last executing test programs: 59.074275439s ago: executing program 2 (id=2869): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f3, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0xab00, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x2, 0x2f, 0x0, @empty, @empty}}}}) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x3c}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) socket$inet(0x2, 0x80001, 0x84) 58.52805356s ago: executing program 2 (id=2871): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={0x3c, 0x41, 0x107, 0x70bd2c, 0x25dfdbfa, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x24, 0x1, 0x0, 0x1, [@nested={0x20, 0x10, 0x0, 0x1, [@typed={0x14, 0xc, 0x0, 0x0, @ipv6=@mcast2}, @nested={0x8, 0xb, 0x0, 0x1, [@generic="07499ff3"]}]}]}]}, 0x3c}, 0x1, 0x21, 0x0, 0x4c084}, 0xc000) 57.612033692s ago: executing program 1 (id=2874): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x1, 0x1, 0x6000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c00018006000600843b00000c000280080003"], 0x30}, 0x1, 0x3000000, 0x0, 0x4048011}, 0xc000) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_connect$uac2(0x2, 0xa3, &(0x7f0000000e40)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x91, 0x3, 0x1, 0x4, 0xc0, 0x1, {0x8, 0xb, 0x0, 0x2, 0x1, 0x0, 0x20, 0x80}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x7, 0x2, 0x21, 0x9}, [@output_terminal={0xc, 0x24, 0x3, 0x2, 0x1ff, 0x7, 0x4, 0x8, 0x906, 0x1}, @output_terminal={0xc, 0x24, 0x3, 0x3, 0x304, 0x2, 0x3, 0x2, 0x3, 0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x6, 0x74, 0x1, 0x1002, 0x35, 0x7, 0x6}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x86, 0xb7, 0x3, {0x8, 0x25, 0x1, 0x82, 0xc, 0x6, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x8a, 0x6, 0x4, {0x8, 0x25, 0x1, 0x1, 0x0, 0x9}}}}}}}}]}}, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0}) 57.186910375s ago: executing program 4 (id=2877): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8085, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x1e) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x105801, 0x0) ioctl$BLKFRAGET(r2, 0x1265, &(0x7f0000000140)) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000280)={'gretap0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x8, 0x700, 0x4f, 0x200, {{0x1d, 0x4, 0x2, 0xd, 0x74, 0x64, 0x0, 0x11, 0x29, 0x0, @local, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x14, 0xf7, 0x3, 0x6, [{@rand_addr=0x64010100, 0x1ff}, {@multicast1, 0x5}]}, @rr={0x7, 0x23, 0x83, [@local, @multicast2, @multicast1, @multicast2, @dev={0xac, 0x14, 0x14, 0x12}, @multicast2, @loopback, @loopback]}, @timestamp={0x44, 0x14, 0x92, 0x0, 0x4, [0x10000, 0x6, 0x1, 0xd11]}, @lsrr={0x83, 0xb, 0xb3, [@rand_addr=0x64010101, @local]}, @generic={0x0, 0xa, "42833b956d84c3ce"}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000001d000055090100000000009500000000000000bf91000000000000b702000000000000850000007d000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000700)="5c00000011006bec9e3be35c6e17aa210725876c0d000000ba090000160af3653c001ac004000702080002000300e4002c000000ea2933afd81715daae69b556a705251e618294ff0051f60a84c9f4d4938037e786a6d00003000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4a046) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000100)={0x10, 0xf, 0x80, 0x3, 0x5}) prctl$PR_SCHED_CORE(0x46, 0x2, 0x0, 0x1, 0x0) 56.515328918s ago: executing program 4 (id=2878): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x800005}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)) fcntl$setpipe(r1, 0x407, 0x0) openat(r1, &(0x7f0000000080)='./file0\x00', 0x208040, 0x2) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r3, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$rds(r3, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0) 55.033059102s ago: executing program 4 (id=2884): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r1 = signalfd(r0, &(0x7f0000000000)={[0x2000400000000000]}, 0x8) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000240)=@overlay={0x6, 0x4, 0x4, 0x40, 0x1c000000, {0x0, 0x2710}, {0x2, 0x1, 0x81, 0xa, 0xf, 0xab, "e163bb05"}, 0x1, 0x3, {}, 0x8, 0x0, r1}) 54.919634234s ago: executing program 4 (id=2885): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b021b00000000000109022400010000400009040000010300400009210000000122050009058103"], 0x0) r1 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000000380)={&(0x7f0000000340)=@in6={0xa, 0x4e20, 0xffe, @remote, 0x6e}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000240)="af", 0x1}], 0x1, &(0x7f00000006c0)=[@init={0x18, 0x84, 0x0, {0xffff, 0x7, 0x7}}], 0x18, 0x20000001}, 0x20008000) setsockopt$inet6_int(r1, 0x84, 0x4, &(0x7f00000002c0)=0x9, 0x4) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x5, 0x6b, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x59, 0x1, 0x1, 0xb, 0x20, 0x2, "", [{{0x9, 0x4, 0x0, 0x9, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x8, 0x24, 0x6, 0x0, 0x0, "876e1c"}, {0x5, 0x24, 0x0, 0x5e73}, {0xd, 0x24, 0xf, 0x1, 0x200, 0x2, 0x7ff, 0x1}, [@mbim_extended={0x8, 0x24, 0x1c, 0x2, 0x4}, @dmm={0x7, 0x24, 0x14, 0x3, 0x1}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x40}, @dmm={0x7, 0x24, 0x14, 0x3, 0x1}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0xc4, 0x8, 0xd}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x1, 0x5, 0x24}}}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x200, 0x0, 0xb5, 0xc, 0x40, 0x1}, 0x33, &(0x7f0000000280)={0x5, 0xf, 0x33, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0xf, 0x9, 0x1ff}, @ssp_cap={0x24, 0x10, 0xa, 0x2, 0x6, 0x9, 0xf00f, 0x2, [0xff0060, 0x0, 0xffc0, 0x3f30, 0xc0c0, 0x17f0f]}]}, 0x7, [{0x17, &(0x7f0000000300)=@string={0x17, 0x3, "e676acd9ba594602c71fbef0fee8c0d44b48a2142b"}}, {0xb9, &(0x7f00000003c0)=@string={0xb9, 0x3, "24e3c0cfa41a037ad2c71822befeea3c9b96e5a16222757468d020ee3ba11f2d6ecd820187c3d54be78088eed65d4ff24bdc19ca59083d0b703203981c1bed93eff00e3587c135dfba98889da96144824ce9996f1db9fbf200f50c0c1f3b5adae5b23345d8872a7f96d2f2940c6dbda3f353902a21db4f5775b491a6dec83f616565b529ec9d3c5206ded95a8353a6d7ae6d363d761ee83b2cdc56cf8e0e9deef6c5ff4f9a6623ffdc438710c7f24cb02351b23243ffcc"}}, {0x6f, &(0x7f0000000480)=ANY=[@ANYBLOB="6f03a2a0f583414d4c1b62b37d5995bd2d06f9fa3600b711c7bfd115edb0921f554c0d70adc1f880415cfd4e8fe6ffa159aafd479f33e335de92c6b110a55973b1519d9ef13e01c75af4a8d78c0ecb2a47ba2583c5c3162403062d804d87f54f732544e695087c6e58cbf54470175f"]}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x2001}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x40a}}, {0x70, &(0x7f0000000580)=@string={0x70, 0x3, "35e82fe8329fd36e65dc59d3c16c280dc1034f1f639907f9cedc66bd26173dc42d7a7d777a08c617a08c905ed9bf40175118cc50b4f1acee2a0c500c4441322b6fb2f26caafe56e764c114737878aeb5e66c3184fe49e6088d89de0abe97b2640199d2ea91939762344fcf5eaf04"}}, {0x15, &(0x7f0000000600)=@string={0x15, 0x3, "732a96ddd41f057eaad27f39a06055228b70f5"}}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x9, "0400"}]}}, 0x0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000700), 0x202000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000740)={0x2, r1}) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000d00)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0xf, 0x0, 0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000100)=ANY=[@ANYBLOB="400305"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 54.786819109s ago: executing program 3 (id=2886): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f0000000040)={'tunl0\x00', 0x7}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32, @ANYBLOB="08004e01"], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r2, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000080}, 0x40000) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000002f000903feff00000000000006"], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) 54.652518508s ago: executing program 3 (id=2887): ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) add_key(&(0x7f00000013c0)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='[', 0xfe95, 0xffffffffffffffff) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc040ff0b, &(0x7f0000000180)) syz_usb_connect(0x1, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e03"], 0x0) 53.809934521s ago: executing program 3 (id=2888): syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x55}, &(0x7f0000000100), 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000540)=""/165, 0xa5}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r2, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) r4 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(r5, &(0x7f0000000200)='./file1/file4\x00', 0xd0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4) 53.582987576s ago: executing program 3 (id=2889): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000016000000000000000085000df1090e2852bc67ec00009600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff2, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'ip6tnl0\x00', r0, 0x2f, 0x3, 0x7, 0x800, 0x50, @remote, @remote, 0xa0b51fe1357bc622, 0x700, 0x6, 0x4}}) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, &(0x7f00000000c0)=0x98d3) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024917720042322023f770102030109021200"], 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_CROPCAP(r4, 0xc02c563a, &(0x7f00000000c0)={0x9, {0x4, 0xd, 0x1, 0x3}, {0x6, 0x2, 0x4, 0x2401000}, {0xa47, 0x5}}) r5 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000002300)={&(0x7f00000004c0)=[{0x7, 0x0, 0x0, 0x0}, {0x0, 0x9000, 0x0, 0x0}], 0x2}) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000400)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96178d1df793eeacfa00ffffffffff0000000500", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "909e8b1c550000000000c6c0f0f950c30000000000ffff00", [0x5, 0x6]}}) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) 52.511695362s ago: executing program 0 (id=2892): mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x4000, 0x7ffe) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x40) ioctl$SNDRV_TIMER_IOCTL_CREATE(r1, 0xc02054a5, &(0x7f0000000180)={0x3, r0, 'id1\x00'}) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000001340)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0xf, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000600)="92", 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e20, 0x9, @private2, 0x5}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000040)='g', 0x1}], 0x1}}], 0x2, 0x20000800) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000440)={0x1ff, 0x8, 0x4, 0x4, 0x0, 0x3, 0x8, 0xff}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000730139000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000400), 0x12) readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000940)=""/131, 0x83}], 0x1) 52.46875771s ago: executing program 4 (id=2893): r0 = semget$private(0x0, 0x6, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$binfmt_register(0xffffffffffffffff, &(0x7f00000000c0)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x1000, 0x3a, '/\\xv/bus/usb/00#/00#\x00', 0x3a, '/dev/bus/usb/00#/00#\x00', 0x3a, './file0'}, 0x51) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x5, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4417d290ddada01ca48b8a9884315c2c245040f23c00f21f835000002000f23f8c4a2e0f3db0f07d2c74424001e09000000442402e4000000654c0fc72ef3410fc777d365420fc7700066b8502466ef", 0x6e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002ec0), 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x181800) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "e907f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f8a1d34c07c3260049e4f8d3ee0878ae95bc7f52363c468b257ffb3baf7aea4fb76dcfd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3c4891f9150d685a7d7c27df0355808390666e827d61dcc3a633bb0b1250b5a293e3877adc1a1b44b99c93d57fd720a170e7f5670e419dc64febf7ddc73fd4a5a0b6c281e05c541471d8d2a58f5edac665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f00000003c0)={0x2, @vbi={0x0, 0x6, 0x8, 0x3247504d, [0x2, 0x8], [0x5, 0x8], 0x1}}) ioctl$vim2m_VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f0000000000)={0x10001, 0x2, 0x2, 0x0, 0x8}) ioctl$vim2m_VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f00000002c0)={0x2, @pix={0x4, 0xfffffffd, 0x33565348, 0x4, 0xfffffffb, 0x4, 0x6, 0x4, 0x0, 0x4, 0x1, 0x7}}) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000001040)="99d3c9f30f09b993080000b800000000ba000000800f30660f38dfb1e4000000f4cfc4e1fe12230f01c3b9800000c00f3235010000000f30", 0x38}], 0xaaaaaaaaaaaac7f, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) semtimedop(r0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r0, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) 52.336061709s ago: executing program 0 (id=2894): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r1) close(r1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mount$fuse(0x0, &(0x7f0000000300)='./cgroup\x00', 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWOBJ={0x0, 0x12, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x7}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_TABLE={0x0, 0x1, 'syz1\x00'}}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 52.179105593s ago: executing program 1 (id=2895): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={0x0}) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x8, &(0x7f0000000200), 0x4) 52.116573008s ago: executing program 0 (id=2896): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', 0x0}) 52.006491664s ago: executing program 0 (id=2897): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) sigaltstack(&(0x7f0000000080)={0x0, 0x8a3fb34eb863f9d7}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket$netlink(0x10, 0x3, 0xe) r3 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000340)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) getegid() sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x203f416aa421fbb1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="20000000021400012dbd7000ffdbdf2508004400", @ANYRES32=r3, @ANYBLOB="080047b9", @ANYRES32, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4048884) io_uring_setup(0x671d, &(0x7f0000000100)={0x0, 0x8a74, 0x4000, 0x10002, 0x5c}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x50) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000640)={r4, &(0x7f0000000080), 0x0}, 0x20) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0f, &(0x7f0000000040)={'wlan1\x00', @random="0100"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x4de901, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r6, 0x3ba0, 0x0) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) set_mempolicy(0x8000, &(0x7f0000000380)=0xfff, 0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r8) 51.720652113s ago: executing program 3 (id=2898): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0xc000802) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r5 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000380)={0x11, 0x1, 0x3, "33c500100000000040fcd817a45b729fd5085780ee0f00000000000000000005", 0x20363059}) write$binfmt_script(r4, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000840)={0x2, 0x1, @loopback}, 0x10) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb080003"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r7, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r2], 0x4}}, 0x0) sendfile(r6, r3, 0x0, 0x100000000) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000280)={0x14, &(0x7f0000000140)={0x20, 0x23, 0xbf, {0xbf, 0x9, "faa12e67fc8d48bf66d115299b37e1801cc50ee3fc7ebff63d5b94004f4a5ef0bd31cd73b520a4c8b62143c82c395a2d6d0e0ae7db92ebd5164a5c9e820f576235170f1415d5de74bdc4029987ac359b11d7055348bef0d5a1fd765a884111ab69e3db75b39bb4630a569537d819cc6d09a5b9e706fe8478b064ae97f11802b77fd6d76c006353dbc199e21032a9b25e3a9ebf0486350cefe67303488dbd0d6b889f7574d001d60a9f4b6c7b9ad61d960d697c21f1d04618fe01ae1d4c"}}, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c01}}}, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)={0x20, 0x1d, 0x7a, "ec3dc217b9c4ce79c57e65c8361965c4ba61b9de915c4cdaf69fbc6be89ea82203b872bdaa24f0eedde7173febb87141cfdfa3879b4bdfdd20e6697e5c26f03738804277977ff06a4242c9fa5b90b7e5e21880b92eb27c857edf55bb6ab1f0c5bda51149242bfa3344f7d0af3a4ba1e1bc3109df18c7656e0bae"}, 0x0, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000580)=ANY=[@ANYBLOB="c0050100000052a75756a5fb7441da21a864131900a9944364d469caaae6fe19ff59b717723b8f7ca45552f3b73bc17b011b6ab44b72349be66e"], &(0x7f0000000400)=ANY=[@ANYBLOB="400569f05a3ab77d14ec6b"]}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000000c0)={0x44, &(0x7f0000000000)={0x40, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000500)='@\\,!,:\'^\\\x8c\x00', &(0x7f0000000540)=':\x00', 0x0) connect$unix(r5, &(0x7f0000000480)=@file={0x1, './file0\x00'}, 0x6e) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_phy_link_complete={{0x42, 0x3}, {0x4, 0xc9, 0x6}}}, 0x6) 51.619173096s ago: executing program 0 (id=2899): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000fdffffff000000000200020118050000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008001800b7040000500d0000850000000500000095"], &(0x7f0000000180)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x4d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r0, 0x0, 0xfffffffffffffffd}, 0x10) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000280)={{r0, &(0x7f0000000100)='\x00', 0x381801, &(0x7f0000000140)={@align=0xa, {0x1, 0x7, 0xfffffffd, 0x8000000000000000}}, 0x0, &(0x7f00000001c0), &(0x7f0000000200)=0x2}, {[0x8, 0x2, 0x6, 0xe5]}, 0xfffffd48, 0x1c, &(0x7f0000000240)=""/28}) sendmmsg$alg(r2, &(0x7f0000004140), 0x0, 0x4810) 51.112544714s ago: executing program 1 (id=2900): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x380000b, 0x204031, 0xffffffffffffffff, 0x5e9b7000) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r4 = epoll_create(0xe) close_range(r4, r3, 0x0) ioctl$DVB_DVR_DMX_SET_BUFFER_SIZE(0xffffffffffffffff, 0x6f2d, 0x7fffffffffffffff) ioctl$DVB_DVR_DMX_SET_BUFFER_SIZE(0xffffffffffffffff, 0x6f2d, 0xcb) socket$qrtr(0x2a, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r5], 0x24}}, 0x0) 51.006734281s ago: executing program 0 (id=2901): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xa4242, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000044e22008d31324320dcb010c03010902120001040020000904"], 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001080)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107104e230005000000803a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400100001a000308feffffff00010000ac1e0101000000000000000000000000fc010000000000000000000000000001000107170e2300050a0000203a000000", @ANYRESHEX=r0, @ANYRES32=0x0, @ANYRESHEX=r1], 0x140}, 0x1, 0x0, 0x0, 0x20008008}, 0x844) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x2) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$uac1(0x2, 0xb4, 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r5, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8923, &(0x7f0000000080)={'bridge_slave_0\x00', @random="0131be7839ff"}) syz_usb_connect$uac3(0x2, 0xde, &(0x7f0000000140)=ANY=[@ANYRES32=0x0], &(0x7f0000000540)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x250, 0x6, 0x9a, 0x2, 0xff, 0x9}, 0x73, &(0x7f0000000300)=ANY=[@ANYBLOB="050f73000360100195c8bf6144f6c89efe6dbdb7b88eadf85c2fdfb99581c4a248a29bfcc8e16894ea7ebafe45bfe5514f728ea18b3e1499aeadcd0ab1c420b5b9eb49006dab9b6bdbd556be80533985ae2f2389f1085fecf721784bb1b832e4eceffa4bfa03100b0b100108c20003fd010100"], 0x3, [{0xb8, &(0x7f00000003c0)=ANY=[@ANYBLOB="b8032e583a02b592dfaa5a9a679372d557b084c6fdf754b996238c1fd97e86efe044615edb545d80e7b7105b29b2c59030e634ec0da083ee67564c5ea1f856495183cda6166cbdf4f1f05d76dc4c33de036c6bec8763b0ac6fb2f06e0601887312e066aae5c998fdbe10bb07e38a6a6c7592790a1a42d64d3ebc4a9dd18ceed35076d1eae3815fa74f15f8447e51c431d1166ab64cd77007fd311c1ca879b1a8d128fe0d030012ccd97144e6eb09e39d26e21d9d42038a0d"]}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x53, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r6]}]}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'veth0_vlan\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000000)={@private2, 0x0, r9}) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_mreq(r10, 0x29, 0x1b, &(0x7f0000000040)={@private2, r9}, 0x14) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x200000b, 0x400, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000d00)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffc, {0x0, 0x0, 0x0, r11, {0x0, 0xfff2}, {0x10, 0xb}, {0x9, 0x5}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x24, 0x2, [@TCA_GRED_LIMIT={0x8, 0x5, 0x5}, @TCA_GRED_DPS={0x10, 0x3, {0xc, 0x10, 0x1, 0x7}}, @TCA_GRED_LIMIT={0x8, 0x5, 0x7f}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0e9}, 0x4000010) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001000)={&(0x7f0000001240)=ANY=[@ANYBLOB="98010000", @ANYRES16=0x0, @ANYBLOB="000328bd7000fedbdf25040000004800018008000100", @ANYRESDEC=r11, @ANYBLOB='\x00', @ANYRES32=0x0, @ANYRES16=r11, @ANYRES32=r9, @ANYRES32=r1, @ANYRESDEC=0x0, @ANYBLOB="1400020076657468305f746f5f62726964676500340001801400020069705f7674693000000000000000000008000100", @ANYRES32=r9, @ANYBLOB="14000200766574683100000000000000000000003c00018008000300020000001400020076657468305f766c616e00000000000014000200626f6e6430000000000000000000000008000100", @ANYRES32=r9, @ANYBLOB="2c00018008000100", @ANYRES32=r9, @ANYBLOB="0800030002000000080003000100000008000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r9, @ANYRES8=r4, @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="1c0001802100030001000000080003000300000008000100b018fa33026042b08de4cad50b6cdd5217bed13926abb6a8abd0a2ae66f8724b2c594cf7497be60d70a85e5f47da32dc826248ab972bc8ba0098a724594fac2e6488e3954762379521daac139fdfaa616942e166d632fb0fcff2c2058bbfcebeb0468ff0e2ec2b29f55077fab120b2ff0a6aa5810723f8e1ed7f36d97c49ee603a89f85ff52405e806ed611fd42d455a6276e3a09a0defefd946aa3cd9544a03bb1dfb708826", @ANYRES32=r9, @ANYBLOB="20000180140002006970766c616e3100000000000000000008000100", @ANYBLOB="4db0ae1260448e2dfb0ec4ed988f521d140733eda74a8170945f7b1abbe7d9b4e8d25cccce52149dbb60c7232eb9df8cf565185381ebaf79ed145d427257ee08bdda4d86c2c7177f0f7d3a953ba2d2192f4f32f61847b25d0068d29fd4a6f08276d1b79ca2576dbff5e78b16120825bf37847d6e57b6392e877e49aaa5c17a7602c2", @ANYBLOB], 0x198}, 0x1, 0x0, 0x0, 0x4008000}, 0x4005) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a68000000060a0b1600000000000000000200000b3c000480100001800c0001007061796c6f61640028000180080001006e6174001c0002800800014000000000080002400000000208000440000000150900010073797a30000000000900020073797a3200000000140008001100010000000000000000000000000a"], 0x90}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 50.771276605s ago: executing program 2 (id=2872): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000029c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xcc}}, 0x0) 50.663264487s ago: executing program 2 (id=2902): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd4ad1185e214d3bd}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0xc0}}, 0x0) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003d37d840890457e00000000000010902240003000000000904"], 0x0) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) 50.620953796s ago: executing program 4 (id=2903): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$kcm(0x2, 0x3, 0x2) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) writev(0xffffffffffffffff, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x200800, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x12, r4, 0x49bb7000) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff5656d, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0x1, 0xb}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x8, 0x8, 0xfbee}, 0x1, 0x3, 0x3, 0x5, 0xe, 0x4, 0xd, 0x18, 0x5, 0x2, {0x6, 0xc, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x44890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)={0x14, r9, 0x1, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x4040004) 50.305095146s ago: executing program 1 (id=2904): mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x4000, 0x7ffe) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x40) ioctl$SNDRV_TIMER_IOCTL_CREATE(r1, 0xc02054a5, &(0x7f0000000180)={0x3, r0, 'id1\x00'}) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000001340)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0xf, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000600)="92", 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e20, 0x9, @private2, 0x5}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000040)='g', 0x1}], 0x1}}], 0x2, 0x20000800) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000440)={0x1ff, 0x8, 0x4, 0x4, 0x0, 0x3, 0x8, 0xff}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000730139000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000400), 0x12) readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000940)=""/131, 0x83}], 0x1) 50.080815273s ago: executing program 1 (id=2905): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) sendmmsg(r0, 0x0, 0x0, 0x4) syz_open_dev$usbfs(0x0, 0xdb, 0x800) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) writev(r1, &(0x7f0000000b00)=[{&(0x7f0000000000)="c1", 0x1}, {&(0x7f00000001c0)="06000000", 0x4}, {&(0x7f00000006c0)="e7cfab5b7345", 0x6}], 0x3) write$UHID_INPUT(r1, &(0x7f0000000b40)={0xc, {"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", 0x1000}}, 0x1006) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10) bind$inet6(r3, &(0x7f0000000300)={0xa, 0x4e23, 0x5, @remote, 0xff}, 0x1c) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, 0x0) mmap(&(0x7f0000198000/0x4000)=nil, 0x4000, 0x300000e, 0x204031, r0, 0x2795000) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, 0x0) 49.395007705s ago: executing program 2 (id=2906): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x380000b, 0x204031, 0xffffffffffffffff, 0x5e9b7000) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r4 = epoll_create(0xe) close_range(r4, r3, 0x0) ioctl$DVB_DVR_DMX_SET_BUFFER_SIZE(0xffffffffffffffff, 0x6f2d, 0x7fffffffffffffff) ioctl$DVB_DVR_DMX_SET_BUFFER_SIZE(0xffffffffffffffff, 0x6f2d, 0xcb) socket$qrtr(0x2a, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r5], 0x24}}, 0x0) 48.940126284s ago: executing program 3 (id=2908): r0 = syz_open_dev$video(&(0x7f0000000180), 0x800000020000007, 0x22000) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, 0x16, 0x301, 0x70bd24, 0x25dfdbfe, {0x2d}}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r2, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000001040)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110c230000) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x4004743d, 0x110e22fff6) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc00000000001dd3b48897dfbc160000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) socket$netlink(0x10, 0x3, 0xc) 48.58007719s ago: executing program 1 (id=2909): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000000140)=0x78, 0x4) (fail_nth: 3) 48.566428233s ago: executing program 2 (id=2910): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, &(0x7f0000000680)="f30f09b3333e0f01cf66b9fa0b00000f32440f20c0663505000000440f22c00f01f667650fc71ebad104b095ee66b9800000c00f326635002000000f30660fc7b6b3ed", 0x43}], 0x1, 0x2a, 0x0, 0x0) prctl$PR_GET_IO_FLUSHER(0x3a) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x48080) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000f36d666666440f38826b410f786b42d1d107b8010000000f01d98fe9d89afd", 0x3d}], 0x1, 0x21, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@arm64={0xee, 0x2, 0x2, '\x00', 0x7fffffffffffffff}) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r4 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x1, 0x80, {}, {0x0, 0xb846941ed94b4582, 0xff, 0x80, 0x0, 0xfe, "8200"}, 0x2002000, 0x2, {0xffffffffffffffff}, 0x20800}) write$binfmt_misc(r5, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000700, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x31]}}) mmap(&(0x7f0000ff1000/0x4000)=nil, 0x4000, 0x3000000, 0x12, r6, 0x8efa9000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x200000c0) r7 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee200090582"], 0x0) syz_usb_ep_write$ath9k_ep1(r7, 0x82, 0xffffffffffffff42, &(0x7f0000000000)=ANY=[]) ioctl$KVM_RUN(r3, 0xae80, 0x0) 0s ago: executing program 32 (id=2903): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$kcm(0x2, 0x3, 0x2) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) writev(0xffffffffffffffff, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x200800, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x12, r4, 0x49bb7000) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff5656d, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0x1, 0xb}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x8, 0x8, 0xfbee}, 0x1, 0x3, 0x3, 0x5, 0xe, 0x4, 0xd, 0x18, 0x5, 0x2, {0x6, 0xc, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x44890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)={0x14, r9, 0x1, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x4040004) kernel console output (not intermixed with test programs): :ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0/input49 [ 591.936516][ T7321] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:16> initialized [ 592.039034][ T5703] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 592.080600][ T5703] usb 2-1: device descriptor read/8, error -71 [ 592.110767][T20596] netlink: 165 bytes leftover after parsing attributes in process `syz.0.2539'. [ 592.359223][ T5703] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 592.401835][ T5703] usb 2-1: device descriptor read/8, error -71 [ 592.524515][ T5703] usb usb2-port1: unable to enumerate USB device [ 593.150437][T20647] kvm: pic: non byte write [ 593.267365][T20654] imon:send_packet: task interrupted [ 593.277957][T20654] imon:send_packet: packet tx failed (-512) [ 593.290997][T20654] imon:vfd_write: send packet #3 failed [ 593.307711][T20654] imon:send_packet: task interrupted [ 593.313912][T20654] imon:send_packet: packet tx failed (-512) [ 593.322328][T20654] imon:vfd_write: send packet #0 failed [ 593.336199][T20654] imon:send_packet: task interrupted [ 593.352535][T20654] imon:send_packet: packet tx failed (-512) [ 593.352535][ T24] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 593.367410][T20654] imon:vfd_write: send packet #0 failed [ 593.375827][T20654] imon:send_packet: task interrupted [ 593.388856][T20654] imon:send_packet: packet tx failed (-512) [ 593.398473][T20654] imon:vfd_write: send packet #0 failed [ 593.416783][T20654] imon:send_packet: task interrupted [ 593.423362][T20654] imon:send_packet: packet tx failed (-512) [ 593.436856][T20654] imon:vfd_write: send packet #0 failed [ 593.447188][T20654] imon:send_packet: task interrupted [ 593.463306][T20654] imon:send_packet: packet tx failed (-512) [ 593.470847][T20654] imon:vfd_write: send packet #0 failed [ 593.499061][T20654] imon:send_packet: task interrupted [ 593.510682][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 593.511737][T20654] imon:send_packet: packet tx failed (-512) [ 593.531921][T20654] imon:vfd_write: send packet #0 failed [ 593.538232][T20654] imon:send_packet: task interrupted [ 593.545587][T20654] imon:send_packet: packet tx failed (-512) [ 593.545635][ T24] usb 2-1: config 164 has an invalid interface number: 195 but max is 0 [ 593.552247][T20654] imon:vfd_write: send packet #0 failed [ 593.586459][T20654] imon:send_packet: task interrupted [ 593.592878][T20654] imon:send_packet: packet tx failed (-512) [ 593.600281][ T24] usb 2-1: config 164 has an invalid descriptor of length 151, skipping remainder of the config [ 593.600307][T20654] imon:vfd_write: send packet #0 failed [ 593.629107][ T24] usb 2-1: config 164 has no interface number 0 [ 593.642909][ T24] usb 2-1: config 164 interface 195 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 593.680363][ T24] usb 2-1: config 164 interface 195 has no altsetting 0 [ 593.697781][T20654] imon:send_packet: task interrupted [ 593.707448][ T24] usb 2-1: New USB device found, idVendor=2304, idProduct=021a, bcdDevice=c7.8c [ 593.723081][T20661] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2547'. [ 593.736059][T20654] imon:send_packet: packet tx failed (-512) [ 593.743237][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.743809][T20654] imon:vfd_write: send packet #0 failed [ 593.775640][ T24] usb 2-1: Product: syz [ 593.791564][ T24] usb 2-1: Manufacturer: syz [ 593.830067][ T5703] usb 5-1: USB disconnect, device number 16 [ 593.836308][ T24] usb 2-1: SerialNumber: syz [ 593.910068][T20676] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2547'. [ 594.007879][T20661] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 594.410248][ T809] usbhid 1-1:0.0: can't add hid device: -71 [ 594.447476][ T809] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 594.500249][ T809] usb 1-1: USB disconnect, device number 118 [ 594.520049][ T5703] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 594.609035][ T7321] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 594.689530][ T5703] usb 5-1: Using ep0 maxpacket: 16 [ 594.703522][ T5703] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 594.721514][ T5703] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 594.733408][ T5703] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 594.742578][ T5703] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.751182][ T5703] usb 5-1: Product: syz [ 594.755810][ T5703] usb 5-1: Manufacturer: syz [ 594.761544][ T5703] usb 5-1: SerialNumber: syz [ 594.769487][ T7321] usb 4-1: Using ep0 maxpacket: 16 [ 594.778588][ T7321] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 594.788281][ T7321] usb 4-1: config 0 has no interface number 0 [ 594.798546][ T5703] usb 5-1: 0:2 : does not exist [ 594.807076][ T7321] usb 4-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 594.817753][ T7321] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.818900][ T809] usb 1-1: new full-speed USB device number 119 using dummy_hcd [ 594.826799][ T7321] usb 4-1: Product: syz [ 594.846915][ T7321] usb 4-1: Manufacturer: syz [ 594.863259][ T7321] usb 4-1: SerialNumber: syz [ 594.884151][ T7321] usb 4-1: config 0 descriptor?? [ 594.991567][ T809] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 595.015860][ T809] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 595.048992][ T809] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 595.078528][ T809] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 595.102375][ T809] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 595.166643][ T809] usb 1-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 595.181394][ T7321] uvcvideo 4-1:0.105: probe with driver uvcvideo failed with error -22 [ 595.217130][ T7321] usb 4-1: USB disconnect, device number 125 [ 595.245896][ T809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.285344][ T809] usb 1-1: Product: syz [ 595.314257][ T809] usb 1-1: Manufacturer: syz [ 595.332173][ T809] usb 1-1: SerialNumber: syz [ 595.354748][ T809] usb 1-1: config 0 descriptor?? [ 595.377840][ T809] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 595.389722][ T809] imon 1-1:0.0: unable to initialize intf0, err -90 [ 595.399850][ T809] imon:imon_probe: failed to initialize context! [ 595.406664][ T809] imon 1-1:0.0: unable to register, err -19 [ 595.521644][T20743] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2551'. [ 595.601571][T20714] program syz.0.2550 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 595.846351][ T5704] usb 1-1: USB disconnect, device number 119 [ 596.022704][ T24] usb 2-1: USB disconnect, device number 8 [ 596.058883][ T809] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 596.218903][ T809] usb 4-1: Using ep0 maxpacket: 32 [ 596.227239][ T809] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 596.249052][ T809] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 596.272135][ T809] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 596.285656][ T809] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 596.295892][ T809] usb 4-1: Product: syz [ 596.301315][ T809] usb 4-1: Manufacturer: syz [ 596.343959][ T809] hub 4-1:4.0: USB hub found [ 596.549702][T20751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 596.595932][T20751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 596.656571][T20751] netlink: 'syz.3.2553': attribute type 3 has an invalid length. [ 596.676679][T20751] netlink: 'syz.3.2553': attribute type 2 has an invalid length. [ 596.697262][T20751] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2553'. [ 596.789172][ T809] hub 4-1:4.0: 1 port detected [ 596.939195][ T5704] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 597.141321][ T5704] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 597.168270][ T5704] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 597.302138][ T5704] usb 2-1: New USB device found, idVendor=0c70, idProduct=f00b, bcdDevice= 0.00 [ 597.324813][ T5704] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.352053][ T5704] usb 2-1: config 0 descriptor?? [ 597.596691][ T5703] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 597.707853][ T5703] usb 5-1: USB disconnect, device number 17 [ 597.739203][ T7352] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 597.779390][ T5647] udevd[5647]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 597.806952][ T5704] aquacomputer_d5next 0003:0C70:F00B.0019: unknown main item tag 0x0 [ 597.826788][ T5704] aquacomputer_d5next 0003:0C70:F00B.0019: unknown main item tag 0x0 [ 597.835289][ T809] hub 4-1:4.0: hub_hub_status failed (err = -32) [ 597.844080][ T809] hub 4-1:4.0: config failed, can't get hub status (err -32) [ 597.854526][ T5704] aquacomputer_d5next 0003:0C70:F00B.0019: unknown main item tag 0x0 [ 597.890111][ T5704] aquacomputer_d5next 0003:0C70:F00B.0019: unknown main item tag 0x0 [ 597.898889][ T7352] usb 3-1: Using ep0 maxpacket: 16 [ 597.906501][ T5704] aquacomputer_d5next 0003:0C70:F00B.0019: unknown main item tag 0x0 [ 597.920799][ T7352] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 597.935897][ T5704] aquacomputer_d5next 0003:0C70:F00B.0019: unknown main item tag 0x0 [ 597.952110][ T5704] aquacomputer_d5next 0003:0C70:F00B.0019: unknown main item tag 0x0 [ 597.956575][ T7352] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.963647][ T5704] aquacomputer_d5next 0003:0C70:F00B.0019: unknown main item tag 0x0 [ 597.981853][ T7352] usb 3-1: Product: syz [ 597.994336][ T7352] usb 3-1: Manufacturer: syz [ 598.010570][ T5704] aquacomputer_d5next 0003:0C70:F00B.0019: unknown main item tag 0x0 [ 598.010729][ T7352] usb 3-1: SerialNumber: syz [ 598.026895][ T5704] aquacomputer_d5next 0003:0C70:F00B.0019: unknown main item tag 0x0 [ 598.044794][ T7352] usb 3-1: config 0 descriptor?? [ 598.061737][ T7352] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 598.092072][ T5704] aquacomputer_d5next 0003:0C70:F00B.0019: hidraw0: USB HID v0.20 Device [HID 0c70:f00b] on usb-dummy_hcd.1-1/input0 [ 598.233166][ T5704] usb 2-1: USB disconnect, device number 9 [ 598.448839][ T5703] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 598.464569][T20809] openvswitch: netlink: Flow key attr not present in new flow. [ 598.472378][ T7352] usb 3-1: clie_3_5_startup: get interface number failed: -32 [ 598.491082][ T7352] visor 3-1:0.0: probe with driver visor failed with error -32 [ 598.516840][ T7352] usb 3-1: USB disconnect, device number 10 [ 598.609024][ T5703] usb 5-1: Using ep0 maxpacket: 32 [ 598.624790][ T5703] usb 5-1: config 164 has an invalid interface number: 195 but max is 0 [ 598.633456][ T5703] usb 5-1: config 164 has an invalid descriptor of length 151, skipping remainder of the config [ 598.644926][ T5703] usb 5-1: config 164 has no interface number 0 [ 598.651756][ T5703] usb 5-1: config 164 interface 195 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 598.666040][ T5703] usb 5-1: config 164 interface 195 has no altsetting 0 [ 598.676692][ T5703] usb 5-1: New USB device found, idVendor=2304, idProduct=021a, bcdDevice=c7.8c [ 598.686941][T20883] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2566'. [ 598.697006][ T5703] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.705641][ T5703] usb 5-1: Product: syz [ 598.711555][ T5703] usb 5-1: Manufacturer: syz [ 598.716297][ T5703] usb 5-1: SerialNumber: syz [ 598.818845][ T5704] usb 1-1: new full-speed USB device number 120 using dummy_hcd [ 598.921060][T20890] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 598.928606][T20890] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 598.950446][ T7352] usb 4-1: USB disconnect, device number 126 [ 598.982060][ T5704] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 599.010156][ T5704] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 599.030579][ T5704] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 599.064830][ T5704] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 599.087097][ T5704] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 599.117743][ T5704] usb 1-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 599.127496][ T5704] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.136686][ T5704] usb 1-1: Product: syz [ 599.142205][ T5704] usb 1-1: Manufacturer: syz [ 599.146934][ T5704] usb 1-1: SerialNumber: syz [ 599.157399][ T5704] usb 1-1: config 0 descriptor?? [ 599.181074][ T5704] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 599.189374][ T5704] imon 1-1:0.0: unable to initialize intf0, err -90 [ 599.196502][ T5704] imon:imon_probe: failed to initialize context! [ 599.203265][ T5704] imon 1-1:0.0: unable to register, err -19 [ 599.377945][T20877] program syz.0.2565 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 599.459083][ T5704] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 599.598188][ T9] usb 1-1: USB disconnect, device number 120 [ 599.632096][ T5704] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 599.660144][ T5704] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 599.689130][ T5704] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 599.711514][ T5704] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.755983][ T5704] usb 3-1: config 0 descriptor?? [ 600.247839][ T5704] cp2112 0003:10C4:EA90.001A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 600.431357][ T5704] cp2112 0003:10C4:EA90.001A: error requesting version [ 600.488968][T20939] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2574'. [ 600.507995][ T5704] cp2112 0003:10C4:EA90.001A: probe with driver cp2112 failed with error -5 [ 600.543654][T20939] netlink: 'syz.0.2574': attribute type 5 has an invalid length. [ 600.763973][T20946] netlink: 'syz.0.2575': attribute type 10 has an invalid length. [ 601.147843][T20955] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 601.162064][ T5703] usb 5-1: USB disconnect, device number 18 [ 601.459712][ T7321] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 601.463996][T20973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 601.495670][T20973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 601.629244][ T7321] usb 1-1: device descriptor read/64, error -71 [ 601.667659][T20979] FAULT_INJECTION: forcing a failure. [ 601.667659][T20979] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 601.682966][T20979] CPU: 0 UID: 0 PID: 20979 Comm: syz.1.2576 Tainted: G L syzkaller #0 PREEMPT(full) [ 601.682992][T20979] Tainted: [L]=SOFTLOCKUP [ 601.682998][T20979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 601.683008][T20979] Call Trace: [ 601.683015][T20979] [ 601.683023][T20979] dump_stack_lvl+0xe8/0x150 [ 601.683048][T20979] should_fail_ex+0x40c/0x560 [ 601.683073][T20979] prepare_alloc_pages+0x230/0x650 [ 601.683090][T20979] __alloc_frozen_pages_noprof+0x12f/0x380 [ 601.683102][T20979] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 601.683114][T20979] ? __pfx_policy_nodemask+0x10/0x10 [ 601.683124][T20979] ? kmem_cache_alloc_node_noprof+0x191/0x610 [ 601.683147][T20979] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 601.683160][T20979] ? kmem_cache_alloc_node_noprof+0x1f5/0x610 [ 601.683175][T20979] alloc_pages_mpol+0x212/0x380 [ 601.683188][T20979] alloc_pages_noprof+0xac/0x2a0 [ 601.683199][T20979] alloc_skb_with_frags+0x264/0x760 [ 601.683215][T20979] sock_alloc_send_pskb+0x878/0x990 [ 601.683230][T20979] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 601.683248][T20979] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 601.683261][T20979] ? dev_get_by_index+0x22/0x2d0 [ 601.683336][T20979] ? dev_get_by_index+0x22/0x2d0 [ 601.683350][T20979] packet_sendmsg+0x3258/0x5040 [ 601.683362][T20979] ? aa_file_perm+0x18b/0x15f0 [ 601.683375][T20979] ? aa_label_sk_perm+0x532/0x6e0 [ 601.683392][T20979] ? __lock_acquire+0x683/0x2cf0 [ 601.683408][T20979] ? __lock_acquire+0x683/0x2cf0 [ 601.683424][T20979] ? __pfx_packet_sendmsg+0x10/0x10 [ 601.683439][T20979] ? __might_fault+0xaf/0x130 [ 601.683451][T20979] ? __pfx_aa_sk_perm+0x10/0x10 [ 601.683463][T20979] ? aa_sock_msg_perm+0xf1/0x1b0 [ 601.683477][T20979] ? __pfx_packet_sendmsg+0x10/0x10 [ 601.683486][T20979] sock_sendmsg_nosec+0x13a/0x180 [ 601.683501][T20979] __sys_sendto+0x408/0x5a0 [ 601.683515][T20979] ? ksys_write+0x1e6/0x270 [ 601.683527][T20979] ? __pfx___sys_sendto+0x10/0x10 [ 601.683540][T20979] ? __mutex_unlock_slowpath+0x731/0x900 [ 601.683567][T20979] ? __pfx_ksys_write+0x10/0x10 [ 601.683580][T20979] __x64_sys_sendto+0xde/0x100 [ 601.683594][T20979] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.683605][T20979] do_syscall_64+0x174/0x580 [ 601.683618][T20979] ? trace_irq_disable+0x3b/0x140 [ 601.683640][T20979] ? clear_bhb_loop+0x40/0x90 [ 601.683660][T20979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.683675][T20979] RIP: 0033:0x7f8c4739ce59 [ 601.683692][T20979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 601.683705][T20979] RSP: 002b:00007f8c48264028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 601.683718][T20979] RAX: ffffffffffffffda RBX: 00007f8c47615fa0 RCX: 00007f8c4739ce59 [ 601.683725][T20979] RDX: 000000000000e90c RSI: 00002000000000c0 RDI: 0000000000000004 [ 601.683732][T20979] RBP: 00007f8c48264090 R08: 0000200000000540 R09: 0000000000000014 [ 601.683738][T20979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 601.683744][T20979] R13: 00007f8c47616038 R14: 00007f8c47615fa0 R15: 00007f8c4773fa48 [ 601.683759][T20979] [ 602.128866][ T7321] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 602.145755][T20984] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2581'. [ 602.268903][ T7321] usb 1-1: device descriptor read/64, error -71 [ 602.379059][ T7321] usb usb1-port1: attempt power cycle [ 602.557109][ T5703] usb 3-1: USB disconnect, device number 11 [ 602.691307][T21004] netlink: 5128 bytes leftover after parsing attributes in process `syz.3.2584'. [ 602.700596][T21004] netlink: 5128 bytes leftover after parsing attributes in process `syz.3.2584'. [ 602.710384][T21004] netlink: 332 bytes leftover after parsing attributes in process `syz.3.2584'. [ 602.720652][T21004] IPv6: NLM_F_CREATE should be specified when creating new route [ 602.729130][ T7321] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 602.749428][ T7321] usb 1-1: device descriptor read/8, error -71 [ 602.931544][T21020] netlink: 'syz.4.2587': attribute type 10 has an invalid length. [ 602.958848][ T5703] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 602.990030][ T7321] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 603.029601][ T7321] usb 1-1: device descriptor read/8, error -71 [ 603.126112][ T5703] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 603.147755][ T5703] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 603.163079][ T5703] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 603.169401][ T7352] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 603.177462][ T5703] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 603.192251][ T5703] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 603.192914][ T7321] usb usb1-port1: unable to enumerate USB device [ 603.233995][ T5703] usb 3-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 603.246424][ T5703] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.265570][ T5703] usb 3-1: Product: syz [ 603.277811][ T5703] usb 3-1: Manufacturer: syz [ 603.288137][ T5703] usb 3-1: SerialNumber: syz [ 603.303851][ T5703] usb 3-1: config 0 descriptor?? [ 603.327030][ T5703] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 603.346053][ T5703] imon 3-1:0.0: unable to initialize intf0, err -90 [ 603.358852][ T7352] usb 4-1: Using ep0 maxpacket: 32 [ 603.363122][ T5703] imon:imon_probe: failed to initialize context! [ 603.365856][ T7352] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 603.378821][ T5703] imon 3-1:0.0: unable to register, err -19 [ 603.385162][ T7352] usb 4-1: config 0 has no interface number 0 [ 603.393357][ T7352] usb 4-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 603.404196][ T7352] usb 4-1: config 0 interface 89 has no altsetting 0 [ 603.413562][ T7352] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 603.424590][ T7352] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.432976][ T7352] usb 4-1: Product: syz [ 603.437218][ T7352] usb 4-1: Manufacturer: syz [ 603.442699][ T7352] usb 4-1: SerialNumber: syz [ 603.450957][ T7352] usb 4-1: config 0 descriptor?? [ 603.463600][ T7352] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 603.474622][ T7352] em28xx 4-1:0.89: Video interface 89 found: [ 603.554779][T20999] program syz.2.2583 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 603.749926][ T7343] usb 3-1: USB disconnect, device number 12 [ 603.868965][ T5703] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 604.018815][ T5703] usb 2-1: Using ep0 maxpacket: 32 [ 604.025576][ T5703] usb 2-1: config 164 has an invalid interface number: 195 but max is 0 [ 604.034516][ T5703] usb 2-1: config 164 has an invalid descriptor of length 151, skipping remainder of the config [ 604.045288][ T5703] usb 2-1: config 164 has no interface number 0 [ 604.051746][ T5703] usb 2-1: config 164 interface 195 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 604.065408][ T5704] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 604.073215][ T5703] usb 2-1: config 164 interface 195 has no altsetting 0 [ 604.078277][ T7352] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 604.082978][ T5703] usb 2-1: New USB device found, idVendor=2304, idProduct=021a, bcdDevice=c7.8c [ 604.095896][ T5703] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.103944][ T5703] usb 2-1: Product: syz [ 604.126190][ T5703] usb 2-1: Manufacturer: syz [ 604.131330][ T5703] usb 2-1: SerialNumber: syz [ 604.181164][T21058] netlink: 'syz.0.2590': attribute type 46 has an invalid length. [ 604.200842][T21058] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2590'. [ 604.241265][ T5704] usb 5-1: unable to get BOS descriptor or descriptor too short [ 604.254250][ T5704] usb 5-1: language id specifier not provided by device, defaulting to English [ 604.271786][ T5704] usb 5-1: New USB device found, idVendor=0763, idProduct=1031, bcdDevice= 0.40 [ 604.281313][ T5704] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.289494][ T5704] usb 5-1: Product: @ [ 604.293745][ T5704] usb 5-1: SerialNumber: syz [ 604.468886][ T809] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 604.539645][T21048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 604.550437][T21048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 604.580112][ T5704] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 604.587123][ T5704] usb 5-1: MIDIStreaming interface descriptor not found [ 604.622518][ T809] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 604.636077][ T809] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 604.670631][ T809] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 604.688125][ T5704] usb 5-1: USB disconnect, device number 19 [ 604.714629][ T809] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 604.745314][ T809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 604.760180][ T809] usb 3-1: Product: syz [ 604.764470][ T809] usb 3-1: Manufacturer: syz [ 604.770080][ T809] usb 3-1: SerialNumber: syz [ 604.902597][ T7352] em28xx 4-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 604.910911][ T7352] em28xx 4-1:0.89: board has no eeprom [ 604.968827][ T7352] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 604.976081][ T7352] em28xx 4-1:0.89: analog set to bulk mode. [ 604.983111][ T7321] em28xx 4-1:0.89: Registering V4L2 extension [ 604.997644][ T7352] usb 4-1: USB disconnect, device number 127 [ 605.006735][ T7352] em28xx 4-1:0.89: Disconnecting em28xx [ 605.026026][ T809] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 605.043497][ T7321] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 605.051885][ T7321] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 605.061181][ T7321] em28xx 4-1:0.89: No AC97 audio processor [ 605.083765][ T7321] usb 4-1: Decoder not found [ 605.094174][ T7321] em28xx 4-1:0.89: failed to create media graph [ 605.103909][ T7321] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 605.137908][ T7321] em28xx 4-1:0.89: Registering snapshot button... [ 605.165312][ T7321] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input50 [ 605.207647][ T7321] em28xx 4-1:0.89: Remote control support is not available for this card. [ 605.234155][ T7352] em28xx 4-1:0.89: Closing input extension [ 605.241655][ T7352] em28xx 4-1:0.89: Deregistering snapshot button [ 605.301814][T21061] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 605.323598][ T5704] usb 3-1: USB disconnect, device number 13 [ 605.326945][ T7352] em28xx 4-1:0.89: Freeing device [ 605.351668][ T5704] usblp0: removed [ 605.535452][T21139] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 605.739095][ T809] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 605.889660][ T809] usb 1-1: Using ep0 maxpacket: 16 [ 605.902057][ T809] usb 1-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 605.915622][ T809] usb 1-1: config 0 interface 0 has no altsetting 0 [ 605.923096][ T809] usb 1-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 605.933383][ T809] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.946883][ T809] usb 1-1: config 0 descriptor?? [ 605.971481][T21158] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2598'. [ 606.151934][T21163] netlink: 'syz.4.2599': attribute type 10 has an invalid length. [ 606.374178][ T809] bigben 0003:146B:0902.001B: unexpected rdesc, please submit for review [ 606.414038][ T809] hid_parser_main: 35 callbacks suppressed [ 606.414059][ T809] bigben 0003:146B:0902.001B: unknown main item tag 0x3 [ 606.435964][ T809] bigben 0003:146B:0902.001B: unknown main item tag 0x3 [ 606.446088][ T809] bigben 0003:146B:0902.001B: unexpected long global item [ 606.474605][ T809] bigben 0003:146B:0902.001B: parse failed [ 606.490297][ T809] bigben 0003:146B:0902.001B: probe with driver bigben failed with error -22 [ 606.556107][T21185] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2601'. [ 606.622428][ T7343] usb 1-1: USB disconnect, device number 125 [ 607.348909][ T29] audit: type=1800 audit(1782372795.711:2156): pid=21201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2603" name="SYSV00000000" dev="tmpfs" ino=9 res=0 errno=0 [ 607.395102][T21201] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2603'. [ 607.469771][T21204] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2604'. [ 607.517015][T21204] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2604'. [ 607.557285][T21208] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2604'. [ 607.582124][T21208] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2604'. [ 607.723021][ T5703] usb 2-1: USB disconnect, device number 10 [ 608.188850][ T7352] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 608.239257][ T5703] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 608.362545][ T7352] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 608.372581][ T7352] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 608.379065][ T5703] usb 1-1: device descriptor read/64, error -71 [ 608.388838][ T7352] usb 4-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 608.402244][ T7352] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.411994][ T7352] usb 4-1: Product: 侘꾫â‘䕹ᾟ誒甼향苀錶⇎ᳲé®çꎆ国戌ꈡ耖嬚æ‚鱂뽴撢ᕈ툴꣹磥┕壌㣫ãºÍ·ì›¾áž±é…šæ¸£í–嫕䂊㦧쓯ç¿ë¢¢ì†£ê¬¸é¸‹âƒ“䣤픬鯾औ [ 608.457792][ T7352] usb 4-1: Manufacturer: Ñ‹ [ 608.463473][ T7352] usb 4-1: SerialNumber: ã [ 608.475396][T21235] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 608.487611][T21235] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 608.651036][ T5703] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 608.722851][T21256] syzkaller0: entered promiscuous mode [ 608.730867][T21256] syzkaller0: entered allmulticast mode [ 608.789129][ T5703] usb 1-1: device descriptor read/64, error -71 [ 608.900974][ T5703] usb usb1-port1: attempt power cycle [ 608.932020][ T7352] usb 4-1: USB disconnect, device number 2 [ 609.098973][T21273] netlink: 'syz.1.2611': attribute type 10 has an invalid length. [ 609.259061][ T5703] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 609.299804][ T5703] usb 1-1: device descriptor read/8, error -71 [ 609.538997][ T5703] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 609.569785][ T5703] usb 1-1: device descriptor read/8, error -71 [ 609.592016][T21296] syzkaller0: entered promiscuous mode [ 609.597566][T21296] syzkaller0: entered allmulticast mode [ 609.679484][ T5703] usb usb1-port1: unable to enumerate USB device [ 610.614103][T21321] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2618'. [ 610.718837][ T7343] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 610.878985][ T7343] usb 3-1: Using ep0 maxpacket: 32 [ 610.898567][ T7343] usb 3-1: config 164 has an invalid interface number: 195 but max is 0 [ 610.919013][ T7343] usb 3-1: config 164 has an invalid descriptor of length 151, skipping remainder of the config [ 610.944697][ T7343] usb 3-1: config 164 has no interface number 0 [ 610.955985][ T7343] usb 3-1: config 164 interface 195 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 610.986401][ T7343] usb 3-1: config 164 interface 195 has no altsetting 0 [ 611.003573][ T7343] usb 3-1: New USB device found, idVendor=2304, idProduct=021a, bcdDevice=c7.8c [ 611.037825][ T7343] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.054939][ T7343] usb 3-1: Product: syz [ 611.075250][ T7343] usb 3-1: Manufacturer: syz [ 611.087570][ T7343] usb 3-1: SerialNumber: syz [ 611.233468][T21335] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2619'. [ 611.459347][ T7352] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 611.613244][ T7352] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 611.641817][ T7352] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.669049][ T7352] usb 5-1: Product: syz [ 611.682304][ T7352] usb 5-1: Manufacturer: syz [ 611.698631][ T7352] usb 5-1: SerialNumber: syz [ 611.730446][ T7352] usb 5-1: config 0 descriptor?? [ 612.165940][ T7352] usb 5-1: Firmware: major: 67, minor: 157, hardware type: HULUSB (4) [ 612.367189][ T7352] usb 5-1: failed to fetch extended address, random address set [ 612.499545][ T7352] usb 5-1: USB disconnect, device number 20 [ 612.994551][T21370] TCP: TCP_TX_DELAY enabled [ 613.392832][ T7343] usb 3-1: USB disconnect, device number 14 [ 613.459489][T21401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 613.508294][T21401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 613.778898][ T7343] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 613.911782][T21421] netlink: 'syz.3.2631': attribute type 10 has an invalid length. [ 613.919854][ T7343] usb 3-1: device descriptor read/64, error -71 [ 614.008893][T21426] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2632'. [ 614.031486][T21422] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2630'. [ 614.168821][ T7343] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 614.309015][ T7343] usb 3-1: device descriptor read/64, error -71 [ 614.429242][ T7343] usb usb3-port1: attempt power cycle [ 614.788884][ T7343] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 614.819809][ T7343] usb 3-1: device descriptor read/8, error -71 [ 614.908851][ T7352] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 615.003164][T21460] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2640'. [ 615.017192][T21461] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2640'. [ 615.080643][ T7343] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 615.102519][ T7352] usb 4-1: Using ep0 maxpacket: 32 [ 615.113639][ T7352] usb 4-1: config 164 has an invalid interface number: 195 but max is 0 [ 615.130889][ T7352] usb 4-1: config 164 has an invalid descriptor of length 151, skipping remainder of the config [ 615.143525][ T7343] usb 3-1: device descriptor read/8, error -71 [ 615.151942][ T7352] usb 4-1: config 164 has no interface number 0 [ 615.159682][ T7352] usb 4-1: config 164 interface 195 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 615.169201][ T809] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 615.173183][ T7352] usb 4-1: config 164 interface 195 has no altsetting 0 [ 615.187568][T21467] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2641'. [ 615.199796][ T7352] usb 4-1: New USB device found, idVendor=2304, idProduct=021a, bcdDevice=c7.8c [ 615.209053][ T7352] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.217072][ T7352] usb 4-1: Product: syz [ 615.221344][ T7352] usb 4-1: Manufacturer: syz [ 615.225940][ T7352] usb 4-1: SerialNumber: syz [ 615.261415][ T7343] usb usb3-port1: unable to enumerate USB device [ 615.331720][ T809] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 615.343187][ T809] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 615.356190][ T809] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 615.368150][ T809] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 615.381229][ T809] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 615.397677][ T809] usb 1-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 615.408191][ T809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.416650][ T809] usb 1-1: Product: syz [ 615.422546][ T809] usb 1-1: Manufacturer: syz [ 615.427176][ T809] usb 1-1: SerialNumber: syz [ 615.440674][ T809] usb 1-1: config 0 descriptor?? [ 615.451072][ T809] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 615.459341][ T809] imon 1-1:0.0: unable to initialize intf0, err -90 [ 615.466009][ T809] imon:imon_probe: failed to initialize context! [ 615.472994][ T809] imon 1-1:0.0: unable to register, err -19 [ 615.614600][T21474] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2642'. [ 615.623792][T21474] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2642'. [ 615.697732][T21452] program syz.0.2639 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 615.871900][T21484] netlink: 'syz.4.2644': attribute type 10 has an invalid length. [ 615.926075][ T809] usb 1-1: USB disconnect, device number 4 [ 616.258483][T21505] syzkaller0: entered promiscuous mode [ 616.264140][T21505] syzkaller0: entered allmulticast mode [ 616.319558][ T24] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 616.478922][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 616.503775][ T24] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 616.525720][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.542028][ T24] usb 5-1: Product: syz [ 616.546385][ T24] usb 5-1: Manufacturer: syz [ 616.553560][ T24] usb 5-1: SerialNumber: syz [ 616.566277][ T24] usb 5-1: config 0 descriptor?? [ 616.580777][ T24] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 616.865087][T21528] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2649'. [ 617.496301][ T24] gspca_ov534_9: reg_w failed -71 [ 617.584196][ T7352] usb 4-1: USB disconnect, device number 3 [ 617.623965][ T29] audit: type=1326 audit(1782372805.981:2157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21541 comm="syz.3.2650" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c5b9ce59 code=0x7ffc0000 [ 617.652208][ T29] audit: type=1326 audit(1782372805.981:2158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21541 comm="syz.3.2650" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c5b9ce59 code=0x7ffc0000 [ 617.681935][ T29] audit: type=1326 audit(1782372805.981:2159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21541 comm="syz.3.2650" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c5b9ce59 code=0x7ffc0000 [ 617.707932][ T29] audit: type=1326 audit(1782372805.981:2160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21541 comm="syz.3.2650" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c5b9ce59 code=0x7ffc0000 [ 617.734860][ T29] audit: type=1326 audit(1782372805.981:2161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21541 comm="syz.3.2650" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c5b9ce59 code=0x7ffc0000 [ 617.761725][ T29] audit: type=1326 audit(1782372806.021:2162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21541 comm="syz.3.2650" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f33c5b9ce59 code=0x7ffc0000 [ 617.786571][ T29] audit: type=1326 audit(1782372806.041:2163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21541 comm="syz.3.2650" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33c5b9ce59 code=0x7ffc0000 [ 617.812740][ T29] audit: type=1326 audit(1782372806.041:2164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21541 comm="syz.3.2650" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f33c5b9cbc2 code=0x7ffc0000 [ 617.837738][ T29] audit: type=1326 audit(1782372806.041:2165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21541 comm="syz.3.2650" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f33c5b9cc57 code=0x7ffc0000 [ 617.863436][ T24] gspca_ov534_9: Unknown sensor 0000 [ 617.863529][ T24] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 617.891043][ T29] audit: type=1326 audit(1782372806.041:2166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21541 comm="syz.3.2650" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f33c5b59b51 code=0x7ffc0000 [ 617.916689][ T24] usb 5-1: USB disconnect, device number 21 [ 618.129550][ T7352] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 618.295796][ T7352] usb 4-1: Using ep0 maxpacket: 16 [ 618.312287][ T7352] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 618.322432][ T7352] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 618.334009][ T7352] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 618.352043][ T7352] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.369282][ T7352] usb 4-1: Product: syz [ 618.373484][ T7352] usb 4-1: Manufacturer: syz [ 618.378095][ T7352] usb 4-1: SerialNumber: syz [ 618.416046][ T7352] usb 4-1: 0:2 : does not exist [ 620.471203][T21579] netlink: 260 bytes leftover after parsing attributes in process `syz.4.2654'. [ 620.481637][T21579] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2654'. [ 620.491310][T21579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2654'. [ 620.818872][ T7321] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 620.978905][ T7321] usb 2-1: Using ep0 maxpacket: 16 [ 620.987383][T21583] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2656'. [ 621.010684][ T1354] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 621.029617][ T7352] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 621.055681][ T1354] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 621.072296][ T1354] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 621.098913][ T1354] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 621.118893][ T7321] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 621.139303][ T7321] usb 2-1: config 0 has no interface number 0 [ 621.147108][ T7352] usb 4-1: USB disconnect, device number 4 [ 621.163681][T21606] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2657'. [ 621.179373][ T7321] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 621.193374][ T7321] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.212529][ T7321] usb 2-1: Product: syz [ 621.220719][ T7321] usb 2-1: Manufacturer: syz [ 621.225349][ T7321] usb 2-1: SerialNumber: syz [ 621.226687][T21606] batadv0: entered promiscuous mode [ 621.234936][ T7321] usb 2-1: config 0 descriptor?? [ 621.251279][T21606] macsec2: entered allmulticast mode [ 621.266432][T21606] batadv0: entered allmulticast mode [ 621.275549][T21606] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 621.559986][ T7321] uvcvideo 2-1:0.105: probe with driver uvcvideo failed with error -22 [ 621.574788][ T7321] usb 2-1: USB disconnect, device number 11 [ 621.769425][ T7343] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 621.828977][ T5703] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 621.928764][ T7343] usb 5-1: Using ep0 maxpacket: 32 [ 621.936219][ T7343] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 621.951217][ T7343] usb 5-1: config 0 has no interface number 0 [ 621.957473][ T7343] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 621.991819][ T7343] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 621.999133][ T5703] usb 1-1: Using ep0 maxpacket: 32 [ 622.027343][ T5703] usb 1-1: config 164 has an invalid interface number: 195 but max is 0 [ 622.054903][ T5703] usb 1-1: config 164 has an invalid descriptor of length 151, skipping remainder of the config [ 622.054928][ T5703] usb 1-1: config 164 has no interface number 0 [ 622.055021][ T7343] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.055042][ T7343] usb 5-1: Product: syz [ 622.055035][ T5703] usb 1-1: config 164 interface 195 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 622.055055][ T7343] usb 5-1: Manufacturer: syz [ 622.055069][ T7343] usb 5-1: SerialNumber: syz [ 622.055073][ T5703] usb 1-1: config 164 interface 195 has no altsetting 0 [ 622.057684][ T7343] usb 5-1: config 0 descriptor?? [ 622.058643][T21634] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 622.079583][ T5703] usb 1-1: New USB device found, idVendor=2304, idProduct=021a, bcdDevice=c7.8c [ 622.079608][ T5703] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.079626][ T5703] usb 1-1: Product: syz [ 622.079640][ T5703] usb 1-1: Manufacturer: syz [ 622.079654][ T5703] usb 1-1: SerialNumber: syz [ 622.082199][T21691] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2666'. [ 622.278657][T21634] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 623.085311][ T7343] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 623.146155][ T7343] asix 5-1:0.188: probe with driver asix failed with error -71 [ 623.207719][ T7343] usb 5-1: USB disconnect, device number 22 [ 623.720294][T21594] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 623.882732][T21594] usb 4-1: not running at top speed; connect to a high speed hub [ 623.892292][T21594] usb 4-1: config 1 interface 0 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 623.906113][T21594] usb 4-1: config 1 interface 0 has no altsetting 0 [ 623.918251][T21594] usb 4-1: New USB device found, idVendor=1241, idProduct=f767, bcdDevice= 0.40 [ 623.927760][T21594] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.936286][T21594] usb 4-1: Manufacturer: ј [ 623.941766][T21594] usb 4-1: SerialNumber: 䌊骿㴫ዿꗎ䛄㸱둾뮇⟠[ 624.069108][ T5704] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 624.154496][T21708] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2668'. [ 624.164763][T21708] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2668'. [ 624.174163][T21708] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2668'. [ 624.201987][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.208393][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.221500][ T5704] usb 5-1: unable to get BOS descriptor or descriptor too short [ 624.229980][ T5704] usb 5-1: not running at top speed; connect to a high speed hub [ 624.240138][ T5704] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 624.250709][ T5704] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 624.265775][ T5704] usb 5-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 624.275078][ T5704] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.283406][ T5704] usb 5-1: Product: syz [ 624.287703][ T5704] usb 5-1: Manufacturer: syz [ 624.292465][ T5704] usb 5-1: SerialNumber: syz [ 624.503470][ T5703] usb 1-1: USB disconnect, device number 5 [ 624.528751][T21741] netlink: 'syz.2.2672': attribute type 10 has an invalid length. [ 624.819649][T21594] usbhid 4-1:1.0: can't add hid device: -71 [ 624.849267][T21594] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 624.902402][T21594] usb 4-1: USB disconnect, device number 5 [ 625.249465][T21594] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 625.264205][T21785] FAULT_INJECTION: forcing a failure. [ 625.264205][T21785] name failslab, interval 1, probability 0, space 0, times 0 [ 625.278038][T21785] CPU: 1 UID: 0 PID: 21785 Comm: syz.0.2678 Tainted: G L syzkaller #0 PREEMPT(full) [ 625.278065][T21785] Tainted: [L]=SOFTLOCKUP [ 625.278071][T21785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 625.278081][T21785] Call Trace: [ 625.278089][T21785] [ 625.278095][T21785] dump_stack_lvl+0xe8/0x150 [ 625.278124][T21785] should_fail_ex+0x40c/0x560 [ 625.278149][T21785] should_failslab+0xa8/0x100 [ 625.278170][T21785] __kmalloc_noprof+0xfe/0x720 [ 625.278192][T21785] ? trace_kmem_cache_alloc+0x29/0xe0 [ 625.278215][T21785] ? security_sk_alloc+0x52/0x360 [ 625.278236][T21785] ? security_sk_alloc+0x52/0x360 [ 625.278262][T21785] security_sk_alloc+0x52/0x360 [ 625.278287][T21785] sk_prot_alloc+0x101/0x210 [ 625.278308][T21785] sk_alloc+0x3a/0x390 [ 625.278330][T21785] unix_create1+0xb0/0x7c0 [ 625.278433][T21785] ? pidfs_register_pid_gfp+0x7e/0x1c0 [ 625.278453][T21785] unix_stream_connect+0x387/0x1000 [ 625.278479][T21785] ? apparmor_socket_connect+0xd1/0x1b0 [ 625.278497][T21785] ? bpf_lsm_socket_connect+0x9/0x20 [ 625.278523][T21785] __sys_connect+0x323/0x460 [ 625.278548][T21785] ? __pfx___sys_connect+0x10/0x10 [ 625.278581][T21785] ? __task_pid_nr_ns+0x28/0x470 [ 625.278605][T21785] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.278624][T21785] __x64_sys_connect+0x7a/0x90 [ 625.278647][T21785] do_syscall_64+0x174/0x580 [ 625.278671][T21785] ? clear_bhb_loop+0x40/0x90 [ 625.278689][T21785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.278704][T21785] RIP: 0033:0x7ffaf619ce59 [ 625.278721][T21785] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 625.278735][T21785] RSP: 002b:00007ffaf7023028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 625.278753][T21785] RAX: ffffffffffffffda RBX: 00007ffaf6415fa0 RCX: 00007ffaf619ce59 [ 625.278764][T21785] RDX: 000000000000006e RSI: 0000200000000000 RDI: 0000000000000005 [ 625.278774][T21785] RBP: 00007ffaf7023090 R08: 0000000000000000 R09: 0000000000000000 [ 625.278785][T21785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 625.278795][T21785] R13: 00007ffaf6416038 R14: 00007ffaf6415fa0 R15: 00007ffaf653fa48 [ 625.278830][T21785] [ 625.736222][T21594] usb 4-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 625.745696][T21594] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 625.772264][T21594] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= 0.9c [ 625.782864][T21594] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.792532][T21594] usb 4-1: Product: syz [ 625.796884][T21594] usb 4-1: Manufacturer: syz [ 625.803155][T21594] usb 4-1: SerialNumber: syz [ 625.824273][T21594] usb 4-1: config 0 descriptor?? [ 625.848452][T21594] ims_pcu 4-1:0.0: Missing CDC union descriptor [ 625.856993][T21594] ims_pcu 4-1:0.0: probe with driver ims_pcu failed with error -22 [ 625.858948][ T7343] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 626.023939][T21799] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2679'. [ 626.034946][ T7343] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 626.050383][ T7343] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 3981, setting to 64 [ 626.068198][ T7343] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 626.082223][ T7343] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.084882][ T7343] usb 3-1: config 0 descriptor?? [ 626.187519][ T10] usb 4-1: USB disconnect, device number 6 [ 626.987228][ T5704] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 627.141727][T21828] syz_tun: entered allmulticast mode [ 627.169310][ T7343] ath6kl: Failed to submit usb control message: -110 [ 627.207484][ T7343] ath6kl: unable to send the bmi data to the device: -110 [ 627.240293][ T7343] ath6kl: Unable to send get target info: -110 [ 627.250964][ T5704] usb 5-1: USB disconnect, device number 23 [ 627.290933][ T7343] ath6kl: Failed to init ath6kl core: -110 [ 627.325180][ T7343] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 627.869256][ T5704] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 628.050951][ T5704] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 13629, setting to 64 [ 628.077420][ T5704] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 628.107645][ T5704] usb 5-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 628.123643][ T5704] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.136002][ T5704] usb 5-1: config 0 descriptor?? [ 628.146678][T21828] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 628.236169][ T7321] usb 3-1: USB disconnect, device number 19 [ 628.296316][T21873] netlink: 'syz.2.2685': attribute type 10 has an invalid length. [ 628.398794][T21594] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 628.574048][T21594] usb 4-1: not running at top speed; connect to a high speed hub [ 628.596695][ T5704] hid-multitouch 0003:0457:07DA.001C: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.4-1/input0 [ 628.610501][T21594] usb 4-1: config 1 interface 0 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 628.624962][T21594] usb 4-1: config 1 interface 0 has no altsetting 0 [ 628.643943][T21594] usb 4-1: New USB device found, idVendor=1241, idProduct=f767, bcdDevice= 0.40 [ 628.653829][T21594] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.663733][T21594] usb 4-1: Manufacturer: ј [ 628.674934][T21594] usb 4-1: SerialNumber: 䌊骿㴫ዿꗎ䛄㸱둾뮇⟠[ 628.818589][T21894] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2687'. [ 628.908073][T21857] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2684'. [ 628.926622][T21857] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2684'. [ 628.950887][T21857] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2684'. [ 629.524362][T21594] usbhid 4-1:1.0: can't add hid device: -71 [ 629.560794][T21594] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 629.617164][T21594] usb 4-1: USB disconnect, device number 7 [ 629.808810][ T24] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 629.828093][T21919] kvm: pic: non byte write [ 630.021849][ T24] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 630.043162][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 630.057602][T21931] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2692'. [ 630.068888][ T24] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= 0.9c [ 630.078381][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.090044][ T24] usb 1-1: Product: syz [ 630.095494][ T24] usb 1-1: Manufacturer: syz [ 630.100899][ T24] usb 1-1: SerialNumber: syz [ 630.115782][ T24] usb 1-1: config 0 descriptor?? [ 630.137955][ T24] ims_pcu 1-1:0.0: Missing CDC union descriptor [ 630.153900][ T24] ims_pcu 1-1:0.0: probe with driver ims_pcu failed with error -22 [ 630.154629][T21594] usb 5-1: USB disconnect, device number 24 [ 630.174066][T21828] syz_tun: left allmulticast mode [ 630.357217][T21593] usb 1-1: USB disconnect, device number 6 [ 630.618928][T21594] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 630.769037][T21594] usb 5-1: device descriptor read/64, error -71 [ 631.020066][T21594] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 631.168994][T21594] usb 5-1: device descriptor read/64, error -71 [ 631.198784][ T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 631.290466][T21594] usb usb5-port1: attempt power cycle [ 631.345858][T21983] kvm: Disabled LAPIC found during irq injection [ 631.363910][ T10] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 631.379141][ T10] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 631.389458][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.407736][ T10] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 631.618939][T21593] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 631.639665][T21594] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 631.669608][T21594] usb 5-1: device descriptor read/8, error -71 [ 631.780678][T21593] usb 3-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config [ 631.794249][T22003] bond4: Unable to set up delay as MII monitoring is disabled [ 631.803047][T21593] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 631.813747][T21593] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 631.824456][T22003] bond4 (unregistering): Released all slaves [ 631.832205][T21593] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 631.834077][T21971] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2695'. [ 631.852301][T21593] usb 3-1: SerialNumber: syz [ 631.919111][T21594] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 631.950065][T21594] usb 5-1: device descriptor read/8, error -71 [ 632.069352][T21594] usb usb5-port1: unable to enumerate USB device [ 632.439256][ T10] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -71 [ 632.447565][ T10] stv0680 1-1:4.0: STV(e): camera ping failed!! [ 632.454414][ T10] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 632.462827][ T10] stv0680 1-1:4.0: last error: 0, command = 0x0 [ 632.474986][ T10] usb 1-1: USB disconnect, device number 7 [ 632.918910][T21594] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 633.081268][T21594] usb 4-1: not running at top speed; connect to a high speed hub [ 633.090964][T21594] usb 4-1: config 1 interface 0 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 633.104499][T21594] usb 4-1: config 1 interface 0 has no altsetting 0 [ 633.114004][T21594] usb 4-1: New USB device found, idVendor=1241, idProduct=f767, bcdDevice= 0.40 [ 633.124375][T21594] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.133018][T21594] usb 4-1: Manufacturer: ј [ 633.137802][T21594] usb 4-1: SerialNumber: 䌊骿㴫ዿꗎ䛄㸱둾뮇⟠[ 633.175988][T22115] netlink: 'syz.0.2703': attribute type 49 has an invalid length. [ 633.359916][T22096] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2701'. [ 633.369374][T22096] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2701'. [ 633.625934][T22134] kvm: pic: non byte write [ 633.925398][T21594] usbhid 4-1:1.0: can't add hid device: -71 [ 633.938500][T21594] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 633.975110][T21594] usb 4-1: USB disconnect, device number 8 [ 634.083516][T22150] FAULT_INJECTION: forcing a failure. [ 634.083516][T22150] name failslab, interval 1, probability 0, space 0, times 0 [ 634.096738][T22150] CPU: 1 UID: 0 PID: 22150 Comm: syz.0.2707 Tainted: G L syzkaller #0 PREEMPT(full) [ 634.096765][T22150] Tainted: [L]=SOFTLOCKUP [ 634.096771][T22150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 634.096781][T22150] Call Trace: [ 634.096789][T22150] [ 634.096797][T22150] dump_stack_lvl+0xe8/0x150 [ 634.096823][T22150] should_fail_ex+0x40c/0x560 [ 634.096843][T22150] should_failslab+0xa8/0x100 [ 634.096856][T22150] __kmalloc_noprof+0xfe/0x720 [ 634.096870][T22150] ? __kmalloc_noprof+0x1ad/0x720 [ 634.096888][T22150] ? sock_kmalloc+0xd6/0x160 [ 634.096904][T22150] ? sock_kmalloc+0xd6/0x160 [ 634.096926][T22150] sock_kmalloc+0xd6/0x160 [ 634.096945][T22150] af_alg_get_rsgl+0x29b/0x8d0 [ 634.096981][T22150] skcipher_recvmsg+0x39d/0xe10 [ 634.097019][T22150] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 634.097039][T22150] ? __lock_acquire+0x683/0x2cf0 [ 634.097056][T22150] ? aa_sock_msg_perm+0xf1/0x1b0 [ 634.097078][T22150] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 634.097100][T22150] ? security_socket_recvmsg+0x7e/0x2c0 [ 634.097122][T22150] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 634.097143][T22150] sock_recvmsg+0x196/0x1e0 [ 634.097167][T22150] ____sys_recvmsg+0x1e6/0x4a0 [ 634.097190][T22150] ? __pfx_____sys_recvmsg+0x10/0x10 [ 634.097221][T22150] ? import_iovec+0x73/0xa0 [ 634.097242][T22150] ___sys_recvmsg+0x213/0x5a0 [ 634.097265][T22150] ? __pfx____sys_recvmsg+0x10/0x10 [ 634.097287][T22150] ? __fget_files+0x2a/0x420 [ 634.097320][T22150] ? __fget_files+0x3a2/0x420 [ 634.097345][T22150] __x64_sys_recvmsg+0x1ae/0x290 [ 634.097367][T22150] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 634.097401][T22150] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.097429][T22150] do_syscall_64+0x174/0x580 [ 634.097451][T22150] ? trace_irq_disable+0x3b/0x140 [ 634.097474][T22150] ? clear_bhb_loop+0x40/0x90 [ 634.097495][T22150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.097511][T22150] RIP: 0033:0x7ffaf619ce59 [ 634.097528][T22150] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 634.097542][T22150] RSP: 002b:00007ffaf7023028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 634.097559][T22150] RAX: ffffffffffffffda RBX: 00007ffaf6415fa0 RCX: 00007ffaf619ce59 [ 634.097571][T22150] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000005 [ 634.097581][T22150] RBP: 00007ffaf7023090 R08: 0000000000000000 R09: 0000000000000000 [ 634.097591][T22150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 634.097601][T22150] R13: 00007ffaf6416038 R14: 00007ffaf6415fa0 R15: 00007ffaf653fa48 [ 634.097629][T22150] [ 634.516953][T21593] usb 3-1: invalid UAC_HEADER (v1) [ 634.570659][T22155] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2706'. [ 634.637534][T21593] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 634.696518][T21593] usb 3-1: USB disconnect, device number 20 [ 634.754660][ T5647] udevd[5647]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 635.019076][T21593] usb 3-1: new low-speed USB device number 21 using dummy_hcd [ 635.108992][T21594] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 635.180518][T21593] usb 3-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 635.198912][T21593] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 635.222826][T21593] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 255, setting to 8 [ 635.248941][T21593] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 635.269038][T21593] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.279744][T21594] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 635.295576][T22179] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 635.301521][T21594] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 635.327137][T21594] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.346998][T21594] usb 5-1: config 0 descriptor?? [ 635.531653][T21593] usb 3-1: string descriptor 0 read error: -71 [ 635.574085][T21594] usbhid 5-1:0.0: can't add hid device: -71 [ 635.610087][T21594] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 635.667621][T21594] usb 5-1: USB disconnect, device number 29 [ 635.741679][T21593] usb 3-1: USB disconnect, device number 21 [ 636.099113][T21594] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 636.276248][T21594] usb 5-1: Using ep0 maxpacket: 32 [ 636.297571][T21594] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 636.321996][T21594] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 636.331819][T21594] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.346949][T21594] usb 5-1: config 0 descriptor?? [ 636.357577][T21594] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 636.373801][T21594] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 636.450737][T22289] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2722'. [ 636.777330][T21594] usb 5-1: USB disconnect, device number 30 [ 636.797958][T21594] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 636.879924][ T24] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 637.048811][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 637.061590][ T24] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 637.090740][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.124669][ T24] usb 4-1: config 0 descriptor?? [ 637.354843][ T24] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 637.431396][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 637.466197][ T24] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 637.482825][ T24] usb 4-1: media controller created [ 637.530185][T21594] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 637.540317][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 637.569217][T22327] netlink: 'syz.2.2730': attribute type 3 has an invalid length. [ 637.617950][T22327] netlink: 'syz.2.2730': attribute type 3 has an invalid length. [ 637.694409][T21594] usb 1-1: config 2 has an invalid interface number: 228 but max is 0 [ 637.703393][T21594] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 637.718476][ T24] az6027: usb out operation failed. (-71) [ 637.722501][T21594] usb 1-1: config 2 has no interface number 0 [ 637.731319][T21594] usb 1-1: config 2 interface 228 altsetting 177 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 637.746471][T21594] usb 1-1: config 2 interface 228 has no altsetting 0 [ 637.759538][T21594] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 637.769366][T21594] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.771651][ T24] az6027: usb out operation failed. (-71) [ 637.777444][T21594] usb 1-1: Product: syz [ 637.777461][T21594] usb 1-1: Manufacturer: syz [ 637.777476][T21594] usb 1-1: SerialNumber: syz [ 637.838176][ T24] stb0899_attach: Driver disabled by Kconfig [ 637.850817][ T24] az6027: no front-end attached [ 637.850817][ T24] [ 637.866406][ T24] az6027: usb out operation failed. (-71) [ 637.878793][ T24] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 637.903255][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input51 [ 637.918476][ T24] dvb-usb: schedule remote query interval to 400 msecs. [ 637.933458][ T24] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 637.956835][ T24] usb 4-1: USB disconnect, device number 9 [ 638.050590][ T24] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 638.125936][T21594] ims_pcu 1-1:2.228: probe with driver ims_pcu failed with error -22 [ 638.142692][T21594] usb 1-1: USB disconnect, device number 8 [ 638.185877][T22370] netlink: 'syz.3.2734': attribute type 4 has an invalid length. [ 638.224223][T22370] netlink: 'syz.3.2734': attribute type 3 has an invalid length. [ 638.518189][T22389] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2736'. [ 638.567248][T22394] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2738'. [ 638.848873][ T7343] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 639.015693][ T7343] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 639.026790][ T7343] usb 1-1: config 0 has no interface number 0 [ 639.046324][ T7343] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 639.062106][ T7343] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 639.072996][ T7343] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.081185][ T7343] usb 1-1: Product: syz [ 639.085613][ T7343] usb 1-1: Manufacturer: syz [ 639.090754][ T7343] usb 1-1: SerialNumber: syz [ 639.100226][ T7343] usb 1-1: config 0 descriptor?? [ 639.124202][ T7343] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 639.384593][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 639.384609][ T29] audit: type=1326 audit(1782372827.751:2191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22391 comm="syz.0.2738" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffaf619ce59 code=0x0 [ 640.414339][T22445] netlink: 'syz.1.2746': attribute type 4 has an invalid length. [ 640.433836][T22445] netlink: 'syz.1.2746': attribute type 3 has an invalid length. [ 640.932932][T22460] bridge4: entered promiscuous mode [ 640.940659][T22460] bridge4: entered allmulticast mode [ 641.198859][T21594] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 641.351222][T21594] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 641.362764][T21594] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 641.375361][T21594] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 641.387122][T21594] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 641.397953][T21594] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 641.414484][T21594] usb 3-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 641.424375][T21594] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.434026][T21594] usb 3-1: Product: syz [ 641.438486][T21594] usb 3-1: Manufacturer: syz [ 641.443568][T21594] usb 3-1: SerialNumber: syz [ 641.454860][T21594] usb 3-1: config 0 descriptor?? [ 641.476741][T21594] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 641.486909][T21594] imon 3-1:0.0: unable to initialize intf0, err -90 [ 641.494265][T21594] imon:imon_probe: failed to initialize context! [ 641.501175][T21594] imon 3-1:0.0: unable to register, err -19 [ 641.578316][ T7321] usb 1-1: USB disconnect, device number 9 [ 641.593562][ T7321] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 641.885807][ T7343] usb 3-1: USB disconnect, device number 22 [ 642.105215][ T7321] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 642.269126][ T7321] usb 4-1: Using ep0 maxpacket: 32 [ 642.284498][ T7321] usb 4-1: unable to get BOS descriptor or descriptor too short [ 642.294125][ T7321] usb 4-1: config 14 has an invalid interface number: 228 but max is 0 [ 642.314457][ T7321] usb 4-1: config 14 has no interface number 0 [ 642.333354][ T7321] usb 4-1: config 14 interface 228 has no altsetting 0 [ 642.381306][ T7321] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 642.421032][ T7321] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.451022][ T7321] usb 4-1: Product: syz [ 642.464294][ T7321] usb 4-1: Manufacturer: syz [ 642.474940][ T7321] usb 4-1: SerialNumber: syz [ 642.632744][T22529] netlink: 'syz.0.2763': attribute type 4 has an invalid length. [ 642.654882][T22529] netlink: 'syz.0.2763': attribute type 3 has an invalid length. [ 642.696912][T22495] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2758'. [ 642.818889][T21594] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 642.969569][T21594] usb 3-1: Using ep0 maxpacket: 32 [ 642.977529][T21594] usb 3-1: config 164 has an invalid interface number: 195 but max is 0 [ 642.997146][T21594] usb 3-1: config 164 has an invalid descriptor of length 151, skipping remainder of the config [ 643.009372][T21594] usb 3-1: config 164 has no interface number 0 [ 643.016881][T21594] usb 3-1: config 164 interface 195 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 643.033571][T21594] usb 3-1: config 164 interface 195 has no altsetting 0 [ 643.045715][T21594] usb 3-1: New USB device found, idVendor=2304, idProduct=021a, bcdDevice=c7.8c [ 643.055760][T21594] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.064556][T21594] usb 3-1: Product: syz [ 643.075658][T21594] usb 3-1: Manufacturer: syz [ 643.080429][T21594] usb 3-1: SerialNumber: syz [ 643.280972][ T7321] legousbtower 4-1:14.228: interrupt endpoints not found [ 643.306929][ T7321] usb 4-1: USB disconnect, device number 10 [ 643.550338][T22567] netlink: 'syz.0.2770': attribute type 10 has an invalid length. [ 643.638916][ T7321] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 643.780684][T22580] CIFS: VFS: UNC: missing share name [ 643.788033][T22580] CIFS: VFS: Malformed UNC in devname [ 643.825405][ T7321] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 643.837924][ T7321] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 643.848519][ T7321] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.857752][ T7321] usb 4-1: Product: syz [ 643.863191][ T7321] usb 4-1: Manufacturer: syz [ 643.869697][ T7321] usb 4-1: SerialNumber: syz [ 643.880682][ T7321] usb 4-1: config 0 descriptor?? [ 643.895099][ T7321] garmin_gps 4-1:0.0: Garmin GPS usb/tty converter detected [ 643.904237][ T7321] garmin_gps ttyUSB0: failed to submit interrupt urb: -22 [ 643.911532][ T7321] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -22 [ 644.107223][ T5703] usb 4-1: USB disconnect, device number 11 [ 644.119911][ T5703] garmin_gps 4-1:0.0: device disconnected [ 644.133885][T22599] fuse: Unknown parameter 'æd' [ 644.726121][T22620] netlink: 'syz.0.2779': attribute type 4 has an invalid length. [ 644.736045][T22620] netlink: 'syz.0.2779': attribute type 3 has an invalid length. [ 644.899291][ T7321] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 645.063104][ T7321] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 645.073340][ T7321] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 645.087243][ T7321] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 645.096696][ T7321] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.278846][ T5703] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 645.415691][ T7321] usb 4-1: usb_control_msg returned -71 [ 645.425545][ T7321] usbtmc 4-1:16.0: can't read capabilities [ 645.463476][ T7321] usb 4-1: USB disconnect, device number 12 [ 645.543803][T21594] usb 3-1: USB disconnect, device number 23 [ 645.637355][ T5703] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 645.660296][ T5703] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.683394][ T5703] usb 2-1: Product: syz [ 645.691419][ T5703] usb 2-1: Manufacturer: syz [ 645.696126][ T5703] usb 2-1: SerialNumber: syz [ 645.706035][ T5703] usb 2-1: config 0 descriptor?? [ 645.938862][T21593] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 646.115012][T22707] xt_CT: You must specify a L4 protocol and not use inversions on it [ 646.159514][T21593] usb 1-1: Using ep0 maxpacket: 32 [ 646.192571][T21593] usb 1-1: unable to get BOS descriptor or descriptor too short [ 646.220775][T21593] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 646.256399][T21593] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 90, changing to 7 [ 646.283175][T22710] veth0: entered promiscuous mode [ 646.293657][T21593] usb 1-1: New USB device found, idVendor=047f, idProduct=c010, bcdDevice= 0.40 [ 646.305952][T21593] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.314734][T21593] usb 1-1: Product: syz [ 646.330104][T22710] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2789'. [ 646.339612][T21593] usb 1-1: Manufacturer: syz [ 646.344413][T21593] usb 1-1: SerialNumber: syz [ 646.444173][T22709] veth0: left promiscuous mode [ 646.502900][T22718] bond2: entered allmulticast mode [ 646.514758][T22718] vti0: entered allmulticast mode [ 646.627436][T22717] bond2: left allmulticast mode [ 646.641180][T22717] vti0: left allmulticast mode [ 646.686577][T21593] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 646.761155][ T5703] usb 2-1: Firmware version (0.0) predates our first public release. [ 646.795197][T21593] usb 1-1: USB disconnect, device number 10 [ 646.809626][ T5703] usb 2-1: Please update to version 0.2 or newer [ 647.479224][ T5703] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 647.652137][ T5703] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 647.701992][ T5703] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 647.745649][ T5703] usb 1-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 647.777395][ T5703] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.818138][ T5703] usb 1-1: config 0 descriptor?? [ 647.906009][T22750] binder: 22749:22750 ioctl ae41 2 returned -22 [ 647.975140][T22753] binder: 22749:22753 ioctl 80083313 200000000280 returned -22 [ 648.118817][ T5703] usbhid 1-1:0.0: can't add hid device: -71 [ 648.127608][ T5703] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 648.145769][ T5703] usb 1-1: USB disconnect, device number 11 [ 648.348311][T21593] usb 2-1: USB disconnect, device number 12 [ 648.854955][T22791] FAULT_INJECTION: forcing a failure. [ 648.854955][T22791] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 648.869902][T22791] CPU: 0 UID: 0 PID: 22791 Comm: syz.4.2798 Tainted: G L syzkaller #0 PREEMPT(full) [ 648.869928][T22791] Tainted: [L]=SOFTLOCKUP [ 648.869934][T22791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 648.869944][T22791] Call Trace: [ 648.869951][T22791] [ 648.869958][T22791] dump_stack_lvl+0xe8/0x150 [ 648.869983][T22791] should_fail_ex+0x40c/0x560 [ 648.870011][T22791] _copy_to_user+0x31/0xb0 [ 648.870031][T22791] environ_read+0x29c/0x420 [ 648.870061][T22791] ? __pfx_environ_read+0x10/0x10 [ 648.870082][T22791] vfs_read+0x213/0xa80 [ 648.870106][T22791] ? __pfx___mutex_lock+0x10/0x10 [ 648.870129][T22791] ? __pfx_vfs_read+0x10/0x10 [ 648.870149][T22791] ? __fget_files+0x2a/0x420 [ 648.870170][T22791] ? __fget_files+0x3a2/0x420 [ 648.870184][T22791] ? __fget_files+0x2a/0x420 [ 648.870208][T22791] ksys_read+0x150/0x270 [ 648.870230][T22791] ? __pfx_ksys_read+0x10/0x10 [ 648.870256][T22791] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.870275][T22791] do_syscall_64+0x174/0x580 [ 648.870295][T22791] ? trace_irq_disable+0x3b/0x140 [ 648.870318][T22791] ? clear_bhb_loop+0x40/0x90 [ 648.870339][T22791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.870356][T22791] RIP: 0033:0x7fc94b39ce59 [ 648.870383][T22791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 648.870397][T22791] RSP: 002b:00007fc94c23e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 648.870416][T22791] RAX: ffffffffffffffda RBX: 00007fc94b615fa0 RCX: 00007fc94b39ce59 [ 648.870429][T22791] RDX: 00000000ffffffb2 RSI: 0000200000000a40 RDI: 0000000000000003 [ 648.870440][T22791] RBP: 00007fc94c23e090 R08: 0000000000000000 R09: 0000000000000000 [ 648.870450][T22791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 648.870461][T22791] R13: 00007fc94b616038 R14: 00007fc94b615fa0 R15: 00007fc94b73fa48 [ 648.870493][T22791] [ 649.143894][T22793] tipc: Enabling of bearer rejected, media not registered [ 649.362936][T22811] netlink: 'syz.2.2801': attribute type 10 has an invalid length. [ 649.399249][T21593] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 649.478970][ T24] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 649.569830][T21593] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 649.586091][T21593] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 649.597032][T21593] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 649.606612][T21593] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 649.632118][T21593] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 649.676505][T21593] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 649.691346][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 649.702272][T21593] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 649.714554][T21593] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 649.723532][T21593] usb 4-1: Product: syz [ 649.727800][T21593] usb 4-1: Manufacturer: syz [ 649.743975][T22793] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 649.753231][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 649.755316][T21593] cdc_wdm 4-1:1.0: skipping garbage [ 649.768736][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 649.770974][T21593] cdc_wdm 4-1:1.0: skipping garbage [ 649.787646][ T24] usb 2-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 649.789506][T21593] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 649.799718][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.804555][T21593] cdc_wdm 4-1:1.0: Unknown control protocol [ 649.835353][ T24] usb 2-1: config 0 descriptor?? [ 649.849014][ T7343] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 649.881055][T22839] kvm: pic: non byte write [ 649.923420][T22843] syzkaller0: entered promiscuous mode [ 649.929266][T22843] syzkaller0: entered allmulticast mode [ 649.952660][T22843] tcf_pedit_act: 7 callbacks suppressed [ 649.952673][T22843] tc action pedit offset must be on 32 bit boundaries [ 649.968013][T22843] tc action pedit offset must be on 32 bit boundaries [ 649.974826][T22843] tc action pedit offset must be on 32 bit boundaries [ 649.981650][T22843] tc action pedit offset must be on 32 bit boundaries [ 649.988414][T22843] tc action pedit offset must be on 32 bit boundaries [ 649.995213][T22843] tc action pedit offset must be on 32 bit boundaries [ 650.002025][T22843] tc action pedit offset must be on 32 bit boundaries [ 650.008870][T22843] tc action pedit offset must be on 32 bit boundaries [ 650.015656][T22843] tc action pedit offset must be on 32 bit boundaries [ 650.022437][T22843] tc action pedit offset must be on 32 bit boundaries [ 650.029209][T22843] 0: reclassify loop, rule prio 0, protocol 800 [ 650.060620][ T7321] usb 4-1: USB disconnect, device number 13 [ 650.068962][ T7343] usb 1-1: Using ep0 maxpacket: 32 [ 650.082355][ T7343] usb 1-1: config 164 has an invalid interface number: 195 but max is 0 [ 650.093972][ T7343] usb 1-1: config 164 has an invalid descriptor of length 151, skipping remainder of the config [ 650.105852][ T7343] usb 1-1: config 164 has no interface number 0 [ 650.119721][ T7343] usb 1-1: config 164 interface 195 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 650.151324][ T7343] usb 1-1: config 164 interface 195 has no altsetting 0 [ 650.171059][ T7343] usb 1-1: New USB device found, idVendor=2304, idProduct=021a, bcdDevice=c7.8c [ 650.180509][ T7343] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.196925][ T7343] usb 1-1: Product: syz [ 650.206329][ T7343] usb 1-1: Manufacturer: syz [ 650.216406][ T7343] usb 1-1: SerialNumber: syz [ 650.664504][T22794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 650.680069][T22794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 651.039638][T21593] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 651.173989][ T24] usb 2-1: USB disconnect, device number 13 [ 651.201097][T21593] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 651.218632][T21593] usb 5-1: config 1 has no interface number 0 [ 651.255679][T21593] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 651.300958][T21593] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 651.334971][T21593] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 651.377023][T21593] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 651.404064][T21593] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.432441][T21593] usb 5-1: Product: syz [ 651.447977][T21593] usb 5-1: Manufacturer: syz [ 651.467765][T21593] usb 5-1: SerialNumber: syz [ 651.511154][T22870] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 651.986932][T22870] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 652.089393][ T7321] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 652.249156][ T7321] usb 3-1: Using ep0 maxpacket: 8 [ 652.263821][ T7321] usb 3-1: config 1 has an invalid descriptor of length 191, skipping remainder of the config [ 652.286508][ T7321] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xA7, changing to 0x87 [ 652.298537][ T7321] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 225, changing to 7 [ 652.310495][ T7321] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 34649, setting to 1024 [ 652.321709][ T7321] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 652.336763][ T7321] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 652.345968][ T7321] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.354129][ T7321] usb 3-1: Product: syz [ 652.358321][ T7321] usb 3-1: Manufacturer: syz [ 652.363036][ T7321] usb 3-1: SerialNumber: syz [ 652.377131][ T7321] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 652.386647][ T7321] usbtest 3-1:1.0: Linux user mode ISO test driver [ 652.393245][ T7321] usbtest 3-1:1.0: high-speed {control iso-in} tests (+alt) [ 652.482319][ T7343] usb 1-1: USB disconnect, device number 12 [ 652.676438][T22928] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 652.701297][T22928] netlink: 'syz.1.2816': attribute type 10 has an invalid length. [ 653.088044][ T7343] usb 3-1: USB disconnect, device number 24 [ 653.326139][T22966] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2818'. [ 653.433728][T22971] tipc: Enabling of bearer rejected, already enabled [ 653.689027][ T5703] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 653.846350][T21593] usb 5-1: Incompatible driver and firmware versions [ 653.855880][ T5703] usb 3-1: Using ep0 maxpacket: 8 [ 653.874935][ T5703] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 653.887245][T21593] usb 5-1: USB disconnect, device number 31 [ 653.899764][ T5703] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 653.926919][ T5703] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 653.939658][ T5703] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 653.979444][ T5703] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 653.992920][ T5703] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.222266][ T5703] usb 3-1: GET_CAPABILITIES returned 0 [ 654.239536][ T5703] usbtmc 3-1:16.0: can't read capabilities [ 654.440516][T21593] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 654.600641][T21593] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 654.609616][T21593] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 654.622373][T21593] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= 0.9c [ 654.631794][T21593] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.640032][T21593] usb 5-1: Product: syz [ 654.644416][T21593] usb 5-1: Manufacturer: syz [ 654.648834][ T7343] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 654.649385][T21593] usb 5-1: SerialNumber: syz [ 654.664211][T21593] usb 5-1: config 0 descriptor?? [ 654.675671][T21593] ims_pcu 5-1:0.0: Missing CDC union descriptor [ 654.682824][T21593] ims_pcu 5-1:0.0: probe with driver ims_pcu failed with error -22 [ 654.699318][ T7321] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 654.810908][ T7343] usb 1-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 654.820067][ T7343] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 654.832163][ T7343] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 255, setting to 8 [ 654.843201][ T7343] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 654.852966][ T7343] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.863290][ T7321] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 654.876276][ T7321] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.886069][T23003] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 654.901346][ T7321] usb 4-1: config 0 descriptor?? [ 654.914280][ T7321] cp210x 4-1:0.0: cp210x converter detected [ 654.933199][ T5703] usb 5-1: USB disconnect, device number 32 [ 655.102629][ T7343] usb 1-1: string descriptor 0 read error: -71 [ 655.192936][ T7343] usb 1-1: USB disconnect, device number 13 [ 655.515787][ T7321] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -121 [ 655.525377][ T7321] cp210x 4-1:0.0: GPIO initialisation failed: -121 [ 655.536648][ T7321] usb 4-1: cp210x converter now attached to ttyUSB0 [ 655.719160][ T24] usb 4-1: USB disconnect, device number 14 [ 655.736094][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 655.746126][ T24] cp210x 4-1:0.0: device disconnected [ 655.829075][ T7321] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 656.000558][ T7321] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 656.020256][ T7321] usb 5-1: config 0 has no interfaces? [ 656.036057][ T7321] usb 5-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 656.058749][ T7321] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 656.069983][ T7321] usb 5-1: Product: syz [ 656.083321][ T7321] usb 5-1: config 0 descriptor?? [ 656.392830][ T5703] usb 3-1: USB disconnect, device number 25 [ 656.419459][T21593] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 656.579885][ T7321] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 656.653397][T21593] usb 2-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=2d.62 [ 656.663532][T21593] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.682288][T21593] usb 2-1: config 0 descriptor?? [ 656.718119][T21593] usb 2-1: selecting invalid altsetting 1 [ 656.747096][T21593] flexcop_usb: set interface failed. [ 656.760844][ T7321] usb 4-1: Using ep0 maxpacket: 8 [ 656.777262][ T7321] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 656.787362][ T7321] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.796283][ T7321] usb 4-1: Product: syz [ 656.800776][ T7321] usb 4-1: Manufacturer: syz [ 656.805540][ T7321] usb 4-1: SerialNumber: syz [ 656.817833][ T7321] usb 4-1: config 0 descriptor?? [ 656.827974][ T7321] gspca_main: se401-2.14.0 probing 047d:5003 [ 656.835108][ T7343] usb 5-1: USB disconnect, device number 33 [ 656.857533][T21593] b2c2_flexcop_usb 2-1:0.0: probe with driver b2c2_flexcop_usb failed with error -22 [ 657.227907][ T7321] gspca_se401: Too many frame sizes [ 657.431384][ T7321] usb 4-1: USB disconnect, device number 15 [ 658.029145][T23169] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2840'. [ 658.136721][T23171] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2840'. [ 658.355023][ T7343] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 658.551599][ T7343] usb 3-1: not running at top speed; connect to a high speed hub [ 658.590854][ T7343] usb 3-1: New USB device found, idVendor=04b4, idProduct=9320, bcdDevice= 0.40 [ 658.631681][ T7343] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.681915][ T7343] usb 3-1: Product: syz [ 658.700349][ T7343] usb 3-1: Manufacturer: syz [ 658.714947][ T7343] usb 3-1: SerialNumber: syz [ 658.730433][T21593] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 658.917272][T21593] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 658.967857][T21593] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 658.997878][T21593] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 659.022076][T21593] usb 1-1: Product: syz [ 659.048180][T21593] usb 1-1: Manufacturer: syz [ 659.066248][T21593] usb 1-1: SerialNumber: syz [ 659.083416][T21594] usb 2-1: USB disconnect, device number 14 [ 659.414071][T21593] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 659.485287][T21593] usb 1-1: USB disconnect, device number 14 [ 659.541802][T21593] usblp0: removed [ 660.876149][T23225] netlink: 'syz.1.2846': attribute type 1 has an invalid length. [ 661.051305][T23225] netlink: 'syz.1.2846': attribute type 13 has an invalid length. [ 661.104281][T23225] bridge0: port 3(vlan2) entered disabled state [ 661.116367][T23276] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2846'. [ 661.208789][T21594] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 661.337639][ T7343] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 661.358520][ T7343] usb 3-1: MIDIStreaming interface descriptor not found [ 661.368993][T21594] usb 5-1: Using ep0 maxpacket: 16 [ 661.385931][T21594] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 661.408381][T21594] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 661.422784][T21594] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 661.433376][T21594] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.463816][T21594] usb 5-1: Product: syz [ 661.473544][T21594] usb 5-1: Manufacturer: syz [ 661.483539][T21594] usb 5-1: SerialNumber: syz [ 661.498515][T21594] usb 5-1: config 0 descriptor?? [ 661.527013][ T7343] usb 3-1: USB disconnect, device number 26 [ 661.533733][T21594] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 661.547901][T21594] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 661.610870][ T6094] udevd[6094]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 661.626827][T23308] netlink: 'syz.0.2850': attribute type 4 has an invalid length. [ 661.667533][T23302] FAULT_INJECTION: forcing a failure. [ 661.667533][T23302] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 661.683927][T23302] CPU: 0 UID: 0 PID: 23302 Comm: syz.2.2851 Tainted: G L syzkaller #0 PREEMPT(full) [ 661.683953][T23302] Tainted: [L]=SOFTLOCKUP [ 661.683959][T23302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 661.683968][T23302] Call Trace: [ 661.683974][T23302] [ 661.683980][T23302] dump_stack_lvl+0xe8/0x150 [ 661.684007][T23302] should_fail_ex+0x40c/0x560 [ 661.684033][T23302] _copy_from_user+0x2d/0xb0 [ 661.684055][T23302] kvm_arch_vcpu_ioctl+0x108b/0x2fb0 [ 661.684106][T23302] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 661.684129][T23302] ? is_bpf_text_address+0x26/0x2b0 [ 661.684157][T23302] ? is_bpf_text_address+0x26/0x2b0 [ 661.684177][T23302] ? is_bpf_text_address+0x292/0x2b0 [ 661.684193][T23302] ? is_bpf_text_address+0x26/0x2b0 [ 661.684221][T23302] ? kernel_text_address+0xa5/0xe0 [ 661.684240][T23302] ? __kernel_text_address+0xd/0x30 [ 661.684258][T23302] ? unwind_get_return_address+0x4d/0x90 [ 661.684291][T23302] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 661.684314][T23302] ? arch_stack_walk+0xfb/0x150 [ 661.684347][T23302] ? stack_trace_save+0xa9/0x100 [ 661.684368][T23302] ? __pfx_stack_trace_save+0x10/0x10 [ 661.684388][T23302] ? kasan_save_track+0x4f/0x80 [ 661.684408][T23302] ? stack_depot_save_flags+0x33/0x800 [ 661.684431][T23302] ? __lock_acquire+0x683/0x2cf0 [ 661.684450][T23302] ? __kasan_slab_free+0x5c/0x80 [ 661.684465][T23302] ? kfree+0x1c5/0x640 [ 661.684484][T23302] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 661.684502][T23302] ? security_file_ioctl+0xc3/0x2a0 [ 661.684516][T23302] ? __se_sys_ioctl+0x47/0x170 [ 661.684534][T23302] ? do_syscall_64+0x174/0x580 [ 661.684555][T23302] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.684588][T23302] ? __mutex_trylock_common+0x15f/0x270 [ 661.684611][T23302] ? __pfx___mutex_trylock_common+0x10/0x10 [ 661.684635][T23302] ? rcu_is_watching+0x15/0xb0 [ 661.684654][T23302] ? trace_contention_end+0x3d/0x140 [ 661.684675][T23302] ? __mutex_lock+0x30d/0x1550 [ 661.684699][T23302] ? kasan_quarantine_put+0xbb/0x1f0 [ 661.684729][T23302] ? __pfx___mutex_lock+0x10/0x10 [ 661.684752][T23302] ? tomoyo_path_number_perm+0x219/0x5f0 [ 661.684772][T23302] ? do_vfs_ioctl+0x116f/0x1530 [ 661.684794][T23302] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 661.684817][T23302] kvm_vcpu_ioctl+0x7e3/0xfd0 [ 661.684845][T23302] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 661.684864][T23302] ? hook_file_ioctl+0x1f0/0x5f0 [ 661.684900][T23302] ? __fget_files+0x2a/0x420 [ 661.684918][T23302] ? __fget_files+0x2a/0x420 [ 661.684932][T23302] ? __fget_files+0x3a2/0x420 [ 661.684947][T23302] ? __fget_files+0x2a/0x420 [ 661.684964][T23302] ? bpf_lsm_file_ioctl+0x9/0x20 [ 661.684987][T23302] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 661.685007][T23302] __se_sys_ioctl+0xfc/0x170 [ 661.685026][T23302] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.685044][T23302] do_syscall_64+0x174/0x580 [ 661.685064][T23302] ? trace_irq_disable+0x3b/0x140 [ 661.685087][T23302] ? clear_bhb_loop+0x40/0x90 [ 661.685108][T23302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.685124][T23302] RIP: 0033:0x7fb93119ce59 [ 661.685140][T23302] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 661.685154][T23302] RSP: 002b:00007fb9320c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 661.685172][T23302] RAX: ffffffffffffffda RBX: 00007fb931415fa0 RCX: 00007fb93119ce59 [ 661.685184][T23302] RDX: 0000200000000080 RSI: 00000000c048aeca RDI: 0000000000000005 [ 661.685195][T23302] RBP: 00007fb9320c7090 R08: 0000000000000000 R09: 0000000000000000 [ 661.685214][T23302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 661.685224][T23302] R13: 00007fb931416038 R14: 00007fb931415fa0 R15: 00007fb93153fa48 [ 661.685252][T23302] [ 662.076173][T23321] netlink: 'syz.0.2850': attribute type 3 has an invalid length. [ 662.109846][ T7343] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 662.186302][T23276] 8021q: adding VLAN 0 to HW filter on device bond2 [ 662.207832][T23279] bond2: (slave gretap1): making interface the new active one [ 662.253993][T23279] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 662.276459][ T7343] usb 3-1: config 0 has an invalid interface number: 126 but max is 0 [ 662.287526][ T7343] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 662.297848][ T7343] usb 3-1: config 0 has no interface number 0 [ 662.304232][ T7343] usb 3-1: config 0 interface 126 has no altsetting 0 [ 662.313563][ T7343] usb 3-1: New USB device found, idVendor=04dd, idProduct=8007, bcdDevice=df.8e [ 662.319227][T23306] macvlan3: entered promiscuous mode [ 662.327924][T23306] macvlan3: entered allmulticast mode [ 662.336490][T23306] bond2: entered promiscuous mode [ 662.341625][T23306] gretap1: entered promiscuous mode [ 662.347423][T23306] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 662.354934][T23306] bond2: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 662.372149][T23306] bond2: left promiscuous mode [ 662.379444][T23306] gretap1: left promiscuous mode [ 662.392209][ T1354] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.401789][ T7343] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.410794][ T1354] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.419983][ T7343] usb 3-1: Product: syz [ 662.428941][ T7343] usb 3-1: Manufacturer: syz [ 662.436899][ T1354] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.455670][ T7343] usb 3-1: SerialNumber: syz [ 662.469718][T21594] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 662.476324][T21594] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 662.494378][T23332] usb usb8: usbfs: process 23332 (syz.3.2852) did not claim interface 0 before use [ 662.494813][ T1354] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.526041][ T7343] usb 3-1: config 0 descriptor?? [ 662.561765][ T7343] zaurus 3-1:0.126: More than one union descriptor, skipping ... [ 662.585340][ T7343] zaurus 3-1:0.126: skipping garbage [ 662.606506][ T7343] usb 3-1: No union descriptors [ 662.775870][T21592] usb 3-1: USB disconnect, device number 27 [ 662.859214][ T24] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 662.884907][T21594] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 662.894601][T21594] em28xx 5-1:0.0: No AC97 audio processor [ 663.032313][ T24] usb 1-1: config 253 has an invalid interface number: 130 but max is 0 [ 663.040945][ T24] usb 1-1: config 253 has no interface number 0 [ 663.047278][ T24] usb 1-1: config 253 interface 130 has no altsetting 0 [ 663.063331][ T24] usb 1-1: New USB device found, idVendor=1e59, idProduct=0002, bcdDevice=98.ed [ 663.072943][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.081441][ T24] usb 1-1: Product: syz [ 663.085749][ T24] usb 1-1: Manufacturer: syz [ 663.092136][ T24] usb 1-1: SerialNumber: syz [ 663.642816][T23387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 663.705323][T23387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 663.724121][T23343] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 663.751181][T23343] syz_tun: entered allmulticast mode [ 663.784324][T23341] syz_tun: left allmulticast mode [ 663.802695][ T24] dvb-usb: found a 'EvolutePC TVWay+' in cold state, will try to load a firmware [ 663.819993][ T24] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 663.837502][ T24] dib0700: firmware download failed at 7 with -22 [ 663.864902][ T24] usb 1-1: USB disconnect, device number 15 [ 664.215127][T23407] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 664.720300][T21594] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 664.881554][T21594] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 664.891116][T21594] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.914610][T21594] usb 3-1: config 0 descriptor?? [ 665.274826][T23436] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2866'. [ 665.393806][T21594] usb 3-1: string descriptor 0 read error: -71 [ 665.415321][T21594] usb 3-1: USB disconnect, device number 28 [ 665.768999][T21594] usb 5-1: USB disconnect, device number 34 [ 665.775862][T21594] em28xx 5-1:0.0: Disconnecting em28xx [ 665.792921][T21594] em28xx 5-1:0.0: Freeing device [ 665.887170][T23461] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 666.024695][T23466] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2867'. [ 666.646773][T23504] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 667.323590][ T5632] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 667.350037][ T5632] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 667.360018][ T5632] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 667.399328][ T5632] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 667.407079][ T5632] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 667.505784][T23525] FAULT_INJECTION: forcing a failure. [ 667.505784][T23525] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 667.522276][T23525] CPU: 0 UID: 0 PID: 23525 Comm: syz.4.2875 Tainted: G L syzkaller #0 PREEMPT(full) [ 667.522303][T23525] Tainted: [L]=SOFTLOCKUP [ 667.522310][T23525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 667.522319][T23525] Call Trace: [ 667.522327][T23525] [ 667.522334][T23525] dump_stack_lvl+0xe8/0x150 [ 667.522360][T23525] should_fail_ex+0x40c/0x560 [ 667.522386][T23525] _copy_to_user+0x31/0xb0 [ 667.522406][T23525] copy_siginfo_to_user+0x22/0xc0 [ 667.522430][T23525] x64_setup_rt_frame+0x764/0xc50 [ 667.522473][T23525] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 667.522505][T23525] arch_do_signal_or_restart+0x456/0x860 [ 667.522531][T23525] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 667.522561][T23525] ? ksys_read+0x242/0x270 [ 667.522589][T23525] exit_to_user_mode_loop+0x104/0x730 [ 667.522605][T23525] ? rcu_is_watching+0x15/0xb0 [ 667.522625][T23525] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.522644][T23525] do_syscall_64+0x353/0x580 [ 667.522666][T23525] ? trace_irq_disable+0x3b/0x140 [ 667.522688][T23525] ? clear_bhb_loop+0x40/0x90 [ 667.522709][T23525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.522725][T23525] RIP: 0033:0x7fc94b39ce57 [ 667.522748][T23525] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 667.522762][T23525] RSP: 002b:00007fc94c23e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 667.522780][T23525] RAX: 0000000000000000 RBX: 00007fc94b615fa0 RCX: 00007fc94b39ce59 [ 667.522791][T23525] RDX: 0000000000000054 RSI: 0000200000000140 RDI: 0000000000000003 [ 667.522802][T23525] RBP: 00007fc94c23e090 R08: 0000000000000000 R09: 0000000000000000 [ 667.522812][T23525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 667.522822][T23525] R13: 00007fc94b616038 R14: 00007fc94b615fa0 R15: 00007fc94b73fa48 [ 667.522850][T23525] [ 667.724187][ T5634] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 667.733700][ T5634] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 667.750498][ T5634] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 667.761547][ T5634] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 667.772670][ T5634] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 668.740273][ T7343] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 668.919133][ T7343] usb 2-1: Using ep0 maxpacket: 16 [ 668.933373][ T7343] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 668.949498][ T7343] usb 2-1: config 0 has no interface number 0 [ 668.959023][ T7321] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 668.992534][T21285] bond0: (slave netdevsim1): Releasing backup interface [ 669.023256][ T7343] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 669.033129][ T7343] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.042487][T23557] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.046939][ T7343] usb 2-1: Product: syz [ 669.055241][T23557] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.058555][ T7343] usb 2-1: Manufacturer: syz [ 669.065616][T23557] bridge_slave_0: entered allmulticast mode [ 669.073469][ T7343] usb 2-1: SerialNumber: syz [ 669.077934][T23557] bridge_slave_0: entered promiscuous mode [ 669.087039][T23557] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.088410][ T7343] usb 2-1: config 0 descriptor?? [ 669.094577][T23557] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.094722][T23557] bridge_slave_1: entered allmulticast mode [ 669.096376][T23557] bridge_slave_1: entered promiscuous mode [ 669.135155][ T7343] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 669.148978][ T7321] usb 1-1: Using ep0 maxpacket: 32 [ 669.157666][ T7321] usb 1-1: config 164 has an invalid interface number: 195 but max is 0 [ 669.174884][ T7321] usb 1-1: config 164 has an invalid descriptor of length 151, skipping remainder of the config [ 669.189890][ T7321] usb 1-1: config 164 has no interface number 0 [ 669.197952][ T7321] usb 1-1: config 164 interface 195 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 669.224212][T23557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 669.235186][ T7321] usb 1-1: config 164 interface 195 has no altsetting 0 [ 669.245669][T23557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 669.257199][ T7321] usb 1-1: New USB device found, idVendor=2304, idProduct=021a, bcdDevice=c7.8c [ 669.288075][ T7321] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.301360][ T7321] usb 1-1: Product: syz [ 669.305623][ T7321] usb 1-1: Manufacturer: syz [ 669.310968][ T7321] usb 1-1: SerialNumber: syz [ 669.352716][T23557] team0: Port device team_slave_0 added [ 669.367393][T23557] team0: Port device team_slave_1 added [ 669.488334][T23746] input: syz1 as /devices/virtual/input/input52 [ 669.488336][T23557] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 669.503129][T23557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 669.522949][T23746] input: failed to attach handler leds to device input52, error: -6 [ 669.539295][T23557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 669.641036][ T7343] gspca_spca1528: reg_w err -110 [ 669.667822][T23557] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 669.669138][ T7343] spca1528 2-1:0.1: probe with driver spca1528 failed with error -110 [ 669.686439][T23557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 669.730169][T23557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 669.793199][T21285] vlan0: left allmulticast mode [ 669.803689][T21285] geneve0: left allmulticast mode [ 669.815781][T21285] bridge0: port 1(vlan0) entered disabled state [ 669.879711][ T5634] Bluetooth: hci5: command tx timeout [ 670.017059][T23591] openvswitch: netlink: Actions may not be safe on all matching packets [ 670.066188][T21285] bond1 (unregistering): (slave geneve2): Releasing active interface [ 670.081349][T21285] geneve2 (unregistering): left allmulticast mode [ 670.157684][T21285] bond0 (unregistering): Released all slaves [ 670.173749][T21285] bond1 (unregistering): Released all slaves [ 670.196681][T21285] bond2 (unregistering): Released all slaves [ 670.286484][T23557] hsr_slave_0: entered promiscuous mode [ 670.301971][T23557] hsr_slave_1: entered promiscuous mode [ 670.317708][T23557] debugfs: 'hsr0' already exists in 'hsr' [ 670.324875][T23557] Cannot create hsr debugfs directory [ 670.368861][ T7352] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 670.444376][T21285] tipc: Disabling bearer [ 670.452159][T21285] tipc: Disabling bearer [ 670.470870][T21285] tipc: Left network mode [ 670.540472][ T7352] usb 5-1: Using ep0 maxpacket: 16 [ 670.562998][ T7352] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 670.598486][ T7352] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 670.628850][ T7352] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 670.647209][ T7352] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.692568][ T7352] usb 5-1: config 0 descriptor?? [ 670.719258][T21594] usb 4-1: new low-speed USB device number 16 using dummy_hcd [ 671.004644][T23775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 671.095619][T23887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 671.097153][T23775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 671.155555][T23887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 671.171933][ T5290] 8021q: adding VLAN 0 to HW filter on device eth1 [ 671.382869][ T7352] corsair 0003:1B1C:1B02.001E: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.4-1/input0 [ 671.661698][ T7321] usb 1-1: USB disconnect, device number 16 [ 671.783804][T21285] hsr_slave_0: left promiscuous mode [ 671.793721][ T7352] usb 5-1: USB disconnect, device number 35 [ 671.810237][T21285] hsr_slave_1: left promiscuous mode [ 671.835974][T21285] batman_adv: batadv0: Removing interface: ipvlan2 [ 671.911069][T21594] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 671.958912][ T5634] Bluetooth: hci5: command tx timeout [ 672.079110][T21594] usb 4-1: Using ep0 maxpacket: 32 [ 672.092019][T21594] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 672.105031][T21594] usb 4-1: config 0 has no interfaces? [ 672.127007][T21594] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 672.148839][T21594] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.158353][T21594] usb 4-1: Product: syz [ 672.169369][T21594] usb 4-1: Manufacturer: syz [ 672.181434][T21594] usb 4-1: SerialNumber: syz [ 672.201543][T21594] usb 4-1: config 0 descriptor?? [ 672.422069][T23931] loop5: detected capacity change from 0 to 7 [ 672.440435][T23931] Dev loop5: unable to read RDB block 7 [ 672.453821][T23931] loop5: unable to read partition table [ 672.469145][T23931] loop5: partition table beyond EOD, truncated [ 672.490039][T23931] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 672.499789][T21593] usb 2-1: USB disconnect, device number 15 [ 672.547496][T23992] Dev loop5: unable to read RDB block 7 [ 672.571584][T23992] loop5: unable to read partition table [ 672.591132][T23992] loop5: partition table beyond EOD, truncated [ 672.613857][T23992] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 672.665922][T21594] usb 4-1: USB disconnect, device number 17 [ 672.706820][T23557] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 672.770924][T23557] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 672.779128][T23557] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 672.815412][T23557] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 672.837752][T23557] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 672.864514][T23557] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 672.878014][T23557] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 672.910029][T23557] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 673.093249][T23557] 8021q: adding VLAN 0 to HW filter on device bond0 [ 673.133294][T23557] 8021q: adding VLAN 0 to HW filter on device team0 [ 673.172419][ T1354] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.179612][ T1354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 673.228628][ T1354] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.235780][ T1354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 673.304749][T21285] IPVS: stop unused estimator thread 0... [ 673.382923][T23557] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 673.485041][T23557] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 673.555032][T23557] veth0_vlan: entered promiscuous mode [ 673.590770][T23557] veth1_vlan: entered promiscuous mode [ 673.628799][ T7343] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 673.653826][T23557] veth0_macvtap: entered promiscuous mode [ 673.667035][T23557] veth1_macvtap: entered promiscuous mode [ 673.692235][T23557] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 673.740141][T23557] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 673.758858][ T1354] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.778012][ T1354] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.787308][ T7343] usb 4-1: Using ep0 maxpacket: 32 [ 673.802177][ T7343] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 673.818353][ T1354] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.832321][ T7343] usb 4-1: config 0 has no interface number 0 [ 673.848868][ T1354] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.849623][ T7343] usb 4-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 673.883392][ T7343] usb 4-1: config 0 interface 89 has no altsetting 0 [ 673.945749][ T7343] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 673.971007][ T7343] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.993498][ T7343] usb 4-1: Product: syz [ 674.005089][ T7343] usb 4-1: Manufacturer: syz [ 674.022110][ T7343] usb 4-1: SerialNumber: syz [ 674.039409][ T5634] Bluetooth: hci5: command tx timeout [ 674.055701][ T7343] usb 4-1: config 0 descriptor?? [ 674.065466][T21292] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 674.084510][ T7343] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 674.094543][ T7343] em28xx 4-1:0.89: Video interface 89 found: [ 674.099647][T21292] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 674.187273][T21293] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 674.207802][T21293] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 674.388881][ T24] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 674.555436][ T24] usb 1-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 674.568878][ T24] usb 1-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 674.577906][ T24] usb 1-1: Product: syz [ 674.582593][ T24] usb 1-1: Manufacturer: syz [ 674.587905][ T24] usb 1-1: SerialNumber: syz [ 674.599282][T24072] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 674.612482][ T24] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 674.688852][ T7343] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 674.781013][T24072] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 674.791615][T24072] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 674.802432][T24072] usb 3-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 674.813948][T24087] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2901'. [ 674.823527][T24072] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.832841][T24087] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2901'. [ 674.846599][T24072] usb 3-1: config 0 descriptor?? [ 675.061426][T24072] Bluetooth: Can't get state to change to load ram patch err [ 675.072443][T24072] Bluetooth: Loading patch file failed [ 675.083940][T24072] ath3k 3-1:0.0: probe with driver ath3k failed with error -71 [ 675.105749][T24072] usb 3-1: USB disconnect, device number 29 [ 675.152602][T24087] xt_hashlimit: size too large, truncated to 1048576 [ 675.211259][T24136] ¾x9ÿ: renamed from bridge_slave_0 [ 675.227941][T24136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 675.260201][T24136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 675.316660][ T7343] em28xx 4-1:0.89: read from i2c device at 0xa0 failed with unknown error (status=236) [ 675.328523][ T24] vp7045: USB control message 'in' went wrong. [ 675.334858][ T24] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 675.345790][ T7343] em28xx 4-1:0.89: board has no eeprom [ 675.352081][ T24] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 675.373284][ T24] usb 1-1: USB disconnect, device number 17 [ 675.578835][ T7343] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 675.587986][ T7343] em28xx 4-1:0.89: analog set to bulk mode. [ 675.594563][ T7344] em28xx 4-1:0.89: Registering V4L2 extension [ 675.629453][ T7343] usb 4-1: USB disconnect, device number 18 [ 675.661474][ T7343] em28xx 4-1:0.89: Disconnecting em28xx [ 675.691689][ T7344] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 675.701889][ T7344] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 675.709605][ T7344] em28xx 4-1:0.89: No AC97 audio processor [ 675.729470][ T7344] usb 4-1: Decoder not found [ 675.736931][ T7344] em28xx 4-1:0.89: failed to create media graph [ 675.743746][ T7344] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 675.755343][ T7344] em28xx 4-1:0.89: Registering snapshot button... [ 675.767448][ T7344] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input53 [ 675.787963][ T7344] em28xx 4-1:0.89: Remote control support is not available for this card. [ 675.797686][ T7343] em28xx 4-1:0.89: Closing input extension [ 675.804075][ T7343] em28xx 4-1:0.89: Deregistering snapshot button [ 675.828244][ T7343] em28xx 4-1:0.89: Freeing device [ 676.130210][ T5634] Bluetooth: hci5: command tx timeout [ 676.153905][ T5632] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 676.174648][ T5632] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 676.183770][ T5632] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 676.195272][ T5632] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 676.206924][ T5632] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 676.760435][T24187] loop5: detected capacity change from 0 to 7 [ 676.790102][T24187] Dev loop5: unable to read RDB block 7 [ 676.815035][T24187] loop5: AHDI p2 [ 676.836909][T24187] loop5: partition table partially beyond EOD, truncated [ 677.537863][ T7352] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 677.981466][ T7352] usb 3-1: Using ep0 maxpacket: 32 [ 678.797225][ T5632] Bluetooth: hci2: command tx timeout [ 679.652851][ T7352] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 679.677309][ T7352] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 680.237945][ T7352] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 680.933603][ T5632] Bluetooth: hci2: command tx timeout [ 681.248174][ C1] sched: DL replenish lagged too much [ 684.088018][ T5632] Bluetooth: hci2: command tx timeout [ 685.966599][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.986154][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.405781][ T5632] Bluetooth: hci2: command tx timeout [ 688.716184][ T7352] usb 3-1: config 1 has no interface number 0 [ 699.684595][ T7352] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 4096, setting to 64 [ 707.794086][ T7352] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 714.953277][ T7352] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 714.995293][ T7352] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.380710][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.399306][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 782.248694][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 782.255665][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5646/1:b..l [ 782.263979][ C1] rcu: (detected by 1, t=10503 jiffies, g=137677, q=1013085 ncpus=2) [ 782.272115][ C1] task:syz-executor state:R running task stack:22480 pid:5646 tgid:5646 ppid:5624 task_flags:0x400140 flags:0x00080000 [ 782.286509][ C1] Call Trace: [ 782.289778][ C1] [ 782.292695][ C1] __schedule+0x17d9/0x56c0 [ 782.297194][ C1] ? __lock_acquire+0x683/0x2cf0 [ 782.302120][ C1] ? __pfx___schedule+0x10/0x10 [ 782.306957][ C1] preempt_schedule_irq+0x4d/0xa0 [ 782.311962][ C1] irqentry_exit+0x14f/0x8f0 [ 782.316532][ C1] ? trace_irq_disable+0x3b/0x140 [ 782.321539][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 782.327499][ C1] RIP: 0010:unwind_next_frame+0x70a/0x2550 [ 782.333287][ C1] Code: 04 20 84 c0 0f 85 a3 17 00 00 0f b7 1a c1 eb 0b 80 e3 01 48 8b 04 24 42 0f b6 04 20 84 c0 0f 85 ac 17 00 00 49 8d 46 35 88 18 <0f> b7 1a 83 e3 0f 83 fb 04 0f 8e 84 00 00 00 83 fb 06 0f 8e 87 01 [ 782.352869][ C1] RSP: 0018:ffffc900041c7980 EFLAGS: 00000246 [ 782.358915][ C1] RAX: ffffc900041c7a5d RBX: 0000000000000000 RCX: ffffffff905556e8 [ 782.366870][ C1] RDX: ffffffff90d64f2c RSI: ffffffff90d64f10 RDI: ffffffff8c2a9120 [ 782.374819][ C1] RBP: ffffc900041c7a60 R08: 0000000000000005 R09: 0000000000000000 [ 782.382772][ C1] R10: 0000000000000000 R11: ffffffff8e959c20 R12: dffffc0000000000 [ 782.390746][ C1] R13: ffffffff90d64f28 R14: ffffc900041c7a28 R15: 1ffff92000838f45 [ 782.398718][ C1] ? kasan_record_aux_stack+0xbd/0xd0 [ 782.404084][ C1] ? unwind_next_frame+0x8f/0x2550 [ 782.409179][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 782.415348][ C1] arch_stack_walk+0x11b/0x150 [ 782.420114][ C1] ? kasan_record_aux_stack+0xbd/0xd0 [ 782.425470][ C1] stack_trace_save+0xa9/0x100 [ 782.430216][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 782.435568][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 782.440307][ C1] ? __x64_sys_close+0x7e/0x110 [ 782.445131][ C1] ? do_syscall_64+0x174/0x580 [ 782.449874][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.455922][ C1] kasan_save_stack+0x3e/0x60 [ 782.460574][ C1] ? kasan_save_stack+0x3e/0x60 [ 782.465397][ C1] ? kasan_record_aux_stack+0xbd/0xd0 [ 782.470770][ C1] ? fput_close_sync+0x11f/0x240 [ 782.475681][ C1] kasan_record_aux_stack+0xbd/0xd0 [ 782.480857][ C1] kmem_cache_free+0x44f/0x650 [ 782.485602][ C1] fput_close_sync+0x11f/0x240 [ 782.490345][ C1] ? __pfx_fput_close_sync+0x10/0x10 [ 782.495610][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.501657][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.507699][ C1] __x64_sys_close+0x7e/0x110 [ 782.512354][ C1] do_syscall_64+0x174/0x580 [ 782.516929][ C1] ? trace_irq_disable+0x3b/0x140 [ 782.521936][ C1] ? clear_bhb_loop+0x40/0x90 [ 782.526597][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.532467][ C1] RIP: 0033:0x7f8c4735d68e [ 782.536861][ C1] RSP: 002b:00007f8c4773fd48 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 782.545255][ C1] RAX: ffffffffffffffda RBX: 000055557fe68500 RCX: 00007f8c4735d68e [ 782.553207][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 782.561158][ C1] RBP: 00007f8c4773fdec R08: 0000000000000000 R09: 0000000000000000 [ 782.569111][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000243 [ 782.577063][ C1] R13: 00000000000927c0 R14: 00000000000a50a4 R15: 00007f8c4773fe40 [ 782.585022][ C1] [ 791.795655][ T5632] Bluetooth: hci5: command 0x0406 tx timeout