last executing test programs: 5.922660925s ago: executing program 2 (id=687): r0 = syz_open_dev$loop(0x0, 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000700)="83f5206d6f9f382cc79ab490fdf79ff15dadb1385245c2fae8b694278994fa90b8ac696a9df1ca31a61100000000ed8c4c08b2fe4ac049343fc18f9e3ec80e605f3e966917c2e8189c423efc4140b2658221c201d4043840e939d2f944ed43708b637db22497808819d85d0200000000000000f3864d3dd741a289c7fff2", 0x7e) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000001c80)={0x0, 0xea60}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000000000000000400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12014000f273a440cd060a01c3d90102030109021b040000dd00200904000c01950d18000905", @ANYBLOB="87e295"], 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000540)={'syztnl2\x00', &(0x7f00000008c0)={'gre0\x00', 0x0, 0x700, 0x700, 0x3, 0x1, {{0x24, 0x4, 0x0, 0x38, 0x90, 0x67, 0x0, 0x1, 0x29, 0x0, @broadcast, @remote, {[@timestamp_addr={0x44, 0x1c, 0xfa, 0x1, 0x0, [{@local, 0x3}, {@remote, 0x3}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0x41afba72}]}, @ssrr={0x89, 0x13, 0x9d, [@empty, @private=0xa010101, @rand_addr=0x64010101, @remote]}, @end, @timestamp_prespec={0x44, 0x2c, 0xcf, 0x3, 0x2, [{@broadcast, 0x2}, {@dev={0xac, 0x14, 0x14, 0x18}, 0x3}, {@broadcast, 0xe}, {@loopback, 0xa}, {@remote, 0xcb4}]}, @rr={0x7, 0x3, 0xad}, @lsrr={0x83, 0x17, 0x18, [@empty, @empty, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100]}, @timestamp_addr={0x44, 0x4, 0xb, 0x1, 0x8}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000540)={'syztnl2\x00', &(0x7f00000008c0)={'gre0\x00', 0x0, 0x700, 0x700, 0x3, 0x1, {{0x24, 0x4, 0x0, 0x38, 0x90, 0x67, 0x0, 0x1, 0x29, 0x0, @broadcast, @remote, {[@timestamp_addr={0x44, 0x1c, 0xfa, 0x1, 0x0, [{@local, 0x3}, {@remote, 0x3}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0x41afba72}]}, @ssrr={0x89, 0x13, 0x9d, [@empty, @private=0xa010101, @rand_addr=0x64010101, @remote]}, @end, @timestamp_prespec={0x44, 0x2c, 0xcf, 0x3, 0x2, [{@broadcast, 0x2}, {@dev={0xac, 0x14, 0x14, 0x18}, 0x3}, {@broadcast, 0xe}, {@loopback, 0xa}, {@remote, 0xcb4}]}, @rr={0x7, 0x3, 0xad}, @lsrr={0x83, 0x17, 0x18, [@empty, @empty, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100]}, @timestamp_addr={0x44, 0x4, 0xb, 0x1, 0x8}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000600)={'erspan0\x00', &(0x7f0000000580)={'gretap0\x00', r2, 0x700, 0x20, 0xd2, 0x80000000, {{0x6, 0x4, 0x0, 0x2, 0x18, 0x68, 0x0, 0x0, 0x29, 0x0, @multicast1, @rand_addr=0x64010101, {[@noop, @end]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000600)={'erspan0\x00', &(0x7f0000000580)={'gretap0\x00', r2, 0x700, 0x20, 0xd2, 0x80000000, {{0x6, 0x4, 0x0, 0x2, 0x18, 0x68, 0x0, 0x0, 0x29, 0x0, @multicast1, @rand_addr=0x64010101, {[@noop, @end]}}}}}) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @ioapic={0x8082801, 0x6, 0x8, 0x1ff, 0x0, [{0x3, 0x6, 0x9, '\x00', 0xd}, {0x5, 0x9, 0x8, '\x00', 0x6}, {0xfe, 0x5, 0x9, '\x00', 0x5}, {0x81, 0x3, 0x8, '\x00', 0x5}, {0xc, 0x9, 0x7f, '\x00', 0x60}, {0x0, 0x0, 0x2}, {0x1, 0x9, 0x9, '\x00', 0xa}, {0xd, 0x47, 0xb, '\x00', 0x43}, {0x8, 0x5, 0x0, '\x00', 0xff}, {0x6, 0x3, 0x0, '\x00', 0x6}, {0x40, 0x4, 0x2, '\x00', 0xa3}, {0x8, 0x4, 0x19, '\x00', 0xff}, {0x3, 0x86, 0xa, '\x00', 0xf9}, {0x5, 0x4f, 0x2}, {0x68, 0x87, 0x1, '\x00', 0x7}, {0xb, 0x0, 0x23, '\x00', 0x7b}, {0x3, 0xc, 0xd1, '\x00', 0x80}, {0x68, 0x3, 0x2, '\x00', 0x3}, {0x8, 0x9e, 0xc0, '\x00', 0x2}, {0x3e, 0x48, 0xa, '\x00', 0x2}, {0x7, 0x1, 0x2, '\x00', 0x1}, {0x3, 0x7, 0x6, '\x00', 0x4}, {0x94, 0x9, 0x4, '\x00', 0xe6}, {0x3, 0x7f, 0xe0, '\x00', 0x47}]}}) (async) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @ioapic={0x8082801, 0x6, 0x8, 0x1ff, 0x0, [{0x3, 0x6, 0x9, '\x00', 0xd}, {0x5, 0x9, 0x8, '\x00', 0x6}, {0xfe, 0x5, 0x9, '\x00', 0x5}, {0x81, 0x3, 0x8, '\x00', 0x5}, {0xc, 0x9, 0x7f, '\x00', 0x60}, {0x0, 0x0, 0x2}, {0x1, 0x9, 0x9, '\x00', 0xa}, {0xd, 0x47, 0xb, '\x00', 0x43}, {0x8, 0x5, 0x0, '\x00', 0xff}, {0x6, 0x3, 0x0, '\x00', 0x6}, {0x40, 0x4, 0x2, '\x00', 0xa3}, {0x8, 0x4, 0x19, '\x00', 0xff}, {0x3, 0x86, 0xa, '\x00', 0xf9}, {0x5, 0x4f, 0x2}, {0x68, 0x87, 0x1, '\x00', 0x7}, {0xb, 0x0, 0x23, '\x00', 0x7b}, {0x3, 0xc, 0xd1, '\x00', 0x80}, {0x68, 0x3, 0x2, '\x00', 0x3}, {0x8, 0x9e, 0xc0, '\x00', 0x2}, {0x3e, 0x48, 0xa, '\x00', 0x2}, {0x7, 0x1, 0x2, '\x00', 0x1}, {0x3, 0x7, 0x6, '\x00', 0x4}, {0x94, 0x9, 0x4, '\x00', 0xe6}, {0x3, 0x7f, 0xe0, '\x00', 0x47}]}}) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x7, 0x5, 0x4, 0x0, 0x0, 0x4, 0xbb, 0x2, 0xc0, 0x6d, 0x26, 0x61, 0x7, 0x95, 0xd}}) ioctl$KVM_X86_SETUP_MCE(r6, 0x4008ae9c, &(0x7f0000000000)={0x12, 0x5}) (async) ioctl$KVM_X86_SETUP_MCE(r6, 0x4008ae9c, &(0x7f0000000000)={0x12, 0x5}) ioctl$KVM_RUN(r6, 0xae80, 0x0) fsmount(r3, 0x0, 0x82) (async) r7 = fsmount(r3, 0x0, 0x82) fchdir(r7) (async) fchdir(r7) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file7\x00', 0x1c4) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file7\x00', 0x1c4) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file7/file0\x00', 0x100000, 0x0, 0x0, 0x0, 0x0) r8 = open$dir(&(0x7f0000000080)='./file7/file0\x00', 0x40100, 0x100) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', r8, &(0x7f0000000040)='./file0\x00', 0x2) socket$netlink(0x10, 0x3, 0x4) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 5.839241456s ago: executing program 1 (id=688): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000a0)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="00000000000000005c001a80060000000100000050000680"], 0x7c}}, 0x0) 5.766502165s ago: executing program 3 (id=689): syz_emit_ethernet(0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="cf599d3baed500000000000086dd60f20000004c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa00"], 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) 5.681040265s ago: executing program 3 (id=690): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000f40)={0x3, 0x1, @status={[0x2, 0xdc06, 0x7b0e, 0x2, 0x0, 0x9]}, [0x7f000000, 0x4, 0x5, 0x81, 0x6, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb, 0x1, 0x80000000, 0x9, 0xf3, 0x2, 0x401, 0x5, 0xbe6, 0x101, 0x1200000, 0x4, 0x7, 0x3, 0xffff, 0x8, 0x8000000000000000, 0x3, 0x1, 0x2db6, 0x1, 0x0, 0xffffffff00000001, 0xf, 0x9, 0x1000, 0xa28, 0xe9, 0x2, 0xffffffffffffffed, 0x2, 0x0, 0x400, 0x4, 0x1, 0xe7a9, 0x5, 0x7ff, 0x1, 0x7, 0x2, 0xfffffffffffffffe, 0x8, 0x9, 0x5, 0xfffffffffffffff7, 0x591e, 0x8, 0x1000, 0x7fff, 0x3, 0x6, 0x7f, 0x3, 0x10001]}) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x39}}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x23, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000000000)={0x0, 0x1013, 0x2, @stepwise={0x0, 0x3ff, 0x0, 0x0, 0x200}}) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x439, 0x70bd25, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083, 0x49df3}, [@IFLA_LINKINFO={0x35423dacd9816b61, 0x12, 0x0, 0x1, @gtp={{}, {0x0, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x0, 0x1, @udp6}, @IFLA_GTP_LOCAL6={0x0, 0x8, @mcast1}, @IFLA_GTP_CREATE_SOCKETS={0x0, 0x5, 0x1}, @IFLA_GTP_FD1={0x0, 0x2, @udp6=r1}, @IFLA_GTP_FD0={0x0, 0x1, @udp6=r1}, @IFLA_GTP_LOCAL={0x0, 0x7, @rand_addr=0x64010100}, @IFLA_GTP_RESTART_COUNT={0x0, 0x6, 0x45}]}}}, @IFLA_TARGET_NETNSID={0x0, 0x2e, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x400d1}, 0x20004000) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_AIE_ON(r4, 0x7001) ioctl$RTC_ALM_SET(r4, 0x40247007, &(0x7f0000000000)={0x1, 0x2e, 0xf, 0x3, 0x7, 0x10, 0x6, 0xa0, 0x1}) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0xfffffdfb) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x6, &(0x7f0000000000)) fcntl$lock(r5, 0x7, &(0x7f0000001140)={0x1, 0x2, 0x3, 0x200}) fcntl$lock(r5, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x205, 0x5}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12-simd\x00'}, 0x58) r7 = accept$alg(r6, 0x0, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) bind$inet6(r8, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) connect$netlink(r8, &(0x7f00000000c0)=@unspec, 0xc) syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x48, 0x11, 0x0, @local, @local, {[], {0x4e1d, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "dc521c259b538a2bf2a113dc2eeec0a072edf20b6d59027f", "d646c098cfc27eb8549d66e7b219c2c3b85e4508546e551af9e59631718ba089"}}}}}}}, 0x0) r9 = dup(r7) r10 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x14a) ftruncate(r10, 0x200004) sendfile(r9, r10, 0x0, 0x80001d00c0d1) 5.667107419s ago: executing program 1 (id=691): connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000000)=0x80000504, 0x4) socket$can_raw(0x1d, 0x3, 0x1) sendmmsg$inet(r0, 0x0, 0x0, 0x2000c844) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x60) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) socket$netlink(0x10, 0x3, 0x2) connect$inet6(r2, &(0x7f0000000800)={0xa, 0x4e24, 0xc0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xc58e}, 0x1c) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x5) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000001001000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xfffe) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000001540)={&(0x7f00004a0000/0x1000)=nil, 0x1000}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0) mkdir(0x0, 0x0) 5.450416461s ago: executing program 1 (id=692): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @empty, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, '\x00', "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "9b1f80001b00"}, 0x38) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="e4000000000000001a01"], 0x100}, 0x0) 5.423237454s ago: executing program 3 (id=693): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000024a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r2], 0x3c}}, 0x0) 5.322363799s ago: executing program 1 (id=695): getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000480)=@assoc_value, &(0x7f0000000040)=0x8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x13c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, 0x0, 0x8) getsockopt$inet6_opts(r4, 0x29, 0x36, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r2, 0x4008941a, &(0x7f0000000340)=0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f00000000c0)="3b76210fb6150f209e440f20c0663503000000440f22c00fa2660fc7b2d42af30fa7d0440f20c066350d000000440f22c06767f2caab12bad004ec", 0x3b}], 0x1, 0xd, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40800}, 0x44000) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r7, 0x7a8, &(0x7f00000001c0)={{@host, 0x6}, @local, 0xc, 0x1, 0xadd, 0x4, 0x401, 0x1, 0x8}) syz_clone3(&(0x7f0000000280)={0xe051280, 0x0, 0x0, 0x0, {0x2d}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000240)={[0x10583a, 0x5, 0xa, 0x4000000000, 0x6, 0x2, 0x1041, 0x4, 0x9, 0x100000001, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x9, 0x6, 0x6a], 0xeeee8000, 0x300092}) ioctl$KVM_RUN(r5, 0xae80, 0x0) execve(&(0x7f0000000140)='./file2\x00', 0x0, 0x0) 4.986429759s ago: executing program 0 (id=697): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000000040)=0xffffffffffff47a6) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r4, @ANYRES32, @ANYBLOB="04008e00080057"], 0x398}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 4.825928076s ago: executing program 3 (id=698): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000500)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000040)="02042700ea0e0000000000001eafbcf706e105000000000000001104ee1606d4b8bf4a828bda305775c43824cee8440000", 0x31}, {&(0x7f0000000800)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6a51671e4124fcea96a873b10996816e100ed8a93b0a9053db57d60973369f58551c3091cb88d3b", 0x4a}, {&(0x7f0000000880)="088d85d1f427cc11b21caca442b2a4af8e69b0c132387b8de793ab327e16f27134fe420c1f7a15898389a825d4f2f511bf0fecfd95e2206e7eaa54d08feafc4e009b7ad23f7c18a49c875b5b7266fc799ed90a099cedfe0c5700000ecb0000000000000000000000003c4627b2367d6c49fc1dd9a9139362968da8e19f9886862c9e2841033c91633d5f77d6a6e3b589c7", 0x91}, {&(0x7f0000000100)="d83bf6fffffffd03ce3e01df4c000000009e7af9e172000000aa", 0x1a}, {&(0x7f0000000940)="b72abab9439ca41f5cf14d6435575ba774ee5f5c23ff2f5176f5773d08a15668ec280cfe4ea416cf769dbf978a8191bbe006e0da50029176c0f24e3ff4d3e895a2afbf52cef2fe1ca31edd842b126ec4be67e6e3624b9ddf806fc146c645ec1d37fe7e3b025c156d5d520104b53f7fb2af436201cfd5dca170edea5a190e4786bfaac544b60f514d7ef420526c467f14790dcfa5ab915d7dbcdf2765bbcad014c991f8b829c79f53586de79f0b987ad796f9de4a6e53136a07a39ab1f5a2ce30aded70a9b72d1beff7e8b6405fd6331e5635ee71e809be2d58f412dcd7b2e856d692dbfed19045ff13244acce351b6e450395568063569c71ea80a04f83fbe6ad1d0862fb97f816576c4844da65d751ee1fdc522ae1158670de297cdb2117bc0adc1486e016a6bcc922a162fce6a9ecc8c42b0c44c566004eda037864e5f339bbb0998cdaf2b8e49ae003659bc033668f7c8e550197ed95c420461254ba1883dbd9403672d579cee85c37f103ee9a350a768286017158784baeb063c8c684b91b022b0db2238b679092a1f6909f0cd9228500e088f5cc7bac4c0dc56e80fedac93554aec79715ce02e8bf3fcbd70382f619bfe3dcf06890d8542022ee58bdfb075d319c9fc8474cadc8de5c3dd3f682d3f68324d0af7a727064053ad84c94643eef190783c616467628f84620044c084b80e3e57bfcdf293c9c36b4474a52398b35e49e2ad4a4ac090bffc5cd27d3c69b4ae5f841d5b0766ccd36d25eb58d8f01621a05744b79ede39019ab9d7a1946353d8f3b7f833ce1a102a8c97a9e3f32138ffafd305448f2518ccdb7eef594a890eaeaff3f876f742fec22669a97085ed93b18228ecbe9e354e8f69967ca749fd2b1cf026665ca912e3fc0188b294519078b46676052de4fe22798290bd1e232c9791fc01ddb4ae776b5769143df2867042e8a3ddfa8e786bd8a244076956d4ab137939ad381650dd4fefd2b942a98d6f2edfd7019ae473e7608647b86d643e8ff3d7d4e89ed826e4b8c6e8fed224c528d805ade85c5b45261b2692c0f403dec050bd973b0999df214689f4402dd1598a16b0c7671e5e204a00b06376ddee7cb99292a8b835c0b451642b71f2ffa1aeea56255817b2384bfe4f8213ccfc1f762f250592896102e5f6d34cdd726bc0f86af52fd7c4483d32e23e5af770e960c7445b8e67b6086f0cadcd22d0d4bdadc31b5a94dd687379dc6e078210ccc71f8e67eb58d330394425ab17e55d1ca8f868f6bf738af291d2293c3dfa2ccff25061ded22878b3cc6532d19e5a00d1f0f1b9de35305fac2c6cfd5d77a2b02618735b7d392738bd5cd3eabb7039c790a9f193913f16e06605d405d6a0cf0011a2e5f935d8563fef1722692dd266c3d320b9f5eeb2a4b2f72155522f0ed72ff1efa0b6ee78e70d3d45241609e7f87d7bcfe1af71159baa11ad667a0ead3986b2b06500ba2615ee966ea86ca68d02de4802bd9ef18dac5ba53ca98b90df49ef4e3268ceee538973620e5a60513ea330989642626420b67dceebc569478657aedeb62c45b079348796923ad1fba5a99e6b150cf97ba2a570150053309c6dca7fa352fa1678c9b919fbc47ae0a84175a7fc25a00fa5888cb017e8d8225fadb29e34bd3c5bbccfb22a83255fec3967c991d5b3e6719ade82fb7ef85c8a4b9e7ad8ef2a3a7bc78de424572224affb1f9e0c5a969e61ee2ebb4f247bfa09384bdad04438f2efbfae303d47c3afe7e8d3a157b2a6f37572ea3ecc441dfb208ba755f781f144e58d80aea590abcfccbe8678ec6de47511f9d61cc408cbbe90eeab2cffe6d1a48dc3eb4e48e228fd43cafd7ff2c85c3ed52e99fe16887be28fcd2cd4ba4cac414c92c96294fa7d628e4356c748c173f790a7f30071d0bd53817c78d163249c7402b222b8f28668cae7afd17b97dbaf10b75b61409ca6f5b285d1ab09207c5a91c68b0d4b5da6d6b5a495c8debd7f4400e56d9e22d1cc330f782f2b5441a31b9ccf35aa1a151219cdcff5ab8b240af5b5a751eca67773c057412a935e3a7a367b2bcd28463904ee040a586d6f4f969cee56d55b6b4d97d1fe93b67e2f6bd47925054c4702ec8969a1a6211ea8f6783ca0e8ae333922ce19eceb24e2ff714a0208d2489a62f299aa50cdbfe5a826e872ab231bbddf5bd2fca92d4460379e05e13ff34a200fd921dcb67a002873bda8d86536cddaccb54eb72dd4e399fe9195ad5574ad85d9ed2eaae4106234f0a8db05a230ff377b59b54fd0919d1b86b938622ae6098f003db7f4d45d6874f54c33064ce6184dccc99fece2d994e9572d4840b0cbdd704fd70b4f625912d48a512339f883533768f09a4f614583dfb72defe713ee38f61184df279461b7d35becd8e67d01f0ec27e901d88215554d5a69db373a662085733d09ad9153e7d432c94f872ff7cd72995b3a581ea17722ed13a191b366208f75661112b1a7d42c252c907488ca8dd8f819d4618b0053d4bcddb3b5975cb8615ebc472e052552ee74d5253174a2b0cb96e1eaf6349b6c39be975123ee72b0ffe1367df7aba54de26c9135a3422d21067034551be5efc5daf8b8f59bc725e4fd171378fd9f16a785f1b0378823c85eec521e0b2aca70b7b72b719a20eb2fb0addc0b05851c8e181607f49dad7323bc255309097584c2099574db1ed7940fd16796aef19d30acd714dc1f898716df64db87d852eddf2f86e78fd7fd64868b4cb6cc626efcdea49c4a2779a0e777bbe23968e14233a810d9883680894de93023a8deae51ccbf32e6d1e53618ebee95c761221a33bc3263fff0f5ae23e14dba0418cf3f31effcb36956e06c57a17620044260419a208ae1d2296ec9472d44be74a8ed0a33a23181acdef8c7d2695ce9485ed8d17d9f6f30b9b128ee0ba15c42cbf6059bcfef008c09db8855343f79c3ce1c4d79077c8a62237d4e400a5aa88e7424f2f99df6c2a062758a070d6ed071f4968376581e20e52d64e9c4f8a6f73bb33f5b6b62c1deecc85bf789565fde14e4454306ed8f09af08afb360ee4fb40dd5dca0be43ccff75e5c0ef85ea7c521cb4840d61e99e1ce4661e721446d5a571cddffbc3643ec9b58237fd416376906bdca09485c2c80f82b23e8e7bbf22035fdbcacd804ae3771fd616901184ced46987d533017eef717e9b34a5531c3efe2d77c9b6cb0617382d69951545378a4118e71c64a1f16d096a8f933580922083d0538d90ae1715c63f682e8241b42e1646b0c52e34aa9c91efe2b6b787ce0747d4ff0dd07d6ebc9ce27e0ef35705eb7b78763a9829b464523ff3ed9078aff6ee29e6e7a59a5243825e8bb9235f8e49a9dfb5932536666c3dc75b29e515dbca4c84268cf23cd7b6da6814328a3cb26d7b1d6c28e20b36f9a2c9e2fcf663c314f72f37d2b8f405cfc686a6b35400435be0eab01709c2c4b3005491cbb0b560e33547b77ba9f25f01b194e20534199a3786ddfaf0a75aafb65cd4df4da7b5f98fe72a8bc7d045339fd41508cecca791c717a10d4fed8aa69eec80955bd899a6f8aaf3411be40568149e631ccbe17c68f85e87b58da81ba78def8b1a48c49b2dc7613f7d6ea8b158bed077666d37d1caba9a22b7cb2772e780f70872113e5bcaebaf9f9499f651dc894be3bba1e99d58b33d60c0eda397df91d7cf9fb072f247fa9a9f59c4f59c4284a3832ff0a1f9dc8f6346cb5c08a9dcb2851c7f169af688fc13f00cf9519ade547671698caaa3f4d4921fee83753b9ab0875707836343eddb5b87bec86aae023c9571b8e389ff3f4c692b6fb19686105249ce033116777d919ceb4559a67ee6b6ad9d4b53d2be24315429de3bf201107fe7dff9cbc92dbf9173391d555b0a1b8ea3252fd7d7fd15d8a3cc70cecdbdd43c4edcc4bb2fbbf646d5ec7dad0d3156a513d14184e0c316f8155e774f7dcea485f904828edf28510d692b66b1500c5a704371c2188a2812bd323d79674082b5f5e9f7f4ce1a75ed854b71555e9fcd1f0322c22a9e543674c79a74404e08e61860f505dc56e1b52977b9a9af18be4064b5f6aa7c891382bbbe65e70a4cee33176570341a525fb6b25c0b20bfa3f2ee4a01584f259f43c3b63a2dfc376f435827211379ab3ca8912cbe01e4f837920666fbda682f6954d1c156f21e12547b885f485c38f62e765013144be8ca92b1d4878f0ceb247e08c64268ad8970b57bb6d077c9b8ebe7fb1183087c9a3baee06100609204be588621253b9b120c08db9f28c2d38c9bc3f59018bb7216d73186048770d1e556faa49df23a40a64b40cdda2041dccf5619db09b7a7795fd7eb631c0e0bffc3b64422bf6acd84b7fae8bd05b057260a4d7c4851829c7bbf0b6f27c5db0ff10f42df3528f79dc9bbd591965259cd0389deb124b1fadc5dfd3ade9742d29261379ea3d98929512371dec991f0636fbda5dac355a04e363beeb4751781d9cef3a0b6ac65008900223ad43ed75cac8b0a868253fffa10bf6c2de99c687fd056e075cf0632b6d8ed2263ca08ad95b6f335a3b6d8ab7801422ac8597441ac1bbe289b50af31eb221d19a2d3177d4ad1056d616295e89471e65d811b8fa4fe2c0c12793f43ef7e75c7f657f6c26ca9cbae63ce99301069ab257ae77c38778d35afd326d569c626a68f3904b2c376dfaa05568892f346f86fb05e71fb751e09cd22525cb63512a7d2e4670bd31109b87818278e66dc73fa9667e35c5bc6588cd36d2b62592a4103803d93c194f8edd5d20c6597231321b909bbb3c1d13408e5cf27728883e333b391222e6b6665454892dfedd17a1066f1145163e1a31ba9a3e3cee925e55d794b8d462a0a092a639ccd4a24514083cb68224c87c18f0bb39ff721cc598e686b5fef169bc30f9ec6df397905f8340f6ae7ad826aac774cc46bfb9dfe8192e9ef10e8355d7c2810269eb73c7ecb8d3ffa33437142b8e596cdb778cd3cdda5bbbd09a8ea919929adbc63ff1004490c45a9ea59def65fabc884c39beac1b74a218f59c5e31ba85dcc4b8bd81d7a66d8aaf0edb64b505f760442e16fb7f07a069aba88601c3ace27762cef8196da3d44b14796b04e7fa3ba00000000000000", 0xe17}, {&(0x7f0000000280)="c2f6", 0x2}], 0x6}, 0x40080) 4.558251852s ago: executing program 3 (id=702): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newlink={0x28, 0x10, 0x1, 0x70bd2b, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) connect$netlink(r0, &(0x7f0000000080)=@unspec, 0xc) syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040), 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_ublk_setup_io_uring(0x3d3f, &(0x7f00000002c0)={0x0, 0x85f4, 0x1000, 0x3, 0x37f}, &(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000480)) io_uring_setup(0x2462, &(0x7f00000004c0)={0x0, 0x35f, 0x0, 0x2, 0x19e, 0x0, r1}) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='map_files\x00') readlinkat(r3, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000540)=""/76, 0x4c) ioctl$KVM_CLEAR_DIRTY_LOG(r2, 0xc018aec0, &(0x7f00000009c0)={0x0, 0xc0, 0x340, &(0x7f00000005c0)=[0x4, 0x8, 0xffffffffffffff7a, 0xcf4, 0x1, 0x7, 0x2, 0x800, 0x0, 0x4, 0xffffffffffffff80, 0x100, 0xc, 0x2, 0xffffffff, 0x9, 0x8, 0x7, 0x7, 0x80000001, 0x7, 0x0, 0x9, 0x5, 0x3, 0x40, 0x6, 0x0, 0xa8, 0x4, 0x1c, 0x3ead, 0x6, 0x3, 0x3, 0xb91, 0x10001, 0x800, 0x33a8bc22, 0x8, 0x4, 0xb5b3, 0x2, 0x0, 0x2, 0xffffffff00000001, 0x3, 0x101, 0x1, 0x0, 0x8, 0x1, 0x2, 0x6, 0xfffffffffffffff9, 0x6, 0x2, 0x7, 0x2, 0xfffffffffffff000, 0x8, 0x8001, 0x5, 0x800, 0x3, 0x1, 0x4, 0x1, 0x4, 0x9, 0x4, 0x0, 0x4, 0x5, 0xfffffffffffffff7, 0xffffffff, 0x6, 0x5, 0x800, 0x8000, 0x2fd, 0x7a, 0x9, 0xe9, 0x8, 0x4, 0x9, 0xd, 0x4, 0xaff2, 0xffffffffffffff01, 0x4, 0x5, 0x7fffffffffffffff, 0x3, 0x6, 0xf, 0x8000000000000001, 0x100000000, 0x8, 0x6, 0x3, 0xf, 0x7fffffffffffffff, 0x0, 0x4, 0xe4f, 0x9a38000000, 0xfffffffffffffffc, 0xa, 0x2, 0x5, 0x6, 0x100000001, 0x1, 0x7, 0x5, 0x6, 0x91, 0x8000000000000001, 0x6e29, 0x4, 0x3, 0x9, 0xd, 0x6, 0x0, 0x81]}) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x8, 0x402) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000040)={0x3, 0x18, 0x11, 0x4, 0x0, 0x80000001, 0x0}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) r6 = syz_io_uring_setup(0xefc, &(0x7f0000000340)={0x0, 0xfffffffe, 0x10000, 0x1, 0x53}, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x18, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x1, 0x9, 0x1}) io_uring_enter(r6, 0x1, 0xfffffffd, 0x48, 0x0, 0x0) ioprio_get$pid(0x3, r5) 3.962318072s ago: executing program 0 (id=705): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000002600)={0x0, 0x3, "5a77bd318786aeb202dfcdcdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a544304cfb2d22415e11068881e50f68530c2b21a100ef00000000ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171111d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b30855a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000100)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x14) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000480)={r2, 0x9cd2, 0xbc, "8be19bdcf93f6bcb11c0fbcd20ae75b84fc77fb1f1142f4df1f0f30d3a72bb4066a90ba6f9417f39c23da824343d5238af0623e294e0741e2a645dddafd73aaa15f394704bd140bc9996f35ec66892a77f72862968620028829b0f8d8d436e9e4d7f00fb746361f369f2a4b6f0fbfcf007e72d346e059a8050d32bd3e0a44e13c43399698bc166203cf40ed4617fdde4576fe179f904e20818b080897d202ea816154d60ba1c95a1461b1ed8d5e427d9c2e7bf3ccc092abaef7223ee"}, 0xc4) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffe, 0x6, 0x0, @scatter={0x18, 0x3, &(0x7f00000006c0)=[{&(0x7f0000000380)=""/204, 0xcc}, {0x0}]}, &(0x7f0000000240)="008d7acda0b2", 0x0, 0x0, 0x0, 0x600, 0x0}) 3.310347707s ago: executing program 3 (id=707): r0 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) preadv(r0, &(0x7f0000001300)=[{&(0x7f0000000100)=""/200, 0xc8}], 0x1, 0x1000, 0x3f2f07de) socket(0xa, 0x3, 0xff) r1 = syz_usb_connect(0x3, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100012a9d7b082c105161364a0102030109021200011f01000d0904c50900b402ad008bc5ade8349664873add6a380e31e60cc0a9d6b27696"], 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000700)=0x2000008, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r2, 0x0, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) readv(r6, &(0x7f0000001380)=[{&(0x7f0000000100)=""/28, 0x1c}], 0x1) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, &(0x7f00000000c0)={0x20, 0xd, 0x22, {0x22, 0x7, "26497466a8e23130e14363ec4607dc9e7552f4b4ac296792748bf75fc4841344"}}, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, &(0x7f0000000280)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0xbb, 0xff, 0x5d6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x7, 0xa, 0x1}]}}, &(0x7f00000002c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x8, 0x10, 0x0, "5e018db4", "824ec88e"}}, &(0x7f0000000300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf9, 0x0, 0x81, 0xc0, 0x7f, 0x1, 0x1}}}, &(0x7f0000000900)={0x84, &(0x7f0000000380)={0x20, 0x14, 0x95, "44cc7f03739d59b4dfabe29348b2451b722dc9a5a954c8af92bec1aab121a6e40f226a8e7bd48c7c49ed7cc99f428bbf0e74a274211a1761861462226ac6c5d136a6fc035bd49680b4a5b63c19bea218eed38163a0f06f95f6a78260593f0ab0a54015d77c2e375ed84bdd04ca84f7e6bcc6563c6a258862ff1fea36a40d231b49e04cf301c913a8e53bbf2647e69324f06b7b49b1"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0xa}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x160, 0x2}}, &(0x7f0000000600)={0x40, 0x7, 0x2, 0xd5f}, &(0x7f0000000640)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000680)={0x40, 0xb, 0x2, '(\n'}, &(0x7f00000006c0)={0x40, 0xf, 0x2, 0x200}, &(0x7f0000000740)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, &(0x7f0000000780)={0x40, 0x17, 0x6, @remote}, &(0x7f00000007c0)={0x40, 0x19, 0x2, "b768"}, &(0x7f0000000800)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000840)={0x40, 0x1c, 0x1}, &(0x7f0000000880)={0x40, 0x1e, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x21, 0x1, 0x7}}) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x104000}, 0x1) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r7, 0xc0a85320, &(0x7f0000000140)={{0x80, 0x3}, 'port0\x00', 0x0, 0x100040, 0x1b35, 0x2, 0x2, 0x2, 0x0, 0x0, 0x3, 0x1}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r7, 0x40a85321, &(0x7f00000004c0)={{0x7d, 0xa}, 'port1\x00', 0x8, 0x20030, 0x8002, 0x0, 0x1ff, 0xffff7ffe, 0xfffffffe, 0x0, 0x2, 0x20}) recvfrom(r4, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r8, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r9, 0x560e, &(0x7f0000000000)) 3.206354144s ago: executing program 1 (id=709): syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r0 = syz_open_dev$video(&(0x7f0000000300), 0x9, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) r1 = syz_open_dev$video(&(0x7f0000009540), 0x1, 0x40000) ioctl$VIDIOC_CROPCAP(r1, 0xc02c563a, &(0x7f0000009580)={0xc, {0x401, 0x130f15cb, 0x5}, {0x3, 0x96, 0x4, 0x7}, {0x25b4, 0x10000}}) socket$unix(0x1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/11], 0x18}, 0xfc40) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x8d40, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r5, 0x0, r7, 0x0, 0x38f9, 0x0) fcntl$setstatus(r6, 0x4, 0x42c00) syz_emit_ethernet(0x86, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6012004687440800503a00fe8000000000000000000000000000bbfe8000000000000000000000000000aa080290780000000008e9239574d38e0500000000000000000000ffff7f000001fc02000000000000000000000000000000000000000000000589000000000000"], 0x0) r8 = socket(0x10, 0x803, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r10}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) fcntl$setstatus(r6, 0x4, 0x2400) write(r4, &(0x7f0000000040), 0xffffff4a) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) connect$can_j1939(r3, &(0x7f0000000080)={0x1d, r11, 0x0, {0x0, 0x0, 0x2}, 0xfe}, 0x18) sendmsg$can_j1939(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) 2.314261364s ago: executing program 0 (id=710): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000f80)=ANY=[@ANYBLOB="0c0100001000010426bd70000000000000000004", @ANYRES32=0x0, @ANYBLOB="0300000000000000dc00128009000100766c616e00000000cc000280040004800600050088a800000c0002000b0000000700000006000500810000000600010003000000640003800c00010004000000030000000c000100208d0000090000000c000100010000000c0000000c000100050000002ceeffff0c00010001ffffff060000000c00010001000000040000000c00010001000000000040000c000100f9ffffff5d0a00000600010003000000340004800c00010007000000000000000c00010006000000090000000c00010003000000ff7fffff0c000100000001000900040008000500", @ANYRES32=r1], 0x10c}}, 0x0) 2.141084589s ago: executing program 2 (id=712): add_key$user(&(0x7f0000002100), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f0000004ac0)=[{{0x0, 0x0, 0x0}, 0x3fffff}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000a00)=""/109, 0x6d}, {&(0x7f0000002700)=""/4096, 0x1000}, {&(0x7f0000003700)=""/21, 0x15}, {&(0x7f0000003740)=""/195, 0xc3}, {&(0x7f00000002c0)=""/113, 0x71}], 0x5}, 0x9}, {{0x0, 0x0, 0x0}, 0xf55f}], 0x4, 0x0, 0x0) add_key$user(&(0x7f0000002300), 0x0, 0x0, 0x0, 0xffffffffffffffff) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x189002, 0x40) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r1, 0x3ba0, &(0x7f00000000c0)={0x48, 0xb, r2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2000000}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000900)=r5, 0x4) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x14, 0x41, 0x107, 0x70bd2c, 0x25dfdbfa, {0x3, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4c084}, 0xc000) syz_io_uring_setup(0xec4, &(0x7f00000003c0)={0x0, 0xffffff7c, 0x2, 0x3, 0x34b}, &(0x7f0000000500), &(0x7f0000000600), &(0x7f0000000000)) 2.118022822s ago: executing program 0 (id=713): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000a0)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="00000000000000005c001a80060000000100000050000680"], 0x7c}}, 0x0) 1.949101613s ago: executing program 0 (id=715): write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0x19, 0x1, {0x148, {0x2, 0x0, 0x100}, 0x8b, 0x0, 0x0, 0xff, 0x5, 0x4000084, 0xbf43, 0x20000008000007, 0x8, 0x400000000008, 0x200002, 0x2, 0xfffffffffffffffe, 0x4, 0x8, 0x8000000000408, 0x0, 0xfffffffffffffff7}}, 0xa0) syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x2) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000700)={0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="20100e0000000623a57e291ef31252d71968c59df33c5b4107648af746a32ecb354a84959b023f876b35f2dd89577a69b8def79a5639ec8d04f5b29ce06573ba4ba31eadc25a860ce4ca2f9f5b17646d22ee8775d1ac7fc16b74d857770015fe31554d90718726f079f8b5be5b7388f93772e607e9f2d93d8fb265abadb6646a0cf91c57b434f3ebca67a241b4dd78494e3ecd1421215c02268a0fa8a6eb996ef3f980abc0fc227b217d65c31cdbd1c14e4a7862acbfee58aadde95aaf34e62e2457fa3c53e626e4d8510cf7ee4e27bf09daffe605fa475189a618e086c4d2b544210554716c839507efbd"], 0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x50) r5 = socket(0x10, 0x3, 0x0) readv(r2, &(0x7f0000000300), 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r2) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, 0x0, 0x4008004) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000040)={0xf0f01e, 0x2}) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r8], 0x50}}, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r9}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 1.762054864s ago: executing program 2 (id=716): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4064}, 0x4800) 1.736912674s ago: executing program 2 (id=717): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0xeb76190000000000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) 1.634709035s ago: executing program 2 (id=718): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020f0000100000000000000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000000002000000000000000000000000000000000000000000000fc020000000000000000000000000000020006000000000002"], 0x80}}, 0x0) 1.492694441s ago: executing program 4 (id=719): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1bc, 0x19, 0x1, 0xfffffffd, 0x25dfdbff, {{@in6=@mcast1, @in=@remote, 0x4e20, 0x0, 0xf7ff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xfffffffffffffff8, 0x0, 0xffffffffffffffff, 0x1000, 0x0, 0x0, 0x0, 0x200000000000000}, {0x3, 0x6, 0x80}, 0xfffffffc, 0x0, 0x0, 0x0, 0x3}, [@tmpl={0x104, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x4}, 0x0, 0x3c}, 0x0, @in6=@mcast2, 0x3502, 0x0, 0x2, 0x0, 0x0, 0xbd0}, {{@in6=@remote, 0x0, 0x3c}, 0xa, @in=@broadcast, 0xfffffffd, 0x1, 0x0, 0x0, 0x800, 0x800, 0xffffffff}, {{@in6=@loopback, 0x0, 0x32}, 0xa, @in6=@empty, 0x3503, 0x1, 0x0, 0x4, 0x8, 0x0, 0xfffffffd}, {{@in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x2b}, 0xa, @in6=@local, 0x0, 0x4, 0x2, 0x0, 0x10000}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x20002884}, 0x800) 1.394019786s ago: executing program 2 (id=720): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @main=@item_012={0x2, 0x0, 0x9, '{|'}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @local=@item_4={0x3, 0x2, 0x9, "01f62166"}, @main=@item_4={0x3, 0x0, 0x8, "140300"}, @main=@item_4={0x3, 0x0, 0x9, "cdd2f361"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000004e40)={0xfb, 0x11, 0xff02, 0x0, "4d512c91002a4950676142687108dcd3f82acf5a895bd90fca2bb40bb4fbf29c"}) r2 = syz_usb_connect$uac1(0x5, 0x104, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x194f, 0x10c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf2, 0x3, 0x1, 0x2f, 0x50, 0x4c, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x36}, [@output_terminal={0x9, 0x24, 0x3, 0x5, 0x2, 0x2, 0x6, 0x2}, @processing_unit={0x8, 0x24, 0x7, 0x3, 0x6, 0x1, 'Z'}, @processing_unit={0x9, 0x24, 0x7, 0x3, 0x1, 0xc1, "4c19"}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x402, 0x5, 0x1, 0x7}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x0, 0x4, 0x5, 0xbb}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x5, 0x6, 0x0, "ac25af4e688b"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xd, 0x3, 0x10, 0x1, 'an', "fe"}, @as_header={0x7, 0x24, 0x1, 0xe, 0x32, 0x2dbd6cf2f7386579}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x3, 0x4, 0x2, 0xf, "d2e753"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x1, 0x81, 0x3, {0x7, 0x25, 0x1, 0x4, 0xd, 0xfffa}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0xff, 0x1, 0x7a, 0x3, "75d5ad5f2bb35b"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x1, 0x9, 0xff, 0xff}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x7, 0x1, 0xf, 0x9, "fb93fd"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x0, 0x3, 0x5, 0x6, "a90f", "f6"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xff, 0x4, 0x2, 0x1, "02", "eb1e"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x8, 0x2, 0x4, {0x7, 0x25, 0x1, 0x0, 0x5, 0x4}}}}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x201, 0x8, 0xff, 0xf7, 0xff, 0x2}, 0x5c, &(0x7f0000000240)={0x5, 0xf, 0x5c, 0x6, [@ssp_cap={0x1c, 0x10, 0xa, 0x2, 0x4, 0xe, 0xff0f, 0x6, [0x3f0f, 0xffc0c0, 0xfff0, 0x30]}, @ssp_cap={0x10, 0x10, 0xa, 0xfa, 0x1, 0x0, 0xf, 0x10, [0xff3f0f]}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "def6d4a47b436b0be245eba3a052540d"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x4, 0x7, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x2, 0xc, 0x80}]}, 0x6, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x81a}}, {0x6c, &(0x7f0000000300)=@string={0x6c, 0x3, "3d9467cf3341ac1bc55e98494a44227763839d08642ee2f873f87c602608f10f5407fed002c12abde8908d54210ecfbc9367eaf55704c4e6b935831d847044340d77ac73dfa0d139550f197e39d0c0bd69e5c6726638c4dca535b883094d57e8305b64e85118180bad4a"}}, {0x64, &(0x7f0000000380)=@string={0x64, 0x3, "babeb5d3ef15a703d32b6b37118d98cb2c7f9f4dfaca7de2cf6b26b04669245fbba877640dcdb13bb3b318787926b29a08b78b383f6c5cb9bc3f8adbdba269f84aa053071e1bd7dc454c29caf4e50bccc4e310c740d97d88600a101a77903b0aa642"}}, {0xde, &(0x7f0000000400)=@string={0xde, 0x3, "75ffabc355970a9cf09099dcf3958c42a3b7ffa42ba6e7eabb220f346f5dbd4d0c4b56e1c34142cd72982f6bda82138e819f7d951874450e134ad0ba77d5a2e96bbbebe92c9680510ac825794e014f8440b243e59a45ba677eb0ba0c6057365c07115d3da32188b908b3ea7f5bb7e8ce570945204f636ad5b8a11d4496959020b3f71c2e70b319d29a3e3b7855a39ecfa50f4231d945d3049d6d5efc2e087735c5b86d07ee747c5ff9a804975207936b372c4eba1983bd0f6357db598bef32a13c0ab829f370f729b3185ec026b0ddb57109e1e7cd7ea5335fca01b0"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0xf4ff}}, {0xb8, &(0x7f0000000540)=@string={0xb8, 0x3, "e5110c3bbf458a97b4a295eac3cf258e2a911af726b2d2ca60e10a3725f40b79ce2414f06ae377c16a6763a26b5b9f76001eba4153f5655af4354b1e5272b491ad54d670ec7758deb5873a66a51862c405e5b100f145ee6adb600963261ac00124578afab6eb220e855bcafad7adc7b3ce3c4be83ca574d93c85f48bd97770d2f102256147cd3cbc1b440e229b6529911e3cd083e11f0d86e8536fd84212b36d8c808fc53ae55ad9fe65c4626013e18d08fc6317bcb5"}}]}) syz_usb_control_io$uac1(r2, &(0x7f0000000700)={0x14, &(0x7f0000000680)={0x0, 0x10, 0x20, {0x20, 0x23, "2dd879f6ef7656977cc99e6dc96597fe3cfcea6ffc1307ef9da1417fa88c"}}, &(0x7f00000006c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x81d}}}, &(0x7f00000009c0)={0x44, &(0x7f0000000740)={0x40, 0x0, 0xb8, "2243ed35e6871d8502ae80b6b2320c6ec646cbb17942692ec49f82f67efb5e87ca4a98bdef3a5c9fb72ae623a5511fc52a5eec06911abbbf374874ac135bdbcf38189e551e7417f027d154490a809d99609104da91fd906c50bdcfba8dcb5ffcd15e16abf2412cb8ebf17dc5d455b6aab4de92c3302bdb78b49294a1f8f45b056bd1caa59a035ebe6a2ddb8219990a657f28ab8a7ea216b9dcbd48717c3d9979685059797d286ad4ecaf69b34dfa8f9a76d50e56d82b28b2"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0xf}, &(0x7f0000000880)={0x20, 0x81, 0x3, '+=6'}, &(0x7f00000008c0)={0x20, 0x82, 0x3, "ebb540"}, &(0x7f0000000900)={0x20, 0x83, 0x3, "bd23ab"}, &(0x7f0000000940)={0x20, 0x84, 0x4, "3a89e08b"}, &(0x7f0000000980)={0x20, 0x85, 0x3, "2035d2"}}) 1.268745657s ago: executing program 4 (id=721): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x154}}, 0x8044) 1.268301526s ago: executing program 4 (id=722): syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10) timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x1, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$sg(0x0, 0x0, 0x5) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0x14}, 0x6}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c, &(0x7f0000000880)}}], 0x2, 0x4000844) r3 = syz_open_dev$vim2m(0x0, 0x7, 0x2) set_mempolicy(0x3, &(0x7f0000000040)=0xe3, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, 0x0, 0x4) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000003c0)={0x3, 0x2, 0x2}) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r5, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0xf5ffffff}}], 0x400000000000172, 0x4001c00) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_RTHDR(r7, 0x29, 0x39, &(0x7f00000000c0)=ANY=[], 0x8) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x35, 0x0, "317f83735b4bb1eadc74dde27798c831eec04c24eeec7ff3d3137a508003d2d5c89ab0220cefebd4687636457b9822766c1bfea4e01ff23c6a4caeaf049a572a9774d3b882eb3b4a66c5ec48c29f065d"}, 0xd8) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000020, 0x0, 0x0) 754.692058ms ago: executing program 0 (id=723): r0 = mq_open(&(0x7f00000013c0)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5\x00\x02\x00\x00\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x00\x00\x00\x00\x00\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00\xac8t\xc5\xd7Q?\xb4\xeex@\xe4\xcc\xfe\x98\xf63\xde\xcd\x1841\x93\xe5\xb7D\xd49\"\f<\x8d\xa5m\x883\xcf\xc7\xe5Y\xb6H\xa4\xc4_Q|\v\x06:\xdap48T\xa6\xcb:+\x7f\x9771fK=\xc2)\xa60\x1d>\xd2\xe8\xc0\x03\xa7e\xbeo\x8d\xe3\x854\x11\xc5d\xcb\x82', 0x42, 0x48, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000140), 0x24, 0x21e880) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r3 = open(&(0x7f0000000280)='.\x00', 0x10000, 0x0) fcntl$lock(r3, 0x410, &(0x7f0000000200)={0x1, 0x3, 0x1000000000000001, 0x9b}) futimesat(r2, 0x0, &(0x7f0000000400)={{0x77359400}, {0x77359400}}) syz_emit_ethernet(0x3e, &(0x7f0000000380)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x8, 0x3a, 0x0, @loopback={0xfeffffff00004000}, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x7, 0x2}}}}}}, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @private=0xa010100}, 0x10) read$midi(r1, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_newvlan={0x28, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r6}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0x4, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x3000000}}}]}, 0x28}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x38, r9, 0x30d, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0xffffffffffffff93}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}]}, 0x38}}, 0x0) close(r7) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0x9}, 0x14}}, 0x0) close(r0) syz_emit_ethernet(0x0, 0x0, 0x0) 331.526584ms ago: executing program 4 (id=724): syz_emit_ethernet(0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="cf599d3baed500000000000086dd60f20000004c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa000600"], 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) 218.0932ms ago: executing program 4 (id=725): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000a0)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c000000130001000000", @ANYRES32=r1, @ANYBLOB="00000000000000005c001a80060000000100000050000680"], 0x7c}}, 0x0) 57.21472ms ago: executing program 4 (id=726): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000200)=0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x20e6, 0x0, @empty, 0xfffffffd}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'syzkaller1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, '\x00', 0x2}, 0x40, r3}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', 0x41}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="010530000a002800060000006000000000301140fe800000000000000000000000000001fe80000000000000000000000200000220e620e60012", @ANYRES16], 0x64) 0s ago: executing program 1 (id=727): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x7, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb8f}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000900)=r1, 0x4) ioctl$OCFS2_IOC_REFLINK(r0, 0x40186f04, &(0x7f00000004c0)={&(0x7f0000000080)='[/]#\x00', &(0x7f0000000400)='\x00', 0x9}) socket(0x10, 0x3, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x1, 0xffffffffffffffff, 0xfff}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r3, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f00000001c0)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x103802, 0xf0) readv(r6, &(0x7f0000000040)=[{&(0x7f0000000240)=""/143, 0x8f}], 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xc, &(0x7f0000000700)=ANY=[@ANYRESHEX=r5, @ANYRES8=r6], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4) sendmsg$inet(r9, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) r10 = socket(0x40000000015, 0x5, 0x0) r11 = open(&(0x7f0000000500)='./file0\x00', 0x800, 0x1) write$P9_RMKDIR(r11, &(0x7f0000000540)={0x14, 0x49, 0x2, {0x4}}, 0x14) setsockopt$RDS_CONG_MONITOR(r10, 0x114, 0x6, 0x0, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x24, 0x14, 0xf0b, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xfff1, 0x10}, {0xd, 0xd}}}, 0x1b}, 0x1, 0x0, 0x0, 0x800}, 0x8000) r12 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980)="475a251bdb1e4c438649cdf2494dde32cd76aeabc8ca949257819f25159c532504978ed33d145658cce40a3dd867df925cbedfbd01f157cae933c958c5dfdc1e0132e03f60e3418410fe17f95bdb8090c4adb3636ea342fb8589cf4944e42579da1d2aa919fa78d9e27565fc30d2513293f3cc7d", 0x74, 0xfffffffffffffffb) keyctl$revoke(0x3, r12) add_key$fscrypt_v1(&(0x7f0000000580), &(0x7f00000005c0)={'fscrypt:', @auto=[0x65, 0x63, 0x64, 0x32, 0x63, 0x62, 0x1, 0x32, 0x38, 0x30, 0x36, 0x33, 0xc, 0x61, 0x62, 0x64]}, &(0x7f0000000680)={0x0, "c6f195b9e4d379b5054793c48b01f82255daf8618005bc7915069e25f89ed7533326a772ef7dfffd399edc476983d453a5474206130c9a96e5fcbde1cada6668", 0x20}, 0x48, r12) kernel console output (not intermixed with test programs): 0 [ 82.571043][ T984] usb 4-1: Product: syz [ 82.578478][ T984] usb 4-1: Manufacturer: syz [ 82.583460][ T984] usb 4-1: SerialNumber: syz [ 82.616027][ T984] usb 4-1: config 0 descriptor?? [ 82.648837][ T5674] usb 1-1: Using ep0 maxpacket: 32 [ 82.659855][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.661183][ T984] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 82.681338][ T5674] usb 1-1: config 1 has an invalid interface number: 8 but max is 2 [ 82.693288][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.705697][ T5674] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.731413][ T5674] usb 1-1: config 1 has no interface number 2 [ 82.738328][ T5716] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 82.757991][ T5674] usb 1-1: config 1 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 82.764526][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.774840][ T5674] usb 1-1: New USB device found, idVendor=2a39, idProduct=3fd3, bcdDevice= 0.40 [ 82.781540][ T1148] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.800234][ T5624] Bluetooth: hci4: command tx timeout [ 82.805937][ T5624] Bluetooth: hci0: command tx timeout [ 82.811918][ T5610] Bluetooth: hci1: command tx timeout [ 82.817603][ T4929] Bluetooth: hci2: command tx timeout [ 82.821093][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.837606][ T5674] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.846267][ T5674] usb 1-1: Product: syz [ 82.850901][ T5674] usb 1-1: Manufacturer: syz [ 82.855530][ T5674] usb 1-1: SerialNumber: syz [ 82.869013][ T5610] Bluetooth: hci3: command tx timeout [ 82.903090][ T984] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 82.965727][ T984] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 82.997733][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.020337][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.033313][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.048411][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.101492][ T82] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.126617][ T5674] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 83.149527][ T5711] warning: `syz.3.4' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 83.153197][ T5674] usb 1-1: 0:2 : does not exist [ 83.211982][ T5711] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 83.257373][ T82] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.275524][ T82] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.442460][ T5674] usb 1-1: USB disconnect, device number 2 [ 83.444101][ T5728] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 83.525833][ T5628] udevd[5628]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 83.623675][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 83.636250][ T42] usb 4-1: USB disconnect, device number 2 [ 83.648695][ T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 83.701862][ T42] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 83.774516][ T42] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 83.822062][ T42] quatech2 4-1:0.51: device disconnected [ 83.841025][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 83.865838][ T24] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 83.899336][ T24] usb 5-1: config 0 has no interface number 0 [ 83.920072][ T24] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 83.937682][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.959151][ T24] usb 5-1: Product: syz [ 83.971795][ T24] usb 5-1: Manufacturer: syz [ 83.994956][ T24] usb 5-1: SerialNumber: syz [ 84.043517][ T24] usb 5-1: config 0 descriptor?? [ 84.081070][ T24] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 84.092669][ T24] usb 5-1: selecting invalid altsetting 1 [ 84.101146][ T24] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 84.116254][ T24] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 84.127977][ T24] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 84.138335][ T24] usb 5-1: media controller created [ 84.213789][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 84.308416][ T42] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 84.345562][ T5749] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11'. [ 84.467727][ T42] usb 1-1: device descriptor read/64, error -71 [ 84.733187][ T42] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 84.868583][ T5610] Bluetooth: hci4: command tx timeout [ 84.868638][ T5624] Bluetooth: hci1: command tx timeout [ 84.874069][ T5610] Bluetooth: hci0: command tx timeout [ 84.874090][ T5610] Bluetooth: hci2: command tx timeout [ 84.900072][ T42] usb 1-1: device descriptor read/64, error -71 [ 84.948428][ T5624] Bluetooth: hci3: command tx timeout [ 85.060253][ T42] usb usb1-port1: attempt power cycle [ 85.431584][ T42] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 85.444264][ T24] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 85.468211][ T24] zl10353_read_register: readreg error (reg=127, ret==-110) [ 85.484031][ T42] usb 1-1: device descriptor read/8, error -71 [ 85.568775][ T5701] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 85.692634][ T5773] netlink: 32 bytes leftover after parsing attributes in process `syz.4.22'. [ 85.739282][ T5701] usb 4-1: config 2 interface 0 altsetting 178 has an endpoint descriptor with address 0x1F, changing to 0xF [ 85.769459][ T42] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 85.792216][ T5701] usb 4-1: config 2 interface 0 altsetting 178 endpoint 0xF has an invalid bInterval 249, changing to 11 [ 85.816340][ T42] usb 1-1: device descriptor read/8, error -71 [ 85.820311][ T5701] usb 4-1: config 2 interface 0 altsetting 178 endpoint 0xF has invalid maxpacket 59391, setting to 1024 [ 85.847192][ T5701] usb 4-1: config 2 interface 0 has no altsetting 0 [ 85.874784][ T5701] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 85.904749][ T5701] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.920710][ T5775] --map-set only usable from mangle table [ 85.924907][ T5701] usb 4-1: Product: syz [ 85.931401][ T5777] netlink: 28 bytes leftover after parsing attributes in process `syz.2.24'. [ 85.935027][ T5701] usb 4-1: Manufacturer: syz [ 85.942120][ T5777] netlink: 28 bytes leftover after parsing attributes in process `syz.2.24'. [ 85.954271][ T5701] usb 4-1: SerialNumber: syz [ 85.958782][ T5767] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 85.965436][ T42] usb usb1-port1: unable to enumerate USB device [ 86.149484][ T5787] syzkaller0: entered promiscuous mode [ 86.155408][ T5787] syzkaller0: entered allmulticast mode [ 86.168141][ T5786] tipc: Started in network mode [ 86.173606][ T5786] tipc: Node identity ba9451a8de78, cluster identity 4711 [ 86.181802][ T5786] tipc: Enabled bearer , priority 0 [ 86.194080][ T5701] ims_pcu 4-1:2.0: Control endpoint is not INTERRUPT IN [ 86.209688][ T5786] tipc: Resetting bearer [ 86.215637][ T5701] ims_pcu 4-1:2.0: probe with driver ims_pcu failed with error -22 [ 86.230624][ T5701] usb 4-1: USB disconnect, device number 3 [ 86.250767][ T5786] tipc: Disabling bearer [ 86.269093][ T42] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 86.437361][ T42] usb 2-1: Using ep0 maxpacket: 32 [ 86.444851][ T42] usb 2-1: config 0 has an invalid interface number: 119 but max is 0 [ 86.456228][ T42] usb 2-1: config 0 has no interface number 0 [ 86.468976][ T42] usb 2-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 86.480830][ T42] usb 2-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 86.492273][ T42] usb 2-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 86.508432][ T42] usb 2-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 86.521092][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.529294][ T42] usb 2-1: Product: syz [ 86.539210][ T42] usb 2-1: Manufacturer: syz [ 86.545394][ T42] usb 2-1: SerialNumber: syz [ 86.562822][ T42] usb 2-1: config 0 descriptor?? [ 86.584895][ T42] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.119/input/input5 [ 86.665061][ T1215] cfg80211: failed to load regulatory.db [ 86.713443][ T5798] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 86.732427][ T5798] FAULT_INJECTION: forcing a failure. [ 86.732427][ T5798] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 86.779473][ T5798] CPU: 1 UID: 0 PID: 5798 Comm: syz.2.32 Not tainted syzkaller #0 PREEMPT(full) [ 86.779497][ T5798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 86.779513][ T5798] Call Trace: [ 86.779521][ T5798] [ 86.779528][ T5798] dump_stack_lvl+0xe8/0x150 [ 86.779568][ T5798] should_fail_ex+0x40c/0x560 [ 86.779592][ T5798] prepare_alloc_pages+0x230/0x650 [ 86.779619][ T5798] __alloc_frozen_pages_noprof+0x12f/0x380 [ 86.779643][ T5798] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 86.779679][ T5798] __alloc_pages_noprof+0x10/0x100 [ 86.779701][ T5798] alloc_pages_bulk_noprof+0x5f5/0x7b0 [ 86.779725][ T5798] ? __kmalloc_noprof+0x1ad/0x720 [ 86.779743][ T5798] ? copy_splice_read+0x16f/0xaa0 [ 86.779763][ T5798] ? copy_splice_read+0x16f/0xaa0 [ 86.779788][ T5798] copy_splice_read+0x19f/0xaa0 [ 86.779817][ T5798] ? rcu_is_watching+0x15/0xb0 [ 86.779840][ T5798] ? __pfx_copy_splice_read+0x10/0x10 [ 86.779863][ T5798] ? look_up_lock_class+0x57/0x110 [ 86.779886][ T5798] ? register_lock_class+0x31/0x2e0 [ 86.779908][ T5798] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 86.779927][ T5798] ? alloc_pipe_info+0x35d/0x4c0 [ 86.779942][ T5798] ? __pfx_copy_splice_read+0x10/0x10 [ 86.779960][ T5798] splice_direct_to_actor+0x48b/0xcb0 [ 86.779995][ T5798] ? __pfx_direct_splice_actor+0x10/0x10 [ 86.780016][ T5798] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 86.780044][ T5798] do_splice_direct+0x195/0x290 [ 86.780068][ T5798] ? __pfx_do_splice_direct+0x10/0x10 [ 86.780091][ T5798] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 86.780119][ T5798] ? rw_verify_area+0x203/0x4c0 [ 86.780146][ T5798] do_sendfile+0x52e/0x7c0 [ 86.780173][ T5798] ? __pfx_do_sendfile+0x10/0x10 [ 86.780192][ T5798] ? __fget_files+0x3a2/0x420 [ 86.780221][ T5798] __se_sys_sendfile64+0x144/0x1a0 [ 86.780242][ T5798] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 86.780267][ T5798] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.780284][ T5798] do_syscall_64+0x174/0x580 [ 86.780304][ T5798] ? trace_irq_disable+0x3b/0x140 [ 86.780323][ T5798] ? clear_bhb_loop+0x70/0xc0 [ 86.780344][ T5798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.780360][ T5798] RIP: 0033:0x7f481d39e0d9 [ 86.780381][ T5798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.780393][ T5798] RSP: 002b:00007f481b5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 86.780416][ T5798] RAX: ffffffffffffffda RBX: 00007f481d625fa0 RCX: 00007f481d39e0d9 [ 86.780435][ T5798] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000008 [ 86.780444][ T5798] RBP: 00007f481b5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 86.780462][ T5798] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000001 [ 86.780471][ T5798] R13: 00007f481d626038 R14: 00007f481d625fa0 R15: 00007f481d74fa48 [ 86.780497][ T5798] [ 87.080582][ T5796] netlink: 'syz.4.31': attribute type 21 has an invalid length. [ 87.318407][ T1215] usb 2-1: USB disconnect, device number 2 [ 87.396077][ T5813] netlink: 104 bytes leftover after parsing attributes in process `syz.2.35'. [ 87.603035][ T5822] netlink: 'syz.2.38': attribute type 1 has an invalid length. [ 87.709340][ T5821] Zero length message leads to an empty skb [ 88.259187][ T42] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 88.427487][ T42] usb 2-1: Using ep0 maxpacket: 32 [ 88.447701][ T42] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 88.476193][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.522981][ T42] usb 2-1: config 0 descriptor?? [ 88.759138][ T42] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 88.791821][ T42] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 88.833116][ T42] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 88.868729][ T42] usb 2-1: media controller created [ 88.913318][ T42] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 89.195880][ T5830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.241637][ T5830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.559595][ T5852] hub 8-0:1.0: USB hub found [ 89.583699][ T5852] hub 8-0:1.0: 1 port detected [ 89.687662][ T42] az6027: usb out operation failed. (-71) [ 89.695474][ T42] stb0899_attach: Driver disabled by Kconfig [ 89.704737][ T42] az6027: no front-end attached [ 89.704737][ T42] [ 89.716058][ T42] az6027: usb out operation failed. (-71) [ 89.728305][ T42] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 89.757378][ T42] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input6 [ 89.788541][ T42] dvb-usb: schedule remote query interval to 400 msecs. [ 89.803848][ T42] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 89.830433][ T42] usb 2-1: USB disconnect, device number 3 [ 89.915548][ T42] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 90.328160][ T5857] xt_nfacct: accounting object `' does not exist [ 90.554435][ T5867] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 90.706155][ T5872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.735258][ T5872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.777641][ T5727] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 90.810305][ T5874] netlink: 8 bytes leftover after parsing attributes in process `syz.1.55'. [ 90.824886][ T5874] netlink: 36 bytes leftover after parsing attributes in process `syz.1.55'. [ 90.979384][ T5727] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 90.979420][ T5727] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.980507][ T5727] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 90.980535][ T5727] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 90.980554][ T5727] usb 4-1: Manufacturer: syz [ 91.089399][ T5727] usb 4-1: config 0 descriptor?? [ 91.269793][ T5727] rc_core: IR keymap rc-hauppauge not found [ 91.304266][ T5727] Registered IR keymap rc-empty [ 91.310855][ T5865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.335901][ T5727] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 91.372132][ T5865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.395139][ T5727] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input7 [ 91.449820][ T5681] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 91.555499][ T42] usb 4-1: USB disconnect, device number 4 [ 91.617841][ T5681] usb 2-1: Using ep0 maxpacket: 8 [ 91.636372][ T5681] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x82 has invalid maxpacket 32 [ 91.662218][ T5681] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x3 has invalid maxpacket 1023 [ 91.691419][ T5681] usb 2-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 91.724776][ T5681] usb 2-1: config 1 interface 0 has no altsetting 0 [ 91.744810][ T5681] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 91.764138][ T5681] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.814373][ T5681] usb 2-1: Product: 惀琞슯穅阐㉝邍᝴澅 ꤕ鴁蝰㜇⯾搻 [ 91.853221][ T5681] usb 2-1: Manufacturer: ⊽蝈㝴蟦Ն⛗륎¼ࠨӐ䴭Ậ区臲芓㗄㟐田䣤먷䩪℣셹Ѕ樁这箼⁌⏈勁ᑦꜮ聮峦⯞蚑Ⓜ됫⦧ᑶ奎톝螌氜 [ 91.915040][ T5900] netlink: 60 bytes leftover after parsing attributes in process `syz.3.61'. [ 91.928207][ T5681] usb 2-1: SerialNumber: П [ 91.942778][ T5901] netlink: 28 bytes leftover after parsing attributes in process `syz.0.60'. [ 91.947972][ T5884] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 91.961274][ T5903] wireguard: wg2: Could not create IPv4 socket [ 91.995595][ T5901] netlink: 28 bytes leftover after parsing attributes in process `syz.0.60'. [ 92.004875][ T5884] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 92.298238][ T5681] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 92.342567][ T5681] usb 2-1: USB disconnect, device number 4 [ 92.507374][ T1215] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 92.668951][ T1215] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 92.690108][ T1215] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 92.703106][ T5681] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 92.730044][ T1215] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 92.757469][ T1215] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 92.789030][ T1215] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 92.822080][ T1215] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 92.844903][ T1215] usb 1-1: Product: syz [ 92.860565][ T1215] usb 1-1: Manufacturer: syz [ 92.889789][ T5681] usb 2-1: unable to get BOS descriptor or descriptor too short [ 92.903235][ T1215] cdc_wdm 1-1:1.0: skipping garbage [ 92.925685][ T5681] usb 2-1: config 66 has an invalid descriptor of length 0, skipping remainder of the config [ 92.941571][ T1215] cdc_wdm 1-1:1.0: skipping garbage [ 92.953615][ T1215] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 92.964520][ T5681] usb 2-1: config 66 has 1 interface, different from the descriptor's value: 2 [ 93.000683][ T5681] usb 2-1: config 66 interface 0 altsetting 16 endpoint 0x7 has invalid wMaxPacketSize 0 [ 93.042899][ T5681] usb 2-1: config 66 interface 0 has no altsetting 0 [ 93.062721][ T5681] usb 2-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 93.084476][ T5681] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.133301][ T5681] usb 2-1: Product: syz [ 93.149117][ T5681] usb 2-1: Manufacturer: syz [ 93.159379][ T5909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.169924][ T5681] usb 2-1: SerialNumber: syz [ 93.180057][ T5923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.196314][ T5909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.208919][ T5923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.354506][ T5933] netlink: 'syz.2.72': attribute type 10 has an invalid length. [ 93.365039][ T5933] netlink: 2 bytes leftover after parsing attributes in process `syz.2.72'. [ 93.379985][ T5933] bond0: entered promiscuous mode [ 93.385293][ T5933] bond_slave_0: entered promiscuous mode [ 93.391927][ T5933] bond_slave_1: entered promiscuous mode [ 93.398652][ T5933] bridge0: port 3(bond0) entered blocking state [ 93.405183][ T5933] bridge0: port 3(bond0) entered disabled state [ 93.414041][ T5933] bond0: entered allmulticast mode [ 93.455148][ T5933] bond_slave_0: entered allmulticast mode [ 93.458277][ T5681] ati_remote2 2-1:66.0: ati_remote2_probe(): need 2 interfaces, found 1 [ 93.478319][ T5933] bond_slave_1: entered allmulticast mode [ 93.504826][ T5933] bridge0: port 3(bond0) entered blocking state [ 93.505198][ T5681] usb 2-1: USB disconnect, device number 5 [ 93.511766][ T5933] bridge0: port 3(bond0) entered forwarding state [ 93.800601][ T5681] usb 1-1: USB disconnect, device number 7 [ 93.817314][ T42] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 93.830704][ T5727] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 93.858992][ T5943] netlink: 20 bytes leftover after parsing attributes in process `syz.4.76'. [ 93.868472][ T5943] syz.4.76 uses obsolete (PF_INET,SOCK_PACKET) [ 93.874999][ T5943] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 93.883284][ T5943] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 93.932265][ T5948] Cannot find set identified by id 0 to match [ 93.958763][ T42] usb 4-1: device descriptor read/64, error -71 [ 93.999384][ T5727] usb 3-1: unable to get BOS descriptor or descriptor too short [ 94.014642][ T5727] usb 3-1: not running at top speed; connect to a high speed hub [ 94.024377][ T5727] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.043305][ T5727] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 94.061453][ T5727] usb 3-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 94.073861][ T5727] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.087077][ T5727] usb 3-1: Product: syz [ 94.091390][ T5727] usb 3-1: Manufacturer: syz [ 94.096130][ T5727] usb 3-1: SerialNumber: syz [ 94.197410][ T42] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 94.354048][ T42] usb 4-1: device descriptor read/64, error -71 [ 94.478468][ T42] usb usb4-port1: attempt power cycle [ 94.851312][ T42] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 94.914917][ T42] usb 4-1: device descriptor read/8, error -71 [ 95.182062][ T42] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 95.218016][ T42] usb 4-1: device descriptor read/8, error -71 [ 95.249768][ T5975] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.257881][ T5975] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.348276][ T42] usb usb4-port1: unable to enumerate USB device [ 96.250692][ T5993] capability: warning: `syz.1.93' uses deprecated v2 capabilities in a way that may be insecure [ 96.525210][ T5998] netlink: 12 bytes leftover after parsing attributes in process `syz.1.94'. [ 96.863942][ T5727] usb 3-1: unit 0 not found! [ 97.004720][ T6004] ip6t_rpfilter: unknown options [ 97.160712][ T5727] usb 3-1: USB disconnect, device number 2 [ 98.032975][ T6023] netlink: 28 bytes leftover after parsing attributes in process `syz.3.105'. [ 98.063827][ T6023] netlink: 28 bytes leftover after parsing attributes in process `syz.3.105'. [ 98.347534][ T5612] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 98.492761][ T6038] Cannot find set identified by id 0 to match [ 98.528413][ T5612] usb 1-1: device descriptor read/64, error -71 [ 98.661465][ T6043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.687157][ T6043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.789214][ T5612] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 98.863352][ T42] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 98.927308][ T5612] usb 1-1: device descriptor read/64, error -71 [ 99.030250][ T42] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.044243][ T5612] usb usb1-port1: attempt power cycle [ 99.057585][ T42] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.078219][ T42] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 99.106121][ T42] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 99.121738][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.137402][ T42] usb 2-1: config 0 descriptor?? [ 99.388631][ T5612] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 99.428637][ T5612] usb 1-1: device descriptor read/8, error -71 [ 99.573702][ T42] plantronics 0003:047F:FFFF.0001: reserved main item tag 0xd [ 99.632266][ T6058] netlink: 'syz.4.116': attribute type 10 has an invalid length. [ 99.650975][ T6058] netlink: 2 bytes leftover after parsing attributes in process `syz.4.116'. [ 99.661710][ T42] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 99.677827][ T5612] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 99.687794][ T6058] bond0: entered promiscuous mode [ 99.704877][ T6058] bond_slave_0: entered promiscuous mode [ 99.711487][ T5612] usb 1-1: device descriptor read/8, error -71 [ 99.718765][ T6058] bond_slave_1: entered promiscuous mode [ 99.726144][ T6058] bridge0: port 3(bond0) entered blocking state [ 99.733280][ T6058] bridge0: port 3(bond0) entered disabled state [ 99.741223][ T6058] bond0: entered allmulticast mode [ 99.746460][ T6058] bond_slave_0: entered allmulticast mode [ 99.763592][ T6058] bond_slave_1: entered allmulticast mode [ 99.774211][ T6058] bridge0: port 3(bond0) entered blocking state [ 99.780691][ T6058] bridge0: port 3(bond0) entered forwarding state [ 99.824669][ T42] usb 2-1: USB disconnect, device number 6 [ 99.833979][ T5612] usb usb1-port1: unable to enumerate USB device [ 99.973931][ T6062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.000295][ T6062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.038538][ T6062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.050902][ T6062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.233023][ T6066] netlink: 'syz.2.120': attribute type 1 has an invalid length. [ 100.292064][ T6066] veth3: entered allmulticast mode [ 100.306741][ T6066] bond1: (slave veth3): Enslaving as an active interface with a down link [ 100.326477][ T6066] bond1: (slave veth0_to_bond): making interface the new active one [ 100.359026][ T6066] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 100.440918][ T6071] netlink: 120 bytes leftover after parsing attributes in process `syz.1.121'. [ 100.467361][ T6066] netlink: 4 bytes leftover after parsing attributes in process `syz.2.120'. [ 100.478425][ T6066] hsr_slave_0: left promiscuous mode [ 100.502443][ T6066] hsr_slave_1: left promiscuous mode [ 101.499894][ T6095] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.507869][ T6095] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.602844][ T6093] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 102.102812][ T6111] syzkaller0: entered promiscuous mode [ 102.115129][ T6111] syzkaller0: entered allmulticast mode [ 102.147023][ T6108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.195544][ T6108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.576612][ T6130] hub 8-0:1.0: USB hub found [ 102.584108][ T6130] hub 8-0:1.0: 1 port detected [ 102.820408][ T6133] netlink: 12 bytes leftover after parsing attributes in process `syz.1.142'. [ 103.055930][ T6142] process 'syz.2.144' launched '/dev/fd/9' with NULL argv: empty string added [ 103.243012][ T6142] xt_CT: No such helper "netbios-ns" [ 103.289763][ T42] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 103.467805][ T42] usb 2-1: Using ep0 maxpacket: 8 [ 103.481155][ T42] usb 2-1: unable to get BOS descriptor or descriptor too short [ 103.506572][ T42] usb 2-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40 [ 103.537104][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.572266][ T42] usb 2-1: Product: syz [ 103.587581][ T42] usb 2-1: Manufacturer: syz [ 103.599275][ T42] usb 2-1: SerialNumber: syz [ 103.845075][ T6143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.875096][ T6143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.893242][ T6160] syzkaller0: entered promiscuous mode [ 103.906215][ T6160] syzkaller0: entered allmulticast mode [ 103.929643][ T42] usb 2-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 103.953353][ T42] usb 2-1: 1:1 : sample bitwidth 252 in over sample bytes 4 [ 103.958925][ T6160] 0: reclassify loop, rule prio 0, protocol 800 [ 103.970121][ T6162] netlink: 28 bytes leftover after parsing attributes in process `syz.4.152'. [ 103.976289][ T42] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 103.991356][ T6162] netlink: 28 bytes leftover after parsing attributes in process `syz.4.152'. [ 104.193428][ T42] usb 2-1: USB disconnect, device number 7 [ 104.205282][ T6164] Cannot find map_set index 0 as target [ 104.490133][ T6170] netlink: 8 bytes leftover after parsing attributes in process `syz.2.156'. [ 104.578770][ T6176] netlink: 'syz.2.156': attribute type 1 has an invalid length. [ 104.627092][ T6182] FAULT_INJECTION: forcing a failure. [ 104.627092][ T6182] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 104.754250][ T6182] CPU: 0 UID: 0 PID: 6182 Comm: syz.4.159 Not tainted syzkaller #0 PREEMPT(full) [ 104.754275][ T6182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 104.754284][ T6182] Call Trace: [ 104.754291][ T6182] [ 104.754298][ T6182] dump_stack_lvl+0xe8/0x150 [ 104.754326][ T6182] should_fail_ex+0x40c/0x560 [ 104.754349][ T6182] _copy_from_user+0x2d/0xb0 [ 104.754373][ T6182] memdup_user+0x5e/0xd0 [ 104.754394][ T6182] kvm_arch_vcpu_ioctl+0xc6c/0x3080 [ 104.754429][ T6182] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 104.754458][ T6182] ? is_bpf_text_address+0x26/0x2b0 [ 104.754491][ T6182] ? is_bpf_text_address+0x26/0x2b0 [ 104.754516][ T6182] ? is_bpf_text_address+0x292/0x2b0 [ 104.754537][ T6182] ? is_bpf_text_address+0x26/0x2b0 [ 104.754561][ T6182] ? kernel_text_address+0xa5/0xe0 [ 104.754591][ T6182] ? __kernel_text_address+0xd/0x30 [ 104.754621][ T6182] ? unwind_get_return_address+0x4d/0x90 [ 104.754646][ T6182] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 104.754665][ T6182] ? arch_stack_walk+0xfb/0x150 [ 104.754699][ T6182] ? stack_trace_save+0xa9/0x100 [ 104.754725][ T6182] ? __pfx_stack_trace_save+0x10/0x10 [ 104.754742][ T6182] ? kasan_save_track+0x4f/0x80 [ 104.754765][ T6182] ? stack_depot_save_flags+0x33/0x800 [ 104.754788][ T6182] ? __lock_acquire+0x683/0x2cf0 [ 104.754811][ T6182] ? __kasan_slab_free+0x5c/0x80 [ 104.754839][ T6182] ? kfree+0x1c5/0x640 [ 104.754854][ T6182] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 104.754876][ T6182] ? security_file_ioctl+0xc3/0x2a0 [ 104.754895][ T6182] ? __se_sys_ioctl+0x47/0x170 [ 104.754909][ T6182] ? do_syscall_64+0x174/0x580 [ 104.754930][ T6182] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.754964][ T6182] ? __mutex_trylock_common+0x15f/0x270 [ 104.754992][ T6182] ? __pfx___mutex_trylock_common+0x10/0x10 [ 104.755019][ T6182] ? rcu_is_watching+0x15/0xb0 [ 104.755042][ T6182] ? trace_contention_end+0x3d/0x140 [ 104.755068][ T6182] ? __mutex_lock+0x30d/0x1550 [ 104.755093][ T6182] ? kasan_quarantine_put+0xbb/0x1f0 [ 104.755112][ T6182] ? kvm_vcpu_ioctl+0x27f/0xfd0 [ 104.755131][ T6182] ? __pfx___mutex_lock+0x10/0x10 [ 104.755153][ T6182] ? tomoyo_path_number_perm+0x219/0x5f0 [ 104.755178][ T6182] ? do_vfs_ioctl+0x116f/0x1530 [ 104.755197][ T6182] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 104.755216][ T6182] kvm_vcpu_ioctl+0x7e3/0xfd0 [ 104.755237][ T6182] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 104.755252][ T6182] ? hook_file_ioctl+0x1f0/0x5f0 [ 104.755294][ T6182] ? __fget_files+0x2a/0x420 [ 104.755318][ T6182] ? __fget_files+0x2a/0x420 [ 104.755337][ T6182] ? __fget_files+0x3a2/0x420 [ 104.755356][ T6182] ? __fget_files+0x2a/0x420 [ 104.755379][ T6182] ? bpf_lsm_file_ioctl+0x9/0x20 [ 104.755398][ T6182] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 104.755415][ T6182] __se_sys_ioctl+0xfc/0x170 [ 104.755431][ T6182] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.755449][ T6182] do_syscall_64+0x174/0x580 [ 104.755468][ T6182] ? trace_irq_disable+0x3b/0x140 [ 104.755488][ T6182] ? clear_bhb_loop+0x70/0xc0 [ 104.755509][ T6182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.755525][ T6182] RIP: 0033:0x7f04d0b9e0d9 [ 104.755541][ T6182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.755554][ T6182] RSP: 002b:00007f04d1a75028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 104.755573][ T6182] RAX: ffffffffffffffda RBX: 00007f04d0e26090 RCX: 00007f04d0b9e0d9 [ 104.755585][ T6182] RDX: 00002000000001c0 RSI: 000000004400ae8f RDI: 0000000000000005 [ 104.755639][ T6182] RBP: 00007f04d1a75090 R08: 0000000000000000 R09: 0000000000000000 [ 104.755650][ T6182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.755660][ T6182] R13: 00007f04d0e26128 R14: 00007f04d0e26090 R15: 00007f04d0f4fa48 [ 104.755688][ T6182] [ 105.608999][ T6199] netlink: 'syz.2.165': attribute type 1 has an invalid length. [ 105.651238][ T6199] 8021q: adding VLAN 0 to HW filter on device bond2 [ 105.740008][ T6204] bond2: (slave veth5): Enslaving as an active interface with a down link [ 105.944438][ T6214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.970778][ T6214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.985976][ T6199] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.000276][ T6199] veth3: left allmulticast mode [ 106.040372][ T6204] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 106.055399][ T6204] bond2: (slave batadv1): making interface the new active one [ 106.065821][ T6204] batadv1: entered promiscuous mode [ 106.072000][ T6204] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 106.095313][ T35] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 106.148155][ T12] bond2: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 106.332091][ T6225] netlink: 68 bytes leftover after parsing attributes in process `syz.2.173'. [ 106.551388][ T6229] bridge0: port 3(bond0) entered disabled state [ 106.559039][ T6229] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.566640][ T6229] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.797079][ T6229] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.814560][ T6229] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.016513][ T6251] openvswitch: netlink: Missing key (keys=40, expected=100) [ 107.337874][ T6263] netlink: 20 bytes leftover after parsing attributes in process `syz.0.186'. [ 107.484823][ T6231] netlink: 4 bytes leftover after parsing attributes in process `syz.2.174'. [ 107.546319][ T6263] ip6gre1: entered allmulticast mode [ 107.581896][ T6267] binder: 6262:6267 ioctl 400c620e 0 returned -14 [ 107.597773][ T729] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.669349][ T729] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.698736][ T729] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.722424][ T729] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.527377][ T5674] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 108.567407][ T5727] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 108.689133][ T5674] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 46011, setting to 64 [ 108.705280][ T5674] usb 3-1: config 0 interface 0 has no altsetting 0 [ 108.731082][ T5674] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 108.743349][ T5727] usb 4-1: unable to get BOS descriptor or descriptor too short [ 108.752527][ T5674] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 108.761453][ T5727] usb 4-1: not running at top speed; connect to a high speed hub [ 108.769484][ T5674] usb 3-1: Product: syz [ 108.777005][ T5727] usb 4-1: config 5 has an invalid interface number: 246 but max is 0 [ 108.789855][ T5674] usb 3-1: Manufacturer: syz [ 108.797535][ T5727] usb 4-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 108.810177][ T5674] usb 3-1: SerialNumber: syz [ 108.826640][ T5727] usb 4-1: config 5 has no interface number 0 [ 108.833625][ T5674] usb 3-1: config 0 descriptor?? [ 108.839685][ T5727] usb 4-1: config 5 interface 246 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 108.852074][ T6302] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 108.859659][ T5727] usb 4-1: config 5 interface 246 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 108.886943][ T5674] usb 3-1: selecting invalid altsetting 0 [ 108.914200][ T5727] usb 4-1: config 5 interface 246 has no altsetting 0 [ 108.937593][ T5727] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 108.951744][ T5727] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.975034][ T5727] usb 4-1: Product: syz [ 108.988311][ T5727] usb 4-1: Manufacturer: syz [ 108.999235][ T5727] usb 4-1: SerialNumber: syz [ 109.019731][ T6301] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 109.172411][ T6302] usb 3-1: BOGUS urb xfer, pipe 0 != type 1 [ 109.232816][ T5612] usb 3-1: USB disconnect, device number 3 [ 109.233362][ T6302] usb 3-1: cannot submit urb 0, error -19: no device [ 109.259993][ T6306] netlink: 32 bytes leftover after parsing attributes in process `syz.0.200'. [ 109.290607][ T5727] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 109.292134][ T35] usb 4-1: Failed to submit usb control message: -71 [ 109.333284][ T5727] usb 4-1: USB disconnect, device number 9 [ 109.410370][ T35] usb 4-1: unable to send the bmi data to the device: -71 [ 109.437968][ T35] usb 4-1: unable to get target info from device [ 109.461011][ T35] usb 4-1: could not get target info (-71) [ 109.481426][ T35] usb 4-1: could not probe fw (-71) [ 109.984669][ T6323] netlink: 12 bytes leftover after parsing attributes in process `syz.3.205'. [ 109.995344][ T6325] ip6t_rpfilter: unknown options [ 110.188544][ T6327] bond3: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 110.342619][ T6327] bond3 (unregistering): Released all slaves [ 110.466108][ T6347] --map-set only usable from mangle table [ 110.924176][ T984] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 110.963066][ T6362] netlink: 8 bytes leftover after parsing attributes in process `syz.4.215'. [ 111.120537][ T984] usb 3-1: config 0 has an invalid interface number: 168 but max is 0 [ 111.140308][ T984] usb 3-1: config 0 has no interface number 0 [ 111.159849][ T984] usb 3-1: config 0 interface 168 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 111.186235][ T984] usb 3-1: config 0 interface 168 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 111.222320][ T984] usb 3-1: config 0 interface 168 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 111.259956][ T984] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4 [ 111.286322][ T984] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.286684][ T6376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.311679][ T6376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.313171][ T984] usb 3-1: config 0 descriptor?? [ 111.343311][ T6376] netlink: 'syz.4.222': attribute type 21 has an invalid length. [ 111.354361][ T6354] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 111.602993][ T984] usb 3-1: string descriptor 0 read error: -71 [ 111.622933][ T984] keyspan 3-1:0.168: Keyspan 2 port adapter converter detected [ 111.652901][ T984] keyspan 3-1:0.168: found no endpoint descriptor for endpoint 1 [ 111.684187][ T984] keyspan 3-1:0.168: found no endpoint descriptor for endpoint 84 [ 111.694785][ T984] keyspan 3-1:0.168: found no endpoint descriptor for endpoint 2 [ 111.711045][ T984] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 111.726879][ T984] keyspan 3-1:0.168: found no endpoint descriptor for endpoint 88 [ 111.735058][ T984] keyspan 3-1:0.168: found no endpoint descriptor for endpoint 6 [ 111.746446][ T984] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 111.776892][ T984] usb 3-1: USB disconnect, device number 4 [ 111.805747][ T984] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 111.848690][ T984] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 111.866320][ T984] keyspan 3-1:0.168: device disconnected [ 111.965571][ T6389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.990764][ T6389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.037893][ T6389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.069042][ T6389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.107337][ T5612] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 112.261545][ T5612] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.292165][ T5612] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 112.306036][ T5612] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.322891][ T5612] usb 4-1: config 0 descriptor?? [ 112.377665][ T984] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 112.527297][ T5727] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 112.544020][ T984] usb 1-1: Using ep0 maxpacket: 32 [ 112.581999][ T984] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 112.612822][ T984] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.640536][ T984] usb 1-1: Product: syz [ 112.665168][ T984] usb 1-1: Manufacturer: syz [ 112.683104][ T984] usb 1-1: SerialNumber: syz [ 112.725399][ T984] usb 1-1: config 0 descriptor?? [ 112.767045][ T984] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 112.768383][ T6427] netlink: 4 bytes leftover after parsing attributes in process `syz.4.241'. [ 112.847819][ T6427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.920497][ T6427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.958564][ T5612] ath6kl: Failed to read usb control message: -71 [ 112.972583][ T5612] ath6kl: Unable to read the bmi data from the device: -71 [ 112.986799][ T6427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.996494][ T5612] ath6kl: unable to read target info byte count: -71 [ 113.019821][ T5612] ath6kl: Failed to init ath6kl core: -71 [ 113.027550][ T6427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.043263][ T5612] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 113.088085][ T5612] usb 4-1: USB disconnect, device number 10 [ 113.127041][ T6432] tipc: Enabling of bearer rejected, failed to enable media [ 113.970095][ T6396] netlink: 8 bytes leftover after parsing attributes in process `syz.0.231'. [ 114.216371][ T6396] netlink: 32 bytes leftover after parsing attributes in process `syz.0.231'. [ 114.261973][ T6396] netlink: 16 bytes leftover after parsing attributes in process `syz.0.231'. [ 114.429392][ T6452] netlink: 'syz.2.250': attribute type 1 has an invalid length. [ 114.467076][ T6452] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 114.721519][ T984] gspca_ov534_9: reg_w failed -71 [ 115.000759][ T6462] input: syz1 as /devices/virtual/input/input9 [ 115.007670][ T984] gspca_ov534_9: Unknown sensor 0000 [ 115.008100][ T984] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 115.059995][ T984] usb 1-1: USB disconnect, device number 12 [ 115.431321][ T6476] input: syz0 as /devices/virtual/input/input10 [ 115.607318][ T5674] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 115.797549][ T5674] usb 3-1: Using ep0 maxpacket: 8 [ 115.820961][ T5674] usb 3-1: config 31 has an invalid interface number: 197 but max is 0 [ 115.856420][ T5674] usb 3-1: config 31 has no interface number 0 [ 115.874148][ T5674] usb 3-1: config 31 interface 197 has no altsetting 0 [ 115.901802][ T5674] usb 3-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=4a.36 [ 115.935464][ T5674] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.952983][ T5674] usb 3-1: Product: syz [ 115.958649][ T5674] usb 3-1: Manufacturer: syz [ 115.963571][ T5674] usb 3-1: SerialNumber: syz [ 117.190536][ T6511] FAULT_INJECTION: forcing a failure. [ 117.190536][ T6511] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 117.204647][ T5674] gspca_main: etoms-2.14.0 probing 102c:6151 [ 117.235874][ T6511] CPU: 0 UID: 0 PID: 6511 Comm: syz.4.269 Not tainted syzkaller #0 PREEMPT(full) [ 117.235897][ T6511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 117.235906][ T6511] Call Trace: [ 117.235910][ T6511] [ 117.235915][ T6511] dump_stack_lvl+0xe8/0x150 [ 117.235936][ T6511] should_fail_ex+0x40c/0x560 [ 117.235950][ T6511] _copy_to_user+0x31/0xb0 [ 117.235966][ T6511] simple_read_from_buffer+0xe1/0x170 [ 117.235982][ T6511] proc_fail_nth_read+0x1bb/0x230 [ 117.235997][ T6511] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 117.236012][ T6511] ? rw_verify_area+0x24a/0x4c0 [ 117.236027][ T6511] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 117.236039][ T6511] vfs_read+0x213/0xa80 [ 117.236055][ T6511] ? __pfx___mutex_lock+0x10/0x10 [ 117.236070][ T6511] ? __pfx_vfs_read+0x10/0x10 [ 117.236084][ T6511] ? __fget_files+0x2a/0x420 [ 117.236098][ T6511] ? __fget_files+0x3a2/0x420 [ 117.236109][ T6511] ? __fget_files+0x2a/0x420 [ 117.236125][ T6511] ksys_read+0x150/0x270 [ 117.236140][ T6511] ? __pfx_ksys_read+0x10/0x10 [ 117.236157][ T6511] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.236168][ T6511] do_syscall_64+0x174/0x580 [ 117.236181][ T6511] ? clear_bhb_loop+0x70/0xc0 [ 117.236193][ T6511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.236202][ T6511] RIP: 0033:0x7f04d0b5e90e [ 117.236216][ T6511] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 117.236223][ T6511] RSP: 002b:00007f04d1a96fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 117.236237][ T6511] RAX: ffffffffffffffda RBX: 00007f04d1a976c0 RCX: 00007f04d0b5e90e [ 117.236243][ T6511] RDX: 000000000000000f RSI: 00007f04d1a970a0 RDI: 0000000000000004 [ 117.236249][ T6511] RBP: 00007f04d1a97090 R08: 0000000000000000 R09: 0000000000000000 [ 117.236254][ T6511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 117.236259][ T6511] R13: 00007f04d0e26038 R14: 00007f04d0e25fa0 R15: 00007f04d0f4fa48 [ 117.236274][ T6511] [ 117.724046][ T6519] netlink: 68 bytes leftover after parsing attributes in process `syz.4.272'. [ 118.296811][ T6534] bond1: option packets_per_slave: mode dependency failed, not supported in mode 802.3ad(4) [ 118.365413][ T6534] bond1 (unregistering): Released all slaves [ 118.763964][ T984] usb 3-1: USB disconnect, device number 6 [ 119.151284][ T6548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.241415][ T6550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.307731][ T6548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.350810][ T6550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.809206][ T6564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.823613][ T6564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.836957][ T6564] netlink: 20 bytes leftover after parsing attributes in process `syz.4.286'. [ 119.847298][ T1215] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 120.020080][ T1215] usb 3-1: config 0 has an invalid interface number: 205 but max is 0 [ 120.045186][ T1215] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.080480][ T1215] usb 3-1: config 0 has no interface number 0 [ 120.099046][ T1215] usb 3-1: config 0 interface 205 has no altsetting 0 [ 120.129365][ T1215] usb 3-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 120.161880][ T1215] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.192994][ T1215] usb 3-1: Product: syz [ 120.207112][ T1215] usb 3-1: Manufacturer: syz [ 120.218793][ T1215] usb 3-1: SerialNumber: syz [ 120.245190][ T1215] usb 3-1: config 0 descriptor?? [ 120.268983][ T1215] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 120.304360][ T1215] dvb-usb: bulk message failed: -22 (3/0) [ 120.356763][ T1215] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 120.373607][ T1215] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 120.407337][ T1215] usb 3-1: media controller created [ 120.432002][ T1215] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 120.471419][ T1215] dvb-usb: bulk message failed: -22 (6/0) [ 120.497170][ T1215] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 120.551589][ T1215] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input11 [ 120.596008][ T1215] dvb-usb: schedule remote query interval to 150 msecs. [ 120.613736][ T1215] dvb-usb: bulk message failed: -22 (3/0) [ 120.649154][ T1215] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 120.695720][ T1215] usb 3-1: USB disconnect, device number 7 [ 120.768482][ T1215] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 120.888883][ T984] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 120.967794][ T6585] bridge0: port 3(bond0) entered disabled state [ 120.974323][ T6585] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.981885][ T6585] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.057374][ T984] usb 2-1: device descriptor read/64, error -71 [ 121.297474][ T984] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 121.458419][ T984] usb 2-1: device descriptor read/64, error -71 [ 121.479550][ T6604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.513935][ T6604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.588591][ T984] usb usb2-port1: attempt power cycle [ 121.958600][ T984] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 122.019946][ T984] usb 2-1: device descriptor read/8, error -71 [ 122.280852][ T984] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 122.349039][ T984] usb 2-1: device descriptor read/8, error -71 [ 122.482761][ T984] usb usb2-port1: unable to enumerate USB device [ 122.788622][ T1215] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 122.991269][ T1215] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 123.026719][ T1215] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 123.047837][ T1215] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 123.074721][ T1215] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 255, setting to 64 [ 123.096934][ T1215] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 123.132454][ T1215] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 123.151533][ T1215] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.172901][ T1215] usb 4-1: Product: syz [ 123.178814][ T1215] usb 4-1: Manufacturer: syz [ 123.183659][ T1215] usb 4-1: SerialNumber: syz [ 123.200951][ T1215] usb 4-1: config 0 descriptor?? [ 123.208943][ T6627] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 123.233531][ T1215] input: KB Gear Tablet as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input12 [ 123.522287][ T6649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.535311][ T6649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.612359][ T984] usb 4-1: USB disconnect, device number 11 [ 124.443873][ T6673] Cannot find set identified by id 0 to match [ 124.985972][ T6692] netlink: 24 bytes leftover after parsing attributes in process `syz.4.312'. [ 125.077593][ T5681] IPVS: starting estimator thread 0... [ 125.094864][ T6696] xt_ecn: cannot match TCP bits for non-tcp packets [ 125.198243][ T6698] IPVS: using max 33 ests per chain, 79200 per kthread [ 126.548318][ T5681] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 126.685064][ T6713] syzkaller0: entered promiscuous mode [ 126.701871][ T6713] syzkaller0: entered allmulticast mode [ 126.720664][ T5681] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x6 has an invalid bInterval 0, changing to 4 [ 126.765364][ T5681] usb 1-1: config 0 interface 0 has no altsetting 0 [ 126.790699][ T5681] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 126.813259][ T5681] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 126.840856][ T5681] usb 1-1: Product: syz [ 126.856944][ T5681] usb 1-1: Manufacturer: syz [ 126.874037][ T5681] usb 1-1: SerialNumber: syz [ 126.897982][ T5681] usb 1-1: config 0 descriptor?? [ 126.923825][ T5681] usb 1-1: selecting invalid altsetting 0 [ 127.193622][ T6710] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 127.216345][ T6710] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 127.246081][ T5688] usb 1-1: USB disconnect, device number 13 [ 127.260268][ T6710] usb 1-1: cannot submit urb 0, error -19: no device [ 127.652974][ T5688] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 127.829776][ T5688] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 127.843811][ T5688] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 15073, setting to 1024 [ 127.862510][ T5688] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 127.875398][ T5688] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 127.884543][ T5688] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.893087][ T5688] usb 1-1: Product: syz [ 127.898213][ T5688] usb 1-1: Manufacturer: syz [ 127.902866][ T5688] usb 1-1: SerialNumber: syz [ 127.926780][ T5688] usb 1-1: config 0 descriptor?? [ 127.933629][ T6722] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 127.943262][ T6722] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 128.039075][ T5681] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 128.162093][ T6710] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 128.184497][ T6710] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 128.209442][ T5681] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 128.230499][ T5681] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 128.256040][ T5681] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 128.286099][ T5681] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.313183][ T5681] usb 2-1: Product: syz [ 128.321488][ T5681] usb 2-1: Manufacturer: syz [ 128.331824][ T5681] usb 2-1: SerialNumber: syz [ 128.353545][ T5681] usb 2-1: config 0 descriptor?? [ 128.383699][ T5681] streamzap 2-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200 [ 128.402351][ T6710] program syz.0.315 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 129.494759][ T5688] Error reading MAC address [ 129.525310][ T5688] usb 1-1: USB disconnect, device number 14 [ 129.594476][ T5612] usb 2-1: USB disconnect, device number 12 [ 130.348650][ T6747] xt_CT: You must specify a L4 protocol and not use inversions on it [ 131.027597][ T5681] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 131.226694][ T5681] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 131.275820][ T6764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.275902][ T5681] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 131.337662][ T5681] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 131.340008][ T6764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.408897][ T5681] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 131.455256][ T5681] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.486504][ T6753] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 132.200037][ T5612] hid (null): report_id 53180 is invalid [ 132.262335][ T5612] hid-generic 035A:FFFFFFFF:0002.0002: reserved main item tag 0xd [ 132.284755][ T5612] hid-generic 035A:FFFFFFFF:0002.0002: report_id 53180 is invalid [ 132.302039][ T5612] hid-generic 035A:FFFFFFFF:0002.0002: item 0 2 1 8 parsing failed [ 132.331491][ T5612] hid-generic 035A:FFFFFFFF:0002.0002: probe with driver hid-generic failed with error -22 [ 132.399458][ T6784] netlink: 68 bytes leftover after parsing attributes in process `syz.4.340'. [ 132.540298][ T6789] netlink: 12 bytes leftover after parsing attributes in process `syz.4.342'. [ 132.558059][ T6790] netlink: 'syz.2.341': attribute type 1 has an invalid length. [ 132.611638][ T6790] 8021q: adding VLAN 0 to HW filter on device bond3 [ 132.691660][ T6793] bond3: (slave geneve3): making interface the new active one [ 132.721601][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.732735][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.753312][ T6793] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 132.772900][ T6795] xt_SECMARK: invalid mode: 2 [ 132.811471][ T82] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.844153][ T82] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.888065][ T5681] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 132.897108][ T729] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.916619][ T5681] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input13 [ 132.926397][ T729] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.041856][ T6803] tipc: Enabling of bearer rejected, failed to enable media [ 133.260403][ T5612] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 133.403862][ T6753] netlink: 20 bytes leftover after parsing attributes in process `syz.1.329'. [ 133.415744][ T5612] usb 3-1: device descriptor read/64, error -71 [ 133.667399][ T5612] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 133.797311][ T5612] usb 3-1: device descriptor read/64, error -71 [ 133.907623][ T5612] usb usb3-port1: attempt power cycle [ 134.257706][ T5612] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 134.278068][ T5612] usb 3-1: device descriptor read/8, error -71 [ 134.534067][ C0] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 134.537752][ T5612] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 134.580785][ T5701] usb 2-1: USB disconnect, device number 13 [ 134.629128][ T5612] usb 3-1: device descriptor read/8, error -71 [ 134.650051][ T6833] netlink: 20 bytes leftover after parsing attributes in process `syz.1.356'. [ 134.732986][ T6833] ip6gre1: entered allmulticast mode [ 134.757463][ T6835] netlink: 'syz.0.354': attribute type 10 has an invalid length. [ 134.771230][ T5612] usb usb3-port1: unable to enumerate USB device [ 134.850985][ T6838] netlink: 'syz.0.354': attribute type 10 has an invalid length. [ 134.922868][ T6835] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 134.962582][ T6835] team0: Port device netdevsim1 added [ 135.152238][ T6838] team0: Port device netdevsim1 removed [ 135.173345][ T6849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.191351][ T6838] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 135.199925][ T6849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.230974][ T6838] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 136.115033][ T6866] capability: warning: `syz.0.368' uses 32-bit capabilities (legacy support in use) [ 136.318103][ T5612] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 136.509468][ T5612] usb 3-1: Using ep0 maxpacket: 32 [ 136.524747][ T5612] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 136.542502][ T5612] usb 3-1: config 0 has no interface number 0 [ 136.565550][ T5612] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 136.588780][ T5612] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.617441][ T5612] usb 3-1: Product: syz [ 136.633761][ T5612] usb 3-1: Manufacturer: syz [ 136.657146][ T5612] usb 3-1: SerialNumber: syz [ 136.681535][ T5612] usb 3-1: config 0 descriptor?? [ 136.697940][ T5612] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 136.715423][ T5612] usb 3-1: selecting invalid altsetting 1 [ 136.733160][ T5612] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 136.782609][ T5612] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 136.816506][ T5612] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 136.847917][ T5612] usb 3-1: media controller created [ 136.885306][ T5612] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 136.926734][ T6864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.977949][ T6864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.993627][ T6883] netlink: 64 bytes leftover after parsing attributes in process `syz.3.371'. [ 137.907615][ T5681] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 138.071336][ T5612] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 138.077471][ T5681] usb 1-1: Using ep0 maxpacket: 8 [ 138.106143][ T5681] usb 1-1: config 150 has an invalid interface number: 204 but max is 2 [ 138.130858][ T5612] zl10353_read_register: readreg error (reg=127, ret==-110) [ 138.160057][ T5681] usb 1-1: config 150 has an invalid descriptor of length 48, skipping remainder of the config [ 138.215339][ T5681] usb 1-1: config 150 has 1 interface, different from the descriptor's value: 3 [ 138.260313][ T5681] usb 1-1: config 150 has no interface number 0 [ 138.328376][ T5681] usb 1-1: config 150 interface 204 has no altsetting 0 [ 138.368271][ T5681] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c3.eb [ 138.378871][ T5681] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.392207][ T5681] usb 1-1: Product: syz [ 138.396502][ T5681] usb 1-1: Manufacturer: syz [ 138.402809][ T5681] usb 1-1: SerialNumber: syz [ 138.732453][ T5681] usb 1-1: USB disconnect, device number 15 [ 139.143059][ T6914] netlink: 24 bytes leftover after parsing attributes in process `syz.4.381'. [ 139.396218][ T5681] usb 3-1: USB disconnect, device number 12 [ 139.587599][ T1215] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 139.749429][ T1215] usb 1-1: Using ep0 maxpacket: 32 [ 139.763942][ T1215] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 139.809503][ T1215] usb 1-1: config 0 has no interface number 0 [ 139.871196][ T1215] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 139.907009][ T1215] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.957520][ T1215] usb 1-1: Product: syz [ 139.974709][ T1215] usb 1-1: Manufacturer: syz [ 139.994871][ T6928] netlink: 'syz.2.387': attribute type 11 has an invalid length. [ 140.003258][ T1215] usb 1-1: SerialNumber: syz [ 140.048237][ T1215] usb 1-1: config 0 descriptor?? [ 140.069270][ T1215] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 140.126140][ T1215] usb 1-1: selecting invalid altsetting 1 [ 140.154798][ T1215] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 140.155751][ T6933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.389'. [ 140.211125][ T1215] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 140.228778][ T1215] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 140.244068][ T1215] usb 1-1: media controller created [ 140.258537][ T6933] netlink: 36 bytes leftover after parsing attributes in process `syz.2.389'. [ 140.272582][ T6918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.289833][ T1215] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 140.299121][ T6918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.503572][ T6941] netlink: 12 bytes leftover after parsing attributes in process `syz.4.391'. [ 140.514154][ T5681] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 140.667025][ T6944] tipc: Enabling of bearer rejected, failed to enable media [ 140.679581][ T5681] usb 2-1: Using ep0 maxpacket: 32 [ 140.694316][ T5681] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 140.709473][ T5681] usb 2-1: config 0 has no interface number 0 [ 140.725781][ T5681] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 140.793763][ T5681] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.804286][ T5681] usb 2-1: Product: syz [ 140.811525][ T5681] usb 2-1: Manufacturer: syz [ 140.826545][ T5681] usb 2-1: SerialNumber: syz [ 140.846265][ T5681] usb 2-1: config 0 descriptor?? [ 140.860195][ T5681] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 140.893469][ T5681] usb 2-1: selecting invalid altsetting 1 [ 140.916063][ T5681] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 140.942609][ T5681] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 140.965398][ T5681] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 140.989969][ T5681] usb 2-1: media controller created [ 141.073475][ T5681] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 141.085628][ T6935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.106690][ T6935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.429182][ T1215] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 141.436688][ T1215] zl10353_read_register: readreg error (reg=127, ret==-110) [ 141.575269][ T1215] usb 1-1: USB disconnect, device number 16 [ 142.151324][ T5681] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 142.160495][ T5681] zl10353_read_register: readreg error (reg=127, ret==-110) [ 142.181839][ T5681] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 142.232546][ T5681] usb 2-1: USB disconnect, device number 14 [ 145.852254][ T4980] udevd[4980]: worker [5613] /devices/platform/dummy_hcd.4/usb5/5-1 is taking a long time [ 188.303976][ T6955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.338934][ T6955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.463384][ T6973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.535460][ T6973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.546877][ T1215] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 188.772567][ T6987] netlink: 68 bytes leftover after parsing attributes in process `syz.0.404'. [ 188.831972][ T6989] netlink: 24 bytes leftover after parsing attributes in process `syz.3.400'. [ 189.563460][ T7002] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 190.467390][ T7024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.508871][ T7024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.127263][ T5688] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 191.227434][ T5681] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 191.305562][ T5688] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 191.340439][ T5688] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.349022][ T7039] JFS: charset not found [ 191.378490][ T5688] usb 4-1: Product: syz [ 191.384185][ T5688] usb 4-1: Manufacturer: syz [ 191.392474][ T5688] usb 4-1: SerialNumber: syz [ 191.421033][ T5681] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 191.438439][ T5681] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.456823][ T5681] usb 2-1: Product: syz [ 191.462816][ T5681] usb 2-1: Manufacturer: syz [ 191.472263][ T5681] usb 2-1: SerialNumber: syz [ 191.506295][ T5681] usb 2-1: config 0 descriptor?? [ 191.924560][ T5681] usb 2-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 191.942364][ T5681] usb 2-1: Firmware version (0.0) predates our first public release. [ 191.970583][ T5681] usb 2-1: Please update to version 0.2 or newer [ 192.212443][ T7049] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 192.441965][ T5681] usb 2-1: USB disconnect, device number 15 [ 193.336544][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056a14800: rx timeout, send abort [ 193.349335][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888056a14800: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 194.047469][ T5612] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 194.154027][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.160641][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.188362][ T5612] usb 1-1: device descriptor read/64, error -71 [ 194.249852][ T1215] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 194.317469][ T5681] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 194.417814][ T1215] usb 3-1: Using ep0 maxpacket: 32 [ 194.434035][ T1215] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 194.459402][ T5612] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 194.467606][ T1215] usb 3-1: config 0 has no interface number 0 [ 194.482519][ T5681] usb 2-1: Using ep0 maxpacket: 16 [ 194.496089][ T1215] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 194.515779][ T5681] usb 2-1: unable to get BOS descriptor or descriptor too short [ 194.524610][ T5688] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 194.530569][ T1215] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.557476][ T5681] usb 2-1: config 1 has too many interfaces: 67, using maximum allowed: 32 [ 194.585121][ T5688] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 194.585872][ T5681] usb 2-1: config 1 has an invalid descriptor of length 163, skipping remainder of the config [ 194.609489][ T1215] usb 3-1: Product: syz [ 194.625113][ T5688] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 194.635990][ T1215] usb 3-1: Manufacturer: syz [ 194.636489][ T5612] usb 1-1: device descriptor read/64, error -71 [ 194.649080][ T1215] usb 3-1: SerialNumber: syz [ 194.672283][ T1215] usb 3-1: config 0 descriptor?? [ 194.692264][ T5681] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 67 [ 194.712200][ T1215] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 194.724807][ T5681] usb 2-1: config 1 has no interface number 0 [ 194.731180][ T1215] usb 3-1: selecting invalid altsetting 1 [ 194.737117][ T5681] usb 2-1: too many endpoints for config 1 interface 1 altsetting 148: 41, using maximum allowed: 30 [ 194.748435][ T1215] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 194.755720][ T5681] usb 2-1: config 1 interface 1 altsetting 148 has 0 endpoint descriptors, different from the interface descriptor's value: 41 [ 194.759615][ T5688] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 194.772573][ T5681] usb 2-1: config 1 interface 1 has no altsetting 0 [ 194.785043][ T1215] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 194.807536][ T1215] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 194.824739][ T5681] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 194.827325][ T5612] usb usb1-port1: attempt power cycle [ 194.850742][ T1215] usb 3-1: media controller created [ 194.866281][ T5681] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.874583][ T5688] usb 4-1: USB disconnect, device number 12 [ 194.906221][ T5681] usb 2-1: Product: syz [ 194.916057][ T5681] usb 2-1: Manufacturer: syz [ 194.933168][ T1215] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 194.947054][ T7076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.961335][ T5681] usb 2-1: SerialNumber: syz [ 194.971771][ T7076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.197569][ T1215] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 195.200551][ T5612] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 195.226202][ T1215] zl10353_read_register: readreg error (reg=127, ret==-71) [ 195.243697][ T1215] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 195.298075][ T5612] usb 1-1: device descriptor read/8, error -71 [ 195.428132][ T1215] usb 3-1: USB disconnect, device number 13 [ 195.577304][ T5612] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 195.630581][ T5612] usb 1-1: device descriptor read/8, error -71 [ 195.748645][ T5612] usb usb1-port1: unable to enumerate USB device [ 195.935276][ T7104] No such timeout policy "syz1" [ 196.150271][ T7111] program syz.4.434 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 196.348145][ T5674] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 196.510903][ T5674] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 196.531633][ T5674] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 196.550641][ T5674] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 196.580695][ T5674] usb 3-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 196.600610][ T5674] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.626449][ T5674] usb 3-1: Product: syz [ 196.640143][ T5674] usb 3-1: Manufacturer: syz [ 196.650287][ T5674] usb 3-1: SerialNumber: syz [ 196.676811][ T5674] uvcvideo 3-1:1.0: Found UVC 1.00 device syz (046d:0821) [ 196.870233][ T5674] uvcvideo 3-1:1.0: No streaming interface found for terminal 32770. [ 196.967809][ T7126] netlink: 12 bytes leftover after parsing attributes in process `syz.0.437'. [ 197.026875][ T5681] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 197.296131][ T5681] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 197.329764][ T5681] usb 2-1: USB disconnect, device number 16 [ 197.718186][ T5612] usb 3-1: USB disconnect, device number 14 [ 198.101241][ T7154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.153136][ T7154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.447573][ T5688] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 198.619945][ T5688] usb 3-1: Using ep0 maxpacket: 32 [ 198.638885][ T5688] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 198.670249][ T5688] usb 3-1: config 0 interface 0 has no altsetting 0 [ 198.687335][ T5688] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 198.696432][ T5688] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.720731][ T5688] usb 3-1: config 0 descriptor?? [ 198.927275][ T42] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 199.105715][ T42] usb 1-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=97.b4 [ 199.125503][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.167668][ T42] gspca_main: sunplus-2.14.0 probing 046d:0960 [ 199.205050][ T7190] xt_CT: You must specify a L4 protocol and not use inversions on it [ 199.387870][ T7162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.436056][ T7162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.485761][ T7162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.508521][ T7197] SET target dimension over the limit! [ 199.518585][ T7162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.687943][ T42] gspca_sunplus: reg_w_riv err -110 [ 199.704401][ T42] sunplus 1-1:8.0: probe with driver sunplus failed with error -110 [ 199.799797][ T42] usb 1-1: USB disconnect, device number 22 [ 200.133062][ T5674] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 200.253427][ T7229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.275786][ T7229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.297310][ T5674] usb 2-1: Using ep0 maxpacket: 32 [ 200.319190][ T5674] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.332241][ T7229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.360317][ T5674] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=8a.0a [ 200.370342][ T7229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.384837][ T5674] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.399145][ T5674] usb 2-1: Product: syz [ 200.406708][ T5674] usb 2-1: Manufacturer: syz [ 200.424100][ T5674] usb 2-1: SerialNumber: syz [ 200.435680][ T5674] usb 2-1: config 0 descriptor?? [ 200.467099][ T5674] xr_serial 2-1:0.0: failed to claim sibling interface: -16 [ 200.491576][ T5674] xr_serial 2-1:0.0: probe with driver xr_serial failed with error -16 [ 200.683815][ T7216] sctp: [Deprecated]: syz.1.454 (pid 7216) Use of int in maxseg socket option. [ 200.683815][ T7216] Use struct sctp_assoc_value instead [ 200.928703][ T7254] netlink: 92 bytes leftover after parsing attributes in process `syz.3.463'. [ 201.072108][ T5688] usbhid 3-1:0.0: can't add hid device: -71 [ 201.095449][ T5681] usb 2-1: USB disconnect, device number 17 [ 201.098177][ T5688] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 201.146349][ T5688] usb 3-1: USB disconnect, device number 15 [ 201.314603][ T7264] tipc: Enabling of bearer rejected, failed to enable media [ 201.350063][ T5617] Bluetooth: hci0: command 0x0406 tx timeout [ 201.351316][ T5619] Bluetooth: hci2: command 0x0406 tx timeout [ 201.356291][ T5617] Bluetooth: hci4: command 0x0406 tx timeout [ 201.362153][ T5626] Bluetooth: hci1: command 0x0406 tx timeout [ 201.362226][ T5626] Bluetooth: hci3: command 0x0406 tx timeout [ 202.236450][ T7284] random: crng reseeded on system resumption [ 202.483816][ T7296] netlink: 28 bytes leftover after parsing attributes in process `syz.3.478'. [ 202.496059][ T7296] netlink: 28 bytes leftover after parsing attributes in process `syz.3.478'. [ 202.509998][ T7297] netlink: 164 bytes leftover after parsing attributes in process `syz.2.476'. [ 202.733677][ T7305] netlink: 'syz.3.480': attribute type 11 has an invalid length. [ 202.772729][ T7305] netlink: 148 bytes leftover after parsing attributes in process `syz.3.480'. [ 202.812908][ T7305] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality. [ 202.847230][ T42] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 203.007373][ T42] usb 3-1: Using ep0 maxpacket: 16 [ 203.047504][ T42] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 203.096583][ T42] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 203.128728][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.173777][ T42] usb 3-1: config 0 descriptor?? [ 203.232147][ T7312] kvm: requested 79619 ns i8254 timer period limited to 200000 ns [ 203.266163][ T7312] kvm: requested 185219 ns i8254 timer period limited to 200000 ns [ 203.404263][ T7312] kvm: requested 62857 ns i8254 timer period limited to 200000 ns [ 203.435924][ T7312] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 203.451446][ T7312] kvm: requested 143314 ns i8254 timer period limited to 200000 ns [ 203.494787][ T7312] kvm: requested 72914 ns i8254 timer period limited to 200000 ns [ 203.530848][ T7312] kvm: requested 43580 ns i8254 timer period limited to 200000 ns [ 204.508665][ T7338] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 204.822724][ T7341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.835554][ T7341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.866523][ T7341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.884210][ T7341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.057054][ T7348] netlink: 'syz.1.496': attribute type 1 has an invalid length. [ 205.100105][ T7348] 8021q: adding VLAN 0 to HW filter on device bond1 [ 205.134597][ T7350] bond1: (slave veth3): Enslaving as an active interface with a down link [ 205.158729][ T7348] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.165924][ T7348] bridge0: port 2(bridge_slave_1) entered listening state [ 205.173214][ T7348] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.180314][ T7348] bridge0: port 1(bridge_slave_0) entered listening state [ 205.251038][ T7348] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 205.308365][ T7350] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 205.320265][ T7350] bond1: (slave batadv1): making interface the new active one [ 205.357352][ T7350] batadv1: entered promiscuous mode [ 205.369057][ T7350] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 205.536253][ T42] usbhid 3-1:0.0: can't add hid device: -71 [ 205.563245][ T42] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 205.602468][ T42] usb 3-1: USB disconnect, device number 16 [ 206.010526][ T7377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.019614][ T7377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.031391][ T42] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 206.036515][ T7377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.048578][ T7377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.097405][ T5688] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 206.187262][ T1215] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 206.198774][ T42] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 206.209049][ T42] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 206.220216][ T42] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 206.234810][ T42] usb 3-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 206.244182][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.260359][ T42] ttusb_dec_send_command: command bulk message failed: error -8 [ 206.268432][ T5688] usb 2-1: Using ep0 maxpacket: 32 [ 206.274353][ T42] ttusb-dec 3-1:1.0: probe with driver ttusb-dec failed with error -8 [ 206.284385][ T5688] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 206.295318][ T5688] usb 2-1: config 0 has no interface number 0 [ 206.303452][ T5688] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 206.312603][ T5688] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.320783][ T5688] usb 2-1: Product: syz [ 206.324971][ T5688] usb 2-1: Manufacturer: syz [ 206.329643][ T5688] usb 2-1: SerialNumber: syz [ 206.335988][ T5688] usb 2-1: config 0 descriptor?? [ 206.338935][ T1215] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 206.344460][ T5688] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 206.354766][ T1215] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 206.361343][ T5688] usb 2-1: selecting invalid altsetting 1 [ 206.361362][ T5688] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 206.365220][ T5688] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 206.375065][ T1215] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 206.379012][ T5688] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 206.386271][ T1215] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 206.396048][ T5688] usb 2-1: media controller created [ 206.424873][ T1215] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.444735][ T7373] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 206.452946][ T5688] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 206.461397][ T5681] usb 3-1: USB disconnect, device number 17 [ 206.552186][ T7366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.561382][ T7366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.606143][ T5688] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 206.619802][ T5688] zl10353_read_register: readreg error (reg=127, ret==-71) [ 206.630331][ T5688] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 206.741984][ T5688] usb 2-1: USB disconnect, device number 18 [ 206.799790][ T7381] netlink: 'syz.4.509': attribute type 11 has an invalid length. [ 206.916455][ T7373] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 207.255045][ T7399] netlink: 12 bytes leftover after parsing attributes in process `syz.3.517'. [ 207.339122][ T1215] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 207.366417][ T1215] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input14 [ 207.822429][ T7422] netlink: 'syz.1.527': attribute type 10 has an invalid length. [ 207.844984][ T29] audit: type=1326 audit(1786123207.083:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7423 comm="syz.4.528" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f04d0b9e0d9 code=0x0 [ 207.860985][ T7422] netlink: 2 bytes leftover after parsing attributes in process `syz.1.527'. [ 207.891424][ T7422] bond0: entered promiscuous mode [ 207.896655][ T7422] bond_slave_0: entered promiscuous mode [ 207.902877][ T7422] bond_slave_1: entered promiscuous mode [ 207.911058][ T7422] bridge0: port 3(bond0) entered blocking state [ 207.917981][ T7422] bridge0: port 3(bond0) entered disabled state [ 207.935106][ T7422] bond0: entered allmulticast mode [ 207.956066][ T7427] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 207.966560][ T7422] bond_slave_0: entered allmulticast mode [ 207.977409][ T42] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 207.990933][ T7422] bond_slave_1: entered allmulticast mode [ 208.010169][ T7422] bridge0: port 3(bond0) entered blocking state [ 208.016575][ T7422] bridge0: port 3(bond0) entered listening state [ 208.085560][ T5688] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 208.104963][ T5688] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 208.124163][ T5688] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 208.136644][ T5688] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 208.163241][ T42] usb 3-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 208.186876][ T5688] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 208.200578][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.212449][ T5688] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 208.226364][ T42] usb 3-1: Product: syz [ 208.249733][ T42] usb 3-1: Manufacturer: syz [ 208.269324][ T42] usb 3-1: SerialNumber: syz [ 208.296978][ T5688] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [] on [ 208.312181][ T42] usb 3-1: config 0 descriptor?? [ 208.337830][ T42] hub 3-1:0.0: bad descriptor, ignoring hub [ 208.366853][ T42] hub 3-1:0.0: probe with driver hub failed with error -5 [ 208.397777][ T42] f81232 3-1:0.0: f81534a converter detected [ 208.553181][ T42] usb 3-1: f81534a converter now attached to ttyUSB0 [ 208.610015][ T7436] netlink: 20 bytes leftover after parsing attributes in process `syz.0.505'. [ 208.867698][ T1215] usb 3-1: USB disconnect, device number 18 [ 208.915533][ T1215] f81534a ttyUSB0: f81534a converter now disconnected from ttyUSB0 [ 208.959607][ T1215] f81232 3-1:0.0: device disconnected [ 209.491926][ T7458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.606822][ T7458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.627484][ T5727] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 209.713286][ T42] usb 1-1: USB disconnect, device number 23 [ 209.713436][ C0] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 209.788110][ T5727] usb 3-1: too many configurations: 16, using maximum allowed: 8 [ 209.856605][ T5727] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice= 0.00 [ 209.883122][ T5727] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.914252][ T5727] usb 3-1: Product: syz [ 209.939409][ T5727] usb 3-1: Manufacturer: syz [ 209.956213][ T5727] usb 3-1: SerialNumber: syz [ 210.190620][ T5727] ath6kl: Failed to submit usb control message: -71 [ 210.218360][ T5727] ath6kl: unable to send the bmi data to the device: -71 [ 210.252548][ T5727] ath6kl: Unable to send get target info: -71 [ 210.282917][ T5727] ath6kl: Failed to init ath6kl core: -71 [ 210.322881][ T5727] ath6kl_usb 3-1:1.0: probe with driver ath6kl_usb failed with error -71 [ 210.395218][ T5727] usb 3-1: USB disconnect, device number 19 [ 210.636727][ T7476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.681652][ T7476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.892760][ T7484] xt_SECMARK: invalid mode: 2 [ 211.041434][ T7488] CUSE: DEVNAME unspecified [ 211.116328][ T7495] netlink: 32 bytes leftover after parsing attributes in process `syz.0.546'. [ 211.125893][ T7494] batadv_slave_1: entered promiscuous mode [ 211.225759][ T7489] batadv_slave_1: left promiscuous mode [ 211.260061][ T7498] input: syz1 as /devices/virtual/input/input15 [ 211.381458][ T7501] netlink: 'syz.0.551': attribute type 1 has an invalid length. [ 211.436608][ T7505] netlink: 40 bytes leftover after parsing attributes in process `syz.0.551'. [ 211.532178][ T7501] 8021q: adding VLAN 0 to HW filter on device bond1 [ 211.541883][ T7512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.555'. [ 211.636414][ T7501] bond1: (slave veth0_to_bond): making interface the new active one [ 211.691664][ T7501] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 211.767874][ T5688] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 211.810733][ T7521] netlink: 'syz.1.557': attribute type 11 has an invalid length. [ 211.868274][ T7523] netlink: 8 bytes leftover after parsing attributes in process `syz.0.558'. [ 211.881211][ T7523] netlink: 36 bytes leftover after parsing attributes in process `syz.0.558'. [ 212.031507][ T5688] usb 3-1: Using ep0 maxpacket: 16 [ 212.061265][ T5688] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 212.076607][ T7525] netlink: 20 bytes leftover after parsing attributes in process `syz.1.559'. [ 212.097406][ T5688] usb 3-1: config 0 has no interface number 0 [ 212.131737][ T5688] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 212.141085][ T5688] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.162335][ T5688] usb 3-1: Product: syz [ 212.173012][ T5688] usb 3-1: Manufacturer: syz [ 212.186956][ T5688] usb 3-1: SerialNumber: syz [ 212.237500][ T5688] usb 3-1: config 0 descriptor?? [ 212.271068][ T5688] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 212.938628][ T5674] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 213.004159][ T5688] gspca_spca1528: reg_w err -71 [ 213.037612][ T7540] tipc: Enabling of bearer rejected, failed to enable media [ 213.038224][ T5688] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71 [ 213.100170][ T5674] usb 1-1: Using ep0 maxpacket: 8 [ 213.120321][ T5688] usb 3-1: USB disconnect, device number 20 [ 213.124147][ T5674] usb 1-1: unable to get BOS descriptor or descriptor too short [ 213.149458][ T5674] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 213.165330][ T5674] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 213.201510][ T5674] usb 1-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40 [ 213.234940][ T5674] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.253376][ T5674] usb 1-1: Product: syz [ 213.260827][ T5674] usb 1-1: Manufacturer: syz [ 213.270869][ T5674] usb 1-1: SerialNumber: syz [ 213.639800][ T7552] mmap: syz.0.563 (7552) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 213.770769][ T7560] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.778268][ T7560] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.956379][ T7565] netlink: 24 bytes leftover after parsing attributes in process `syz.4.573'. [ 214.465015][ T7575] --map-set only usable from mangle table [ 214.501341][ T7576] syzkaller0: entered promiscuous mode [ 214.514033][ T7576] syzkaller0: entered allmulticast mode [ 214.592382][ T7578] netlink: 104 bytes leftover after parsing attributes in process `syz.1.579'. [ 214.602672][ T5612] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 214.779499][ T5612] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 214.811895][ T5612] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 214.849471][ T5612] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 214.901433][ T5612] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 214.927665][ T5612] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.954123][ T7572] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 215.247309][ T5727] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 215.437287][ T5727] usb 2-1: Using ep0 maxpacket: 8 [ 215.456884][ T5727] usb 2-1: config 31 has an invalid interface number: 197 but max is 0 [ 215.476529][ T5727] usb 2-1: config 31 has no interface number 0 [ 215.502565][ T5727] usb 2-1: config 31 interface 197 has no altsetting 0 [ 215.535224][ T5727] usb 2-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=4a.36 [ 215.554923][ T5727] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.569169][ T5727] usb 2-1: Product: syz [ 215.578150][ T5727] usb 2-1: Manufacturer: syz [ 215.589000][ T5727] usb 2-1: SerialNumber: syz [ 215.748055][ T5674] usb 1-1: 0:1 : does not exist [ 215.777988][ T5612] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 215.825183][ T5612] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input16 [ 216.026570][ T5674] usb 1-1: USB disconnect, device number 24 [ 216.467472][ T5674] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 216.561059][ T12] batadv1: left promiscuous mode [ 216.599383][ T5727] gspca_main: etoms-2.14.0 probing 102c:6151 [ 216.639347][ T5674] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 216.654134][ T5674] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 216.665255][ T5674] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 216.715081][ T5674] usb 1-1: config 0 interface 0 has no altsetting 0 [ 216.762044][ T5674] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 216.802292][ T5674] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 216.820196][ T5674] usb 1-1: config 0 interface 0 has no altsetting 0 [ 216.843821][ T5674] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 216.862619][ T5674] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 216.906731][ T5674] usb 1-1: config 0 interface 0 has no altsetting 0 [ 216.929096][ T5674] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 216.956436][ T5674] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 217.005303][ T5674] usb 1-1: config 0 interface 0 has no altsetting 0 [ 217.050171][ T5674] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 217.061579][ T5674] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 217.096770][ T5674] usb 1-1: config 0 interface 0 has no altsetting 0 [ 217.128113][ T5674] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 217.146362][ T5674] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 217.187054][ T7604] kvm: pic: non byte write [ 217.193743][ T5674] usb 1-1: config 0 interface 0 has no altsetting 0 [ 217.207995][ T5674] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 217.228366][ T5674] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 217.255224][ T5674] usb 1-1: config 0 interface 0 has no altsetting 0 [ 217.278348][ T5674] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 217.294113][ T5674] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 217.326778][ T5674] usb 1-1: config 0 interface 0 has no altsetting 0 [ 217.341421][ T5674] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 217.352621][ T5674] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 217.362036][ T5674] usb 1-1: Product: syz [ 217.366433][ T5674] usb 1-1: Manufacturer: syz [ 217.371945][ T5674] usb 1-1: SerialNumber: syz [ 217.382369][ T5674] usb 1-1: config 0 descriptor?? [ 217.410874][ T5674] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 217.634052][ T5727] usb 1-1: USB disconnect, device number 25 [ 217.655745][ T5727] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 218.006918][ T7621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.023632][ T7621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.036822][ T7624] netlink: 'syz.2.591': attribute type 1 has an invalid length. [ 218.065144][ T7624] 8021q: adding VLAN 0 to HW filter on device bond4 [ 218.196096][ T5612] usb 2-1: USB disconnect, device number 19 [ 218.389085][ T42] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 218.399359][ T7631] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 218.460560][ T5674] usb 4-1: USB disconnect, device number 13 [ 218.460618][ C1] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 218.561998][ T42] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 218.595530][ T42] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 218.620966][ T42] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 218.632734][ T42] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 218.645330][ T7640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.598'. [ 218.662679][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.691668][ T7640] netlink: 36 bytes leftover after parsing attributes in process `syz.0.598'. [ 218.708677][ T7627] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 218.875669][ T7647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.898737][ T7647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.036375][ T7654] netlink: 'syz.3.603': attribute type 1 has an invalid length. [ 219.121755][ T7654] 8021q: adding VLAN 0 to HW filter on device bond1 [ 219.211271][ T7659] bond1: (slave veth3): Enslaving as an active interface with a down link [ 219.244762][ T7654] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.252998][ T7654] bridge0: port 2(bridge_slave_1) entered listening state [ 219.260450][ T7654] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.267637][ T7654] bridge0: port 1(bridge_slave_0) entered listening state [ 219.358216][ T7654] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 219.412072][ T7663] netlink: 24 bytes leftover after parsing attributes in process `syz.0.605'. [ 219.430779][ T7664] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 219.470387][ T7664] bond1: (slave batadv1): making interface the new active one [ 219.488466][ T7664] batadv1: entered promiscuous mode [ 219.494334][ T7664] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 219.623035][ T7669] netlink: 28 bytes leftover after parsing attributes in process `syz.3.606'. [ 219.659012][ T7669] netlink: 28 bytes leftover after parsing attributes in process `syz.3.606'. [ 220.067999][ T5681] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 220.088013][ T42] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 220.096405][ T42] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input17 [ 220.267590][ T5681] usb 4-1: Using ep0 maxpacket: 32 [ 220.284368][ T5681] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 220.311906][ T5681] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 130, setting to 64 [ 220.343199][ T5681] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 220.351172][ T7677] netlink: 'syz.0.609': attribute type 10 has an invalid length. [ 220.366039][ T5681] usb 4-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 220.366079][ T7677] netlink: 2 bytes leftover after parsing attributes in process `syz.0.609'. [ 220.402413][ T5681] usb 4-1: Product: syz [ 220.412398][ T7677] bond0: entered promiscuous mode [ 220.412622][ T5681] usb 4-1: Manufacturer: syz [ 220.428053][ T5681] usb 4-1: SerialNumber: syz [ 220.434259][ T7677] bond_slave_0: entered promiscuous mode [ 220.444742][ T5681] usb 4-1: config 0 descriptor?? [ 220.454628][ T7677] bond_slave_1: entered promiscuous mode [ 220.474049][ T7677] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 220.501436][ T5681] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 220.501971][ T7677] bridge0: port 3(bond0) entered blocking state [ 220.542115][ T7677] bridge0: port 3(bond0) entered disabled state [ 220.558749][ T7677] bond0: entered allmulticast mode [ 220.572269][ T7677] bond_slave_0: entered allmulticast mode [ 220.585568][ T7677] bond_slave_1: entered allmulticast mode [ 220.603394][ T7627] netlink: 20 bytes leftover after parsing attributes in process `syz.2.592'. [ 220.614716][ T7677] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 220.682451][ T5681] usb 4-1: USB disconnect, device number 14 [ 220.694326][ T12] usb 4-1: Failed to submit usb control message: -71 [ 220.709628][ T12] usb 4-1: unable to send the bmi data to the device: -71 [ 220.718738][ T12] usb 4-1: unable to get target info from device [ 220.725190][ T12] usb 4-1: could not get target info (-71) [ 220.731315][ T12] usb 4-1: could not probe fw (-71) [ 220.903431][ T7683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.936240][ T7683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.127301][ T5612] usb 1-1: new low-speed USB device number 26 using dummy_hcd [ 221.577461][ T42] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 221.707718][ T5688] usb 3-1: USB disconnect, device number 21 [ 221.713701][ C1] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 221.775469][ T42] usb 2-1: Using ep0 maxpacket: 8 [ 221.850040][ T42] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.908683][ T42] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 221.944158][ T7702] syzkaller1: entered promiscuous mode [ 221.960351][ T7702] syzkaller1: entered allmulticast mode [ 221.973679][ T42] usb 2-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 222.011672][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.119553][ T42] usb 2-1: config 0 descriptor?? [ 222.230777][ T7708] kvm: vcpu 0: requested 148514 ns lapic timer period limited to 200000 ns [ 222.243889][ T7708] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 222.332328][ T7713] netlink: 24 bytes leftover after parsing attributes in process `syz.4.618'. [ 222.685223][ T7719] netlink: 'syz.2.622': attribute type 11 has an invalid length. [ 223.061355][ T7728] netlink: 'syz.2.625': attribute type 1 has an invalid length. [ 223.163317][ T7728] 8021q: adding VLAN 0 to HW filter on device bond5 [ 223.418199][ T7738] netlink: 68 bytes leftover after parsing attributes in process `syz.4.628'. [ 223.677426][ T984] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 223.701413][ T7743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.736002][ T7743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.777046][ T7743] program syz.4.630 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 223.817288][ T984] usb 3-1: device descriptor read/64, error -71 [ 224.077514][ T984] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 224.146702][ T7752] netlink: 'syz.3.634': attribute type 1 has an invalid length. [ 224.179521][ T5681] usb 2-1: USB disconnect, device number 20 [ 224.210148][ T7752] 8021q: adding VLAN 0 to HW filter on device bond2 [ 224.227718][ T984] usb 3-1: device descriptor read/64, error -71 [ 224.234658][ T7754] bond2: (slave geneve2): making interface the new active one [ 224.245443][ T7754] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 224.348317][ T984] usb usb3-port1: attempt power cycle [ 224.355699][ T7756] netlink: 8 bytes leftover after parsing attributes in process `syz.3.635'. [ 224.386264][ T7756] netlink: 36 bytes leftover after parsing attributes in process `syz.3.635'. [ 224.589245][ T7760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.614129][ T7760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.654340][ T7760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.685346][ T7760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.693468][ T5681] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 224.791635][ T984] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 224.817929][ T984] usb 3-1: device descriptor read/8, error -71 [ 224.847258][ T5681] usb 2-1: Using ep0 maxpacket: 32 [ 224.854122][ T5681] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 224.862276][ T5681] usb 2-1: config 0 has no interface number 0 [ 224.877035][ T5681] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 224.886451][ T5681] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.894522][ T5681] usb 2-1: Product: syz [ 224.899210][ T5681] usb 2-1: Manufacturer: syz [ 224.903809][ T5681] usb 2-1: SerialNumber: syz [ 224.910868][ T5681] usb 2-1: config 0 descriptor?? [ 224.920502][ T5681] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 224.930971][ T5681] usb 2-1: selecting invalid altsetting 1 [ 224.936733][ T5681] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 224.948900][ T5681] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 224.959506][ T5681] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 224.968156][ T5681] usb 2-1: media controller created [ 224.982276][ T5681] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 225.057371][ T984] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 225.077938][ T984] usb 3-1: device descriptor read/8, error -71 [ 225.122008][ T7758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.130871][ T7758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.148444][ T5681] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 225.162539][ T5681] zl10353_read_register: readreg error (reg=127, ret==-71) [ 225.171439][ T5681] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 225.187948][ T984] usb usb3-port1: unable to enumerate USB device [ 225.211155][ T5681] usb 2-1: USB disconnect, device number 21 [ 225.315034][ T7771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.324560][ T7771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.277394][ T5612] usb 1-1: device descriptor read/64, error -110 [ 226.457708][ T5681] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 226.517275][ T5674] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 226.527852][ T5612] usb 1-1: new low-speed USB device number 27 using dummy_hcd [ 226.617591][ T5681] usb 2-1: Using ep0 maxpacket: 8 [ 226.630060][ T5681] usb 2-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 226.650411][ T5681] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.667208][ T5681] usb 2-1: Product: syz [ 226.677438][ T5681] usb 2-1: Manufacturer: syz [ 226.677641][ T5612] usb 1-1: device descriptor read/64, error -32 [ 226.691554][ T5681] usb 2-1: SerialNumber: syz [ 226.697358][ T5674] usb 4-1: Using ep0 maxpacket: 16 [ 226.710567][ T5674] usb 4-1: config 3 has an invalid interface number: 231 but max is 0 [ 226.732499][ T5674] usb 4-1: config 3 has no interface number 0 [ 226.747237][ T5674] usb 4-1: config 3 interface 231 altsetting 6 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 226.771512][ T5674] usb 4-1: config 3 interface 231 has no altsetting 0 [ 226.791103][ T5674] usb 4-1: New USB device found, idVendor=0bfd, idProduct=000b, bcdDevice=a9.3d [ 226.806217][ T5612] usb usb1-port1: attempt power cycle [ 226.815900][ T5674] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.829036][ T5674] usb 4-1: Product: syz [ 226.834874][ T5674] usb 4-1: Manufacturer: syz [ 226.842292][ T5674] usb 4-1: SerialNumber: syz [ 226.966958][ T7804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.034788][ T7804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.091847][ T7820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.112374][ T7820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.132995][ T5674] kvaser_usb 4-1:3.231: error -ENODEV: Cannot get usb endpoint(s) [ 227.133243][ T7820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.157092][ T7820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.167460][ T5612] usb 1-1: new low-speed USB device number 28 using dummy_hcd [ 227.176897][ T7804] netlink: 1156 bytes leftover after parsing attributes in process `syz.1.650'. [ 227.205416][ T5674] usb 4-1: USB disconnect, device number 15 [ 227.207827][ T5612] usb 1-1: device descriptor read/8, error -32 [ 227.337654][ T5612] raw-gadget.3 gadget.0: failed to queue reset event [ 227.407406][ T5612] raw-gadget.3 gadget.0: failed to queue resume event [ 227.467329][ T5612] usb 1-1: new low-speed USB device number 29 using dummy_hcd [ 227.497549][ C1] raw-gadget.3 gadget.0: ignoring, device is not running [ 227.504771][ T5612] usb 1-1: device descriptor read/8, error -32 [ 227.631829][ T5612] raw-gadget.3 gadget.0: failed to queue suspend event [ 227.650650][ T5612] usb usb1-port1: unable to enumerate USB device [ 227.672056][ T7822] netlink: 8 bytes leftover after parsing attributes in process `syz.3.658'. [ 227.782438][ T5681] mxuport 2-1:254.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 227.822826][ T5681] mxuport 2-1:254.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 227.846333][ T5681] mxuport 2-1:254.0: probe with driver mxuport failed with error -71 [ 227.913159][ T5681] usb 2-1: USB disconnect, device number 22 [ 228.217887][ T7836] netlink: 12 bytes leftover after parsing attributes in process `syz.1.664'. [ 228.464167][ T7845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.496621][ T7845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.907306][ T5612] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 229.077540][ T5612] usb 2-1: Using ep0 maxpacket: 32 [ 229.084613][ T5612] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 229.093011][ T5612] usb 2-1: config 0 has no interface number 0 [ 229.101805][ T5612] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 229.111859][ T5612] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.120135][ T5612] usb 2-1: Product: syz [ 229.124358][ T5612] usb 2-1: Manufacturer: syz [ 229.129022][ T5612] usb 2-1: SerialNumber: syz [ 229.136116][ T5612] usb 2-1: config 0 descriptor?? [ 229.145283][ T5612] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 229.154148][ T5612] usb 2-1: selecting invalid altsetting 1 [ 229.160293][ T5612] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 229.170956][ T5612] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 229.181595][ T5612] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 229.190787][ T5612] usb 2-1: media controller created [ 229.203575][ T5612] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 229.345549][ T7851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.354848][ T7851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.374148][ T5612] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 229.384959][ T5612] zl10353_read_register: readreg error (reg=127, ret==-71) [ 229.394397][ T5612] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 229.426443][ T5612] usb 2-1: USB disconnect, device number 23 [ 229.553438][ T7859] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 229.674831][ T7684] raw-gadget.3 gadget.0: failed to queue disconnect event [ 229.875917][ T7872] netlink: 8 bytes leftover after parsing attributes in process `syz.3.679'. [ 229.907101][ T7872] netlink: 36 bytes leftover after parsing attributes in process `syz.3.679'. [ 230.669417][ T82] batadv1: left promiscuous mode [ 230.957301][ T5745] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 231.004226][ T7911] netlink: 'syz.3.693': attribute type 1 has an invalid length. [ 231.046811][ T7911] 8021q: adding VLAN 0 to HW filter on device bond3 [ 231.075359][ T7917] bond3: (slave veth5): Enslaving as an active interface with a down link [ 231.128961][ T5745] usb 3-1: config index 0 descriptor too short (expected 1051, got 27) [ 231.141832][ T5745] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 231.150389][ T5745] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 231.159352][ T5745] usb 3-1: config 0 interface 0 altsetting 12 bulk endpoint 0x87 has invalid maxpacket 149 [ 231.170162][ T5745] usb 3-1: config 0 interface 0 has no altsetting 0 [ 231.174298][ T7911] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 231.179043][ T5745] usb 3-1: New USB device found, idVendor=06cd, idProduct=010a, bcdDevice=d9.c3 [ 231.204785][ T5745] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.214585][ T5745] usb 3-1: Product: syz [ 231.247723][ T5745] usb 3-1: Manufacturer: syz [ 231.261245][ T5745] usb 3-1: SerialNumber: syz [ 231.297011][ T5745] usb 3-1: config 0 descriptor?? [ 231.299186][ T7917] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 231.316076][ T7892] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 231.332440][ T7917] bond3: (slave batadv2): making interface the new active one [ 231.362684][ T7917] batadv2: entered promiscuous mode [ 231.377945][ T7917] bond3: (slave batadv2): Enslaving as an active interface with an up link [ 232.103000][ T7937] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.110316][ T7937] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.414730][ T7937] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.464153][ T7937] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.686492][ T29] audit: type=1804 audit(1786123231.923:3): pid=7951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.706" name="/newroot/178/file0" dev="fuse" ino=1 res=1 errno=0 [ 232.931501][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.970304][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.108131][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.158477][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.227325][ T7962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.236668][ T7962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.314795][ T5745] keyspan 3-1:0.0: Keyspan 4 port adapter converter detected [ 233.335427][ T5745] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 7 [ 233.362342][ T5745] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81 [ 233.383390][ T5745] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 233.401277][ T5745] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 233.421974][ T5745] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 82 [ 233.430023][ T5688] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 233.437331][ T5674] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 233.453560][ T5745] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 233.475414][ T5745] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 233.493560][ T5745] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 83 [ 233.505256][ T5745] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 3 [ 233.525734][ T5745] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 233.537102][ T5745] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 84 [ 233.547699][ T5745] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 4 [ 233.560197][ T5745] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 233.598979][ T5688] usb 4-1: Using ep0 maxpacket: 8 [ 233.601007][ T5674] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 233.611170][ T5688] usb 4-1: config 31 has an invalid interface number: 197 but max is 0 [ 233.633444][ T5745] usb 3-1: USB disconnect, device number 26 [ 233.635190][ T5674] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.639617][ T5688] usb 4-1: config 31 has no interface number 0 [ 233.665427][ T5688] usb 4-1: config 31 interface 197 has no altsetting 0 [ 233.675299][ T5745] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 233.690140][ T5688] usb 4-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=4a.36 [ 233.702110][ T5688] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.712663][ T5674] usb 2-1: Product: syz [ 233.713619][ T5745] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 233.730252][ T5688] usb 4-1: Product: syz [ 233.732315][ T5674] usb 2-1: Manufacturer: syz [ 233.734465][ T5688] usb 4-1: Manufacturer: syz [ 233.751423][ T5688] usb 4-1: SerialNumber: syz [ 233.756677][ T5745] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 233.769007][ T5674] usb 2-1: SerialNumber: syz [ 233.788859][ T5745] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 233.805421][ T5745] keyspan 3-1:0.0: device disconnected [ 234.072067][ T7967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.710'. [ 234.346391][ T7978] netlink: 'syz.4.714': attribute type 1 has an invalid length. [ 234.501546][ T7978] 8021q: adding VLAN 0 to HW filter on device bond1 [ 234.637119][ T7992] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 234.648025][ T7993] netlink: 4 bytes leftover after parsing attributes in process `syz.0.715'. [ 234.699375][ T7986] bond1: (slave geneve2): making interface the new active one [ 234.720431][ T5688] gspca_main: etoms-2.14.0 probing 102c:6151 [ 234.731388][ T7986] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 234.808694][ T7984] vlan3: entered promiscuous mode [ 234.826974][ T7984] hsr0: entered promiscuous mode [ 234.833222][ T7984] vlan3: entered allmulticast mode [ 234.838877][ T7984] hsr0: entered allmulticast mode [ 234.844087][ T7984] hsr_slave_0: entered allmulticast mode [ 234.851009][ T7984] hsr_slave_1: entered allmulticast mode [ 234.949535][ T7993] hsr_slave_0: left promiscuous mode [ 234.959833][ T7993] hsr_slave_1: left promiscuous mode [ 235.177393][ T984] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 235.337249][ T984] usb 3-1: Using ep0 maxpacket: 16 [ 235.350832][ T984] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.371119][ T984] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.387798][ T984] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 235.412222][ T984] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 235.426796][ T984] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.445723][ T984] usb 3-1: config 0 descriptor?? [ 235.748178][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 235.757757][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 235.894926][ T984] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0004/input/input18 [ 236.029262][ T984] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 236.124034][ T8000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.137902][ T8000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.169685][ T5727] usb 3-1: USB disconnect, device number 27 [ 236.176726][ T8014] netlink: 92 bytes leftover after parsing attributes in process `syz.4.725'. [ 236.245304][ T984] usb 4-1: USB disconnect, device number 16 [ 236.323567][ T5674] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 236.365370][ T5674] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 236.391432][ T30] INFO: task kworker/1:0:24 blocked for more than 143 seconds. [ 236.401072][ T5674] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 236.422498][ T30] Tainted: G L syzkaller #0 [ 236.430612][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 236.440932][ T30] task:kworker/1:0 state:D stack:20816 pid:24 tgid:24 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 236.457102][ T30] Workqueue: usb_hub_wq hub_event [ 236.463136][ T30] Call Trace: [ 236.470917][ T30] [ 236.474100][ T30] __schedule+0x17d9/0x56c0 [ 236.490976][ T30] ? check_noncircular+0xda/0x150 [ 236.496319][ T30] ? __pfx___schedule+0x10/0x10 [ 236.501594][ T30] ? schedule+0x90/0x2b0 [ 236.508709][ T30] schedule+0x164/0x2b0 [ 236.513232][ T30] schedule_timeout+0xc0/0x2c0 [ 236.518297][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 236.523831][ T30] ? wait_for_completion+0x272/0x5e0 [ 236.529340][ T30] ? wait_for_completion+0x272/0x5e0 [ 236.534780][ T30] wait_for_completion+0x2ca/0x5e0 [ 236.540233][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 236.545975][ T30] ? kobject_put+0x50f/0x550 [ 236.551226][ T30] i2c_del_adapter+0x281/0x430 [ 236.559737][ T30] ? __pfx_i2c_del_adapter+0x10/0x10 [ 236.565198][ T30] ? dvb_usbv2_exit+0x94d/0xb80 [ 236.570270][ T30] dvb_usbv2_probe+0x4bb/0x3950 [ 236.575318][ T30] ? __pfx_dvb_usbv2_probe+0x10/0x10 [ 236.580830][ T30] ? __pm_runtime_set_status+0x994/0xc80 [ 236.586512][ T30] usb_probe_interface+0x653/0xc60 [ 236.591807][ T30] ? __pfx_usb_probe_interface+0x10/0x10 [ 236.597565][ T30] really_probe+0x254/0xae0 [ 236.602113][ T30] __driver_probe_device+0x1e8/0x360 [ 236.608047][ T30] driver_probe_device+0x4f/0x240 [ 236.613198][ T30] __device_attach_driver+0x270/0x410 [ 236.618693][ T30] bus_for_each_drv+0x258/0x2f0 [ 236.623591][ T30] ? __pfx___device_attach_driver+0x10/0x10 [ 236.632543][ T30] ? __pfx_bus_for_each_drv+0x10/0x10 [ 236.638038][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 236.643287][ T30] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 236.649144][ T30] __device_attach+0x2c4/0x450 [ 236.653918][ T30] ? __pfx___device_attach+0x10/0x10 [ 236.659348][ T30] ? do_raw_spin_unlock+0xf5/0x210 [ 236.664484][ T30] ? _raw_spin_unlock+0x28/0x50 [ 236.669416][ T30] device_initial_probe+0xa1/0xd0 [ 236.674463][ T30] bus_probe_device+0x12a/0x220 [ 236.679461][ T30] device_add+0x7d7/0xb80 [ 236.683822][ T30] usb_set_configuration+0x1ad8/0x2180 [ 236.689370][ T30] usb_generic_driver_probe+0x8d/0x150 [ 236.694841][ T30] usb_probe_device+0x1c3/0x3b0 [ 236.699830][ T30] ? __pfx_usb_probe_device+0x10/0x10 [ 236.705235][ T30] really_probe+0x254/0xae0 [ 236.710281][ T30] __driver_probe_device+0x1e8/0x360 [ 236.715693][ T30] driver_probe_device+0x4f/0x240 [ 236.721040][ T30] __device_attach_driver+0x270/0x410 [ 236.726451][ T30] bus_for_each_drv+0x258/0x2f0 [ 236.731386][ T30] ? __pfx___device_attach_driver+0x10/0x10 [ 236.737537][ T30] ? __pfx_bus_for_each_drv+0x10/0x10 [ 236.742950][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 236.748511][ T30] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 236.754433][ T30] __device_attach+0x2c4/0x450 [ 236.759563][ T30] ? __pfx___device_attach+0x10/0x10 [ 236.764897][ T30] ? do_raw_spin_unlock+0xf5/0x210 [ 236.770076][ T30] ? _raw_spin_unlock+0x28/0x50 [ 236.774945][ T30] device_initial_probe+0xa1/0xd0 [ 236.780115][ T30] bus_probe_device+0x12a/0x220 [ 236.785003][ T30] device_add+0x7d7/0xb80 [ 236.791009][ T30] usb_new_device+0x99d/0x1620 [ 236.795794][ T30] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 236.801907][ T30] ? __pfx_usb_new_device+0x10/0x10 [ 236.807197][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 236.812730][ T30] hub_event+0x28e8/0x4d30 [ 236.817398][ T30] ? __pfx_hub_event+0x10/0x10 [ 236.822224][ T30] ? process_scheduled_works+0xa20/0x14e0 [ 236.828254][ T30] ? rcu_is_watching+0x15/0xb0 [ 236.833058][ T30] ? process_scheduled_works+0xa20/0x14e0 [ 236.838935][ T30] process_scheduled_works+0xa8e/0x14e0 [ 236.844520][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 236.850575][ T30] ? assign_work+0x3cf/0x5d0 [ 236.855179][ T30] worker_thread+0xa47/0xfb0 [ 236.859931][ T30] kthread+0x388/0x470 [ 236.864029][ T30] ? __pfx_worker_thread+0x10/0x10 [ 236.869314][ T30] ? __pfx_kthread+0x10/0x10 [ 236.873943][ T30] ret_from_fork+0x514/0xb70 [ 236.878684][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 236.883830][ T30] ? __switch_to+0xc89/0x1420 [ 236.888629][ T30] ? __pfx_kthread+0x10/0x10 [ 236.893354][ T30] ret_from_fork_asm+0x1a/0x30 [ 236.898282][ T30] [ 236.901532][ T30] [ 236.901532][ T30] Showing all locks held in the system: [ 236.904249][ T5674] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 236.909627][ T30] 3 locks held by kworker/u8:0/12: [ 236.909644][ T30] #0: ffff8880320df140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 236.934652][ T30] #1: ffffc90000117c40 [ 236.934667][ T5674] usb 2-1: USB disconnect, device number 24 [ 236.945060][ T30] ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 236.956222][ T30] #2: ffffffff90027d40 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x116/0x15c0 [ 236.965876][ T30] 5 locks held by kworker/1:0/24: [ 236.970980][ T30] #0: ffff888020292540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 236.982599][ T30] #1: ffffc900001e7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 236.994538][ T30] #2: ffff88802a3ba1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 237.003640][ T30] #3: ffff88802cf791d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 237.012970][ T30] #4: ffff88802f06b1a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 237.022406][ T30] 1 lock held by khungtaskd/30: [ 237.027847][ T30] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 237.039158][ T30] 1 lock held by klogd/4969: [ 237.043787][ T30] #0: ffff8880b873b160 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 237.053805][ T30] 2 locks held by getty/5368: [ 237.058528][ T30] #0: ffff8880369d10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 237.068926][ T30] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 237.079103][ T30] 4 locks held by udevd/5613: [ 237.083769][ T30] #0: ffff888025614878 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xa4/0xca0 [ 237.092611][ T30] #1: ffff88807b8d9880 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5d/0x420 [ 237.102088][ T30] #2: ffff8880263b4008 (kn->active#30){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 237.112125][ T30] #3: ffff88802cf791d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 237.121537][ T30] 2 locks held by syz.4.726/8015: [ 237.126567][ T30] #0: ffffffff90027d40 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 237.135609][ T30] #1: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 237.146570][ T30] 1 lock held by syz.1.727/8017: [ 237.152166][ T30] #0: ffff888077ac7540 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x82/0x220 [ 237.163357][ T30] 2 locks held by dhcpcd/8019: [ 237.168349][ T30] #0: ffff888022ba2260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe90 [ 237.178232][ T30] #1: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 237.189392][ T30] [ 237.191773][ T30] ============================================= [ 237.191773][ T30] [ 237.200333][ T30] NMI backtrace for cpu 0 [ 237.200366][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 237.200390][ T30] Tainted: [L]=SOFTLOCKUP [ 237.200395][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 237.200405][ T30] Call Trace: [ 237.200411][ T30] [ 237.200419][ T30] dump_stack_lvl+0xe8/0x150 [ 237.200447][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 237.200471][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 237.200497][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 237.200518][ T30] sys_info+0x135/0x170 [ 237.200534][ T30] watchdog+0xfd7/0x1030 [ 237.200559][ T30] ? watchdog+0x1c7/0x1030 [ 237.200583][ T30] kthread+0x388/0x470 [ 237.200606][ T30] ? __pfx_watchdog+0x10/0x10 [ 237.200622][ T30] ? __pfx_kthread+0x10/0x10 [ 237.200644][ T30] ret_from_fork+0x514/0xb70 [ 237.200669][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 237.200691][ T30] ? __switch_to+0xc89/0x1420 [ 237.200712][ T30] ? __pfx_kthread+0x10/0x10 [ 237.200733][ T30] ret_from_fork_asm+0x1a/0x30 [ 237.200770][ T30] [ 237.200777][ T30] Sending NMI from CPU 0 to CPUs 1: [ 237.316752][ C1] NMI backtrace for cpu 1 [ 237.316777][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 237.316801][ C1] Tainted: [L]=SOFTLOCKUP [ 237.316806][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 237.316824][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 237.316848][ C1] Code: cb 7e 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 73 ce 18 00 fb f4 4c 06 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 237.316861][ C1] RSP: 0018:ffffc90000197e40 EFLAGS: 00000246 [ 237.316875][ C1] RAX: 000000000029a7a3 RBX: ffffffff819b4450 RCX: 0000000080000001 [ 237.316886][ C1] RDX: 0000000000000001 RSI: ffffffff8e2288d0 RDI: ffffffff8c4bbe80 [ 237.316897][ C1] RBP: ffffc90000197f10 R08: ffff8880b87338db R09: 1ffff110170e671b [ 237.316908][ C1] R10: dffffc0000000000 R11: ffffed10170e671c R12: 0000000000000000 [ 237.316919][ C1] R13: 1ffff11003c54000 R14: 1ffff92000032fd0 R15: dffffc0000000000 [ 237.316930][ C1] FS: 0000000000000000(0000) GS:ffff888125055000(0000) knlGS:0000000000000000 [ 237.316943][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 237.316953][ C1] CR2: 000055d0a1a277b8 CR3: 000000007615e000 CR4: 00000000003526f0 [ 237.316967][ C1] Call Trace: [ 237.316975][ C1] [ 237.316981][ C1] default_idle+0x9/0x20 [ 237.317000][ C1] default_idle_call+0x72/0xb0 [ 237.317021][ C1] do_idle+0x2e0/0x540 [ 237.317040][ C1] ? __pfx_do_idle+0x10/0x10 [ 237.317061][ C1] cpu_startup_entry+0x43/0x60 [ 237.317078][ C1] start_secondary+0x101/0x110 [ 237.317097][ C1] common_startup_64+0x13e/0x157 [ 237.317121][ C1] [ 237.317835][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 237.317854][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 237.317875][ T30] Tainted: [L]=SOFTLOCKUP [ 237.317882][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 237.317891][ T30] Call Trace: [ 237.317900][ T30] [ 237.317907][ T30] vpanic+0x56c/0xa60 [ 237.317933][ T30] ? __pfx___schedule+0x10/0x10 [ 237.317954][ T30] ? __pfx_vpanic+0x10/0x10 [ 237.317983][ T30] panic+0xc5/0xd0 [ 237.318004][ T30] ? __pfx_panic+0x10/0x10 [ 237.318024][ T30] ? preempt_schedule_common+0x82/0xd0 [ 237.318051][ T30] ? preempt_schedule_thunk+0x16/0x40 [ 237.318070][ T30] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 237.318091][ T30] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 237.318113][ T30] watchdog+0x1030/0x1030 [ 237.318139][ T30] ? watchdog+0x1c7/0x1030 [ 237.318163][ T30] kthread+0x388/0x470 [ 237.318184][ T30] ? __pfx_watchdog+0x10/0x10 [ 237.318201][ T30] ? __pfx_kthread+0x10/0x10 [ 237.318223][ T30] ret_from_fork+0x514/0xb70 [ 237.318249][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 237.318271][ T30] ? __switch_to+0xc89/0x1420 [ 237.318292][ T30] ? __pfx_kthread+0x10/0x10 [ 237.318314][ T30] ret_from_fork_asm+0x1a/0x30 [ 237.318350][ T30] [ 237.612921][ T30] Kernel Offset: disabled [ 237.617250][ T30] Rebooting in 86400 seconds..