963039][T12585] loop5: partition table partially beyond EOD, truncated [ 423.963226][T12585] loop5: p1 start 5439488 is beyond EOD, truncated [ 423.963245][T12585] loop5: p4 start 3288604672 is beyond EOD, truncated [ 424.254060][T12592] loop5: detected capacity change from 0 to 7 [ 424.256679][T12592] Dev loop5: unable to read RDB block 7 [ 424.256721][T12592] loop5: unable to read partition table [ 424.256920][T12592] loop5: partition table beyond EOD, truncated [ 424.256938][T12592] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 424.437828][ T9583] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 424.609416][ T9583] usb 1-1: New USB device found: idVendor=04dd, idProduct=8005, bcdDevice=0.00 [ 424.612596][ T9583] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 424.612646][ T9583] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 424.617129][ T9583] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.617156][ T9583] usb 1-1: Product: syz [ 424.617169][ T9583] usb 1-1: Manufacturer: syz [ 424.617183][ T9583] usb 1-1: SerialNumber: syz [ 424.682136][ T9583] usb 1-1: unsupported MDLM descriptors [ 424.922718][ T9583] usb 1-1: USB disconnect, device number 97 [ 425.135928][T12602] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2272'. [ 425.173835][T12604] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2281'. [ 425.828119][ T5767] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 425.959868][ T5767] usb 2-1: device descriptor read/64, error -71 [ 426.197987][ T5767] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 426.274776][T12631] loop5: detected capacity change from 0 to 7 [ 426.286527][T12631] Dev loop5: unable to read RDB block 7 [ 426.286572][T12631] loop5: unable to read partition table [ 426.286792][T12631] loop5: partition table beyond EOD, truncated [ 426.286827][T12631] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 426.328765][ T5767] usb 2-1: device descriptor read/64, error -71 [ 426.441805][ T5767] usb usb2-port1: attempt power cycle [ 426.574953][T12636] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2284'. [ 426.664149][T12639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2285'. [ 426.777855][ T5767] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 426.800037][ T5767] usb 2-1: device descriptor read/8, error -71 [ 427.037834][ T5767] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 427.059535][ T5767] usb 2-1: device descriptor read/8, error -71 [ 427.179726][ T5767] usb usb2-port1: unable to enumerate USB device [ 427.197842][ T9584] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 427.424139][T12659] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2293'. [ 427.439966][T12658] tipc: Enabling of bearer rejected, failed to enable media [ 427.521860][T12662] loop3: detected capacity change from 0 to 7 [ 427.524112][T12662] Dev loop3: unable to read RDB block 7 [ 427.524155][T12662] loop3: unable to read partition table [ 427.524373][T12662] loop3: partition table beyond EOD, truncated [ 427.524389][T12662] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 427.709508][ T5767] usb 5-1: new full-speed USB device number 102 using dummy_hcd [ 427.744479][T12673] FAULT_INJECTION: forcing a failure. [ 427.744479][T12673] name failslab, interval 1, probability 0, space 0, times 0 [ 427.744500][T12673] CPU: 0 UID: 0 PID: 12673 Comm: syz.0.2297 Tainted: G L syzkaller #0 PREEMPT(full) [ 427.744516][T12673] Tainted: [L]=SOFTLOCKUP [ 427.744520][T12673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 427.744527][T12673] Call Trace: [ 427.744531][T12673] [ 427.744537][T12673] dump_stack_lvl+0xe8/0x150 [ 427.744559][T12673] should_fail_ex+0x3eb/0x540 [ 427.744576][T12673] should_failslab+0xa8/0x100 [ 427.744595][T12673] ? skb_clone+0x212/0x3a0 [ 427.744698][T12673] kmem_cache_alloc_noprof+0x9c/0x600 [ 427.744711][T12673] ? skb_clone+0x212/0x3a0 [ 427.744726][T12673] skb_clone+0x212/0x3a0 [ 427.744739][T12673] __netlink_deliver_tap+0x355/0x6e0 [ 427.744760][T12673] ? netlink_deliver_tap+0x2e/0x1b0 [ 427.744775][T12673] netlink_deliver_tap+0x19c/0x1b0 [ 427.744789][T12673] netlink_unicast+0x8c1/0xa80 [ 427.744811][T12673] netlink_sendmsg+0x7f0/0xb20 [ 427.744828][T12673] ? __pfx_netlink_sendmsg+0x10/0x10 [ 427.744844][T12673] ? aa_sock_msg_perm+0x144/0x210 [ 427.744857][T12673] ? apparmor_socket_sendmsg+0x18b/0x360 [ 427.744874][T12673] ? __pfx_netlink_sendmsg+0x10/0x10 [ 427.744890][T12673] sock_sendmsg_nosec+0x14e/0x190 [ 427.744906][T12673] ____sys_sendmsg+0x54e/0x850 [ 427.744919][T12673] ? __pfx_____sys_sendmsg+0x10/0x10 [ 427.744938][T12673] ___sys_sendmsg+0x2a5/0x360 [ 427.744948][T12673] ? __lock_acquire+0x747/0x2de0 [ 427.744965][T12673] ? __pfx____sys_sendmsg+0x10/0x10 [ 427.744975][T12673] ? get_pid_task+0x20/0x1f0 [ 427.744987][T12673] ? get_pid_task+0x20/0x1f0 [ 427.744996][T12673] ? get_pid_task+0x20/0x1f0 [ 427.745023][T12673] ? __fget_files+0x3a2/0x420 [ 427.745036][T12673] ? __fget_files+0x2a/0x420 [ 427.745052][T12673] __sys_sendmsg+0x177/0x240 [ 427.745064][T12673] ? __pfx___sys_sendmsg+0x10/0x10 [ 427.745081][T12673] ? __might_fault+0xaf/0x130 [ 427.745094][T12673] __do_fast_syscall_32+0x28b/0x6c0 [ 427.745108][T12673] ? do_fast_syscall_32+0x33/0x70 [ 427.745119][T12673] ? asm_int80_emulation+0x1a/0x20 [ 427.745130][T12673] ? do_int80_emulation+0x299/0x500 [ 427.745141][T12673] ? trace_irq_disable+0x3b/0x140 [ 427.745158][T12673] do_fast_syscall_32+0x33/0x70 [ 427.745170][T12673] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 427.745183][T12673] RIP: 0023:0xf744ef1c [ 427.745193][T12673] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 427.745202][T12673] RSP: 002b:00000000f546650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 427.745214][T12673] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000d40 [ 427.745221][T12673] RDX: 000000002c000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 427.745227][T12673] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 427.745233][T12673] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 427.745240][T12673] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 427.745255][T12673] [ 427.746932][T12673] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2297'. [ 427.848467][ T5767] usb 5-1: device descriptor read/64, error -71 [ 427.960699][ T9583] usb 6-1: new low-speed USB device number 34 using dummy_hcd [ 428.128091][ T5767] usb 5-1: new full-speed USB device number 103 using dummy_hcd [ 428.168438][ T9583] usb 6-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 428.170956][ T9583] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 428.170982][ T9583] usb 6-1: config 0 has no interface number 0 [ 428.171022][ T9583] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 428.171048][ T9583] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 428.171086][ T9583] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.176551][ T9583] usb 6-1: config 0 descriptor?? [ 428.182507][T12670] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 428.186938][T12676] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2298'. [ 428.258632][ T5767] usb 5-1: device descriptor read/64, error -71 [ 428.264116][ T9583] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 428.368610][ T5767] usb usb5-port1: attempt power cycle [ 428.707993][ T5767] usb 5-1: new full-speed USB device number 104 using dummy_hcd [ 428.730823][ T5767] usb 5-1: device descriptor read/8, error -71 [ 428.878661][T12691] vlan4: entered promiscuous mode [ 428.972178][ T5767] usb 5-1: new full-speed USB device number 105 using dummy_hcd [ 428.991237][ T5767] usb 5-1: device descriptor read/8, error -71 [ 429.100401][ T5767] usb usb5-port1: unable to enumerate USB device [ 429.134504][T12695] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2303'. [ 429.364175][ T5767] usb 6-1: USB disconnect, device number 34 [ 429.538364][T12700] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2305'. [ 429.867019][T12706] syzkaller0: entered promiscuous mode [ 429.867035][T12706] syzkaller0: entered allmulticast mode [ 429.950203][T12708] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) ! [ 429.950919][T12708] syzkaller0: entered promiscuous mode [ 429.950932][T12708] syzkaller0: entered allmulticast mode [ 429.954503][T12708] tipc: Enabled bearer , priority 0 [ 429.955542][T12707] tipc: Resetting bearer [ 430.015584][T12707] tipc: Disabling bearer [ 430.181864][T12712] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2309'. [ 430.182864][T12712] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2309'. [ 430.182877][T12712] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2309'. [ 430.487857][ T195] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 430.639508][ T195] usb 6-1: Using ep0 maxpacket: 32 [ 430.640327][ T195] usb 6-1: New USB device found: idVendor=046d, idProduct=c31c, bcdDevice=0.40 [ 430.641354][ T195] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 430.641383][ T195] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 430.641419][ T195] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.656160][ T195] usb 6-1: config 0 descriptor?? [ 430.661094][ T195] hub 6-1:0.0: USB hub found [ 430.871252][ T195] hub 6-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 430.938115][ T9584] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 431.091671][ T9584] usb 5-1: unable to get BOS descriptor or descriptor too short [ 431.091725][ T9584] usb 5-1: New USB device found: idVendor=8086, idProduct=0ad2, bcdDevice=4.00 [ 431.091788][ T9584] usb 5-1: too many configurations: 248, using maximum allowed: 8 [ 431.094898][ T9584] usb 5-1: config 230 has an invalid descriptor of length 0, skipping remainder of the config [ 431.094946][ T9584] usb 5-1: config 230 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 431.096377][ T9584] usb 5-1: config 230 has an invalid descriptor of length 0, skipping remainder of the config [ 431.096423][ T9584] usb 5-1: config 230 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 431.101254][ T9584] usb 5-1: config 230 has an invalid descriptor of length 0, skipping remainder of the config [ 431.101299][ T9584] usb 5-1: config 230 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 431.103253][ T9584] usb 5-1: config 230 has an invalid descriptor of length 0, skipping remainder of the config [ 431.103297][ T9584] usb 5-1: config 230 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 431.106740][ T9584] usb 5-1: config 230 has an invalid descriptor of length 0, skipping remainder of the config [ 431.106806][ T9584] usb 5-1: config 230 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 431.109691][ T9584] usb 5-1: config 230 has an invalid descriptor of length 0, skipping remainder of the config [ 431.109734][ T9584] usb 5-1: config 230 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 431.112427][ T9584] usb 5-1: config 230 has an invalid descriptor of length 0, skipping remainder of the config [ 431.112492][ T9584] usb 5-1: config 230 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 431.115565][ T9584] usb 5-1: config 230 has an invalid descriptor of length 0, skipping remainder of the config [ 431.115608][ T9584] usb 5-1: config 230 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 431.131150][ T9584] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 431.131197][ T9584] usb 5-1: Product: syz [ 431.131211][ T9584] usb 5-1: Manufacturer: syz [ 431.174134][ T9584] uvcvideo 5-1:230.0: probe with driver uvcvideo failed with error -22 [ 431.285595][ T195] hid-generic 0003:046D:C31C.0014: unknown main item tag 0x0 [ 431.329476][ T195] hid-generic 0003:046D:C31C.0014: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.5-1/input0 [ 431.824910][T12751] __nla_validate_parse: 1 callbacks suppressed [ 431.824924][T12751] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2310'. [ 431.825829][T12529] bond0: (slave bond_slave_0): interface is now down [ 431.825861][T12529] bond0: (slave bond_slave_1): interface is now down [ 431.870346][T12757] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2324'. [ 431.957789][T10926] bond0: (slave bond_slave_0): interface is now down [ 431.957809][T10926] bond0: (slave bond_slave_1): interface is now down [ 431.986444][T10926] bond0: now running without any active interface! [ 432.278292][ T9584] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 432.407832][ T9584] usb 1-1: device descriptor read/64, error -71 [ 432.647783][ T9584] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 432.777750][ T9584] usb 1-1: device descriptor read/64, error -71 [ 432.888233][ T9584] usb usb1-port1: attempt power cycle [ 432.990438][T12766] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2327'. [ 432.990459][T12766] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2327'. [ 433.148942][T12771] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2329'. [ 433.228116][ T9584] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 433.249681][ T9584] usb 1-1: device descriptor read/8, error -71 [ 433.488743][ T9584] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 433.508339][ T9584] usb 1-1: device descriptor read/8, error -71 [ 433.618003][ T9584] usb usb1-port1: unable to enumerate USB device [ 433.622967][T12013] usb 5-1: USB disconnect, device number 106 [ 433.816714][T12777] fuse: Unknown parameter 'g' [ 434.057812][T12013] usb 5-1: new full-speed USB device number 107 using dummy_hcd [ 434.220749][T12013] usb 5-1: unable to get BOS descriptor or descriptor too short [ 434.221484][T12013] usb 5-1: not running at top speed; connect to a high speed hub [ 434.221520][T12013] usb 5-1: New USB device found: idVendor=0763, idProduct=1031, bcdDevice=0.40 [ 434.223261][T12013] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 4 [ 434.225947][T12013] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.225971][T12013] usb 5-1: Product: syz [ 434.225987][T12013] usb 5-1: Manufacturer: syz [ 434.226002][T12013] usb 5-1: SerialNumber: syz [ 434.768280][ T5767] usb 6-1: USB disconnect, device number 35 [ 434.918196][T12794] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2337'. [ 434.974066][T12777] kvm [12776]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010005) = 0x4 [ 435.191122][T12013] usb 5-1: unit 4 not found! [ 435.221348][T12800] IPVS: mh: UDP 127.0.0.1:20000 - no destination available [ 435.284865][T12013] usb 5-1: USB disconnect, device number 107 [ 435.370933][ T8040] udevd[8040]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 435.427841][ T5368] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 435.558267][ T5368] usb 4-1: device descriptor read/64, error -71 [ 435.588480][T12811] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2344'. [ 435.613451][T12811] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2344'. [ 435.797783][ T5368] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 435.898708][T12013] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 435.926974][T12817] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2347'. [ 435.927794][ T5368] usb 4-1: device descriptor read/64, error -71 [ 436.027995][T12013] usb 2-1: device descriptor read/64, error -71 [ 436.028083][ T9583] usb 5-1: new full-speed USB device number 108 using dummy_hcd [ 436.038297][ T5368] usb usb4-port1: attempt power cycle [ 436.068161][T12821] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 436.068185][T12821] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 436.069921][T12821] vhci_hcd vhci_hcd.0: Device attached [ 436.189361][ T9583] usb 5-1: New USB device found: idVendor=0d8c, idProduct=000e, bcdDevice=8e.04 [ 436.190378][ T9583] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 436.190402][ T9583] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 436.190420][ T9583] usb 5-1: config 0 has no interface number 0 [ 436.190458][ T9583] usb 5-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 436.191896][ T9583] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 436.191920][ T9583] usb 5-1: Product: syz [ 436.191934][ T9583] usb 5-1: SerialNumber: syz [ 436.193638][ T9583] usb 5-1: config 0 descriptor?? [ 436.199741][ T9583] usbhid 5-1:0.8: couldn't find an input interrupt endpoint [ 436.289835][T12013] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 436.308074][T12832] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2350'. [ 436.318098][ T50] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 436.377991][ T5368] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 436.399114][ T5368] usb 4-1: device descriptor read/8, error -71 [ 436.403514][T12815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.403959][T12815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.405376][T10831] usb 5-1: USB disconnect, device number 108 [ 436.428798][T12013] usb 2-1: device descriptor read/64, error -71 [ 436.432461][ T9584] usb 44-1: SetAddress Request (2) to port 0 [ 436.432519][ T9584] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 436.478812][ T50] usb 6-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 436.479769][ T50] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.481393][ T50] usb 6-1: config 0 descriptor?? [ 436.538198][T12013] usb usb2-port1: attempt power cycle [ 436.618140][ T9583] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 436.668821][ T5368] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 436.683943][ T50] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 436.698592][ T5368] usb 4-1: device descriptor read/8, error -71 [ 436.787899][ T9583] usb 1-1: Using ep0 maxpacket: 16 [ 436.789640][ T9583] usb 1-1: New USB device found: idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 436.790713][ T9583] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 436.790737][ T9583] usb 1-1: config 0 has no interface number 0 [ 436.792634][ T9583] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.792656][ T9583] usb 1-1: Product: syz [ 436.792671][ T9583] usb 1-1: Manufacturer: syz [ 436.792688][ T9583] usb 1-1: SerialNumber: syz [ 436.795572][ T9583] usb 1-1: config 0 descriptor?? [ 436.798371][ T9583] hub 1-1:0.132: bad descriptor, ignoring hub [ 436.798415][ T9583] hub 1-1:0.132: probe with driver hub failed with error -5 [ 436.805000][ T9583] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.132/input/input34 [ 436.818307][ T5368] usb usb4-port1: unable to enumerate USB device [ 436.897767][T12013] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 436.909564][T12013] usb 2-1: device descriptor read/8, error -71 [ 436.925863][ T50] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 1 [ 436.925888][ T50] [drm] Initialized udl on minor 1 [ 437.158502][T12013] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 437.192557][T12013] usb 2-1: device descriptor read/8, error -71 [ 437.196739][T12841] 8021q: VLANs not supported on sit0 [ 437.207977][T12844] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2355'. [ 437.215559][T12844] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2355'. [ 437.215581][T12844] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2355'. [ 437.297986][T12013] usb usb2-port1: unable to enumerate USB device [ 437.406547][T12849] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2357'. [ 437.697933][ T5368] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 437.839391][ T5368] usb 5-1: device descriptor read/64, error -71 [ 438.087791][ T5368] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 438.238533][ T5368] usb 5-1: device descriptor read/64, error -71 [ 438.358068][ T5368] usb usb5-port1: attempt power cycle [ 438.709948][ T5368] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 438.730597][ T5368] usb 5-1: device descriptor read/8, error -71 [ 438.785827][ T30] audit: type=1326 audit(1793299115.273:3566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12860 comm="syz.1.2362" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746ef1c code=0x7ffc0000 [ 438.786000][ T30] audit: type=1326 audit(1793299115.273:3567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12860 comm="syz.1.2362" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746ef1c code=0x7ffc0000 [ 438.786424][ T30] audit: type=1326 audit(1793299115.273:3568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12860 comm="syz.1.2362" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=308 compat=1 ip=0xf746ef1c code=0x7ffc0000 [ 438.786599][ T30] audit: type=1326 audit(1793299115.273:3569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12860 comm="syz.1.2362" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746ef1c code=0x7ffc0000 [ 438.786723][ T30] audit: type=1326 audit(1793299115.273:3570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12860 comm="syz.1.2362" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746ef1c code=0x7ffc0000 [ 438.787213][ T30] audit: type=1326 audit(1793299115.273:3571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12860 comm="syz.1.2362" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71c77ab code=0x7ffc0000 [ 438.813913][ T30] audit: type=1326 audit(1793299115.283:3572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12860 comm="syz.1.2362" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf746ef1c code=0x7ffc0000 [ 438.813963][ T30] audit: type=1326 audit(1793299115.283:3573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12860 comm="syz.1.2362" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf746ef1c code=0x7ffc0000 [ 438.815914][ T30] audit: type=1326 audit(1793299115.283:3574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12860 comm="syz.1.2362" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf746ef1c code=0x7ffc0000 [ 438.815951][ T30] audit: type=1326 audit(1793299115.283:3575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12860 comm="syz.1.2362" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf746ef1c code=0x7ffc0000 [ 438.998419][ T5368] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 439.020939][ T5368] usb 5-1: device descriptor read/8, error -71 [ 439.057965][T12013] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 439.128151][ T5368] usb usb5-port1: unable to enumerate USB device [ 439.187801][T12013] usb 2-1: device descriptor read/64, error -71 [ 439.228137][T10831] usb 1-1: USB disconnect, device number 103 [ 439.447824][T12013] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 439.598321][T12013] usb 2-1: device descriptor read/64, error -71 [ 439.709255][T12013] usb usb2-port1: attempt power cycle [ 440.005409][T12884] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2367'. [ 440.007253][T12884] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2367'. [ 440.007276][T12884] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2367'. [ 440.049719][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.049756][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.059668][T12013] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 440.093054][T12013] usb 2-1: device descriptor read/8, error -71 [ 440.348353][T12013] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 440.371330][T12013] usb 2-1: device descriptor read/8, error -71 [ 440.482008][T12013] usb usb2-port1: unable to enumerate USB device [ 440.591301][T12893] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2380'. [ 440.591323][T12893] FAULT_INJECTION: forcing a failure. [ 440.591323][T12893] name failslab, interval 1, probability 0, space 0, times 0 [ 440.591350][T12893] CPU: 1 UID: 0 PID: 12893 Comm: syz.0.2380 Tainted: G L syzkaller #0 PREEMPT(full) [ 440.591375][T12893] Tainted: [L]=SOFTLOCKUP [ 440.591381][T12893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 440.591391][T12893] Call Trace: [ 440.591399][T12893] [ 440.591409][T12893] dump_stack_lvl+0xe8/0x150 [ 440.591445][T12893] should_fail_ex+0x3eb/0x540 [ 440.591473][T12893] should_failslab+0xa8/0x100 [ 440.591501][T12893] __kvmalloc_node_noprof+0x171/0x820 [ 440.591530][T12893] ? xfrm_user_rcv_msg_compat+0x4b3/0x1530 [ 440.591695][T12893] ? xfrm_user_rcv_msg_compat+0x4b3/0x1530 [ 440.591729][T12893] xfrm_user_rcv_msg_compat+0x4b3/0x1530 [ 440.591764][T12893] ? __pfx_xfrm_user_rcv_msg_compat+0x10/0x10 [ 440.591827][T12893] ? xfrm_get_translator+0x1b/0x240 [ 440.591897][T12893] ? xfrm_get_translator+0x1b/0x240 [ 440.591924][T12893] xfrm_user_rcv_msg+0x2c8/0xf30 [ 440.591950][T12893] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 440.591997][T12893] ? __mutex_trylock_common+0x15f/0x270 [ 440.592026][T12893] ? __pfx___mutex_trylock_common+0x10/0x10 [ 440.592054][T12893] ? rcu_is_watching+0x16/0xb0 [ 440.592093][T12893] ? trace_contention_end+0x3d/0x140 [ 440.592128][T12893] netlink_rcv_skb+0x226/0x4a0 [ 440.592155][T12893] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 440.592182][T12893] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 440.592223][T12893] ? netlink_deliver_tap+0x2e/0x1b0 [ 440.592246][T12893] ? netlink_deliver_tap+0x2e/0x1b0 [ 440.592273][T12893] xfrm_netlink_rcv+0x79/0x90 [ 440.592295][T12893] netlink_unicast+0x8ef/0xa80 [ 440.592335][T12893] netlink_sendmsg+0x7f0/0xb20 [ 440.592367][T12893] ? __pfx_netlink_sendmsg+0x10/0x10 [ 440.592395][T12893] ? aa_sock_msg_perm+0x144/0x210 [ 440.592420][T12893] ? apparmor_socket_sendmsg+0x18b/0x360 [ 440.592448][T12893] ? __pfx_netlink_sendmsg+0x10/0x10 [ 440.592471][T12893] sock_sendmsg_nosec+0x14e/0x190 [ 440.592498][T12893] ____sys_sendmsg+0x54e/0x850 [ 440.592524][T12893] ? __pfx_____sys_sendmsg+0x10/0x10 [ 440.592560][T12893] ___sys_sendmsg+0x2a5/0x360 [ 440.592577][T12893] ? __lock_acquire+0x747/0x2de0 [ 440.592605][T12893] ? __pfx____sys_sendmsg+0x10/0x10 [ 440.592624][T12893] ? get_pid_task+0x20/0x1f0 [ 440.592644][T12893] ? get_pid_task+0x20/0x1f0 [ 440.592661][T12893] ? get_pid_task+0x20/0x1f0 [ 440.592713][T12893] ? __fget_files+0x3a2/0x420 [ 440.592734][T12893] ? __fget_files+0x2a/0x420 [ 440.592764][T12893] __sys_sendmsg+0x177/0x240 [ 440.592786][T12893] ? __pfx___sys_sendmsg+0x10/0x10 [ 440.592819][T12893] ? __might_fault+0xaf/0x130 [ 440.592843][T12893] __do_fast_syscall_32+0x28b/0x6c0 [ 440.592867][T12893] ? do_fast_syscall_32+0x33/0x70 [ 440.592894][T12893] ? asm_int80_emulation+0x1a/0x20 [ 440.592912][T12893] ? do_int80_emulation+0x299/0x500 [ 440.592933][T12893] ? trace_irq_disable+0x3b/0x140 [ 440.592963][T12893] do_fast_syscall_32+0x33/0x70 [ 440.592985][T12893] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 440.593007][T12893] RIP: 0023:0xf744ef1c [ 440.593024][T12893] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 440.593042][T12893] RSP: 002b:00000000f546650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 440.593063][T12893] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000d40 [ 440.593077][T12893] RDX: 000000002c000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 440.593089][T12893] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 440.593100][T12893] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 440.593113][T12893] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 440.593141][T12893] [ 440.787979][T12897] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2371'. [ 441.168238][T10831] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 441.317844][T10831] usb 1-1: Using ep0 maxpacket: 16 [ 441.319104][T10831] usb 1-1: New USB device found: idVendor=056a, idProduct=00b8, bcdDevice=0.00 [ 441.320390][T10831] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 441.320446][T10831] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 441.320486][T10831] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.322715][T10831] usb 1-1: config 0 descriptor?? [ 441.970530][ T50] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 441.971049][ T50] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 441.978704][T10831] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 441.984779][T10831] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 441.984978][T10831] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 442.032539][ T5767] usb 6-1: USB disconnect, device number 36 [ 442.041037][T12826] vhci_hcd: connection reset by peer [ 442.058286][T12529] vhci_hcd vhci_hcd.5: stop threads [ 442.073488][T12529] vhci_hcd vhci_hcd.5: release socket [ 442.075756][ T9584] usb 44-1: device descriptor read/8, error -110 [ 442.103500][T12529] vhci_hcd vhci_hcd.5: disconnect device [ 442.139109][T12923] tipc: Enabling of bearer rejected, failed to enable media [ 442.255318][T12929] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2383'. [ 442.303270][T12932] Context (ID=0x0) not attached to queue pair (handle=0x4dd:0x0) [ 442.390071][T12936] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2385'. [ 442.459853][ T50] usb 1-1: USB disconnect, device number 104 [ 442.471468][ T9584] usb usb44-port1: attempt power cycle [ 442.557823][ T5767] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 442.603467][T12940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2387'. [ 442.678565][T10831] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 442.688069][ T5767] usb 6-1: device descriptor read/64, error -71 [ 442.711959][T12942] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2388'. [ 442.830476][T10831] usb 4-1: New USB device found: idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 442.832673][T10831] usb 4-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 442.832693][T10831] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 442.837069][T10831] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.837085][T10831] usb 4-1: Product: syz [ 442.837093][T10831] usb 4-1: Manufacturer: syz [ 442.837101][T10831] usb 4-1: SerialNumber: syz [ 442.894739][T10831] usb 4-1: config 0 descriptor?? [ 442.915305][T10831] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 442.947768][ T5767] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 443.046394][ T9584] usb usb44-port1: unable to enumerate USB device [ 443.078742][ T5767] usb 6-1: device descriptor read/64, error -71 [ 443.188056][ T5767] usb usb6-port1: attempt power cycle [ 443.527807][ T5767] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 443.548618][ T5767] usb 6-1: device descriptor read/8, error -71 [ 443.556793][T12962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2395'. [ 443.556809][T12962] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2395'. [ 443.791333][ T5767] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 443.794074][T12966] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) ! [ 443.816591][ T5767] usb 6-1: device descriptor read/8, error -71 [ 443.850436][T12966] syzkaller0: entered promiscuous mode [ 443.850471][T12966] syzkaller0: entered allmulticast mode [ 443.855088][T12967] tipc: Enabled bearer , priority 0 [ 443.856810][T12965] tipc: Resetting bearer [ 443.900448][T12965] tipc: Disabling bearer [ 443.918063][ T5767] usb usb6-port1: unable to enumerate USB device [ 443.940139][T10831] gspca_sunplus: reg_r err -71 [ 443.940261][T10831] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 443.945958][T10831] usb 4-1: USB disconnect, device number 106 [ 444.069036][T12971] ucma_write: process 1418 (syz.1.2398) changed security contexts after opening file descriptor, this is not allowed. [ 444.673005][T12976] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 444.739134][T12976] bond0 (unregistering): (slave ip6gretap0): Releasing backup interface [ 444.768291][T12976] bond0 (unregistering): Released all slaves [ 445.228708][ T9584] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 445.247844][ T5767] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 445.347850][ T195] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 445.367848][T10831] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 445.385885][ T9584] usb 1-1: Using ep0 maxpacket: 32 [ 445.386661][ T9584] usb 1-1: New USB device found: idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 445.388729][ T9584] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 445.388752][ T9584] usb 1-1: config 0 has no interfaces? [ 445.388780][ T9584] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.392044][ T9584] usb 1-1: config 0 descriptor?? [ 445.397907][ T5767] usb 5-1: Using ep0 maxpacket: 32 [ 445.401542][ T5767] usb 5-1: New USB device found: idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 445.415283][ T5767] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 445.415309][ T5767] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 445.415327][ T5767] usb 5-1: config 0 has no interface number 0 [ 445.415364][ T5767] usb 5-1: config 0 interface 184 altsetting 7 endpoint 0x6 has invalid wMaxPacketSize 0 [ 445.415385][ T5767] usb 5-1: config 0 interface 184 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 445.415409][ T5767] usb 5-1: config 0 interface 184 has no altsetting 0 [ 445.417470][ T5767] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.417494][ T5767] usb 5-1: Product: syz [ 445.417506][ T5767] usb 5-1: Manufacturer: syz [ 445.417527][ T5767] usb 5-1: SerialNumber: syz [ 445.422792][ T5767] usb 5-1: config 0 descriptor?? [ 445.431453][ T5767] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 445.431692][ T5767] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22 [ 445.502171][ T195] usb 2-1: Using ep0 maxpacket: 32 [ 445.510907][ T195] usb 2-1: New USB device found: idVendor=046d, idProduct=c31c, bcdDevice=0.40 [ 445.511874][ T195] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.511900][ T195] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 445.511936][ T195] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.514426][ T195] usb 2-1: config 0 descriptor?? [ 445.519406][ T195] hub 2-1:0.0: USB hub found [ 445.586744][T10831] usb 4-1: Using ep0 maxpacket: 32 [ 445.587870][T10831] usb 4-1: New USB device found: idVendor=046d, idProduct=c31c, bcdDevice=0.40 [ 445.589306][T10831] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.589336][T10831] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 445.589372][T10831] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.596796][T10831] usb 4-1: config 0 descriptor?? [ 445.607902][T10831] hub 4-1:0.0: USB hub found [ 445.636267][T12983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.641045][T12983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.647090][T12983] loop0: detected capacity change from 0 to 3904 [ 445.674411][T12983] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 445.674440][T12983] ldm_validate_privheads(): Disk read failed. [ 445.675394][T12983] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 445.675415][T12983] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 445.675427][T12983] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 2. [ 445.675440][T12983] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 3. [ 445.675454][T12983] ldm_validate_tocblocks(): Failed to find a valid TOCBLOCK. [ 445.675522][T12983] loop0: [ 445.675541][T12983] loop0: partition table partially beyond EOD, truncated [ 445.683159][ T50] usb 5-1: USB disconnect, device number 113 [ 445.734414][ T195] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 445.747701][T12013] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 445.813618][T10831] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 445.908401][T12013] usb 6-1: Using ep0 maxpacket: 32 [ 445.909462][T12013] usb 6-1: New USB device found: idVendor=1b1c, idProduct=1c09, bcdDevice=0.00 [ 445.910734][T12013] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 445.910765][T12013] usb 6-1: config 0 interface 0 has no altsetting 0 [ 445.910795][T12013] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.914073][T12013] usb 6-1: config 0 descriptor?? [ 446.147547][ T195] hid-generic 0003:046D:C31C.0016: unknown main item tag 0x0 [ 446.159808][ T195] hid-generic 0003:046D:C31C.0016: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0 [ 446.239107][T10831] hid-generic 0003:046D:C31C.0017: unknown main item tag 0x0 [ 446.263636][T13005] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2410'. [ 446.281067][T10831] hid-generic 0003:046D:C31C.0017: hidraw1: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.3-1/input0 [ 446.334482][T12013] corsair-psu 0003:1B1C:1C09.0018: unknown main item tag 0x0 [ 446.334508][T12013] corsair-psu 0003:1B1C:1C09.0018: unknown main item tag 0x0 [ 446.334530][T12013] corsair-psu 0003:1B1C:1C09.0018: unknown main item tag 0x0 [ 446.334552][T12013] corsair-psu 0003:1B1C:1C09.0018: unknown main item tag 0x0 [ 446.334577][T12013] corsair-psu 0003:1B1C:1C09.0018: unknown main item tag 0x0 [ 446.357501][T12013] corsair-psu 0003:1B1C:1C09.0018: hidraw2: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.5-1/input0 [ 446.527374][T12013] corsair-psu 0003:1B1C:1C09.0018: unable to initialize device (-71) [ 446.657983][T10831] usb 4-1: USB disconnect, device number 107 [ 447.109990][T12998] usb 2-1: reset high-speed USB device number 99 using dummy_hcd [ 447.114937][T12998] usb 2-1: device reset changed ep0 maxpacket size! [ 447.117220][ T195] usb 2-1: USB disconnect, device number 99 [ 447.150078][T12013] corsair-psu 0003:1B1C:1C09.0018: probe with driver corsair-psu failed with error -71 [ 447.166411][T12013] usb 6-1: USB disconnect, device number 41 [ 447.337819][ T195] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 447.491679][ T195] usb 2-1: unable to get BOS descriptor or descriptor too short [ 447.491734][ T195] usb 2-1: New USB device found: idVendor=0582, idProduct=0023, bcdDevice=0.40 [ 447.492601][ T195] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 447.492636][ T195] usb 2-1: can't read configurations, error -71 [ 447.523437][T10831] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 447.530060][T12013] usb 6-1: new full-speed USB device number 42 using dummy_hcd [ 447.698784][T12013] usb 6-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 447.700133][T12013] usb 6-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 447.700174][T12013] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 447.700200][T12013] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 447.700242][T12013] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 447.701581][T12013] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 447.701627][T12013] usb 6-1: SerialNumber: syz [ 447.722417][T10831] usb 4-1: unable to get BOS descriptor or descriptor too short [ 447.722468][T10831] usb 4-1: New USB device found: idVendor=0582, idProduct=0023, bcdDevice=0.40 [ 447.724131][T10831] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 447.724165][T10831] usb 4-1: can't read configurations, error -71 [ 447.724836][T12013] cdc_acm 6-1:1.0: probe with driver cdc_acm failed with error -12 [ 447.911339][T12013] usb 6-1: USB disconnect, device number 42 [ 448.047051][ T5767] usb 1-1: USB disconnect, device number 105 [ 448.096538][T13034] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2418'. [ 448.291470][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 448.291491][ T30] audit: type=1326 audit(1793299124.783:3626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13040 comm="syz.3.2421" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88f1c code=0x7ffc0000 [ 448.291629][ T30] audit: type=1326 audit(1793299124.783:3627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13040 comm="syz.3.2421" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88f1c code=0x7ffc0000 [ 448.294907][ T30] audit: type=1326 audit(1793299124.783:3628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13040 comm="syz.3.2421" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f88f1c code=0x7ffc0000 [ 448.294942][ T30] audit: type=1326 audit(1793299124.783:3629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13040 comm="syz.3.2421" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88f1c code=0x7ffc0000 [ 448.294964][ T30] audit: type=1326 audit(1793299124.783:3630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13040 comm="syz.3.2421" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88f1c code=0x7ffc0000 [ 448.304165][ T30] audit: type=1326 audit(1793299124.783:3631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13040 comm="syz.3.2421" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f88f1c code=0x7ffc0000 [ 448.304199][ T30] audit: type=1326 audit(1793299124.793:3632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13040 comm="syz.3.2421" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88f1c code=0x7ffc0000 [ 448.304222][ T30] audit: type=1326 audit(1793299124.793:3633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13040 comm="syz.3.2421" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88f1c code=0x7ffc0000 [ 448.338145][ T30] audit: type=1326 audit(1793299124.823:3634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13040 comm="syz.3.2421" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7f88f1c code=0x7ffc0000 [ 448.338199][ T30] audit: type=1326 audit(1793299124.823:3635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13040 comm="syz.3.2421" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88f1c code=0x7ffc0000 [ 448.867757][T10831] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 448.902638][T13053] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2425'. [ 448.997765][ T195] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 449.075503][T13055] syzkaller0: entered promiscuous mode [ 449.075528][T13055] syzkaller0: entered allmulticast mode [ 449.092967][T13055] tipc: Enabled bearer , priority 0 [ 449.100310][T13054] tipc: Resetting bearer [ 449.148588][ T195] usb 2-1: New USB device found: idVendor=1e7d, idProduct=2d50, bcdDevice=0.00 [ 449.150052][ T195] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 449.150099][ T195] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 449.150143][ T195] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.178156][ T195] usb 2-1: config 0 descriptor?? [ 449.215355][ T195] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 449.234834][T13054] tipc: Disabling bearer [ 449.544855][T13059] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2428'. [ 449.777738][ T195] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 449.812630][T13066] netlink: 'syz.1.2423': attribute type 1 has an invalid length. [ 449.867594][T13068] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2423'. [ 449.879015][T13068] bond2: entered allmulticast mode [ 449.927843][T12013] usb 6-1: new full-speed USB device number 43 using dummy_hcd [ 449.929267][ T195] usb 1-1: Using ep0 maxpacket: 32 [ 449.929912][ T195] usb 1-1: New USB device found: idVendor=046d, idProduct=c31c, bcdDevice=0.40 [ 449.933810][ T195] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 449.933840][ T195] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 449.933879][ T195] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.946607][T13066] bond2: (slave bridge2): making interface the new active one [ 449.946631][T13066] bridge2: entered allmulticast mode [ 449.947236][T13066] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 449.948445][ T195] usb 1-1: config 0 descriptor?? [ 449.955498][ T195] hub 1-1:0.0: USB hub found [ 450.074459][T13066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.080531][T13066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.118404][T12013] usb 6-1: New USB device found: idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 450.135219][T12013] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.135248][T12013] usb 6-1: Product: syz [ 450.135262][T12013] usb 6-1: Manufacturer: syz [ 450.135276][T12013] usb 6-1: SerialNumber: syz [ 450.151519][T12013] usb 6-1: config 0 descriptor?? [ 450.173129][ T195] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 450.396599][T12013] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 450.594903][ T195] hid-generic 0003:046D:C31C.0019: unknown main item tag 0x0 [ 450.637243][ T195] hid-generic 0003:046D:C31C.0019: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.0-1/input0 [ 451.087919][ T195] usb 5-1: new full-speed USB device number 114 using dummy_hcd [ 451.138096][ T50] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 451.219163][T12013] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 451.226551][T12013] usb 6-1: USB disconnect, device number 43 [ 451.243893][ T195] usb 5-1: New USB device found: idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 451.257114][ T195] usb 5-1: config 5 has an invalid interface number: 123 but max is 0 [ 451.257133][ T195] usb 5-1: config 5 has no interface number 0 [ 451.257156][ T195] usb 5-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 451.257172][ T195] usb 5-1: config 5 interface 123 altsetting 7 endpoint 0x5 has invalid wMaxPacketSize 0 [ 451.257183][ T195] usb 5-1: config 5 interface 123 has no altsetting 0 [ 451.309030][T13063] usb 1-1: reset high-speed USB device number 106 using dummy_hcd [ 451.310538][ T195] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.310554][ T195] usb 5-1: Product: syz [ 451.310562][ T195] usb 5-1: Manufacturer: syz [ 451.310570][ T195] usb 5-1: SerialNumber: syz [ 451.356181][ T50] usb 4-1: New USB device found: idVendor=0926, idProduct=3333, bcdDevice=0.40 [ 451.370076][ T50] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 451.370125][ T50] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.375280][ T50] usb 4-1: config 0 descriptor?? [ 451.575700][T13073] loop4: detected capacity change from 0 to 7 [ 451.600488][ T50] usbhid 4-1:0.0: can't add hid device: -71 [ 451.600618][ T50] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 451.602986][T13073] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 451.603016][T13073] loop4: partition table partially beyond EOD, truncated [ 451.614300][T13073] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 451.645813][ T50] usb 4-1: USB disconnect, device number 111 [ 451.922699][T12013] usb 2-1: USB disconnect, device number 102 [ 452.118297][ T50] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 452.308446][ T50] usb 4-1: New USB device found: idVendor=0926, idProduct=3333, bcdDevice=0.40 [ 452.310039][ T50] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 452.310081][ T50] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.316805][ T50] usb 4-1: config 0 descriptor?? [ 452.389703][ T9584] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 452.519550][ T9584] usb 6-1: device descriptor read/64, error -71 [ 452.563251][ T50] usbhid 4-1:0.0: can't add hid device: -71 [ 452.563401][ T50] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 452.583053][ T50] usb 4-1: USB disconnect, device number 112 [ 452.759627][ T9584] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 452.887918][ T9584] usb 6-1: device descriptor read/64, error -71 [ 452.957771][ T5767] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 452.998219][ T9584] usb usb6-port1: attempt power cycle [ 453.107814][ T5767] usb 2-1: Using ep0 maxpacket: 32 [ 453.108565][ T5767] usb 2-1: New USB device found: idVendor=8086, idProduct=0b63, bcdDevice=6a.32 [ 453.109736][ T5767] usb 2-1: config 0 has an invalid interface number: 86 but max is 0 [ 453.109761][ T5767] usb 2-1: config 0 has no interface number 0 [ 453.109800][ T5767] usb 2-1: config 0 interface 86 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 453.109849][ T5767] usb 2-1: config 0 interface 86 altsetting 16 endpoint 0x82 has invalid wMaxPacketSize 0 [ 453.109868][ T5767] usb 2-1: config 0 interface 86 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 0 [ 453.109882][ T5767] usb 2-1: config 0 interface 86 has no altsetting 0 [ 453.111940][ T5767] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.111964][ T5767] usb 2-1: Product: syz [ 453.111978][ T5767] usb 2-1: Manufacturer: syz [ 453.112015][ T5767] usb 2-1: SerialNumber: syz [ 453.115497][ T5767] usb 2-1: config 0 descriptor?? [ 453.117095][T13095] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 453.331618][ T5767] ljca 2-1:0.86: submit rx urb failed: -90 [ 453.331677][ T5767] ljca 2-1:0.86: probe with driver ljca failed with error -90 [ 453.343981][ T9584] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 453.365788][ T5767] usb 2-1: USB disconnect, device number 103 [ 453.383777][ T9584] usb 6-1: device descriptor read/8, error -71 [ 453.620207][ T9584] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 453.639425][ T9584] usb 6-1: device descriptor read/8, error -71 [ 453.748189][ T9584] usb usb6-port1: unable to enumerate USB device [ 453.869511][ T50] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 454.021050][ T50] usb 4-1: New USB device found: idVendor=0582, idProduct=0025, bcdDevice=0.40 [ 454.022792][ T50] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 454.022859][ T50] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 115, changing to 7 [ 454.025183][ T50] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.025206][ T50] usb 4-1: Product: syz [ 454.025221][ T50] usb 4-1: Manufacturer: syz [ 454.025259][ T50] usb 4-1: SerialNumber: syz [ 454.108175][ T195] ni6501 5-1:5.123: driver 'ni6501' failed to auto-configure device. [ 454.139505][ T195] usb 5-1: USB disconnect, device number 114 [ 454.434749][ T50] usb 4-1: USB disconnect, device number 113 [ 454.551767][ T5648] udevd[5648]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 455.285739][T13139] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2451'. [ 455.436167][T13145] loop3: detected capacity change from 0 to 7 [ 455.452478][T13145] Dev loop3: unable to read RDB block 7 [ 455.452520][T13145] loop3: unable to read partition table [ 455.452709][T13145] loop3: partition table beyond EOD, truncated [ 455.452727][T13145] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 455.795488][T13158] netlink: 'syz.3.2457': attribute type 29 has an invalid length. [ 455.848251][ T195] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 455.998196][ T195] usb 6-1: Using ep0 maxpacket: 32 [ 455.999231][ T195] usb 6-1: New USB device found: idVendor=046d, idProduct=c31c, bcdDevice=0.40 [ 456.002679][ T195] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 456.002711][ T195] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 456.002750][ T195] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.005167][ T195] usb 6-1: config 0 descriptor?? [ 456.060726][ T195] hub 6-1:0.0: USB hub found [ 456.068598][ T50] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 456.198141][ T50] usb 5-1: device descriptor read/64, error -71 [ 456.222628][ T195] hub 6-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 456.448161][ T50] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 456.532395][T13063] usbhid 1-1:0.0: reset_resume error -32 [ 456.589265][ T50] usb 5-1: device descriptor read/64, error -71 [ 456.589796][ T9584] usb 1-1: USB disconnect, device number 106 [ 456.645466][ T195] hid-generic 0003:046D:C31C.001A: unknown main item tag 0x0 [ 456.664268][ T195] hid-generic 0003:046D:C31C.001A: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.5-1/input0 [ 456.700582][ T50] usb usb5-port1: attempt power cycle [ 456.787814][ T5689] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 456.948544][ T5689] usb 2-1: New USB device found: idVendor=0582, idProduct=0025, bcdDevice=0.40 [ 456.949582][ T5689] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 456.949625][ T5689] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 115, changing to 7 [ 456.951877][ T5689] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.951901][ T5689] usb 2-1: Product: syz [ 456.951914][ T5689] usb 2-1: Manufacturer: syz [ 456.951927][ T5689] usb 2-1: SerialNumber: syz [ 457.037741][ T50] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 457.060787][ T50] usb 5-1: device descriptor read/8, error -71 [ 457.236567][ T5689] usb 2-1: USB disconnect, device number 104 [ 457.291827][ T7471] udevd[7471]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 457.311188][ T50] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 457.333519][ T50] usb 5-1: device descriptor read/8, error -71 [ 457.387791][ T195] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 457.449665][ T50] usb usb5-port1: unable to enumerate USB device [ 457.537852][ T195] usb 1-1: Using ep0 maxpacket: 16 [ 457.539376][ T195] usb 1-1: New USB device found: idVendor=0a12, idProduct=5d10, bcdDevice=0.00 [ 457.539405][ T195] usb 1-1: no configurations [ 457.539412][ T195] usb 1-1: can't read configurations, error -22 [ 457.579929][T13153] usb 6-1: reset high-speed USB device number 48 using dummy_hcd [ 457.581091][T13153] usb 6-1: device reset changed ep0 maxpacket size! [ 457.582777][ T9584] usb 6-1: USB disconnect, device number 48 [ 457.667883][ T195] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 457.737888][ T9584] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 457.819031][ T195] usb 1-1: Using ep0 maxpacket: 16 [ 457.819780][ T195] usb 1-1: New USB device found: idVendor=0a12, idProduct=5d10, bcdDevice=0.00 [ 457.819818][ T195] usb 1-1: no configurations [ 457.819831][ T195] usb 1-1: can't read configurations, error -22 [ 457.820371][ T195] usb usb1-port1: attempt power cycle [ 457.896900][ T9584] usb 6-1: unable to get BOS descriptor or descriptor too short [ 457.896951][ T9584] usb 6-1: New USB device found: idVendor=0582, idProduct=0023, bcdDevice=0.40 [ 457.915602][ T9584] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 457.915639][ T9584] usb 6-1: can't read configurations, error -71 [ 457.991737][T13183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2466'. [ 458.047139][T13185] bond3: entered allmulticast mode [ 458.061626][T13185] ipip0: entered promiscuous mode [ 458.061642][T13185] ipip0: entered allmulticast mode [ 458.157932][ T195] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 458.179506][ T195] usb 1-1: Using ep0 maxpacket: 16 [ 458.180057][ T195] usb 1-1: New USB device found: idVendor=0a12, idProduct=5d10, bcdDevice=0.00 [ 458.180093][ T195] usb 1-1: no configurations [ 458.180106][ T195] usb 1-1: can't read configurations, error -22 [ 458.193827][T13189] vlan4: entered promiscuous mode [ 458.307845][ T195] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 458.329312][ T195] usb 1-1: Using ep0 maxpacket: 16 [ 458.329830][ T195] usb 1-1: New USB device found: idVendor=0a12, idProduct=5d10, bcdDevice=0.00 [ 458.329866][ T195] usb 1-1: no configurations [ 458.329873][ T195] usb 1-1: can't read configurations, error -22 [ 458.330077][ T195] usb usb1-port1: unable to enumerate USB device [ 458.947859][ T9584] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 459.098827][ T9584] usb 6-1: Using ep0 maxpacket: 16 [ 459.099602][ T9584] usb 6-1: New USB device found: idVendor=05ac, idProduct=024b, bcdDevice=0.00 [ 459.100781][ T9584] usb 6-1: config 0 has an invalid descriptor of length 125, skipping remainder of the config [ 459.100827][ T9584] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 459.100868][ T9584] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.105328][ T9584] usb 6-1: config 0 descriptor?? [ 459.217748][T12013] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 459.377788][T12013] usb 5-1: Using ep0 maxpacket: 32 [ 459.384956][T12013] usb 5-1: New USB device found: idVendor=046d, idProduct=c31c, bcdDevice=0.40 [ 459.385881][T12013] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 459.385910][T12013] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 459.385945][T12013] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.435489][T12013] usb 5-1: config 0 descriptor?? [ 459.446800][T12013] hub 5-1:0.0: USB hub found [ 459.652961][T12013] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 459.853575][T13245] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2476'. [ 459.853603][T13245] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2476'. [ 460.082527][T12013] hid-generic 0003:046D:C31C.001B: unknown main item tag 0x0 [ 460.143850][T12013] hid-generic 0003:046D:C31C.001B: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.4-1/input0 [ 460.567932][T12013] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 460.730271][T12013] usb 4-1: Using ep0 maxpacket: 16 [ 460.731005][T12013] usb 4-1: New USB device found: idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 460.737224][T12013] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 460.737249][T12013] usb 4-1: config 0 has no interface number 0 [ 460.737275][T12013] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 460.737288][T12013] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 460.807787][T12013] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 460.807817][T12013] usb 4-1: Product: syz [ 460.807832][T12013] usb 4-1: SerialNumber: syz [ 460.815809][T12013] usb 4-1: config 0 descriptor?? [ 460.849517][T12013] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 460.876355][T12013] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input35 [ 461.022028][T13207] usb 5-1: reset high-speed USB device number 119 using dummy_hcd [ 461.215605][T13297] xt_hashlimit: overflow, try lower: 0/0 [ 461.526262][T12013] usb 6-1: USB disconnect, device number 50 [ 462.249328][T13313] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) ! [ 462.254391][T13313] syzkaller0: entered promiscuous mode [ 462.254411][T13313] syzkaller0: entered allmulticast mode [ 462.282221][T13313] tipc: Enabled bearer , priority 0 [ 462.296294][T13312] tipc: Resetting bearer [ 462.396154][T13312] tipc: Disabling bearer [ 462.716899][T13319] ip6erspan1: entered allmulticast mode [ 463.179271][T13327] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2487'. [ 463.414222][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 463.414448][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 463.414664][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 463.414739][ T195] usb 4-1: USB disconnect, device number 114 [ 463.414874][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 463.414896][ C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 463.488597][ T195] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 463.644087][T13335] syzkaller0: entered promiscuous mode [ 463.644111][T13335] syzkaller0: entered allmulticast mode [ 463.674959][T13335] tipc: Enabled bearer , priority 0 [ 463.686688][T13331] tipc: Resetting bearer [ 463.739822][T13331] tipc: Disabling bearer [ 465.501060][T13381] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2494'. [ 466.289307][T13207] usbhid 5-1:0.0: reset_resume error -32 [ 466.338754][ T195] usb 5-1: USB disconnect, device number 119 [ 466.917276][T13433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2506'. [ 467.217889][ T195] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 467.247239][T13448] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2509'. [ 467.247306][T13448] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 467.249606][T13448] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2509'. [ 467.367933][ T195] usb 5-1: Using ep0 maxpacket: 32 [ 467.369483][ T195] usb 5-1: New USB device found: idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 467.373609][ T195] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 467.373627][ T195] usb 5-1: config 0 has no interface number 0 [ 467.373657][ T195] usb 5-1: config 0 interface 184 has no altsetting 0 [ 467.381087][ T195] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.381112][ T195] usb 5-1: Product: syz [ 467.381126][ T195] usb 5-1: Manufacturer: syz [ 467.381139][ T195] usb 5-1: SerialNumber: syz [ 467.420450][ T195] usb 5-1: config 0 descriptor?? [ 467.804163][T13463] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2514'. [ 467.877908][T12013] usb 4-1: new full-speed USB device number 115 using dummy_hcd [ 468.008218][T12013] usb 4-1: device descriptor read/64, error -71 [ 468.237187][ T195] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 468.237218][ T195] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 468.248694][T12013] usb 4-1: new full-speed USB device number 116 using dummy_hcd [ 468.398217][T12013] usb 4-1: device descriptor read/64, error -71 [ 468.449694][ T195] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 468.449726][ T195] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 468.449744][ T195] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 468.449762][ T195] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 468.454236][ T195] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 468.518589][T12013] usb usb4-port1: attempt power cycle [ 468.519258][ T195] usb 5-1: USB disconnect, device number 120 [ 468.670806][T13490] tipc: Enabling of bearer rejected, failed to enable media [ 468.857789][T12013] usb 4-1: new full-speed USB device number 117 using dummy_hcd [ 468.878910][T12013] usb 4-1: device descriptor read/8, error -71 [ 468.998727][T13501] loop3: detected capacity change from 0 to 7 [ 469.001991][T13501] Dev loop3: unable to read RDB block 7 [ 469.002032][T13501] loop3: unable to read partition table [ 469.002241][T13501] loop3: partition table beyond EOD, truncated [ 469.002263][T13501] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 469.060437][T13477] nvme nvme0: failed to connect socket: -512 [ 469.099149][ T195] usb 1-1: new full-speed USB device number 111 using dummy_hcd [ 469.137756][T12013] usb 4-1: new full-speed USB device number 118 using dummy_hcd [ 469.168899][T12013] usb 4-1: device descriptor read/8, error -71 [ 469.196113][T13509] netlink: 71 bytes leftover after parsing attributes in process `syz.4.2522'. [ 469.251220][ T195] usb 1-1: not running at top speed; connect to a high speed hub [ 469.251258][ T195] usb 1-1: New USB device found: idVendor=17cc, idProduct=041d, bcdDevice=0.40 [ 469.253543][T13514] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2524'. [ 469.262120][ T195] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.262146][ T195] usb 1-1: Product: syz [ 469.262159][ T195] usb 1-1: Manufacturer: syz [ 469.262172][ T195] usb 1-1: SerialNumber: syz [ 469.286093][T12013] usb usb4-port1: unable to enumerate USB device [ 469.296080][ T195] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 469.474739][T13532] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2528'. [ 469.480293][ T195] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 469.556724][T13539] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2530'. [ 469.581648][T13539] FAULT_INJECTION: forcing a failure. [ 469.581648][T13539] name failslab, interval 1, probability 0, space 0, times 0 [ 469.581671][T13539] CPU: 0 UID: 0 PID: 13539 Comm: syz.4.2530 Tainted: G L syzkaller #0 PREEMPT(full) [ 469.581685][T13539] Tainted: [L]=SOFTLOCKUP [ 469.581689][T13539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 469.581696][T13539] Call Trace: [ 469.581701][T13539] [ 469.581707][T13539] dump_stack_lvl+0xe8/0x150 [ 469.581735][T13539] should_fail_ex+0x3eb/0x540 [ 469.581752][T13539] should_failslab+0xa8/0x100 [ 469.581769][T13539] ? alloc_empty_file+0x5b/0x1d0 [ 469.581813][T13539] kmem_cache_alloc_noprof+0x9c/0x600 [ 469.581825][T13539] ? stack_depot_save_flags+0x33/0x810 [ 469.581895][T13539] ? alloc_empty_file+0x5b/0x1d0 [ 469.581909][T13539] alloc_empty_file+0x5b/0x1d0 [ 469.581919][T13539] path_openat+0x96/0x20f0 [ 469.581974][T13539] do_file_open+0x23e/0x4a0 [ 469.581990][T13539] ? __pfx_do_file_open+0x10/0x10 [ 469.582015][T13539] ? _raw_spin_unlock+0x28/0x50 [ 469.582057][T13539] ? alloc_fd+0x6af/0x760 [ 469.582075][T13539] do_sys_openat2+0x115/0x200 [ 469.582088][T13539] ? __pfx_do_sys_openat2+0x10/0x10 [ 469.582097][T13539] ? lock_acquire+0x115/0x350 [ 469.582119][T13539] __ia32_compat_sys_openat+0x131/0x160 [ 469.582133][T13539] __do_fast_syscall_32+0x28b/0x6c0 [ 469.582146][T13539] ? do_fast_syscall_32+0x33/0x70 [ 469.582158][T13539] ? asm_int80_emulation+0x1a/0x20 [ 469.582173][T13539] ? do_int80_emulation+0x299/0x500 [ 469.582184][T13539] ? trace_irq_disable+0x3b/0x140 [ 469.582202][T13539] do_fast_syscall_32+0x33/0x70 [ 469.582220][T13539] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 469.582232][T13539] RIP: 0023:0xf742ef1c [ 469.582244][T13539] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 469.582253][T13539] RSP: 002b:00000000f544650c EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 469.582265][T13539] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000540 [ 469.582273][T13539] RDX: 00000000000e84c0 RSI: 0000000000000083 RDI: 0000000000000000 [ 469.582280][T13539] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 469.582285][T13539] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 469.582292][T13539] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 469.582307][T13539] [ 469.746800][T12013] usb 2-1: new full-speed USB device number 105 using dummy_hcd [ 469.795157][ T195] usb 1-1: USB disconnect, device number 111 [ 469.855035][T10831] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 469.875329][ T8040] udevd[8040]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 469.940708][T12013] usb 2-1: unable to get BOS descriptor or descriptor too short [ 469.942092][T12013] usb 2-1: not running at top speed; connect to a high speed hub [ 469.942126][T12013] usb 2-1: New USB device found: idVendor=041e, idProduct=3263, bcdDevice=0.40 [ 469.974524][T12013] usb 2-1: string descriptor 0 read error: -22 [ 469.974631][T12013] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.997454][T12013] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 470.018559][T10831] usb 6-1: New USB device found: idVendor=1286, idProduct=1fa4, bcdDevice=0.00 [ 470.020017][T10831] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.177762][T10831] mvusb_mdio 6-1:1.0: probe with driver mvusb_mdio failed with error -5 [ 470.196041][T12013] usb 2-1: 2:1: invalid format type 0x22f0 is detected, processed as PCM [ 470.196061][T12013] usb 2-1: 2:1 : unsupported sample bitwidth 6 in 7 bytes [ 470.300450][T12013] usb 2-1: USB disconnect, device number 105 [ 470.481818][T10831] usb 6-1: USB disconnect, device number 51 [ 470.550538][T13622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2533'. [ 470.710073][T13629] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2535'. [ 471.168040][ T5689] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 471.205551][T13656] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2543'. [ 471.206534][T13657] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2543'. [ 471.317879][ T5689] usb 1-1: Using ep0 maxpacket: 32 [ 471.319554][ T5689] usb 1-1: New USB device found: idVendor=084e, idProduct=1001, bcdDevice=bf.99 [ 471.321576][ T5689] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 471.321599][ T5689] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 471.327364][ T5689] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 471.327381][ T5689] usb 1-1: Product: syz [ 471.327389][ T5689] usb 1-1: SerialNumber: syz [ 471.344698][ T5689] usb 1-1: config 0 descriptor?? [ 471.449095][T13667] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2547'. [ 471.569568][ T5689] usb 1-1: USB disconnect, device number 112 [ 472.523691][T13698] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2553'. [ 472.925007][T13697] 8021q: adding VLAN 0 to HW filter on device bond0 [ 473.069708][T13727] bond0: (slave veth5): Enslaving as an active interface with an up link [ 473.368685][T10831] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 473.445737][T13763] vlan4: entered promiscuous mode [ 473.518474][T10831] usb 2-1: New USB device found: idVendor=1286, idProduct=1fa4, bcdDevice=0.00 [ 473.521946][T10831] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.779030][T10831] mvusb_mdio 2-1:1.0: probe with driver mvusb_mdio failed with error -5 [ 473.935721][T10831] usb 2-1: USB disconnect, device number 106 [ 474.702739][T13813] pimreg: entered allmulticast mode [ 474.704623][T13813] pimreg: left allmulticast mode [ 474.861024][ T5689] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 475.008229][ T5689] usb 6-1: Using ep0 maxpacket: 8 [ 475.009810][ T5689] usb 6-1: New USB device found: idVendor=0225, idProduct=0000, bcdDevice=0.00 [ 475.012597][ T5689] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 475.012620][ T5689] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 475.012645][ T5689] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 475.012668][ T5689] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.034089][ T5689] hub 6-1:1.0: bad descriptor, ignoring hub [ 475.034117][ T5689] hub 6-1:1.0: probe with driver hub failed with error -5 [ 475.042415][ T5689] cdc_wdm 6-1:1.0: skipping garbage [ 475.042436][ T5689] cdc_wdm 6-1:1.0: skipping garbage [ 475.123630][ T5689] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 475.123719][ T5689] cdc_wdm 6-1:1.0: Unknown control protocol [ 475.167770][T10831] usb 2-1: new full-speed USB device number 107 using dummy_hcd [ 475.325268][T10831] usb 2-1: New USB device found: idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 475.345050][T10831] usb 2-1: config 5 has an invalid interface number: 123 but max is 0 [ 475.345068][T10831] usb 2-1: config 5 has no interface number 0 [ 475.345091][T10831] usb 2-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 475.345105][T10831] usb 2-1: config 5 interface 123 altsetting 7 endpoint 0x5 has invalid wMaxPacketSize 0 [ 475.345124][T10831] usb 2-1: config 5 interface 123 has no altsetting 0 [ 475.416005][T10831] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.416034][T10831] usb 2-1: Product: syz [ 475.416048][T10831] usb 2-1: Manufacturer: syz [ 475.416074][T10831] usb 2-1: SerialNumber: syz [ 475.618819][ T195] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 475.697921][T13822] loop4: detected capacity change from 0 to 7 [ 475.731842][T13822] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 475.732022][T13822] loop4: partition table partially beyond EOD, truncated [ 475.749109][ T195] usb 1-1: device descriptor read/64, error -71 [ 475.761374][T13822] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 475.906162][T13808] usb 6-1: reset high-speed USB device number 52 using dummy_hcd [ 475.963080][T13821] syz.4.2564 (13821): drop_caches: 2 [ 475.988768][ T195] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 476.118503][ T195] usb 1-1: device descriptor read/64, error -71 [ 476.228245][ T195] usb usb1-port1: attempt power cycle [ 476.327819][ T9584] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 476.478398][ T9584] usb 5-1: Using ep0 maxpacket: 32 [ 476.479230][ T9584] usb 5-1: New USB device found: idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 476.480336][ T9584] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 476.480360][ T9584] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 476.480379][ T9584] usb 5-1: config 0 has no interface number 0 [ 476.480416][ T9584] usb 5-1: config 0 interface 184 altsetting 7 endpoint 0x6 has invalid wMaxPacketSize 0 [ 476.480437][ T9584] usb 5-1: config 0 interface 184 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 476.480461][ T9584] usb 5-1: config 0 interface 184 has no altsetting 0 [ 476.484535][ T9584] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.484560][ T9584] usb 5-1: Product: syz [ 476.484574][ T9584] usb 5-1: Manufacturer: syz [ 476.484589][ T9584] usb 5-1: SerialNumber: syz [ 476.493193][T12013] usb 6-1: USB disconnect, device number 52 [ 476.497536][ T9584] usb 5-1: config 0 descriptor?? [ 476.511374][ T9584] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 476.511595][ T9584] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22 [ 476.591692][ T195] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 476.615776][ T195] usb 1-1: device descriptor read/8, error -71 [ 476.736962][ T9584] usb 5-1: USB disconnect, device number 121 [ 476.787271][T13892] __nla_validate_parse: 3 callbacks suppressed [ 476.787292][T13892] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2571'. [ 476.808734][T13892] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2571'. [ 476.848355][ T195] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 476.868910][ T195] usb 1-1: device descriptor read/8, error -71 [ 476.978038][ T195] usb usb1-port1: unable to enumerate USB device [ 477.117771][ T5689] usb 4-1: new low-speed USB device number 119 using dummy_hcd [ 477.207724][T12013] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 477.271965][ T5689] usb 4-1: unable to get BOS descriptor or descriptor too short [ 477.272018][ T5689] usb 4-1: New USB device found: idVendor=0b48, idProduct=1009, bcdDevice=b2.43 [ 477.273007][ T5689] usb 4-1: config 8 has an invalid interface number: 49 but max is 0 [ 477.273030][ T5689] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 477.273048][ T5689] usb 4-1: config 8 has no interface number 0 [ 477.273075][ T5689] usb 4-1: too many endpoints for config 8 interface 49 altsetting 56: 52, using maximum allowed: 30 [ 477.273110][ T5689] usb 4-1: config 8 interface 49 altsetting 56 has 0 endpoint descriptors, different from the interface descriptor's value: 52 [ 477.273135][ T5689] usb 4-1: config 8 interface 49 has no altsetting 0 [ 477.377990][ T195] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 477.417753][T12013] usb 5-1: Using ep0 maxpacket: 32 [ 477.419474][T12013] usb 5-1: New USB device found: idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 477.422603][T12013] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 477.422629][T12013] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 477.422647][T12013] usb 5-1: config 0 has no interface number 0 [ 477.423140][T12013] usb 5-1: config 0 interface 184 altsetting 7 endpoint 0x6 has invalid wMaxPacketSize 0 [ 477.423170][T12013] usb 5-1: config 0 interface 184 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 477.423187][T12013] usb 5-1: config 0 interface 184 has no altsetting 0 [ 477.434118][T12013] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.434135][T12013] usb 5-1: Product: syz [ 477.434143][T12013] usb 5-1: Manufacturer: syz [ 477.434173][T12013] usb 5-1: SerialNumber: syz [ 477.523641][T12013] usb 5-1: config 0 descriptor?? [ 477.528206][ T195] usb 6-1: Using ep0 maxpacket: 8 [ 477.529391][ T195] usb 6-1: New USB device found: idVendor=12ab, idProduct=0004, bcdDevice=0.00 [ 477.532250][ T195] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 477.532296][ T195] usb 6-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 477.532315][ T195] usb 6-1: config 179 has no interface number 0 [ 477.532350][ T195] usb 6-1: config 179 interface 65 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 477.532389][ T195] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.565732][T12013] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 477.594118][T12013] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22 [ 477.752215][T13867] loop0: detected capacity change from 0 to 3904 [ 477.813359][T13867] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 477.813394][T13867] ldm_validate_privheads(): Disk read failed. [ 477.814982][T13867] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 477.815005][T13867] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 477.815019][T13867] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 2. [ 477.815035][T13867] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 3. [ 477.815048][T13867] ldm_validate_tocblocks(): Failed to find a valid TOCBLOCK. [ 477.815119][T13867] loop0: [ 477.815139][T13867] loop0: partition table partially beyond EOD, truncated [ 477.848902][ T195] usb 5-1: USB disconnect, device number 122 [ 478.526167][T13933] netlink: 83 bytes leftover after parsing attributes in process `syz.4.2575'. [ 478.696146][T10831] ni6501 2-1:5.123: driver 'ni6501' failed to auto-configure device. [ 478.721295][T10831] usb 2-1: USB disconnect, device number 107 [ 478.939330][ T195] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 479.088620][ T195] usb 5-1: Using ep0 maxpacket: 16 [ 479.090934][ T195] usb 5-1: New USB device found: idVendor=060b, idProduct=500a, bcdDevice=0.00 [ 479.092338][ T195] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 479.092370][ T195] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 479.092420][ T195] usb 5-1: config 0 interface 0 has no altsetting 0 [ 479.092454][ T195] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.100793][ T195] usb 5-1: config 0 descriptor?? [ 479.297713][T10831] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 479.447719][T10831] usb 2-1: Using ep0 maxpacket: 32 [ 479.448438][T10831] usb 2-1: New USB device found: idVendor=046d, idProduct=c31c, bcdDevice=0.40 [ 479.450502][T10831] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 479.450531][T10831] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 479.450567][T10831] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.455639][T10831] usb 2-1: config 0 descriptor?? [ 479.514031][T10831] hub 2-1:0.0: USB hub found [ 479.599763][ T195] cougar 0003:060B:500A.001C: unknown main item tag 0x0 [ 479.599832][ T195] cougar 0003:060B:500A.001C: unknown main item tag 0x0 [ 479.599860][ T195] cougar 0003:060B:500A.001C: unknown main item tag 0x0 [ 479.599890][ T195] cougar 0003:060B:500A.001C: unknown main item tag 0x0 [ 479.599918][ T195] cougar 0003:060B:500A.001C: unknown main item tag 0x0 [ 479.599971][ T195] cougar 0003:060B:500A.001C: unknown main item tag 0x0 [ 479.599997][ T195] cougar 0003:060B:500A.001C: unknown main item tag 0x0 [ 479.600024][ T195] cougar 0003:060B:500A.001C: unknown main item tag 0x0 [ 479.600052][ T195] cougar 0003:060B:500A.001C: unknown main item tag 0x0 [ 479.600105][ T195] cougar 0003:060B:500A.001C: unknown main item tag 0x0 [ 479.650373][ T195] cougar 0003:060B:500A.001C: hidraw0: USB HID v0.00 Device [HID 060b:500a] on usb-dummy_hcd.4-1/input0 [ 479.703946][T10831] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 479.743221][T12013] usb 5-1: USB disconnect, device number 123 [ 479.862304][T13988] fido_id[13988]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 479.956904][ T5689] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.966046][ T5689] usb 4-1: can't set config #8, error -71 [ 479.973073][ T5689] usb 4-1: USB disconnect, device number 119 [ 480.100338][ T195] usb 6-1: USB disconnect, device number 53 [ 480.189820][T10831] hid-generic 0003:046D:C31C.001D: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0 [ 480.410941][T14036] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2585'. [ 480.550573][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 480.550592][ T30] audit: type=1800 audit(1793299157.043:3642): pid=14049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2582" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=-22 [ 480.631487][T14051] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2588'. [ 480.633796][T14051] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2588'. [ 480.832816][T14060] syzkaller0: entered promiscuous mode [ 480.832840][T14060] syzkaller0: entered allmulticast mode [ 480.851838][T14060] tipc: Enabled bearer , priority 0 [ 480.854040][T14059] tipc: Resetting bearer [ 480.900254][T14059] tipc: Disabling bearer [ 481.014528][T14069] loop5: detected capacity change from 0 to 7 [ 481.025450][T14069] Dev loop5: unable to read RDB block 7 [ 481.025473][T14069] loop5: AHDI p1 p2 p4 [ 481.025484][T14069] loop5: partition table partially beyond EOD, truncated [ 481.026910][T14069] loop5: p1 start 5439488 is beyond EOD, truncated [ 481.026933][T14069] loop5: p4 start 3288604672 is beyond EOD, truncated [ 481.096177][T13972] usb 2-1: reset high-speed USB device number 108 using dummy_hcd [ 481.114348][T13972] usb 2-1: device reset changed ep0 maxpacket size! [ 481.115236][ T195] usb 2-1: USB disconnect, device number 108 [ 481.188927][T10831] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 481.192068][T14081] netlink: 964 bytes leftover after parsing attributes in process `syz.3.2593'. [ 481.192092][T14081] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 481.318542][ T195] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 481.337694][T10831] usb 5-1: Using ep0 maxpacket: 32 [ 481.344335][T10831] usb 5-1: New USB device found: idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 481.346636][T10831] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 481.346661][T10831] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 481.346679][T10831] usb 5-1: config 0 has no interface number 0 [ 481.346715][T10831] usb 5-1: config 0 interface 184 altsetting 7 endpoint 0x6 has invalid wMaxPacketSize 0 [ 481.346735][T10831] usb 5-1: config 0 interface 184 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 481.346760][T10831] usb 5-1: config 0 interface 184 has no altsetting 0 [ 481.395618][T10831] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.395635][T10831] usb 5-1: Product: syz [ 481.395643][T10831] usb 5-1: Manufacturer: syz [ 481.395651][T10831] usb 5-1: SerialNumber: syz [ 481.442782][T10831] usb 5-1: config 0 descriptor?? [ 481.453982][T10831] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 481.454194][T10831] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22 [ 481.511882][ T195] usb 2-1: unable to get BOS descriptor or descriptor too short [ 481.511945][ T195] usb 2-1: New USB device found: idVendor=0582, idProduct=0023, bcdDevice=0.40 [ 481.517220][ T195] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 481.517260][ T195] usb 2-1: can't read configurations, error -71 [ 481.567978][ T9584] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 481.578637][ T5689] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 481.641139][T14103] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2597'. [ 481.659605][ T5767] usb 5-1: USB disconnect, device number 124 [ 481.710568][ T5689] usb 6-1: device descriptor read/64, error -71 [ 481.720879][ T9584] usb 4-1: New USB device found: idVendor=cc35, idProduct=693f, bcdDevice=e7.0f [ 481.723252][ T9584] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 481.723277][ T9584] usb 4-1: config 0 has an invalid interface number: 4 but max is 0 [ 481.723296][ T9584] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 481.723311][ T9584] usb 4-1: config 0 has no interface number 0 [ 481.723319][ T9584] usb 4-1: config 0 has no interface number 1 [ 481.725183][ T9584] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.725206][ T9584] usb 4-1: Product: syz [ 481.725220][ T9584] usb 4-1: Manufacturer: syz [ 481.725233][ T9584] usb 4-1: SerialNumber: syz [ 481.731700][ T9584] usb 4-1: config 0 descriptor?? [ 481.776771][ T9584] cdc_acm 4-1:0.51: probe with driver cdc_acm failed with error -22 [ 481.947808][ T5689] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 481.975119][ T30] audit: type=1326 audit(1793299158.463:3643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14084 comm="syz.3.2594" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f88f1c code=0x0 [ 482.030306][ T5767] usb 4-1: USB disconnect, device number 120 [ 482.083897][ T5689] usb 6-1: device descriptor read/64, error -71 [ 482.097894][ T9584] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 482.162628][T14137] loop5: detected capacity change from 0 to 7 [ 482.173947][T14137] Dev loop5: unable to read RDB block 7 [ 482.173992][T14137] loop5: unable to read partition table [ 482.174212][T14137] loop5: partition table beyond EOD, truncated [ 482.174251][T14137] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 482.187978][T14134] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2600'. [ 482.190392][ T5689] usb usb6-port1: attempt power cycle [ 482.247809][ T9584] usb 5-1: Using ep0 maxpacket: 32 [ 482.248845][ T9584] usb 5-1: New USB device found: idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 482.250535][ T9584] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 482.250557][ T9584] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 482.250574][ T9584] usb 5-1: config 0 has no interface number 0 [ 482.250609][ T9584] usb 5-1: config 0 interface 184 altsetting 7 endpoint 0x6 has invalid wMaxPacketSize 0 [ 482.250630][ T9584] usb 5-1: config 0 interface 184 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 482.250653][ T9584] usb 5-1: config 0 interface 184 has no altsetting 0 [ 482.253843][ T9584] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.253865][ T9584] usb 5-1: Product: syz [ 482.253879][ T9584] usb 5-1: Manufacturer: syz [ 482.253893][ T9584] usb 5-1: SerialNumber: syz [ 482.274655][ T9584] usb 5-1: config 0 descriptor?? [ 482.279594][T14134] 8021q: adding VLAN 0 to HW filter on device bond4 [ 482.374679][ T9584] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 482.374941][ T9584] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22 [ 482.399233][T14164] bond4: (slave veth3): Enslaving as an active interface with an up link [ 482.513060][T14058] loop0: detected capacity change from 0 to 3904 [ 482.541207][T14058] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 482.541239][T14058] ldm_validate_privheads(): Disk read failed. [ 482.541922][T14058] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 482.541946][T14058] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 482.541959][T14058] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 2. [ 482.541973][T14058] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 3. [ 482.541984][T14058] ldm_validate_tocblocks(): Failed to find a valid TOCBLOCK. [ 482.542063][T14058] loop0: [ 482.542083][T14058] loop0: partition table partially beyond EOD, truncated [ 482.548090][T10831] usb 5-1: USB disconnect, device number 125 [ 482.623726][T14194] loop8: detected capacity change from 0 to 7 [ 482.660033][T14211] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2605'. [ 482.660691][T14194] Dev loop8: unable to read RDB block 7 [ 482.660730][T14194] loop8: unable to read partition table [ 482.660966][T14194] loop8: partition table beyond EOD, truncated [ 482.660995][T14194] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 482.681116][T14211] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2605'. [ 482.713355][ T5689] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 482.742537][ T5689] usb 6-1: device descriptor read/8, error -71 [ 482.978938][ T5689] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 483.001051][ T5689] usb 6-1: device descriptor read/8, error -71 [ 483.032844][T14227] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2606'. [ 483.108077][ T5689] usb usb6-port1: unable to enumerate USB device [ 483.190361][T14237] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2612'. [ 483.210630][T14237] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2612'. [ 483.314998][T14249] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2614'. [ 483.448357][T10831] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 483.548075][T12013] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 483.607760][T10831] usb 5-1: Using ep0 maxpacket: 32 [ 483.608602][T10831] usb 5-1: New USB device found: idVendor=046d, idProduct=c31c, bcdDevice=0.40 [ 483.609656][T10831] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 483.609685][T10831] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 483.609722][T10831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.614985][T10831] usb 5-1: config 0 descriptor?? [ 483.621419][T10831] hub 5-1:0.0: USB hub found [ 483.730263][T12013] usb 2-1: New USB device found: idVendor=05c6, idProduct=1000, bcdDevice=0.00 [ 483.731406][T12013] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.755660][T12013] usb-storage 2-1:1.0: USB Mass Storage device detected [ 483.826830][T10831] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 483.945312][T14243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.952335][T14243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.953695][T14243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.989451][T14243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.992051][T14243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.992502][T14243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 484.025478][T14243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 484.025906][T14243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 484.048497][T14243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 484.052598][T14243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 484.287177][T10831] hid-generic 0003:046D:C31C.001E: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.4-1/input0 [ 484.557288][T14284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 484.581895][T14284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 484.619114][ T50] usb 5-1: USB disconnect, device number 126 [ 484.829640][T14305] vivid-001: ================= START STATUS ================= [ 484.829701][T14305] vivid-001: Radio HW Seek Mode: Bounded [ 484.829741][T14305] vivid-001: Radio Programmable HW Seek: false [ 484.829755][T14305] vivid-001: RDS Rx I/O Mode: Block I/O [ 484.829765][T14305] vivid-001: Generate RBDS Instead of RDS: false [ 484.829776][T14305] vivid-001: RDS Reception: true [ 484.829786][T14305] vivid-001: RDS Program Type: 0 inactive [ 484.829798][T14305] vivid-001: RDS PS Name: inactive [ 484.829816][T14305] vivid-001: RDS Radio Text: inactive [ 484.829837][T14305] vivid-001: RDS Traffic Announcement: false inactive [ 484.829872][T14305] vivid-001: RDS Traffic Program: false inactive [ 484.829894][T14305] vivid-001: RDS Music: false inactive [ 484.829909][T14305] vivid-001: ================== END STATUS ================== [ 484.833937][T14306] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2619'. [ 484.902393][ T5689] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 485.088491][ T5689] usb 6-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 485.089622][ T5689] usb 6-1: config 0 interface 0 altsetting 255 bulk endpoint 0x4 has invalid maxpacket 61 [ 485.089651][ T5689] usb 6-1: config 0 interface 0 has no altsetting 0 [ 485.092457][ T5689] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 485.092481][ T5689] usb 6-1: Product: syz [ 485.092492][ T5689] usb 6-1: Manufacturer: syz [ 485.092499][ T5689] usb 6-1: SerialNumber: syz [ 485.094949][ T5689] usb 6-1: config 0 descriptor?? [ 485.107458][T14292] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 485.172432][ T5689] usb 6-1: selecting invalid altsetting 0 [ 485.356799][T14292] usb 6-1: BOGUS urb xfer, pipe 0 != type 3 [ 485.438098][ T50] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 485.475469][T10831] usb 6-1: USB disconnect, device number 58 [ 485.597969][ T50] usb 1-1: Using ep0 maxpacket: 32 [ 485.598596][ T50] usb 1-1: New USB device found: idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 485.603310][ T50] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 485.603327][ T50] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 485.603337][ T50] usb 1-1: config 0 has no interface number 0 [ 485.603359][ T50] usb 1-1: config 0 interface 184 altsetting 7 endpoint 0x6 has invalid wMaxPacketSize 0 [ 485.603372][ T50] usb 1-1: config 0 interface 184 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 485.603401][ T50] usb 1-1: config 0 interface 184 has no altsetting 0 [ 485.625069][ T50] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.625096][ T50] usb 1-1: Product: syz [ 485.625104][ T50] usb 1-1: Manufacturer: syz [ 485.625112][ T50] usb 1-1: SerialNumber: syz [ 485.641872][ T50] usb 1-1: config 0 descriptor?? [ 485.663082][ T50] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 485.663364][ T50] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -22 [ 485.861607][T10831] usb 1-1: USB disconnect, device number 117 [ 486.312699][T10831] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 486.365770][T12013] scsi host1: usb-storage 2-1:1.0 [ 486.415289][T12013] usb 2-1: USB disconnect, device number 111 [ 486.478459][T10831] usb 1-1: Using ep0 maxpacket: 32 [ 486.478974][T10831] usb 1-1: New USB device found: idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 486.480033][T10831] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 486.480047][T10831] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 486.480057][T10831] usb 1-1: config 0 has no interface number 0 [ 486.480078][T10831] usb 1-1: config 0 interface 184 altsetting 7 endpoint 0x6 has invalid wMaxPacketSize 0 [ 486.480090][T10831] usb 1-1: config 0 interface 184 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 486.480103][T10831] usb 1-1: config 0 interface 184 has no altsetting 0 [ 486.503464][T10831] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.503490][T10831] usb 1-1: Product: syz [ 486.503504][T10831] usb 1-1: Manufacturer: syz [ 486.503517][T10831] usb 1-1: SerialNumber: syz [ 486.550301][T10831] usb 1-1: config 0 descriptor?? [ 486.593558][T10831] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 486.593722][T10831] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -22 [ 486.782946][T14310] loop0: detected capacity change from 0 to 3904 [ 486.851433][T14310] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 486.851481][T14310] ldm_validate_privheads(): Disk read failed. [ 486.855164][T14310] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 486.855209][T14310] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 486.855217][T14310] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 2. [ 486.855225][T14310] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 3. [ 486.855235][T14310] ldm_validate_tocblocks(): Failed to find a valid TOCBLOCK. [ 486.855297][T14310] loop0: [ 486.855317][T14310] loop0: partition table partially beyond EOD, truncated [ 486.861737][T12013] usb 1-1: USB disconnect, device number 118 [ 487.359291][T14411] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 487.388762][T14411] kvm: pic: level sensitive irq not supported [ 487.388966][T14411] kvm: pic: non byte read [ 487.389134][T14411] kvm: pic: level sensitive irq not supported [ 487.389184][T14411] kvm: pic: non byte read [ 487.389358][T14411] kvm: pic: level sensitive irq not supported [ 487.389405][T14411] kvm: pic: non byte read [ 487.391426][T14411] kvm: pic: level sensitive irq not supported [ 487.391475][T14411] kvm: pic: non byte read [ 487.392460][T14411] kvm: pic: level sensitive irq not supported [ 487.392501][T14411] kvm: pic: non byte read [ 487.503392][T14417] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 487.779062][ T5689] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 487.902731][T14444] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2635'. [ 487.937853][ T5689] usb 5-1: Using ep0 maxpacket: 8 [ 487.938882][ T5689] usb 5-1: New USB device found: idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 487.940891][ T5689] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 487.940914][ T5689] usb 5-1: config 179 has no interface number 0 [ 487.940938][ T5689] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 487.940952][ T5689] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 487.940966][ T5689] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 487.940979][ T5689] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 487.940992][ T5689] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 487.941015][ T5689] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.018167][T14427] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 488.506237][T14474] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2651'. [ 488.512267][T12013] usb 5-1: USB disconnect, device number 127 [ 488.523011][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 488.523061][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 488.523367][ C0] ================================================================== [ 488.523461][ C0] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x28a/0x2f0 [ 488.523523][ C0] Read of size 4 at addr ffff88807a90305c by task pr/ttyS0/31 [ 488.523569][ C0] [ 488.523613][ C0] CPU: 0 UID: 0 PID: 31 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT(full) [ 488.523670][ C0] Tainted: [L]=SOFTLOCKUP [ 488.523690][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 488.523702][ C0] Call Trace: [ 488.523710][ C0] [ 488.523718][ C0] dump_stack_lvl+0xe8/0x150 [ 488.523759][ C0] print_address_description+0x55/0x1e0 [ 488.523788][ C0] ? do_raw_spin_lock+0x28a/0x2f0 [ 488.523806][ C0] print_report+0x58/0x70 [ 488.523828][ C0] kasan_report+0x117/0x150 [ 488.523856][ C0] ? do_raw_spin_lock+0x28a/0x2f0 [ 488.523876][ C0] do_raw_spin_lock+0x28a/0x2f0 [ 488.523896][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 488.523918][ C0] _raw_spin_lock_irqsave+0x4c/0x60 [ 488.523947][ C0] __wake_up_common_lock+0x30/0x1f0 [ 488.523967][ C0] __usb_hcd_giveback_urb+0x3b6/0x540 [ 488.524050][ C0] dummy_timer+0xa9a/0x4ce0 [ 488.524119][ C0] ? __lock_acquire+0x747/0x2de0 [ 488.524155][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 488.524176][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 488.524201][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 488.524218][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 488.524240][ C0] __hrtimer_run_queues+0x3bc/0xa10 [ 488.524269][ C0] hrtimer_run_softirq+0x1e3/0x2e0 [ 488.524292][ C0] handle_softirqs+0x265/0x8d0 [ 488.524321][ C0] __irq_exit_rcu+0xc6/0x220 [ 488.524342][ C0] irq_exit_rcu+0x9/0x30 [ 488.524365][ C0] sysvec_call_function_single+0xa3/0xc0 [ 488.524385][ C0] [ 488.524394][ C0] [ 488.524401][ C0] asm_sysvec_call_function_single+0x1a/0x20 [ 488.524421][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 488.524441][ C0] Code: f7 e8 cd ac 9f f5 f7 c3 00 02 00 00 74 05 e8 80 45 cc f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 e4 a0 90 f5 65 48 8b 05 bc e1 ba 08 48 85 c0 74 18 5b 41 5e e9 [ 488.524458][ C0] RSP: 0000:ffffc90000a77ca8 EFLAGS: 00000206 [ 488.524476][ C0] RAX: 0000000000000002 RBX: 0000000000000206 RCX: 8000000000000001 [ 488.524488][ C0] RDX: 0000000000000000 RSI: ffffffff8e6a2302 RDI: 0000000000000001 [ 488.524501][ C0] RBP: ffffc90000a77e18 R08: ffffffff919d6fbf R09: 1ffffffff233adf7 [ 488.524517][ C0] R10: dffffc0000000000 R11: fffffbfff233adf8 R12: 0000000000000002 [ 488.524530][ C0] R13: ffff88801f6e9f40 R14: ffffffff9bfee6c0 R15: dffffc0000000000 [ 488.524555][ C0] nbcon_kthread_func+0x724/0x8d0 [ 488.524580][ C0] ? nbcon_kthread_func+0x163/0x8d0 [ 488.524603][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 488.524626][ C0] ? __kthread_parkme+0x71/0x1f0 [ 488.524643][ C0] ? __kthread_parkme+0x199/0x1f0 [ 488.524663][ C0] kthread+0x38b/0x480 [ 488.524685][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 488.524705][ C0] ? __pfx_kthread+0x10/0x10 [ 488.524727][ C0] ret_from_fork+0x514/0xb70 [ 488.524777][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 488.524796][ C0] ? __switch_to+0xc78/0x1410 [ 488.524825][ C0] ? __pfx_kthread+0x10/0x10 [ 488.524847][ C0] ret_from_fork_asm+0x1a/0x30 [ 488.524872][ C0] [ 488.524878][ C0] [ 488.524882][ C0] Allocated by task 5689: [ 488.524936][ C0] kasan_save_track+0x3e/0x80 [ 488.524958][ C0] __kasan_kmalloc+0x93/0xb0 [ 488.524977][ C0] __kmalloc_cache_noprof+0x31c/0x600 [ 488.524996][ C0] xpad_probe+0x43f/0x2020 [ 488.525090][ C0] usb_probe_interface+0x751/0xe00 [ 488.525110][ C0] really_probe+0x254/0xae0 [ 488.525185][ C0] __driver_probe_device+0x1e8/0x360 [ 488.525204][ C0] driver_probe_device+0x4f/0x240 [ 488.525222][ C0] __device_attach_driver+0x270/0x410 [ 488.525242][ C0] bus_for_each_drv+0x258/0x2f0 [ 488.525289][ C0] __device_attach+0x2bd/0x430 [ 488.525305][ C0] device_initial_probe+0x9c/0x100 [ 488.525322][ C0] __bus_probe_device+0x126/0x220 [ 488.525344][ C0] device_add+0x7d7/0xb80 [ 488.525360][ C0] usb_set_configuration+0x1bb5/0x2260 [ 488.525378][ C0] usb_generic_driver_probe+0x8d/0x150 [ 488.525461][ C0] usb_probe_device+0x1c3/0x3b0 [ 488.525479][ C0] really_probe+0x254/0xae0 [ 488.525498][ C0] __driver_probe_device+0x1e8/0x360 [ 488.525516][ C0] driver_probe_device+0x4f/0x240 [ 488.525535][ C0] __device_attach_driver+0x270/0x410 [ 488.525554][ C0] bus_for_each_drv+0x258/0x2f0 [ 488.525576][ C0] __device_attach+0x2bd/0x430 [ 488.525593][ C0] device_initial_probe+0x9c/0x100 [ 488.525612][ C0] __bus_probe_device+0x126/0x220 [ 488.525635][ C0] device_add+0x7d7/0xb80 [ 488.525650][ C0] usb_new_device+0x9aa/0x1690 [ 488.525672][ C0] hub_event+0x28e8/0x4d30 [ 488.525688][ C0] process_scheduled_works+0xc3d/0x1630 [ 488.525712][ C0] worker_thread+0xa47/0xfb0 [ 488.525738][ C0] kthread+0x38b/0x480 [ 488.525764][ C0] ret_from_fork+0x514/0xb70 [ 488.525783][ C0] ret_from_fork_asm+0x1a/0x30 [ 488.525800][ C0] [ 488.525805][ C0] Freed by task 12013: [ 488.525816][ C0] kasan_save_track+0x3e/0x80 [ 488.525833][ C0] kasan_save_free_info+0x40/0x50 [ 488.525848][ C0] __kasan_slab_free+0x5c/0x80 [ 488.525866][ C0] kfree+0x1c5/0x650 [ 488.525880][ C0] xpad_disconnect+0x323/0x440 [ 488.525898][ C0] usb_unbind_interface+0x295/0x9c0 [ 488.525913][ C0] device_release_driver_internal+0x48d/0x7d0 [ 488.525931][ C0] bus_remove_device+0x444/0x560 [ 488.525949][ C0] device_del+0x524/0x8f0 [ 488.525963][ C0] usb_disable_device+0x3d4/0x8d0 [ 488.525985][ C0] usb_disconnect+0x346/0x9a0 [ 488.526004][ C0] hub_event+0x1bbb/0x4d30 [ 488.526018][ C0] process_scheduled_works+0xc3d/0x1630 [ 488.526038][ C0] worker_thread+0xa47/0xfb0 [ 488.526061][ C0] kthread+0x38b/0x480 [ 488.526077][ C0] ret_from_fork+0x514/0xb70 [ 488.526092][ C0] ret_from_fork_asm+0x1a/0x30 [ 488.526109][ C0] [ 488.526115][ C0] The buggy address belongs to the object at ffff88807a903000 [ 488.526115][ C0] which belongs to the cache kmalloc-1k of size 1024 [ 488.526170][ C0] The buggy address is located 92 bytes inside of [ 488.526170][ C0] freed 1024-byte region [ffff88807a903000, ffff88807a903400) [ 488.526192][ C0] [ 488.526198][ C0] The buggy address belongs to the physical page: [ 488.526247][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807a903800 pfn:0x7a900 [ 488.526265][ C0] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 488.526280][ C0] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 488.526297][ C0] page_type: f5(slab) [ 488.526315][ C0] raw: 00fff00000000240 ffff88813ff22dc0 ffffea0000b48010 ffffea0001fb9e10 [ 488.526331][ C0] raw: ffff88807a903800 000000000010000b 00000000f5000000 0000000000000000 [ 488.526347][ C0] head: 00fff00000000240 ffff88813ff22dc0 ffffea0000b48010 ffffea0001fb9e10 [ 488.526361][ C0] head: ffff88807a903800 000000000010000b 00000000f5000000 0000000000000000 [ 488.526376][ C0] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 488.526392][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 488.526402][ C0] page dumped because: kasan: bad access detected [ 488.526416][ C0] page_owner tracks the page as allocated [ 488.526427][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 10926, tgid 10926 (kworker/u8:23), ts 341408541500 [ 488.526456][ C0] post_alloc_hook+0x1f9/0x250 [ 488.526476][ C0] get_page_from_freelist+0x220f/0x2280 [ 488.526499][ C0] __alloc_frozen_pages_noprof+0x1fe/0x410 [ 488.526520][ C0] allocate_slab+0x7d/0x5e0 [ 488.526545][ C0] refill_objects+0x2d5/0x350 [ 488.526559][ C0] __pcs_replace_empty_main+0x2c8/0x6c0 [ 488.526581][ C0] __kmalloc_node_track_caller_noprof+0x543/0x720 [ 488.526600][ C0] pskb_expand_head+0x24b/0x15d0 [ 488.526620][ C0] batadv_skb_head_push+0x16e/0x200 [ 488.526714][ C0] batadv_send_skb_packet+0xce/0x650 [ 488.526770][ C0] batadv_iv_send_outstanding_bat_ogm_packet+0x590/0x740 [ 488.526817][ C0] process_scheduled_works+0xc3d/0x1630 [ 488.526842][ C0] worker_thread+0xa47/0xfb0 [ 488.526866][ C0] kthread+0x38b/0x480 [ 488.526884][ C0] ret_from_fork+0x514/0xb70 [ 488.526903][ C0] ret_from_fork_asm+0x1a/0x30 [ 488.526921][ C0] page last free pid 5653 tgid 5653 ts 339053566347 stack trace: [ 488.526936][ C0] __free_frozen_pages+0xc97/0xd90 [ 488.526958][ C0] __slab_free+0x269/0x2c0 [ 488.526977][ C0] qlist_free_all+0x99/0x100 [ 488.526996][ C0] kasan_quarantine_reduce+0x148/0x160 [ 488.527017][ C0] __kasan_slab_alloc+0x22/0x80 [ 488.527038][ C0] kmem_cache_alloc_noprof+0x2b4/0x600 [ 488.527055][ C0] ptlock_alloc+0x20/0x70 [ 488.527070][ C0] pte_alloc_one+0x7a/0x370 [ 488.527108][ C0] __pte_alloc+0x25/0x1a0 [ 488.527126][ C0] copy_pmd_range+0x5395/0x5c00 [ 488.527143][ C0] copy_page_range+0xcc2/0x12b0 [ 488.527162][ C0] dup_mmap+0xf70/0x1e10 [ 488.527179][ C0] copy_mm+0x115/0x470 [ 488.527203][ C0] copy_process+0x1ecc/0x44b0 [ 488.527225][ C0] kernel_clone+0x2d7/0x940 [ 488.527246][ C0] __ia32_compat_sys_ia32_clone+0x1b4/0x230 [ 488.527266][ C0] [ 488.527271][ C0] Memory state around the buggy address: [ 488.527314][ C0] ffff88807a902f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 488.527328][ C0] ffff88807a902f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 488.527340][ C0] >ffff88807a903000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 488.527349][ C0] ^ [ 488.527360][ C0] ffff88807a903080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 488.527373][ C0] ffff88807a903100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 488.527383][ C0] ================================================================== [ 488.527409][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 489.508356][ C0] CPU: 0 UID: 0 PID: 31 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT(full) [ 489.518935][ C0] Tainted: [L]=SOFTLOCKUP [ 489.523252][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 489.533295][ C0] Call Trace: [ 489.536574][ C0] [ 489.539491][ C0] vpanic+0x26f/0x710 [ 489.543471][ C0] panic+0xc5/0xd0 [ 489.547183][ C0] ? __pfx_panic+0x10/0x10 [ 489.551591][ C0] ? do_raw_spin_lock+0x28a/0x2f0 [ 489.556607][ C0] ? do_raw_spin_lock+0x28a/0x2f0 [ 489.561704][ C0] ? do_raw_spin_lock+0x28a/0x2f0 [ 489.566713][ C0] check_panic_on_warn+0x89/0xb0 [ 489.571640][ C0] ? do_raw_spin_lock+0x28a/0x2f0 [ 489.576681][ C0] end_report+0x73/0x170 [ 489.580921][ C0] ? do_raw_spin_lock+0x28a/0x2f0 [ 489.585933][ C0] kasan_report+0x128/0x150 [ 489.590430][ C0] ? do_raw_spin_lock+0x28a/0x2f0 [ 489.595445][ C0] do_raw_spin_lock+0x28a/0x2f0 [ 489.600296][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 489.605678][ C0] _raw_spin_lock_irqsave+0x4c/0x60 [ 489.610878][ C0] __wake_up_common_lock+0x30/0x1f0 [ 489.616073][ C0] __usb_hcd_giveback_urb+0x3b6/0x540 [ 489.621438][ C0] dummy_timer+0xa9a/0x4ce0 [ 489.625938][ C0] ? __lock_acquire+0x747/0x2de0 [ 489.630878][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 489.636242][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 489.641171][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 489.646965][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 489.651892][ C0] __hrtimer_run_queues+0x3bc/0xa10 [ 489.657088][ C0] hrtimer_run_softirq+0x1e3/0x2e0 [ 489.662187][ C0] handle_softirqs+0x265/0x8d0 [ 489.666946][ C0] __irq_exit_rcu+0xc6/0x220 [ 489.671529][ C0] irq_exit_rcu+0x9/0x30 [ 489.675760][ C0] sysvec_call_function_single+0xa3/0xc0 [ 489.681389][ C0] [ 489.684323][ C0] [ 489.687256][ C0] asm_sysvec_call_function_single+0x1a/0x20 [ 489.693226][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 489.699633][ C0] Code: f7 e8 cd ac 9f f5 f7 c3 00 02 00 00 74 05 e8 80 45 cc f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 e4 a0 90 f5 65 48 8b 05 bc e1 ba 08 48 85 c0 74 18 5b 41 5e e9 [ 489.719236][ C0] RSP: 0000:ffffc90000a77ca8 EFLAGS: 00000206 [ 489.725297][ C0] RAX: 0000000000000002 RBX: 0000000000000206 RCX: 8000000000000001 [ 489.733257][ C0] RDX: 0000000000000000 RSI: ffffffff8e6a2302 RDI: 0000000000000001 [ 489.741216][ C0] RBP: ffffc90000a77e18 R08: ffffffff919d6fbf R09: 1ffffffff233adf7 [ 489.749173][ C0] R10: dffffc0000000000 R11: fffffbfff233adf8 R12: 0000000000000002 [ 489.757131][ C0] R13: ffff88801f6e9f40 R14: ffffffff9bfee6c0 R15: dffffc0000000000 [ 489.765102][ C0] nbcon_kthread_func+0x724/0x8d0 [ 489.770128][ C0] ? nbcon_kthread_func+0x163/0x8d0 [ 489.775320][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 489.780875][ C0] ? __kthread_parkme+0x71/0x1f0 [ 489.785808][ C0] ? __kthread_parkme+0x199/0x1f0 [ 489.790824][ C0] kthread+0x38b/0x480 [ 489.794882][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 489.800422][ C0] ? __pfx_kthread+0x10/0x10 [ 489.805009][ C0] ret_from_fork+0x514/0xb70 [ 489.809677][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 489.814781][ C0] ? __switch_to+0xc78/0x1410 [ 489.819460][ C0] ? __pfx_kthread+0x10/0x10 [ 489.824040][ C0] ret_from_fork_asm+0x1a/0x30 [ 489.828809][ C0] [ 489.832130][ C0] Kernel Offset: disabled [ 489.836462][ C0] Rebooting in 86400 seconds..