last executing test programs: 16.608795402s ago: executing program 1 (id=1241): r0 = syz_io_uring_setup(0x231, &(0x7f0000000240)={0x0, 0x15d2, 0x30101}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x0, 0x4007, @fd, 0xffffffffffffffff, 0x0}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) 15.055174828s ago: executing program 3 (id=1245): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat(0xffffffffffffff9c, 0x0, 0x246742, 0x0) r3 = openat$cgroup_int(r2, 0x0, 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000080)=0xfffffffe, 0x12) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400200, 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x8902, &(0x7f0000000180)={'tunl0\x00', 0x0}) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x32, &(0x7f0000000740)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb080045000024000040"], 0x0) syz_emit_ethernet(0x32, &(0x7f00000002c0)={@random="e904a200", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0x4}}}}}}}, 0x0) 15.01884611s ago: executing program 1 (id=1246): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x1, @private2, 0x1fd}, 0x1c) socket(0x1e, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) r6 = socket$netlink(0x10, 0x3, 0xa) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r7 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x1, 0x0, r8}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) 11.887745044s ago: executing program 4 (id=1249): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) sendto$inet(r0, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) recvmmsg(r0, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000008c0)=""/135, 0x87}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000980)=""/146, 0x92}, {0x0}, {&(0x7f0000000a80)=""/242, 0xf2}, {&(0x7f0000000b80)=""/143, 0x8f}], 0x4}, 0x2}], 0x2, 0x22, 0x0) 11.535387883s ago: executing program 3 (id=1250): openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x8042, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) r3 = dup(r2) r4 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r3, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r4, 0x47f5, 0x0, 0x0, 0x0, 0x0) 11.346857565s ago: executing program 3 (id=1251): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(r0, &(0x7f0000006380)={0x2020}, 0x2020) r3 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, 0x0) io_uring_enter(r3, 0x351a, 0x100, 0x0, 0x0, 0x0) 11.054589345s ago: executing program 1 (id=1253): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x3, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8004) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r2, 0x40045108, &(0x7f0000000280)=0x8000) r3 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x842, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, 0x0, 0x4000) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) openat$ttyS3(0xffffff9c, 0x0, 0x20040, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x5}, {0xa, 0x0, 0x0, @loopback}}}, 0x48) pread64(0xffffffffffffffff, 0x0, 0x0, 0x20000000000040) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x8041}, 0x40044) syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$PPPIOCSPASS(r3, 0x40107447, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r5, r5, 0x0, 0x200000) ioprio_set$uid(0x3, 0x0, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=@xfs_parent={0x1c, 0x82, {0x6, 0xf22651b, 0xa70, 0x1}}, 0x101040) 11.00169229s ago: executing program 0 (id=1254): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) recvmmsg(0xffffffffffffffff, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000008c0)=""/135, 0x87}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000980)=""/146, 0x92}, {&(0x7f0000000080)=""/43, 0x2b}, {&(0x7f0000000a80)=""/242, 0xf2}], 0x3}, 0x2}], 0x2, 0x22, 0x0) 10.683266582s ago: executing program 0 (id=1255): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x42804}, 0x84) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_create_resource$binfmt(0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000bb40)="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", 0x2000, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x4008032, 0xffffffffffffffff, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_root(0xffffff9c, &(0x7f00000002c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000300)={0x0, 0x1, 0xc, 0x5005}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x60600, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0x100000, 0x21d000}) 10.67345725s ago: executing program 4 (id=1256): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 8.952450818s ago: executing program 4 (id=1257): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@setlink={0x38, 0x13, 0x1, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_AF_SPEC={0x4}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wlan1\x00'}]}, 0x38}}, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'dummy0\x00', 0x0}) syz_open_dev$dri(0x0, 0xffffffff, 0x200) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000000007", @ANYRES32=r4], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xe8001, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x30c) 8.101104765s ago: executing program 1 (id=1258): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x900, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x4, 0x0, 0x0) close(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xd, 0xfffffffffffffff8, 0x2, 0x8001, 0x8000059, 0x3ff}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 8.100251643s ago: executing program 3 (id=1259): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x3, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8004) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r2, 0x40045108, &(0x7f0000000280)=0x8000) openat$vcsa(0xffffffffffffff9c, 0x0, 0x842, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0x4000) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) openat$ttyS3(0xffffff9c, 0x0, 0x20040, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x5}, {0xa, 0x0, 0x0, @loopback}}}, 0x48) pread64(0xffffffffffffffff, 0x0, 0x0, 0x20000000000040) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x8041}, 0x40044) syz_open_dev$dri(0x0, 0x1, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r4, r4, 0x0, 0x200000) ioprio_set$uid(0x3, 0x0, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=@xfs_parent={0x1c, 0x82, {0x6, 0xf22651b, 0xa70, 0x1}}, 0x101040) 6.863866359s ago: executing program 2 (id=1260): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat(0xffffffffffffff9c, 0x0, 0x246742, 0x0) r3 = openat$cgroup_int(r2, 0x0, 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000080)=0xfffffffe, 0x12) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400200, 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x8902, &(0x7f0000000180)={'tunl0\x00', 0x0}) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x32, &(0x7f0000000740)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb080045000024000040"], 0x0) syz_emit_ethernet(0x32, &(0x7f00000002c0)={@random="e904a200", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0x4}}}}}}}, 0x0) 5.629449607s ago: executing program 0 (id=1261): sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_FD={0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040842}, 0x20040840) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="000327bd7000fedbdf251300000008000100706369303a30303a31302e3000000000080003000000000008000b00d009000006001100070000000800010070636900110002"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48050) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 5.299364348s ago: executing program 0 (id=1262): openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x8042, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80801) r3 = dup(r2) r4 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r3, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r4, 0x47f5, 0x0, 0x0, 0x0, 0x0) 5.251192459s ago: executing program 1 (id=1263): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) unshare(0x26020480) r3 = socket(0x10, 0x80002, 0x2) bind$netlink(r3, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) r4 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r2, 0x80047456, &(0x7f0000000040)={0x3, 0xb, 0xfffffffe, 0x7fffffff, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0xffffffff}) r5 = socket$inet6(0xa, 0x3, 0x7) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000040)}], 0x1) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) r7 = fsopen(&(0x7f0000000200)='ecryptfs\x00', 0x0) close_range(r7, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000003700)={0x0, 0x0, &(0x7f00000036c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a54000000090a010200000000000000000100000508000540000000400900010073797a30000000000900020073797a3100000000080008400000000008000a400000000108000f400000000908000340000000c2140000001100010000000000000000000000000aabe7d291da441f02a977518e2469bb5691159e42bd99"], 0x7c}, 0x1, 0x0, 0x0, 0x40080c0}, 0x0) 4.872055942s ago: executing program 0 (id=1264): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, 0x2d, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x84) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_create_resource$binfmt(0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000bb40)="de98ee653502c564abeb97fc678bde22efebcf99c2d89952950acc703a3c6268a54c8b1bd1ee165c82980cd315b55a070dc41deeb2d4c1842d936a0bcde5fd7ed6031fdd9cb58ebfe8261528f097f309813b5722c24a1af8e6bc6ddaef7e85d2659690154bc5e6ee73c3fe7176509ad7b30e1098fc9873db91d3c1816825e710374de8d40693578b598922d9c523cfff93a630f121251d17ad40bce021d7fd57945fe2a186618a40b5f3995a9f0ceaa3e22b57e4f68e53fffeb5474fb83afaf5cde6b0aaf5cf0313ede442ddf1df6c280921e43d80dddfd005969272e1719b37fd8f749fcde83f8201826b4cf5b1c1da394568aa7d8833dd11309f46422b0152ede5ab29b17bc1ae80147346155b20a98d6fc2650bec3fe73327c45cad1b38f7c983cd070556a8f8ed5d58e1052f6436fad905099d18fb3e62c2c36a1c2209a94c820e30e5234e77be3beb4cd183015d281e7bf39cdcf0f1e541211c75d64a49b55ba4c2c444bef36d98df66bea814bab91ed65386d6a491a6295c24dbaf752a5e7a856e0dfe46a6f9e718ca3919c6f8978b0fd65c9e389114e5afd8e9e2a575b854463b63f46d08795f0f1d0d48d6d610fd74e9238de32ee3fa2ffef550336341803c083ac1d749be6c5440bbe4bd3bc301dbcde2b4e2160ba266d281a9641f74d9348fb6fa8550d1e8a8362999452e40b75c412cfa77ab8e1aaf1a9e83c855ec9b7ada38690f0d2e59f67a1f3babbcda8011595ea720816c24726b833beaca0a9d11e7b99372601d27d18c9e29940503d3a12149fdc4fe0065c3d023d6e7712eb853df19f2b4b886e08d61629288ff16c2597d7fae5bfc8b41f92fc325ffe0f61683b1f661409bdd7c3d88a854f8393484f4669b5d9654fd3a0819a32110b9064539a7419c332629b3fc71da35b783ef7c693842ce83733a63f2e6af37989cfcb768ab8cea5d21b82a0e9f6fdcec26b0107708867dec54c4e739fe9b931b3c6da013bfae097c57f1e16ba54f9028e672511938a0ad9d681d7feebc65a2f5f588abd66261393f3ba02d7b2cf650a9f7c6a4ca55b4d41132908dc9c90e26f0da8e2259e3a2b63b2d9e27754e278827ab80438070698c690ec375a9aeb4193079a28a2a062961ba0e65af01644af063f3ebefda92c4986379f7b099b2fd3960929578736f09887fc5816cb1b982e5b121b79662d1674dd0c6e82627cf8c63e576e5c1eb0af9415ddc10ff880e8ae3ce8c4fb87b8f9d364974c2a1d8eba4e04bc2bc018bfabc435683b2551c0e4908570b930c4fd7c03ddb95e9ec1d1994e3df0305fdac4e5b914641ae25b0c469b194c0bb78ab04887cdc4262da468475b926a18254d23b4c44705aeca34ef8a7b04dd55a43f39996529a23804e054655c5ba8661f7c02737e7539650364928d62b9b8d80988232009acb54214f06640e9bc6614c0ce02e4a22dc8b91a0aad711e4fd01d7020b7c7185e41e27ce266b9f5aec682cbd4bba3240d6277b17b564937254f37afe580cba0b78c6b0cc81830eaf10d7cc1f7e918d49e935629fe6c24b4368a04af1b99f6981340ee031874f3d4b3a9ebc31719b3b775bfe1fdfa0460a3820bff6f61b49b11ac2ca00836a0c4a74aed92a619f34231196669b942e761538e64f965d23d4f7814256e876263fe5307985c4e6eb69c974f66276764e80ab1de3f5c55e7b2cfdb78dd183a85473e968918ad73f29a266c818b9bf9f62eed86df25b2577bb6d98e3996e94f5bdf119b869541a94eb3536c979c3d77cc0df7c0c48a902ca2f03f5ba5a8ef9431cf95f6fc89744e8440e1d5ebb837e30ef7541fbc27672c31566ac3676a173cb9e466a2d206ba1ebc2b985eddcd6ff937375fbc8415eba46f5ec68cfa9f3a669d41b078867dd9f5160ba45fa4719f32cf877d4b7a6d77c977533659f7c7ac22c68f5e93c1df6c2a3d45b55a4afd3355680aed864f6bbe13da2da28a4851f73c88e555f3bb1c34a21fc45ab6c28287902e8b5fcae6899c804f364cd878a8d1734462bb075cb7bc709cc2c5d7747c4c29a2fa9259752301c26b852b7993adf889d45dbe39094c9b7b168756e5b939ed10bb6df57b8f5e14352cfc7d8b03cda5b978b06cf2430af5db17177b1ef664bc4b00307f970c4fc606a6bab72125f62b0f59655c35b104da7af188a953cfc09b3aa0785abf330830fefedcc8bf9a11d5dc4b5642f679d45cb44fe61ab1d906345c1c345f6b8027bae9585580c20115d2504d9c83ab54ea2557b6d2dd3bc65fa29f091aa46a215e77621836154104e6969fa9107139a19f2e45cc6bf55422a0e1a6d037ad9e63df5f9cd2045e13ac2d6a15bc12008c4cd23782df7d41bfecc0037292d22c7b42f2cc1a22db7502332d9f4fa85f7640c8635b9469681adb6bcec2dfdf6926f1815156d80a835ae918527f549ea6df45f350f618dc1f3ca139759be28e35013034f8bbfd3fa1a8f302594213c18015305911f42e287f2d86f17d76f8a0ea03fb574c60c808669f9f4454fc2eaf0e93873f688e34bd3341f6874d5d8fe754172a751d6ab23dc1642220e7fb1071df0ee3c7e07c338915494a3b360bdc0b38ed221c2c2bc86b29744448b255802b3ddfe600c1d0f9acabb2185e4e9dae5e456d5825f516c857f63e72e4a5f3d45eaf11a0e3a5ad0ba30a0bf0f94cc99586fd202d6118bb6f9c272f6cbe39dd9b8b36ea7fa51dfe0bb87a633be11c16a14d1bce8492387696e195fa3c5f172690b4434aa2e91ce7d225d73b1983d2605ec725aae0ae402cd2f79fc202a307f1896f3dfcf8c0fd8b841dcfeda5d65bb7d76f7c2d2eb1b164c0368e9984f320a224d7d438bc5c699acbc18a587b7589e960af114afbc9f59243646557962fc2e0cb5b5bf160a313bcfd9ade3e140b808e9f19415808aa312ae9c9e8bcd5a47fc721eda59d10670088714984a71d5c0df8b68e675a8e31ec15a92ff6a04d17e0ef849c782b302d11f742efe6486ab904fd65c0aac4ec25c6d877b453dce80e894de703aa8b1e5d00701850f149fe437fd0944cb95e54a924a49bd86bb9a602cf2904fbd9e399f1cdcd0b45b6d8f872e285f9dfeaa26aa760074651393c6451b36c643dd0b7236ec7803d69cec1b09bf1b63fbb68ad7c01507f00083b184ff01a62096f386f4c8fdc85e93eecf3f4b384aec1c10ccc60d8109a6d887bd389c3406163f9600879f0e944443d783e8644f69344f6f44f7bbf1883cda7369c9b9904d991c01552135f158a0bbb7f40c354f292c034824d82c209ebc770f5b756768ae51d45f8875b59904a07090689e65b40625566eed5d209130db812f287b966ae21ba46a3a7a3a0360a4e284d8d91ba9ed9806ea063827c8dda0fa98f758cbfa523ac645421f444a40b95bb065a64256c19354b1ad5002bb7b2add9b5236ad64e9052734b9d263515683db121b5e4dc1eab244dd8fc0fc62d962834ba0b21aad872b127afc0a33c7869a3f213519aa2ef51bab9ab28ed18859fd8239841a6668fc614dedd099121ae6c220a143c119cb9bff9068f65d0554b4c12105e59a22e91203a08ab8c718ec62c42d7ebb7b495e9e1be8fb7e4aab2777025da37b48d9d7b97578841a73898a6eab994e250106e096390c77b0600537be881ab7d81e3cb468bf1fe318b1e804d8df9875e9b8da22e6244997317391cce608085a28b8d070d654a29afab324ba3eecf427b6dfd43501ec0db919f71a932897eb37fe3bd64ab5a34ec60011696298b74ddd7a3710d3e444cedcc5cdc357f9dd58e67dc0ed3fc8df6dad82b3c00b4290c3280c28f78df052ec9cdd9df025abe8834616eddd5bb93379c69092911cd60761e7d14b426a83e335bfc8bf67a14e01df7cefb6023f0c6556534b975ed889de0d96d968526372402ce3d21a2c5c64a449dc3ba4ee0b5ceabc2fa29679e225681c8e946dc94b48af024bb1633e1860c7d8c14500967f24e2f8f46db537232a4e9f4abf8408f53bb52b035bdb89917a6f2f4bd22403ad002c2d936b785ecd965177e9f6235787a185d0eca92532f1aab16756ae86ece13925ba4a1fd08125102ae08c428d073aa426c4e792b5a4acf618605df1707021ce1eed62da4ee87334e34edf43338a0076b8ec739e2c31071e10c6a853e19fbf25b8a356527a67c8f7696dc184e374f4641f4e5b0aa345f1e6c4bfeba3a392d9a994bc271717a051c98d6c5b1f3296caf4c01d80ffb75b6fbdd0a0583f9d4695a44a2878df0c09a85aaab14522320cc3d2611603a34e52da03677a60cc87cc3c689975e5b5366c82e040b6643b8865d8bea0c84cef9ff85245a8b4bc41af1a50775b29fe55e42ac4b29fe80ddaf02e8c9bd07cab823f7d9021ac88236525ec045688a2fc9c6df66f549b10720cebf09ead919524f071cd128fb7575c84190c698b420f89b3c11195b5d83022d1f7e48afc21203995caf8f9286dcd5bd51b65c1af1caadf5a1b3f12579066855ff851075adb959dc3e086a7fb4e9a27fe80e8f3c0959b042486310ae7b785b0612e0385e36f50d4cae3474dd000c3957955534b4907b9480e2e5d83dedbeb76cb78d893c5b64dd51e31abc8e8b4c56b96f67c4b6e43861d91681af3270aae1a8f50712bd97326ee46a2640285b2902f051071d5a3400e99b76459956ac6908688c314bd8e54365383a65b186a6386cc5218e41e0b386759de81bccf5aa68f8608831a9d33ad1af2bdbd8579c5921cd8c3dd2f3bf1f123c742e118c76e2f43618bb7885e44826b7417c9ca5a139d774c16fbf74c8969c038ba6a54f27bab46ecc94d6455188d8dc1edf1da715c8d9976226877096df4158eeecced2248c7b88de0dd11a076db1f06bae4adba8286dc39aa62a55233886e011622ae1cf97238914a55078a78908145295777dbbc4e0d34364e0f3daa9eba6fa54c085777b18c0523818ff8710dee4bfeb3db549c3f38dde73b99a7b1b219282407a4e0ab3794089e21f6f2045ab6254ac3703903edb302fb2f0f97e47cca7969ad6b5b6cf27314137a04d5f4f29c193cfc5540592ab1342a1a9cbd514a7b4d6b23f724a5d7bfa6ffe8e3d9de29b8661139f179a0fafecf234f19bee75c25faffc765e02377d83e0ad0a0029c08f5c71595bc1b2fe88f0fe958f3f1f8ba6821ab834cab9bc902b2d47bd4b5ed52b5b0d7b3bc999b2f68879be39ddcb0428ce3a617b68c11459b746651f413d9e9a098cd2b5c0fcfd0ea1db2cde1672818d7bc73b053015692f9e9259a0153e3c9ac5e73e3343dd350cfbcaa57be93cc881a35063aec2db4ed71df2b1bd90b5ecbd84f399d4530c5450d622188423e151cec49673dc633e503c497d53843f4824750dc09abae9f2f465e92888715b6879f5edbab7bcd58f0899e1430ffb5f3063450945cb0fb3b5c3088ed6966c54dddae3aab489a80341b45a17cac02ae62749f209a7e16ecdfd86b43569c7b34511c65474acf2b2c18834e158e20957bf2320e4a6b9d63caea93b3a7dd4f7ba54443aba1ac2b6f2b27e1bf6f17d3fd1582462e0debc7069bb70e219654cbb99adfed54ab94329382163f2ab6710bb581d189cb3449a02c917c1f2d1d5f51958ce605fdb0e37ae5f3cb3f123276d43b2c26ea948dee863e0b679ecddf0fe41ce78bbca30167c9c7d6b0e9193c98090facd7205a490727e1ac49bb4d639348a32546007459c61c27bf8df87dd2ed3f3228b8193422a72d15f848bac13c6ffa7b8a767cf04866feb7c7a81267d7a8e890128d4709e4873223578aa7febdd562403c6092c0a3f6e0650772ede935ab6ef95e375bcbfa395e23ef1d73532388b845a95f158dc845a123f798176c73e177926d39abd38a910d40653006375110be2f2c5f6efc87b31908be36dd07c8ba5853519a37dfc4dea981af855293f49a3270bb67cdc17b780fbf2a418fcec8953dae927909a6bbbdce230d23113efad9c02474682dafc63311050cb4f3f86c282ff29728eefac5c678360122b4ce221bcec82d24e053b63972d2e9a631a180b48bb8d2d4de7254d91a856071df51a1d87ca7eb5d19ac3def1fdd6ebd8f57c2c9e43cb6ff2fa00d27f279368f5ee29a84ba219a51d1f0f1965781164edbb3aa6209fbce6d40284fbb4a33f59bf9e1248100a623de16613eebc11f510b7718dde9f13b4c9b2b6a10dd932696cdb7fa4b5733b0377453471462762457d42038ebf8c0fb392ca7656ad1f050c326de75fffc698c48f5d809ae360ddb9856b9a54b811073233294bf91e46414441b6665f432201da12e49718b0d7929b6cbcbf310a09ce0d22f07ee5cfa8ffb9f03acd224641171ffafdf50f18be8fa3c907226cc1a6f3b16a776781a6396dbf09f689ad6bba4d537dad490a6f036a45ee3e224e6f519e44b7352ee3e7d3f0d89f8c7c8f54b6d2698c0298a07866c9d9ca09c96c2ac8efd7974294df6dd1bb0598debadb6135e7123bbfddf84870de54476a291586fc0e64784e65fdf78d462e8b51cbac38e7ff1878b11418f188220e3deb5367a2d90ad7d44395f6965cc6d680c59daac268c16814d1085302d0453b48e4a8ae78b8a5b6951a875ef42776f6d11955da7e5734a72b61cefcc6889b8f8d58db51ee78d7b1a8ffebd90e15a64654054767aaec24dd3b5f338b572496c8731049c10622b7f54fdfa43aaea316946291fee7bc9e64640e8bccf33fd1e8693b67020b49cf77faaaa8269e2fecc4e2b43c8c3378a4a9b9b85a4fe2c346c5512cda631542e0ff5706eba996f4f72e629b076d6be1966d44b1835ce664e3c6a4f18c68f5e32f900a0a167e547d5aa79c0aede966f83d00366a623ef8107e328654c8558d5e606f69a12b6c2a6fcbe0e08f945c4ad2738ed0b28d79c98514abe0819569c6e4f4751c665fd651aaa9ee392c330560ef6d57c0a97f0764f88433b2bf7641ba391634316b0ee1dac23a63be21270e50ea1ac24ac3b429a0b46c38dbd48c540bfb1e141b8b3df6caa179c7e54f2b7b1371e8eb05a30f13da95200ab70dc58325f6bea0ee9fe1f04154998df393f2b4ff4431363f3a7450fa5210e883d67620ae63cc41f72e74e26a0244de1ac722b6f1c1d293f7483b331a0efda65a4e4e9144547fe6dce2f4535e29048b07079329b63754bb124b9e04616f54f15b1f4a387765bf93804530791c9f649db6efbebebf46fa4f9af7ff2587130d0e70a32d4aab1dfbee6aadd1f3e5317e3d4c8cde75b1479bc3dd16ea35db3dca11cf1eb1d2bbac60b83605e171619d85fd4b6d0e24be8db76df12efef05eb87473b832e59f3039df44ef034e5e7546b399cc817a41b2f020286ff139072a5b909ebb185a3c955cf88f4a9929b2112e0a9ab43da0288ce3ea268ccc9f46f852d387f5d0a2831dfc8cb0bf593905ba376c069b8c9b70558ec826c5bf9835031199c4c6d84c913da7e9e7db49c1d34511d917b9ad3c40af0598737d58fd61b8f2adc46b73a284957a99943cf73414412fa5440a5f85b63c20794d122c267fba72bfcd0e2741642fd8ff5a0ae1ffd8b30d852c053d0e31f505ca13a21c0223a8ee77cdd92de1b9f87ebee4ea347b9d4573d7efb2ad3f50c35fb7a596c4edb4b72bf6df5a16ffe3c8a236f2cab8c0712ac26c2cbcc68c1dc45209b579c952c7d645642aeed7d60407ee2dc168179d536da950108e962c5c976d3a05bf5142466ee38939ee94e707a0135f99c99b5d6376f63c711e4f64950f08dbc931c812f34735d9eb1c5997770d8159068cdca2e0f192311ca438d613728b544d6a3e50ae0e4e6b1eb611ce55a96bb2f991d49173073d8547f5ede69d8b587a34bb8f637297a15ab4fc45f1384bbd19b3feab5fb81322ba831386eeb6067e55af374c1b1eb9613a6c41dfe2bbbcfad157dd042c67c44400b350f0dc40a8611f2e947f32ea3ac3f609027b5dbc95b157c13216fe7c35edcc82950bd4e38bcb02b63d2576489c331a222e013e73b5333694889b184bedbbb6fdd6fd40a62b1d5d494e68cd2aefc264f74bf70ef38373e599faaa326f574ae32b1aad86854af22db8c9673d14666aa7c0c3bbe0d76a835ba4b391552777ed20c5c6cd0aa84f3be73ca0a3c128914107fb8fc02220317fb111cf13398480cd3325582a7e55f4c4ef5a258bcd01a97615e95f89c8064d41d04340b88cd5f4b1d827a030637145d98422facadbbbce97dc3060402a7bfa73d7b4dde53184a0923c0ee29c6e8e2c35e396808df2481af6aab053b619fcb2833f14f87051c5461567c5f8dd40383a7521971775493f896e18c78bad8219f88258ea686652780c03ebafb63ecbfcb23e24d52a2f88a77ed3b2280637807a5e155f4fad7149b76841772471a3b77aa42e8058c0af1ac2be9d88b5152851708f1a77582b3e31702864ee6a244a38f3f95d9797a60cddeb5ddf08cc48fc677f03f9e717ebe7f472883e5a6a7df31ca4272228f26991460c537ebc8aecb6a0c34a763eb1f57124fbfafd6db4c21bedf6723b252aeb21eb1fd9f4f811fd3e2e764422964761b2ef3aaaf986a48f7ae66f6387578f9492feebc97dfbc6bc97380394a5635dbe582e52a1f69684ffb4e53974c63d198cf0d878ba8a8d58688a037c0f753c7073337ef3da4c134ef939c98c8806d09943591e6013a1342de7c722f993fd7eb36ba8e8407d1ea60eb5724b0d6262c70469dbd8ea1956b8d7f5a77707a9cbe2137079e7abda3966c5bee4fd86e8a3c4969bc88ff328a2adc8f4546f647575866d5ced16df06bf40d9a5f178f9d19e490bd76e187c441e7de0e571f6cea5512ec9bea48903d91a519dc82defe34a06b0244d623090b5a250786bbc66c1e76db6b18d81ed33c81a7c93782d5cdbe0a7cf7d1ab29c04be6ff4a9bbc10f716a67d52fd52d91425abd2002cf83c3797861db5fbeaec745a552ca4a50604340f2cf2c1b10e9ba76c8ea43b283c73f774f8be213f17f70cf93b9f6a8bab1f516a935e80c3cc6756945edafd572e6e00840eedf61fc40351869f03562d8c13006de585a1141c02f1311fbc8e45e4b3878c32810698e4764a6e8495f165eefee35714a1794f9ab50897c5565ab745425933d9d6272a172c1f2a274f9ca7bc8e1b01a27b8bd06fd9dc61880789696348c99e9a70c9dd2a62ca04d1f86dc87380b618c2a78b16229d614702fce242fa17ea90cda2648f9375bf7e78b4267d558983e08a9566d95871998d23cc6d22c23370ae067b677609844abc140df81cbd9addbf657fffaab5c22c479acca18f3e4b508cf01ff7b2ca308ff116389790f26f2c7635f89c747a5bc66f61de575653069349a89fd7e3dd785266b7bccf16eb8b4a8a86751de60d33e17d64f6e4e0f9d13a16d243ad7364114db7ad011f094c4debf20a39e35e7eeb440bbe8811db2857b965edd1e2675ceb1bc9a1691f123dedb341962fbbe539485d2241b0409adce2587d035187a0dd5a62076ac4eb5c3e2f4455569b6eac0fc16155da1774cbe505dc92e2087585a7846bae699bef32e3c5ec2356dd4433ed29d4b03ff7b38f7b3cb96b92874eefda6c2e0e326214e40f14cc2ef80e1cd3fe226257a423b8ff5bb368b87ac7066c5136487775b5b122a858334c37f6a3f53d758c3c866e2e79daf9aeab36a59eddbae2fa5b6d209708000000f0a4cde1373c7297833e6f1e46828f4a42eebd829dd4f17999abe285218ed5dc6007b21bceb588a213b29dbb1ab1a79b41a12df26fe35f0cf6a310c9e50cf10d71ad5960626e4efec211032ec4ae52512001362ba4108d86eb774d2d4d0364cbb1dae68f03a774e328c2dc09899ee80c05ac2a8e3ba905b0b3b7a08a3df20b505901123e7dc0a15db48d09c84189ca4345c23c2010c12cc35287fad30211cab9631e148a7c1e8bfab61ced30e098d1c3cf7b6a7fbd8288dfdc48044d0d47c17f129f6b5d751af1984d395ab1b08ccca3e7309a89a8a36dfc3fb82d2a4269bffc32571438d04a7b98137b46ae1fea1bd9ea64f99e2f0c5f12ed84886b10bbd511993b0447036c4e57b9dae6d5bdad6aa3f2d12e62471194e43111613b8b6944c2baf1f539ea14dd76c356bfef7e3d4b6fb91f6d321a796a4bce5a4c6a5caaf0f3eccd914dea21ae909be7ba486075ff6139e7e351fdd7e98013ba51ff0248852398c734f245ffd7fde8cacfa4805496ad7350b1c96d7bf9da9be492f2f414e973937ac9109b6e8b8315aa9b81840f2c21239caf85a28f0e590bb6ad12148e75bd4d7ea69a9ffb053781db98d5fb5aca30a734017be7683a559c203c006ecd4b135afe3650b906e0aa208c889f2af09f3f8263260c3bd07cf8021124b6f0e0d021f9839e47996905c3d7562df810484552de3bcc9ae054b62a01af6a7991e4d63f30c7a92d8b58e01052e53818e64d7540a3208af321709a5d891ceecae5d27a999b00ed01616a73ec8854ca61973ed1fd3d82f8628b215c55eb7908e297d77098a7b0c362709005a7d13c89c54556589b2a926c6e08cc1c0afebc7eeb5d7ae4ef0507c91b8e706e6dbf83d898819192c812554ad1c63f7871a8ca50f1325630f7b5266b807ef61d0c8d399fada49cb02a14c16d39f4fa7b81272573808e761c9dce7cfd12f4f18dd06b0ee471c166e095bf84aa4aaa2d82f1afcf09e5d960257c0a8dc404225b4b62187829c59e57da50bf848d72fabfb69362c117c6913541f84095a2a4ccdd2d30860cd96640bb2315e435a4af08c62c584ad129300adb02a871f3c548b96c4f6c47efdf4a1163a8a5ba9b4766b01437bc5957324660a8cd87df0f7e000d1309e896e3ce9f57b17562c9368a95a4cf66b3a5b57f0cca563b045452bbc8ad07b96fd0322728ccb3b05bfda14ef36ecfa2f32c5aa899811a67f2d62ed970db5723d6e4e4913c98c81ed6c03469112c23549f7e20be6401c6544db9078f34e6a4ad3cc868bace2e7ec6ea17225986f9e941ec67d9a3fc57958f9df8a60f585aa38b1769e26ed3f68dd85685b2cefae9dd72a18abc0de6b94689785df377ef4a812a6abc7f738a396f0e99ccbc5731801c36e746ab6b1dda88ca6ecb899528e18543cb3dfd439cd5be566594f01a4533da3638e6331fedf5b67870938ad044aa0dfdae33e3a6258ad40baadd726eacb1f3c1eb8d83ef4e185d7603a4f1eb006d90bf5849e2f65d37ffe750eb061bbad08a0c0cfabb9abf7f27d36ee5687d23feaa923e09d2ae905410a9193f21ed9b1d6331bb1f3babb90da2f2e023a6ceda4b4fe0f5d864738ee7f65a0b136021fbe076b4adf2d3af760e1361bad7ae35cb7ca010ddf4488255a2d3c492d0b26a1a5643f998b5d04a52a59f176d9bda85c916ff901329f09fe953b030b92f6415172476ad89d3e8cdcb4eda7dde5d4fcd5d6a584a312563558e784b0f9bcea7c53d26c3f2d3350c70a5e06a67c4c0373dd6279e29c320e6580fba8ab2df3039c289235c066af1b07dd112f25b25e292020f36c1aba246cba4e054d64b38f53ed57a712dffad7d3dc97f86af511638a2779107fc55da63b6498ea5f3ae36883163e5bf2324211a61a9889278f828e58daae797fdba9218d322da7aa23db7a48a00", 0x2000, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x4008032, 0xffffffffffffffff, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_root(0xffffff9c, &(0x7f00000002c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000300)={0x0, 0x1, 0xc, 0x5005}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x60600, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0x100000, 0x21d000}) 4.705532194s ago: executing program 3 (id=1265): syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000082505a3a440000102030109023b000101"], 0x0) 4.662988145s ago: executing program 2 (id=1266): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00000004c0)="3ce2de4d8d957a8de4e490b6cd03b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe102e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b830fa03e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c7e982472e6aac70e5d52ca2c1bab47b1f6d00f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87", 0x109e8, 0x805, 0x0, 0x6) recvmmsg(0xffffffffffffffff, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000008c0)=""/135, 0x87}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000980)=""/146, 0x92}, {&(0x7f0000000080)=""/43, 0x2b}, {&(0x7f0000000a80)=""/242, 0xf2}], 0x3}, 0x2}], 0x2, 0x22, 0x0) 4.586631506s ago: executing program 4 (id=1267): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 3.404827643s ago: executing program 4 (id=1268): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r0, 0x0, 0x4) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0xffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_LOG_BASE(r3, 0x4008af04, &(0x7f00000002c0)=&(0x7f0000000180)) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) 3.31545197s ago: executing program 2 (id=1269): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(r0, &(0x7f0000006380)={0x2020}, 0x2020) r3 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, 0x0) io_uring_enter(r3, 0x351a, 0x100, 0x0, 0x0, 0x0) 2.267994679s ago: executing program 3 (id=1270): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f00000001c0)={{r1}, 0x0, 0x8, 0x1}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket(0x10, 0x80002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000002d000100000000000000000004000080050011802f"], 0x1c}], 0x1}, 0x310) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) writev(r4, &(0x7f0000000000)=[{0x0}, {&(0x7f0000001480)="d1ffacd516de50ac9d15bc75316da4defa1e72f65a65cdd26dcc389aacf7856da9aecf3765d4c032e1960faf25bad906b7d3440b6e71a82f1d8f8b8db35b6091f3af94c6b46b9ab10fe3923f268771078d2668be7bd3eb941d4bb5baa8547e36283a065ce5766cbff3a8fc37fc4507643d3786bbf231d3ed88cb8b01eab14e4372cf4f89bd1b853caa5d9f07f523b9dfa8cc09053ff36fde08e96fb6b3acc196b1bd1e2d3a6c65f585df7e2b8b17439a7ab29a7dfe642c2f0ac7a81eca8073b559663f2daf7a0832b2b09557794a21bf114831f8e6db3922d0cd169e5a8b4adc95d7322ee75944de15f57780b88fef7f3d9b256705ccfa2125b43ce8e3aacaead963cdd7f792f14c9b24493f9f830f6de8da93bbd4357095631adec14224dd9bb049e826f3a49624393e6a031103faff0902ba88ae30af4a61caa77ff956214196fcf3c5536d823284306f367afcb46fb43231911cc53091671e7d853ebf015241b18e9fb6ac6d9a7a1b05dfd6d9e56a51567cd8837dd045abf6b85550f0dd8dded43147ab9bfadc18b9984699d5d875cb21a95a7f584d8c466d033df75193f9ae58b85cfacc54f6c6e12a0d107532a77f41ebe40ee361a839563bc2cb64271672a55370c2b035b482074ce2487ef8a3bc1c68856e6e09539276d961a0c647f1ee3237496fc99623e8fd33faf7797d86a88dcee152d15e10739bcbbd6077b76867e291f350d999024c12faf81f83792f48f7f6dd66aa6854e460ef7f8c755f3a6dd76509ea0d2db39057a5129185b2fb11546cd5d6cc59f640e9028ae6c7075fba5e5b5593d7f79ec387833f465d09bde464112821eaec5e6e8f2aee8d7358f9c14afe2018856f610848706c71cda62493aef2e39efb71b4a8e804847eda66b2b5b1d75b478f19208ee1ac43afb2dbbba5dd0f29f6946022e09fb853cb176ca3474ba2fa67cb245fe85ec61a095d6fd9ac2ac5685920201617342fe56072427b9bd3626a1a371e67041fcda781be0c234d6feb5ad500e8bc7074381fd0d04983a4a6cdb6c8e03d59dc50925e9e4b24e6f8e455f02818959f2327f0a2d9ff62ec3c5c399077048f7d3dad0830b2e6563693f2f9d48eca8c34804a7626282a4a214d13786993c011a88194dbf7b23e25f592e62186c9fb565fac7632de356153c89a6be0b6b26ba48c2427424769fcbd7ee072ed4bd4d0731d06c8537d616b1145a6c70edb13fb4dba3565221b3a2897a23861cd0e8e0060021cdd7de002d5e785e5d6d3d07f4e445ada9c8d9ba8b819d0b5c7b5d15a5192d3a83c125c8e117c823a9e33316b8c9154e7330d3a865048dbd9c14757691bfe56f10423f6ab717bec5eebeac6ba9ad1aeb6cde09d7fda8e475a71ac48d46b8d9a40879c9dec2db5c4799e5fc8e8b3d419031c1033fce88ae2c93d7ca62c9302e6b45ca8dfebe5b92724f035e8e9d7704efb23f445999fe08cfa28404874d8acc8d37870d394d9fcc8dbe763bc85c37f0f3bcc2cbea420cd073db598e7d89c14a31e5bf57cbefa301427c93091505f1f3e5cdf712958b2e8fc56684d3388107c1728f0e5a3be2164246071653e256ed3bf3000c17301da9a5a3d9ca475867c4f311a24e5ae909a62047a9e6bb71cbcb4f159c2ef0f66b4d0f9da51aba99cd9448443dd277362af18d32f111c48a952ef555b2c7c58b997ce61e74cc7551b57eaffe411219baddf490926d8e260dcd87c069e617195c352950f9b51ce88c12c4f7997ba515f77e68d44f831cdf4d7ee8b1b7cedcb4c4fc7e85ba288c8555d49d5b4b9bb70dc4b688bd12e6b38e37150f3ea457a76b23d5abe6551ea598e090aed87822b0954b8db1a7c605c925b7f9240b0e7a020f292a1fd4a37c74139bc6e7ff08373ebfc8feea371ae0b6c61c715f6f1f4b0b994c7e2e129f87db959aae6ff48664d824b29ba9f255890f9c537178db9c5302097891557f8175a46f308b1a2530aa726ea9d4cfce76db50637369724d0c5f51c97edb58ff5eb9b2434b3721b61688ba12471b97c6a65ba085e15406568ac852590701f2ef8451c5cf1191d70f51eaea9ddc4cbdd7428f627db5069111f65062d5cc34581826af3e670613dda99e31c42736aabd87be56e214ed606862a152455f91891b7430bae03284569c234588f495a5ecc4a23fad6ba34e2ee9ebde8c7f5f62c9344659375c2a1fe6fa6e4ef68712223b9471c513bb11429dbb8a45463c8882f462275ee0da567c60c2d8038843e0c20486676e9978f2aec9187820c94a6e7e519d06daf2ab198f5cafcab4d9c90a479800906192d66a3301a34fa6c5a931cea0a479a4d98d86d9de3e061323504b57186dd33df7a16ccb688c0de203666cb0a6b543a9d069dded44a3b432cbb71da921dcab6be1c2d7494d3b07841d9b4f9d659b5d3d3b2ed916f91588d589128e4b2d4448e6aab5a8160eddca0f6e022abb85e251a11cd6bae57a09b2c434ab5bdf6264afb20d5ab022d1535345bd32ba9283aa5b3cd9118bd271a8ac9083c98b8a83064e65428f7ad7b35bf1d60d4e703f22d2d316fc12bd68bcced82cf0962a3d5769c6a3d75d59f7a7b76454661fd3574b8c8e26d20c372407854505ea6c2406fbd8a1ba7bb017c565228aa6d03d18ed309a308ffb1ecec73c246413e7c70f25070eafed9e70d22e9e8b44125c44eceff37e65bf073bc6fad1ea2b72675af4bf70586a8f7e0f35700de94c802522897576ed115fa21b3d23a367844520b33f5b9aedc0245096765f4cb3b2ff4e54f39bd7346c2347875d75a931b17c6c424ddb4767e0e63cc7725a8fc4b1dbe7929b2f909cc5be8b09e63330341e6471dcac0f8b44693d01805a1467b71612260e2a273861b3697440a5f75497796bffcf79d62a4a50a6ed5ef2efe8c83374f2ecd08d8d628aa03b01a11caeb2bdecc0ab2abcecfa15627979d7c3f9dec5389fc6625e957f8075e23e636dd5514596189d568e14d33ae518e6e9978c6a36a74b49fdbd1260095c9abe447e618878039b75e305b1d2c9ddeb9e5cedb11802e0833739d8595d57d749c890c9290cca4aa96e6718747543796a187e54a66c2f71beefddf911a7a74b59c48ba642d5ecd4d415f48dfbde5baac8a4ba063c1b985d9f9f3180e8a1c8b2cf6a25c2ff17688cc858ac8b9c67960f09a1ca5f28f8e877159e00fe7fb10cca73b391508895e7e52c22f9b38d73dabd6ff7c55ebf4e1611daee8d52b4ceee49a6df7daeb81bf9d1c943a74c03d3dda52c5b99f3225c1b87074f5cef6187878bc5b665ec0561adcc9781280dd1c6592555d327afea78b21beeeb66a0af3eab3249245f41cdbca309d3fba5d4b345319dd0a26134c0c896f2c8d32fda28600013f6a4c95b4038faba70d6c480b360c55bdc0595f7ca636e85521ba505d894f9c5f0a90719bc9944f386ad7491422ff12f34a3c048708d51305a8cc5b2a502ac1575a14c75e9fb7219ede2f6d9c1b362230b6189e0d8cd8ccd11fd0325182c6e46c9977bf63aa02f7024aeb4389f989f5733a198b45e4329c4c1a538a009f216ad3ac09cac39547b4fd21a5d7146ea307ad9b9339f39d5161d17b59860a0aed38cd89d1b68c6438346d51a3a283074e34ee01d2eca527b1b3836ccdf7e807007152c79d14324e3d887c9551a9447527db4434810f5b0b73d855f32a0c89aa784e43f4c1657d408dd33f88aeae1e5186bbcc2a348b708e3cec9080e12ee3676beb5ee86a9b5cc4a3496c242b95a248906ed62f984b22373bdfd97515441f34e01006d8d1244aa88403f207cd8820ffe07634fc86d00f871c1e4c9e8fc1a00d295e36d98119599b62379cda10ada85efe7b50c5f38d8d010a2cd53db900939db1ffce14feffb7940d12842f4f2b507e1fa49e526752d1e3d80a0c2a75e870d85f77fd91fc46ac1b1288dd33338cdad154d6b80b5a925431868d62a3fb0036f28fe259a3f555f767526a9ea230c33843efc49ac3182a357845ea122d606ab22c9f937b2b905e02dd1cb07d380e3486be6167f00b6e6d90a3c1d6aee15da439a55542ce177e498998ba8ac69a848e63e4c7564e4dc04aad595fa1ab81275edafa0d352029c304200d2f2c5881cbf5a26b2141bd", 0xb61}], 0x2) bind$netlink(r2, &(0x7f0000000840)={0x10, 0x0, 0x25dfdbfe, 0x8}, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'veth0_to_team\x00', 0x7133}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) unshare(0x28040600) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/address_bits', 0x0, 0x0) fchown(r7, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) 1.673414173s ago: executing program 4 (id=1271): r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x8, 0x0, &(0x7f00000023c0)) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) pwritev2(r3, &(0x7f0000000440)=[{&(0x7f00000001c0)='2', 0x1}, {0x0}], 0x2, 0x85, 0x80, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@mcast1, 0x41}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000069000b080000000000000000000000baec82c400080001"], 0x20}}, 0x4000000) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000140)={@dev={0xfe, 0x80, '\x00', 0x1d}, @mcast1, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa0022}) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000080)={@private0, @rand_addr=' \x01\x00', @private1, 0x7f, 0x95b, 0x0, 0x0, 0x0, 0x450006a}) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000100)={'veth1_to_bridge\x00'}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r6 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r6, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0xc38, &(0x7f0000000700)=ANY=[@ANYRES64, @ANYRES8=0x0, @ANYRES64=r6, @ANYBLOB="98218727f7e1084a6dda805831605231474402e23e3db061a6df58e217d423ab6f645335bebe33ee162519112fb671d01d05a7958bc2d26157b932aac02dfaa3907f7e4eecad98cab6bc875b1c4ad5c42e3bcf187a121a87aba92c131d8abb26350ecd66e26c32f486292efe7974d26796226ed61b76b9f1952d71cf3251f05c1fc2bd3f5cba9b92b644ea", @ANYBLOB="a3a54c5a9e00b9870cc0067781d6f6cfa981689df40f888f78a6bd8468dffeb854e9b48a73c5dab30e29e1dad0e7afe651649f8105389af6d555c43c12b3bf439171c14cef07553df19d9844644059caa3658550ff1c7a71b97815d6945a5f412127e103f6eec2d1904a5663f20daad226a3249bfaf428ca18f23c7603f0d05af0d117e0affff6f6da7d9ccffdd71996f773b45ced43fcc891bf2871d6fb2d65717478bde72156826430e7ab894a90d7110c4fdfb3272323b2ec3bab7a95cb5dc098304fb70357aead1d598bec7502911d233bc99874f601e6c3437213c113924fca0d42b7a5898d1a154f0544b1df410ac5182dcd6314df1587f1ce06a59150fe3d30e5cb4d3f1ea2c6a1e59edc43fc45ab00317e33bf5520747b9a3d77e19a8b7cb60b029e0ab33ba728777c660e64fa2b75336888337e7e72a699237aaf858841882e6db86df5b28688d4216b529a9dfd8b3c688c8f02625c275b3502d88f5945314a5b34cd837d7d11c94c76875790abc1af034907f631f1deb668c7f88344648999ebf74e2de707ad71f66b213ea6c0c2a8c52f2730ff18"]) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) 1.624355317s ago: executing program 0 (id=1272): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001b80)=ANY=[@ANYBLOB="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"], 0x60}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000090) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000140)='lo\x00', 0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000b5b30a40450c056055b501020301090212"], 0x0) syz_usb_control_io$printer(r4, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000240)=ANY=[@ANYBLOB="00000003000010"], 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) rename(0x0, &(0x7f00000000c0)='./file0/../file0/file0\x00') ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_gfeatures={0x33}}) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) fdatasync(0xffffffffffffffff) sendmsg$netlink(r3, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001a00)={0x10, 0x25, 0x4, 0x70bd26, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0x20000801}, 0x40010) r6 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r6, 0x0, 0x0) bind$netlink(r6, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfb, 0x1}, 0xc) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r3) recvmmsg(r3, &(0x7f00000086c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000340)=""/154, 0x9a}, {&(0x7f0000000880)=""/4111, 0x100f}, {&(0x7f00000007c0)=""/97, 0x61}], 0x3}, 0xa}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000004c0)=""/153, 0x99}, {&(0x7f00000005c0)=""/233, 0xe9}, {&(0x7f0000000100)=""/119, 0x77}, {0x0}, {0x0}], 0x5}, 0x1000}], 0x3, 0x8042, 0x0) getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000200), &(0x7f00000001c0)=0x8) socket$nl_netfilter(0x10, 0x3, 0xc) write$char_usb(r2, &(0x7f0000000040)="e2", 0x12d8) socket$xdp(0x2c, 0x3, 0x0) openat$audio1(0xffffff9c, &(0x7f00000002c0), 0x82101, 0x0) syz_usb_connect$uac1(0x0, 0xa5, 0x0, 0x0) 1.064070766s ago: executing program 2 (id=1273): sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_FD={0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040842}, 0x20040840) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='|\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000fedbdf251300000008000100706369303a30303a31302e3000000000080003000000000008000b00d009000006001100070000000800010070636900110002"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48050) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018002580140004004d2906d0880fc8acc30fe2020f9849675000028004000500a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe41bcc5aa8f56c9471400050080ab8be51421cfa3c9e5cbfe8217e0af0800010000000000080001000000000060001a803f0003"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 493.976067ms ago: executing program 2 (id=1274): openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x8042, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80801) r3 = dup(r2) r4 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r3, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r4, 0x47f5, 0x0, 0x0, 0x0, 0x0) 262.043664ms ago: executing program 1 (id=1275): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, 0x0, 0x310) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4800) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x1, @mcast1, 0x8000}}, {{0xa, 0x0, 0xb53, @empty, 0x80}}}, 0x108) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0400000000000000000570ad2539b8fa82771257779c7cf4eef65194b4ff0700000000000029cf51eb1dc5df27ffdb5b6e5a076897d3e785c46ec86b9ed61c0c9cbe5a5787db51f2ce5177aa3db7213eb76bf60301932332751cab7e7d0dd851fe73fc07b33abdcb750775361af00f89040d4023f37d7f00d3fd3f0d1f1722a1065d376689893ccc511d902ef7f7830e2168"], 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x4040044) r7 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x200cc0c5, &(0x7f0000000080)={0xa, 0x4c20, 0x0, @empty, 0x8}, 0x1c) sendto$inet6(r7, &(0x7f0000001cc0), 0x0, 0x8000, 0x0, 0x0) recvmmsg(r7, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r8, 0x5609, &(0x7f0000000040)={0x4, 0x7, 0x3}) 0s ago: executing program 2 (id=1276): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x3, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8004) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r2, 0x40045108, &(0x7f0000000280)=0x8000) openat$vcsa(0xffffffffffffff9c, 0x0, 0x842, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0x4000) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) openat$ttyS3(0xffffff9c, 0x0, 0x20040, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x5}, {0xa, 0x0, 0x0, @loopback}}}, 0x48) pread64(0xffffffffffffffff, 0x0, 0x0, 0x20000000000040) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x8041}, 0x40044) syz_open_dev$dri(0x0, 0x1, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r4, r4, 0x0, 0x200000) ioprio_set$uid(0x3, 0x0, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=@xfs_parent={0x1c, 0x82, {0x6, 0xf22651b, 0xa70, 0x1}}, 0x101040) kernel console output (not intermixed with test programs): ith error -22 [ 278.064576][ T5957] usb 3-1: USB disconnect, device number 7 [ 278.307443][ T5884] usb 5-1: USB disconnect, device number 5 [ 278.618915][ C0] vkms_vblank_simulate: vblank timer overrun [ 278.670364][ C0] vkms_vblank_simulate: vblank timer overrun [ 278.748611][ C0] vkms_vblank_simulate: vblank timer overrun [ 278.986172][ C0] vkms_vblank_simulate: vblank timer overrun [ 279.071542][ T7379] overlayfs: failed to resolve './file1': -2 [ 280.020098][ T5912] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 280.209948][ T5912] usb 3-1: Using ep0 maxpacket: 8 [ 280.243884][ T5912] usb 3-1: config 1 has an invalid descriptor of length 207, skipping remainder of the config [ 280.243939][ T5912] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 51200, setting to 64 [ 280.243965][ T5912] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 280.383746][ T5912] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 280.383776][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.389885][ T5912] usb 3-1: Product: syz [ 280.389902][ T5912] usb 3-1: Manufacturer: syz [ 280.389914][ T5912] usb 3-1: SerialNumber: syz [ 280.546858][ T5912] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 280.551537][ T5912] usbtest 3-1:1.0: couldn't get endpoints, -22 [ 280.551624][ T5912] usbtest 3-1:1.0: probe with driver usbtest failed with error -22 [ 281.058777][ T5884] usb 3-1: USB disconnect, device number 8 [ 284.932265][ T7431] netlink: 4 bytes leftover after parsing attributes in process `syz.2.377'. [ 285.736915][ C0] vkms_vblank_simulate: vblank timer overrun [ 285.832835][ C0] vkms_vblank_simulate: vblank timer overrun [ 286.059916][ T5887] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 286.229943][ T5887] usb 3-1: Using ep0 maxpacket: 32 [ 286.232257][ T5887] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 286.232285][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.308284][ T5887] usb 3-1: config 0 descriptor?? [ 286.959906][ T5887] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 286.992826][ T5887] usb 3-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 286.992852][ T5887] usb 3-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 288.340000][ T7455] gretap1: entered promiscuous mode [ 289.099927][ T5884] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 289.279876][ T5884] usb 2-1: Using ep0 maxpacket: 8 [ 289.444062][ T5884] usb 2-1: config 1 has an invalid descriptor of length 207, skipping remainder of the config [ 289.444131][ T5884] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 51200, setting to 64 [ 289.444158][ T5884] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 289.447584][ T5884] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 289.447611][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.447630][ T5884] usb 2-1: Product: syz [ 289.447643][ T5884] usb 2-1: Manufacturer: syz [ 289.447657][ T5884] usb 2-1: SerialNumber: syz [ 289.593546][ T5884] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 289.594399][ T5884] usbtest 2-1:1.0: couldn't get endpoints, -22 [ 289.594444][ T5884] usbtest 2-1:1.0: probe with driver usbtest failed with error -22 [ 290.076073][ T5884] usb 2-1: USB disconnect, device number 8 [ 290.330809][ T31] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 290.729927][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 290.824331][ T31] usb 5-1: config 1 has an invalid descriptor of length 22, skipping remainder of the config [ 290.824378][ T31] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 10240, setting to 64 [ 290.824392][ T31] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 290.832380][ T31] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 290.832408][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.832425][ T31] usb 5-1: Product: syz [ 290.832439][ T31] usb 5-1: Manufacturer: syz [ 290.832452][ T31] usb 5-1: SerialNumber: syz [ 290.848928][ T31] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 290.853490][ T31] usbtest 5-1:1.0: couldn't get endpoints, -22 [ 290.853759][ T31] usbtest 5-1:1.0: probe with driver usbtest failed with error -22 [ 291.330505][ T5884] usb 5-1: USB disconnect, device number 6 [ 292.534599][ C0] vkms_vblank_simulate: vblank timer overrun [ 293.160027][ T44] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 293.394776][ T44] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 293.394794][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.394804][ T44] usb 4-1: Product: syz [ 293.394811][ T44] usb 4-1: Manufacturer: syz [ 293.394819][ T44] usb 4-1: SerialNumber: syz [ 293.944325][ T44] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 293.944360][ T44] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 293.944809][ T44] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 294.041955][ T44] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 295.429998][ T7509] netlink: 'syz.0.398': attribute type 1 has an invalid length. [ 295.673681][ T7509] gretap1: entered promiscuous mode [ 295.956388][ T994] usb 4-1: USB disconnect, device number 7 [ 300.575315][ T7544] netlink: 8 bytes leftover after parsing attributes in process `syz.0.406'. [ 301.355999][ T7554] binder: BINDER_SET_CONTEXT_MGR already set [ 301.356009][ T7554] binder: 7553:7554 ioctl 4018620d 200000000040 returned -16 [ 301.380350][ T7554] binder: 7553:7554 ioctl c0306201 200000000500 returned -11 [ 302.798010][ C1] vkms_vblank_simulate: vblank timer overrun [ 303.006583][ C1] vkms_vblank_simulate: vblank timer overrun [ 303.548831][ C1] vkms_vblank_simulate: vblank timer overrun [ 306.819930][ T994] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 307.419884][ T994] usb 5-1: Using ep0 maxpacket: 32 [ 307.426037][ T994] usb 5-1: config 0 has an invalid interface number: 59 but max is 0 [ 307.426135][ T994] usb 5-1: config 0 has no interface number 0 [ 307.426170][ T994] usb 5-1: config 0 interface 59 has no altsetting 0 [ 307.433891][ T994] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 307.433908][ T994] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.433918][ T994] usb 5-1: Product: syz [ 307.433925][ T994] usb 5-1: Manufacturer: syz [ 307.433931][ T994] usb 5-1: SerialNumber: syz [ 307.437981][ T994] usb 5-1: config 0 descriptor?? [ 307.441952][ T994] smsc75xx v1.0.0 [ 307.441966][ T994] smsc75xx 5-1:0.59 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 307.442118][ T994] smsc75xx 5-1:0.59: probe with driver smsc75xx failed with error -22 [ 308.239942][ T7616] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 308.239967][ T7616] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 308.528620][ T7629] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 308.643120][ T7616] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 308.643144][ T7616] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 309.235616][ T7616] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 309.235642][ T7616] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 309.421000][ T7616] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 309.421025][ T7616] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 309.423636][ T7616] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 309.423664][ T7616] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 310.845003][ T31] usb 5-1: USB disconnect, device number 7 [ 311.567437][ T7651] netlink: 'syz.1.431': attribute type 39 has an invalid length. [ 311.599971][ T5877] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 311.749832][ T5877] usb 5-1: Using ep0 maxpacket: 16 [ 311.751758][ T5877] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 311.754151][ T5877] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 311.754166][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.754176][ T5877] usb 5-1: Product: syz [ 311.754188][ T5877] usb 5-1: Manufacturer: syz [ 311.754199][ T5877] usb 5-1: SerialNumber: syz [ 311.759208][ T5877] usb 5-1: config 0 descriptor?? [ 311.817130][ T5877] hub 5-1:0.0: bad descriptor, ignoring hub [ 311.817153][ T5877] hub 5-1:0.0: probe with driver hub failed with error -5 [ 311.837536][ T5877] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input33 [ 312.664947][ T7664] netlink: 'syz.1.434': attribute type 1 has an invalid length. [ 312.693864][ T31] usb 5-1: USB disconnect, device number 8 [ 315.089858][ T5877] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 315.130883][ C1] vkms_vblank_simulate: vblank timer overrun [ 315.241353][ T5877] usb 4-1: Using ep0 maxpacket: 8 [ 315.247622][ T5877] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 315.247680][ T5877] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 315.247705][ T5877] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 315.247727][ T5877] usb 4-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 315.247764][ T5877] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 315.247786][ T5877] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.353076][ T5877] usbtmc 4-1:16.0: bulk endpoints not found [ 315.781093][ T7687] overlayfs: failed to resolve './file1': -2 [ 316.494960][ T7695] netlink: 'syz.0.442': attribute type 1 has an invalid length. [ 316.660965][ T7700] qrtr: Invalid version 8 [ 316.809172][ T7699] gretap1: entered promiscuous mode [ 317.196380][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.196425][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.577575][ T7706] fuse: Unknown parameter 'group_i00000000000000000000' [ 317.869946][ T994] usb 4-1: USB disconnect, device number 8 [ 319.010799][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 319.231180][ T9] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 319.231201][ T9] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 319.231222][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 319.231233][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.238180][ T7716] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 319.309558][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 320.641338][ T5790] usb 5-1: USB disconnect, device number 9 [ 322.341699][ T7756] qrtr: Invalid version 8 [ 322.851237][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 323.049891][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 323.058786][ T9] usb 1-1: config 1 has an invalid descriptor of length 22, skipping remainder of the config [ 323.058830][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 10240, setting to 64 [ 323.058845][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 323.064069][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 323.064095][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.064104][ T9] usb 1-1: Product: syz [ 323.064112][ T9] usb 1-1: Manufacturer: syz [ 323.064118][ T9] usb 1-1: SerialNumber: syz [ 323.160417][ T7748] netlink: 8 bytes leftover after parsing attributes in process `syz.4.451'. [ 323.361306][ T9] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 323.544710][ T9] usbtest 1-1:1.0: couldn't get endpoints, -22 [ 323.544808][ T9] usbtest 1-1:1.0: probe with driver usbtest failed with error -22 [ 323.602055][ T9] usb 1-1: USB disconnect, device number 9 [ 323.901458][ T7764] syz.3.456 uses obsolete (PF_INET,SOCK_PACKET) [ 324.081512][ T7766] netlink: 'syz.1.457': attribute type 1 has an invalid length. [ 329.491193][ C1] vkms_vblank_simulate: vblank timer overrun [ 329.621577][ C1] vkms_vblank_simulate: vblank timer overrun [ 330.360352][ C1] vkms_vblank_simulate: vblank timer overrun [ 333.888169][ T7837] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 333.888190][ T7837] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 334.139924][ T7837] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 334.144389][ T7837] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 335.013589][ T7844] pim6reg: entered allmulticast mode [ 335.950983][ T7858] netlink: 8 bytes leftover after parsing attributes in process `syz.4.479'. [ 337.871685][ T994] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 338.092100][ T994] usb 1-1: Using ep0 maxpacket: 8 [ 338.149240][ T994] usb 1-1: config 1 has an invalid descriptor of length 33, skipping remainder of the config [ 338.149299][ T994] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 2048, setting to 64 [ 338.149331][ T994] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 338.157218][ T994] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 338.157246][ T994] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.157265][ T994] usb 1-1: Product: syz [ 338.157278][ T994] usb 1-1: Manufacturer: syz [ 338.157291][ T994] usb 1-1: SerialNumber: syz [ 338.172242][ T994] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 338.174235][ T994] usbtest 1-1:1.0: couldn't get endpoints, -22 [ 338.174329][ T994] usbtest 1-1:1.0: probe with driver usbtest failed with error -22 [ 338.675138][ T994] usb 1-1: USB disconnect, device number 10 [ 341.744549][ T7933] netlink: 'syz.1.499': attribute type 39 has an invalid length. [ 342.070328][ T7944] netlink: 24 bytes leftover after parsing attributes in process `syz.2.503'. [ 342.829848][ T5912] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 343.047276][ T5912] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 343.047305][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.047323][ T5912] usb 1-1: Product: syz [ 343.047336][ T5912] usb 1-1: Manufacturer: syz [ 343.047348][ T5912] usb 1-1: SerialNumber: syz [ 343.499913][ T5912] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 343.499964][ T5912] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 343.500679][ T5912] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 343.635256][ T5912] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 345.655825][ T994] usb 1-1: USB disconnect, device number 11 [ 346.685772][ T7986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.518'. [ 347.976525][ T5887] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 347.976580][ T5887] dvb_usb_az6027 3-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 347.979075][ T5887] usb 3-1: USB disconnect, device number 9 [ 351.616872][ C0] vkms_vblank_simulate: vblank timer overrun [ 352.083813][ T8039] qrtr: Invalid version 0 [ 354.865454][ T8055] netlink: 'syz.3.536': attribute type 13 has an invalid length. [ 355.101068][ T8055] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 355.379827][ T5884] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 355.549861][ T5884] usb 2-1: Using ep0 maxpacket: 8 [ 355.575348][ T5884] usb 2-1: config 1 has an invalid descriptor of length 23, skipping remainder of the config [ 355.575407][ T5884] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 355.575432][ T5884] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 355.755888][ T5884] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 355.755918][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.755938][ T5884] usb 2-1: Product: syz [ 355.755951][ T5884] usb 2-1: Manufacturer: syz [ 355.755964][ T5884] usb 2-1: SerialNumber: syz [ 355.996812][ T5884] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 356.023929][ T5884] usbtest 2-1:1.0: couldn't get endpoints, -22 [ 356.024017][ T5884] usbtest 2-1:1.0: probe with driver usbtest failed with error -22 [ 356.378704][ T5884] usb 2-1: USB disconnect, device number 9 [ 357.409887][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 357.569823][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 357.575731][ T9] usb 5-1: config 1 has an invalid descriptor of length 207, skipping remainder of the config [ 357.575770][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 62464, setting to 64 [ 357.575784][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 357.661590][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 357.661608][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.661617][ T9] usb 5-1: Product: syz [ 357.661624][ T9] usb 5-1: Manufacturer: syz [ 357.661631][ T9] usb 5-1: SerialNumber: syz [ 357.710653][ T9] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 357.711502][ T9] usbtest 5-1:1.0: couldn't get endpoints, -22 [ 357.711548][ T9] usbtest 5-1:1.0: probe with driver usbtest failed with error -22 [ 358.022180][ T7486] usb 5-1: USB disconnect, device number 10 [ 358.407851][ T8089] netlink: 'syz.0.544': attribute type 39 has an invalid length. [ 361.695457][ T8114] qrtr: Invalid version 0 [ 363.839897][ T7486] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 363.999839][ T7486] usb 1-1: Using ep0 maxpacket: 16 [ 364.002538][ T7486] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 364.006786][ T7486] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 364.006811][ T7486] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.006829][ T7486] usb 1-1: Product: syz [ 364.006842][ T7486] usb 1-1: Manufacturer: syz [ 364.006855][ T7486] usb 1-1: SerialNumber: syz [ 364.074530][ T7486] usb 1-1: config 0 descriptor?? [ 364.110611][ T7486] hub 1-1:0.0: bad descriptor, ignoring hub [ 364.110652][ T7486] hub 1-1:0.0: probe with driver hub failed with error -5 [ 364.155299][ T7486] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input34 [ 364.159966][ T5884] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 364.315998][ T5884] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 364.316030][ T5884] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 364.316067][ T5884] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 364.316087][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.346832][ T8129] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 364.394876][ T5884] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 365.103923][ T8144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.558'. [ 365.220263][ T5884] usb 3-1: USB disconnect, device number 10 [ 365.243788][ T7420] udevd[7420]: setting owner of /dev/snd/controlC3 to uid=0, gid=29 failed: No such file or directory [ 365.380768][ T5790] usb 1-1: USB disconnect, device number 12 [ 365.859924][ T5884] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 366.009905][ T5884] usb 2-1: Using ep0 maxpacket: 32 [ 366.011485][ T5884] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 366.011500][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.014732][ T5884] usb 2-1: config 0 descriptor?? [ 366.224164][ T5884] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 366.370810][ C1] vkms_vblank_simulate: vblank timer overrun [ 366.462890][ T5884] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 366.465564][ T5884] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 366.465599][ T5884] usb 2-1: media controller created [ 367.033676][ C1] vkms_vblank_simulate: vblank timer overrun [ 367.203579][ T5884] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 367.379044][ T5884] az6027: usb out operation failed. (-71) [ 367.379415][ T5884] az6027: usb out operation failed. (-71) [ 367.379423][ T5884] stb0899_attach: Driver disabled by Kconfig [ 367.379427][ T5884] az6027: no front-end attached [ 367.379427][ T5884] [ 367.380388][ T5884] az6027: usb out operation failed. (-71) [ 367.380403][ T5884] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 367.438083][ T5884] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input35 [ 367.640712][ T5884] dvb-usb: schedule remote query interval to 400 msecs. [ 367.640736][ T5884] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 367.656928][ T5884] usb 2-1: USB disconnect, device number 10 [ 368.515432][ T5884] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 368.557163][ T8176] netlink: 24 bytes leftover after parsing attributes in process `syz.1.565'. [ 369.870385][ T8185] fuse: Bad value for 'fd' [ 370.751904][ T994] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 370.940028][ T994] usb 3-1: Using ep0 maxpacket: 8 [ 371.054781][ T994] usb 3-1: config 1 has an invalid descriptor of length 23, skipping remainder of the config [ 371.054841][ T994] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 371.054867][ T994] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 371.062934][ T994] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 371.062963][ T994] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.062982][ T994] usb 3-1: Product: syz [ 371.062994][ T994] usb 3-1: Manufacturer: syz [ 371.063007][ T994] usb 3-1: SerialNumber: syz [ 371.277304][ T994] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 371.315610][ T994] usbtest 3-1:1.0: couldn't get endpoints, -22 [ 371.315662][ T994] usbtest 3-1:1.0: probe with driver usbtest failed with error -22 [ 371.399953][ T5877] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 371.439018][ T994] usb 3-1: USB disconnect, device number 11 [ 371.976459][ T5877] usb 1-1: Using ep0 maxpacket: 8 [ 371.993713][ T5877] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 371.993768][ T5877] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 371.993779][ T5877] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 372.004744][ T5877] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 372.004772][ T5877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.004789][ T5877] usb 1-1: Product: syz [ 372.004802][ T5877] usb 1-1: Manufacturer: syz [ 372.004814][ T5877] usb 1-1: SerialNumber: syz [ 372.035439][ T5877] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 372.036921][ T5877] usbtest 1-1:1.0: couldn't get endpoints, -22 [ 372.037007][ T5877] usbtest 1-1:1.0: probe with driver usbtest failed with error -22 [ 372.340463][ T5877] usb 1-1: USB disconnect, device number 13 [ 375.509918][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 375.734541][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 375.769916][ T9] usb 4-1: config 1 has an invalid descriptor of length 33, skipping remainder of the config [ 375.769963][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 2048, setting to 64 [ 375.769978][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 375.775286][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 375.775314][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.775332][ T9] usb 4-1: Product: syz [ 375.775345][ T9] usb 4-1: Manufacturer: syz [ 375.775359][ T9] usb 4-1: SerialNumber: syz [ 375.895388][ T9] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 375.940787][ T9] usbtest 4-1:1.0: couldn't get endpoints, -22 [ 375.940840][ T9] usbtest 4-1:1.0: probe with driver usbtest failed with error -22 [ 376.102251][ T5877] usb 4-1: USB disconnect, device number 9 [ 378.526784][ T8254] netlink: 8 bytes leftover after parsing attributes in process `syz.1.582'. [ 378.667541][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.667587][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.659897][ T5887] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 383.709891][ T5912] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 383.841988][ T5887] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 383.842009][ T5887] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 383.842031][ T5887] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 383.842042][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.851310][ T8295] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 383.857233][ T5887] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 383.889851][ T5912] usb 4-1: Using ep0 maxpacket: 8 [ 383.894106][ T5912] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 383.894137][ T5912] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 383.894160][ T5912] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 383.894180][ T5912] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 383.894219][ T5912] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 383.894239][ T5912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.519874][ T5912] usb 4-1: usb_control_msg returned -32 [ 384.520504][ T5912] usbtmc 4-1:16.0: can't read capabilities [ 384.735669][ T5912] usb 4-1: USB disconnect, device number 10 [ 384.929972][ T5887] usb 3-1: USB disconnect, device number 12 [ 385.994011][ T8310] netlink: 'syz.4.595': attribute type 13 has an invalid length. [ 386.371641][ T8310] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 388.791286][ T5877] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 389.679923][ T5877] usb 4-1: Using ep0 maxpacket: 8 [ 389.682403][ T5877] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 389.682434][ T5877] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 389.682457][ T5877] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 389.682478][ T5877] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 389.682517][ T5877] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 389.682538][ T5877] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.895830][ T5877] usb 4-1: GET_CAPABILITIES returned 0 [ 389.895865][ T5877] usbtmc 4-1:16.0: can't read capabilities [ 390.122359][ C0] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 390.144664][ T8338] usbtmc 4-1:16.0: Unable to send data, error -71 [ 390.147879][ T5877] usb 4-1: USB disconnect, device number 11 [ 390.529873][ T5887] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 390.685380][ T5887] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 390.685414][ T5887] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 390.685452][ T5887] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 390.685473][ T5887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.754842][ T8345] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 390.782578][ T5887] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 391.159827][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 391.347613][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 391.367647][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 391.384623][ T9] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 391.384651][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.384669][ T9] usb 5-1: Product: syz [ 391.384682][ T9] usb 5-1: Manufacturer: syz [ 391.384696][ T9] usb 5-1: SerialNumber: syz [ 391.456063][ T9] usb 5-1: config 0 descriptor?? [ 391.561776][ T9] hub 5-1:0.0: bad descriptor, ignoring hub [ 391.561814][ T9] hub 5-1:0.0: probe with driver hub failed with error -5 [ 391.606209][ T9] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input36 [ 391.608212][ T5877] usb 1-1: USB disconnect, device number 14 [ 393.199956][ T5912] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 393.378706][ T5912] usb 1-1: Using ep0 maxpacket: 8 [ 393.381403][ T5912] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 393.381422][ T5912] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 393.381435][ T5912] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 393.381446][ T5912] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 393.381469][ T5912] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 393.381480][ T5912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.629876][ T31] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 393.818224][ T5912] usb 1-1: GET_CAPABILITIES returned 0 [ 393.818254][ T5912] usbtmc 1-1:16.0: can't read capabilities [ 393.850172][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 393.853747][ T31] usb 3-1: config 1 has an invalid descriptor of length 22, skipping remainder of the config [ 393.853798][ T31] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 10240, setting to 64 [ 393.853812][ T31] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 393.856928][ T31] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 393.856944][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.856954][ T31] usb 3-1: Product: syz [ 393.856961][ T31] usb 3-1: Manufacturer: syz [ 393.856968][ T31] usb 3-1: SerialNumber: syz [ 394.136239][ T31] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 394.137829][ T31] usbtest 3-1:1.0: couldn't get endpoints, -22 [ 394.137914][ T31] usbtest 3-1:1.0: probe with driver usbtest failed with error -22 [ 394.600579][ T5877] usb 3-1: USB disconnect, device number 13 [ 395.414832][ T8390] netlink: 8 bytes leftover after parsing attributes in process `syz.3.614'. [ 396.522450][ T9] usb 5-1: USB disconnect, device number 11 [ 397.103383][ T9] usb 1-1: USB disconnect, device number 15 [ 397.774486][ T8406] binder: 8403:8406 ioctl c0306201 200000000500 returned -11 [ 400.389884][ T5877] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 400.539837][ T5877] usb 4-1: Using ep0 maxpacket: 8 [ 400.577992][ T5877] usb 4-1: config 1 has an invalid descriptor of length 20, skipping remainder of the config [ 400.578055][ T5877] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 768, setting to 64 [ 400.578079][ T5877] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 400.818563][ T5877] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 400.818606][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.818625][ T5877] usb 4-1: Product: syz [ 400.818637][ T5877] usb 4-1: Manufacturer: syz [ 400.818649][ T5877] usb 4-1: SerialNumber: syz [ 401.035685][ T5877] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 401.042462][ T5877] usbtest 4-1:1.0: couldn't get endpoints, -22 [ 401.042545][ T5877] usbtest 4-1:1.0: probe with driver usbtest failed with error -22 [ 401.142174][ T5877] usb 4-1: USB disconnect, device number 12 [ 403.785855][ T8455] binder: 8454:8455 ioctl c0306201 200000000500 returned -11 [ 404.001554][ T8460] fuse: Bad value for 'fd' [ 404.117031][ T8463] netlink: 'syz.0.633': attribute type 1 has an invalid length. [ 405.840406][ T8486] tipc: Started in network mode [ 405.840511][ T8486] tipc: Node identity 7a73a50cd1d9, cluster identity 4711 [ 405.840890][ T8486] tipc: Enabled bearer , priority 0 [ 405.841952][ T8486] syzkaller0: entered promiscuous mode [ 405.841966][ T8486] syzkaller0: entered allmulticast mode [ 405.852757][ T8486] tipc: Resetting bearer [ 406.029992][ T31] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 406.100207][ T8485] tipc: Resetting bearer [ 406.189793][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 406.194357][ T31] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 406.194388][ T31] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 406.194406][ T31] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 406.194417][ T31] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 406.194440][ T31] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 406.194451][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.457513][ T31] usb 4-1: GET_CAPABILITIES returned 0 [ 406.457561][ T31] usbtmc 4-1:16.0: can't read capabilities [ 406.552750][ T8485] tipc: Disabling bearer [ 406.735261][ C0] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 409.660062][ T5877] usb 4-1: USB disconnect, device number 13 [ 409.880575][ T8510] fuse: Bad value for 'fd' [ 410.489099][ C0] vkms_vblank_simulate: vblank timer overrun [ 410.612522][ C0] vkms_vblank_simulate: vblank timer overrun [ 410.659328][ T8517] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 410.683358][ C0] vkms_vblank_simulate: vblank timer overrun [ 412.610707][ C0] vkms_vblank_simulate: vblank timer overrun [ 413.781126][ T8551] fuse: Bad value for 'fd' [ 417.430387][ T8584] netlink: 'syz.3.669': attribute type 39 has an invalid length. [ 417.890081][ T31] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 418.061978][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 418.078965][ T31] usb 3-1: config 1 has an invalid descriptor of length 33, skipping remainder of the config [ 418.079005][ T31] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 2048, setting to 64 [ 418.079020][ T31] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 418.089096][ T31] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 418.089114][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.089124][ T31] usb 3-1: Product: syz [ 418.089131][ T31] usb 3-1: Manufacturer: syz [ 418.089138][ T31] usb 3-1: SerialNumber: syz [ 418.170218][ T31] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 418.172015][ T31] usbtest 3-1:1.0: couldn't get endpoints, -22 [ 418.172101][ T31] usbtest 3-1:1.0: probe with driver usbtest failed with error -22 [ 418.645761][ T31] usb 3-1: USB disconnect, device number 14 [ 419.514683][ T31] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 419.714016][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 419.726379][ T31] usb 2-1: config 0 has an invalid interface number: 59 but max is 0 [ 419.726404][ T31] usb 2-1: config 0 has no interface number 0 [ 419.726434][ T31] usb 2-1: config 0 interface 59 has no altsetting 0 [ 420.152154][ T31] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 420.152173][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.152182][ T31] usb 2-1: Product: syz [ 420.152190][ T31] usb 2-1: Manufacturer: syz [ 420.152197][ T31] usb 2-1: SerialNumber: syz [ 420.155531][ T31] usb 2-1: config 0 descriptor?? [ 420.199298][ T31] smsc75xx v1.0.0 [ 420.199309][ T31] smsc75xx 2-1:0.59 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 420.199466][ T31] smsc75xx 2-1:0.59: probe with driver smsc75xx failed with error -22 [ 421.859095][ T8626] qrtr: Invalid version 0 [ 423.272546][ T8636] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 424.043408][ T5877] usb 2-1: USB disconnect, device number 11 [ 424.483535][ T8646] netlink: 4 bytes leftover after parsing attributes in process `syz.4.687'. [ 424.779908][ T5877] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 424.939835][ T5877] usb 5-1: Using ep0 maxpacket: 32 [ 424.943555][ T5877] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 424.943572][ T5877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.947199][ T5877] usb 5-1: config 0 descriptor?? [ 425.151910][ T5877] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 425.179806][ T5877] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 425.180899][ T5877] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 425.180952][ T5877] usb 5-1: media controller created [ 425.250686][ T5877] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 425.359377][ T5877] az6027: usb out operation failed. (-71) [ 425.365884][ T5877] az6027: usb out operation failed. (-71) [ 425.365895][ T5877] stb0899_attach: Driver disabled by Kconfig [ 425.365900][ T5877] az6027: no front-end attached [ 425.365900][ T5877] [ 425.366237][ T5877] az6027: usb out operation failed. (-71) [ 425.366244][ T5877] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 425.368026][ T5877] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input37 [ 425.413845][ T5877] dvb-usb: schedule remote query interval to 400 msecs. [ 425.413861][ T5877] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 425.417162][ T5877] usb 5-1: USB disconnect, device number 12 [ 425.709952][ T5877] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 425.840928][ T8654] netlink: 'syz.3.690': attribute type 12 has an invalid length. [ 425.840975][ T8654] netlink: 'syz.3.690': attribute type 29 has an invalid length. [ 425.840988][ T8654] netlink: 148 bytes leftover after parsing attributes in process `syz.3.690'. [ 425.841028][ T8654] netlink: 'syz.3.690': attribute type 2 has an invalid length. [ 425.841042][ T8654] netlink: 23 bytes leftover after parsing attributes in process `syz.3.690'. [ 426.125657][ T8666] netlink: 'syz.1.691': attribute type 39 has an invalid length. [ 426.478283][ T10] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 426.701756][ T10] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 426.701776][ T10] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 426.701806][ T10] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 426.701818][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.772346][ T8662] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 426.787761][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 426.823448][ T8667] netlink: 'syz.3.692': attribute type 13 has an invalid length. [ 427.566656][ T8667] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 427.589343][ T8675] overlayfs: failed to resolve './file1': -2 [ 427.792555][ T10] usb 5-1: USB disconnect, device number 13 [ 430.510032][ T8698] qrtr: Invalid version 0 [ 431.142169][ T8703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.701'. [ 433.844578][ T8731] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 435.809911][ T7486] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 435.959850][ T7486] usb 2-1: Using ep0 maxpacket: 8 [ 436.081355][ T7486] usb 2-1: config 1 has an invalid descriptor of length 22, skipping remainder of the config [ 436.081411][ T7486] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 10240, setting to 64 [ 436.081436][ T7486] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 436.087129][ T7486] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 436.087156][ T7486] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.087175][ T7486] usb 2-1: Product: syz [ 436.087189][ T7486] usb 2-1: Manufacturer: syz [ 436.087203][ T7486] usb 2-1: SerialNumber: syz [ 436.116345][ T7486] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 436.120498][ T7486] usbtest 2-1:1.0: couldn't get endpoints, -22 [ 436.120583][ T7486] usbtest 2-1:1.0: probe with driver usbtest failed with error -22 [ 436.393545][ T7486] usb 2-1: USB disconnect, device number 12 [ 437.285585][ T8772] netlink: 8 bytes leftover after parsing attributes in process `syz.4.717'. [ 439.821605][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 439.991376][ T10] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 439.991410][ T10] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 439.991448][ T10] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 439.991469][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.058725][ T8792] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 440.077240][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.077312][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.098516][ T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 441.059903][ T991] usb 2-1: USB disconnect, device number 13 [ 441.452618][ T8805] netlink: 'syz.4.725': attribute type 12 has an invalid length. [ 441.452639][ T8805] netlink: 'syz.4.725': attribute type 29 has an invalid length. [ 441.452651][ T8805] netlink: 148 bytes leftover after parsing attributes in process `syz.4.725'. [ 441.452675][ T8805] netlink: 'syz.4.725': attribute type 2 has an invalid length. [ 441.452687][ T8805] netlink: 23 bytes leftover after parsing attributes in process `syz.4.725'. [ 443.519497][ T31] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 443.689835][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 443.692210][ T31] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 443.692229][ T31] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 443.692248][ T31] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 443.692260][ T31] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 443.692282][ T31] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 443.692292][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.103970][ T31] usb 3-1: GET_CAPABILITIES returned 0 [ 444.105299][ T31] usbtmc 3-1:16.0: can't read capabilities [ 444.561168][ T8830] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 446.233325][ T5884] usb 3-1: USB disconnect, device number 15 [ 446.997714][ T8860] gretap1: entered promiscuous mode [ 447.754920][ T8863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.739'. [ 450.060790][ T8892] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 452.969075][ T8917] fuse: Bad value for 'group_id' [ 452.969094][ T8917] fuse: Bad value for 'group_id' [ 453.429802][ T5912] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 453.582111][ T5912] usb 4-1: config 17 has an invalid descriptor of length 255, skipping remainder of the config [ 453.583092][ T5912] usb 4-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 453.583137][ T5912] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 453.583158][ T5912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.887099][ T5912] usb 4-1: string descriptor 0 read error: -71 [ 453.903636][ T5912] aiptek 4-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 453.930430][ T5912] usb 4-1: USB disconnect, device number 14 [ 454.738929][ T8946] netlink: 'syz.1.768': attribute type 39 has an invalid length. [ 455.016976][ T8952] fuse: Bad value for 'group_id' [ 455.016995][ T8952] fuse: Bad value for 'group_id' [ 455.801160][ C0] vkms_vblank_simulate: vblank timer overrun [ 455.843425][ C0] vkms_vblank_simulate: vblank timer overrun [ 455.943145][ C0] vkms_vblank_simulate: vblank timer overrun [ 456.087103][ C0] vkms_vblank_simulate: vblank timer overrun [ 456.536440][ T8966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.774'. [ 456.776215][ C0] vkms_vblank_simulate: vblank timer overrun [ 457.509904][ T5884] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 457.740284][ T5884] usb 3-1: Using ep0 maxpacket: 8 [ 457.746417][ T5884] usb 3-1: config 1 has an invalid descriptor of length 20, skipping remainder of the config [ 457.746469][ T5884] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 768, setting to 64 [ 457.746483][ T5884] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 457.753717][ T5884] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 457.753734][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.753744][ T5884] usb 3-1: Product: syz [ 457.753751][ T5884] usb 3-1: Manufacturer: syz [ 457.753758][ T5884] usb 3-1: SerialNumber: syz [ 457.848172][ T5884] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 457.849129][ T5884] usbtest 3-1:1.0: couldn't get endpoints, -22 [ 457.849175][ T5884] usbtest 3-1:1.0: probe with driver usbtest failed with error -22 [ 458.148675][ T8979] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 458.368707][ C0] vkms_vblank_simulate: vblank timer overrun [ 458.476729][ T5884] usb 3-1: USB disconnect, device number 16 [ 459.964679][ T8988] netlink: 'syz.3.778': attribute type 13 has an invalid length. [ 460.092267][ T8988] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 460.430166][ T8997] fuse: Bad value for 'group_id' [ 460.430179][ T8997] fuse: Bad value for 'group_id' [ 461.319893][ T5912] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 461.411013][ T9013] fuse: Bad value for 'fd' [ 461.563722][ T5912] usb 2-1: Using ep0 maxpacket: 32 [ 461.570302][ T5912] usb 2-1: config 0 has an invalid interface number: 59 but max is 0 [ 461.570327][ T5912] usb 2-1: config 0 has no interface number 0 [ 461.570358][ T5912] usb 2-1: config 0 interface 59 has no altsetting 0 [ 461.579361][ T5912] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 461.579388][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.579866][ T5912] usb 2-1: Product: syz [ 461.579886][ T5912] usb 2-1: Manufacturer: syz [ 461.579899][ T5912] usb 2-1: SerialNumber: syz [ 461.594299][ T5912] usb 2-1: config 0 descriptor?? [ 461.807167][ T5912] smsc75xx v1.0.0 [ 461.807184][ T5912] smsc75xx 2-1:0.59 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 461.807345][ T5912] smsc75xx 2-1:0.59: probe with driver smsc75xx failed with error -22 [ 462.557139][ T9023] netlink: 'syz.4.789': attribute type 1 has an invalid length. [ 464.452145][ T5884] usb 2-1: USB disconnect, device number 14 [ 464.964019][ T9040] netlink: 8 bytes leftover after parsing attributes in process `syz.0.794'. [ 467.707136][ T9067] netlink: 8 bytes leftover after parsing attributes in process `syz.3.800'. [ 471.715470][ T9098] netlink: 'syz.4.808': attribute type 1 has an invalid length. [ 472.832277][ T9114] netlink: 8 bytes leftover after parsing attributes in process `syz.3.810'. [ 474.604068][ C0] vkms_vblank_simulate: vblank timer overrun [ 476.289420][ T9148] netlink: 8 bytes leftover after parsing attributes in process `syz.4.818'. [ 478.489797][ T10] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 478.639814][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 478.642280][ T10] usb 4-1: config 1 has an invalid descriptor of length 234, skipping remainder of the config [ 478.642320][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 54528, setting to 64 [ 478.642334][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 478.644307][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 478.644323][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.644333][ T10] usb 4-1: Product: syz [ 478.644340][ T10] usb 4-1: Manufacturer: syz [ 478.644347][ T10] usb 4-1: SerialNumber: syz [ 478.732191][ T10] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 478.734490][ T10] usbtest 4-1:1.0: couldn't get endpoints, -22 [ 478.734571][ T10] usbtest 4-1:1.0: probe with driver usbtest failed with error -22 [ 478.866385][ T10] usb 4-1: USB disconnect, device number 15 [ 479.919565][ C1] vkms_vblank_simulate: vblank timer overrun [ 480.743206][ C1] vkms_vblank_simulate: vblank timer overrun [ 481.189792][ T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 481.450361][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 481.699894][ T7486] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 481.801760][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 481.801793][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 481.801816][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 481.801838][ T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 481.801874][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 481.801893][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.872067][ T7486] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 481.872099][ T7486] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 481.872136][ T7486] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 481.872157][ T7486] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.884586][ T9196] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 482.026524][ T10] usb 4-1: GET_CAPABILITIES returned 0 [ 482.026573][ T10] usbtmc 4-1:16.0: can't read capabilities [ 482.109410][ T9197] netlink: 'syz.1.828': attribute type 13 has an invalid length. [ 482.240792][ T7486] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 482.312516][ C1] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 482.528398][ T7486] usb 5-1: USB disconnect, device number 14 [ 482.830347][ T9197] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 484.099885][ T5887] usb 4-1: USB disconnect, device number 16 [ 487.309904][ T5877] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 487.459845][ T5877] usb 2-1: Using ep0 maxpacket: 8 [ 487.465102][ T5877] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 487.465134][ T5877] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 487.465156][ T5877] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 487.465179][ T5877] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 487.465219][ T5877] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 487.465240][ T5877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.402180][ T5877] usb 2-1: GET_CAPABILITIES returned 0 [ 488.402228][ T5877] usbtmc 2-1:16.0: can't read capabilities [ 488.814180][ T9238] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 489.087256][ C1] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 490.527789][ T5887] usb 2-1: USB disconnect, device number 15 [ 490.771901][ T5884] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 491.229166][ T5884] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 491.229201][ T5884] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 491.229240][ T5884] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 491.229262][ T5884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.465857][ T9246] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 491.509385][ T5884] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 491.883024][ T5884] usb 1-1: USB disconnect, device number 16 [ 492.890513][ T9274] netlink: 8 bytes leftover after parsing attributes in process `syz.4.847'. [ 493.233064][ T9278] netlink: 'syz.0.849': attribute type 39 has an invalid length. [ 493.618450][ T9282] netlink: 'syz.3.851': attribute type 12 has an invalid length. [ 493.618472][ T9282] netlink: 'syz.3.851': attribute type 29 has an invalid length. [ 493.618483][ T9282] netlink: 148 bytes leftover after parsing attributes in process `syz.3.851'. [ 493.618506][ T9282] netlink: 'syz.3.851': attribute type 2 has an invalid length. [ 493.618517][ T9282] netlink: 7 bytes leftover after parsing attributes in process `syz.3.851'. [ 494.135293][ T9292] binder: 9291:9292 ioctl 4018620d 0 returned -22 [ 494.136106][ T9292] binder: 9291:9292 ioctl c0306201 200000000500 returned -11 [ 494.579840][ T5884] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 494.731131][ T5884] usb 2-1: Using ep0 maxpacket: 8 [ 494.741908][ T5884] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 494.741942][ T5884] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 494.741967][ T5884] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 494.741989][ T5884] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 494.742030][ T5884] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 494.742052][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.178429][ T5884] usb 2-1: GET_CAPABILITIES returned 0 [ 495.178479][ T5884] usbtmc 2-1:16.0: can't read capabilities [ 496.465158][ C1] vkms_vblank_simulate: vblank timer overrun [ 498.150429][ T10] usb 2-1: USB disconnect, device number 16 [ 499.646805][ T9332] netlink: 8 bytes leftover after parsing attributes in process `syz.2.860'. [ 501.555362][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.555704][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.872282][ T9355] binder: 9354:9355 ioctl c0306201 0 returned -14 [ 501.893095][ T9355] binder: 9354:9355 ioctl c0306201 200000000500 returned -11 [ 502.283413][ T9359] netlink: 8 bytes leftover after parsing attributes in process `syz.2.866'. [ 502.741647][ C1] vkms_vblank_simulate: vblank timer overrun [ 503.073139][ C1] vkms_vblank_simulate: vblank timer overrun [ 503.430463][ T31] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 503.574620][ C1] vkms_vblank_simulate: vblank timer overrun [ 503.669988][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 503.674994][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 503.678215][ T31] usb 2-1: config 1 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 503.678247][ T31] usb 2-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid maxpacket 1536, setting to 1024 [ 503.678279][ T31] usb 2-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 503.678306][ T31] usb 2-1: config 1 interface 0 has no altsetting 0 [ 503.682129][ T31] usb 2-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 503.682156][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.682174][ T31] usb 2-1: Product: syz [ 503.682186][ T31] usb 2-1: Manufacturer: syz [ 503.682200][ T31] usb 2-1: SerialNumber: syz [ 503.815879][ T9366] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 504.023864][ T31] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input39 [ 504.303400][ T5150] bcm5974 2-1:1.0: could not read from device [ 509.412006][ T9406] netlink: 'syz.2.876': attribute type 13 has an invalid length. [ 509.664701][ T9406] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 509.912584][ T31] bcm5974 2-1:1.0: could not read from device [ 510.161857][ T5150] bcm5974 2-1:1.0: could not read from device [ 510.411410][ T31] input: failed to attach handler mousedev to device input39, error: -5 [ 510.453002][ T31] usb 2-1: USB disconnect, device number 17 [ 510.467992][ T5150] bcm5974 2-1:1.0: could not read from device [ 512.074840][ T9429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.882'. [ 515.234854][ T5887] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 515.496058][ T5887] usb 1-1: Using ep0 maxpacket: 8 [ 515.912899][ T5887] usb 1-1: config 1 has an invalid descriptor of length 20, skipping remainder of the config [ 515.912962][ T5887] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 768, setting to 64 [ 515.912987][ T5887] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 516.005692][ T5887] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 516.005711][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.005721][ T5887] usb 1-1: Product: syz [ 516.005728][ T5887] usb 1-1: Manufacturer: syz [ 516.005735][ T5887] usb 1-1: SerialNumber: syz [ 516.051670][ T5887] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 516.052480][ T5887] usbtest 1-1:1.0: couldn't get endpoints, -22 [ 516.052525][ T5887] usbtest 1-1:1.0: probe with driver usbtest failed with error -22 [ 516.109803][ T10] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 516.262350][ T7486] usb 1-1: USB disconnect, device number 17 [ 516.283031][ T10] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 516.283064][ T10] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 516.283103][ T10] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 516.283125][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.412853][ T9466] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 516.442526][ T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 516.717265][ T9472] netlink: 8 bytes leftover after parsing attributes in process `syz.4.892'. [ 516.960239][ T10] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 517.058264][ T7486] usb 3-1: USB disconnect, device number 17 [ 517.139823][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 517.142147][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 517.142205][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 517.170537][ T10] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 517.170566][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.170585][ T10] usb 2-1: Product: syz [ 517.170598][ T10] usb 2-1: Manufacturer: syz [ 517.170611][ T10] usb 2-1: SerialNumber: syz [ 517.246938][ T10] usb 2-1: config 0 descriptor?? [ 517.262105][ T10] hub 2-1:0.0: bad descriptor, ignoring hub [ 517.262145][ T10] hub 2-1:0.0: probe with driver hub failed with error -5 [ 517.905067][ T7486] usb 2-1: USB disconnect, device number 18 [ 518.259804][ T5884] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 518.409754][ T5884] usb 1-1: Using ep0 maxpacket: 16 [ 518.418161][ T5884] usb 1-1: unable to get BOS descriptor or descriptor too short [ 518.420224][ T5884] usb 1-1: config 1 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 518.420252][ T5884] usb 1-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid maxpacket 1536, setting to 1024 [ 518.420276][ T5884] usb 1-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 518.420301][ T5884] usb 1-1: config 1 interface 0 has no altsetting 0 [ 518.423366][ T5884] usb 1-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 518.423392][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.423410][ T5884] usb 1-1: Product: syz [ 518.423423][ T5884] usb 1-1: Manufacturer: syz [ 518.423436][ T5884] usb 1-1: SerialNumber: syz [ 518.579188][ T9481] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 518.987568][ T7486] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 519.151583][ T7486] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 519.151604][ T7486] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 519.151626][ T7486] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 519.151637][ T7486] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.155385][ T9489] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 519.158717][ T7486] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 519.283872][ T5884] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input40 [ 519.288829][ T5884] bcm5974 1-1:1.0: could not read from device [ 519.514174][ T5150] bcm5974 1-1:1.0: could not read from device [ 519.688288][ T5884] input: failed to attach handler mousedev to device input40, error: -5 [ 519.703806][ T5884] usb 1-1: USB disconnect, device number 18 [ 519.705180][ T5150] bcm5974 1-1:1.0: could not read from device [ 519.754494][ T5877] usb 3-1: USB disconnect, device number 18 [ 520.279866][ T7486] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 520.739769][ T7486] usb 2-1: Using ep0 maxpacket: 16 [ 520.975390][ T7486] usb 2-1: unable to get BOS descriptor or descriptor too short [ 520.978855][ T7486] usb 2-1: config 1 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 520.978894][ T7486] usb 2-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid maxpacket 1536, setting to 1024 [ 520.978919][ T7486] usb 2-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 520.978997][ T7486] usb 2-1: config 1 interface 0 has no altsetting 0 [ 520.987267][ T7486] usb 2-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 520.987355][ T7486] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.987422][ T7486] usb 2-1: Product: syz [ 520.987490][ T7486] usb 2-1: Manufacturer: syz [ 520.987552][ T7486] usb 2-1: SerialNumber: syz [ 521.214641][ T9500] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 521.483796][ T7486] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input41 [ 521.646974][ T7486] bcm5974 2-1:1.0: could not read from device [ 521.667996][ T9514] fuse: Bad value for 'user_id' [ 521.668010][ T9514] fuse: Bad value for 'user_id' [ 521.680383][ T5150] bcm5974 2-1:1.0: could not read from device [ 521.903521][ T7486] input: failed to attach handler mousedev to device input41, error: -5 [ 521.906325][ T5150] bcm5974 2-1:1.0: could not read from device [ 521.939838][ T7486] usb 2-1: USB disconnect, device number 19 [ 522.499800][ T5877] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 522.659739][ T5877] usb 3-1: Using ep0 maxpacket: 32 [ 522.689550][ T5877] usb 3-1: config 0 has an invalid interface number: 59 but max is 0 [ 522.689578][ T5877] usb 3-1: config 0 has no interface number 0 [ 522.689610][ T5877] usb 3-1: config 0 interface 59 has no altsetting 0 [ 522.696719][ T5877] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 522.696748][ T5877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.696766][ T5877] usb 3-1: Product: syz [ 522.696779][ T5877] usb 3-1: Manufacturer: syz [ 522.696862][ T5877] usb 3-1: SerialNumber: syz [ 523.052544][ T5877] usb 3-1: config 0 descriptor?? [ 523.055771][ T5877] smsc75xx v1.0.0 [ 523.055784][ T5877] smsc75xx 3-1:0.59 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 523.056261][ T5877] smsc75xx 3-1:0.59: probe with driver smsc75xx failed with error -22 [ 523.749801][ T5877] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 523.899751][ T5877] usb 1-1: Using ep0 maxpacket: 32 [ 523.902402][ T5877] usb 1-1: config 0 has an invalid interface number: 59 but max is 0 [ 523.902417][ T5877] usb 1-1: config 0 has no interface number 0 [ 523.902436][ T5877] usb 1-1: config 0 interface 59 has no altsetting 0 [ 523.905860][ T5877] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 523.905878][ T5877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.905888][ T5877] usb 1-1: Product: syz [ 523.905895][ T5877] usb 1-1: Manufacturer: syz [ 523.905902][ T5877] usb 1-1: SerialNumber: syz [ 524.019787][ T5877] usb 1-1: config 0 descriptor?? [ 524.023724][ T5877] smsc75xx v1.0.0 [ 524.023737][ T5877] smsc75xx 1-1:0.59 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 524.023894][ T5877] smsc75xx 1-1:0.59: probe with driver smsc75xx failed with error -22 [ 524.165268][ T9531] netlink: 'syz.4.911': attribute type 1 has an invalid length. [ 524.169827][ T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 524.294876][ T5887] usb 1-1: USB disconnect, device number 19 [ 524.341616][ T9] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 524.341651][ T9] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 524.341726][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 524.341739][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.346139][ T9529] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 524.359397][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 525.105875][ T5884] usb 4-1: USB disconnect, device number 17 [ 525.377021][ T9544] netlink: 'syz.4.913': attribute type 4 has an invalid length. [ 527.068025][ T7486] usb 3-1: USB disconnect, device number 19 [ 527.139822][ T5887] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 527.329976][ T5887] usb 5-1: Using ep0 maxpacket: 16 [ 527.336164][ T5887] usb 5-1: unable to get BOS descriptor or descriptor too short [ 527.341047][ T5887] usb 5-1: config 1 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 527.341079][ T5887] usb 5-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid maxpacket 1536, setting to 1024 [ 527.341105][ T5887] usb 5-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 527.341132][ T5887] usb 5-1: config 1 interface 0 has no altsetting 0 [ 527.361083][ T5887] usb 5-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 527.361113][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.361152][ T5887] usb 5-1: Product: syz [ 527.361166][ T5887] usb 5-1: Manufacturer: syz [ 527.361181][ T5887] usb 5-1: SerialNumber: syz [ 527.438922][ T9558] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 528.314395][ T5887] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input42 [ 528.469064][ T9565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.921'. [ 528.494884][ T5150] bcm5974 5-1:1.0: could not read from device [ 528.554897][ T5887] bcm5974 5-1:1.0: could not read from device [ 528.590424][ T5150] bcm5974 5-1:1.0: could not read from device [ 528.670156][ T5887] input: failed to attach handler mousedev to device input42, error: -5 [ 528.672312][ T5150] bcm5974 5-1:1.0: could not read from device [ 528.679473][ T5887] usb 5-1: USB disconnect, device number 15 [ 529.308969][ T9572] tipc: Enabled bearer , priority 0 [ 529.321843][ T9572] tipc: Resetting bearer [ 529.410828][ T9571] tipc: Disabling bearer [ 530.472865][ T9578] netlink: 8 bytes leftover after parsing attributes in process `syz.4.924'. [ 532.809169][ T9597] netlink: 8 bytes leftover after parsing attributes in process `syz.4.929'. [ 537.519784][ T5884] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 537.692141][ T5884] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 537.692176][ T5884] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 537.692216][ T5884] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 537.692237][ T5884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.699460][ T9625] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 537.765270][ T5884] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 537.987816][ T5877] usb 1-1: USB disconnect, device number 20 [ 538.048149][ T9632] netlink: 8 bytes leftover after parsing attributes in process `syz.1.937'. [ 538.234729][ T9637] udevd[9637]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 539.042614][ T9641] tipc: Started in network mode [ 539.042645][ T9641] tipc: Node identity 0eea9edec9f3, cluster identity 4711 [ 539.043438][ T9641] tipc: Enabled bearer , priority 0 [ 539.082542][ T9641] tipc: Resetting bearer [ 539.701240][ T9640] tipc: Disabling bearer [ 540.750169][ T9660] netlink: 8 bytes leftover after parsing attributes in process `syz.1.944'. [ 541.542791][ T9661] netlink: 8 bytes leftover after parsing attributes in process `syz.3.943'. [ 541.815464][ T9666] netlink: 8 bytes leftover after parsing attributes in process `syz.0.945'. [ 542.655220][ T9671] netlink: 8 bytes leftover after parsing attributes in process `syz.4.947'. [ 542.709187][ T9671] macvtap1: entered allmulticast mode [ 542.709201][ T9671] veth0_macvtap: entered allmulticast mode [ 543.421271][ T9681] fuse: Unknown parameter 'group_id00000000000000000000' [ 543.543906][ T9680] netlink: 'syz.4.951': attribute type 13 has an invalid length. [ 543.719917][ T9680] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 545.366049][ T5887] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 545.410939][ T5912] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 545.512775][ T5887] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 545.512887][ T5887] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 545.512918][ T5887] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 545.512930][ T5887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.559742][ T5912] usb 1-1: Using ep0 maxpacket: 16 [ 545.573769][ T5912] usb 1-1: unable to get BOS descriptor or descriptor too short [ 545.574649][ T9699] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 545.576967][ T5912] usb 1-1: config 1 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 545.576995][ T5912] usb 1-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid maxpacket 1536, setting to 1024 [ 545.577008][ T5912] usb 1-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 545.577022][ T5912] usb 1-1: config 1 interface 0 has no altsetting 0 [ 545.647705][ T5912] usb 1-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 545.647723][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.647733][ T5912] usb 1-1: Product: syz [ 545.647740][ T5912] usb 1-1: Manufacturer: syz [ 545.647747][ T5912] usb 1-1: SerialNumber: syz [ 545.696402][ T9702] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 545.795494][ T5887] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 545.920363][ C1] raw-gadget.1 gadget.0: ignoring, device is not running [ 545.920944][ C1] raw-gadget.1 gadget.0: ignoring, device is not running [ 545.921415][ C1] raw-gadget.1 gadget.0: ignoring, device is not running [ 545.922492][ C1] raw-gadget.1 gadget.0: ignoring, device is not running [ 546.163035][ T5912] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input45 [ 546.168109][ T5150] bcm5974 1-1:1.0: could not read from device [ 546.239247][ T5912] usb 1-1: USB disconnect, device number 21 [ 546.250097][ T5887] usb 2-1: USB disconnect, device number 20 [ 546.253320][ T5150] bcm5974 1-1:1.0: could not read from device [ 546.925357][ T9718] netlink: 'syz.4.960': attribute type 13 has an invalid length. [ 547.030468][ T9718] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 547.309709][ T5912] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 547.469781][ T5912] usb 2-1: Using ep0 maxpacket: 8 [ 547.472201][ T5912] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 547.472232][ T5912] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 547.472256][ T5912] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 547.472278][ T5912] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 547.472319][ T5912] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 547.472340][ T5912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.878817][ T5912] usb 2-1: GET_CAPABILITIES returned 0 [ 547.878865][ T5912] usbtmc 2-1:16.0: can't read capabilities [ 548.103583][ C1] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 548.103648][ T9729] usbtmc 2-1:16.0: Unable to send data, error -71 [ 548.129892][ T5912] usb 2-1: USB disconnect, device number 21 [ 548.849739][ T5877] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 549.063243][ T5877] usb 4-1: Using ep0 maxpacket: 8 [ 549.079192][ T5877] usb 4-1: config 1 has an invalid descriptor of length 178, skipping remainder of the config [ 549.079579][ T5877] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 57088, setting to 64 [ 549.080091][ T5877] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 549.259760][ T5877] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 549.259790][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.259808][ T5877] usb 4-1: Product: syz [ 549.259821][ T5877] usb 4-1: Manufacturer: syz [ 549.259834][ T5877] usb 4-1: SerialNumber: syz [ 549.299822][ T31] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 549.382784][ T5877] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 549.383622][ T5877] usbtest 4-1:1.0: couldn't get endpoints, -22 [ 549.383667][ T5877] usbtest 4-1:1.0: probe with driver usbtest failed with error -22 [ 549.471867][ T31] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 549.471901][ T31] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 549.471939][ T31] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 549.471960][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.534173][ T9744] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 549.551751][ T31] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 549.803603][ T31] usb 4-1: USB disconnect, device number 18 [ 550.212783][ T31] usb 2-1: USB disconnect, device number 22 [ 550.252205][ T9748] netlink: 'syz.4.971': attribute type 1 has an invalid length. [ 554.067192][ T9783] netlink: 8 bytes leftover after parsing attributes in process `syz.0.979'. [ 554.999771][ T31] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 555.149802][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 555.151779][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 555.153590][ T31] usb 1-1: config 1 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 555.153620][ T31] usb 1-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid maxpacket 1536, setting to 1024 [ 555.153647][ T31] usb 1-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 555.153673][ T31] usb 1-1: config 1 interface 0 has no altsetting 0 [ 555.157091][ T31] usb 1-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 555.157107][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.157119][ T31] usb 1-1: Product: syz [ 555.157126][ T31] usb 1-1: Manufacturer: syz [ 555.157133][ T31] usb 1-1: SerialNumber: syz [ 555.262132][ T9793] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 555.522652][ T31] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input47 [ 555.529562][ T5150] bcm5974 1-1:1.0: could not read from device [ 555.596299][ T31] usb 1-1: USB disconnect, device number 22 [ 559.980555][ T9843] tipc: Enabled bearer , priority 0 [ 560.094837][ T9842] tipc: Disabling bearer [ 560.751046][ T9858] netlink: 8 bytes leftover after parsing attributes in process `syz.1.999'. [ 560.839777][ T5887] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 561.045947][ T5887] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 561.045981][ T5887] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 561.046020][ T5887] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 561.046041][ T5887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.095813][ T9853] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 561.119413][ T5887] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 561.185398][ T9862] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1001'. [ 561.384765][ T5887] usb 1-1: USB disconnect, device number 23 [ 561.764129][ T5877] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 561.925297][ T5877] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 561.925332][ T5877] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 561.925372][ T5877] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 561.925393][ T5877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.984092][ T9864] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 561.987900][ T5877] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 562.428656][ T7486] usb 3-1: USB disconnect, device number 20 [ 562.989865][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.989909][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.330169][ T9881] fuse: Unknown parameter 'use00000000000000000000' [ 563.516193][ T9885] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1006'. [ 564.596167][ T9899] tipc: Started in network mode [ 564.596185][ T9899] tipc: Node identity 8e0117b1c2d2, cluster identity 4711 [ 564.596327][ T9899] tipc: Enabled bearer , priority 0 [ 564.651452][ T9897] tipc: Disabling bearer [ 565.009747][ T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 565.209792][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 565.213713][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 565.215206][ T9] usb 5-1: config 1 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 565.215225][ T9] usb 5-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid maxpacket 1536, setting to 1024 [ 565.215239][ T9] usb 5-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 565.215253][ T9] usb 5-1: config 1 interface 0 has no altsetting 0 [ 565.217741][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 565.217757][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.217767][ T9] usb 5-1: Product: syz [ 565.217774][ T9] usb 5-1: Manufacturer: syz [ 565.217781][ T9] usb 5-1: SerialNumber: syz [ 565.254363][ T9903] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 565.599844][ T9] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input48 [ 565.609782][ T5150] bcm5974 5-1:1.0: could not read from device [ 565.720915][ T9] usb 5-1: USB disconnect, device number 16 [ 567.470854][ T9929] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1017'. [ 567.649830][ T7486] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 567.996004][ T7486] usb 4-1: Using ep0 maxpacket: 8 [ 568.744477][ T9934] netlink: 'syz.1.1020': attribute type 4 has an invalid length. [ 568.832556][ T7486] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 568.832577][ T7486] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 568.832590][ T7486] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 568.832603][ T7486] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 568.832628][ T7486] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 568.832649][ T7486] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.280945][ T7486] usb 4-1: GET_CAPABILITIES returned 0 [ 569.280994][ T7486] usbtmc 4-1:16.0: can't read capabilities [ 570.680102][ T9946] tipc: Enabled bearer , priority 0 [ 570.763894][ T9945] tipc: Disabling bearer [ 571.578377][ T9] usb 4-1: USB disconnect, device number 19 [ 571.858698][ T9954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1026'. [ 573.098112][ T5887] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 573.363204][ T5887] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 573.363273][ T5887] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 573.363317][ T5887] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 573.363388][ T5887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.429776][ T9965] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 573.512663][ T5887] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 573.753236][ T5887] usb 2-1: USB disconnect, device number 23 [ 573.978908][ T9628] udevd[9628]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 575.179757][ T5884] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 575.499683][ T5884] usb 4-1: Using ep0 maxpacket: 8 [ 575.620401][ T5884] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 575.620436][ T5884] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 575.620460][ T5884] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 575.620482][ T5884] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 575.620525][ T5884] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 575.620547][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.420120][ T5884] usb 4-1: GET_CAPABILITIES returned 0 [ 576.420155][ T5884] usbtmc 4-1:16.0: can't read capabilities [ 576.940241][ T9977] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1032'. [ 578.711805][T10004] netlink: 'syz.2.1037': attribute type 13 has an invalid length. [ 578.831906][T10004] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 579.221979][ T31] usb 4-1: USB disconnect, device number 20 [ 579.624955][T10015] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1039'. [ 582.583517][T10048] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 584.362753][T10062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1047'. [ 591.081009][ C0] vkms_vblank_simulate: vblank timer overrun [ 591.225380][ C0] vkms_vblank_simulate: vblank timer overrun [ 592.033399][ T5887] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 592.218643][ T5887] usb 1-1: Using ep0 maxpacket: 8 [ 592.228324][ T5887] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 592.228357][ T5887] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 592.228381][ T5887] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 592.228404][ T5887] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 592.228445][ T5887] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 592.228467][ T5887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.489720][ T5887] usb 1-1: GET_CAPABILITIES returned 0 [ 592.489770][ T5887] usbtmc 1-1:16.0: can't read capabilities [ 592.989984][ T7486] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 593.260715][ T7486] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 593.260771][ T7486] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 593.260787][ T7486] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 593.260798][ T7486] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 593.263782][ T7486] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 593.263799][ T7486] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 593.263809][ T7486] usb 3-1: Manufacturer: syz [ 593.337126][ T7486] usb 3-1: config 0 descriptor?? [ 593.739794][ T7486] rc_core: IR keymap rc-hauppauge not found [ 593.739815][ T7486] Registered IR keymap rc-empty [ 593.743348][ T7486] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 593.760101][ T7486] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 593.783052][ T7486] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 593.787481][ T7486] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input49 [ 593.821475][ T7486] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 593.850062][ T7486] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 593.879827][ T7486] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 593.899846][ T7486] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 593.923192][ T7486] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 593.939844][ T7486] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 593.959857][ T7486] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 593.979808][ T7486] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 594.000092][ T7486] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 594.019844][ T7486] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 594.046314][ T7486] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 594.046375][ T7486] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 594.084844][ T9] usb 3-1: USB disconnect, device number 21 [ 595.110380][T10153] pim6reg: entered allmulticast mode [ 595.118783][T10153] netlink: 'syz.2.1066': attribute type 10 has an invalid length. [ 595.294139][T10153] team0: Port device netdevsim0 added [ 596.306230][ T7486] usb 1-1: USB disconnect, device number 24 [ 596.590130][T10158] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1067'. [ 596.833349][T10160] macvlan2: entered promiscuous mode [ 596.833375][T10160] macvlan2: entered allmulticast mode [ 596.938796][T10160] bond2: entered promiscuous mode [ 596.954569][T10160] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 597.066378][T10160] bond2: left promiscuous mode [ 597.869730][ T10] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 598.059815][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 598.061383][ T10] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 598.061401][ T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 598.061414][ T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 598.061426][ T10] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 598.061449][ T10] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 598.061464][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.422607][ T10] usb 1-1: GET_CAPABILITIES returned 0 [ 598.422636][ T10] usbtmc 1-1:16.0: can't read capabilities [ 601.103862][ T31] usb 1-1: USB disconnect, device number 25 [ 606.027390][T10222] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1080'. [ 607.916384][T10249] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1089'. [ 608.597585][T10257] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1091'. [ 609.634670][ C1] vkms_vblank_simulate: vblank timer overrun [ 610.937561][T10269] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1094'. [ 611.573849][T10278] netlink: 'syz.4.1099': attribute type 12 has an invalid length. [ 611.573865][T10278] netlink: 'syz.4.1099': attribute type 29 has an invalid length. [ 611.573873][T10278] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1099'. [ 611.639983][T10279] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1098'. [ 611.977365][T10284] netlink: 'syz.4.1100': attribute type 10 has an invalid length. [ 612.091228][ T5887] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 612.226327][T10284] team0: Port device netdevsim0 added [ 612.288136][ T5887] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 612.288163][ T5887] usb 4-1: config 0 has no interfaces? [ 612.343070][ T5887] usb 4-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 612.343088][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.343098][ T5887] usb 4-1: Product: syz [ 612.343105][ T5887] usb 4-1: Manufacturer: syz [ 612.343112][ T5887] usb 4-1: SerialNumber: syz [ 612.347997][ T5887] usb 4-1: config 0 descriptor?? [ 612.615035][T10279] netdevsim netdevsim3: Firmware load for '../file0/file0' refused, path contains '..' component [ 612.625207][ T9] usb 4-1: USB disconnect, device number 21 [ 613.344992][T10295] pim6reg: entered allmulticast mode [ 613.419952][T10295] netlink: 'syz.1.1102': attribute type 10 has an invalid length. [ 613.629218][T10295] team0: Port device netdevsim0 added [ 613.918166][T10313] debugfs: '!' already exists in 'ieee80211' [ 613.993508][ T37] audit: type=1326 audit(1760589839.083:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10309 comm="syz.2.1107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b27f8eec9 code=0x7ffc0000 [ 613.993568][ T37] audit: type=1326 audit(1760589839.093:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10309 comm="syz.2.1107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b27f8eec9 code=0x7ffc0000 [ 613.993594][ T37] audit: type=1326 audit(1760589839.093:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10309 comm="syz.2.1107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f3b27f8eec9 code=0x7ffc0000 [ 613.993618][ T37] audit: type=1326 audit(1760589839.093:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10309 comm="syz.2.1107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b27f8eec9 code=0x7ffc0000 [ 613.993640][ T37] audit: type=1326 audit(1760589839.093:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10309 comm="syz.2.1107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3b27f8eec9 code=0x7ffc0000 [ 613.993664][ T37] audit: type=1326 audit(1760589839.093:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10309 comm="syz.2.1107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b27f8eec9 code=0x7ffc0000 [ 613.993688][ T37] audit: type=1326 audit(1760589839.103:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10309 comm="syz.2.1107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3b27f8eec9 code=0x7ffc0000 [ 613.993710][ T37] audit: type=1326 audit(1760589839.103:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10309 comm="syz.2.1107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b27f8eec9 code=0x7ffc0000 [ 613.993733][ T37] audit: type=1326 audit(1760589839.103:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10309 comm="syz.2.1107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b27f8eec9 code=0x7ffc0000 [ 613.993756][ T37] audit: type=1326 audit(1760589839.103:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10309 comm="syz.2.1107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3b27f8eec9 code=0x7ffc0000 [ 617.078558][ C1] vkms_vblank_simulate: vblank timer overrun [ 617.238095][T10328] fuse: Bad value for 'fd' [ 619.376136][T10354] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 619.796030][ T37] kauditd_printk_skb: 2 callbacks suppressed [ 619.796048][ T37] audit: type=1326 audit(1760589844.983:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10361 comm="syz.1.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4a4fdeec9 code=0x7ffc0000 [ 619.798206][ T37] audit: type=1326 audit(1760589844.983:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10361 comm="syz.1.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4a4fdeec9 code=0x7ffc0000 [ 619.799763][ T37] audit: type=1326 audit(1760589844.983:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10361 comm="syz.1.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fb4a4fdeec9 code=0x7ffc0000 [ 619.799809][ T37] audit: type=1326 audit(1760589844.983:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10361 comm="syz.1.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4a4fdeec9 code=0x7ffc0000 [ 619.799850][ T37] audit: type=1326 audit(1760589844.983:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10361 comm="syz.1.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb4a4fdeec9 code=0x7ffc0000 [ 619.799901][ T37] audit: type=1326 audit(1760589844.983:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10361 comm="syz.1.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4a4fdeec9 code=0x7ffc0000 [ 619.799949][ T37] audit: type=1326 audit(1760589844.983:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10361 comm="syz.1.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb4a4fdeec9 code=0x7ffc0000 [ 619.799991][ T37] audit: type=1326 audit(1760589844.983:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10361 comm="syz.1.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4a4fdeec9 code=0x7ffc0000 [ 619.800034][ T37] audit: type=1326 audit(1760589844.983:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10361 comm="syz.1.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb4a4fdeec9 code=0x7ffc0000 [ 621.067749][T10370] netlink: 'syz.3.1122': attribute type 12 has an invalid length. [ 621.067770][T10370] netlink: 'syz.3.1122': attribute type 29 has an invalid length. [ 621.067781][T10370] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1122'. [ 621.075814][T10364] debugfs: '!' already exists in 'ieee80211' [ 624.409476][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.409520][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.402438][T10404] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1130'. [ 625.687343][T10411] fuse: Unknown parameter '0x0000000000000004' [ 627.659775][ T7486] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 627.909095][ T7486] usb 3-1: Using ep0 maxpacket: 8 [ 627.970961][ T7486] usb 3-1: config 1 has an invalid descriptor of length 234, skipping remainder of the config [ 627.970997][ T7486] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 54528, setting to 64 [ 627.971012][ T7486] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 627.972958][ T7486] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 627.972975][ T7486] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.972986][ T7486] usb 3-1: Product: syz [ 627.972993][ T7486] usb 3-1: Manufacturer: syz [ 627.973000][ T7486] usb 3-1: SerialNumber: syz [ 627.978791][ T7486] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 627.983527][ T7486] usbtest 3-1:1.0: couldn't get endpoints, -22 [ 627.983617][ T7486] usbtest 3-1:1.0: probe with driver usbtest failed with error -22 [ 628.412459][ T7486] usb 3-1: USB disconnect, device number 22 [ 630.959740][ T9] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 631.119738][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 631.128906][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 631.131812][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 631.131837][ T9] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 631.138850][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 631.138878][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.138895][ T9] usb 2-1: Product: syz [ 631.138909][ T9] usb 2-1: Manufacturer: syz [ 631.138922][ T9] usb 2-1: SerialNumber: syz [ 632.785986][T10471] fuse: Unknown parameter 'fd0x0000000000000004' [ 633.382097][T10476] gretap1: entered promiscuous mode [ 633.640075][ T31] usb 2-1: USB disconnect, device number 24 [ 633.703765][T10478] netlink: 'syz.3.1147': attribute type 12 has an invalid length. [ 633.706421][T10478] netlink: 'syz.3.1147': attribute type 29 has an invalid length. [ 633.706439][T10478] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1147'. [ 636.219778][ T31] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 636.370052][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 636.377265][ T31] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 636.378246][ T31] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 636.378274][ T31] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 636.379483][ T31] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 636.379530][ T31] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 636.379551][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.595706][T10502] netlink: 'syz.3.1152': attribute type 12 has an invalid length. [ 638.595732][T10502] netlink: 'syz.3.1152': attribute type 29 has an invalid length. [ 638.595740][T10502] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1152'. [ 641.569213][ T31] usb 1-1: usb_control_msg returned -110 [ 641.569244][ T31] usbtmc 1-1:16.0: can't read capabilities [ 641.676198][ T31] usb 1-1: USB disconnect, device number 26 [ 642.288101][T10519] fuse: Unknown parameter 'fd0x0000000000000004' [ 643.519730][T10497] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 643.686568][T10497] usb 5-1: Using ep0 maxpacket: 8 [ 643.701714][T10497] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 643.702790][T10497] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 643.702819][T10497] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 643.702841][T10497] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 643.703951][T10497] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 643.703983][T10497] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.044292][T10497] usb 5-1: usb_control_msg returned -32 [ 644.044332][T10497] usbtmc 5-1:16.0: can't read capabilities [ 644.763761][T10554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1165'. [ 644.820476][T10553] netlink: 'syz.1.1164': attribute type 13 has an invalid length. [ 644.909031][T10561] netlink: 'syz.3.1166': attribute type 39 has an invalid length. [ 645.369975][T10553] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 646.644340][T10578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1170'. [ 648.311525][T10585] netlink: 'syz.1.1172': attribute type 10 has an invalid length. [ 648.600624][T10497] usb 5-1: USB disconnect, device number 17 [ 649.030304][T10588] netlink: 'syz.3.1173': attribute type 12 has an invalid length. [ 649.030324][T10588] netlink: 'syz.3.1173': attribute type 29 has an invalid length. [ 649.030335][T10588] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1173'. [ 650.926737][T10611] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 656.709474][T10658] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1190'. [ 656.709503][T10658] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1190'. [ 661.895005][T10693] debugfs: '!' already exists in 'ieee80211' [ 662.029890][ T37] audit: type=1326 audit(1760589887.063:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10687 comm="syz.4.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ce9f8eec9 code=0x7ffc0000 [ 662.029947][ T37] audit: type=1326 audit(1760589887.083:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10687 comm="syz.4.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ce9f8eec9 code=0x7ffc0000 [ 662.029985][ T37] audit: type=1326 audit(1760589887.083:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10687 comm="syz.4.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f6ce9f8eec9 code=0x7ffc0000 [ 662.030026][ T37] audit: type=1326 audit(1760589887.083:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10687 comm="syz.4.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ce9f8eec9 code=0x7ffc0000 [ 662.030065][ T37] audit: type=1326 audit(1760589887.083:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10687 comm="syz.4.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ce9f8eec9 code=0x7ffc0000 [ 662.030107][ T37] audit: type=1326 audit(1760589887.083:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10687 comm="syz.4.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6ce9f8eec9 code=0x7ffc0000 [ 662.030150][ T37] audit: type=1326 audit(1760589887.083:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10687 comm="syz.4.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ce9f8eec9 code=0x7ffc0000 [ 662.030192][ T37] audit: type=1326 audit(1760589887.083:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10687 comm="syz.4.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ce9f8eec9 code=0x7ffc0000 [ 662.030234][ T37] audit: type=1326 audit(1760589887.083:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10687 comm="syz.4.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6ce9f8eec9 code=0x7ffc0000 [ 662.030273][ T37] audit: type=1326 audit(1760589887.083:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10687 comm="syz.4.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ce9f8eec9 code=0x7ffc0000 [ 665.154063][T10713] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1202'. [ 665.154089][T10713] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1202'. [ 667.679465][ T37] kauditd_printk_skb: 14 callbacks suppressed [ 667.685775][ T37] audit: type=1326 audit(1760589892.863:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10734 comm="syz.2.1208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b27f8eec9 code=0x7ffc0000 [ 667.685840][ T37] audit: type=1326 audit(1760589892.863:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10734 comm="syz.2.1208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b27f8eec9 code=0x7ffc0000 [ 667.685877][ T37] audit: type=1326 audit(1760589892.863:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10734 comm="syz.2.1208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f3b27f8eec9 code=0x7ffc0000 [ 667.694449][T10738] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 667.694493][T10738] CPU: 0 UID: 0 PID: 10738 Comm: syz.2.1208 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 667.694519][T10738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 667.694539][T10738] Call Trace: [ 667.694550][T10738] [ 667.694559][T10738] dump_stack_lvl+0x189/0x250 [ 667.694600][T10738] ? __pfx_dump_stack_lvl+0x10/0x10 [ 667.694624][T10738] ? __pfx__printk+0x10/0x10 [ 667.694649][T10738] ? kernfs_path_from_node+0x2c/0x280 [ 667.694679][T10738] ? kernfs_path_from_node+0x2c/0x280 [ 667.694704][T10738] ? kernfs_path_from_node+0x243/0x280 [ 667.694728][T10738] ? kernfs_path_from_node+0x2c/0x280 [ 667.694758][T10738] sysfs_warn_dup+0x8e/0xa0 [ 667.694782][T10738] sysfs_do_create_link_sd+0xc0/0x110 [ 667.694810][T10738] device_add_class_symlinks+0x1d2/0x240 [ 667.694842][T10738] device_add+0x475/0xb50 [ 667.694871][T10738] wiphy_register+0x1c81/0x2aa0 [ 667.694917][T10738] ? __pfx_wiphy_register+0x10/0x10 [ 667.694944][T10738] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 667.694973][T10738] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 667.694995][T10738] ieee80211_register_hw+0x3473/0x40d0 [ 667.695027][T10738] ? ieee80211_register_hw+0x1471/0x40d0 [ 667.695053][T10738] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 667.695069][T10738] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 667.695096][T10738] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 667.695118][T10738] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 667.695148][T10738] ? __hrtimer_setup+0x18a/0x200 [ 667.695164][T10738] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 667.695197][T10738] mac80211_hwsim_new_radio+0x2efe/0x5160 [ 667.695225][T10738] ? mac80211_hwsim_new_radio+0x10f/0x5160 [ 667.695257][T10738] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 667.695273][T10738] ? trace_kmalloc+0x1f/0xd0 [ 667.695287][T10738] ? __kmalloc_node_track_caller_noprof+0x3b1/0x7e0 [ 667.695305][T10738] ? kstrndup+0xbf/0x160 [ 667.695335][T10738] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 667.695373][T10738] ? __pfx___nla_validate_parse+0x10/0x10 [ 667.695408][T10738] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 667.695431][T10738] ? rcu_is_watching+0x15/0xb0 [ 667.695456][T10738] ? __nla_parse+0x40/0x60 [ 667.695481][T10738] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 667.695507][T10738] genl_family_rcv_msg_doit+0x215/0x300 [ 667.695530][T10738] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 667.695559][T10738] ? bpf_lsm_capable+0x9/0x20 [ 667.695579][T10738] ? security_capable+0x7e/0x2e0 [ 667.695605][T10738] genl_rcv_msg+0x60e/0x790 [ 667.695628][T10738] ? __pfx_genl_rcv_msg+0x10/0x10 [ 667.695644][T10738] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 667.695663][T10738] ? __lock_acquire+0xab9/0xd20 [ 667.695686][T10738] netlink_rcv_skb+0x208/0x470 [ 667.695708][T10738] ? __pfx_genl_rcv_msg+0x10/0x10 [ 667.695726][T10738] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 667.695744][T10738] ? rcu_read_unlock_special+0x35b/0x470 [ 667.695773][T10738] ? netlink_deliver_tap+0x2e/0x1b0 [ 667.695799][T10738] genl_rcv+0x28/0x40 [ 667.695814][T10738] netlink_unicast+0x846/0xa10 [ 667.695841][T10738] ? __pfx_netlink_unicast+0x10/0x10 [ 667.695862][T10738] ? netlink_sendmsg+0x642/0xb30 [ 667.695880][T10738] ? skb_put+0x11b/0x210 [ 667.695905][T10738] netlink_sendmsg+0x805/0xb30 [ 667.695934][T10738] ? __pfx_netlink_sendmsg+0x10/0x10 [ 667.695962][T10738] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 667.695978][T10738] ? __pfx_netlink_sendmsg+0x10/0x10 [ 667.696000][T10738] __sock_sendmsg+0x21c/0x270 [ 667.696021][T10738] ____sys_sendmsg+0x508/0x820 [ 667.696042][T10738] ? __pfx_____sys_sendmsg+0x10/0x10 [ 667.696066][T10738] ? import_iovec+0x74/0xa0 [ 667.696086][T10738] ___sys_sendmsg+0x21f/0x2a0 [ 667.696103][T10738] ? __pfx____sys_sendmsg+0x10/0x10 [ 667.696152][T10738] ? __fget_files+0x2a/0x420 [ 667.696168][T10738] ? __fget_files+0x3a6/0x420 [ 667.696200][T10738] __x64_sys_sendmsg+0x1a1/0x260 [ 667.696220][T10738] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 667.696247][T10738] ? __secure_computing+0xe2/0x2a0 [ 667.696275][T10738] do_syscall_64+0xfa/0xfa0 [ 667.696298][T10738] ? lockdep_hardirqs_on+0x9c/0x150 [ 667.696319][T10738] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.696335][T10738] ? clear_bhb_loop+0x60/0xb0 [ 667.696353][T10738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.696368][T10738] RIP: 0033:0x7f3b27f8eec9 [ 667.696390][T10738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 667.696405][T10738] RSP: 002b:00007f3b261ac038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 667.696431][T10738] RAX: ffffffffffffffda RBX: 00007f3b281e6180 RCX: 00007f3b27f8eec9 [ 667.696444][T10738] RDX: 0000000000000310 RSI: 0000200000000040 RDI: 0000000000000007 [ 667.696455][T10738] RBP: 00007f3b28011f91 R08: 0000000000000000 R09: 0000000000000000 [ 667.696465][T10738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 667.696476][T10738] R13: 00007f3b281e6218 R14: 00007f3b281e6180 R15: 00007ffe4d1eec38 [ 667.696506][T10738] [ 667.863601][ T37] audit: type=1326 audit(1760589892.863:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10734 comm="syz.2.1208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b27f8eec9 code=0x7ffc0000 [ 667.863657][ T37] audit: type=1326 audit(1760589892.863:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10734 comm="syz.2.1208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b27f8eec9 code=0x7ffc0000 [ 667.863697][ T37] audit: type=1326 audit(1760589892.863:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10734 comm="syz.2.1208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3b27f8eec9 code=0x7ffc0000 [ 667.863738][ T37] audit: type=1326 audit(1760589892.863:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10734 comm="syz.2.1208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b27f8eec9 code=0x7ffc0000 [ 667.863782][ T37] audit: type=1326 audit(1760589892.863:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10734 comm="syz.2.1208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3b27f8eec9 code=0x7ffc0000 [ 667.863830][ T37] audit: type=1326 audit(1760589892.863:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10734 comm="syz.2.1208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b27f8eec9 code=0x7ffc0000 [ 667.863872][ T37] audit: type=1326 audit(1760589892.873:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10734 comm="syz.2.1208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3b27f8eec9 code=0x7ffc0000 [ 670.109799][ T7486] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 670.270010][ T7486] usb 2-1: Using ep0 maxpacket: 8 [ 670.270592][ T7486] usb 2-1: no configurations [ 670.270601][ T7486] usb 2-1: can't read configurations, error -22 [ 670.399715][ T7486] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 670.549931][ T7486] usb 2-1: Using ep0 maxpacket: 8 [ 670.550882][ T7486] usb 2-1: no configurations [ 670.550892][ T7486] usb 2-1: can't read configurations, error -22 [ 670.555724][ T7486] usb usb2-port1: attempt power cycle [ 670.696609][T10760] syzkaller0: entered promiscuous mode [ 670.696636][T10760] syzkaller0: entered allmulticast mode [ 670.812405][ C0] vkms_vblank_simulate: vblank timer overrun [ 670.959732][ T7486] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 670.980495][ T7486] usb 2-1: Using ep0 maxpacket: 8 [ 670.983027][ T7486] usb 2-1: no configurations [ 670.983038][ T7486] usb 2-1: can't read configurations, error -22 [ 671.085170][T10763] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1214'. [ 671.085195][T10763] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1214'. [ 671.109851][ T7486] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 671.130446][ T7486] usb 2-1: Using ep0 maxpacket: 8 [ 671.131261][ T7486] usb 2-1: no configurations [ 671.131274][ T7486] usb 2-1: can't read configurations, error -22 [ 671.139892][ T7486] usb usb2-port1: unable to enumerate USB device [ 676.287713][T10810] tipc: Started in network mode [ 676.287733][T10810] tipc: Node identity da45587a2df1, cluster identity 4711 [ 676.287858][T10810] tipc: Enabled bearer , priority 0 [ 676.288963][T10810] syzkaller0: entered promiscuous mode [ 676.288978][T10810] syzkaller0: entered allmulticast mode [ 676.671402][T10818] tipc: Resetting bearer [ 676.689882][T10809] tipc: Resetting bearer [ 677.078481][T10809] tipc: Disabling bearer [ 685.835999][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.836047][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.655275][T10904] input: syz1 as /devices/virtual/input/input54 [ 690.433829][T10932] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 691.129985][T10946] tipc: Enabled bearer , priority 0 [ 691.146648][T10942] tipc: Resetting bearer [ 692.265785][T10497] tipc: Node number set to 4155791482 [ 692.569952][T10947] syzkaller0: entered promiscuous mode [ 692.569982][T10947] syzkaller0: entered allmulticast mode [ 692.760002][T10941] tipc: Resetting bearer [ 693.117112][T10941] tipc: Disabling bearer [ 695.139737][ T31] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 695.289776][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 695.293142][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 695.293169][ T31] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 695.296688][ T31] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 695.296717][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.296736][ T31] usb 4-1: Product: syz [ 695.296750][ T31] usb 4-1: Manufacturer: syz [ 695.296763][ T31] usb 4-1: SerialNumber: syz [ 695.669148][T10497] usb 4-1: USB disconnect, device number 22 [ 696.594219][T10995] debugfs: '!' already exists in 'ieee80211' [ 696.678150][ T37] kauditd_printk_skb: 12 callbacks suppressed [ 696.678162][ T37] audit: type=1326 audit(1760589921.763:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10992 comm="syz.3.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa17e84eec9 code=0x7ffc0000 [ 696.678192][ T37] audit: type=1326 audit(1760589921.763:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10992 comm="syz.3.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa17e84eec9 code=0x7ffc0000 [ 696.678216][ T37] audit: type=1326 audit(1760589921.763:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10992 comm="syz.3.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fa17e84eec9 code=0x7ffc0000 [ 696.678241][ T37] audit: type=1326 audit(1760589921.763:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10992 comm="syz.3.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa17e84eec9 code=0x7ffc0000 [ 696.678265][ T37] audit: type=1326 audit(1760589921.763:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10992 comm="syz.3.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa17e84eec9 code=0x7ffc0000 [ 696.678289][ T37] audit: type=1326 audit(1760589921.763:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10992 comm="syz.3.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa17e84eec9 code=0x7ffc0000 [ 696.678313][ T37] audit: type=1326 audit(1760589921.763:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10992 comm="syz.3.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa17e84eec9 code=0x7ffc0000 [ 696.678338][ T37] audit: type=1326 audit(1760589921.763:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10992 comm="syz.3.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa17e84eec9 code=0x7ffc0000 [ 696.678362][ T37] audit: type=1326 audit(1760589921.763:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10992 comm="syz.3.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa17e84eec9 code=0x7ffc0000 [ 696.678385][ T37] audit: type=1326 audit(1760589921.763:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10992 comm="syz.3.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa17e84eec9 code=0x7ffc0000 [ 697.156300][T11000] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1272'. [ 697.350733][ T1362] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.620006][ T5790] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 697.749843][ T7486] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 697.862218][ T5790] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 697.862245][ T5790] usb 1-1: config 0 has no interfaces? [ 697.870505][ T5790] usb 1-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 697.870523][ T5790] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.870534][ T5790] usb 1-1: Product: syz [ 697.870542][ T5790] usb 1-1: Manufacturer: syz [ 697.870550][ T5790] usb 1-1: SerialNumber: syz [ 697.874703][ T5790] usb 1-1: config 0 descriptor?? [ 697.901220][ T7486] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 697.901255][ T7486] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 697.901270][ T7486] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 697.901281][ T7486] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 697.902163][ T7486] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 697.902178][ T7486] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 697.902187][ T7486] usb 5-1: Manufacturer: syz [ 697.923612][ T7486] usb 5-1: config 0 descriptor?? [ 698.260228][ T7486] rc_core: IR keymap rc-hauppauge not found [ 698.260251][ T7486] Registered IR keymap rc-empty [ 698.260461][ T7486] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 698.288052][ T7486] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 698.300742][ T7486] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 698.302874][ T7486] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input56 [ 698.337620][ T7486] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 698.353134][ T7486] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 698.372896][ T7486] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 698.391352][ T7486] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 698.409774][ T7486] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 698.429769][ T7486] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 698.449841][ T7486] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 698.455773][T11011] netdevsim netdevsim0: Firmware load for '../file0/file0' refused, path contains '..' component [ 698.477692][ T7486] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 698.489805][ T7486] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 698.509796][ T7486] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 698.537325][ T7486] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 698.537350][ T7486] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 698.633305][ T5877] usb 5-1: USB disconnect, device number 18 [ 699.023668][ C1] vkms_vblank_simulate: vblank timer overrun [ 699.137615][ C1] vkms_vblank_simulate: vblank timer overrun [ 699.286654][ C1] vkms_vblank_simulate: vblank timer overrun [ 699.525294][ C1] vkms_vblank_simulate: vblank timer overrun [ 699.694743][T11016] tty tty1: ldisc open fail[ 699.694743][T11016] tty tty1: ldisc open failed (-12), clearing slot 0 [ 699.694800][ T13] Oops: general protection fault, probably for non-canonical address 0xdffffc000000044c: 0000 [#1] SMP KASAN PTI [ 699.694819][ T13] KASAN: probably user-memory-access in range [0x0000000000002260-0x0000000000002267] [ 699.694837][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 699.694856][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 699.694868][ T13] Workqueue: events_unbound flush_to_ldisc [ 699.694894][ T13] RIP: 0010:n_tty_receive_buf_common+0x166/0x12f0 [ 699.694918][ T13] Code: e9 03 48 89 8c 24 a0 00 00 00 48 81 c3 e8 03 00 00 31 ed 4c 89 7c 24 38 48 89 5c 24 70 48 89 6c 24 28 48 8b 84 24 08 01 00 00 <42> 80 3c 28 00 74 0d 48 8b bc 24 f8 00 00 00 e8 46 73 20 fd 4c 89 [ 699.694933][ T13] RSP: 0018:ffffc90000127850 EFLAGS: 00010246 [ 699.694949][ T13] RAX: 000000000000044c RBX: ffff888040b4e3e8 RCX: 000000000000000b [ 699.694962][ T13] RDX: 1ffff11008169c6a RSI: 000000000000000b RDI: ffff888040b4e5c8 [ 699.694975][ T13] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 699.694987][ T13] R10: dffffc0000000000 R11: fffff52000024ef8 R12: ffff888031f1bde0 [ 699.695001][ T13] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888040b4e6a0 [ 699.695015][ T13] FS: 0000000000000000(0000) GS:ffff888126bc9000(0000) knlGS:0000000000000000 [ 699.695029][ T13] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 699.695041][ T13] CR2: 000020000028e030 CR3: 0000000036dd2000 CR4: 00000000003526f0 [ 699.695059][ T13] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 699.695072][ T13] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 699.695085][ T13] Call Trace: [ 699.695091][ T13] [ 699.695104][ T13] ? tty_ldisc_ref+0x1c/0x90 [ 699.695128][ T13] ? tty_ldisc_receive_buf+0x89/0x160 [ 699.695152][ T13] tty_port_default_receive_buf+0x6e/0xa0 [ 699.695176][ T13] flush_to_ldisc+0x24a/0x6e0 [ 699.695199][ T13] ? process_scheduled_works+0x9ef/0x17b0 [ 699.695225][ T13] process_scheduled_works+0xae1/0x17b0 [ 699.695262][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 699.695293][ T13] worker_thread+0x8a0/0xda0 [ 699.695321][ T13] kthread+0x711/0x8a0 [ 699.695341][ T13] ? __pfx_worker_thread+0x10/0x10 [ 699.695357][ T13] ? __pfx_kthread+0x10/0x10 [ 699.695375][ T13] ? rt_spin_unlock+0x150/0x200 [ 699.695398][ T13] ? rt_spin_unlock+0x161/0x200 [ 699.695418][ T13] ? __pfx_kthread+0x10/0x10 [ 699.695438][ T13] ret_from_fork+0x4bc/0x870 [ 699.695463][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 699.695490][ T13] ? __switch_to_asm+0x39/0x70 [ 699.695512][ T13] ? __switch_to_asm+0x33/0x70 [ 699.695541][ T13] ? __pfx_kthread+0x10/0x10 [ 699.695560][ T13] ret_from_fork_asm+0x1a/0x30 [ 699.695589][ T13] [ 699.695600][ T13] Modules linked in: [ 699.695636][ T13] ---[ end trace 0000000000000000 ]--- [ 699.698660][ T13] RIP: 0010:n_tty_receive_buf_common+0x166/0x12f0 [ 699.698701][ T13] Code: e9 03 48 89 8c 24 a0 00 00 00 48 81 c3 e8 03 00 00 31 ed 4c 89 7c 24 38 48 89 5c 24 70 48 89 6c 24 28 48 8b 84 24 08 01 00 00 <42> 80 3c 28 00 74 0d 48 8b bc 24 f8 00 00 00 e8 46 73 20 fd 4c 89 [ 699.698717][ T13] RSP: 0018:ffffc90000127850 EFLAGS: 00010246 [ 699.698735][ T13] RAX: 000000000000044c RBX: ffff888040b4e3e8 RCX: 000000000000000b [ 699.698748][ T13] RDX: 1ffff11008169c6a RSI: 000000000000000b RDI: ffff888040b4e5c8 [ 699.698761][ T13] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 699.698772][ T13] R10: dffffc0000000000 R11: fffff52000024ef8 R12: ffff888031f1bde0 [ 699.698786][ T13] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888040b4e6a0 [ 699.698799][ T13] FS: 0000000000000000(0000) GS:ffff888126bc9000(0000) knlGS:0000000000000000 [ 699.698815][ T13] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 699.698829][ T13] CR2: 00007fb6571f9d58 CR3: 0000000023058000 CR4: 00000000003526f0 [ 699.698845][ T13] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 699.698858][ T13] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 699.698878][ T13] Kernel panic - not syncing: Fatal exception [ 699.699145][ T13] Kernel Offset: disabled