last executing test programs: 16.005005084s ago: executing program 3 (id=1314): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r1, 0x0, 0x0) 15.70508838s ago: executing program 3 (id=1315): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ac1000/0x3000)=nil, 0x3000, 0x2000000, 0x100010, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x4003}, 0x10) r2 = syz_open_dev$dri(0x0, 0x4, 0x200003) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) socket(0x10, 0x3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) socket(0x10, 0x803, 0x0) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f0000000000)={0x2, 0x100, 0x3, {0x0, 0x0, 0x1c51, 0x2}}) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x2, 0x0, 0x2}, 0x10}}, 0x0) 13.75906667s ago: executing program 0 (id=1326): bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_acct\x00') preadv(r2, &(0x7f0000000540)=[{&(0x7f0000000140)=""/205, 0xcd}], 0x1, 0xfffffffb, 0xbf6b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x30}, [@alu={0x4, 0x0, 0x9, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f00000002c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r3) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4b, &(0x7f0000000240)=0x7, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f00000026c0)=[{{0x0, 0x0, 0x0}, 0x11008000}], 0x1, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'gre0\x00', 0x0}) sendto$packet(r4, 0x0, 0x0, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r6 = syz_open_dev$radio(&(0x7f0000000440), 0x3, 0x2) r7 = semget$private(0x0, 0x6, 0x0) semtimedop(r7, &(0x7f0000000040)=[{0x0, 0xfffd}], 0x1, 0x0) semop(r7, &(0x7f00000000c0)=[{0x0, 0xfffd}], 0x1) semctl$IPC_RMID(r7, 0x0, 0x0) ioctl$VIDIOC_QUERYCTRL(r6, 0xc0445624, &(0x7f0000000080)={0x8000007, 0x125080f0d0f47a09, "000097cba2760700000000f80000000000000001390d3af6d74de96f48ff089c", 0xfffffffe, 0x80000000, 0x3}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r3, 0x8008f511, &(0x7f0000000000)) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000000c0), &(0x7f0000000080)=0x6f) 13.070164256s ago: executing program 3 (id=1328): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x6, 0xc4d0109ec8161732) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000080)={0xf, 0x1f, 0x7, 0x7, "060045fc8aea4eb75941fa3a60e23307c07c380687b206000000073f687fb2b2"}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004000000060018"], 0x4c}}, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x1, 0x200000) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x30d4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = socket(0x2000000000000021, 0x2, 0x2) socket$alg(0x26, 0x5, 0x0) shutdown(r3, 0x0) shutdown(r3, 0x2) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, &(0x7f0000000080)={0x40, 0xc, 0xac, {0xac, 0xa, "2ecbf0319efd918999982e1d41613057fc521db3b5b2d0b4227bd819a443768bbdbc2baaf3be71c088c945b953ad699db2fb9a9a53321d81d0b7f05ac6910c71234a771ffd8693f9004677828ea5d3660ad7734b1ab9265595e5330bea09d6f1cd87dbdbd504140f4654066930e1ae5322526c500707ee33873d04b2cae9f7f5de0638b0ae79277755dfd6c85884f2f561e95ae35bfa922ca2524f58d5cf995973b78a21386f92100a54"}}, &(0x7f00000004c0)={0x0, 0x3, 0xdf, @string={0xdf, 0x3, "274260b089beb4938efacdf66b4dd72fa04e7c1d8b3082424659a72b3ed1d86f133565ebccc7cf6476da07a1704e9eefb4b5181bbdcfdf9632c7d98089ac831b6609c862251b57abcc33a16cc1fa0dd5da4dc56ab69ca7ef61d24a0271261ddd56ad39be9fe96045d3746dc9d65f954d16fc8056e8a0cd30e8d55d56b7d0dd0f460ce620af0a8d4e87d5082325313b730fe17d24757243d9e2c5d31b97c4e495114365895642abebb627bdf939f5318fc94b5647482c444bc5112eca1765fd1e0039951709876721ae02770536c6b13dc67275893b4ae1466ae839f969"}}, &(0x7f0000000140)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0xc, "c6d3e020"}, @local=@item_4={0x3, 0x2, 0x8, "ff88ca37"}]}}, &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8e0, 0xe6, 0x1, {0x22, 0x2d8}}}}, &(0x7f00000003c0)={0x2c, &(0x7f0000000240)={0x20, 0x8, 0x5, "9434424f52"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000340)={0x20, 0x1, 0xa, "4f695b7b4b523395461f"}, &(0x7f0000000380)={0x20, 0x3, 0x1, 0x3}}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGPTLCK(r5, 0x80045439, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x401, 0x4, 0x3, {0x0, 0x0, 0x0, 0x0, 0x60, 0x880}, [@IFLA_MASTER={0x8, 0x3}]}, 0x28}, 0x1, 0xd, 0x0, 0x480c5}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000440)={0x5, &(0x7f0000000400)=[{0x7, 0xa9, 0x4, 0x3}, {0x11, 0xf2, 0x0, 0x6}, {0x1, 0x6, 0x2, 0x9}, {0x400, 0xc, 0xb, 0x6eef3a0b}, {0x80, 0x3, 0xf8, 0x3}]}) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000280)) ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f0000000080)=0x200000000) r7 = dup2(r6, r6) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r7, &(0x7f0000002fc0)={0x2020}, 0x2020) read$FUSE(r7, &(0x7f0000000f80)={0x2020}, 0x2020) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f0000000040)=0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11.002389278s ago: executing program 3 (id=1335): socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x9) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r2) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x24000054}, 0xc001) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffc4c, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) recvmmsg$unix(r2, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/116, 0x74}], 0x1}}], 0x1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x80803, 0x87) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x8, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x85}]}, &(0x7f0000000380)='GPL\x00', 0x8, 0xad, &(0x7f0000000480)=""/173, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x7a44, 0x1700) lseek(r3, 0x15a2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = pidfd_getfd(r4, r0, 0x0) pidfd_send_signal(r5, 0x1035, &(0x7f00000003c0)={0x2f, 0x6, 0x800}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x60, 0x3e, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@nested={0x4c, 0x145, 0x0, 0x1, [@nested={0x45, 0x9, 0x0, 0x1, [@generic="58d6238285a9f7e14f687708f49c986f6ed93e4a364cb48d5e23850ac8e75b412e2353567eb46391c413211c302ed2c1cd24a04f62176b66b2c0231b9b54a9e735"]}]}]}, 0x60}}, 0x4040040) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000001010102000000000000000002000000240002800c000280040001003a00000014000180080001cd4bde2a0192000000000000000c001980080002"], 0x44}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) 10.1830919s ago: executing program 0 (id=1338): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ac1000/0x3000)=nil, 0x3000, 0x2000000, 0x100010, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x4003}, 0x10) r2 = syz_open_dev$dri(0x0, 0x4, 0x200003) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) socket(0x10, 0x3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) socket(0x10, 0x803, 0x0) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f0000000000)={0x2, 0x100, 0x3, {0x0, 0x0, 0x1c51, 0x2}}) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x2, 0x0, 0x2}, 0x10}}, 0x0) 8.043159101s ago: executing program 0 (id=1344): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x14, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp6\x00') pread64(r7, &(0x7f0000000200)=""/4072, 0x46, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000280)={{0x1000, 0x4000, 0x8, 0x0, 0x6, 0x1, 0xd, 0x4, 0x7, 0x4, 0x6, 0x7}, {0x1000, 0x0, 0xd, 0x9, 0x9, 0x5, 0xe1, 0x1, 0x9, 0x3, 0x0, 0x1}, {0x4, 0x100000, 0xd, 0x2, 0xd, 0x9, 0x2, 0xd, 0x4a, 0x2, 0x2, 0x81}, {0x1000, 0x1, 0x8, 0x7, 0x9f, 0x55, 0x6, 0x4, 0x2, 0x3, 0x3f, 0x88}, {0xffff1000, 0x1, 0x3, 0x9, 0x6, 0x5, 0x4, 0x6, 0x6, 0x3, 0x1, 0x2}, {0x2000, 0xeeef0000, 0x3, 0x4, 0x9, 0x9, 0x7, 0xb4, 0x8, 0x6, 0x6, 0x81}, {0x8080000, 0x2, 0xd, 0x0, 0xb1, 0x2, 0x1, 0x8, 0x7, 0x7, 0x8, 0x81}, {0x6000, 0x2, 0xf, 0x8, 0x53, 0xd, 0xb6, 0x0, 0x4, 0x2, 0x6b, 0x6}, {0x3000, 0xaf}, {0x4, 0x13}, 0x14, 0x0, 0x100000, 0x40000, 0x7, 0x8000, 0x4000, [0x200, 0xb8, 0xf, 0x699]}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r7, 0x84, 0x1b, &(0x7f0000001200)={0x0, 0x92, "ceec0fb80aa5e1b9ca9c963d0cd6810d61e90874010d0d7f0518b859c31e63a0b04fad0d1ad7b90b1b6bcf83e9c501806820296ba6a5707cc25205d44bc5e6f3fd9404b1585be148cde7280391ca8273df6d829b0b54adf935af2dd22402a9e03d9bf4f6c5ffa2c614bcb236de5f6f581303056b524afe6b69294a738951893d6c2c0f7e3a5bee345cf87776ab3963fbbbd8"}, &(0x7f0000000100)=0x9a) getsockopt$inet_sctp_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000000140)={r8, 0xb8}, &(0x7f00000012c0)=0x8) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = io_uring_setup(0x3f3b, &(0x7f0000000340)={0x0, 0x5d1e, 0x8, 0x0, 0x402f, 0x0, r7}) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r9, 0x12, 0x0, 0x0) pwritev2(r4, &(0x7f0000000000)=[{&(0x7f0000000080)="b5407050c03d74b2724afee05b2235aba5f3c9637ec48d33a36189b5f86fdb37d4c891d2f84bda7ab8b519f97062b30896e23b464f6886117d385f531b87d10056d4547ffc0f6f73f4e63d8646fcd6", 0x4f}, {&(0x7f0000000440)="ddfac18bdbf61c7eee989df9c730fef781c832d32e9836e92fa01762d18a11ab248c4ff5086ac4bd1eadd89b7c8c923ea90641d3676902063a5e8121b00203d5cc5ffd996ade19bdbbc8309361c420190c9e70299fd453458442e8dd780f14fd9b435a88b91e9fd3e269eaa1348034c06822bc4f0634d2060c3221422aaa9f217c5331a50eca85b9a663bad360da0fd2489f3ceddbc4fd056aba4b50bc1fb205932b33c5bf8572025de94eec161f911ebeb9e6745589e590e555cc68e5b2523c5aad74ce24dd5f34da98bdbe2b7264d43c512fe697b0874c117a91811012", 0xde}], 0x2, 0x1, 0xbacd, 0x4) 7.021048592s ago: executing program 4 (id=1346): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000002100)={0x2, 'vlan0\x00', 0x40001}, 0x18) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000380)=ANY=[@ANYRES32=r3], 0xba) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x4, 0x804, 0x7, 0xf, 0x120000, 0xff, 0x0, 0x8, 0x8000000000000001, 0x2, 0x0, 0x101, 0x6, 0x1], 0x8000000, 0x141200}) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffb) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000000000009100004000000000256200"/40]) io_uring_setup(0x4003eae, &(0x7f0000000080)={0x0, 0x4000000, 0x2000, 0x0, 0x2bf}) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r8, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x2b9}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x1fa) 6.617263244s ago: executing program 4 (id=1347): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x6, 0xc4d0109ec8161732) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000080)={0xf, 0x1f, 0x7, 0x7, "060045fc8aea4eb75941fa3a60e23307c07c380687b206000000073f687fb2b2"}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004000000060018"], 0x4c}}, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x1, 0x200000) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x30d4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = socket(0x2000000000000021, 0x2, 0x2) socket$alg(0x26, 0x5, 0x0) shutdown(r3, 0x0) shutdown(r3, 0x2) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, &(0x7f0000000080)={0x40, 0xc, 0xac, {0xac, 0xa, "2ecbf0319efd918999982e1d41613057fc521db3b5b2d0b4227bd819a443768bbdbc2baaf3be71c088c945b953ad699db2fb9a9a53321d81d0b7f05ac6910c71234a771ffd8693f9004677828ea5d3660ad7734b1ab9265595e5330bea09d6f1cd87dbdbd504140f4654066930e1ae5322526c500707ee33873d04b2cae9f7f5de0638b0ae79277755dfd6c85884f2f561e95ae35bfa922ca2524f58d5cf995973b78a21386f92100a54"}}, &(0x7f00000004c0)={0x0, 0x3, 0xdf, @string={0xdf, 0x3, "274260b089beb4938efacdf66b4dd72fa04e7c1d8b3082424659a72b3ed1d86f133565ebccc7cf6476da07a1704e9eefb4b5181bbdcfdf9632c7d98089ac831b6609c862251b57abcc33a16cc1fa0dd5da4dc56ab69ca7ef61d24a0271261ddd56ad39be9fe96045d3746dc9d65f954d16fc8056e8a0cd30e8d55d56b7d0dd0f460ce620af0a8d4e87d5082325313b730fe17d24757243d9e2c5d31b97c4e495114365895642abebb627bdf939f5318fc94b5647482c444bc5112eca1765fd1e0039951709876721ae02770536c6b13dc67275893b4ae1466ae839f969"}}, &(0x7f0000000140)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0xc, "c6d3e020"}, @local=@item_4={0x3, 0x2, 0x8, "ff88ca37"}]}}, &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8e0, 0xe6, 0x1, {0x22, 0x2d8}}}}, &(0x7f00000003c0)={0x2c, &(0x7f0000000240)={0x20, 0x8, 0x5, "9434424f52"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000340)={0x20, 0x1, 0xa, "4f695b7b4b523395461f"}, &(0x7f0000000380)={0x20, 0x3, 0x1, 0x3}}) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGPTLCK(r4, 0x80045439, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000440)={0x5, &(0x7f0000000400)=[{0x7, 0xa9, 0x4, 0x3}, {0x11, 0xf2, 0x0, 0x6}, {0x1, 0x6, 0x2, 0x9}, {0x400, 0xc, 0xb, 0x6eef3a0b}, {0x80, 0x3, 0xf8, 0x3}]}) r5 = io_uring_setup(0x194e, &(0x7f0000000a80)={0x0, 0xd3d5, 0x80, 0x3, 0x2b0}) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000280)) ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f0000000080)=0x200000000) r7 = dup2(r6, r6) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r7, &(0x7f0000002fc0)={0x2020}, 0x2020) read$FUSE(r7, &(0x7f0000000f80)={0x2020}, 0x2020) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f0000000040)=0x1) close_range(r5, 0xffffffffffffffff, 0x0) 6.04936616s ago: executing program 0 (id=1348): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000400070000000000000000000000000043e8d867bdcbba8475da31a856ae32e342939d32198d42675f727c169701b2445aec415ebf2354d2680f0b04945217d69af098c136ad0802d230ba2e2595eea4665b2089d3acfbb3f62584b5162a83c0b3148338a1c5e7b4156785ab935a2a922a58cc941d0510981488f75fd5cabb3aad2f3530", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000000), 0x12) syz_io_uring_setup(0x3163, &(0x7f0000000540)={0x0, 0xaefa, 0x2, 0xffffffff, 0x0, 0x0, r2}, 0x0, 0x0) setsockopt$CAIFSO_LINK_SELECT(r2, 0x116, 0x7f, &(0x7f0000000000)=0x6dfa, 0x4) write$tcp_mem(r2, &(0x7f0000000280)={0xce5, 0x20, 0x1ff, 0x20, 0x200}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d0000000a000000040000000100000000000000", @ANYRES32=r1], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r3}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7c40280f}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 5.608839853s ago: executing program 0 (id=1349): bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_acct\x00') preadv(r2, &(0x7f0000000540)=[{&(0x7f0000000140)=""/205, 0xcd}], 0x1, 0xfffffffb, 0xbf6b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x30}, [@alu={0x4, 0x0, 0x9, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f00000002c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r3) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4b, &(0x7f0000000240)=0x7, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f00000026c0)=[{{0x0, 0x0, 0x0}, 0x11008000}], 0x1, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'gre0\x00', 0x0}) sendto$packet(r4, 0x0, 0x0, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r6 = syz_open_dev$radio(&(0x7f0000000440), 0x3, 0x2) r7 = semget$private(0x0, 0x6, 0x0) semtimedop(r7, &(0x7f0000000040)=[{0x0, 0xfffd}], 0x1, 0x0) semop(r7, &(0x7f00000000c0)=[{0x0, 0xfffd}], 0x1) semctl$IPC_RMID(r7, 0x0, 0x0) ioctl$VIDIOC_QUERYCTRL(r6, 0xc0445624, &(0x7f0000000080)={0x8000007, 0x125080f0d0f47a09, "000097cba2760700000000f80000000000000001390d3af6d74de96f48ff089c", 0xfffffffe, 0x80000000, 0x3}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r8, 0x6, 0x23, &(0x7f00000000c0), &(0x7f0000000080)=0x6f) 4.948558924s ago: executing program 0 (id=1351): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) syz_open_dev$video4linux(&(0x7f0000000000), 0x6, 0x8000) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000b40)="b2", 0x1) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) ioctl$USBDEVFS_CONNECTINFO(r2, 0x80045518, &(0x7f0000002a40)) creat(0x0, 0x0) 4.343624909s ago: executing program 1 (id=1352): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x2ac, 0x30, 0x100, 0x70bd2b, 0x25dfdbff, {}, [{0x298, 0x1, [@m_skbedit={0x15c, 0x19, 0x0, 0x0, {{0xc}, {0x4}, {0x12d, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_gact={0x74, 0xb, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x16fb, 0x2}}]}, {0x39, 0x6, "7a26c822056c1c92d4a391d4edd403e7c642c1fad2a36600ccbe7be76abd06be0c4b006715609ea9569047075943f1943d7ddf491f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_sample={0xc4, 0x10, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x3}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x9}]}, {0x85, 0x6, "5c284c3a3976241974df53e1d3b1cccfebd3f123dec3f372dd21566159734af29ce5d14ed6f7073420a1d585c18bbb14dabd87303b46d5802bd94ac81b53ad5bb23b64e5f966aeb3d264d2a1b41a1911920ce0a01624236b1a6243c02b4d0154443183978c1a333bb541216eef42a751f212ed3cf39f5e80589dc4768cf0289795"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x2ac}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 4.342489858s ago: executing program 2 (id=1353): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x3a1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x5, @empty}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r8, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3e7000000006ee2ffca1b1f00c00e0004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00121000a6400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 4.341108197s ago: executing program 4 (id=1354): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ac1000/0x3000)=nil, 0x3000, 0x2000000, 0x100010, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4003}, 0x10) r1 = syz_open_dev$dri(0x0, 0x4, 0x200003) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) socket(0x10, 0x3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) socket(0x10, 0x803, 0x0) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000000)={0x2, 0x100, 0x3, {0x0, 0x0, 0x1c51, 0x2}}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x2, 0x0, 0x2}, 0x10}}, 0x0) 4.104968645s ago: executing program 2 (id=1355): pipe2(&(0x7f00000000c0), 0x4800) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x24, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {0xffe0}, {}, {0xa, 0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x80fe) 4.07215882s ago: executing program 1 (id=1356): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0x70bd26, 0xa000000, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x67}}, 0x20004880) 3.900664203s ago: executing program 1 (id=1357): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000002100)={0x2, 'vlan0\x00', 0x40001}, 0x18) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000380)=ANY=[@ANYRES32=r3], 0xba) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x4, 0x804, 0x7, 0xf, 0x120000, 0xff, 0x0, 0x8, 0x8000000000000001, 0x2, 0x0, 0x101, 0x6, 0x1], 0x8000000, 0x141200}) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffb) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000000000009100004000000000256200"/40]) io_uring_setup(0x4003eae, &(0x7f0000000080)={0x0, 0x4000000, 0x2000, 0x0, 0x2bf}) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r8, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x2b9}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000240)=0x1fa) 3.565096715s ago: executing program 2 (id=1358): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x50, 0x0, @fd_index=0x3}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05668, &(0x7f00000000c0)={0x2, @sdr={0x34324948, 0x1}}) 3.505888331s ago: executing program 4 (id=1359): mlock(&(0x7f0000ffb000/0x1000)=nil, 0xffffffffdf004fff) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141101) r2 = dup(r1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r2, 0x7ab, &(0x7f0000000080)={&(0x7f0000000180)={{@any, 0x6}, {@host, 0x6}, 0x400, "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"}, 0x418, 0x2000000}) r3 = dup(r0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="120100009937f0103c41d281e8250102030109021b0002000000000904e70fcb1cca67000904000000ff"], 0x0) io_setup(0x4, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={0x60, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x400}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x18, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e1d}, @CTA_PROTONAT_PORT_MAX={0x6}]}]}]}, 0x60}}, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x30, r8, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xb9}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r10, &(0x7f0000000900)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x58, r8, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xfffffff8, 0x7d}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xb}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x6}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x7}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xe}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xf}]}, 0x58}, 0x1, 0x0, 0x0, 0x18000090}, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000040)='net/vlan/config\x00') preadv(r11, &(0x7f0000000740)=[{&(0x7f0000000300)=""/49, 0x31}], 0x1, 0x2f, 0x0) bind$netlink(r3, &(0x7f0000000740)={0x10, 0x0, 0x25dfdbfe, 0x2000}, 0xc) r12 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r12, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x18, 0x140f, 0x1, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'mad\x00'}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x1004) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x20000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ES={0x5, 0xa, 0x80}]}}}]}, 0x3c}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r3, 0x58, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x27) sendmsg$nl_route(r6, &(0x7f0000000700)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)=@bridge_delvlan={0x54, 0x71, 0x4, 0x70bd27, 0x25dfdbfb, {0x7, 0x0, 0x0, r13}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x14, 0x1}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xb}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x6}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 3.377202254s ago: executing program 2 (id=1360): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000640)={{0x6, 0x3, 0x3, 0x9, '\x00', 0x96d}, 0x1, [0x81, 0x2, 0x3c0, 0x7, 0x10000, 0x590, 0x3, 0x8000, 0x2, 0x2, 0xfffffffffffffffc, 0xe3, 0x4, 0x99, 0x80000001, 0x5, 0x7ba, 0x40, 0x8, 0xb, 0x6, 0xffffffff00000001, 0xe, 0x6, 0x2, 0x7ffffffc, 0x7, 0xffffffffffffff01, 0x2, 0x5, 0xffff, 0x5, 0x1, 0x0, 0x2, 0x6, 0x2, 0x800, 0x14, 0xfffffffffffffffd, 0x7, 0x4, 0xfffffffffffffffb, 0x7, 0xe8, 0x5, 0x10000, 0x0, 0x7c4, 0x5, 0x80000001, 0xc00000, 0x10000, 0x4f, 0xe4, 0xa72, 0x1, 0x7, 0xa8, 0x6, 0x10001, 0x1, 0x5, 0x7fffffff, 0x8, 0x6, 0xa5, 0x1, 0x8, 0x4, 0x8001, 0x200000, 0x9, 0x1, 0x401, 0x8, 0x1, 0x7, 0x0, 0x7, 0x1, 0x93, 0xfd, 0xfffffffffffffff9, 0xb, 0x9, 0x8, 0x6, 0x6, 0xd, 0x0, 0xee13142, 0xe36, 0x5, 0xec, 0x3, 0x6, 0x83, 0x9272, 0xfffffffffffff436, 0x9, 0x100000000, 0x6, 0x3ed, 0x9, 0x9, 0xa52, 0x3, 0x2, 0x80000001, 0x10001, 0x7, 0x3, 0x5606, 0x986f, 0x10001, 0xa, 0x0, 0x101, 0x8, 0x1, 0x10e, 0xa, 0x3, 0xf4c, 0x9, 0x0, 0x6]}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@x86={0xac, 0x3, 0xd, 0x0, 0x8089, 0xd, 0x3b, 0x2, 0x1, 0xf1, 0x6, 0x3, 0x0, 0x7fffffff, 0xeeb, 0x1, 0x3d, 0x0, 0xf, '\x00', 0x7, 0xc8}) r5 = dup(0xffffffffffffffff) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000040)=@x86={0xe8, 0x5, 0xf, 0x0, 0x127a, 0x4, 0x10, 0xc, 0x0, 0xe3, 0x7f, 0xff, 0x0, 0xf5, 0x8, 0x6, 0xa, 0x7, 0x9, '\x00', 0x80, 0x1ff}) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.289557586s ago: executing program 1 (id=1361): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) accept4(r0, 0x0, 0x0, 0x800) unshare(0x600) pselect6(0x40, &(0x7f0000000000)={0x7, 0x0, 0x3, 0xa00, 0x0, 0x1}, &(0x7f0000000200)={0x1f, 0x0, 0x0, 0x2128, 0x0, 0x0, 0x6}, 0x0, 0x0, 0x0) 3.21435004s ago: executing program 3 (id=1362): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x34}}, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)={0x2c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "58422dbbcfcb238f"}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x840) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x0, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89ff, &(0x7f0000000240)={'bridge0\x00', &(0x7f0000000140)=@ethtool_ringparam={0x11, 0x4, 0x20040001, 0xfffffffd, 0x4, 0x3, 0x1}}) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x80400, 0x0) socket(0x10, 0x3, 0x9) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff0905"], 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000280)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) pselect6(0x40, &(0x7f0000000600)={0x11, 0xfffffffffffffffc, 0x2, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0x8}, 0x0, &(0x7f0000000680)={0x7fc, 0x2, 0x800000, 0x0, 0x0, 0xc3ad}, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40890) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000300000004000000ff07"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0xfffffffffffffd8a, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000080), 0xce4, r4}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x401, r4, 0x0, 0x100000000000000}, 0x38) 3.158457881s ago: executing program 1 (id=1363): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x25a3, &(0x7f00000018c0)={0x0, 0x4d08, 0x10100, 0x0, 0x2b5}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) ioctl$EVIOCSCLOCKID(r1, 0x40084503, 0x0) getpid() bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0) r7 = syz_io_uring_setup(0x88f, &(0x7f0000001940)={0x0, 0x17da, 0x0, 0x2, 0xbfdffffc}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000180)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10001}) io_uring_enter(r7, 0x75fa, 0xe475, 0x50, 0x0, 0xfffffffffffffd31) r10 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r10, 0x4048aecb, &(0x7f0000000100)=ANY=[@ANYBLOB="050000000005009803"]) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x53, 0x0, r1, &(0x7f0000000380)={0x40000012}, r2, 0x3, 0x0, 0x1}) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) r11 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r11, 0x84, 0x83, 0x0, &(0x7f0000000300)=0x9b) r12 = syz_open_procfs(0xffffffffffffffff, 0x0) io_setup(0x4, 0x0) vmsplice(r12, &(0x7f0000001640)=[{&(0x7f0000000200)="d575192bbb022adba15821c94e0a2a75e58dbc19e8be6706b083fbd095e72fb3b7f63e7a3e261a44e729b5d85f7d89671a96c81e45e5a4439571c1d5284fa8688f2799dad5ba3d4539f8775e8ad9c863d643bb457429faffe8d22381e3b13a3eda9592a22818f785b937583105b5df86b8b78157b8eb9af44f2d972d4608574f3e71aa95d8553522696bd11b368e476b8c593bb5615850aa5c768f2dae778370efb7608fe647b5e03bab1fb84d0d2086f02c9ef7df26a54c639d7a5304ccec2bcf", 0xc1}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f00000016c0)="ab9646230eea80527c40d26f0748b742958d3e8662914b0db66ce122c32e5f7148fc9a50e0dc8eaab2ba2f455b9252d7623dbfeb9c66b9015e2e625f0e3d4782d807f296a4d52fa1f3c439d2cfc638ad2451575573d0dc64c644590d7333c4127c75120cade62b82e7ddedb1c8c9749bddd82b4412407c7cce93f478663511133289130f5fda9a786147db065c284205c95473bf99927948ca26d938d1cfbe324f770f1f6f15c03c9892815b80d01bd84db41d96b8267aced11e2617a5f8edbe638e16ede746b98a5ddddab966b2bdd5f4e2a6ed37e07445458b1725fd1bb009484328f869abae5e8e0cebabab3732c9c5f4fb6306f62061ef82e23a509fc6c9cee49af4e7bc076650eb73de22efb51c017dc92292f549201aecbee48b7c7bc376aa4eb7639fcc4287ebfe4fa682c47f9d92e733c3c90d2f621bc3f681d65b415247963f8b1db6e0eabbd3a0f3ebbfe90c650278be2c0517c690904d6a8ee535ba330091210caac01ee16de84611790ce973435673aa65e2b92708d896338742b704df5803c8a44961c5df75df65ce31b218ba017af3c12b2631ffc931dadbc03651a7c052383c5899351f60297db0c8dbecb00b31445246750af4fad5a27a6e5b3c749bd3c5867d69628ee93a13740ba3df96e8073f2d800ebaf8db63e1b8b79e07e2fb9ce805e8fa739a0b343f71a96958f351ba30e77b8b43ac59fd26", 0x1fe}, {&(0x7f0000001400)="3f3ad54ef34272cd9c751ad25123d75a74f1ebfdc5f97fb71457038592233bd4db0dd9fbad5cf1b307e1ffe61a014f1c5a23bbee1ed63448e96d852763cf2afae199b7a5a6c570c5d57caa5d5e4771d25584060e427c26dd269415db4bf589c394fd72f7714418277e1d9f7fd6149e703bcda52fbd1da3ca881a9c41406d237cf4f51c234a3ac531da29de8c38a583bd2c7fd6f571696d519b0583bc15c8e4cd8166", 0xa2}, {&(0x7f00000014c0)="78bde4dfa0e658aba89a51ca48e41ad57beab092c39af083aa53856aaec20ac62cad1662ef6b1242c6ec0238c5af0a594b085042a5b603425efb56b770f803f4c76a4bd07b89bc0fc141a381a04ebead418c355cc6dea8f02cfc6c6fabad654dad", 0x61}, {&(0x7f0000001540)="bce93258cd2e837aa6d97746442409356c6b5e87718054084500ccbf51457112fa8f1693d2419ca8232ee9490077a0cf3cb2f6cce94c5cbfcf27f2a63afe30ad83ecb431cc2551b5e485c58914beaf18f3a7ebb9d2ff4147d50accb9f610fa53d0e1aca18fea378011c6d7d35f7493132592e5db668db932c2a9f34053f46ba51cae705281edf93dd2c06fa14e5d0d69b2019228a60cc3d4f81aab1b27a2bf5de34d9def8436286640608aa50bd1596f9f980022cb5cc5db2cc2b3770dc49a815578b85751dc2909236fa75ae5818f", 0xcf}], 0x6, 0xe) r13 = userfaultfd(0x801) ioctl$UFFDIO_API(r13, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x2}) ioctl$UFFDIO_REGISTER(r13, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}, 0x4}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000100), 0xc06620, 0x4) 2.066416401s ago: executing program 1 (id=1364): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x6, 0xc4d0109ec8161732) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000080)={0xf, 0x1f, 0x7, 0x7, "060045fc8aea4eb75941fa3a60e23307c07c380687b206000000073f687fb2b2"}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004000000060018"], 0x4c}}, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x1, 0x200000) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x30d4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = socket(0x2000000000000021, 0x2, 0x2) socket$alg(0x26, 0x5, 0x0) shutdown(r3, 0x0) shutdown(r3, 0x2) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, &(0x7f0000000080)={0x40, 0xc, 0xac, {0xac, 0xa, "2ecbf0319efd918999982e1d41613057fc521db3b5b2d0b4227bd819a443768bbdbc2baaf3be71c088c945b953ad699db2fb9a9a53321d81d0b7f05ac6910c71234a771ffd8693f9004677828ea5d3660ad7734b1ab9265595e5330bea09d6f1cd87dbdbd504140f4654066930e1ae5322526c500707ee33873d04b2cae9f7f5de0638b0ae79277755dfd6c85884f2f561e95ae35bfa922ca2524f58d5cf995973b78a21386f92100a54"}}, &(0x7f00000004c0)={0x0, 0x3, 0xdf, @string={0xdf, 0x3, "274260b089beb4938efacdf66b4dd72fa04e7c1d8b3082424659a72b3ed1d86f133565ebccc7cf6476da07a1704e9eefb4b5181bbdcfdf9632c7d98089ac831b6609c862251b57abcc33a16cc1fa0dd5da4dc56ab69ca7ef61d24a0271261ddd56ad39be9fe96045d3746dc9d65f954d16fc8056e8a0cd30e8d55d56b7d0dd0f460ce620af0a8d4e87d5082325313b730fe17d24757243d9e2c5d31b97c4e495114365895642abebb627bdf939f5318fc94b5647482c444bc5112eca1765fd1e0039951709876721ae02770536c6b13dc67275893b4ae1466ae839f969"}}, &(0x7f0000000140)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0xc, "c6d3e020"}, @local=@item_4={0x3, 0x2, 0x8, "ff88ca37"}]}}, &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8e0, 0xe6, 0x1, {0x22, 0x2d8}}}}, &(0x7f00000003c0)={0x2c, &(0x7f0000000240)={0x20, 0x8, 0x5, "9434424f52"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000340)={0x20, 0x1, 0xa, "4f695b7b4b523395461f"}, &(0x7f0000000380)={0x20, 0x3, 0x1, 0x3}}) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x401, 0x4, 0x3, {0x0, 0x0, 0x0, 0x0, 0x60, 0x880}, [@IFLA_MASTER={0x8, 0x3}]}, 0x28}, 0x1, 0xd, 0x0, 0x480c5}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000440)={0x5, &(0x7f0000000400)=[{0x7, 0xa9, 0x4, 0x3}, {0x11, 0xf2, 0x0, 0x6}, {0x1, 0x6, 0x2, 0x9}, {0x400, 0xc, 0xb, 0x6eef3a0b}, {0x80, 0x3, 0xf8, 0x3}]}) r5 = io_uring_setup(0x194e, &(0x7f0000000a80)={0x0, 0xd3d5, 0x80, 0x3, 0x2b0}) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000280)) ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f0000000080)=0x200000000) r7 = dup2(r6, r6) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r7, &(0x7f0000002fc0)={0x2020}, 0x2020) read$FUSE(r7, &(0x7f0000000f80)={0x2020}, 0x2020) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f0000000040)=0x1) close_range(r5, 0xffffffffffffffff, 0x0) 1.157003067s ago: executing program 2 (id=1365): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r2, 0x4018aee3, &(0x7f0000000000)=@attr_pvtime_ipa={0x0, 0x1, 0x1, 0x81}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0xc, 0x0, 0x10000000000002, 0x2, 0x800000000000, 0x0, 0xc], 0x1, 0x45212}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x12, 0x0, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000008004"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 732.387763ms ago: executing program 4 (id=1366): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x2ac, 0x30, 0x100, 0x70bd2b, 0x25dfdbff, {}, [{0x298, 0x1, [@m_skbedit={0x15c, 0x19, 0x0, 0x0, {{0xc}, {0x4}, {0x12d, 0x6, "de616dd9ce3b892bb6fafca061bed3e644dcf9151f4527045657b89def02bb9cad6c62f8293cff1e7df3eb0803889f2fd92b151ed17ab9007c47463bf4e7afe47ab1d24292b0103cbbc15977a51c0ae02a16535a666c86a6321ae76cba859e771aa7d0ff9fa033e50e56e0f68419fd47894ab8f8d473fc2af5fc18fb9399fdbb44bce22ac4c64feea69875f61ef4f46591d0547ce0f025b0a5f6dc470fd9635a05e318fa41b23e07582b3128621edbf17703923cea8b079f042f9924f50ce06116fc38e34430e0a4b60e7144cccb31d0a0457e528dd782264fec2417bd1b18aa82a223185cee31b2989e534df535b22243ec2971118b283cebb23130d1622a675cabf8788d71473f98949841ab1c34d28257f4b10e6eec198365490620753627951432cf82875ec0fc"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_gact={0x74, 0xb, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x16fb, 0x2}}]}, {0x39, 0x6, "7a26c822056c1c92d4a391d4edd403e7c642c1fad2a36600ccbe7be76abd06be0c4b006715609ea9569047075943f1943d7ddf491f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_sample={0xc4, 0x10, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x3}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x9}]}, {0x85, 0x6, "5c284c3a3976241974df53e1d3b1cccfebd3f123dec3f372dd21566159734af29ce5d14ed6f7073420a1d585c18bbb14dabd87303b46d5802bd94ac81b53ad5bb23b64e5f966aeb3d264d2a1b41a1911920ce0a01624236b1a6243c02b4d0154443183978c1a333bb541216eef42a751f212ed3cf39f5e80589dc4768cf0289795"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x2ac}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 551.231535ms ago: executing program 2 (id=1367): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0x0, 0x2b4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x40084503, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@ipv4_newaddr={0x34, 0x14, 0x509, 0x70bd2b, 0x0, {0x2, 0x18, 0xd}, [@IFA_CACHEINFO={0x14, 0x6, {0x5, 0x800, 0x81, 0xffffffff}}, @IFA_LOCAL={0x8, 0x2, @empty}]}, 0x34}}, 0x4000000) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) io_setup(0x4, 0x0) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000100), 0xc06620, 0x4) 254.874816ms ago: executing program 4 (id=1368): socket$xdp(0x2c, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000200)={0x0, 0x1b, &(0x7f0000000280)={&(0x7f00000002c0)={0x30, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1000000}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0xefffffff]}]}]}, 0x30}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r8, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/59, 0x0}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="8c00000000010104000000000000000002000000240001801400018008000100e000000208000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000020c000280050001000000ffff080007400000000028000d8008000200ffffffff14000380060001"], 0x8c}}, 0x0) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) r10 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r11 = openat$mice(0xffffffffffffff9c, &(0x7f0000000140), 0x101) write$FUSE_CREATE_OPEN(r11, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000001e80)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106, 0x3}}, 0x20) ioctl$VHOST_NET_SET_BACKEND(r10, 0x4008af30, &(0x7f0000000340)={0x3, r11}) ioctl$VHOST_VSOCK_SET_RUNNING(r8, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f0000000040)={0x1, 0x0, [{0x5000, 0x0, 0xfffffffffffffffd}]}) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x6, @remote, 0x7}, 0x1c) 0s ago: executing program 3 (id=1369): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ac1000/0x3000)=nil, 0x3000, 0x2000000, 0x100010, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4003}, 0x10) r1 = syz_open_dev$dri(0x0, 0x4, 0x200003) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) socket(0x10, 0x3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) socket(0x10, 0x803, 0x0) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000000)={0x2, 0x100, 0x3, {0x0, 0x0, 0x1c51, 0x2}}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x2, 0x0, 0x2}, 0x10}}, 0x0) kernel console output (not intermixed with test programs): endpoint not found [ 312.820367][ T8874] netlink: 32 bytes leftover after parsing attributes in process `syz.1.865'. [ 313.012971][ T8879] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 313.027677][ T8879] Cannot find set identified by id 0 to match [ 313.046277][ T5918] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 313.199280][ T5918] usb 3-1: Using ep0 maxpacket: 32 [ 313.205430][ T8887] tipc: Enabling of bearer rejected, failed to enable media [ 313.220696][ T5918] usb 3-1: config 0 has no interfaces? [ 313.231228][ T5918] usb 3-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 313.243229][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.253871][ T5918] usb 3-1: Product: syz [ 313.260779][ T5918] usb 3-1: Manufacturer: syz [ 313.265598][ T5918] usb 3-1: SerialNumber: syz [ 313.281072][ T5918] usb 3-1: config 0 descriptor?? [ 313.386233][ T5894] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 313.495233][ T8871] IPv6: NLM_F_CREATE should be specified when creating new route [ 313.529289][ T5839] usb 4-1: USB disconnect, device number 54 [ 313.536358][ T8871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.558077][ T5894] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.581386][ T8871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.604014][ T5894] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.614637][ T5894] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 313.628429][ T5894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.651153][ T5894] usb 2-1: config 0 descriptor?? [ 313.814354][ T30] audit: type=1326 audit(1744725180.022:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8894 comm="syz.3.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8512d8e169 code=0x7ffc0000 [ 313.853123][ T30] audit: type=1326 audit(1744725180.052:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8894 comm="syz.3.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8512d8e169 code=0x7ffc0000 [ 313.877090][ T8895] netlink: 12 bytes leftover after parsing attributes in process `syz.3.873'. [ 313.892764][ T30] audit: type=1326 audit(1744725180.052:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8894 comm="syz.3.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8512d8cc1f code=0x7ffc0000 [ 313.922733][ T30] audit: type=1326 audit(1744725180.052:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8894 comm="syz.3.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8512d8e169 code=0x7ffc0000 [ 313.949775][ T30] audit: type=1326 audit(1744725180.052:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8894 comm="syz.3.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8512d8e169 code=0x7ffc0000 [ 313.995596][ T30] audit: type=1326 audit(1744725180.052:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8894 comm="syz.3.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f8512d8e169 code=0x7ffc0000 [ 314.021662][ T30] audit: type=1326 audit(1744725180.052:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8894 comm="syz.3.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8512d8e169 code=0x7ffc0000 [ 314.071859][ T30] audit: type=1326 audit(1744725180.052:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8894 comm="syz.3.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8512d8e169 code=0x7ffc0000 [ 314.115335][ T5894] usbhid 2-1:0.0: can't add hid device: -71 [ 314.131715][ T5894] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 314.160988][ T5894] usb 2-1: USB disconnect, device number 40 [ 314.172621][ T30] audit: type=1326 audit(1744725180.052:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8894 comm="syz.3.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f8512d8e169 code=0x7ffc0000 [ 314.232399][ T2154] usb 5-1: USB disconnect, device number 45 [ 314.270889][ T5918] usb 3-1: USB disconnect, device number 42 [ 314.342663][ T30] audit: type=1326 audit(1744725180.052:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8894 comm="syz.3.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8512d8e169 code=0x7ffc0000 [ 314.576381][ T8904] netlink: 8 bytes leftover after parsing attributes in process `syz.4.874'. [ 314.615880][ T8904] netlink: 4 bytes leftover after parsing attributes in process `syz.4.874'. [ 315.136118][ T5894] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 315.286099][ T5894] usb 5-1: Using ep0 maxpacket: 16 [ 315.294365][ T5894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 315.308701][ T5894] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 315.318212][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.326499][ T5894] usb 5-1: Product: syz [ 315.329077][ T10] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 315.331055][ T5894] usb 5-1: Manufacturer: syz [ 315.343405][ T5894] usb 5-1: SerialNumber: syz [ 315.353488][ T5894] usb 5-1: config 0 descriptor?? [ 315.361614][ T5894] hub 5-1:0.0: bad descriptor, ignoring hub [ 315.368238][ T5894] hub 5-1:0.0: probe with driver hub failed with error -5 [ 315.381010][ T5894] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input22 [ 315.456057][ T5918] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 315.519340][ T10] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 315.531270][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.549503][ T10] usb 2-1: config 0 descriptor?? [ 315.560864][ T10] cp210x 2-1:0.0: cp210x converter detected [ 315.627376][ T5918] usb 3-1: Using ep0 maxpacket: 8 [ 315.639644][ T5918] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 315.660964][ T5918] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 315.684791][ T5918] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 315.725763][ T5918] usb 3-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 315.873920][ T5918] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 315.913628][ T5918] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 315.937849][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.954092][ T5918] usbtmc 3-1:16.0: bulk endpoints not found [ 316.060763][ T8931] netlink: 24 bytes leftover after parsing attributes in process `syz.0.884'. [ 316.113601][ T10] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 316.131219][ T10] cp210x 2-1:0.0: failed to get vendor val 0x3711 size 2: -121 [ 316.150850][ T10] cp210x 2-1:0.0: GPIO initialisation failed: -121 [ 316.222735][ T10] usb 2-1: cp210x converter now attached to ttyUSB0 [ 317.189624][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.226248][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.112285][ T10] usb 2-1: USB disconnect, device number 41 [ 318.120831][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 318.131137][ T10] cp210x 2-1:0.0: device disconnected [ 318.156694][ T5918] usb 5-1: USB disconnect, device number 46 [ 318.322210][ T8952] netlink: 8 bytes leftover after parsing attributes in process `syz.1.889'. [ 318.611432][ T5894] usb 3-1: USB disconnect, device number 43 [ 318.922855][ T8966] xt_CT: No such helper "netbios-ns" [ 318.934769][ T8964] kvm: user requested TSC rate below hardware speed [ 318.996078][ T5839] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 319.280280][ T5839] usb 5-1: config 0 has no interfaces? [ 319.391123][ T5839] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 319.402052][ T5839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.410720][ T5839] usb 5-1: Product: syz [ 319.415053][ T5839] usb 5-1: Manufacturer: syz [ 319.428195][ T5839] usb 5-1: SerialNumber: syz [ 319.558171][ T5839] usb 5-1: config 0 descriptor?? [ 319.821644][ T8983] netlink: 8 bytes leftover after parsing attributes in process `syz.0.899'. [ 319.831029][ T8983] FAULT_INJECTION: forcing a failure. [ 319.831029][ T8983] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 319.847023][ T8983] CPU: 0 UID: 0 PID: 8983 Comm: syz.0.899 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 319.847054][ T8983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 319.847067][ T8983] Call Trace: [ 319.847074][ T8983] [ 319.847083][ T8983] dump_stack_lvl+0x241/0x360 [ 319.847134][ T8983] ? __pfx_dump_stack_lvl+0x10/0x10 [ 319.847165][ T8983] ? __pfx__printk+0x10/0x10 [ 319.847206][ T8983] should_fail_ex+0x424/0x570 [ 319.847234][ T8983] _copy_to_user+0x31/0xb0 [ 319.847267][ T8983] simple_read_from_buffer+0xc4/0x170 [ 319.847303][ T8983] proc_fail_nth_read+0x1ef/0x260 [ 319.847327][ T8983] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 319.847353][ T8983] ? rw_verify_area+0x246/0x630 [ 319.847375][ T8983] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 319.847399][ T8983] vfs_read+0x21f/0xb90 [ 319.847428][ T8983] ? __pfx___mutex_lock+0x10/0x10 [ 319.847456][ T8983] ? __pfx_vfs_read+0x10/0x10 [ 319.847482][ T8983] ? __fget_files+0x2a/0x420 [ 319.847504][ T8983] ? __fget_files+0x39d/0x420 [ 319.847521][ T8983] ? __fget_files+0x2a/0x420 [ 319.847550][ T8983] ksys_read+0x19d/0x2d0 [ 319.847576][ T8983] ? __pfx_ksys_read+0x10/0x10 [ 319.847607][ T8983] ? do_syscall_64+0xb6/0x230 [ 319.847637][ T8983] do_syscall_64+0xf3/0x230 [ 319.847664][ T8983] ? clear_bhb_loop+0x45/0xa0 [ 319.847689][ T8983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.847709][ T8983] RIP: 0033:0x7f28ce38cb7c [ 319.847728][ T8983] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 319.847746][ T8983] RSP: 002b:00007f28cf221030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 319.847768][ T8983] RAX: ffffffffffffffda RBX: 00007f28ce5b5fa0 RCX: 00007f28ce38cb7c [ 319.847783][ T8983] RDX: 000000000000000f RSI: 00007f28cf2210a0 RDI: 0000000000000014 [ 319.847796][ T8983] RBP: 00007f28cf221090 R08: 0000000000000000 R09: 0000000000000000 [ 319.847810][ T8983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 319.847822][ T8983] R13: 0000000000000000 R14: 00007f28ce5b5fa0 R15: 00007f28ce6dfa28 [ 319.847854][ T8983] [ 320.319804][ T8988] Invalid option length (1044984) for dns_resolver key [ 320.606204][ T5839] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 320.858550][ T5839] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 86, changing to 10 [ 320.872070][ T5839] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.999951][ T5839] usb 2-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 321.080097][ T5839] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.089122][ T8998] input: syz1 as /devices/virtual/input/input23 [ 321.131869][ T5839] usb 2-1: config 0 descriptor?? [ 321.496248][ T2154] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 321.560630][ T5839] waltop 0003:172F:0037.0008: hidraw0: USB HID v0.00 Device [HID 172f:0037] on usb-dummy_hcd.1-1/input0 [ 321.673194][ T2154] usb 3-1: config 0 has no interfaces? [ 321.683262][ T2154] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 321.699198][ T2154] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.731783][ T2154] usb 3-1: Product: syz [ 321.762965][ T5839] usb 2-1: USB disconnect, device number 42 [ 321.785067][ T2154] usb 3-1: Manufacturer: syz [ 321.817779][ T2154] usb 3-1: SerialNumber: syz [ 321.863779][ T2154] usb 3-1: config 0 descriptor?? [ 322.120613][ T5839] usb 5-1: USB disconnect, device number 47 [ 322.150204][ T9001] netlink: 36 bytes leftover after parsing attributes in process `syz.2.904'. [ 322.150257][ T9001] netlink: 36 bytes leftover after parsing attributes in process `syz.2.904'. [ 322.299041][ T9006] netlink: 8 bytes leftover after parsing attributes in process `syz.4.906'. [ 322.579898][ T9010] netlink: 36 bytes leftover after parsing attributes in process `syz.3.907'. [ 322.590129][ T9010] raw_sendmsg: syz.3.907 forgot to set AF_INET. Fix it! [ 322.966263][ T5918] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 323.016363][ T10] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 323.236926][ T5918] usb 5-1: config 0 has no interfaces? [ 323.248175][ T5918] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 323.265906][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.289242][ T5918] usb 5-1: Product: syz [ 323.304601][ T5918] usb 5-1: Manufacturer: syz [ 323.311354][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 323.319121][ T10] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 323.331692][ T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 323.347737][ T5918] usb 5-1: SerialNumber: syz [ 323.371539][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 323.382471][ T5918] usb 5-1: config 0 descriptor?? [ 323.500653][ T10] usb 2-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 323.566039][ T10] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 323.771144][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 323.780779][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.815573][ T10] usbtmc 2-1:16.0: bulk endpoints not found [ 324.384198][ T5839] usb 3-1: USB disconnect, device number 44 [ 324.580778][ T9031] syzkaller1: entered promiscuous mode [ 324.602458][ T9031] syzkaller1: entered allmulticast mode [ 325.498408][ T5839] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 325.796068][ T5839] usb 3-1: Using ep0 maxpacket: 16 [ 326.195337][ T24] usb 5-1: USB disconnect, device number 48 [ 326.570161][ T24] usb 2-1: USB disconnect, device number 43 [ 326.708415][ T9045] FAULT_INJECTION: forcing a failure. [ 326.708415][ T9045] name failslab, interval 1, probability 0, space 0, times 0 [ 326.768359][ T9045] CPU: 1 UID: 0 PID: 9045 Comm: syz.1.917 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 326.768382][ T9045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 326.768392][ T9045] Call Trace: [ 326.768401][ T9045] [ 326.768408][ T9045] dump_stack_lvl+0x241/0x360 [ 326.768437][ T9045] ? __pfx_dump_stack_lvl+0x10/0x10 [ 326.768463][ T9045] ? __pfx__printk+0x10/0x10 [ 326.768487][ T9045] ? __pfx___might_resched+0x10/0x10 [ 326.768510][ T9045] should_fail_ex+0x424/0x570 [ 326.768529][ T9045] should_failslab+0xac/0x100 [ 326.768551][ T9045] __kmalloc_cache_noprof+0x73/0x370 [ 326.768571][ T9045] ? snd_pcm_hw_param_near+0xe7/0x790 [ 326.768596][ T9045] snd_pcm_hw_param_near+0xe7/0x790 [ 326.768622][ T9045] ? __pfx_snd_pcm_hw_param_near+0x10/0x10 [ 326.768643][ T9045] ? __asan_memset+0x23/0x50 [ 326.768663][ T9045] snd_pcm_oss_change_params_locked+0x22d7/0x4150 [ 326.768707][ T9045] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 326.768729][ T9045] ? snd_pcm_oss_get_active_substream+0x140/0x280 [ 326.768752][ T9045] ? __mutex_unlock_slowpath+0x229/0x800 [ 326.768778][ T9045] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 326.768806][ T9045] snd_pcm_oss_get_active_substream+0x1cc/0x280 [ 326.768833][ T9045] snd_pcm_oss_set_rate+0x266/0x610 [ 326.768856][ T9045] ? __pfx_snd_pcm_oss_set_rate+0x10/0x10 [ 326.768880][ T9045] ? __might_fault+0xaa/0x120 [ 326.768906][ T9045] snd_pcm_oss_ioctl+0xef6/0x10b0 [ 326.768928][ T9045] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 326.768947][ T9045] ? __fget_files+0x2a/0x420 [ 326.768965][ T9045] ? __fget_files+0x2a/0x420 [ 326.768986][ T9045] ? __fget_files+0x2a/0x420 [ 326.769010][ T9045] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 326.769042][ T9045] __se_sys_ioctl+0xf1/0x160 [ 326.769070][ T9045] do_syscall_64+0xf3/0x230 [ 326.769090][ T9045] ? clear_bhb_loop+0x45/0xa0 [ 326.769108][ T9045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.769122][ T9045] RIP: 0033:0x7f3a8e58e169 [ 326.769135][ T9045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 326.769153][ T9045] RSP: 002b:00007f3a8f44b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 326.769169][ T9045] RAX: ffffffffffffffda RBX: 00007f3a8e7b5fa0 RCX: 00007f3a8e58e169 [ 326.769180][ T9045] RDX: 00002000000001c0 RSI: 00000000c0045002 RDI: 0000000000000005 [ 326.769189][ T9045] RBP: 00007f3a8f44b090 R08: 0000000000000000 R09: 0000000000000000 [ 326.769199][ T9045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 326.769207][ T9045] R13: 0000000000000000 R14: 00007f3a8e7b5fa0 R15: 00007f3a8e8dfa28 [ 326.769229][ T9045] [ 327.627905][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 327.627945][ T30] audit: type=1326 audit(1744725193.842:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9050 comm="syz.3.919" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8512d8e169 code=0x0 [ 327.712935][ T9052] netlink: 8 bytes leftover after parsing attributes in process `syz.1.920'. [ 327.737576][ T9054] netlink: 12 bytes leftover after parsing attributes in process `syz.3.919'. [ 327.794695][ T9052] netlink: 272 bytes leftover after parsing attributes in process `syz.1.920'. [ 328.516438][ T5894] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 328.765579][ T5894] usb 5-1: config 0 has no interfaces? [ 328.782899][ T5894] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 328.792127][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.806588][ T5894] usb 5-1: Product: syz [ 328.811668][ T5894] usb 5-1: Manufacturer: syz [ 328.819385][ T5894] usb 5-1: SerialNumber: syz [ 328.985365][ T10] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 329.157929][ T5894] usb 5-1: config 0 descriptor?? [ 329.326050][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 329.402463][ T5839] usb 3-1: unable to get BOS descriptor or descriptor too short [ 329.424039][ T5839] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 329.458448][ T10] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 329.473397][ T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 329.473403][ T5839] usb 3-1: can't read configurations, error -71 [ 329.473428][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 329.592813][ T10] usb 2-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 329.651673][ T10] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 329.736516][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 329.775375][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.805684][ T9090] netlink: 24 bytes leftover after parsing attributes in process `syz.3.931'. [ 329.827259][ T10] usbtmc 2-1:16.0: bulk endpoints not found [ 330.618170][ T5839] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 330.779016][ T5839] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 330.790493][ T5839] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 330.809476][ T5839] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 330.885364][ T5839] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.961922][ T9092] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 330.994585][ T5839] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 331.468933][ T5839] usb 3-1: USB disconnect, device number 46 [ 331.745756][ T6240] udevd[6240]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 332.080054][ T10] usb 2-1: USB disconnect, device number 44 [ 332.468033][ T5894] usb 5-1: USB disconnect, device number 49 [ 332.731029][ T9115] xt_CT: You must specify a L4 protocol and not use inversions on it [ 332.746174][ T5839] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 333.066444][ T5839] usb 2-1: unable to get BOS descriptor or descriptor too short [ 333.078640][ T5839] usb 2-1: not running at top speed; connect to a high speed hub [ 333.092840][ T5839] usb 2-1: config 9 has an invalid interface number: 87 but max is 0 [ 333.111779][ T5839] usb 2-1: config 9 has no interface number 0 [ 333.131844][ T5839] usb 2-1: config 9 interface 87 altsetting 127 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 333.190706][ T9124] syzkaller0: tun_chr_ioctl cmd 1074812117 [ 333.204317][ T5839] usb 2-1: config 9 interface 87 has no altsetting 0 [ 333.211480][ T2154] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 333.231802][ T9127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.249091][ T5839] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=a8.d0 [ 333.261999][ T5839] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.262209][ T9127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.272728][ T5839] usb 2-1: Product: syz [ 333.303922][ T5839] usb 2-1: Manufacturer: syz [ 333.327152][ T5839] usb 2-1: SerialNumber: syz [ 333.388250][ T2154] usb 5-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 333.398930][ T2154] usb 5-1: config 0 interface 0 has no altsetting 0 [ 333.408798][ T2154] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 333.425878][ T2154] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.446539][ T2154] usb 5-1: config 0 descriptor?? [ 333.572413][ T9117] netlink: 'syz.1.938': attribute type 1 has an invalid length. [ 333.749285][ T9133] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 333.802120][ T9117] veth3: entered promiscuous mode [ 333.841168][ T9117] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 333.892095][ T2154] kye 0003:0458:5013.0009: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 333.933756][ T5839] usb 2-1: USB disconnect, device number 45 [ 334.004896][ T2154] kye 0003:0458:5013.0009: hidraw0: USB HID v8.00 Device [HID 0458:5013] on usb-dummy_hcd.4-1/input0 [ 334.036009][ T2154] kye 0003:0458:5013.0009: tablet-enabling feature report not found [ 334.078723][ T2154] kye 0003:0458:5013.0009: tablet enabling failed [ 334.129277][ T2154] usb 5-1: USB disconnect, device number 50 [ 334.454806][ T9146] input: syz0 as /devices/virtual/input/input24 [ 334.916962][ T9159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.933288][ T9159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.946443][ T30] audit: type=1400 audit(1744725201.162:262): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=9153 comm="syz.0.949" [ 335.096287][ T8509] schedule_timeout: wrong timeout value ffffffffffffffff [ 335.103806][ T8509] CPU: 0 UID: 0 PID: 8509 Comm: vivid-000-vid-o Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 335.103828][ T8509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 335.103838][ T8509] Call Trace: [ 335.103844][ T8509] [ 335.103851][ T8509] dump_stack_lvl+0x241/0x360 [ 335.103879][ T8509] ? __pfx_dump_stack_lvl+0x10/0x10 [ 335.103903][ T8509] ? __pfx__printk+0x10/0x10 [ 335.103932][ T8509] schedule_timeout+0x21a/0x2b0 [ 335.103947][ T8509] ? __pfx_schedule_timeout+0x10/0x10 [ 335.103967][ T8509] ? prepare_to_wait_event+0x3ac/0x460 [ 335.103981][ T8509] ? prepare_to_wait_event+0x40c/0x460 [ 335.104001][ T8509] vivid_thread_vid_out+0x1476/0x1c70 [ 335.104047][ T8509] ? __pfx_vivid_thread_vid_out+0x10/0x10 [ 335.104072][ T8509] ? __pfx_autoremove_wake_function+0x10/0x10 [ 335.104097][ T8509] ? __kthread_parkme+0x1a8/0x200 [ 335.104118][ T8509] ? __pfx_vivid_thread_vid_out+0x10/0x10 [ 335.104136][ T8509] kthread+0x7b7/0x940 [ 335.104157][ T8509] ? __pfx_vivid_thread_vid_out+0x10/0x10 [ 335.104175][ T8509] ? __pfx_kthread+0x10/0x10 [ 335.104193][ T8509] ? __pfx_kthread+0x10/0x10 [ 335.104213][ T8509] ? __pfx_kthread+0x10/0x10 [ 335.104232][ T8509] ? __pfx_kthread+0x10/0x10 [ 335.104252][ T8509] ? _raw_spin_unlock_irq+0x23/0x50 [ 335.104273][ T8509] ? lockdep_hardirqs_on+0x9d/0x150 [ 335.104291][ T8509] ? __pfx_kthread+0x10/0x10 [ 335.104312][ T8509] ret_from_fork+0x4b/0x80 [ 335.104326][ T8509] ? __pfx_kthread+0x10/0x10 [ 335.104346][ T8509] ret_from_fork_asm+0x1a/0x30 [ 335.104372][ T8509] [ 335.258298][ C0] vkms_vblank_simulate: vblank timer overrun [ 335.316106][ T5839] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 335.486067][ T10] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 335.616594][ T5839] usb 2-1: Using ep0 maxpacket: 8 [ 335.670328][ T10] usb 5-1: config 0 has no interfaces? [ 335.678722][ T5839] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 335.714598][ T5839] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 335.719463][ T10] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 335.740729][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.751694][ T10] usb 5-1: Product: syz [ 335.756272][ T10] usb 5-1: Manufacturer: syz [ 335.762208][ T10] usb 5-1: SerialNumber: syz [ 335.794366][ T10] usb 5-1: config 0 descriptor?? [ 335.844523][ T5839] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 335.888768][ T5839] usb 2-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 336.022385][ T5839] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 336.064329][ T5839] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 336.116095][ T10] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 336.130861][ T5839] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.160370][ T5839] usbtmc 2-1:16.0: bulk endpoints not found [ 336.284523][ T10] usb 3-1: config 0 has no interfaces? [ 336.303520][ T10] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 336.314156][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.322718][ T10] usb 3-1: Product: syz [ 336.328619][ T10] usb 3-1: Manufacturer: syz [ 336.333376][ T10] usb 3-1: SerialNumber: syz [ 336.345795][ T10] usb 3-1: config 0 descriptor?? [ 336.652555][ T9173] AppArmor: change_hat: Invalid input '0x00p0000000000002^' [ 338.456661][ T10] usb 2-1: USB disconnect, device number 46 [ 338.573415][ T9187] xt_hashlimit: size too large, truncated to 1048576 [ 338.919838][ T10] usb 3-1: USB disconnect, device number 47 [ 339.010648][ T5839] usb 5-1: USB disconnect, device number 51 [ 339.154087][ T9198] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan0, syncid = 262145, id = 0 [ 339.978646][ T9210] netlink: 8 bytes leftover after parsing attributes in process `syz.1.963'. [ 340.916053][ T5918] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 341.086045][ T5918] usb 5-1: Using ep0 maxpacket: 8 [ 341.142746][ T5918] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 341.205027][ T5918] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 341.307080][ T5918] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 341.336586][ T5918] usb 5-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 341.490006][ T5918] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 341.566051][ T2154] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 341.593805][ T5918] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 342.052971][ T5918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.083150][ T5918] usbtmc 5-1:16.0: bulk endpoints not found [ 342.253590][ T2154] usb 2-1: config 0 has no interfaces? [ 342.295261][ T2154] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 342.356060][ T2154] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.379475][ T2154] usb 2-1: Product: syz [ 342.420063][ T2154] usb 2-1: Manufacturer: syz [ 342.438433][ T2154] usb 2-1: SerialNumber: syz [ 342.457442][ T2154] usb 2-1: config 0 descriptor?? [ 342.795866][ T9251] IPVS: Unknown mcast interface: vlan0 [ 343.140513][ T9240] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.363723][ T9254] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 344.033191][ T5918] usb 5-1: USB disconnect, device number 52 [ 344.334556][ T9264] netlink: 52 bytes leftover after parsing attributes in process `syz.2.981'. [ 344.855899][ T9278] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 344.882877][ T9278] netlink: 24 bytes leftover after parsing attributes in process `syz.3.984'. [ 344.981995][ T2154] usb 2-1: USB disconnect, device number 47 [ 345.176237][ T5918] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 345.541961][ T5918] usb 5-1: config 0 has no interfaces? [ 345.563155][ T5918] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 345.637263][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.638457][ T5918] usb 5-1: Product: syz [ 345.638479][ T5918] usb 5-1: Manufacturer: syz [ 345.638496][ T5918] usb 5-1: SerialNumber: syz [ 345.656778][ T5918] usb 5-1: config 0 descriptor?? [ 346.858882][ T5918] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 347.216873][ T5918] usb 2-1: Using ep0 maxpacket: 8 [ 347.260663][ T5918] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 347.292124][ T5918] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 347.341303][ T5918] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 347.408800][ T5918] usb 2-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 347.471272][ T5918] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 347.553335][ T5918] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 347.612271][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.819810][ T5918] usbtmc 2-1:16.0: bulk endpoints not found [ 348.244340][ T2154] usb 5-1: USB disconnect, device number 53 [ 348.770275][ T9317] netlink: 'syz.2.992': attribute type 16 has an invalid length. [ 348.796027][ T2154] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 348.804554][ T9319] FAULT_INJECTION: forcing a failure. [ 348.804554][ T9319] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 348.824173][ T9317] netlink: 'syz.2.992': attribute type 3 has an invalid length. [ 348.832255][ T9317] netlink: 64026 bytes leftover after parsing attributes in process `syz.2.992'. [ 348.846365][ T9319] CPU: 0 UID: 0 PID: 9319 Comm: syz.3.996 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 348.846395][ T9319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 348.846408][ T9319] Call Trace: [ 348.846416][ T9319] [ 348.846424][ T9319] dump_stack_lvl+0x241/0x360 [ 348.846463][ T9319] ? __pfx_dump_stack_lvl+0x10/0x10 [ 348.846494][ T9319] ? __pfx__printk+0x10/0x10 [ 348.846537][ T9319] should_fail_ex+0x424/0x570 [ 348.846564][ T9319] _copy_from_user+0x2d/0xb0 [ 348.846597][ T9319] copy_msghdr_from_user+0xb3/0x580 [ 348.846637][ T9319] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 348.846664][ T9319] ? __fget_files+0x2a/0x420 [ 348.846687][ T9319] ? __fget_files+0x2a/0x420 [ 348.846716][ T9319] do_recvmmsg+0x3bf/0xab0 [ 348.846751][ T9319] ? __pfx_do_recvmmsg+0x10/0x10 [ 348.846797][ T9319] ? __lock_acquire+0xad5/0xd80 [ 348.846861][ T9319] ? get_timespec64+0x1a8/0x290 [ 348.846900][ T9319] __x64_sys_recvmmsg+0x1ca/0x260 [ 348.846927][ T9319] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 348.846959][ T9319] ? do_syscall_64+0xb6/0x230 [ 348.846988][ T9319] do_syscall_64+0xf3/0x230 [ 348.847014][ T9319] ? clear_bhb_loop+0x45/0xa0 [ 348.847039][ T9319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.847059][ T9319] RIP: 0033:0x7f8512d8e169 [ 348.847078][ T9319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 348.847095][ T9319] RSP: 002b:00007f8513b3d038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 348.847129][ T9319] RAX: ffffffffffffffda RBX: 00007f8512fb5fa0 RCX: 00007f8512d8e169 [ 348.847144][ T9319] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 348.847159][ T9319] RBP: 00007f8513b3d090 R08: 0000200000003700 R09: 0000000000000000 [ 348.847173][ T9319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 348.847185][ T9319] R13: 0000000000000000 R14: 00007f8512fb5fa0 R15: 00007f85130dfa28 [ 348.847215][ T9319] [ 349.136124][ T2154] usb 5-1: too many configurations: 32, using maximum allowed: 8 [ 349.164742][ T2154] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 349.176870][ T2154] usb 5-1: can't read configurations, error -61 [ 349.326204][ T2154] usb 5-1: new full-speed USB device number 55 using dummy_hcd [ 349.428234][ T9325] netlink: 152 bytes leftover after parsing attributes in process `syz.3.998'. [ 349.457793][ T9329] bond0: (slave bond_slave_0): Releasing backup interface [ 349.557782][ T9329] bond0: (slave bond_slave_1): Releasing backup interface [ 349.576602][ T2154] usb 5-1: too many configurations: 32, using maximum allowed: 8 [ 349.592459][ T2154] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 349.600729][ T2154] usb 5-1: can't read configurations, error -61 [ 349.610238][ T2154] usb usb5-port1: attempt power cycle [ 349.644849][ T9329] team0: Port device team_slave_0 removed [ 349.665519][ T9329] team0: Port device team_slave_1 removed [ 349.672801][ T9329] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 349.680416][ T9329] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 349.693577][ T9329] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 349.720961][ T9329] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 349.770128][ T10] usb 2-1: USB disconnect, device number 48 [ 349.966081][ T2154] usb 5-1: new full-speed USB device number 56 using dummy_hcd [ 350.007611][ T2154] usb 5-1: too many configurations: 32, using maximum allowed: 8 [ 350.017440][ T2154] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 350.025252][ T2154] usb 5-1: can't read configurations, error -61 [ 350.115323][ T9329] bond0: (slave netdevsim0): Releasing backup interface [ 350.166082][ T2154] usb 5-1: new full-speed USB device number 57 using dummy_hcd [ 350.224706][ T2154] usb 5-1: too many configurations: 32, using maximum allowed: 8 [ 350.234576][ T2154] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 350.242623][ T2154] usb 5-1: can't read configurations, error -61 [ 350.249897][ T2154] usb usb5-port1: unable to enumerate USB device [ 350.847238][ T9343] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1003'. [ 351.228307][ T10] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 351.539442][ T10] usb 4-1: config 0 has no interfaces? [ 351.605355][ T10] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 351.626239][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.634480][ T10] usb 4-1: Product: syz [ 351.639022][ T10] usb 4-1: Manufacturer: syz [ 351.643831][ T10] usb 4-1: SerialNumber: syz [ 351.916538][ T10] usb 4-1: config 0 descriptor?? [ 352.346510][ T9347] netlink: 'syz.3.1002': attribute type 1 has an invalid length. [ 352.727240][ T9369] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1010'. [ 352.890721][ T9371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.899786][ T9371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.420742][ T9364] dccp_close: ABORT with 28 bytes unread [ 354.596045][ T120] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 354.795785][ T120] usb 2-1: config 3 has an invalid interface number: 168 but max is 3 [ 354.805334][ T120] usb 2-1: config 3 contains an unexpected descriptor of type 0x2, skipping [ 354.820394][ T120] usb 2-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 354.834695][ T120] usb 2-1: config 3 has an invalid interface number: 157 but max is 3 [ 354.849631][ T120] usb 2-1: config 3 has an invalid interface number: 98 but max is 3 [ 354.870844][ T120] usb 2-1: config 3 has an invalid interface number: 131 but max is 3 [ 354.882639][ T120] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 354.901759][ T120] usb 2-1: config 3 has no interface number 0 [ 354.908066][ T120] usb 2-1: config 3 has no interface number 1 [ 354.911865][ T5894] usb 4-1: USB disconnect, device number 55 [ 354.914169][ T120] usb 2-1: config 3 has no interface number 2 [ 354.926506][ T120] usb 2-1: config 3 has no interface number 3 [ 354.932700][ T120] usb 2-1: config 3 interface 168 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 354.943992][ T120] usb 2-1: config 3 interface 168 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 354.958069][ T120] usb 2-1: config 3 interface 168 altsetting 0 has an endpoint descriptor with address 0x5F, changing to 0xF [ 354.970031][ T120] usb 2-1: config 3 interface 168 altsetting 0 endpoint 0xF has invalid maxpacket 15218, setting to 64 [ 354.996946][ T120] usb 2-1: config 3 interface 168 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 355.010956][ T9389] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 355.034035][ T30] audit: type=1326 audit(1744725221.242:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9387 comm="syz.4.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9158e169 code=0x7ffc0000 [ 355.046036][ T120] usb 2-1: config 3 interface 168 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 355.086244][ T120] usb 2-1: config 3 interface 168 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 355.104589][ T120] usb 2-1: config 3 interface 168 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 355.129312][ T30] audit: type=1326 audit(1744725221.272:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9387 comm="syz.4.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f4c9158e169 code=0x7ffc0000 [ 355.169607][ T30] audit: type=1326 audit(1744725221.272:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9387 comm="syz.4.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9158e169 code=0x7ffc0000 [ 355.174121][ T120] usb 2-1: config 3 interface 168 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 355.217168][ T120] usb 2-1: config 3 interface 168 altsetting 0 has 11 endpoint descriptors, different from the interface descriptor's value: 10 [ 355.257383][ T30] audit: type=1326 audit(1744725221.272:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9387 comm="syz.4.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9158e169 code=0x7ffc0000 [ 355.279708][ C1] vkms_vblank_simulate: vblank timer overrun [ 355.293650][ T120] usb 2-1: config 3 interface 157 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 355.304639][ T120] usb 2-1: config 3 interface 157 altsetting 0 has an endpoint descriptor with address 0x7D, changing to 0xD [ 355.350753][ T120] usb 2-1: config 3 interface 157 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 355.470981][ T9398] --map-set only usable from mangle table [ 355.496567][ T120] usb 2-1: config 3 interface 157 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 355.508100][ T120] usb 2-1: config 3 interface 157 altsetting 0 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 355.536084][ T5894] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 355.696650][ T120] usb 2-1: config 3 interface 157 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 355.709288][ T120] usb 2-1: config 3 interface 157 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 355.720843][ T5894] usb 4-1: device descriptor read/64, error -71 [ 355.721377][ T120] usb 2-1: config 3 interface 157 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 355.738528][ T120] usb 2-1: config 3 interface 157 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 355.750004][ T120] usb 2-1: config 3 interface 157 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 355.762808][ T120] usb 2-1: config 3 interface 157 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 355.775173][ T120] usb 2-1: config 3 interface 157 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 355.880197][ T120] usb 2-1: config 3 interface 157 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 355.927473][ T9402] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1021'. [ 356.001259][ T120] usb 2-1: config 3 interface 157 altsetting 0 has 15 endpoint descriptors, different from the interface descriptor's value: 14 [ 356.082353][ T120] usb 2-1: config 3 interface 98 altsetting 121 has a duplicate endpoint with address 0x2, skipping [ 356.096275][ T5894] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 356.130290][ T120] usb 2-1: config 3 interface 98 altsetting 121 has a duplicate endpoint with address 0x4, skipping [ 356.168302][ T120] usb 2-1: config 3 interface 98 altsetting 121 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 356.169860][ T30] audit: type=1326 audit(1744725222.382:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9409 comm="syz.0.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f28ce38e169 code=0x7fc00000 [ 356.184391][ T120] usb 2-1: config 3 interface 98 altsetting 121 has a duplicate endpoint with address 0x9, skipping [ 356.235631][ T120] usb 2-1: config 3 interface 98 altsetting 121 has a duplicate endpoint with address 0xF, skipping [ 356.256147][ T5894] usb 4-1: device descriptor read/64, error -71 [ 356.262967][ T120] usb 2-1: config 3 interface 98 altsetting 121 has a duplicate endpoint with address 0x1, skipping [ 356.296216][ T120] usb 2-1: config 3 interface 98 altsetting 121 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 356.316328][ T120] usb 2-1: config 3 interface 131 altsetting 127 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 356.316394][ T120] usb 2-1: config 3 interface 98 has no altsetting 0 [ 356.316416][ T120] usb 2-1: config 3 interface 131 has no altsetting 0 [ 356.318743][ T120] usb 2-1: Dual-Role OTG device on HNP port [ 356.319047][ T120] usb 2-1: New USB device found, idVendor=0421, idProduct=0444, bcdDevice= 1.00 [ 356.319078][ T120] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.319101][ T120] usb 2-1: Product: ఊ [ 356.319118][ T120] usb 2-1: Manufacturer: 셈숕嵎墒ᒲፈ嶘ꑔ舘猈⢃춬調졏혝ͥ⢰륕킗䝿栤㕛牐當옒墣㽭㠳혍窍◄靰ҡ䂼쫍묞䓣쪆॑ዂ뗬 [ 356.319144][ T120] usb 2-1: SerialNumber: syz [ 356.323624][ T9386] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 356.324019][ T9386] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 356.324160][ T9386] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 356.372612][ T5894] usb usb4-port1: attempt power cycle [ 356.601984][ T9422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.613525][ T9422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.746091][ T5894] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 356.805186][ T5894] usb 4-1: device descriptor read/8, error -71 [ 356.855268][ T120] usb-storage 2-1:3.168: USB Mass Storage device detected [ 356.890861][ T120] usb-storage 2-1:3.168: Quirks match for vid 0421 pid 0444: 30 [ 357.171667][ T120] usb-storage 2-1:3.157: USB Mass Storage device detected [ 357.190273][ T120] usb-storage 2-1:3.157: Quirks match for vid 0421 pid 0444: 30 [ 357.206125][ T5894] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 357.286666][ T5894] usb 4-1: device descriptor read/8, error -71 [ 357.396538][ T5894] usb usb4-port1: unable to enumerate USB device [ 357.399713][ T120] usb-storage 2-1:3.98: USB Mass Storage device detected [ 357.462034][ T120] usb-storage 2-1:3.98: Quirks match for vid 0421 pid 0444: 30 [ 357.494941][ T9439] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1028'. [ 357.715035][ T120] usb-storage 2-1:3.131: USB Mass Storage device detected [ 357.821229][ T120] usb-storage 2-1:3.131: Quirks match for vid 0421 pid 0444: 30 [ 357.901572][ T120] usb 2-1: USB disconnect, device number 49 [ 358.416350][ T120] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 358.676754][ T47] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 358.684472][ T5894] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 358.762745][ T120] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 358.792200][ T120] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 358.856249][ T5894] usb 4-1: Using ep0 maxpacket: 8 [ 358.863333][ T5894] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 358.872188][ T5894] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 358.907502][ T47] usb 3-1: config 0 has no interfaces? [ 358.926476][ T120] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 358.930686][ T47] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 358.951126][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.970472][ T5894] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 358.980708][ T120] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 358.981410][ T47] usb 3-1: Product: syz [ 359.001146][ T5894] usb 4-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 359.014273][ T5894] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 359.035451][ T47] usb 3-1: Manufacturer: syz [ 359.045001][ T47] usb 3-1: SerialNumber: syz [ 359.049923][ T120] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 359.052248][ T5894] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 359.075243][ T47] usb 3-1: config 0 descriptor?? [ 359.095642][ T120] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.111881][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.151483][ T5894] usbtmc 4-1:16.0: bulk endpoints not found [ 359.218536][ T120] usb 2-1: config 0 descriptor?? [ 359.759030][ T120] plantronics 0003:047F:FFFF.000A: item fetching failed at offset 13/15 [ 359.784788][ T120] plantronics 0003:047F:FFFF.000A: parse failed [ 359.793747][ T120] plantronics 0003:047F:FFFF.000A: probe with driver plantronics failed with error -22 [ 359.942002][ T9465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.984525][ T9465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.034328][ T9447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.043871][ T9447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.098790][ T5918] usb 2-1: USB disconnect, device number 50 [ 360.829081][ T30] audit: type=1326 audit(1744725227.042:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9483 comm="syz.4.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9158e169 code=0x7ffc0000 [ 360.903122][ T30] audit: type=1326 audit(1744725227.042:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9483 comm="syz.4.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9158e169 code=0x7ffc0000 [ 360.950495][ T30] audit: type=1326 audit(1744725227.042:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9483 comm="syz.4.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f4c9158e169 code=0x7ffc0000 [ 360.980796][ T30] audit: type=1326 audit(1744725227.042:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9483 comm="syz.4.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9158e169 code=0x7ffc0000 [ 361.011584][ T30] audit: type=1326 audit(1744725227.042:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9483 comm="syz.4.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9158e169 code=0x7ffc0000 [ 361.038148][ T30] audit: type=1326 audit(1744725227.042:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9483 comm="syz.4.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4c9158e169 code=0x7ffc0000 [ 361.060315][ C1] vkms_vblank_simulate: vblank timer overrun [ 361.070918][ T30] audit: type=1326 audit(1744725227.042:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9483 comm="syz.4.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9158e169 code=0x7ffc0000 [ 361.093184][ C1] vkms_vblank_simulate: vblank timer overrun [ 361.104882][ T30] audit: type=1326 audit(1744725227.042:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9483 comm="syz.4.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9158e169 code=0x7ffc0000 [ 361.127263][ C1] vkms_vblank_simulate: vblank timer overrun [ 361.216371][ T5839] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 361.317927][ T9496] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1045'. [ 361.341917][ T9496] macvtap2: entered promiscuous mode [ 361.347851][ T9496] macvtap2: entered allmulticast mode [ 361.364131][ T5839] usb 2-1: device descriptor read/64, error -71 [ 361.367272][ T9496] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1045'. [ 361.403497][ T120] usb 3-1: USB disconnect, device number 48 [ 361.486151][ T5918] usb 4-1: USB disconnect, device number 60 [ 361.620757][ T30] audit: type=1326 audit(1744725227.822:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9488 comm="syz.0.1043" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f28ce38e169 code=0x0 [ 361.642442][ C1] vkms_vblank_simulate: vblank timer overrun [ 361.666130][ T5839] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 361.711849][ T9507] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 361.737969][ T9507] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 361.806386][ T5839] usb 2-1: device descriptor read/64, error -71 [ 361.916525][ T5839] usb usb2-port1: attempt power cycle [ 362.103422][ T9517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.117550][ T9517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.134874][ T9517] x_tables: duplicate underflow at hook 2 [ 362.336035][ T5839] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 362.366968][ T5839] usb 2-1: device descriptor read/8, error -71 [ 362.536566][ T5918] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 362.659821][ T5839] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 362.698181][ T5839] usb 2-1: device descriptor read/8, error -71 [ 362.748793][ T9525] input: syz1 as /devices/virtual/input/input26 [ 362.769968][ T5918] usb 5-1: config 0 has no interfaces? [ 362.825542][ T5918] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 362.826559][ T5839] usb usb2-port1: unable to enumerate USB device [ 362.860084][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.888570][ T5918] usb 5-1: Product: syz [ 362.892936][ T5918] usb 5-1: Manufacturer: syz [ 362.904520][ T5918] usb 5-1: SerialNumber: syz [ 362.938352][ T5918] usb 5-1: config 0 descriptor?? [ 363.026128][ T47] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 363.173959][ T9523] program syz.4.1055 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 363.230562][ T47] usb 4-1: Using ep0 maxpacket: 8 [ 363.244471][ T47] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 363.340384][ T47] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 363.406283][ T47] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 363.430882][ T47] usb 4-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 363.491813][ T47] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 363.533016][ T47] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 363.560369][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.602529][ T47] usbtmc 4-1:16.0: bulk endpoints not found [ 364.204488][ T9543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1062'. [ 364.705265][ T9554] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1063'. [ 364.769315][ T9558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.794878][ T9558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.016271][ T5839] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 365.175506][ T120] usb 5-1: USB disconnect, device number 58 [ 365.186348][ T5839] usb 2-1: Using ep0 maxpacket: 32 [ 365.215644][ T5839] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 365.240468][ T5839] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 365.269665][ T5839] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 365.300083][ T5839] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 365.324413][ T5839] usb 2-1: config 0 interface 0 has no altsetting 0 [ 365.342502][ T5839] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 365.354779][ T5839] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 365.372964][ T5839] usb 2-1: Product: syz [ 365.398104][ T5839] usb 2-1: Manufacturer: syz [ 365.404205][ T5839] usb 2-1: SerialNumber: syz [ 365.526875][ T5839] usb 2-1: config 0 descriptor?? [ 365.533353][ T9567] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 365.549760][ T5839] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 365.569648][ T5839] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 365.788185][ T5839] usb 4-1: USB disconnect, device number 61 [ 366.054677][ T9571] sctp: [Deprecated]: syz.3.1069 (pid 9571) Use of struct sctp_assoc_value in delayed_ack socket option. [ 366.054677][ T9571] Use struct sctp_sack_info instead [ 366.639948][ T9578] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073053398785) [ 366.650728][ T9578] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 366.756054][ T47] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 366.886589][ T47] usb 3-1: device descriptor read/64, error -71 [ 367.126167][ T47] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 367.258390][ T47] usb 3-1: device descriptor read/64, error -71 [ 367.375319][ T9581] netlink: 'syz.3.1072': attribute type 7 has an invalid length. [ 367.376486][ T47] usb usb3-port1: attempt power cycle [ 367.413414][ T9581] : entered promiscuous mode [ 367.493977][ T9581] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1072'. [ 367.507465][ T9581] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 367.742831][ T47] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 367.754445][ T10] usb 2-1: USB disconnect, device number 55 [ 367.769946][ T10] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 367.775671][ T47] usb 3-1: device descriptor read/8, error -71 [ 368.077976][ T47] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 368.093636][ T9591] xt_hashlimit: size too large, truncated to 1048576 [ 368.110193][ T47] usb 3-1: device descriptor read/8, error -71 [ 368.226940][ T47] usb usb3-port1: unable to enumerate USB device [ 368.786255][ T10] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 368.946967][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 368.969258][ T10] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 368.979345][ T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 368.991766][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 369.001694][ T10] usb 2-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 369.014427][ T10] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 369.032711][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 369.053054][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.080781][ T10] usbtmc 2-1:16.0: bulk endpoints not found [ 369.265809][ T9610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.276143][ T9610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.308803][ T9610] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 369.315534][ T9610] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 369.328671][ T9610] vhci_hcd vhci_hcd.0: Device attached [ 369.354681][ T9610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.370376][ T9610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.746185][ T10] usb 34-1: SetAddress Request (2) to port 0 [ 369.752840][ T10] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd [ 369.996126][ T9] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 370.166148][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 370.208044][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 370.289433][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 370.425842][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 370.435101][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.443674][ T9] usb 4-1: Product: syz [ 370.451411][ T9] usb 4-1: Manufacturer: syz [ 370.456352][ T5839] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 370.468138][ T9] usb 4-1: SerialNumber: syz [ 370.481338][ T9628] netlink: zone id is out of range [ 370.483129][ T9627] netlink: zone id is out of range [ 370.506449][ T9] usb 4-1: config 0 descriptor?? [ 370.626223][ T5839] usb 3-1: Using ep0 maxpacket: 16 [ 370.652596][ T5839] usb 3-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice=f4.95 [ 370.769909][ T5839] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.782702][ T5839] usb 3-1: Product: syz [ 370.787577][ T9] appledisplay 4-1:0.0: Error while getting initial brightness: -110 [ 370.806523][ T5839] usb 3-1: Manufacturer: syz [ 370.808419][ T9] appledisplay 4-1:0.0: probe with driver appledisplay failed with error -110 [ 370.825828][ T5839] usb 3-1: SerialNumber: syz [ 370.835480][ T5839] usb 3-1: config 0 descriptor?? [ 370.946201][ T120] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 371.055624][ T5839] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 371.075280][ T5839] asix 3-1:0.0: probe with driver asix failed with error -71 [ 371.093306][ T5839] usb 3-1: USB disconnect, device number 53 [ 371.114192][ T120] usb 5-1: config 0 has no interfaces? [ 371.144261][ T120] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 371.155454][ T120] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.207361][ T120] usb 5-1: Product: syz [ 371.216449][ T120] usb 5-1: Manufacturer: syz [ 371.223407][ T120] usb 5-1: SerialNumber: syz [ 371.303798][ T120] usb 5-1: config 0 descriptor?? [ 371.426687][ T5839] usb 2-1: USB disconnect, device number 56 [ 371.555029][ T9631] netlink: 'syz.4.1086': attribute type 1 has an invalid length. [ 371.736508][ T9637] netlink: 'syz.2.1088': attribute type 15 has an invalid length. [ 371.776623][ T9637] netlink: 666 bytes leftover after parsing attributes in process `syz.2.1088'. [ 371.816178][ T5850] Bluetooth: hci4: command 0x0406 tx timeout [ 372.232460][ T9611] vhci_hcd: connection reset by peer [ 372.248858][ T9642] IPVS: Unknown mcast interface: vlan0 [ 372.358193][ T6099] vhci_hcd: stop threads [ 372.367174][ T6099] vhci_hcd: release socket [ 372.386219][ T6099] vhci_hcd: disconnect device [ 372.678432][ T5839] usb 4-1: USB disconnect, device number 62 [ 372.762938][ T9648] xt_hashlimit: size too large, truncated to 1048576 [ 373.095579][ T9651] netlink: 'syz.3.1092': attribute type 6 has an invalid length. [ 373.130157][ T9652] xt_HMARK: proto mask must be zero with L3 mode [ 373.146219][ T9651] netlink: 'syz.3.1092': attribute type 7 has an invalid length. [ 373.180020][ T9651] netlink: 'syz.3.1092': attribute type 8 has an invalid length. [ 373.245677][ T9651] netlink: 'syz.3.1092': attribute type 15 has an invalid length. [ 373.351359][ T47] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 373.542613][ T47] usb 2-1: config 0 has no interfaces? [ 373.558079][ T47] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 373.572587][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.650662][ T120] usb 5-1: USB disconnect, device number 59 [ 373.691893][ T47] usb 2-1: Product: syz [ 373.702034][ T47] usb 2-1: Manufacturer: syz [ 373.718756][ T47] usb 2-1: SerialNumber: syz [ 373.748469][ T47] usb 2-1: config 0 descriptor?? [ 373.857357][ T5918] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 374.002831][ T9654] program syz.1.1091 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 374.017823][ T5918] usb 4-1: device descriptor read/64, error -71 [ 374.336095][ T5918] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 374.426487][ T9670] sctp: [Deprecated]: syz.2.1098 (pid 9670) Use of struct sctp_assoc_value in delayed_ack socket option. [ 374.426487][ T9670] Use struct sctp_sack_info instead [ 374.456083][ T2154] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 374.506913][ T5918] usb 4-1: device descriptor read/64, error -71 [ 374.616275][ T2154] usb 5-1: Using ep0 maxpacket: 8 [ 374.616631][ T5918] usb usb4-port1: attempt power cycle [ 374.666974][ T2154] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 374.696167][ T2154] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 374.856889][ T10] usb 34-1: device descriptor read/8, error -110 [ 375.002736][ T2154] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 375.013228][ T2154] usb 5-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 375.055171][ T2154] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 375.070309][ T2154] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 375.106396][ T2154] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.181773][ T2154] usbtmc 5-1:16.0: bulk endpoints not found [ 375.266089][ T5918] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 375.306933][ T5918] usb 4-1: device descriptor read/8, error -71 [ 375.397840][ T10] usb usb34-port1: attempt power cycle [ 375.441315][ T9678] xt_CT: You must specify a L4 protocol and not use inversions on it [ 375.570748][ T9674] syz.0.1099 (9674) used greatest stack depth: 18488 bytes left [ 375.578498][ T5918] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 375.612613][ T5918] usb 4-1: device descriptor read/8, error -71 [ 375.741775][ T5918] usb usb4-port1: unable to enumerate USB device [ 376.017831][ T10] usb usb34-port1: unable to enumerate USB device [ 376.273861][ T9691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.284607][ T9691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.358872][ T5918] usb 2-1: USB disconnect, device number 57 [ 376.856104][ T5918] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 377.029598][ T5918] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 377.056072][ T2154] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 377.056205][ T5918] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 377.086876][ T5918] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 377.133493][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.252740][ T2154] usb 4-1: config 0 has no interfaces? [ 377.286390][ T2154] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 377.295500][ T2154] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.382317][ T2154] usb 4-1: Product: syz [ 377.391794][ T5918] usb 2-1: usb_control_msg returned -32 [ 377.404935][ T5839] usb 5-1: USB disconnect, device number 60 [ 377.410334][ T5918] usbtmc 2-1:16.0: can't read capabilities [ 377.433947][ T2154] usb 4-1: Manufacturer: syz [ 377.442673][ T2154] usb 4-1: SerialNumber: syz [ 377.461826][ T2154] usb 4-1: config 0 descriptor?? [ 377.632329][ T9713] input: syz0 as /devices/virtual/input/input27 [ 377.750203][ T9696] netlink: 'syz.3.1105': attribute type 1 has an invalid length. [ 377.886502][ T5839] usb 5-1: new full-speed USB device number 61 using dummy_hcd [ 378.048102][ T5839] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 378.063017][ T5839] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 378.080469][ T5839] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 378.100663][ T9719] netlink: 'syz.1.1104': attribute type 7 has an invalid length. [ 378.110516][ T5839] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 378.123713][ T5839] usb 5-1: config 1 has no interface number 0 [ 378.144456][ T5839] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 378.173386][ T5839] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.220840][ T5839] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 378.413481][ T5839] snd_usb_pod 5-1:1.1: endpoint not available, using fallback values [ 378.429600][ T5839] snd_usb_pod 5-1:1.1: invalid control EP [ 378.443144][ T5839] snd_usb_pod 5-1:1.1: cannot start listening: -22 [ 378.456383][ T5839] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 378.465014][ T9724] xt_CT: You must specify a L4 protocol and not use inversions on it [ 378.474110][ T5839] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 378.622010][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.628726][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.648330][ T9711] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1110'. [ 378.648373][ T5918] usb 5-1: USB disconnect, device number 61 [ 378.673202][ T9726] IPVS: Unknown mcast interface: vlan0 [ 378.870031][ T9730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.878935][ T9730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.046055][ T5918] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 379.095828][ T9730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.121097][ T9730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.176147][ T5918] usb 5-1: device descriptor read/64, error -71 [ 379.236239][ T5839] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 379.391320][ T5839] usb 3-1: config 0 has no interfaces? [ 379.413528][ T5839] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 379.424204][ T5839] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.433720][ T5839] usb 3-1: Product: syz [ 379.434053][ T5918] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 379.443099][ T5839] usb 3-1: Manufacturer: syz [ 379.452061][ T5839] usb 3-1: SerialNumber: syz [ 379.520445][ T47] usb 2-1: USB disconnect, device number 58 [ 379.560745][ T5839] usb 3-1: config 0 descriptor?? [ 379.715154][ T47] usb 4-1: USB disconnect, device number 67 [ 379.726047][ T5918] usb 5-1: device descriptor read/64, error -71 [ 379.783304][ T9733] program syz.2.1114 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 379.862430][ T9739] netlink: 'syz.0.1119': attribute type 16 has an invalid length. [ 379.880743][ T9739] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.1119'. [ 379.916458][ T5918] usb usb5-port1: attempt power cycle [ 380.119293][ T9747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.139743][ T47] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 380.157079][ T9747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.276600][ T5918] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 380.310053][ T5918] usb 5-1: device descriptor read/8, error -71 [ 380.316919][ T47] usb 4-1: Using ep0 maxpacket: 32 [ 380.337697][ T47] usb 4-1: config 0 has no interfaces? [ 380.361747][ T47] usb 4-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 380.386812][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.410811][ T47] usb 4-1: Product: syz [ 380.421718][ T47] usb 4-1: Manufacturer: syz [ 380.438750][ T47] usb 4-1: SerialNumber: syz [ 380.462136][ T47] usb 4-1: config 0 descriptor?? [ 380.557169][ T5918] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 380.602697][ T5918] usb 5-1: device descriptor read/8, error -71 [ 380.713220][ T9737] syz.3.1117 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 380.728848][ T5918] usb usb5-port1: unable to enumerate USB device [ 380.821766][ T9737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.866644][ T9737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.269255][ T9737] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1117'. [ 381.688790][ T9761] random: crng reseeded on system resumption [ 381.956724][ T9764] xt_CT: You must specify a L4 protocol and not use inversions on it [ 382.317860][ T47] usb 3-1: USB disconnect, device number 54 [ 382.655593][ T9773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.680143][ T9773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.723157][ T9773] netlink: 'syz.0.1127': attribute type 1 has an invalid length. [ 383.096375][ T47] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 383.195407][ T5918] usb 4-1: USB disconnect, device number 68 [ 383.276027][ T47] usb 3-1: Using ep0 maxpacket: 8 [ 383.283744][ T47] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 383.301316][ T47] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 383.311316][ T47] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 383.327697][ T47] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 383.346969][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.364829][ T9787] xt_CT: You must specify a L4 protocol and not use inversions on it [ 383.439308][ T47] hub 3-1:1.0: bad descriptor, ignoring hub [ 383.446115][ T47] hub 3-1:1.0: probe with driver hub failed with error -5 [ 383.453917][ T47] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 383.787001][ T2154] usb 3-1: USB disconnect, device number 55 [ 383.910428][ T9796] netlink: 'syz.3.1136': attribute type 24 has an invalid length. [ 383.968090][ T9796] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1136'. [ 384.046629][ T47] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 384.166745][ T2154] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 384.251004][ T47] usb 2-1: config 0 has no interfaces? [ 384.263883][ T9803] xt_hashlimit: size too large, truncated to 1048576 [ 384.278149][ T47] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 384.293705][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.326487][ T2154] usb 3-1: Using ep0 maxpacket: 8 [ 384.333824][ T2154] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 384.374492][ T9804] xt_hashlimit: size too large, truncated to 1048576 [ 384.375986][ T47] usb 2-1: Product: syz [ 384.399538][ T2154] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 384.456231][ T47] usb 2-1: Manufacturer: syz [ 384.466075][ T2154] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 384.485299][ T47] usb 2-1: SerialNumber: syz [ 384.590597][ T5918] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 384.610915][ T47] usb 2-1: config 0 descriptor?? [ 384.617632][ T2154] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 384.646143][ T2154] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.669167][ T2154] hub 3-1:1.0: bad descriptor, ignoring hub [ 384.698205][ T2154] hub 3-1:1.0: probe with driver hub failed with error -5 [ 384.756915][ T2154] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 384.786971][ T5918] usb 4-1: Using ep0 maxpacket: 8 [ 384.801410][ T5918] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 384.844454][ T5918] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 384.889398][ T5918] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 384.895901][ T9794] program syz.1.1135 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 384.919015][ T5918] usb 4-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 384.935601][ T5918] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 384.956086][ T5839] usb 5-1: new low-speed USB device number 66 using dummy_hcd [ 384.975870][ T5918] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 384.986479][ T2154] usb 3-1: USB disconnect, device number 56 [ 385.012792][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.046739][ T5918] usbtmc 4-1:16.0: bulk endpoints not found [ 385.108670][ T5839] usb 5-1: config 252 has an invalid interface number: 101 but max is 0 [ 385.123909][ T5839] usb 5-1: config 252 has no interface number 0 [ 385.167375][ T5839] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 385.188067][ T5839] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.219425][ T5839] pvrusb2: Hardware description: Terratec Grabster AV400 [ 385.232507][ T5839] pvrusb2: ********** [ 385.236657][ T5839] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 385.254821][ T5839] pvrusb2: Important functionality might not be entirely working. [ 385.271556][ T5839] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 385.286097][ T5839] pvrusb2: ********** [ 385.445491][ T2344] pvrusb2: Invalid write control endpoint [ 385.561876][ T2344] pvrusb2: Invalid write control endpoint [ 385.572028][ T2344] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 385.584729][ T2344] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 385.593624][ T2344] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 385.650564][ T2344] pvrusb2: Device being rendered inoperable [ 385.663598][ T2344] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 385.697775][ T2344] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 385.729925][ T2344] pvrusb2: Attached sub-driver cx25840 [ 385.758509][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 385.774098][ T2154] usb 5-1: USB disconnect, device number 66 [ 385.831899][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 386.216975][ T9821] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1142'. [ 386.446076][ T5918] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 386.524444][ T120] usb 2-1: USB disconnect, device number 59 [ 386.674598][ T5918] usb 3-1: config 0 has no interfaces? [ 386.719515][ T5918] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 386.743545][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.760633][ T5918] usb 3-1: Product: syz [ 386.770390][ T5918] usb 3-1: Manufacturer: syz [ 386.793063][ T5918] usb 3-1: SerialNumber: syz [ 386.860878][ T5918] usb 3-1: config 0 descriptor?? [ 387.081726][ T9839] xt_CT: You must specify a L4 protocol and not use inversions on it [ 387.176274][ T120] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 387.210151][ T9836] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 387.270953][ T9] usb 4-1: USB disconnect, device number 69 [ 387.396985][ T120] usb 2-1: config 0 has no interfaces? [ 387.545688][ T120] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 387.555530][ T120] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.563729][ T120] usb 2-1: Product: syz [ 387.568266][ T120] usb 2-1: Manufacturer: syz [ 387.573058][ T120] usb 2-1: SerialNumber: syz [ 387.591141][ T120] usb 2-1: config 0 descriptor?? [ 387.653458][ T9819] AppArmor: change_hat: Invalid input '0x00p0000000000002^' [ 388.673747][ T9864] netlink: 'syz.4.1152': attribute type 13 has an invalid length. [ 388.773899][ T120] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 389.135512][ T9864] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 389.296696][ T9] usb 3-1: USB disconnect, device number 57 [ 389.826116][ T5839] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 390.326440][ T5839] usb 3-1: device descriptor read/64, error -71 [ 390.503785][ T9874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.569195][ T9874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.726054][ T5839] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 390.856203][ T5839] usb 3-1: device descriptor read/64, error -71 [ 390.966579][ T5839] usb usb3-port1: attempt power cycle [ 390.999964][ T9] usb 2-1: USB disconnect, device number 60 [ 391.206072][ T10] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 391.329518][ T5839] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 391.366065][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 391.372051][ T5839] usb 3-1: device descriptor read/8, error -71 [ 391.379831][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 391.407434][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 391.420663][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 391.435389][ T10] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 391.436037][ T2154] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 391.460920][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.514620][ T10] hub 4-1:1.0: bad descriptor, ignoring hub [ 391.539979][ T10] hub 4-1:1.0: probe with driver hub failed with error -5 [ 391.554506][ T10] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 391.625341][ T2154] usb 2-1: config 0 has no interfaces? [ 391.631300][ T5839] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 391.645696][ T2154] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 391.655233][ T2154] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.692830][ T5839] usb 3-1: device descriptor read/8, error -71 [ 391.699187][ T2154] usb 2-1: Product: syz [ 391.703385][ T2154] usb 2-1: Manufacturer: syz [ 391.717763][ T2154] usb 2-1: SerialNumber: syz [ 391.792974][ T2154] usb 2-1: config 0 descriptor?? [ 391.810417][ T10] usb 4-1: USB disconnect, device number 70 [ 391.827293][ T5839] usb usb3-port1: unable to enumerate USB device [ 392.061399][ T9880] program syz.1.1157 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 392.119705][ T120] usb 5-1: device descriptor read/64, error -71 [ 392.156036][ T10] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 392.326108][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 392.333598][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 392.344149][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 392.354270][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 392.377449][ T120] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 392.388151][ T10] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 392.401365][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.553527][ T10] hub 4-1:1.0: bad descriptor, ignoring hub [ 392.566658][ T120] usb 5-1: Using ep0 maxpacket: 8 [ 392.589583][ T120] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 392.619871][ T10] hub 4-1:1.0: probe with driver hub failed with error -5 [ 392.654641][ T120] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 392.739069][ T10] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 392.759409][ T120] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 392.779963][ T120] usb 5-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 392.819295][ T10] usb 4-1: USB disconnect, device number 71 [ 392.828346][ T120] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 392.839423][ T9890] xt_CT: You must specify a L4 protocol and not use inversions on it [ 392.849807][ T120] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 392.858975][ T120] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.908401][ T120] usbtmc 5-1:16.0: bulk endpoints not found [ 393.015366][ T9892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.025664][ T9892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 393.448462][ T9892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.482476][ T9892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.146369][ T10] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 394.308239][ T10] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 394.318014][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 394.333026][ T10] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 394.354000][ T10] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 394.390529][ T120] usb 2-1: USB disconnect, device number 61 [ 394.397123][ T10] usb 4-1: Manufacturer: syz [ 394.429817][ T10] usb 4-1: config 0 descriptor?? [ 394.646601][ T10] rc_core: IR keymap rc-hauppauge not found [ 394.663791][ T10] Registered IR keymap rc-empty [ 394.668117][ T9923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.679349][ T9923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.698231][ T10] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 394.731165][ T10] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input28 [ 394.850983][ T120] usb 5-1: USB disconnect, device number 68 [ 394.966495][ T9929] --map-set only usable from mangle table [ 395.466149][ T2154] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 396.045391][ T2154] usb 3-1: config 0 has no interfaces? [ 396.080601][ T2154] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 396.089925][ T2154] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.109557][ T2154] usb 3-1: Product: syz [ 396.119580][ T2154] usb 3-1: Manufacturer: syz [ 396.144819][ T2154] usb 3-1: SerialNumber: syz [ 396.168389][ T2154] usb 3-1: config 0 descriptor?? [ 396.959918][ T47] usb 4-1: USB disconnect, device number 72 [ 397.200436][ T2154] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 397.406764][ T5918] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 397.468893][ T2154] usb 5-1: config 0 has no interfaces? [ 397.481522][ T2154] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 397.513216][ T2154] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.538208][ T2154] usb 5-1: Product: syz [ 397.551810][ T2154] usb 5-1: Manufacturer: syz [ 397.557648][ T5918] usb 2-1: Using ep0 maxpacket: 32 [ 397.565271][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 397.579516][ T5918] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 397.620887][ T47] usb 4-1: new full-speed USB device number 73 using dummy_hcd [ 397.634376][ T5918] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 397.643604][ T2154] usb 5-1: SerialNumber: syz [ 397.648239][ T2154] usb 5-1: config 0 descriptor?? [ 397.666782][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 397.683586][ T5918] usb 2-1: Product: syz [ 397.688062][ T5918] usb 2-1: Manufacturer: syz [ 397.692777][ T5918] usb 2-1: SerialNumber: syz [ 397.704765][ T5918] usb 2-1: config 0 descriptor?? [ 397.712039][ T5918] hub 2-1:0.0: bad descriptor, ignoring hub [ 397.718907][ T5918] hub 2-1:0.0: probe with driver hub failed with error -5 [ 397.881424][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 397.892723][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 397.909840][ T47] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 397.921614][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.959393][ T47] usb 4-1: config 0 descriptor?? [ 398.329515][ T9960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.346588][ T9960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.443450][ T47] isku 0003:1E7D:319C.000B: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.3-1/input0 [ 398.666429][ T5839] usb 2-1: USB disconnect, device number 62 [ 398.723622][ T5839] usb 3-1: USB disconnect, device number 62 [ 399.138219][ T47] isku 0003:1E7D:319C.000B: couldn't init struct isku_device [ 399.180653][ T47] isku 0003:1E7D:319C.000B: couldn't install keyboard [ 399.201487][ T47] isku 0003:1E7D:319C.000B: probe with driver isku failed with error -71 [ 399.216192][ T10] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 399.265022][ T47] usb 4-1: USB disconnect, device number 73 [ 399.400290][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 399.407837][ T10] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 399.422493][ T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 399.452049][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 399.494969][ T10] usb 3-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 399.569251][ T10] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 399.627101][ T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 399.646611][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.678948][ T10] usbtmc 3-1:16.0: bulk endpoints not found [ 399.726672][ T10] usb 5-1: USB disconnect, device number 69 [ 400.026066][ T5918] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 400.251066][ T5918] usb 4-1: Using ep0 maxpacket: 32 [ 400.261099][ T5918] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 400.269644][ T5918] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 400.287185][ T5918] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 400.326780][ T5918] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 400.357604][ T5918] usb 4-1: config 0 interface 0 has no altsetting 0 [ 400.369654][ T5918] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 400.380456][ T5918] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 400.394314][ T5918] usb 4-1: Product: syz [ 400.398579][ T5918] usb 4-1: Manufacturer: syz [ 400.403170][ T5918] usb 4-1: SerialNumber: syz [ 400.452082][ T5918] usb 4-1: config 0 descriptor?? [ 400.459801][ T5918] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 400.661422][ T2154] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 401.068117][ T5918] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 401.276161][ T2154] usb 2-1: Using ep0 maxpacket: 32 [ 401.289774][ T2154] usb 2-1: no configurations [ 401.312440][ T2154] usb 2-1: can't read configurations, error -22 [ 401.468988][ T2154] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 401.506149][ T10] usb 4-1: USB disconnect, device number 74 [ 401.512126][ C0] ldusb 4-1:0.0: usb_submit_urb failed (-19) [ 401.523803][ T9994] ldusb 4-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 401.560145][ T10] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 401.636181][ T2154] usb 2-1: Using ep0 maxpacket: 32 [ 401.647225][ T2154] usb 2-1: no configurations [ 401.652051][ T2154] usb 2-1: can't read configurations, error -22 [ 401.679135][ T2154] usb usb2-port1: attempt power cycle [ 401.979732][ T5839] usb 3-1: USB disconnect, device number 63 [ 402.047264][ T2154] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 402.097380][ T2154] usb 2-1: Using ep0 maxpacket: 32 [ 402.103206][ T2154] usb 2-1: no configurations [ 402.109613][ T2154] usb 2-1: can't read configurations, error -22 [ 402.141006][T10006] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1190'. [ 402.246100][ T2154] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 402.288302][ T2154] usb 2-1: Using ep0 maxpacket: 32 [ 402.326109][ T2154] usb 2-1: no configurations [ 402.407813][T10010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.432247][T10010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.470736][ T2154] usb 2-1: can't read configurations, error -22 [ 402.499457][ T2154] usb usb2-port1: unable to enumerate USB device [ 402.536570][T10014] loop6: detected capacity change from 0 to 524287999 [ 402.661740][T10017] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 402.936903][T10010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.967961][T10010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.054944][T10039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.098228][T10039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.980213][T10051] netlink: 'syz.1.1205': attribute type 2 has an invalid length. [ 405.746491][T10060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.845084][T10060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.069764][T10064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.197109][T10064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.676196][ T10] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 406.716145][ T5892] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 406.836887][ T5839] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 406.876926][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 406.889117][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 406.904058][ T10] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 406.915437][ T5892] usb 2-1: config 0 has no interfaces? [ 406.922591][ T10] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 406.937433][ T5892] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 406.950126][ T10] usb 3-1: Product: syz [ 406.996167][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.004252][ T5892] usb 2-1: Product: syz [ 407.010287][ T10] usb 3-1: Manufacturer: syz [ 407.019906][ T10] usb 3-1: SerialNumber: syz [ 407.064685][ T5839] usb 5-1: config 0 has no interfaces? [ 407.068057][ T10] usb 3-1: config 0 descriptor?? [ 407.079852][ T5892] usb 2-1: Manufacturer: syz [ 407.084536][ T5892] usb 2-1: SerialNumber: syz [ 407.134418][T10075] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 407.174213][ T10] hub 3-1:0.0: bad descriptor, ignoring hub [ 407.198669][ T5892] usb 2-1: config 0 descriptor?? [ 407.224255][ T10] hub 3-1:0.0: probe with driver hub failed with error -5 [ 407.382445][ T5839] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 407.402027][ T5839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.429250][ T5839] usb 5-1: Product: syz [ 407.453925][ T5839] usb 5-1: Manufacturer: syz [ 407.474336][ T5839] usb 5-1: SerialNumber: syz [ 407.517989][ T5839] usb 5-1: config 0 descriptor?? [ 407.851024][T10075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.865275][T10075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.962891][T10089] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1217'. [ 408.236337][ T10] usb 3-1: USB disconnect, device number 64 [ 408.267947][T10092] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1218'. [ 408.282122][T10092] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0) [ 408.292244][T10092] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535 [ 408.378976][T10092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.421533][T10092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.598583][T10098] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 408.640961][T10098] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 409.825096][ T47] usb 5-1: USB disconnect, device number 70 [ 410.117899][ T10] usb 2-1: USB disconnect, device number 67 [ 410.275286][T10113] netlink: 'syz.0.1223': attribute type 4 has an invalid length. [ 410.283273][T10113] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1223'. [ 410.314648][T10113] : renamed from bond0 (while UP) [ 412.520066][T10133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.529996][T10133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.838322][T10141] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1231'. [ 412.916549][T10146] netlink: 'syz.2.1231': attribute type 10 has an invalid length. [ 412.928503][T10146] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1231'. [ 412.940579][T10146] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.007808][T10146] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.019418][T10146] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.031082][T10146] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.068315][T10146] team0: Port device geneve0 added [ 413.263423][T10150] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1231'. [ 413.377082][T10141] pim6reg: entered allmulticast mode [ 413.388066][T10137] pim6reg: left allmulticast mode [ 413.427235][ T10] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 413.587358][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 413.685814][ T10] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 413.698390][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 413.710739][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 413.756890][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 413.768485][ T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 413.782765][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 413.797679][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.029606][T10153] IPVS: Scheduler module ip_vs_ not found [ 414.094421][ T10] usb 4-1: GET_CAPABILITIES returned 0 [ 414.113110][ T10] usbtmc 4-1:16.0: can't read capabilities [ 414.285992][ T2154] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 414.447042][ T10] usb 4-1: USB disconnect, device number 75 [ 414.627847][ T2154] usb 3-1: device descriptor read/64, error -71 [ 414.688509][T10173] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 414.698782][ T5839] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 415.019742][ T2154] usb 3-1: new full-speed USB device number 66 using dummy_hcd [ 415.052466][ T5839] usb 2-1: config 0 has no interfaces? [ 415.074644][ T5839] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 415.083969][ T5839] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.093058][ T5839] usb 2-1: Product: syz [ 415.099733][ T5839] usb 2-1: Manufacturer: syz [ 415.110124][ T5839] usb 2-1: SerialNumber: syz [ 415.128080][ T5839] usb 2-1: config 0 descriptor?? [ 415.213731][ T2154] usb 3-1: device descriptor read/64, error -71 [ 415.341113][ T2154] usb usb3-port1: attempt power cycle [ 415.403188][T10171] AppArmor: change_hat: Invalid input '0x00p0000000000002^' [ 416.073523][ T2154] usb 3-1: new full-speed USB device number 67 using dummy_hcd [ 416.134203][ T2154] usb 3-1: device descriptor read/8, error -71 [ 416.428687][ T2154] usb 3-1: new full-speed USB device number 68 using dummy_hcd [ 416.456638][ T2154] usb 3-1: device descriptor read/8, error -71 [ 416.577024][ T2154] usb usb3-port1: unable to enumerate USB device [ 417.916340][ T2154] usb 2-1: USB disconnect, device number 68 [ 418.406917][T10218] dvmrp0: entered allmulticast mode [ 418.632660][T10226] syzkaller0: tun_chr_ioctl cmd 1074812117 [ 418.773555][T10228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1255'. [ 418.787201][T10228] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0) [ 418.802617][T10228] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535 [ 418.926025][ T5839] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 419.067645][ T2154] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 419.104733][ T5839] usb 3-1: Using ep0 maxpacket: 32 [ 419.243401][ T5839] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 419.269660][ T5839] usb 3-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=47.77 [ 419.281953][ T5839] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.301321][ T5839] usb 3-1: Product: syz [ 419.308806][ T5839] usb 3-1: Manufacturer: syz [ 419.313586][ T5839] usb 3-1: SerialNumber: syz [ 419.399327][ T2154] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 419.412177][ T2154] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 419.425138][ T5839] usb 3-1: config 0 descriptor?? [ 419.432665][T10234] misc userio: No port type given on /dev/userio [ 419.449577][ T5839] hdpvr 3-1:0.0: Could not find bulk-in endpoint [ 419.464424][ T2154] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 419.475805][ T5839] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12 [ 419.488156][ T2154] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.550115][ T2154] usb 4-1: config 0 descriptor?? [ 419.975150][ T2154] arvo 0003:1E7D:30D4.000C: collection stack underflow [ 419.982983][ T2154] arvo 0003:1E7D:30D4.000C: item 0 4 0 12 parsing failed [ 419.991165][ T2154] arvo 0003:1E7D:30D4.000C: parse failed [ 420.181913][T10232] delete_channel: no stack [ 420.211958][ T2154] arvo 0003:1E7D:30D4.000C: probe with driver arvo failed with error -22 [ 420.359352][ T2154] usb 4-1: USB disconnect, device number 76 [ 421.291096][T10251] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1261'. [ 421.529460][ T24] usb 3-1: USB disconnect, device number 69 [ 421.628091][T10255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.648341][T10255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.730036][T10255] program syz.0.1264 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 422.190116][T10272] trusted_key: syz.2.1267 sent an empty control message without MSG_MORE. [ 422.496076][ T120] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 422.798434][T10283] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1273'. [ 422.867118][ T120] usb 3-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 422.886148][ T120] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.899962][ T120] usb 3-1: Product: syz [ 422.904220][ T120] usb 3-1: Manufacturer: syz [ 422.909755][ T120] usb 3-1: SerialNumber: syz [ 422.916267][ T2154] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 422.917883][ T120] usb 3-1: config 0 descriptor?? [ 423.285802][ T2154] usb 4-1: Using ep0 maxpacket: 8 [ 423.306453][ T2154] usb 4-1: config 150 has an invalid interface number: 204 but max is 0 [ 423.315180][ T2154] usb 4-1: config 150 has no interface number 0 [ 423.336051][ T2154] usb 4-1: config 150 interface 204 has no altsetting 0 [ 423.368367][ T2154] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 423.385643][ T120] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 423.395981][ T2154] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.426158][ T2154] usb 4-1: Product: syz [ 423.430480][ T2154] usb 4-1: Manufacturer: syz [ 423.442599][ T2154] usb 4-1: SerialNumber: syz [ 423.672510][T10281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 423.682962][T10281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.738713][T10289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 423.796217][T10289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.806180][T10281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 423.847696][T10281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.966427][ T2154] usb 4-1: USB disconnect, device number 77 [ 424.268199][ T120] sonixb 3-1:0.0: Error writing register 01: -110 [ 424.295882][ T120] sonixb 3-1:0.0: probe with driver sonixb failed with error -110 [ 424.448067][T10294] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1277'. [ 425.003195][T10304] fuse: Unknown parameter '' [ 425.447608][ T120] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 425.544294][T10315] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1284'. [ 425.693994][ T120] usb 4-1: config 0 has no interfaces? [ 425.712576][ T120] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 425.722142][ T120] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.735621][ T120] usb 4-1: Product: syz [ 425.740758][ T120] usb 4-1: Manufacturer: syz [ 425.752412][ T120] usb 4-1: SerialNumber: syz [ 425.778218][ T120] usb 4-1: config 0 descriptor?? [ 425.973546][T10321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.987716][T10321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.002290][ T2154] usb 3-1: USB disconnect, device number 70 [ 426.832400][T10328] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1288'. [ 428.121968][ T2154] usb 4-1: USB disconnect, device number 78 [ 428.696770][T10346] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1289'. [ 428.810436][T10350] netlink: 'syz.3.1294': attribute type 1 has an invalid length. [ 429.326219][ T120] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 429.546120][ T120] usb 4-1: Using ep0 maxpacket: 16 [ 429.555856][ T120] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 429.686072][ T120] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 429.810573][ T120] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 430.022854][ T120] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.064281][ T120] usb 4-1: config 0 descriptor?? [ 430.320568][T10361] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1298'. [ 430.351485][T10361] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1298'. [ 430.384626][T10361] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1298'. [ 430.505663][ T120] kovaplus 0003:1E7D:2D50.000D: unknown main item tag 0x0 [ 430.658509][ T120] kovaplus 0003:1E7D:2D50.000D: unknown main item tag 0x0 [ 430.685239][ T120] kovaplus 0003:1E7D:2D50.000D: unknown main item tag 0x0 [ 430.705180][ T120] kovaplus 0003:1E7D:2D50.000D: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.3-1/input0 [ 431.700833][ T5892] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 431.726032][ T10] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 431.821897][ T120] kovaplus 0003:1E7D:2D50.000D: couldn't init struct kovaplus_device [ 431.834164][ T120] kovaplus 0003:1E7D:2D50.000D: couldn't install mouse [ 431.852959][ T120] kovaplus 0003:1E7D:2D50.000D: probe with driver kovaplus failed with error -71 [ 431.887182][ T120] usb 4-1: USB disconnect, device number 79 [ 431.896466][ T10] usb 3-1: device descriptor read/64, error -71 [ 432.074228][ T5892] usb 2-1: config 0 has no interfaces? [ 432.088152][ T5892] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 432.098682][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.106844][ T5892] usb 2-1: Product: syz [ 432.111120][ T5892] usb 2-1: Manufacturer: syz [ 432.121533][ T5892] usb 2-1: SerialNumber: syz [ 432.146051][ T10] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 432.158588][ T5892] usb 2-1: config 0 descriptor?? [ 432.317717][ T10] usb 3-1: device descriptor read/64, error -71 [ 432.449086][ T10] usb usb3-port1: attempt power cycle [ 432.474785][T10387] tipc: Enabling of bearer rejected, failed to enable media [ 432.663565][T10394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.678757][T10394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.796239][ T10] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 432.827429][ T10] usb 3-1: device descriptor read/8, error -71 [ 432.953835][T10399] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1310'. [ 432.962954][T10399] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0) [ 432.972952][T10399] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535 [ 433.066018][ T10] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 433.086941][ T10] usb 3-1: device descriptor read/8, error -71 [ 433.200515][ T10] usb usb3-port1: unable to enumerate USB device [ 433.236359][ T5892] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 433.400991][ T5892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.423575][T10403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1312'. [ 433.438405][ T5892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.457647][ T5892] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 433.477701][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.511875][ T5892] usb 5-1: config 0 descriptor?? [ 434.032306][ T5892] arvo 0003:1E7D:30D4.000E: collection stack underflow [ 434.051410][ T5892] arvo 0003:1E7D:30D4.000E: item 0 4 0 12 parsing failed [ 434.079290][ T5892] arvo 0003:1E7D:30D4.000E: parse failed [ 434.095848][ T5892] arvo 0003:1E7D:30D4.000E: probe with driver arvo failed with error -22 [ 434.429314][ T5892] usb 5-1: USB disconnect, device number 71 [ 434.458099][ T47] usb 2-1: USB disconnect, device number 69 [ 434.543565][T10417] gtp0: entered promiscuous mode [ 435.508697][T10430] netlink: zone id is out of range [ 435.526210][T10430] netlink: zone id is out of range [ 435.646284][ T10] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 435.666496][T10430] netlink: zone id is out of range [ 435.671667][T10430] netlink: zone id is out of range [ 435.726958][T10430] netlink: zone id is out of range [ 435.754770][T10430] netlink: zone id is out of range [ 435.760094][T10430] netlink: zone id is out of range [ 435.765371][T10430] netlink: zone id is out of range [ 435.771007][T10430] netlink: zone id is out of range [ 435.814355][T10430] netlink: zone id is out of range [ 435.846021][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 435.859334][ T10] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 435.876214][ T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 435.985683][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 436.010960][ T10] usb 3-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 436.026317][ T10] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 436.039675][ T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 436.073465][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.091560][ T10] usbtmc 3-1:16.0: bulk endpoints not found [ 436.552896][T10447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.593304][T10447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.818813][T10450] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 436.829240][T10450] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1327'. [ 436.912781][T10454] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1328'. [ 436.957061][T10454] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0) [ 436.984390][T10454] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535 [ 437.178123][T10460] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1330'. [ 437.193352][T10460] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0) [ 437.203192][T10460] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535 [ 437.266172][ T10] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 437.418487][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 437.430470][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 437.452374][ T10] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 437.461660][ T5892] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 437.469791][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.536897][ T10] usb 4-1: config 0 descriptor?? [ 437.749523][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 437.768857][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 437.779127][ T5892] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 437.792369][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.830071][ T5892] usb 2-1: config 0 descriptor?? [ 437.972403][ T10] arvo 0003:1E7D:30D4.000F: collection stack underflow [ 437.982411][ T10] arvo 0003:1E7D:30D4.000F: item 0 4 0 12 parsing failed [ 437.991045][ T10] arvo 0003:1E7D:30D4.000F: parse failed [ 438.001322][ T10] arvo 0003:1E7D:30D4.000F: probe with driver arvo failed with error -22 [ 438.260929][ T2154] usb 4-1: USB disconnect, device number 80 [ 438.280176][ T5892] arvo 0003:1E7D:30D4.0010: collection stack underflow [ 438.293539][ T5892] arvo 0003:1E7D:30D4.0010: item 0 4 0 12 parsing failed [ 438.323816][ T5892] arvo 0003:1E7D:30D4.0010: parse failed [ 438.352587][ T5892] arvo 0003:1E7D:30D4.0010: probe with driver arvo failed with error -22 [ 438.394444][ T47] usb 3-1: USB disconnect, device number 75 [ 438.545307][ T5892] usb 2-1: USB disconnect, device number 70 [ 440.059609][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.206121][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.256169][ T5892] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 440.416425][ T5892] usb 5-1: Using ep0 maxpacket: 8 [ 440.655103][ T5892] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 440.702693][ T5892] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 440.862100][ T5892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 440.894275][ T5892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 440.949702][ T5892] usb 5-1: config 0 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 441.010490][ T5892] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 441.020480][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.049580][ T5892] usb 5-1: Product: syz [ 441.074854][ T5892] usb 5-1: Manufacturer: syz [ 441.104983][ T5892] usb 5-1: SerialNumber: syz [ 441.149117][ T5892] usb 5-1: config 0 descriptor?? [ 441.294789][T10501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1342'. [ 441.304271][T10501] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1342'. [ 441.586786][T10490] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 441.619663][ T5892] iowarrior 5-1:0.0: IOWarrior product=0x1505, serial=42424242 interface=0 now attached to iowarrior0 [ 441.776029][ T10] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 441.936071][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 441.950598][ T10] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 441.983794][ T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 442.049141][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 442.079479][ T10] usb 2-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 442.166266][ T10] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 442.196019][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 442.235587][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.278367][ T10] usbtmc 2-1:16.0: bulk endpoints not found [ 442.348226][ T10] usb 5-1: USB disconnect, device number 72 [ 442.501035][ T5851] Bluetooth: hci4: unexpected event for opcode 0x0c14 [ 443.291045][T10525] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1347'. [ 443.313979][T10525] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0) [ 443.353151][T10525] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535 [ 443.636092][ T120] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 443.800681][ T120] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 443.824010][ T120] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 443.855169][ T120] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 443.915493][ T120] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.955283][T10528] cgroup: fork rejected by pids controller in /syz0 [ 443.958529][ T120] usb 5-1: config 0 descriptor?? [ 444.419208][ T120] arvo 0003:1E7D:30D4.0011: collection stack underflow [ 444.436999][ T120] arvo 0003:1E7D:30D4.0011: item 0 4 0 12 parsing failed [ 444.465689][ T120] arvo 0003:1E7D:30D4.0011: parse failed [ 444.521431][ T120] arvo 0003:1E7D:30D4.0011: probe with driver arvo failed with error -22 [ 444.698860][ T120] usb 5-1: USB disconnect, device number 73 [ 444.838244][ T5892] usb 1-1: USB disconnect, device number 22 [ 445.297782][ T6090] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.387500][ T47] usb 2-1: USB disconnect, device number 71 [ 445.576986][ T6090] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.742432][ T6090] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.893604][T10546] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1355'. [ 445.943722][ T6090] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.945874][T10547] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1355'. [ 446.022765][T10546] dummy0: entered promiscuous mode [ 446.034540][T10546] macvtap1: entered promiscuous mode [ 446.046242][T10546] macvtap1: entered allmulticast mode [ 446.062053][T10546] dummy0: entered allmulticast mode [ 446.082909][T10547] dummy0: left allmulticast mode [ 446.098623][T10547] dummy0: left promiscuous mode [ 446.364867][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 446.381569][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 446.392404][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 446.401655][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 446.409571][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 446.966173][ T10] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 447.117730][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 447.177784][ T10] usb 5-1: config 0 has an invalid interface number: 231 but max is 1 [ 447.219397][ T10] usb 5-1: config 0 has no interface number 1 [ 447.236372][ T120] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 447.301464][ T10] usb 5-1: too many endpoints for config 0 interface 231 altsetting 15: 203, using maximum allowed: 30 [ 447.396299][ T10] usb 5-1: config 0 interface 231 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 203 [ 447.453365][ T10] usb 5-1: config 0 interface 231 has no altsetting 0 [ 447.462835][ T120] usb 4-1: Using ep0 maxpacket: 8 [ 447.493742][ T120] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 447.511832][ T10] usb 5-1: New USB device found, idVendor=413c, idProduct=81d2, bcdDevice=25.e8 [ 447.522035][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.606232][ T120] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 447.618235][ T10] usb 5-1: Product: syz [ 447.623691][ T10] usb 5-1: Manufacturer: syz [ 447.629743][ T120] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 447.640310][ T10] usb 5-1: SerialNumber: syz [ 447.649766][ T120] usb 4-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 447.661688][ T10] usb 5-1: config 0 descriptor?? [ 447.674774][ T120] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 447.709696][ T120] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 447.765650][ T120] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.812956][ T120] usbtmc 4-1:16.0: bulk endpoints not found [ 447.875647][T10569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1364'. [ 448.186590][ T2154] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 448.215606][ T6090]  (unregistering): Released all slaves [ 448.260332][T10569] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0) [ 448.301089][T10569] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535 [ 448.362576][ T10] usb 5-1: Could not set interface, error -71 [ 448.385286][ T10] usb 5-1: USB disconnect, device number 74 [ 448.402347][ T2154] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 448.444895][ T2154] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 448.456193][ T5851] Bluetooth: hci0: command tx timeout [ 448.504504][ T2154] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 448.606167][ T2154] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.645498][ T2154] usb 2-1: config 0 descriptor?? [ 449.100824][ T2154] arvo 0003:1E7D:30D4.0012: collection stack underflow [ 449.156202][ T2154] arvo 0003:1E7D:30D4.0012: item 0 4 0 12 parsing failed [ 449.182477][ T2154] arvo 0003:1E7D:30D4.0012: parse failed [ 449.198521][ T2154] arvo 0003:1E7D:30D4.0012: probe with driver arvo failed with error -22 [ 449.665329][ T6090] hsr_slave_0: left promiscuous mode [ 449.678715][ T6090] hsr_slave_1: left promiscuous mode [ 449.856334][ T9] usb 4-1: USB disconnect, device number 81 [ 449.994034][ T6090] [ 449.996425][ T6090] ============================================ [ 450.002604][ T6090] WARNING: possible recursive locking detected [ 450.008744][ T6090] 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 Not tainted [ 450.015843][ T6090] -------------------------------------------- [ 450.021983][ T6090] kworker/u8:11/6090 is trying to acquire lock: [ 450.028214][ T6090] ffff888062368d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: dev_set_allmulti+0x11c/0x270 [ 450.038320][ T6090] [ 450.038320][ T6090] but task is already holding lock: [ 450.045695][ T6090] ffff888062368d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x5a1/0x2510 [ 450.057293][ T6090] and the lock comparison function returns 0: [ 450.063352][ T6090] [ 450.063352][ T6090] other info that might help us debug this: [ 450.071409][ T6090] Possible unsafe locking scenario: [ 450.071409][ T6090] [ 450.078859][ T6090] CPU0 [ 450.082138][ T6090] ---- [ 450.085413][ T6090] lock(&dev_instance_lock_key#3); [ 450.090626][ T6090] lock(&dev_instance_lock_key#3); [ 450.095836][ T6090] [ 450.095836][ T6090] *** DEADLOCK *** [ 450.095836][ T6090] [ 450.103973][ T6090] May be due to missing lock nesting notation [ 450.103973][ T6090] [ 450.112301][ T6090] 5 locks held by kworker/u8:11/6090: [ 450.117678][ T6090] #0: ffff88801bef6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 450.128583][ T6090] #1: ffffc900055bfc60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 450.139396][ T6090] #2: ffffffff900f0a50 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x17c/0xd60 [ 450.148804][ T6090] #3: ffffffff900fd588 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xde/0x880 [ 450.158814][ T6090] #4: ffff888062368d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x5a1/0x2510 [ 450.171267][ T6090] [ 450.171267][ T6090] stack backtrace: [ 450.177166][ T6090] CPU: 1 UID: 0 PID: 6090 Comm: kworker/u8:11 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 450.177185][ T6090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 450.177196][ T6090] Workqueue: netns cleanup_net [ 450.177221][ T6090] Call Trace: [ 450.177228][ T6090] [ 450.177235][ T6090] dump_stack_lvl+0x241/0x360 [ 450.177267][ T6090] ? __pfx_dump_stack_lvl+0x10/0x10 [ 450.177298][ T6090] ? __pfx__printk+0x10/0x10 [ 450.177325][ T6090] ? print_lock+0x171/0x1a0 [ 450.177348][ T6090] print_deadlock_bug+0x2be/0x2d0 [ 450.177367][ T6090] validate_chain+0x928/0x24e0 [ 450.177394][ T6090] __lock_acquire+0xad5/0xd80 [ 450.177411][ T6090] lock_acquire+0x116/0x2f0 [ 450.177425][ T6090] ? dev_set_allmulti+0x11c/0x270 [ 450.177442][ T6090] __mutex_lock+0x1a5/0x10c0 [ 450.177460][ T6090] ? dev_set_allmulti+0x11c/0x270 [ 450.177473][ T6090] ? preempt_schedule+0xe4/0xf0 [ 450.177488][ T6090] ? preempt_schedule_common+0x84/0xd0 [ 450.177504][ T6090] ? preempt_schedule+0xe4/0xf0 [ 450.177519][ T6090] ? __pfx_preempt_schedule+0x10/0x10 [ 450.177536][ T6090] ? dev_set_allmulti+0x11c/0x270 [ 450.177549][ T6090] ? __pfx___mutex_lock+0x10/0x10 [ 450.177576][ T6090] ? __local_bh_enable_ip+0x179/0x200 [ 450.177591][ T6090] ? macvlan_stop+0x129/0x420 [ 450.177608][ T6090] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 450.177624][ T6090] dev_set_allmulti+0x11c/0x270 [ 450.177639][ T6090] macvlan_stop+0x20f/0x420 [ 450.177656][ T6090] ? __pfx_macvlan_stop+0x10/0x10 [ 450.177673][ T6090] __dev_close_many+0x3d7/0x760 [ 450.177695][ T6090] ? __pfx___dev_close_many+0x10/0x10 [ 450.177719][ T6090] dev_close_many+0x250/0x4c0 [ 450.177740][ T6090] ? __pfx_dev_close_many+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 450.177759][ T6090] ? preempt_schedule+0xe4/0xf0 [ 450.177773][ T6090] ? __pfx_preempt_schedule+0x10/0x10 [ 450.177789][ T6090] ? __pfx_hlock_conflict+0x10/0x10 [ 450.177809][ T6090] unregister_netdevice_many_notify+0x628/0x2510 [ 450.177832][ T6090] ? __local_bh_enable_ip+0x179/0x200 [ 450.177846][ T6090] ? batadv_tt_local_remove+0x119/0x230 [ 450.177862][ T6090] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 450.177875][ T6090] ? batadv_tt_local_remove+0x119/0x230 [ 450.177889][ T6090] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 450.177911][ T6090] ? unregister_netdevice_queue+0x2c4/0x400 [ 450.177931][ T6090] ? batadv_meshif_destroy_netlink+0x1e6/0x270 [ 450.177953][ T6090] default_device_exit_batch+0x7ff/0x880 [ 450.177978][ T6090] ? __pfx_default_device_exit_batch+0x10/0x10 [ 450.178000][ T6090] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 450.178021][ T6090] ? cfg802154_pernet_exit+0xc3/0xe0 [ 450.178035][ T6090] ? __pfx_default_device_exit_batch+0x10/0x10 [ 450.178058][ T6090] cleanup_net+0x8af/0xd60 [ 450.178081][ T6090] ? __pfx_cleanup_net+0x10/0x10 [ 450.178106][ T6090] ? process_scheduled_works+0x9cb/0x18e0 [ 450.178122][ T6090] process_scheduled_works+0xac3/0x18e0 [ 450.178148][ T6090] ? __pfx_process_scheduled_works+0x10/0x10 [ 450.178167][ T6090] ? assign_work+0x367/0x3d0 [ 450.178184][ T6090] worker_thread+0x870/0xd50 [ 450.178205][ T6090] ? __kthread_parkme+0x1a8/0x200 [ 450.178224][ T6090] ? __pfx_worker_thread+0x10/0x10 [ 450.178241][ T6090] kthread+0x7b7/0x940 [ 450.178261][ T6090] ? __pfx_worker_thread+0x10/0x10 [ 450.178278][ T6090] ? __pfx_kthread+0x10/0x10 [ 450.178297][ T6090] ? __pfx_kthread+0x10/0x10 [ 450.178317][ T6090] ? __pfx_kthread+0x10/0x10 [ 450.178336][ T6090] ? __pfx_kthread+0x10/0x10 [ 450.178362][ T6090] ? _raw_spin_unlock_irq+0x23/0x50 [ 450.178383][ T6090] ? lockdep_hardirqs_on+0x9d/0x150 [ 450.178407][ T6090] ? __pfx_kthread+0x10/0x10 [ 450.178432][ T6090] ret_from_fork+0x4b/0x80 [ 450.178447][ T6090] ? __pfx_kthread+0x10/0x10 [ 450.178467][ T6090] ret_from_fork_asm+0x1a/0x30 [ 450.178486][ T6090] [ 450.540850][ C1] vkms_vblank_simulate: vblank timer overrun [ 450.628273][ T5851] Bluetooth: hci0: command tx timeout [ 452.696193][ T5851] Bluetooth: hci0: command tx timeout [ 454.776198][ T5851] Bluetooth: hci0: command tx timeout