last executing test programs: 9m8.75672574s ago: executing program 1 (id=4064): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x9, @empty, 0x1}, 0x1c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e23, 0x4, @remote, 0xb}, 0x1c) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e200e22"], 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) listen(r1, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r5, 0x9) unshare(0x6020400) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000009c0)={r0}, 0x4) 9m8.543972123s ago: executing program 1 (id=4066): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x4e20, 0xffff, @dev={0xfe, 0x80, '\x00', 0x37}, 0x9}, 0x1c) syz_io_uring_setup(0x49a, &(0x7f00000003c0)={0x0, 0x79ad, 0x3180, 0x7ffd, 0x32c}, &(0x7f0000000340), &(0x7f00000000c0), &(0x7f0000000000)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffefff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) setsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000200)={0x7, 0x39, 0x6, 0x4, 0x40, 0xb5, 0xf4, 0x80, 0x2, 0x8, 0x7, 0xb, 0x3}, 0xe) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket(0x25, 0x1, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r10, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r11 = socket$unix(0x1, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r8) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r12, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r12}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x138, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x3}, {}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}, 0x1, 0x0, 0x0, 0x480d8}, 0x4000000) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000580)='vegas', 0x5) close(0x3) openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000080)="ba3458cb45", 0x5}], 0x1) 9m7.536294884s ago: executing program 1 (id=4068): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet(r0, &(0x7f0000006180)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000002240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x40}, @private=0xa010102}}}], 0x20, 0x64}}], 0x1, 0x4000800) 9m7.282866914s ago: executing program 1 (id=4070): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x4000, &(0x7f0000002300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0/../file0/../file0/file0\x00', 0x4) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000002c0)={0x2, 0x2, 0x2}) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0585609, &(0x7f0000000080)={0x6, 0x2, 0x0, 0x0, 0x3}) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000000140)={0x0, 0x2, "9a96944a5e6a8e8b9a61fd102c2bf04c688d7ddf41d61d869cda17d692990b6d05c7b559aeaf3180ba4095a5786bfd130e6118a2cd9b95d40448502d3b4cf5e9569c00998dcdb4e976f6368ea17bc56c463b9a909c8da23befb494e91c96066d8ff0cfbee66853696640d1d9c40e076276d68a1d5c3ab1941417d0b07c649e54ea9d78e5f06b072de9912b7e548c35e3f20180b3d71cc783252131b984e559126f72fc35137bc368571509b819bdf8645581bac4233ed104e2381e0760e479a9f0821e3acfa31d8ef625fcdabb9515e71a88fcaee1c18e39cca29ae42c227d2013ccc7627dd55ed98410ae506ac910fbd68688f797f9206542e6683f4374d9b1"}) 9m6.115519272s ago: executing program 1 (id=4075): unshare(0x42000000) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56e, 0x10d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe0}}]}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0xa4}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = io_uring_setup(0xbc0, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x0, 0x345}) io_uring_enter(r2, 0x100000, 0x96a6, 0x4d, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback}}}, 0x84) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x6}, 0xaf) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3400000044000701feffffff00000000037c0000040042800c00018006000600800a0000100002800a"], 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 9m5.314877245s ago: executing program 1 (id=4077): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000e00)=ANY=[@ANYBLOB="7c0100", @ANYRES16, @ANYBLOB="01002bbd7000fbdbdf25070000000c00018008000300010000007400018014000200776732000000000000000000", @ANYRES32, @ANYBLOB="4000018014"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0xffffffff, 0xfffffff8, 0xd}, 0x54) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000540)={0x1d, 0x0, 0x2, {0x2, 0x1}, 0xff}, 0x18) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)={0x8c, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x35, 0xe, {{{}, {0x7ffc}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x803, @void, @void, @void, @void, @val={0x6, 0x2, 0x8}, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x54, 0x68}}, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x20, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x5, 0x3, '\b'}, @NL80211_FTM_RESP_ATTR_LCI={0xf, 0x2, "60073e0a404aa77413c43f"}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffffd}]}, 0x8c}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, 0xffffffffffffffff, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="3000000000000000290000000b0000000002"], 0x60}, 0x4000000) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x8, 0x1000005, 0x7fffffff, 0x0, 0x1, 0x0, 0x7fffffffff7fffff, 0xffffffffffffff70, 0xa, 0x7f, 0x0, 0x80, 0x3, 0x4, 0x1, 0x1], 0xeeee0000, 0x300}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 9m4.641161558s ago: executing program 32 (id=4077): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000e00)=ANY=[@ANYBLOB="7c0100", @ANYRES16, @ANYBLOB="01002bbd7000fbdbdf25070000000c00018008000300010000007400018014000200776732000000000000000000", @ANYRES32, @ANYBLOB="4000018014"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0xffffffff, 0xfffffff8, 0xd}, 0x54) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000540)={0x1d, 0x0, 0x2, {0x2, 0x1}, 0xff}, 0x18) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)={0x8c, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x35, 0xe, {{{}, {0x7ffc}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x803, @void, @void, @void, @void, @val={0x6, 0x2, 0x8}, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x54, 0x68}}, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x20, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x5, 0x3, '\b'}, @NL80211_FTM_RESP_ATTR_LCI={0xf, 0x2, "60073e0a404aa77413c43f"}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffffd}]}, 0x8c}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, 0xffffffffffffffff, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="3000000000000000290000000b0000000002"], 0x60}, 0x4000000) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x8, 0x1000005, 0x7fffffff, 0x0, 0x1, 0x0, 0x7fffffffff7fffff, 0xffffffffffffff70, 0xa, 0x7f, 0x0, 0x80, 0x3, 0x4, 0x1, 0x1], 0xeeee0000, 0x300}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 13.043815979s ago: executing program 3 (id=5768): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r2 = io_uring_setup(0x1b7b, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r3 = io_uring_setup(0x1b7b, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac-aes-neon\x00'}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r3, 0x80002219, 0x7721, 0x16, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x4000845) io_uring_enter(r2, 0x640f, 0x407721, 0x37, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000100), 0x5, 0x151100) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x3e) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0x30000, 0x8, 0x9, 0x1, 0xe5, 0x40, 0x2d, 0x0, 0x30, 0x19}, {0x1, 0x3000, 0xe, 0x0, 0x40, 0x5, 0x7d, 0x9, 0x3, 0x3, 0x3, 0x1}, {0x2000, 0xe000, 0xe, 0x5, 0x3, 0x7, 0xfe, 0x89, 0x1, 0xab, 0x7, 0x81}, {0x30000, 0xdddd0000, 0x3, 0x5d, 0x4, 0x43, 0x9, 0xfa, 0x80, 0x7, 0x81}, {0xa000, 0x9000, 0x10, 0x2, 0x3, 0x7, 0xab, 0x7f, 0x47, 0xeb, 0xf7, 0x82}, {0xffffffff, 0x80a0000, 0xf, 0x8, 0xb1, 0x8, 0x1, 0xd, 0x88, 0xc, 0x1, 0xfd}, {0x54000, 0x2, 0x4, 0x5, 0x7, 0xff, 0xb, 0x0, 0x5, 0x81, 0xff, 0x70}, {0xd000, 0xb000, 0xe, 0x85, 0xf, 0x7, 0x1, 0x5, 0x5, 0x3, 0x7, 0x9}, {0xfec00000, 0x3ff}, {0x2, 0x7fff}, 0x8004003f, 0x0, 0x6000, 0x42024, 0xb, 0x6000, 0x50000, [0x6840000000000002, 0x3, 0x94, 0xff]}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000000)={[0x4, 0x8, 0x100, 0x94, 0x7, 0x38b, 0x7f, 0x400, 0x4, 0x5, 0x800, 0x2, 0x9, 0x8000, 0x81, 0x3b], 0x100000, 0x20002}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) 10.424069939s ago: executing program 3 (id=5780): socket$inet6(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x3, 0x5, 0x12, @mcast2, @private0, 0x0, 0x8007, 0x100, 0x5}}) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r3, &(0x7f0000002d40)={0x2020, 0x0, 0x0, 0x0}, 0xfffffffffffffc88) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80021}, 0xc, &(0x7f0000000380)={&(0x7f0000000a40)=ANY=[@ANYBLOB="741000002100100027bd7000fddbdf2500000000000000000000ffffac1e0001fe8000000000000000000000000000bb4e2100004e200000", @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="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"], 0x1074}, 0x1, 0x0, 0x0, 0x20000000}, 0x28880) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8003, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r6, &(0x7f0000000000)=[{0x0}], 0x1) ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x7) sendmmsg$inet6(r5, &(0x7f0000000a00)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0xc52, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f00000004c0)="f3", 0x1}], 0x1}}], 0x1, 0x4000841) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r5}, 0x8) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x20, 0x4, 0x4, 0x80000001, 0x0, r7, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x4, r8}, 0x38) r9 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004300)="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", 0xb5, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="640000000104010200000180002000000100000008004f30b6d75b624d6d010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x24, 0x1, 0x4, 0x401, 0x0, 0x0, {0x5}, [@NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x31}, 0x4000844) read$FUSE(r9, &(0x7f0000006300)={0x2020}, 0x402) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) syz_usb_connect$sierra_net(0x0, 0x0, 0x0, 0x0) 7.589827956s ago: executing program 5 (id=5791): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000000640)={0x1c, r1, 0x209, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000084}, 0x4) 7.290238033s ago: executing program 5 (id=5794): r0 = socket$inet6(0xa, 0x3, 0xff) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@gettaction={0x28, 0x32, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = io_uring_setup(0x46eb, &(0x7f0000000100)={0x0, 0xc469, 0x0, 0x2, 0x296}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000001100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47", 0x2f}, {&(0x7f0000000400)="6c23fe5e77b828dcd600126a9a4b5ef3ae578c4751f2456ea314b6d95e238e7d4733c114f56680e6905a48b50920a132c32365698bad56173e669d4b9b5bee30cc0285481b820174ec37cd79c02361701b0bc2550749b4fd1ca6ef7a66c704f71b977eb0dd0289c6c0fb9283712acd80db2b9918292e5775fa2417279dee25ff29d002de", 0x84}], 0x3, 0x0, 0x0, 0x800}], 0x1, 0x40810) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000480)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000040), 0xdc4, 0x100) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r1) sendmsg$IPVS_CMD_GET_SERVICE(r5, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, r6, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x6547cc32f2e5c6f0}, 0x81) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x8, 0x0, @remote, 0xfffffffc}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000038c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)="6659892212b60bcaeedcdc7cf71856e705edbda02e6c28fea6e832fa5ba8999f7d11e932497de880", 0x28}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000002900000037"], 0x18}}], 0x2, 0x4004000) 6.910008194s ago: executing program 5 (id=5795): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000002cc0)="099ccccf84f531d9ec214606c11430c1", 0x10) sendmsg$alg(r1, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=[@iv={0x18}], 0x18, 0x40}, 0x20000040) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x803, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') read$char_usb(r5, &(0x7f0000000040)=""/179, 0xb3) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r7, 0x41a0ae8d, &(0x7f0000000440)={'\x00', 0x4, 0x9, 0x99, 0x0, 0x0, 0xb000, 0x2, '\x00', 0xc94}) ioctl$KVM_RUN(r8, 0xae80, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) r9 = socket(0x10, 0x803, 0x0) bind$netlink(r9, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002740)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x8}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x74}}, 0x40000d4) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x20, 0x3c, 0x107, 0x78bd2d, 0x25dfdbfc, {0x2, 0x7c}, [@typed={0xc, 0x85, 0x0, 0x0, @u64=0x400}]}, 0x20}}, 0x0) write$char_usb(r5, &(0x7f0000000240)="d6b51e0417269ac10531c132ea713d40f73f6f726308acdab5f2cb5525afa57aa5f481b8a01400bc0e0c63fc048e21e7fcfc0b3788340b5743f37e29875c6ec05cf1cda6cd202a37ccd16b3e1ebc70703d0245fcff7b39664c337bb8471ad224bc5e31677298de0cf47691e1ecb95777b81d387bb2c563301f17871bd3351c7146d0522ec03737bfde48b5c880ca239427a07a9271cb6575650a2e3630f8128d5fe798abf8ec269b6d84df062eb53aeb7eb84de01caf75cc97a1c5", 0xbb) 6.32019928s ago: executing program 5 (id=5800): unshare(0x6a040000) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/image_size', 0x149882, 0x148) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0xa) fchdir(r3) r4 = open(&(0x7f0000000080)='./bus\x00', 0x1031c2, 0xb4) ftruncate(r4, 0x2007ffb) close(r4) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f00000001c0)={0xe, @pix={0x1000, 0x9, 0x59555956, 0x1, 0x0, 0x80000000, 0x1, 0xcbd6, 0x1, 0x7, 0x0, 0x3}}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x111, 0x3}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x111, 0x3}}, 0x20) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006c042b20800000000000000003010902"], 0x0) (async) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006c042b20800000000000000003010902"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000101010400000000000000000a0000003c0001"], 0x98}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000101010400000000000000000a0000003c0001"], 0x98}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000002680), r6) sendmsg$DEVLINK_CMD_PORT_GET(r6, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f00000026c0)=ANY=[@ANYBLOB="8dc9748f", @ANYRES16=r7, @ANYBLOB="01002cbd7000fbdbdf25050000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030005000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20040010}, 0x20000000) 6.178107893s ago: executing program 4 (id=5801): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x4}, @void, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000005}, 0x24044884) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181603, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000040)=@e={0xff, 0xa, 0x7, 0x2, @SEQ_NOTEON=@note=0x57, 0x10, 0x7, 0x8b}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = memfd_secret(0x0) ftruncate(r4, 0x5) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000001c80)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x800}], 0x1, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) r7 = io_uring_setup(0x1d47, &(0x7f00000001c0)={0x0, 0x7126, 0x8, 0x4000001, 0xd0}) io_uring_register$IORING_REGISTER_MEM_REGION(r7, 0x22, &(0x7f0000000300)={&(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff}, 0x1}, 0x1) recvmmsg(r6, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000380)=""/4115, 0x1013}], 0x1}}], 0x1, 0x41, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_queued\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x110, r8, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000140)='cdg', 0x3) 6.115126321s ago: executing program 3 (id=5802): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket(0x2b, 0x1, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x29, 0x1f, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b0, 0x0, 0x238, 0x170, 0xd8, 0x0, 0x410, 0x410, 0x410, 0x410, 0x410, 0x6, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xffffff00, 0x0, 'veth0\x00', 'veth0_to_bridge\x00', {}, {0xff}, 0x62, 0x0, 0x50}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xb, 0x4, @ipv4=@loopback, 0x4e24}}}, {{@ip={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0xff, 'geneve0\x00', 'veth1_to_team\x00', {}, {}, 0x89, 0x6, 0x24}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xff, 'ip6_vti0\x00', 'geneve0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x5}, {0x0, 0x6}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x31, 0x7, 0x1}}}, {{@ip={@loopback, @multicast1, 0xff, 0xff, 'veth0_to_batadv\x00', 'bridge_slave_0\x00', {0xff}, {0xff}, 0x44, 0x1, 0x15}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x55d, 0x3, @multicast1, 0x4e21}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xcf8a) 5.876871001s ago: executing program 3 (id=5804): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0xc1105511, &(0x7f0000000040)={0x9, 0x0, 0x3d, 0x10000, 'syz1\x00', 0x6}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0xc1105511, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000080)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 5.686319445s ago: executing program 3 (id=5805): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0x1, 0x5, 0x0, 0x100, 0x4, 0x2560204, r1}) r2 = syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12011003070103ff2505a8a440000102030109022400010100a00c0904000102000000010905010208190f0702090582024000090e09ce10caf44b5753e899de7d97796f154a53939418717dc277df39a9a040790f357fd2468ccc23c15a03772aaa0aaf2a894bfa82c4542f9006ef23b7486e31530b19163e1739dba312ff52887362dc9a4623ae0175b00374627a16b292143a0c5ded239330ec51cf72ba5c3709b38e5a5bbe702d166376b2230ba1e92dc551"], &(0x7f0000000240)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x4, 0x7, 0x2, 0xff, 0x3}, 0x128, &(0x7f0000000080)={0x5, 0xf, 0x128, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x1, 0x8, 0x401}, @generic={0x6d, 0x10, 0x1854f444f10e7a30, "27a8642da1d5702c6e8e8340c28c05c1c1b4b2f1c3a441d046b0371c262ffa51419fe77b5e1530b328b340d87ac4c54d9b5398fa020315d415d513a169e38392977971dd8384c261d4693fa43222db77b4b12b03f552352878ba744518ed35be42c7fb17ca7039dad2c6"}, @ptm_cap={0x3}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x4, 0x9, 0x7, 0xabfa, 0x4}, @generic={0x9b, 0x10, 0x3, "9560868284a097dfe9f78c28b6bbe57029ddae781e8424fdc62132042932a2e85933c72eea9ad116d25394a220cbc9f57e369191ddc1b1e14be86f6c5cade1c8d3ac05bfed762d02844d59b8d26b12cb4265881248017964badabdbf4613ba962ca421354d2f804464ffe69c1752d11bc820613cc080bcec6522b18b1d56fd92f3bc8ee47ba2dd1c7aa7d8a779a884129dcd8617b40ed0ff"}]}, 0x2, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x404}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x1401}}]}) syz_usb_ep_write(r2, 0x8, 0xa6, &(0x7f0000000340)="814be40e9bbc9ba7c438514c348ea485ed85eb92029f9222b3261e49df357bd38da8d1d2bed472d629dd7a22deb89123ebfbfbfca0968593238fbdeb584baac15da2c8584e70ae8a954fcb85b140fae0f468e3db1b9c08af422367e456afb6dd342df897490719c2298c036989a8d4c72e30c7828ce82faf73aeb723181f71e2ab348c0cf435538bec1e26e4b3a9191696541300fa1140d95b4241f9001d37dbb78055c48ac3") 5.163978976s ago: executing program 5 (id=5806): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) io_setup(0x6, &(0x7f0000001380)=0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, r4, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x200088c1) sendmsg$ETHTOOL_MSG_WOL_SET(r3, &(0x7f0000001000)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000b00)={0x4b0, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_WOL_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_WOL_SOPASS={0x6c, 0x3, "bd4590859bf914b2e379fc232b3ee12853ae948550b8f61c90c9a7e55ca761276b67cb4b8209a56d7129ed24b082a96210e75317359577491b00318e286bd794888cc213a2d19788a5eb1dd380c01a10becb34375df9d8e32e2935cede577135009562c54910086a"}, @ETHTOOL_A_WOL_MODES={0x94, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x88, 0x5, "fd799c9ce0b8ef66726cece0ed31552221510865c72cd8878ac70927c7eb0b1e75806fe624b1e6f3d65529b857828b165e6a31755ffc0258e22fdebfde2013768741fe331fab2fa55185ddc41b705bdfdee234937ecdf4d4399a518113081ed169233a90cad0f8258ec5ab96fba26859c83f2d0377bb91530dfa835de1fadbc5b1e7276d"}]}, @ETHTOOL_A_WOL_SOPASS={0xd4, 0x3, "b4a74ae83dc352e6096a1fd41bce201ec77d7e30911081fba7c8d573850560697255c47cc4abb60e8230f350244beffc58bdedfbedaba1980c849e028cfc5d432fc31d6cdfba0e096e1e88a91532f00ae7d90962ba7c3a7a8da0af6ac941e31ffbaeb8dba2e8ce1294b3694ebaceab47e77d1224745680cd9dee0511e3ff21c923b8a6075ed6f14acb8b201841307efcb68a483c68e04278a7accf95aff12246a3cfdbb17f1b29832c272ee1d9f90562df782ff66b9e7f59a0b667237b663faa1671dad12ff9717b0477c07a5d0bf74a"}, @ETHTOOL_A_WOL_SOPASS={0x50, 0x3, "40a7c5f5295a5746386985861f0f6ad8ba55f1edb224fdbd9f0cf87b8a30c7220f8b8a57c528cee40d705d4181b5603edd17544f58b9c14121534ba4167d0809d2b12da26fa88ad714a4b812"}, @ETHTOOL_A_WOL_MODES={0x6c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x5c, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '/%:}#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '!\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_WOL_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @ETHTOOL_A_WOL_MODES={0xe0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xdb, 0x4, "6647a8602d0e9f5a8a1a87f5d5e6dda8a195c89bb788e3a7f3290d2f3dcb8386f2b4bde64a7c0b54fec53d4e09adadf691b3564c423765b8889fb91bd15bfc5b1f3f1fd38bfd18354988ee7d22afe0138ce5641420d5f5b61da135f24b8a2660740ffb70f49ef40724764638dbae37352b86d95fd435aea219860b4ef3a8f8229eded7e3fa7f2712a2368aea6614502cedc939d8a6a19520d5cd30df055e740d9a0aa1cd295f16a5b58b832a5de53bafb3e75d2f442be1bb194fe22fe287c5b2f450557bbba8d429936ac69d015218f49ac7054693e195"}]}, @ETHTOOL_A_WOL_MODES={0xac, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xa8, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xdc00}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'veth0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '*\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa7ce}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x4b0}, 0x1, 0x0, 0x0, 0x4000001}, 0x4040010) io_submit(r2, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, r3}]) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000640)={0xffffffed, 0x0, &(0x7f0000000180)=[r0, r5, 0xffffffffffffffff, r0, r1, r5, r5, r0, r3]}, 0x9) syz_usb_connect$uac1(0x2, 0xaa, &(0x7f0000000740)=ANY=[@ANYBLOB="2d4e6a6a93490691c7f3b553df0ec2259576788cff", @ANYRESDEC=r0, @ANYRES64=r0, @ANYRESDEC=r0], 0x0) landlock_restrict_self(r0, 0xc) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000000, 0x12, r0, 0x0) r6 = socket(0x1e, 0x4, 0x4) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0x9, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r11, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r8, &(0x7f0000000340)={&(0x7f0000000440)=@xdp={0x2c, 0xdd86, r11, 0x5}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000680)="2c8fefb14851c7f16fa7e6413708fbb72d", 0x11}], 0x1}, 0x20008110) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ff9, 0xf) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) setsockopt$IPT_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b0, 0x148, 0x278, 0x1e0, 0x278, 0xb0, 0x318, 0x318, 0x318, 0x318, 0x318, 0x6, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xffffff00, 0x0, 'veth0\x00', 'veth0_to_bridge\x00', {}, {0xff}, 0x62, 0x0, 0x50}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xb, 0x200004, @ipv4=@loopback, 0xce24}}}, {{@ip={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0xff, 'geneve0\x00', 'veth1_to_team\x00', {}, {}, 0x11, 0x0, 0x24}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@rand_addr=0x64010100, @multicast1, 0x0, 0xff, 'ip6_vti0\x00', 'geneve0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x5}, {0x0, 0x6}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x31, 0x7, 0x1}}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x55d, 0x3, @multicast1, 0x4e21}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) getsockopt$IP_VS_SO_GET_DESTS(r6, 0x0, 0x484, &(0x7f0000000000)=""/129, &(0x7f00000000c0)=0x81) 4.534470061s ago: executing program 0 (id=5808): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8009d001900010028bd0000ffdbdf252001000000000000bbf8384602ec7aef5608031dcb810100000000001000ace206a31414aa00"/67, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="0000000000000000080000000000000000000000000000000000000000000000feffffffffffffffffffffffffffffff000000000000000000000000000000000000000000000000000a0000000000000000000000804000000000000000000800000000000000000001000000000000"], 0xb8}}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001a00010028bd7000fcdbdf250a"], 0x34}, 0x1, 0x0, 0x0, 0x4008008}, 0x40082) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr\x00') fchdir(r2) newfstatat(0xffffffffffffff9c, &(0x7f0000002140)='./file0\x00', 0x0, 0x2000) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000040)={0x2000, 0x101, 0x0, 'queue0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x5]}}], 0x1c) socket$inet_tcp(0x2, 0x1, 0x0) 4.441774879s ago: executing program 4 (id=5809): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) unshare(0x42000000) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56e, 0x10d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe0}}]}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x401}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="44000000090601020000000000000019030000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c00148008000140"], 0x44}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) 4.36689528s ago: executing program 0 (id=5810): socket$kcm(0x29, 0x7, 0x0) r0 = fanotify_init(0x200, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r0, 0x161, 0x40000867, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r3, &(0x7f00000001c0)=0x400005, 0x12) close(r3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) splice(r2, 0x0, r3, 0x0, 0x10, 0x500000000000000) 4.204351354s ago: executing program 0 (id=5812): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000000)=0x3) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000000)=""/204) madvise(&(0x7f00005dd000/0x4000)=nil, 0x4000, 0x1) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000011c0), 0x2c05) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000001200)={0x1, 0x1, 0x0, 0x3, 0x4}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014ebffffb6030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf9100000000000056000000000000008500000000000000b7000000000000009500000000000000"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = getpgid(0x0) getpriority(0x1, r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080), &(0x7f0000000100)={'U+', 0x7f}, 0x16, 0x3) 4.181121204s ago: executing program 2 (id=5813): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000004800)={0x2020}, 0x2020) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = open_tree(r1, &(0x7f00000001c0)='./cgroup\x00', 0x8901) move_mount(r1, 0x0, r2, 0x0, 0x46) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x20, r3, 0x1, 0x70bd25, 0xffffffff, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000010}, 0x44000) 3.992150839s ago: executing program 2 (id=5814): r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x40a0931, r0, 0xab491000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) poll(0x0, 0x0, 0x2) setresuid(0xee01, r1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6gre0\x00', 0x0}) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = socket(0x1, 0x803, 0x0) socket$tipc(0x1e, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) bind$can_raw(r2, &(0x7f0000000040)={0x1d, r4}, 0x10) request_key(&(0x7f0000000140)='logon\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000000100)='R\x10ru\x84t\xe3c*:De \x00\x00Z_k\xa60\xf4\x0f\x13\xff\x18\xd3,v\x8a\x00\x00\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x54, 0x10, 0x403, 0xfffefffc, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}, @IFLA_GENEVE_DF={0x5, 0xd, 0x1}, @IFLA_GENEVE_ID={0x8, 0x1, 0x3}, @IFLA_GENEVE_TOS={0x5, 0x4, 0x5}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x4804) 3.86425329s ago: executing program 2 (id=5815): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, &(0x7f0000000240)=""/131) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x800) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000300000004000000ff07"], 0x48) r3 = syz_open_procfs$userns(0x0, &(0x7f0000000100)) write$FUSE_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) fstat(r3, &(0x7f0000004f80)) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000070080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES8=r3], 0x48) socket$inet_sctp(0x2, 0x1, 0x84) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000738000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000530000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804) r6 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x1ae}) pselect6(0x40, &(0x7f0000000100)={0x1, 0x0, 0x9, 0x80000000005, 0x8000000000000, 0x9}, &(0x7f0000000000)={0xe, 0x8, 0x3, 0x4000000, 0x3, 0xc, 0xf35}, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000004"], 0x50) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0xfffffffffffffd8a, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000300)="25c4ec83231714fe9989b8cbb7dc21c63393328edafd8ab802de5a0de76b1d2630a78e51c3d517e53dd25456723f8a7db5b396b5c164875b0d4a0d6be965268a1d0300cfa287022bc9c5a4851435c5de216afd6b51104a0bd4572212a1f9b668b0c31c08000000000000521aa79d7046010ca1000000000000000000fbbc5112115ac6dc9f591b8f850e887f8f", 0xce4, r5}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x401, r2, 0x0, 0x100000000000000}, 0x38) 2.853324733s ago: executing program 0 (id=5816): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0) close(0x3) socket$l2tp6(0xa, 0x2, 0x73) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000140)=ANY=[@ANYRESHEX=0x0], 0x0, 0x26, 0x0, 0x0, 0x1f00, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2c603, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x74}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') bpf$OBJ_GET_MAP(0x7, &(0x7f00000007c0)=@o_path={&(0x7f0000000780)='./cgroup\x00', 0x0, 0x4010, r0}, 0x18) r1 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xd, 0x8, 0x4, 0x1, 0x0, r2}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.56835664s ago: executing program 0 (id=5817): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="40000000400087012cbd7000fadbdf25037c50000400c280240001802000108014000c000000000000000000000000000000000108000b8004000000040008"], 0x40}, 0x1, 0x0, 0x0, 0x4c084}, 0xc000) 2.31647008s ago: executing program 0 (id=5818): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f00000002c0)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x3}, 0x80, &(0x7f0000000840)=[{&(0x7f00000006c0)="62043c00590200000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee844", 0x46}], 0x1}, 0x40) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="ad5a97"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000880)={0x2c, &(0x7f0000000600)={0x40, 0xc, 0xe, "2b4eb1f61e86500bbb65ef3df46e"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000500)={&(0x7f0000000240)=[{0x6, 0x5800, 0x0, 0x0}], 0x1}) 2.266541764s ago: executing program 3 (id=5819): pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000580)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0xfffff000}, @TCA_FQ_RATE_ENABLE={0x8}]}}]}, 0x40}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000b80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0xc8, 0x9, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_EXPRESSIONS={0x94, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x38, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x16}]}}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}]}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffe}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x144}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r10 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r0) sendmsg$DEVLINK_CMD_TRAP_SET(r8, &(0x7f0000000980)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000940)={&(0x7f0000001240)=ANY=[@ANYBLOB="c70cae9df9ba1edd143c7d1b5f0d3f67ec852875aa70e38bd80fa25b776bd5b379b2646ae606491c3720b6ce134b87c7a675f3cc0f1fdb3535400ff449cdd4533d1dd36df0ec896d95b40be3d6768963e6f50eeae3f6dcecdc5e4dfb4bf72da3bd9f1f7d8aa2a9c906235364a05fda6b69ccd276e95393182e04cb1676f18176b26e0cd117f2d969dc", @ANYRES16=r10, @ANYBLOB="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"], 0x218}, 0x1, 0x0, 0x0, 0x4880}, 0x44000) r11 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r11, 0xc0286405, &(0x7f0000000080)={0x0, 0x9, {0xffffffffffffffff}, {0xffffffffffffffff}, 0xbd, 0x6}) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"}) 2.085446017s ago: executing program 2 (id=5820): socket$unix(0x1, 0x5, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffc0000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}, {0x6, 0x5}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xe8}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xfffffff7}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x10) 1.820047082s ago: executing program 2 (id=5821): r0 = socket$inet_sctp(0x2, 0x5, 0x84) syz_usb_connect$cdc_ncm(0x6, 0x89, &(0x7f00000001c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x77, 0x2, 0x1, 0x81, 0x20, 0x6, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "1c1a4e6c72ed"}, {0x5, 0x24, 0x0, 0xa}, {0xd, 0x24, 0xf, 0x1, 0xffffffff, 0xc000, 0x2, 0x9}, {0x6, 0x24, 0x1a, 0x101, 0x10}, [@dmm={0x7, 0x24, 0x14, 0x800, 0x10}, @network_terminal={0x7, 0x24, 0xa, 0x2, 0xc, 0xb, 0x7}, @dmm={0x7, 0x24, 0x14, 0x6, 0x2cc7}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x2, 0x2, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x7a7, 0x7, 0x81, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0xe2c2d5f45d7290cc, 0xff, 0xe, 0x5}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x110, 0x8, 0x9, 0x7, 0x20, 0xfa}, 0xf, &(0x7f0000000300)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x5, 0x9, 0x3}]}, 0x1, [{0x69, &(0x7f0000000340)=@string={0x69, 0x3, "92c9abc429cab55c78be515bd08fe1c34a9fcca7a30e6d1bf7e5933d3d88861bd66478283858ff3cd5670f0faded7f4affd8c913252fabfdd372d67b9584d57441a8d3e67d3a9e6d6a841798072fe113b8bb1f2b04a7ba51a6a6ef8aa8a33350e11f05c53b5bce"}}]}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @private=0xa010100}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, &(0x7f0000000140)) getsockopt$sock_buf(r1, 0x1, 0x1c, &(0x7f00000000c0)=""/87, &(0x7f0000000180)=0x57) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000040)={r2, 0x3}, &(0x7f0000000080)=0x8) 1.819279928s ago: executing program 5 (id=5822): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x80) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x4, 0xe0, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000180)) r2 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) io_setup(0x6, &(0x7f0000001380)=0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, r4}]) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {0x77359400}, {0x1, 0xc, 0x9, 0xc, 0x3, 0x8, "c12400"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000}) mkdir(0x0, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) r5 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r5, 0x2) sendmmsg$inet6(r5, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) clock_gettime(0x5, &(0x7f0000000080)) 1.295743698s ago: executing program 4 (id=5823): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001000000100000800130000000000080012"], 0x44}}, 0x0) 1.025265247s ago: executing program 2 (id=5824): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x29, 0x5, 0x0) socket$kcm(0x29, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100008b4cd740402053d8f6f8410203010902120001020000000904"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="780000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c0002800500010000000000240002801400018008000100ac1414aaf20002000eadd4bf418dce674b97db0dac1e00010c000280050001000000000008000740000000011400164000000800000000030000000800000006"], 0x78}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x3c, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_LABELS={0x4}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004881}, 0x20008820) socket$kcm(0x29, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') preadv(r3, &(0x7f0000000100)=[{&(0x7f0000000000)=""/250, 0xfa}], 0x1, 0x185, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x28, 0x11, 0x801, 0x0, 0x25dfdbff, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x20000040) io_uring_enter(r3, 0x4255, 0xf712, 0x20, 0x0, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000080), 0xd81, 0x42380) read(r4, 0x0, 0x0) 993.814888ms ago: executing program 4 (id=5825): syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgget$private(0x0, 0x40a) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r1 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x100) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x5, &(0x7f0000002500)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0xd99c03bfc183fc9f, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x6, 0x2, 0xff, 0x5, 0x3c3, 0x9}, 0x20) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000400)={'gretap0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x80, 0x1, 0x359, 0x6, {{0xd, 0x4, 0x0, 0x2c, 0x34, 0x68, 0x0, 0x9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, {[@timestamp={0x44, 0x14, 0xae, 0x0, 0x2, [0x24, 0xf, 0x6, 0xffffffe8]}, @ssrr={0x89, 0xb, 0xe2, [@multicast2, @broadcast]}]}}}}}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x56, r3}) ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, &(0x7f0000001180)=0x10000e8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f00000002c0), &(0x7f0000000240)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 368.581019ms ago: executing program 4 (id=5826): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020506050e0204094300080004000000040010000d0068d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f25232500000", 0x78, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = accept$unix(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000180)=0x6e) r3 = getpgid(0xffffffffffffffff) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f00000001c0)=r3) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2a060, 0x2400}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x8000) 0s ago: executing program 4 (id=5827): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) (async) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000240)={0x4, &(0x7f0000000280)=[{0x20, 0x2, 0x81, 0xfffff038}, {0x20, 0x0, 0x8, 0xfffff00c}, {0x48, 0x7}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x8, @mcast2}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x4000080, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd26, 0x25dfdbfb, {0x60, 0x0, 0x0, r5, {}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0xc010) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd26, 0x25dfdbfb, {0x60, 0x0, 0x0, r5, {}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) (async) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) r6 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_control_io$lan78xx(r6, 0x0, 0x0) syz_usb_control_io$rtl8150(r6, 0x0, &(0x7f0000000280)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="2013040000002c"], 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$rtl8150(r6, 0x0, &(0x7f0000000280)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="2013040000002c"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) (async) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)={0x0, 0x30, 0x1, 'D'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r6, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)={0x0, 0x30, 0x1, 'D'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$uac3(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000580)={0x0, 0xe, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r6, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000580)={0x0, 0xe, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$rtl8150(r6, 0x0, 0x0) (async) syz_usb_control_io$rtl8150(r6, 0x0, 0x0) syz_usb_control_io$rtl8150(r6, 0x0, &(0x7f0000000900)={0x2c, &(0x7f0000000800)={0x0, 0x16, 0x1, "dc"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r6, 0x0, 0x0) syz_usb_control_io$sierra_net(r6, 0x0, 0x0) kernel console output (not intermixed with test programs): nterface descriptor's value: 12 [ 1796.527107][ T5361] usb 3-1: config 220 interface 0 has no altsetting 0 [ 1796.534539][ T5361] usb 3-1: config 220 interface 76 has no altsetting 0 [ 1796.541618][ T5361] usb 3-1: config 220 interface 1 has no altsetting 0 [ 1796.558725][ T5361] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1796.577728][ T10] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1796.579483][ T5361] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1796.604088][ T5361] usb 3-1: Product: syz [ 1796.608764][ T5361] usb 3-1: Manufacturer: syz [ 1796.614472][ T5361] usb 3-1: SerialNumber: syz [ 1796.639682][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1796.674669][ T10] usb 1-1: config 0 descriptor?? [ 1796.700361][T24829] bond5 (unregistering): Released all slaves [ 1796.794998][T24832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1796.807872][T24832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1796.898158][T24832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1796.968036][T24832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1797.018128][T24824] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5546'. [ 1797.171086][ T5361] usb 3-1: selecting invalid altsetting 0 [ 1797.227404][ T5361] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1797.245640][ T5361] uvcvideo 3-1:220.0: No valid video chain found. [ 1797.305684][T18270] usb 6-1: USB disconnect, device number 13 [ 1797.336588][ T5361] usb 3-1: selecting invalid altsetting 0 [ 1797.371251][T24836] xt_hashlimit: size too large, truncated to 1048576 [ 1797.391761][ T5361] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 1797.512392][ T5361] usb 3-1: USB disconnect, device number 95 [ 1797.545545][T24839] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5549'. [ 1798.152407][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 1798.170504][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1798.233442][ T10] usb 1-1: USB disconnect, device number 32 [ 1798.268712][T24851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1798.300054][T24851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1798.515849][T24851] tipc: Resetting bearer [ 1798.543051][ T5691] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1798.696985][ T5691] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 1798.711695][ T5691] usb 3-1: config 1 has no interface number 0 [ 1798.714049][T11318] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1798.728578][ T5691] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0xF has invalid maxpacket 64 [ 1798.740362][ T5691] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1798.769007][ T5691] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1798.792156][ T5691] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1798.800790][ T5691] usb 3-1: Product: syz [ 1798.807876][ T5691] usb 3-1: Manufacturer: syz [ 1798.814799][ T5691] usb 3-1: SerialNumber: syz [ 1798.830157][T24853] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1798.851956][T24853] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1798.863093][ T5361] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1798.871266][ T5691] usb 3-1: Error in usbnet_get_endpoints (-22) [ 1798.883857][T11318] usb 6-1: Using ep0 maxpacket: 16 [ 1798.892220][T11318] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1798.904740][T11318] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1798.923585][T11318] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1798.932415][T11318] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1798.942197][T11318] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1798.972287][T11318] usb 6-1: config 0 descriptor?? [ 1799.049157][ T5361] usb 4-1: Using ep0 maxpacket: 16 [ 1799.061742][ T5361] usb 4-1: config 4 has an invalid interface number: 139 but max is 0 [ 1799.082314][ T5361] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1799.093378][ T5361] usb 4-1: config 4 has no interface number 0 [ 1799.099568][ T5361] usb 4-1: config 4 interface 139 has no altsetting 0 [ 1799.114287][ T5361] usb 4-1: New USB device found, idVendor=13b1, idProduct=4042, bcdDevice=76.fe [ 1799.125327][T24853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1799.133045][ T5361] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1799.149814][T24853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1799.152625][ T5361] usb 4-1: Product: syz [ 1799.193811][ T5361] usb 4-1: Manufacturer: syz [ 1799.213965][ T5361] usb 4-1: SerialNumber: syz [ 1799.453150][ T5691] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1799.623134][ T5691] usb 1-1: Using ep0 maxpacket: 32 [ 1799.631999][ T5691] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1799.641561][ T5691] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1799.862156][ T5691] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1799.877956][ T5691] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1799.896085][ T5691] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1799.903577][ T5691] usb 1-1: media controller created [ 1799.939532][ T5691] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1800.067395][ T30] audit: type=1800 audit(1779506390.036:3971): pid=24863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5557" name="SYSV00000000" dev="tmpfs" ino=3 res=0 errno=0 [ 1800.110599][ T5691] az6027: usb out operation failed. (-71) [ 1800.135736][ T5691] az6027: usb out operation failed. (-71) [ 1800.146672][ T5691] stb0899_attach: Driver disabled by Kconfig [ 1800.154992][ T5691] az6027: no front-end attached [ 1800.154992][ T5691] [ 1800.163830][ T5691] az6027: usb out operation failed. (-71) [ 1800.169849][ T5691] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1800.186427][ T5691] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input238 [ 1800.214984][ T5691] dvb-usb: schedule remote query interval to 400 msecs. [ 1800.235699][ T5691] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1800.260222][ T5691] usb 1-1: USB disconnect, device number 33 [ 1800.372704][ T5691] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1800.547773][ T5361] usb 4-1: USB disconnect, device number 63 [ 1801.334088][ T9847] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1801.346886][ T5361] usb 3-1: USB disconnect, device number 96 [ 1801.523173][ T9847] usb 1-1: Using ep0 maxpacket: 8 [ 1801.538449][ T9847] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1801.569760][ T9847] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1801.580113][T11318] usbhid 6-1:0.0: can't add hid device: -71 [ 1801.580236][T11318] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1801.603947][T11318] usb 6-1: USB disconnect, device number 14 [ 1801.649361][ T9847] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1801.685707][ T9847] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1801.757713][ T9847] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1801.798346][T24882] GUP no longer grows the stack in syz.4.5563 (24882): 200000004000-200000005000 (200000001000) [ 1801.834675][ T9847] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1801.853195][T24882] CPU: 1 UID: 0 PID: 24882 Comm: syz.4.5563 Tainted: G L syzkaller #0 PREEMPT(full) [ 1801.853232][T24882] Tainted: [L]=SOFTLOCKUP [ 1801.853240][T24882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1801.853255][T24882] Call Trace: [ 1801.853264][T24882] [ 1801.853275][T24882] dump_stack_lvl+0xe8/0x150 [ 1801.853310][T24882] __get_user_pages+0x2378/0x2720 [ 1801.853345][T24882] ? __gup_longterm_locked+0xc4e/0x1630 [ 1801.853392][T24882] ? __gup_longterm_locked+0xc4e/0x1630 [ 1801.853424][T24882] ? down_read_killable+0x1bb/0x340 [ 1801.853458][T24882] __gup_longterm_locked+0xdcf/0x1630 [ 1801.853490][T24882] ? lock_acquire+0x106/0x350 [ 1801.853533][T24882] gup_fast_fallback+0x1d84/0x20d0 [ 1801.853597][T24882] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1801.853629][T24882] ? is_valid_gup_args+0x11f/0x200 [ 1801.853659][T24882] ? get_user_pages_fast+0x4d/0xb0 [ 1801.853688][T24882] __iov_iter_get_pages_alloc+0x370/0xa10 [ 1801.853731][T24882] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 1801.853782][T24882] iov_iter_get_pages2+0x5e/0xa0 [ 1801.853821][T24882] __se_sys_vmsplice+0x7c7/0x1620 [ 1801.853874][T24882] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 1801.853906][T24882] ? __pfx_futex_wait+0x10/0x10 [ 1801.854019][T24882] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1801.854046][T24882] do_syscall_64+0x15f/0xf80 [ 1801.854066][T24882] ? trace_irq_disable+0x3b/0x140 [ 1801.854101][T24882] ? clear_bhb_loop+0x40/0x90 [ 1801.854130][T24882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1801.854154][T24882] RIP: 0033:0x7fd9c8d9ce59 [ 1801.854176][T24882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1801.854196][T24882] RSP: 002b:00007fd9c6ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 1801.854219][T24882] RAX: ffffffffffffffda RBX: 00007fd9c9015fa0 RCX: 00007fd9c8d9ce59 [ 1801.854237][T24882] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000006 [ 1801.854251][T24882] RBP: 00007fd9c8e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1801.854266][T24882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1801.854281][T24882] R13: 00007fd9c9016038 R14: 00007fd9c9015fa0 R15: 00007fd9c913fa48 [ 1801.854317][T24882] [ 1802.303528][ T5361] usb 3-1: new full-speed USB device number 97 using dummy_hcd [ 1802.435985][ T5361] usb 3-1: device descriptor read/64, error -71 [ 1802.449691][ T9847] usb 1-1: GET_CAPABILITIES returned 0 [ 1802.457340][ T9847] usbtmc 1-1:16.0: can't read capabilities [ 1802.493274][ T5725] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 1802.666532][ T5725] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 1802.685057][T24886] bond2 (unregistering): Released all slaves [ 1802.735507][ T5725] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 1802.753622][ T5361] usb 3-1: new full-speed USB device number 98 using dummy_hcd [ 1802.765564][ T5725] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1802.857913][ T5725] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1802.903118][ T5361] usb 3-1: device descriptor read/64, error -71 [ 1802.939779][ T5725] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1802.970866][ T5725] usb 6-1: Product: syz [ 1802.988519][T24900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1803.017148][ T5725] usb 6-1: Manufacturer: syz [ 1803.034072][T24900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1803.050606][ T5725] usb 6-1: SerialNumber: syz [ 1803.057461][ T5361] usb usb3-port1: attempt power cycle [ 1803.147222][T24900] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5568'. [ 1803.197842][ T5725] usb 6-1: config 0 descriptor?? [ 1803.254897][ T5725] usb 6-1: selecting invalid altsetting 0 [ 1803.381237][T24902] kernel read not supported for file /blkio.bfq.io_wait_time_recursive (pid: 24902 comm: syz.3.5569) [ 1803.459017][T24886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1803.473092][ T5361] usb 3-1: new full-speed USB device number 99 using dummy_hcd [ 1803.535665][T24886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1803.554645][ T5361] usb 3-1: device descriptor read/8, error -71 [ 1803.600651][ T30] audit: type=1800 audit(1779506393.556:3972): pid=24902 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5569" name="blkio.bfq.io_wait_time_recursive" dev="mqueue" ino=159891 res=0 errno=0 [ 1803.797401][ T10] usb 6-1: USB disconnect, device number 15 [ 1803.876276][ T5361] usb 3-1: new full-speed USB device number 100 using dummy_hcd [ 1803.914752][ T5361] usb 3-1: device descriptor read/8, error -71 [ 1804.043751][ T5361] usb usb3-port1: unable to enumerate USB device [ 1804.140101][ T9847] usb 1-1: USB disconnect, device number 34 [ 1804.284330][T24911] mac80211_hwsim hwsim27 syzkaller0: entered promiscuous mode [ 1804.292501][T24911] mac80211_hwsim hwsim27 syzkaller0: entered allmulticast mode [ 1804.601386][T24916] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1804.621916][T24913] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1804.651557][T11318] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 1804.662230][T11318] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 1804.775862][ T13] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 1804.813377][ T5361] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1804.903767][ T13] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 1804.983173][ T5361] usb 1-1: Using ep0 maxpacket: 16 [ 1804.985661][ T5361] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1804.985699][ T5361] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1804.985733][ T5361] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1804.985773][ T5361] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1804.985799][ T5361] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1805.003326][ T5361] usb 1-1: config 0 descriptor?? [ 1805.024838][ T48] wlan1: authentication with 08:02:11:00:00:00 timed out [ 1805.093093][ T5691] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1805.243152][ T5691] usb 4-1: Using ep0 maxpacket: 32 [ 1805.248573][ T5691] usb 4-1: config 0 has an invalid interface number: 111 but max is 1 [ 1805.248681][ T5691] usb 4-1: config 0 has no interface number 1 [ 1805.264275][ T5691] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 1805.264312][ T5691] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1805.264336][ T5691] usb 4-1: Product: syz [ 1805.264425][ T5691] usb 4-1: Manufacturer: syz [ 1805.264444][ T5691] usb 4-1: SerialNumber: syz [ 1805.269842][ T5691] usb 4-1: config 0 descriptor?? [ 1805.285408][T24923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1805.287949][T24923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1805.491322][ T5691] snd-usb-6fire 4-1:0.111: unable to receive device firmware state. [ 1805.510651][ T5691] snd-usb-6fire 4-1:0.111: probe with driver snd-usb-6fire failed with error -121 [ 1805.744760][T24932] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5578'. [ 1805.892581][ T5691] snd-usb-6fire 4-1:0.0: unknown device firmware state received from device: [ 1805.923087][ T5691] 31 db 99 aa dd 09 f1 37 [ 1805.939886][ T5691] snd-usb-6fire 4-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 1806.063444][ T9847] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1806.187390][T24938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1806.217800][T24938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1806.226565][T24939] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5578'. [ 1806.239793][T24938] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5580'. [ 1806.253221][ T9847] usb 3-1: Using ep0 maxpacket: 32 [ 1806.265446][ T9847] usb 3-1: config 0 has an invalid interface number: 111 but max is 1 [ 1806.286958][ T9847] usb 3-1: config 0 has no interface number 1 [ 1806.320962][ T9847] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 1806.331404][ T9847] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1806.398519][ T9847] usb 3-1: Product: syz [ 1806.416434][ T9847] usb 3-1: Manufacturer: syz [ 1806.434824][ T9847] usb 3-1: SerialNumber: syz [ 1806.455587][ T9847] usb 3-1: config 0 descriptor?? [ 1806.494440][T24941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5575'. [ 1806.530204][T24941] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5575'. [ 1806.674159][ T9847] snd-usb-6fire 3-1:0.111: unable to receive device firmware state. [ 1806.682795][ T9847] snd-usb-6fire 3-1:0.111: probe with driver snd-usb-6fire failed with error -121 [ 1807.093891][ T9847] snd-usb-6fire 3-1:0.0: unknown device firmware state received from device: [ 1807.136960][ T9847] 31 db 99 aa dd 09 f1 37 [ 1807.163421][ T9847] snd-usb-6fire 3-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 1807.801837][ T5361] usbhid 1-1:0.0: can't add hid device: -71 [ 1807.811393][T24942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5579'. [ 1807.858209][ T5361] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1807.897768][T24942] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5579'. [ 1807.913523][T24944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1807.927531][T24942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5579'. [ 1807.937937][T24944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1807.964428][ T5361] usb 1-1: USB disconnect, device number 35 [ 1808.094860][T24944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1808.103892][ T5725] usb 4-1: USB disconnect, device number 64 [ 1808.165658][T24944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1808.339778][T24951] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1808.467599][T24953] gtp1: entered allmulticast mode [ 1808.502415][T24953] team0: Port device gtp1 added [ 1808.539016][ T5361] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1808.753014][ T5361] usb 1-1: Using ep0 maxpacket: 8 [ 1808.772612][ T5361] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1808.801213][ T5361] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1808.830692][ T5361] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1808.876410][ T5361] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1808.926233][ T5361] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1808.954167][ T5361] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1809.090178][T11318] usb 3-1: USB disconnect, device number 101 [ 1809.094036][ T5691] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1809.205882][ T5361] usb 1-1: GET_CAPABILITIES returned 0 [ 1809.229742][ T5361] usbtmc 1-1:16.0: can't read capabilities [ 1809.328922][ T5691] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1809.360718][ T5691] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1809.390139][ T5691] usb 4-1: New USB device found, idVendor=08b7, idProduct=8000, bcdDevice= 0.00 [ 1809.407461][ T5691] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1809.417050][ T5691] usb 4-1: SerialNumber: syz [ 1809.678460][ T5691] usb 4-1: 0:2 : does not exist [ 1809.816337][ T5691] usb 4-1: USB disconnect, device number 65 [ 1809.913035][ T9847] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1809.924868][T21820] udevd[21820]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1810.103016][ T9847] usb 6-1: Using ep0 maxpacket: 32 [ 1810.115607][ T9847] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1810.133059][ T9847] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1810.153070][ T9847] usb 6-1: config 1 interface 2 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1810.173751][T11318] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1810.183322][ T9847] usb 6-1: Duplicate descriptor for config 1 interface 2 altsetting 0, skipping [ 1810.207229][ T9847] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1810.245305][ T9847] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1810.288887][ T9847] usb 6-1: Product: syz [ 1810.323409][ T9847] usb 6-1: Manufacturer: syz [ 1810.341751][ T9847] usb 6-1: SerialNumber: syz [ 1810.383840][T11318] usb 3-1: Using ep0 maxpacket: 8 [ 1810.411137][T11318] usb 3-1: config index 0 descriptor too short (expected 2075, got 27) [ 1810.450434][T11318] usb 3-1: config 0 has an invalid interface number: 200 but max is 0 [ 1810.473257][T11318] usb 3-1: config 0 has no interface number 0 [ 1810.487346][T11318] usb 3-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid maxpacket 12336, setting to 64 [ 1810.499014][T11318] usb 3-1: config 0 interface 200 has no altsetting 0 [ 1810.510318][T11318] usb 3-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39 [ 1810.520611][T11318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1810.530858][T11318] usb 3-1: Product: syz [ 1810.541351][T11318] usb 3-1: Manufacturer: syz [ 1810.560905][T11318] usb 3-1: SerialNumber: syz [ 1810.575681][T11318] usb 3-1: config 0 descriptor?? [ 1810.713134][ T5361] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1810.795821][T24979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1810.816880][T24979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1810.870012][ T9847] usb 6-1: USB disconnect, device number 16 [ 1810.876112][T11318] input: Hanwang Art Master III 1308 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.200/input/input239 [ 1810.891379][ T5361] usb 4-1: New USB device found, idVendor=2040, idProduct=d853, bcdDevice=f8.f6 [ 1810.910125][ T5361] usb 4-1: New USB device strings: Mfr=65, Product=2, SerialNumber=3 [ 1810.970439][ T5361] usb 4-1: Product: syz [ 1810.977115][T11318] usb 3-1: USB disconnect, device number 102 [ 1810.988235][ T5361] usb 4-1: Manufacturer: syz [ 1810.996121][ T5361] usb 4-1: SerialNumber: syz [ 1811.007824][T21820] udevd[21820]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1811.064489][ T5361] usb 4-1: dvb_usb_v2: found a 'Hauppauge Mercury' in warm state [ 1811.099556][ T5361] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1811.114864][T11312] usb 1-1: USB disconnect, device number 36 [ 1811.129565][ T5361] dvbdev: DVB: registering new adapter (Hauppauge Mercury) [ 1811.146541][ T5361] usb 4-1: media controller created [ 1811.201147][ T5361] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1811.254811][T24975] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5591'. [ 1811.327069][ T5361] usb 4-1: selecting invalid altsetting 1 [ 1811.339841][ T5361] set interface failed [ 1811.345889][ T5361] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1811.391097][ T5361] error writing reg: 0xff, val: 0x00 [ 1811.505910][ T5361] dvb_usb_mxl111sf 4-1:2.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 1811.567002][ T5361] usb 4-1: USB disconnect, device number 66 [ 1811.645069][T11312] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1811.803138][T11312] usb 1-1: Using ep0 maxpacket: 16 [ 1811.830415][T11312] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1811.853169][T11312] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1811.854919][T24990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1811.867631][T11312] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1811.879892][T24990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1811.888706][T11312] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1811.898640][T11312] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1811.924645][T11312] usb 1-1: config 0 descriptor?? [ 1811.933915][T11318] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1812.073364][T11318] usb 6-1: device descriptor read/64, error -71 [ 1812.243507][ T5361] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1812.323082][T11318] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1812.405430][ T5361] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1812.414636][ T5361] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1812.425688][ T5361] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1812.435616][ T5361] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1812.449166][ T5361] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1812.460558][T11318] usb 6-1: device descriptor read/64, error -71 [ 1812.470019][ T5361] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1812.505679][ T5361] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1812.537473][ T5361] usb 4-1: Product: syz [ 1812.550524][ T5361] usb 4-1: Manufacturer: syz [ 1812.577710][ T5361] cdc_wdm 4-1:1.0: skipping garbage [ 1812.601037][T11318] usb usb6-port1: attempt power cycle [ 1812.617904][ T5361] cdc_wdm 4-1:1.0: skipping garbage [ 1812.651985][ T5361] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1812.669708][ T5361] cdc_wdm 4-1:1.0: Unknown control protocol [ 1812.698722][T24999] loop2: detected capacity change from 0 to 7 [ 1812.708078][T24999] loop2: [ 1812.711469][T24999] loop2: partition table partially beyond EOD, truncated [ 1812.824448][T15731] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 1812.993689][T11318] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1813.049624][T11318] usb 6-1: device descriptor read/8, error -71 [ 1813.192237][T25002] program syz.3.5597 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1813.299365][T11318] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1813.344439][T11318] usb 6-1: device descriptor read/8, error -71 [ 1813.463726][T11318] usb usb6-port1: unable to enumerate USB device [ 1813.659679][ T5361] usb 4-1: USB disconnect, device number 67 [ 1813.943033][T11318] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1814.123274][T11318] usb 3-1: Using ep0 maxpacket: 8 [ 1814.142623][T11318] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1814.160038][T11318] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1814.182529][T11318] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1814.230366][T11318] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1814.274136][T11318] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1814.294484][T11318] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1814.432503][T11312] usbhid 1-1:0.0: can't add hid device: -71 [ 1814.478588][T11312] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1814.534629][T11312] usb 1-1: USB disconnect, device number 37 [ 1814.564778][T11318] usb 3-1: GET_CAPABILITIES returned 0 [ 1814.589931][T11318] usbtmc 3-1:16.0: can't read capabilities [ 1814.853625][ T5691] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1814.993492][T11312] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1815.035373][ T5691] usb 4-1: Using ep0 maxpacket: 8 [ 1815.046647][ T5691] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1815.106075][ T5691] usb 4-1: config 2 has an invalid interface number: 76 but max is 0 [ 1815.123053][ T5691] usb 4-1: config 2 has no interface number 0 [ 1815.144036][ T5691] usb 4-1: config 2 interface 76 has no altsetting 0 [ 1815.177194][ T5691] usb 4-1: New USB device found, idVendor=1943, idProduct=2250, bcdDevice= 0.01 [ 1815.198971][T11312] usb 1-1: New USB device found, idVendor=2040, idProduct=d853, bcdDevice=f8.f6 [ 1815.212637][ T5691] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1815.235160][T11312] usb 1-1: New USB device strings: Mfr=65, Product=2, SerialNumber=3 [ 1815.253363][ T5691] usb 4-1: Product: syz [ 1815.262936][ T5691] usb 4-1: Manufacturer: syz [ 1815.273385][T11312] usb 1-1: Product: syz [ 1815.280078][ T5691] usb 4-1: SerialNumber: syz [ 1815.292694][T11312] usb 1-1: Manufacturer: syz [ 1815.312077][T11312] usb 1-1: SerialNumber: syz [ 1815.369579][T11312] usb 1-1: dvb_usb_v2: found a 'Hauppauge Mercury' in warm state [ 1815.442272][T11312] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1815.475647][T11312] dvbdev: DVB: registering new adapter (Hauppauge Mercury) [ 1815.493600][T11312] usb 1-1: media controller created [ 1815.553658][T25028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5607'. [ 1815.591399][T11312] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1815.667223][T11312] usb 1-1: selecting invalid altsetting 1 [ 1815.684082][T11312] set interface failed [ 1815.684118][T11312] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1815.713143][T11312] error writing reg: 0xff, val: 0x00 [ 1815.826756][T11312] dvb_usb_mxl111sf 1-1:2.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 1815.890383][T11312] usb 1-1: USB disconnect, device number 38 [ 1815.960143][T25034] loop8: detected capacity change from 0 to 7 [ 1815.971037][T25034] Dev loop8: unable to read RDB block 7 [ 1815.981657][T25034] loop8: AHDI p1 [ 1815.987297][T25034] loop8: partition table partially beyond EOD, truncated [ 1816.248024][ T5691] go7007 4-1:2.76: Sensoray 2250 found [ 1816.271533][ T5691] go7007 4-1:2.76: probe with driver go7007 failed with error -12 [ 1816.327516][ T5691] usb 4-1: USB disconnect, device number 68 [ 1816.521428][T25044] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5611'. [ 1816.614176][T25046] FAULT_INJECTION: forcing a failure. [ 1816.614176][T25046] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1816.630225][T25044] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5611'. [ 1816.661914][T25046] CPU: 1 UID: 0 PID: 25046 Comm: syz.4.5613 Tainted: G L syzkaller #0 PREEMPT(full) [ 1816.661951][T25046] Tainted: [L]=SOFTLOCKUP [ 1816.661960][T25046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1816.661975][T25046] Call Trace: [ 1816.661984][T25046] [ 1816.661994][T25046] dump_stack_lvl+0xe8/0x150 [ 1816.662027][T25046] should_fail_ex+0x412/0x560 [ 1816.662064][T25046] _copy_to_user+0x31/0xb0 [ 1816.662101][T25046] simple_read_from_buffer+0xe1/0x170 [ 1816.662135][T25046] proc_fail_nth_read+0x1bb/0x230 [ 1816.662168][T25046] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1816.662201][T25046] ? rw_verify_area+0x2a6/0x4d0 [ 1816.662233][T25046] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1816.662263][T25046] vfs_read+0x20c/0xa70 [ 1816.662300][T25046] ? __pfx___mutex_lock+0x10/0x10 [ 1816.662324][T25046] ? __pfx_vfs_read+0x10/0x10 [ 1816.662367][T25046] ? __fget_files+0x2a/0x420 [ 1816.662399][T25046] ? __fget_files+0x3a0/0x420 [ 1816.662425][T25046] ? __fget_files+0x2a/0x420 [ 1816.662461][T25046] ksys_read+0x150/0x270 [ 1816.662496][T25046] ? __pfx_ksys_read+0x10/0x10 [ 1816.662536][T25046] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1816.662560][T25046] do_syscall_64+0x15f/0xf80 [ 1816.662581][T25046] ? trace_irq_disable+0x3b/0x140 [ 1816.662614][T25046] ? clear_bhb_loop+0x40/0x90 [ 1816.662642][T25046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1816.662664][T25046] RIP: 0033:0x7fd9c8d5d68e [ 1816.662686][T25046] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1816.662706][T25046] RSP: 002b:00007fd9c6ff5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1816.662730][T25046] RAX: ffffffffffffffda RBX: 00007fd9c6ff66c0 RCX: 00007fd9c8d5d68e [ 1816.662746][T25046] RDX: 000000000000000f RSI: 00007fd9c6ff60a0 RDI: 0000000000000004 [ 1816.662760][T25046] RBP: 00007fd9c6ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 1816.662774][T25046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1816.662788][T25046] R13: 00007fd9c9016038 R14: 00007fd9c9015fa0 R15: 00007fd9c913fa48 [ 1816.662822][T25046] [ 1816.704913][T11312] usb 3-1: USB disconnect, device number 103 [ 1817.015669][ T5691] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1817.183187][ T5691] usb 4-1: Using ep0 maxpacket: 8 [ 1817.196016][ T5691] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1817.205555][ T5691] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1817.214761][T25051] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1817.225259][ T5691] usb 4-1: Product: syz [ 1817.231744][ T5691] usb 4-1: Manufacturer: syz [ 1817.254445][ T5691] usb 4-1: SerialNumber: syz [ 1817.295079][ T5691] usb 4-1: config 0 descriptor?? [ 1817.319642][ T5691] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1817.493059][T11312] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1817.556264][T25058] tipc: Started in network mode [ 1817.566502][T25058] tipc: Node identity 080211, cluster identity 4711 [ 1817.588203][T25058] tipc: Enabled bearer , priority 0 [ 1817.643106][T11312] usb 3-1: Using ep0 maxpacket: 8 [ 1817.663440][T11312] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1817.725192][T11312] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1817.754519][T11312] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1817.785151][T11312] usb 3-1: config 0 descriptor?? [ 1817.800485][T25065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1817.840246][T25065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1818.023932][T11312] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1818.310996][T11312] usb 3-1: USB disconnect, device number 104 [ 1818.311057][ C0] iowarrior 3-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 1818.507249][T25074] fuse: Bad value for 'fd' [ 1818.572445][ T5691] gspca_sonixj: reg_w1 err -71 [ 1818.663179][ T5691] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 1818.703153][T11312] tipc: Node number set to 134353152 [ 1818.732472][ T5691] usb 4-1: USB disconnect, device number 69 [ 1818.958534][T25083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1818.980667][T25083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1819.343570][T11318] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1819.368594][T25097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1819.426479][T25097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1819.544746][T11318] usb 1-1: Using ep0 maxpacket: 8 [ 1819.561651][T25083] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1819.572120][T11318] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1819.601425][T11318] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1819.632247][T11318] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1819.668639][T11318] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1819.710369][T11318] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1819.750886][T11318] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1819.992219][T11318] usb 1-1: GET_CAPABILITIES returned 0 [ 1820.016077][T11318] usbtmc 1-1:16.0: can't read capabilities [ 1820.724421][T25109] bridge0: port 2(bridge_slave_1) entered disabled state [ 1820.863156][T11312] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1820.963946][T11318] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1821.046096][T11312] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1821.069301][T11312] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 559 [ 1821.113137][T11312] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1821.141710][T11312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1821.155163][T11318] usb 3-1: Using ep0 maxpacket: 32 [ 1821.180223][T11318] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1821.207342][T11318] usb 3-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 1821.214416][T25117] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 1821.255792][T11318] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1821.270767][T11312] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1821.314948][T11318] usb 3-1: config 0 descriptor?? [ 1821.616379][T11312] usb 4-1: USB disconnect, device number 70 [ 1821.791538][T11318] usbhid 3-1:0.0: can't add hid device: -71 [ 1821.824175][T11318] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1821.892113][T11318] usb 3-1: USB disconnect, device number 105 [ 1821.951818][T25129] FAULT_INJECTION: forcing a failure. [ 1821.951818][T25129] name failslab, interval 1, probability 0, space 0, times 0 [ 1822.005440][T25129] CPU: 1 UID: 0 PID: 25129 Comm: syz.5.5638 Tainted: G L syzkaller #0 PREEMPT(full) [ 1822.005476][T25129] Tainted: [L]=SOFTLOCKUP [ 1822.005485][T25129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1822.005498][T25129] Call Trace: [ 1822.005508][T25129] [ 1822.005518][T25129] dump_stack_lvl+0xe8/0x150 [ 1822.005549][T25129] should_fail_ex+0x412/0x560 [ 1822.005586][T25129] should_failslab+0xa8/0x100 [ 1822.005624][T25129] __kmalloc_node_track_caller_noprof+0xeb/0x7b0 [ 1822.005660][T25129] ? lockdep_hardirqs_on+0x7a/0x110 [ 1822.005695][T25129] ? __kernfs_new_node+0xaa/0x970 [ 1822.005732][T25129] kstrdup+0x42/0x100 [ 1822.005771][T25129] __kernfs_new_node+0xaa/0x970 [ 1822.005816][T25129] ? __pfx___kernfs_new_node+0x10/0x10 [ 1822.005846][T25129] ? kernfs_root+0x1c/0x230 [ 1822.005879][T25129] ? kernfs_root+0x1c/0x230 [ 1822.005907][T25129] ? kernfs_root+0x1c/0x230 [ 1822.005941][T25129] kernfs_new_node+0x102/0x210 [ 1822.005977][T25129] kernfs_create_link+0xa7/0x200 [ 1822.006004][T25129] sysfs_do_create_link_sd+0x83/0x110 [ 1822.006034][T25129] device_add_class_symlinks+0x1cf/0x240 [ 1822.006080][T25129] device_add+0x475/0xbb0 [ 1822.006112][T25129] device_create+0x269/0x300 [ 1822.006145][T25129] ? timer_init_key+0x161/0x2c0 [ 1822.006183][T25129] ? __pfx_device_create+0x10/0x10 [ 1822.006214][T25129] ? ieee80211_alloc_hw_nm+0x191d/0x1fa0 [ 1822.006262][T25129] mac80211_hwsim_new_radio+0x427/0x5aa0 [ 1822.006312][T25129] ? rcu_is_watching+0x15/0xb0 [ 1822.006350][T25129] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1822.006376][T25129] ? kstrndup+0xbf/0x160 [ 1822.006408][T25129] hwsim_new_radio_nl+0xf6a/0x1c00 [ 1822.006461][T25129] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1822.006499][T25129] ? rcu_is_watching+0x15/0xb0 [ 1822.006527][T25129] ? trace_kmalloc+0x2a/0xf0 [ 1822.006565][T25129] ? __nla_parse+0x40/0x60 [ 1822.006603][T25129] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1822.006630][T25129] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1822.006665][T25129] genl_family_rcv_msg_doit+0x22a/0x330 [ 1822.006699][T25129] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1822.006740][T25129] ? bpf_lsm_capable+0x9/0x20 [ 1822.006762][T25129] ? security_capable+0x7e/0x2c0 [ 1822.006807][T25129] genl_rcv_msg+0x61c/0x7a0 [ 1822.006840][T25129] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1822.006865][T25129] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1822.006894][T25129] ? __pfx_ref_tracker_free+0x10/0x10 [ 1822.006937][T25129] netlink_rcv_skb+0x232/0x4b0 [ 1822.006973][T25129] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1822.007001][T25129] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1822.007051][T25129] ? down_read+0x270/0x2e0 [ 1822.007073][T25129] ? genl_rcv+0xd/0x40 [ 1822.007099][T25129] genl_rcv+0x28/0x40 [ 1822.007121][T25129] netlink_unicast+0x75c/0x8e0 [ 1822.007161][T25129] netlink_sendmsg+0x813/0xb40 [ 1822.007204][T25129] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1822.007240][T25129] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1822.007272][T25129] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1822.007306][T25129] ____sys_sendmsg+0x972/0x9f0 [ 1822.007361][T25129] ? __might_fault+0xaf/0x130 [ 1822.007398][T25129] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1822.007442][T25129] ? import_iovec+0x73/0xa0 [ 1822.007481][T25129] ___sys_sendmsg+0x2a5/0x360 [ 1822.007519][T25129] ? __lock_acquire+0x6b5/0x2cf0 [ 1822.007549][T25129] ? __pfx____sys_sendmsg+0x10/0x10 [ 1822.007622][T25129] ? __fget_files+0x2a/0x420 [ 1822.007648][T25129] ? __fget_files+0x3a0/0x420 [ 1822.007686][T25129] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1822.007723][T25129] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1822.007768][T25129] ? __pfx_ksys_write+0x10/0x10 [ 1822.007818][T25129] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1822.007844][T25129] do_syscall_64+0x15f/0xf80 [ 1822.007865][T25129] ? trace_irq_disable+0x3b/0x140 [ 1822.007898][T25129] ? clear_bhb_loop+0x40/0x90 [ 1822.007927][T25129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1822.007949][T25129] RIP: 0033:0x7f39cdb9ce59 [ 1822.007971][T25129] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1822.007991][T25129] RSP: 002b:00007f39cea0c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1822.008016][T25129] RAX: ffffffffffffffda RBX: 00007f39cde15fa0 RCX: 00007f39cdb9ce59 [ 1822.008032][T25129] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 1822.008046][T25129] RBP: 00007f39cea0c090 R08: 0000000000000000 R09: 0000000000000000 [ 1822.008059][T25129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1822.008072][T25129] R13: 00007f39cde16038 R14: 00007f39cde15fa0 R15: 00007f39cdf3fa48 [ 1822.008127][T25129] [ 1822.582414][T18270] usb 1-1: USB disconnect, device number 39 [ 1822.844036][T11318] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1822.867357][T25134] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5641'. [ 1822.995799][T11318] usb 3-1: device descriptor read/64, error -71 [ 1823.069434][T25131] syzkaller0: entered promiscuous mode [ 1823.088566][T25131] syzkaller0: entered allmulticast mode [ 1823.242986][T11318] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1823.307493][T25131] tipc: Enabled bearer , priority 0 [ 1823.403269][T11318] usb 3-1: device descriptor read/64, error -71 [ 1823.500841][T25131] tipc: Resetting bearer [ 1823.544795][T25131] tipc: Disabling bearer [ 1823.550986][T11318] usb usb3-port1: attempt power cycle [ 1823.673125][ T9847] usb 4-1: new full-speed USB device number 71 using dummy_hcd [ 1823.846961][ T9847] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1823.880774][ T9847] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1823.920027][T25148] loop2: detected capacity change from 0 to 7 [ 1823.934867][ T9847] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 1823.963136][T25148] loop2: [ 1823.976043][T25148] loop2: partition table partially beyond EOD, truncated [ 1823.994202][ T9847] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1824.058537][ T9847] usb 4-1: config 0 descriptor?? [ 1824.243861][T18270] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 1824.368485][T25155] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1824.423350][T18270] usb 6-1: device descriptor read/64, error -71 [ 1824.523615][ T9847] hid_parser_main: 124 callbacks suppressed [ 1824.523747][ T9847] konepure 0003:1E7D:2DBE.00CF: unknown main item tag 0x4 [ 1824.553752][ T4993] loop2: [ 1824.565720][ T4993] loop2: partition table partially beyond EOD, truncated [ 1824.590990][ T9847] konepure 0003:1E7D:2DBE.00CF: hidraw0: USB HID v0.00 Device [HID 1e7d:2dbe] on usb-dummy_hcd.3-1/input0 [ 1824.684186][T18270] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 1824.708247][T25146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1824.749022][T25146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1824.853528][T18270] usb 6-1: device descriptor read/64, error -71 [ 1824.871461][T11318] usb 4-1: USB disconnect, device number 71 [ 1824.964692][T18270] usb usb6-port1: attempt power cycle [ 1825.022915][ T5725] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1825.033188][ T9847] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1825.182928][ T5725] usb 1-1: Using ep0 maxpacket: 16 [ 1825.194450][ T5725] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1825.204810][ T9847] usb 3-1: Using ep0 maxpacket: 8 [ 1825.214101][ T5725] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1825.230631][ T9847] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1825.234844][ T5725] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1825.251107][ T9847] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1825.259342][ T5725] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1825.260938][ T5725] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1825.297914][ T5725] usb 1-1: config 0 descriptor?? [ 1825.353195][ T9847] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1825.364067][T18270] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 1825.373113][ T9847] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1825.403233][ T9847] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1825.415397][T18270] usb 6-1: device descriptor read/8, error -71 [ 1825.430737][ T9847] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1825.530691][T25167] input: syz0 as /devices/virtual/input/input240 [ 1825.671005][ T9847] usb 3-1: GET_CAPABILITIES returned 0 [ 1825.678782][ T9847] usbtmc 3-1:16.0: can't read capabilities [ 1825.683531][T18270] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 1825.734728][T18270] usb 6-1: device descriptor read/8, error -71 [ 1825.843854][T24238] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1825.853870][T18270] usb usb6-port1: unable to enumerate USB device [ 1825.993025][T24238] usb 4-1: device descriptor read/64, error -71 [ 1826.077590][ T5725] usbhid 1-1:0.0: can't add hid device: -71 [ 1826.089559][ T5725] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1826.125309][ T5725] usb 1-1: USB disconnect, device number 40 [ 1826.233709][T24238] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1826.375217][T24238] usb 4-1: device descriptor read/64, error -71 [ 1826.493989][T24238] usb usb4-port1: attempt power cycle [ 1826.853430][T24238] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1826.888809][T25184] netlink: 'syz.4.5654': attribute type 1 has an invalid length. [ 1826.939575][T24238] usb 4-1: device descriptor read/8, error -71 [ 1827.214472][T25184] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1827.246118][T24238] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1827.294573][T24238] usb 4-1: device descriptor read/8, error -71 [ 1827.310798][T25184] syzkaller0: entered promiscuous mode [ 1827.330275][T25184] syzkaller0: entered allmulticast mode [ 1827.414518][T24238] usb usb4-port1: unable to enumerate USB device [ 1827.433201][ T9847] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1827.491469][T25184] tipc: Enabled bearer , priority 0 [ 1827.536675][T25183] tipc: Resetting bearer [ 1827.604595][T25183] tipc: Disabling bearer [ 1827.616079][ T9847] usb 6-1: New USB device found, idVendor=2040, idProduct=d853, bcdDevice=f8.f6 [ 1827.641975][ T9847] usb 6-1: New USB device strings: Mfr=65, Product=2, SerialNumber=3 [ 1827.664210][ T9847] usb 6-1: Product: syz [ 1827.676459][ T9847] usb 6-1: Manufacturer: syz [ 1827.690445][T24238] usb 3-1: USB disconnect, device number 109 [ 1827.691043][ T9847] usb 6-1: SerialNumber: syz [ 1827.797278][ T9847] usb 6-1: dvb_usb_v2: found a 'Hauppauge Mercury' in warm state [ 1827.870465][ T9847] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1827.935382][ T9847] dvbdev: DVB: registering new adapter (Hauppauge Mercury) [ 1827.974695][ T9847] usb 6-1: media controller created [ 1827.993639][T25191] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5656'. [ 1828.094984][ T9847] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1828.159868][ T9847] usb 6-1: selecting invalid altsetting 1 [ 1828.175143][ T9847] set interface failed [ 1828.175181][ T9847] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1828.263491][ T9847] error writing reg: 0xff, val: 0x00 [ 1828.397207][ T9847] dvb_usb_mxl111sf 6-1:2.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 1828.427567][ T9847] usb 6-1: USB disconnect, device number 25 [ 1828.439233][ T5725] usb 5-1: USB disconnect, device number 104 [ 1828.489107][T24718] udevd[24718]: setting mode of /dev/bus/usb/006/025 to 020664 failed: No such file or directory [ 1828.550728][T24718] udevd[24718]: setting owner of /dev/bus/usb/006/025 to uid=0, gid=0 failed: No such file or directory [ 1828.665937][T25196] bond6 (unregistering): Released all slaves [ 1828.674360][T24238] usb 3-1: new full-speed USB device number 110 using dummy_hcd [ 1828.683134][T25204] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1828.693753][T25204] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1828.716686][T25204] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1828.725262][T25204] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1828.753837][T25204] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1828.949544][T24238] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 1828.963313][T24238] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 1828.975321][T24238] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1829.000059][T24238] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1829.201442][T24238] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1829.414570][T24238] usb 3-1: Product: syz [ 1829.418940][T24238] usb 3-1: Manufacturer: syz [ 1829.423986][T24238] usb 3-1: SerialNumber: syz [ 1829.432060][T24238] usb 3-1: config 0 descriptor?? [ 1829.476076][T24238] usb 3-1: selecting invalid altsetting 0 [ 1829.483275][T11312] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1829.696663][T11312] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1829.720551][T11312] usb 4-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 1829.732944][T11312] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1829.742044][T11312] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 1829.770513][T11312] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 1829.806220][T25196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1829.816535][T25196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1829.826790][T11312] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1829.836951][T11312] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1829.845285][T11312] usb 4-1: Product: syz [ 1829.849637][T11312] usb 4-1: Manufacturer: syz [ 1830.024194][T11312] cdc_wdm 4-1:1.0: skipping garbage [ 1830.163814][T11312] cdc_wdm 4-1:1.0: skipping garbage [ 1830.192283][T11312] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1830.232508][T25196] snd-usb-audio 3-1:0.0: Runtime PM usage count underflow! [ 1830.293081][T11312] usb 3-1: USB disconnect, device number 110 [ 1830.321131][ T5691] usb 4-1: USB disconnect, device number 76 [ 1830.391761][T25228] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1830.732145][T25207] bridge0: port 1(bridge_slave_0) entered blocking state [ 1830.748809][T25207] bridge0: port 1(bridge_slave_0) entered disabled state [ 1830.777693][T25207] bridge_slave_0: entered allmulticast mode [ 1830.798362][T25207] bridge_slave_0: entered promiscuous mode [ 1830.826839][T25207] bridge0: port 2(bridge_slave_1) entered blocking state [ 1830.840085][T25207] bridge0: port 2(bridge_slave_1) entered disabled state [ 1830.847625][T15731] Bluetooth: hci5: command tx timeout [ 1830.868845][T25207] bridge_slave_1: entered allmulticast mode [ 1830.885856][T25207] bridge_slave_1: entered promiscuous mode [ 1831.261053][T25207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1831.357321][T25207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1831.409625][T15731] Bluetooth: hci3: ACL packet for unknown connection handle 8 [ 1831.443516][T24238] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1831.487678][T25207] team0: Port device team_slave_0 added [ 1831.496906][T25207] team0: Port device team_slave_1 added [ 1831.533456][ T5691] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1831.550387][T25207] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1831.586708][T25207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1831.625486][T25207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1831.633015][T24238] usb 4-1: Using ep0 maxpacket: 8 [ 1831.650881][T24238] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1831.661565][T24238] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1831.691191][T24238] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1831.705356][T24238] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1831.722946][ T5691] usb 3-1: Using ep0 maxpacket: 8 [ 1831.734921][T24238] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1831.746266][T24238] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1831.754420][T25207] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1831.754440][T25207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1831.754476][T25207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1831.754718][ T5691] usb 3-1: config 0 has an invalid interface number: 86 but max is 0 [ 1831.893153][T25207] hsr_slave_0: entered promiscuous mode [ 1831.901783][T25207] hsr_slave_1: entered promiscuous mode [ 1831.909359][ T5691] usb 3-1: config 0 has no interface number 0 [ 1831.917140][T25207] debugfs: 'hsr0' already exists in 'hsr' [ 1831.926111][ T5691] usb 3-1: New USB device found, idVendor=07ca, idProduct=1867, bcdDevice=f0.d3 [ 1831.935779][T25207] Cannot create hsr debugfs directory [ 1831.948814][ T5691] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1832.002642][ T5691] usb 3-1: config 0 descriptor?? [ 1832.071567][T24238] usb 4-1: GET_CAPABILITIES returned 0 [ 1832.096771][T24238] usbtmc 4-1:16.0: can't read capabilities [ 1832.224046][ T5691] usb 3-1: string descriptor 0 read error: -71 [ 1832.260338][ T5691] usb 3-1: USB disconnect, device number 111 [ 1832.266691][T11312] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1832.427299][T11312] usb 6-1: New USB device found, idVendor=2040, idProduct=d853, bcdDevice=f8.f6 [ 1832.447958][T11312] usb 6-1: New USB device strings: Mfr=65, Product=2, SerialNumber=3 [ 1832.477320][T11312] usb 6-1: Product: syz [ 1832.491794][T11312] usb 6-1: Manufacturer: syz [ 1832.508384][T11312] usb 6-1: SerialNumber: syz [ 1832.540013][T11312] usb 6-1: dvb_usb_v2: found a 'Hauppauge Mercury' in warm state [ 1832.598946][T11312] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1832.640156][T11312] dvbdev: DVB: registering new adapter (Hauppauge Mercury) [ 1832.668322][T11312] usb 6-1: media controller created [ 1832.733507][T11312] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1832.749068][T25248] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5670'. [ 1832.913071][T15731] Bluetooth: hci5: command tx timeout [ 1832.922521][T11312] usb 6-1: selecting invalid altsetting 1 [ 1832.945099][T11312] set interface failed [ 1832.945134][T11312] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1832.991157][T11312] error writing reg: 0xff, val: 0x00 [ 1833.126282][T25207] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1833.146915][T11312] dvb_usb_mxl111sf 6-1:2.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 1833.176837][T11312] usb 6-1: USB disconnect, device number 26 [ 1833.189836][T25207] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1833.295187][T24238] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1833.475113][T24238] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1833.475152][T24238] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1833.475193][T24238] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1833.475219][T24238] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1833.478800][T24238] usb 3-1: config 0 descriptor?? [ 1833.721533][T25207] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1833.733775][T25207] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1833.929945][T25207] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1833.941219][T25207] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1834.068309][T25264] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5676'. [ 1834.098481][T25264] team0 (unregistering): Port device bond0 removed [ 1834.123566][T24238] usbhid 3-1:0.0: can't add hid device: -32 [ 1834.148538][T24238] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 1834.207950][T24238] usb 3-1: USB disconnect, device number 112 [ 1834.232177][ T5691] usb 4-1: USB disconnect, device number 77 [ 1834.291415][T25207] netdevsim netdevsim4 netdevsim0 (unregistering): left promiscuous mode [ 1834.337923][T25207] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1834.385579][T25207] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1834.420949][T25270] fuse: Bad value for 'group_id' [ 1834.434798][T25270] fuse: Bad value for 'group_id' [ 1834.453341][ T5700] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1834.605842][ T5700] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1834.626719][ T5700] usb 1-1: config index 0 descriptor too short (expected 2182, got 134) [ 1834.647615][ T5700] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 1834.676671][ T5700] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1834.710561][ T5700] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1834.760183][ T5700] usb 1-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 0.40 [ 1834.788363][ T5700] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1834.813158][ T5700] usb 1-1: Product: syz [ 1834.828091][ T5700] usb 1-1: Manufacturer: syz [ 1834.837857][ T5700] usb 1-1: SerialNumber: syz [ 1834.860863][ T5700] usb 1-1: config 0 descriptor?? [ 1834.993042][T15731] Bluetooth: hci5: command tx timeout [ 1835.002365][T25207] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1835.042126][T25207] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1835.062212][T25207] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1835.080168][ T5700] usb 1-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8201); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 1835.105927][ T5700] usb 1-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 1835.122794][T25207] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1835.153829][T25207] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1835.192395][T25207] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1835.209819][T25286] xt_TCPMSS: Only works on TCP SYN packets [ 1835.216444][T25207] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1835.239491][T25207] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1835.263576][ T5700] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1835.288397][ T5700] usb 1-1: USB disconnect, device number 41 [ 1835.376442][T25289] FAULT_INJECTION: forcing a failure. [ 1835.376442][T25289] name failslab, interval 1, probability 0, space 0, times 0 [ 1835.387333][T21820] udevd[21820]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1835.391820][T25289] CPU: 1 UID: 0 PID: 25289 Comm: syz.3.5683 Tainted: G L syzkaller #0 PREEMPT(full) [ 1835.391904][T25289] Tainted: [L]=SOFTLOCKUP [ 1835.391925][T25289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1835.391967][T25289] Call Trace: [ 1835.391989][T25289] [ 1835.392022][T25289] dump_stack_lvl+0xe8/0x150 [ 1835.392098][T25289] should_fail_ex+0x412/0x560 [ 1835.392202][T25289] should_failslab+0xa8/0x100 [ 1835.392305][T25289] __kmalloc_cache_noprof+0x88/0x660 [ 1835.392389][T25289] ? snd_pcm_oss_change_params_locked+0x1ae/0x3e00 [ 1835.392598][T25289] ? __kmalloc_cache_noprof+0x15b/0x660 [ 1835.392687][T25289] snd_pcm_oss_change_params_locked+0x1ae/0x3e00 [ 1835.392761][T25289] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1835.392853][T25289] ? rcu_is_watching+0x15/0xb0 [ 1835.392930][T25289] ? trace_contention_end+0x3d/0x140 [ 1835.393006][T25289] ? __mutex_lock+0x319/0x1550 [ 1835.393059][T25289] ? rcu_is_watching+0x15/0xb0 [ 1835.393140][T25289] ? trace_contention_end+0x3d/0x140 [ 1835.393242][T25289] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1835.393313][T25289] ? snd_pcm_oss_set_trigger+0x300/0xdc0 [ 1835.393386][T25289] ? snd_pcm_oss_poll+0x61a/0x920 [ 1835.393458][T25289] ? __pfx___mutex_lock+0x10/0x10 [ 1835.393513][T25289] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1835.393576][T25289] ? __pfx___mutex_lock+0x10/0x10 [ 1835.393632][T25289] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1835.393686][T25289] ? do_raw_spin_lock+0x12b/0x2f0 [ 1835.393788][T25289] snd_pcm_oss_set_trigger+0x517/0xdc0 [ 1835.393916][T25289] snd_pcm_oss_poll+0x6ca/0x920 [ 1835.394000][T25289] ? __pfx_snd_pcm_oss_poll+0x10/0x10 [ 1835.394081][T25289] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1835.394197][T25289] ? __pfx_snd_pcm_oss_poll+0x10/0x10 [ 1835.394266][T25289] io_submit_one+0xc42/0x14c0 [ 1835.394368][T25289] ? __pfx_io_submit_one+0x10/0x10 [ 1835.394422][T25289] ? __pfx_aio_poll_queue_proc+0x10/0x10 [ 1835.394523][T25289] ? __might_fault+0xaf/0x130 [ 1835.394607][T25289] __se_sys_io_submit+0x195/0x340 [ 1835.394695][T25289] ? __pfx___se_sys_io_submit+0x10/0x10 [ 1835.394770][T25289] ? ksys_write+0x242/0x270 [ 1835.394884][T25289] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1835.394953][T25289] do_syscall_64+0x15f/0xf80 [ 1835.395006][T25289] ? trace_irq_disable+0x3b/0x140 [ 1835.395087][T25289] ? clear_bhb_loop+0x40/0x90 [ 1835.395166][T25289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1835.395241][T25289] RIP: 0033:0x7f84ed39ce59 [ 1835.395309][T25289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1835.395365][T25289] RSP: 002b:00007f84ee2f1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 1835.395427][T25289] RAX: ffffffffffffffda RBX: 00007f84ed615fa0 RCX: 00007f84ed39ce59 [ 1835.395468][T25289] RDX: 0000200000004540 RSI: 0000000000000001 RDI: 00007f84ee2d0000 [ 1835.395509][T25289] RBP: 00007f84ee2f1090 R08: 0000000000000000 R09: 0000000000000000 [ 1835.395542][T25289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1835.395574][T25289] R13: 00007f84ed616038 R14: 00007f84ed615fa0 R15: 00007f84ed73fa48 [ 1835.395659][T25289] [ 1835.901707][T25299] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5684'. [ 1835.989076][T25207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1836.267506][T25207] 8021q: adding VLAN 0 to HW filter on device team0 [ 1836.282751][ T6403] bridge0: port 1(bridge_slave_0) entered blocking state [ 1836.290053][ T6403] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1836.336353][ T6403] bridge0: port 2(bridge_slave_1) entered blocking state [ 1836.343663][ T6403] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1836.393058][ T5700] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1836.543279][ T5700] usb 3-1: Using ep0 maxpacket: 8 [ 1836.563656][ T5700] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1836.599152][ T5700] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1836.617523][ T5700] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1836.629856][ T5700] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1836.643738][ T5700] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1836.655073][ T5700] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1836.671535][T25207] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1836.886864][ T5700] usb 3-1: GET_CAPABILITIES returned 0 [ 1836.900698][ T5700] usbtmc 3-1:16.0: can't read capabilities [ 1836.941915][T25207] veth0_vlan: entered promiscuous mode [ 1836.971064][T25207] veth1_vlan: entered promiscuous mode [ 1837.061369][T25207] veth0_macvtap: entered promiscuous mode [ 1837.073041][T15731] Bluetooth: hci5: command tx timeout [ 1837.117001][T25207] veth1_macvtap: entered promiscuous mode [ 1837.173127][T18270] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1837.218636][T25207] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1837.264976][T25207] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1837.305949][T18363] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1837.338809][T18363] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1837.375289][T18270] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1837.407897][ T6403] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1837.422328][T18270] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1837.439991][ T6403] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1837.457838][T18270] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1837.496938][T18270] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1837.554317][T18270] usb 1-1: config 0 descriptor?? [ 1837.845970][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1837.882804][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1838.075181][T13996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1838.124639][T13996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1838.189675][T18270] usbhid 1-1:0.0: can't add hid device: -32 [ 1838.215161][T18270] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 1838.255487][T18270] usb 1-1: USB disconnect, device number 42 [ 1839.182018][T18270] usb 3-1: USB disconnect, device number 113 [ 1839.293858][ T9847] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1839.462667][T25330] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5692'. [ 1839.475328][ T9847] usb 1-1: Using ep0 maxpacket: 16 [ 1839.499423][ T9847] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 1839.514641][T25330] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5692'. [ 1839.524262][ T9847] usb 1-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 1839.535999][ T9847] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1839.572784][ T9847] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= e.89 [ 1839.573075][ T5691] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1839.592634][ T9847] usb 1-1: New USB device strings: Mfr=221, Product=0, SerialNumber=3 [ 1839.614873][ T9847] usb 1-1: Manufacturer: syz [ 1839.620024][ T9847] usb 1-1: SerialNumber: syz [ 1839.632009][ T9847] usb 1-1: config 0 descriptor?? [ 1839.646018][ T9847] usb 1-1: 0:2 : does not exist [ 1839.774371][ T5691] usb 4-1: Using ep0 maxpacket: 8 [ 1839.790105][ T5691] usb 4-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 1839.817904][ T5691] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1839.840409][ T5691] usb 4-1: Product: syz [ 1839.868844][ T5691] usb 4-1: Manufacturer: syz [ 1839.881643][ T9847] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 1839.893495][ T5691] usb 4-1: SerialNumber: syz [ 1839.931024][ T5691] usb 4-1: config 0 descriptor?? [ 1839.945750][ T9847] usb 1-1: 5:0: failed to get current value for ch 2 (-22) [ 1839.980359][ T5691] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 1840.005029][ T9847] usb 1-1: 5:0: failed to get current value for ch 3 (-22) [ 1840.028950][T25336] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5694'. [ 1840.047026][ T9847] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1840.091499][ T9847] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1840.192017][ T9847] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1840.201602][T25334] bridge0: port 2(bridge_slave_1) entered disabled state [ 1840.209192][T25334] bridge0: port 1(bridge_slave_0) entered disabled state [ 1840.262043][ T9847] usb 1-1: USB disconnect, device number 43 [ 1840.374109][T21820] udevd[21820]: setting owner of /dev/snd/controlC3 to uid=0, gid=29 failed: No such file or directory [ 1840.648203][T25344] fuse: Unknown parameter 'fŸl0xffffffffffffffff' [ 1840.742283][T25334] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1840.819465][T25334] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1840.890417][T25342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1840.913373][ T9847] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1840.960504][T25342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1841.020370][T15731] Bluetooth: hci3: unexpected event for opcode 0x2006 [ 1841.179449][ T5691] input: sonixj as /devices/platform/dummy_hcd.3/usb4/4-1/input/input242 [ 1841.558008][ T48] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1841.601193][ T48] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1841.646266][ T48] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1841.740399][ T57] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1841.993115][ T9] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1842.133905][T11318] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1842.153292][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 1842.162547][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1842.178465][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1842.191937][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1842.207638][ T9847] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 1842.216291][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1842.229056][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1842.247070][ T9] usb 5-1: config 0 descriptor?? [ 1842.313315][T11318] usb 3-1: Using ep0 maxpacket: 16 [ 1842.329311][T11318] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1842.349937][T11318] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 1842.361659][T11318] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 1842.371768][T11318] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 1842.387021][T11318] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1842.397562][T11318] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1842.406398][T11318] usb 3-1: SerialNumber: syz [ 1842.406896][ T9847] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1842.421388][T25359] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1842.432050][T25359] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1842.447058][T11318] hub 3-1:1.0: bad descriptor, ignoring hub [ 1842.453814][T11318] hub 3-1:1.0: probe with driver hub failed with error -5 [ 1842.468505][ T9847] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1842.503085][ T9847] usb 6-1: Product: syz [ 1842.507570][ T9847] usb 6-1: Manufacturer: syz [ 1842.513927][ T9847] usb 6-1: SerialNumber: syz [ 1842.531846][ T9847] usb 6-1: config 0 descriptor?? [ 1842.646626][T11318] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 1842.685606][ T9] microsoft 0003:045E:07DA.00D0: unknown main item tag 0x0 [ 1842.707082][ T9] microsoft 0003:045E:07DA.00D0: unknown main item tag 0x0 [ 1842.717731][ T9] microsoft 0003:045E:07DA.00D0: unknown main item tag 0x0 [ 1842.726160][ T9] microsoft 0003:045E:07DA.00D0: unknown main item tag 0x0 [ 1842.732643][T11318] usb 3-1: USB disconnect, device number 114 [ 1842.734271][ T9] microsoft 0003:045E:07DA.00D0: unknown main item tag 0x0 [ 1842.749803][ T9] microsoft 0003:045E:07DA.00D0: unknown main item tag 0x0 [ 1842.763284][ T5691] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1842.792312][ T9] microsoft 0003:045E:07DA.00D0: unknown main item tag 0x0 [ 1842.800159][ T9] microsoft 0003:045E:07DA.00D0: unknown main item tag 0x0 [ 1842.809000][ T9] microsoft 0003:045E:07DA.00D0: unknown main item tag 0x0 [ 1842.831432][ T9] microsoft 0003:045E:07DA.00D0: unknown main item tag 0x0 [ 1842.923510][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.00D0/input/input243 [ 1842.939564][ T5691] usb 1-1: Using ep0 maxpacket: 32 [ 1842.970353][T25366] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5697'. [ 1842.987806][ T5691] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1843.004768][T25366] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5697'. [ 1843.030282][ T9] microsoft 0003:045E:07DA.00D0: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 1843.039199][T25366] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5697'. [ 1843.050414][ T5691] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1843.069270][T11318] usb 4-1: USB disconnect, device number 78 [ 1843.115048][T18270] usb 6-1: USB disconnect, device number 28 [ 1843.129551][ T5691] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1843.164467][ T5691] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1843.177629][ T5691] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1843.191508][ T5691] usb 1-1: Product: syz [ 1843.197130][ T5691] usb 1-1: Manufacturer: syz [ 1843.202039][ T5691] usb 1-1: SerialNumber: syz [ 1843.269398][ T5691] usb 1-1: config 0 descriptor?? [ 1843.547961][T25362] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5700'. [ 1843.579247][T25362] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5700'. [ 1843.693319][T11318] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1843.856342][T11318] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1843.887208][T11318] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1843.910841][T11318] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1843.935730][T11318] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1843.952769][T25370] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1843.991491][ T5691] gs_usb 1-1:0.0: Couldn't get device config: (err=-71) [ 1844.007420][T11318] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1844.010621][ T5691] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -71 [ 1844.034179][ T5691] usb 1-1: USB disconnect, device number 44 [ 1844.113577][T25320] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1844.276740][T25320] usb 6-1: Using ep0 maxpacket: 8 [ 1844.296884][T25320] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1844.326574][T25320] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1844.361731][T25320] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1844.376125][ T5691] usb 4-1: USB disconnect, device number 79 [ 1844.388128][T25320] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1844.405497][T25320] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1844.416260][T25320] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1844.633777][T18270] usb 5-1: USB disconnect, device number 105 [ 1844.659139][T25320] usb 6-1: GET_CAPABILITIES returned 0 [ 1844.677077][T25320] usbtmc 6-1:16.0: can't read capabilities [ 1845.132976][T25320] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1845.243301][ T5361] usb 3-1: new full-speed USB device number 115 using dummy_hcd [ 1845.293038][T25320] usb 1-1: Using ep0 maxpacket: 8 [ 1845.307126][T25320] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 1845.316925][T25320] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1845.355775][T25320] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1845.381462][T25320] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1845.415039][ T5361] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1845.424656][T25320] usb 1-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 1845.433461][ T5361] usb 3-1: not running at top speed; connect to a high speed hub [ 1845.449005][T25320] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1845.457519][ T5361] usb 3-1: config 0 has an invalid interface number: 205 but max is 0 [ 1845.465811][T25320] usb 1-1: Product: syz [ 1845.465834][T25320] usb 1-1: Manufacturer: syz [ 1845.465852][T25320] usb 1-1: SerialNumber: syz [ 1845.506920][T25320] usb 1-1: config 0 descriptor?? [ 1845.521187][ T5361] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1845.533282][T18270] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1845.547704][T25387] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1845.567422][ T5361] usb 3-1: config 0 has no interface number 0 [ 1845.583968][ T5361] usb 3-1: config 0 interface 205 altsetting 5 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 1845.603089][ T5361] usb 3-1: config 0 interface 205 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 14 [ 1845.633600][ T5361] usb 3-1: config 0 interface 205 has no altsetting 0 [ 1845.655711][ T5361] usb 3-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice= c.af [ 1845.665556][ T5361] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1845.683310][ T5361] usb 3-1: Product: syz [ 1845.687571][ T5361] usb 3-1: Manufacturer: syz [ 1845.692198][ T5361] usb 3-1: SerialNumber: syz [ 1845.721204][T18270] usb 5-1: New USB device found, idVendor=2040, idProduct=d853, bcdDevice=f8.f6 [ 1845.741116][ T5361] usb 3-1: config 0 descriptor?? [ 1845.761328][T18270] usb 5-1: New USB device strings: Mfr=65, Product=2, SerialNumber=3 [ 1845.770641][T18270] usb 5-1: Product: syz [ 1845.777015][T18270] usb 5-1: Manufacturer: syz [ 1845.781819][T18270] usb 5-1: SerialNumber: syz [ 1845.798610][T25402] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1845.798661][T25320] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 1845.829676][T18270] usb 5-1: dvb_usb_v2: found a 'Hauppauge Mercury' in warm state [ 1845.863321][T25320] input: Griffin SoundKnob as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input244 [ 1845.875562][T18270] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1845.920277][T18270] dvbdev: DVB: registering new adapter (Hauppauge Mercury) [ 1845.936969][T18270] usb 5-1: media controller created [ 1846.013642][ T5361] ath6kl: Failed to submit usb control message: -71 [ 1846.025358][T25397] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5708'. [ 1846.041668][T18270] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1846.051432][ T5361] ath6kl: unable to send the bmi data to the device: -71 [ 1846.059405][ T5361] ath6kl: Unable to send get target info: -71 [ 1846.096922][ T5361] ath6kl: Failed to init ath6kl core: -71 [ 1846.120904][ T5361] ath6kl_usb 3-1:0.205: probe with driver ath6kl_usb failed with error -71 [ 1846.158372][T18270] usb 5-1: selecting invalid altsetting 1 [ 1846.188539][T18270] set interface failed [ 1846.188574][T18270] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1846.206911][ T5361] usb 3-1: USB disconnect, device number 115 [ 1846.249896][T18270] error writing reg: 0xff, val: 0x00 [ 1846.391148][T25408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1846.459732][T25408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1846.468686][T18270] dvb_usb_mxl111sf 5-1:2.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 1846.519613][T18270] usb 5-1: USB disconnect, device number 106 [ 1846.686486][ C0] powermate: config urb returned -71 [ 1846.689095][T11318] usb 1-1: USB disconnect, device number 45 [ 1846.692363][ C0] powermate: usb_submit_urb(config) failed [ 1846.692416][ C0] powermate 1-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 1846.713662][ T9] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1846.807616][ T5361] usb 6-1: USB disconnect, device number 29 [ 1846.858193][T25416] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5712'. [ 1846.893075][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 1846.908718][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1846.919686][ T9] usb 4-1: config 244 has an invalid descriptor of length 0, skipping remainder of the config [ 1846.942219][ T9] usb 4-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=24.0f [ 1846.958687][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1846.968147][ T9] usb 4-1: Product: syz [ 1846.972455][ T9] usb 4-1: Manufacturer: syz [ 1846.977374][ T9] usb 4-1: SerialNumber: syz [ 1847.030297][T18270] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1847.055396][T25420] FAULT_INJECTION: forcing a failure. [ 1847.055396][T25420] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1847.068787][T25420] CPU: 1 UID: 0 PID: 25420 Comm: syz.5.5714 Tainted: G L syzkaller #0 PREEMPT(full) [ 1847.068822][T25420] Tainted: [L]=SOFTLOCKUP [ 1847.068831][T25420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1847.068844][T25420] Call Trace: [ 1847.068853][T25420] [ 1847.068863][T25420] dump_stack_lvl+0xe8/0x150 [ 1847.068895][T25420] should_fail_ex+0x412/0x560 [ 1847.068930][T25420] _copy_to_user+0x31/0xb0 [ 1847.068968][T25420] simple_read_from_buffer+0xe1/0x170 [ 1847.068999][T25420] proc_fail_nth_read+0x1bb/0x230 [ 1847.069033][T25420] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1847.069057][T25420] ? rw_verify_area+0x2a6/0x4d0 [ 1847.069097][T25420] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1847.069129][T25420] vfs_read+0x20c/0xa70 [ 1847.069163][T25420] ? __pfx___mutex_lock+0x10/0x10 [ 1847.069189][T25420] ? __pfx_vfs_read+0x10/0x10 [ 1847.069219][T25420] ? __fget_files+0x2a/0x420 [ 1847.069254][T25420] ? __fget_files+0x3a0/0x420 [ 1847.069281][T25420] ? __fget_files+0x2a/0x420 [ 1847.069318][T25420] ksys_read+0x150/0x270 [ 1847.069352][T25420] ? __pfx_ksys_read+0x10/0x10 [ 1847.069381][T25420] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1847.069409][T25420] do_syscall_64+0x15f/0xf80 [ 1847.069430][T25420] ? trace_irq_disable+0x3b/0x140 [ 1847.069463][T25420] ? clear_bhb_loop+0x40/0x90 [ 1847.069494][T25420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1847.069511][T25420] RIP: 0033:0x7f39cdb5d68e [ 1847.069526][T25420] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1847.069539][T25420] RSP: 002b:00007f39cea0bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1847.069569][T25420] RAX: ffffffffffffffda RBX: 00007f39cea0c6c0 RCX: 00007f39cdb5d68e [ 1847.069586][T25420] RDX: 000000000000000f RSI: 00007f39cea0c0a0 RDI: 0000000000000004 [ 1847.069600][T25420] RBP: 00007f39cea0c090 R08: 0000000000000000 R09: 0000000000000000 [ 1847.069613][T25420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1847.069625][T25420] R13: 00007f39cde16038 R14: 00007f39cde15fa0 R15: 00007f39cdf3fa48 [ 1847.069659][T25420] [ 1847.144538][ T5691] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1847.324452][T18270] usb 3-1: Using ep0 maxpacket: 8 [ 1847.345344][T18270] usb 3-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 1847.373601][T18270] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1847.381936][T18270] usb 3-1: Product: syz [ 1847.389008][T18270] usb 3-1: Manufacturer: syz [ 1847.396592][T18270] usb 3-1: SerialNumber: syz [ 1847.419948][T18270] usb 3-1: config 0 descriptor?? [ 1847.444596][T18270] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 1847.467032][ T9] comedi comedi5: Wrong number of endpoints [ 1847.480598][ T9] dt9812 4-1:244.0: driver 'dt9812' failed to auto-configure device. [ 1847.528340][ T9] usb 4-1: USB disconnect, device number 80 [ 1847.694795][ T5691] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1847.706225][ T5691] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 1847.717441][ T5691] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1847.730795][ T5691] usb 5-1: config 0 descriptor?? [ 1847.740636][T25416] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1847.813262][ T9847] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1847.920323][T25427] bridge0: port 1(bridge_slave_0) entered disabled state [ 1847.975128][ T9847] usb 1-1: Using ep0 maxpacket: 32 [ 1847.989833][ T9847] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1848.009669][ T9847] usb 1-1: config 3 has an invalid interface number: 223 but max is 1 [ 1848.023206][ T9847] usb 1-1: config 3 has an invalid interface number: 25 but max is 1 [ 1848.036060][T25431] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5715'. [ 1848.049221][ T9847] usb 1-1: config 3 has an invalid interface number: 223 but max is 1 [ 1848.068021][ T9847] usb 1-1: config 3 has no interface number 0 [ 1848.083171][ T9847] usb 1-1: config 3 has no interface number 1 [ 1848.105052][ T9847] usb 1-1: config 3 interface 25 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 1848.146709][ T9847] usb 1-1: too many endpoints for config 3 interface 223 altsetting 155: 82, using maximum allowed: 30 [ 1848.174957][T25416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1848.187258][ T9847] usb 1-1: config 3 interface 223 altsetting 155 has 0 endpoint descriptors, different from the interface descriptor's value: 82 [ 1848.220868][T25416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1848.235369][ T9847] usb 1-1: config 3 interface 223 has no altsetting 1 [ 1848.254058][T25416] input: syz1 as /devices/virtual/input/input245 [ 1848.266183][ T9847] usb 1-1: config 3 interface 25 has no altsetting 0 [ 1848.305004][T25427] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1848.373107][ T9847] usb 1-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=2a.c0 [ 1848.408556][T25427] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1848.410568][ T9847] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1848.446001][ T9847] usb 1-1: Product: syz [ 1848.450628][ T9847] usb 1-1: Manufacturer: syz [ 1848.463483][ T9847] usb 1-1: SerialNumber: syz [ 1848.488864][ T5691] usbhid 5-1:0.0: can't add hid device: -71 [ 1848.496232][ T5691] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1848.510207][ T5691] usb 5-1: USB disconnect, device number 107 [ 1848.654838][T18270] input: sonixj as /devices/platform/dummy_hcd.2/usb3/3-1/input/input246 [ 1848.797745][ T9847] usb 1-1: USB disconnect, device number 46 [ 1848.979236][T25427] batman_adv: batadv0: Interface deactivated: gretap1 [ 1849.128429][ T1025] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1849.151236][ T1025] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1849.181010][ T1025] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1849.201742][ T1025] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1849.216102][T25447] ALSA: mixer_oss: invalid OSS volume ':' [ 1849.251280][T25447] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1849.286594][T25447] ALSA: mixer_oss: invalid OSS volume '5' [ 1849.329027][T25447] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1849.352671][T25447] ALSA: mixer_oss: invalid OSS volume '6' [ 1849.401661][T25447] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1849.456685][T25447] ALSA: mixer_oss: invalid OSS volume '7' [ 1849.479629][T25451] FAULT_INJECTION: forcing a failure. [ 1849.479629][T25451] name failslab, interval 1, probability 0, space 0, times 0 [ 1849.507877][T25451] CPU: 0 UID: 0 PID: 25451 Comm: syz.0.5722 Tainted: G L syzkaller #0 PREEMPT(full) [ 1849.507912][T25451] Tainted: [L]=SOFTLOCKUP [ 1849.507920][T25451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1849.507934][T25451] Call Trace: [ 1849.507943][T25451] [ 1849.507953][T25451] dump_stack_lvl+0xe8/0x150 [ 1849.507984][T25451] should_fail_ex+0x412/0x560 [ 1849.508072][T25451] should_failslab+0xa8/0x100 [ 1849.508109][T25451] __kmalloc_noprof+0xe8/0x760 [ 1849.508140][T25451] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1849.508180][T25451] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1849.508213][T25451] ? tomoyo_domain+0xd7/0x130 [ 1849.508250][T25451] ? tomoyo_path_number_perm+0x219/0x630 [ 1849.508275][T25451] tomoyo_path_number_perm+0x246/0x630 [ 1849.508304][T25451] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1849.508329][T25451] ? __lock_acquire+0x6b5/0x2cf0 [ 1849.508370][T25451] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1849.508414][T25451] ? __fget_files+0x2a/0x420 [ 1849.508442][T25451] ? __fget_files+0x2a/0x420 [ 1849.508467][T25451] ? __fget_files+0x3a0/0x420 [ 1849.508491][T25451] ? __fget_files+0x2a/0x420 [ 1849.508522][T25451] security_file_ioctl+0xc3/0x2a0 [ 1849.508551][T25451] __se_sys_ioctl+0x47/0x170 [ 1849.508584][T25451] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1849.508608][T25451] do_syscall_64+0x15f/0xf80 [ 1849.508627][T25451] ? trace_irq_disable+0x3b/0x140 [ 1849.508660][T25451] ? clear_bhb_loop+0x40/0x90 [ 1849.508687][T25451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1849.508709][T25451] RIP: 0033:0x7fdda8b9ce59 [ 1849.508731][T25451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1849.508751][T25451] RSP: 002b:00007fdda9b28028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1849.508775][T25451] RAX: ffffffffffffffda RBX: 00007fdda8e15fa0 RCX: 00007fdda8b9ce59 [ 1849.508791][T25451] RDX: 0000200000000240 RSI: 000000004068aea3 RDI: 0000000000000004 [ 1849.508806][T25451] RBP: 00007fdda9b28090 R08: 0000000000000000 R09: 0000000000000000 [ 1849.508820][T25451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1849.508833][T25451] R13: 00007fdda8e16038 R14: 00007fdda8e15fa0 R15: 00007fdda8f3fa48 [ 1849.508877][T25451] [ 1849.510100][T25451] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1849.906414][T25449] syzkaller0: entered promiscuous mode [ 1849.912038][T25449] syzkaller0: entered allmulticast mode [ 1850.233000][T18270] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1850.301942][ T5361] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1850.441538][T18270] usb 6-1: Using ep0 maxpacket: 8 [ 1850.464877][ T5361] usb 1-1: Using ep0 maxpacket: 16 [ 1850.477922][T18270] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1850.491384][T18270] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1850.503113][ T5361] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1850.538740][T18270] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1850.549149][ T5361] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1850.576877][T18270] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1850.590101][ T5361] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1850.614184][T18270] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1850.624669][ T5361] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1850.653149][T18270] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1850.661401][ T5361] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1850.773398][ T5361] usb 1-1: config 0 descriptor?? [ 1850.874937][T18270] usb 6-1: GET_CAPABILITIES returned 0 [ 1850.909207][T18270] usbtmc 6-1:16.0: can't read capabilities [ 1850.923967][T24238] usb 3-1: USB disconnect, device number 116 [ 1851.310977][ T5361] usbhid 1-1:0.0: can't add hid device: -71 [ 1851.343431][ T5361] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1851.369344][ T5361] usb 1-1: USB disconnect, device number 47 [ 1851.833105][T25320] usb 3-1: new low-speed USB device number 117 using dummy_hcd [ 1852.000374][T25320] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 1852.043146][T25320] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1852.068089][T25320] usb 3-1: config 0 has no interface number 0 [ 1852.100129][T25320] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1852.118768][T25320] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 10 [ 1852.139527][T25320] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 1852.183572][T25320] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1852.204114][T25320] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1852.219897][T25480] netlink: 'syz.0.5731': attribute type 2 has an invalid length. [ 1852.253523][T25320] usb 3-1: config 0 descriptor?? [ 1852.271317][ T5700] hid_parser_main: 5 callbacks suppressed [ 1852.271339][ T5700] hid-generic 0000:0000:0000.00D1: unknown main item tag 0x0 [ 1852.314045][T25320] ldusb 3-1:0.55: Interrupt in endpoint not found [ 1852.390425][ T5700] hid-generic 0000:0000:0000.00D1: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1852.486750][T25471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1852.508238][T25471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1852.535871][T24238] usb 3-1: USB disconnect, device number 117 [ 1852.542343][ T5691] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1852.644613][ T5361] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1852.710389][ T5691] usb 4-1: config 0 has no interfaces? [ 1852.735327][ T5691] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1852.744578][ T5691] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1852.793872][ T5691] usb 4-1: SerialNumber: syz [ 1852.823710][ T5691] usb 4-1: config 0 descriptor?? [ 1852.847155][ T5361] usb 1-1: device descriptor read/64, error -71 [ 1852.902001][ T5691] usb 6-1: USB disconnect, device number 30 [ 1853.057927][T25482] FAULT_INJECTION: forcing a failure. [ 1853.057927][T25482] name failslab, interval 1, probability 0, space 0, times 0 [ 1853.079117][T25482] CPU: 0 UID: 0 PID: 25482 Comm: syz.3.5732 Tainted: G L syzkaller #0 PREEMPT(full) [ 1853.079168][T25482] Tainted: [L]=SOFTLOCKUP [ 1853.079176][T25482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1853.079187][T25482] Call Trace: [ 1853.079195][T25482] [ 1853.079204][T25482] dump_stack_lvl+0xe8/0x150 [ 1853.079232][T25482] should_fail_ex+0x412/0x560 [ 1853.079263][T25482] should_failslab+0xa8/0x100 [ 1853.079294][T25482] __kmalloc_noprof+0xe8/0x760 [ 1853.079320][T25482] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1853.079353][T25482] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1853.079381][T25482] ? tomoyo_domain+0xd7/0x130 [ 1853.079413][T25482] ? tomoyo_path_number_perm+0x219/0x630 [ 1853.079436][T25482] tomoyo_path_number_perm+0x246/0x630 [ 1853.079461][T25482] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1853.079482][T25482] ? __lock_acquire+0x6b5/0x2cf0 [ 1853.079517][T25482] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1853.079555][T25482] ? __fget_files+0x2a/0x420 [ 1853.079580][T25482] ? __fget_files+0x2a/0x420 [ 1853.079601][T25482] ? __fget_files+0x3a0/0x420 [ 1853.079621][T25482] ? __fget_files+0x2a/0x420 [ 1853.079649][T25482] security_file_ioctl+0xc3/0x2a0 [ 1853.079673][T25482] __se_sys_ioctl+0x47/0x170 [ 1853.079701][T25482] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1853.079721][T25482] do_syscall_64+0x15f/0xf80 [ 1853.079738][T25482] ? trace_irq_disable+0x3b/0x140 [ 1853.079766][T25482] ? clear_bhb_loop+0x40/0x90 [ 1853.079789][T25482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1853.079808][T25482] RIP: 0033:0x7f84ed39ce59 [ 1853.079826][T25482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1853.079842][T25482] RSP: 002b:00007f84ee2f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1853.079862][T25482] RAX: ffffffffffffffda RBX: 00007f84ed615fa0 RCX: 00007f84ed39ce59 [ 1853.079875][T25482] RDX: 0000000000000000 RSI: 00000000c0404806 RDI: 0000000000000008 [ 1853.079887][T25482] RBP: 00007f84ee2f1090 R08: 0000000000000000 R09: 0000000000000000 [ 1853.079898][T25482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1853.079908][T25482] R13: 00007f84ed616038 R14: 00007f84ed615fa0 R15: 00007f84ed73fa48 [ 1853.079937][T25482] [ 1853.079946][T25482] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1853.124188][ T5361] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1853.185909][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.236116][T25491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1853.240457][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.332192][T25489] netlink: 'syz.5.5733': attribute type 13 has an invalid length. [ 1853.362326][T25491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1853.383280][T25489] netlink: 'syz.5.5733': attribute type 17 has an invalid length. [ 1853.402023][ T5691] usb 4-1: USB disconnect, device number 81 [ 1853.600755][ T5361] usb 1-1: device descriptor read/64, error -71 [ 1853.733511][T18270] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1853.753618][ T5361] usb usb1-port1: attempt power cycle [ 1853.928276][T18270] usb 3-1: Using ep0 maxpacket: 8 [ 1853.936923][T18270] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1853.954987][T18270] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1853.993850][T18270] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1854.015185][T18270] usb 3-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 1854.053429][T18270] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1854.061547][T18270] usb 3-1: Product: syz [ 1854.066452][T18270] usb 3-1: Manufacturer: syz [ 1854.071258][T18270] usb 3-1: SerialNumber: syz [ 1854.113761][ T5361] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1854.144154][ T5361] usb 1-1: device descriptor read/8, error -71 [ 1854.202214][T24238] hid-generic 0000:0000:0000.00D2: unknown main item tag 0x0 [ 1854.221020][T24238] hid-generic 0000:0000:0000.00D2: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1854.380028][T25493] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5734'. [ 1854.392977][ T5361] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1854.423243][ T5361] usb 1-1: device descriptor read/8, error -71 [ 1854.483240][ T5691] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1854.548317][ T5361] usb usb1-port1: unable to enumerate USB device [ 1854.703934][ T5691] usb 4-1: config 0 has no interfaces? [ 1854.749607][ T5691] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1854.759438][ T5691] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1854.768109][ T5691] usb 4-1: SerialNumber: syz [ 1854.804242][ T5691] usb 4-1: config 0 descriptor?? [ 1855.036230][T25495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1855.045581][T25495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1855.085323][ T5691] usb 4-1: USB disconnect, device number 82 [ 1858.041217][T25489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1858.051309][T25489] 8021q: adding VLAN 0 to HW filter on device ` [ 1858.108512][T25489] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1858.174580][T25489] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1858.185624][T25489] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1858.202259][T25489] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1858.213613][T25489] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1858.225503][T25513] fuse: Bad value for 'rootmode' [ 1858.232609][T25489] veth1_vlan: left promiscuous mode [ 1858.240064][T25489] veth0_vlan: left promiscuous mode [ 1858.247850][T25489] veth0_vlan: entered promiscuous mode [ 1858.258067][T25489] veth1_vlan: entered promiscuous mode [ 1858.269722][T25489] veth1_macvtap: left promiscuous mode [ 1858.277425][T25489] veth0_macvtap: left promiscuous mode [ 1858.284692][T25489] veth0_macvtap: entered promiscuous mode [ 1858.292154][T25489] veth1_macvtap: entered promiscuous mode [ 1858.308073][T25489] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1858.317607][T25489] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1858.328227][T25489] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1858.338233][T25489] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1858.354676][T25489] batman_adv: batadv0: Interface activated: gretap1 [ 1858.394946][T25489] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1858.433820][T25493] ipvlan0: entered promiscuous mode [ 1858.535472][T18363] bridge0: port 1(bridge_slave_0) entered blocking state [ 1858.542729][T18363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1858.561240][T18363] bridge0: port 2(bridge_slave_1) entered blocking state [ 1858.568514][T18363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1858.640988][T18270] usb 3-1: failed waiting for Axe-Fx III to boot: -71 [ 1858.669784][T18270] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1858.733192][ T9847] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1858.734185][T18270] usb 3-1: USB disconnect, device number 118 [ 1858.845897][ T1025] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1858.867895][ T1025] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1858.887836][ T1025] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1858.898471][ T1025] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1858.908905][ T9847] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1858.939989][ T9847] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1858.955790][ T9847] usb 6-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 1858.998929][ T9847] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1859.043739][ T9847] usb 6-1: config 0 descriptor?? [ 1859.084999][ T5691] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1859.113325][T25522] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5744'. [ 1859.142237][T25522] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5744'. [ 1859.243321][ T5691] usb 1-1: Using ep0 maxpacket: 16 [ 1859.259427][ T5691] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1859.296972][ T5691] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1859.318054][ T5691] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1859.340017][ T5691] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1859.371526][ T5691] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1859.409162][ T5691] usb 1-1: config 0 descriptor?? [ 1859.499058][ T9847] razer 0003:1532:010E.00D3: unknown main item tag 0x5 [ 1859.703731][ T9847] razer 0003:1532:010E.00D3: failed to enable macro keys: -71 [ 1859.734834][ T9847] razer 0003:1532:010E.00D3: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.5-1/input0 [ 1859.789331][ T9847] usb 6-1: USB disconnect, device number 31 [ 1859.871149][T25519] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5743'. [ 1859.936780][T25519] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5743'. [ 1860.011953][T25532] fido_id[25532]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1860.181397][ T5691] usbhid 1-1:0.0: can't add hid device: -71 [ 1860.190157][ T5691] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1860.213157][ T5691] usb 1-1: USB disconnect, device number 52 [ 1860.234825][T25535] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5748'. [ 1860.260551][T25535] openvswitch: netlink: Unknown nsh attribute 0 [ 1860.572928][T18270] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1860.777431][T18270] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1860.815124][T18270] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1860.832241][T25546] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5753'. [ 1860.841388][T18270] usb 3-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 1860.854139][T18270] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1860.941790][T18270] usb 3-1: config 0 descriptor?? [ 1861.173296][T25552] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5755'. [ 1861.213100][ T9] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1861.395870][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1861.433112][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1861.445793][ T5700] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1861.457439][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 1064, setting to 1024 [ 1861.478299][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1861.491684][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1861.501335][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1861.511543][ T9] usb 4-1: config 0 descriptor?? [ 1861.521288][T25548] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1861.546840][T18270] razer 0003:1532:010E.00D4: unknown main item tag 0x5 [ 1861.622963][ T5700] usb 6-1: Using ep0 maxpacket: 8 [ 1861.631011][ T5700] usb 6-1: config 0 has an invalid interface number: 176 but max is 2 [ 1861.645328][ T5700] usb 6-1: config 0 has no interface number 1 [ 1861.657710][ T5700] usb 6-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 1861.675273][ T5700] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1861.695100][T18270] razer 0003:1532:010E.00D4: failed to enable macro keys: -71 [ 1861.759302][ T5700] usb 6-1: config 0 descriptor?? [ 1861.776698][T18270] razer 0003:1532:010E.00D4: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.2-1/input0 [ 1861.886027][T18270] usb 3-1: USB disconnect, device number 119 [ 1861.978971][ T5700] qcserial 6-1:0.2: Qualcomm USB modem converter detected [ 1862.001046][ T9] plantronics 0003:047F:FFFF.00D5: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1862.047651][T25568] fido_id[25568]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1862.187178][ T5700] usb 6-1: USB disconnect, device number 32 [ 1862.222288][ T5700] qcserial 6-1:0.2: device disconnected [ 1862.831558][ T5700] usb 4-1: USB disconnect, device number 83 [ 1862.846917][T18270] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 1862.864197][T25580] batadv_slave_1: entered promiscuous mode [ 1862.975342][T25583] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.5763'. [ 1863.035467][T18270] usb 5-1: config 160 has an invalid interface number: 200 but max is 0 [ 1863.045817][T18270] usb 5-1: config 160 has no interface number 0 [ 1863.052271][T18270] usb 5-1: config 160 interface 200 has no altsetting 0 [ 1863.064202][T18270] usb 5-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 1863.074624][T18270] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1863.084274][T18270] usb 5-1: Product: syz [ 1863.088731][T18270] usb 5-1: Manufacturer: syz [ 1863.094274][T18270] usb 5-1: SerialNumber: syz [ 1863.253318][ T5361] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 1863.343543][T18270] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1863.370628][T18270] usb 5-1: MIDIStreaming interface descriptor not found [ 1863.416307][ T5361] usb 6-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1863.448565][ T5361] usb 6-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1863.510449][ T5361] usb 6-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1863.574908][ T5361] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1863.627685][ T5361] usb 6-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 1863.642711][T18270] usb 5-1: USB disconnect, device number 108 [ 1863.649674][T25579] batadv_slave_1: left promiscuous mode [ 1863.672509][ T5361] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1863.730382][ T5361] usb 6-1: config 0 descriptor?? [ 1863.789493][T21731] udevd[21731]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1864.153312][T18270] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 1864.192414][ T5361] holtek 0003:1241:5015.00D6: unbalanced collection at end of report description [ 1864.217353][ T5361] holtek 0003:1241:5015.00D6: parse failed [ 1864.232212][ T5361] holtek 0003:1241:5015.00D6: probe with driver holtek failed with error -22 [ 1864.323267][T18270] usb 5-1: Using ep0 maxpacket: 8 [ 1864.336028][T18270] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1864.351341][T18270] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1864.378251][T18270] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1864.403064][T18270] usb 5-1: too many endpoints for config 1 interface 1 altsetting 255: 255, using maximum allowed: 30 [ 1864.417039][ T5361] usb 6-1: USB disconnect, device number 33 [ 1864.428313][T18270] usb 5-1: config 1 interface 1 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1864.461715][T18270] usb 5-1: config 1 interface 1 has no altsetting 0 [ 1864.488425][T18270] usb 5-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 1864.500341][T18270] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1864.521601][T18270] usb 5-1: Product: syz [ 1864.527436][T11318] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1864.543311][T18270] usb 5-1: Manufacturer: syz [ 1864.550314][T18270] usb 5-1: SerialNumber: syz [ 1864.703897][T11318] usb 4-1: Using ep0 maxpacket: 16 [ 1864.714900][T11318] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1864.738127][T11318] usb 4-1: config 0 has no interface number 0 [ 1864.760613][T11318] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1864.784361][T18270] usb 5-1: selecting invalid altsetting 0 [ 1864.791315][T11318] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1864.801379][T18270] usb 5-1: 0:2 : does not exist [ 1864.809778][T11318] usb 4-1: Product: syz [ 1864.817044][T11318] usb 4-1: Manufacturer: syz [ 1864.826897][T11318] usb 4-1: SerialNumber: syz [ 1864.872740][T11318] usb 4-1: config 0 descriptor?? [ 1864.895421][T11318] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1865.280737][T25614] QAT: failed to copy from user. [ 1865.604266][T11318] gspca_spca1528: reg_w err -110 [ 1865.643732][T11318] spca1528 4-1:0.1: probe with driver spca1528 failed with error -110 [ 1865.713270][ T5700] usb 5-1: USB disconnect, device number 109 [ 1865.789541][ T9] usb 4-1: USB disconnect, device number 84 [ 1866.083240][T11318] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1866.146768][T25630] fuse: Bad value for 'fd' [ 1866.172702][ T30] audit: type=1800 audit(1779506456.136:3973): pid=25632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5777" name="bus" dev="tmpfs" ino=1606 res=0 errno=0 [ 1866.273502][T11318] usb 1-1: Using ep0 maxpacket: 8 [ 1866.285113][T11318] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1866.294984][T11318] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1866.319780][T11318] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1866.351139][T11318] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1866.385083][T11318] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1866.436875][T11318] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1866.482341][T11318] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1866.824714][T11318] usb 1-1: usb_control_msg returned -32 [ 1866.849223][T11318] usbtmc 1-1:16.0: can't read capabilities [ 1867.415798][T25652] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5784'. [ 1867.446234][T25652] bridge0: port 2(bridge_slave_1) entered disabled state [ 1867.453857][T25652] bridge0: port 1(bridge_slave_0) entered disabled state [ 1867.633161][T25659] IPVS: nq: FWM 3 0x00000003 - no destination available [ 1867.657785][T25660] usbtmc 1-1:16.0: usb_clear_halt returned -32 [ 1867.733045][T25320] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 1867.915383][T25320] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1867.953232][T25320] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1867.974909][T25320] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 1867.985217][T25320] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1867.994042][T25320] usb 6-1: SerialNumber: syz [ 1868.021039][T25320] cdc_ether 6-1:1.0: skipping garbage [ 1868.038143][T25320] usb 6-1: No union descriptors [ 1868.050813][T25320] usb-storage 6-1:1.0: USB Mass Storage device detected [ 1868.122228][T25320] usb-storage 6-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 1868.307122][T25656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1868.337595][T25656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1868.499706][ T5361] usb 6-1: USB disconnect, device number 34 [ 1868.545078][T25669] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5787'. [ 1868.813520][T25671] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5787'. [ 1868.943289][T11318] usb 1-1: USB disconnect, device number 53 [ 1869.246166][T25673] SET target dimension over the limit! [ 1869.592406][T25677] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5790'. [ 1869.990357][T25685] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5792'. [ 1870.050146][T25683] xt_TCPMSS: Only works on TCP SYN packets [ 1870.154379][T25683] SET target dimension over the limit! [ 1871.283243][T25320] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 1871.458010][T25320] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1871.506205][T25320] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1871.533060][T25320] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1871.581813][T25320] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1871.609214][T25710] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1871.678969][T25320] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1872.073405][T25320] usb 5-1: USB disconnect, device number 110 [ 1872.103822][ T5361] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1872.263282][ T5361] usb 4-1: device descriptor read/64, error -71 [ 1872.422921][ T5700] usb 6-1: new full-speed USB device number 35 using dummy_hcd [ 1872.556621][ T5361] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1872.564828][T25727] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5808'. [ 1872.574289][ T5700] usb 6-1: device descriptor read/64, error -71 [ 1872.724471][ T5361] usb 4-1: device descriptor read/64, error -71 [ 1872.833725][ T5700] usb 6-1: new full-speed USB device number 36 using dummy_hcd [ 1872.843908][ T5361] usb usb4-port1: attempt power cycle [ 1872.997276][ T5700] usb 6-1: device descriptor read/64, error -71 [ 1873.004841][ T9] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 1873.097840][T25744] geneve2: entered promiscuous mode [ 1873.106486][ T6402] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1873.127432][ T6402] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1873.134447][ T5700] usb usb6-port1: attempt power cycle [ 1873.161419][ T6402] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1873.163764][ T9] usb 5-1: device descriptor read/64, error -71 [ 1873.191753][ T6402] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1873.213293][ T5361] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1873.244971][ T5361] usb 4-1: device descriptor read/8, error -71 [ 1873.423016][ T9] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 1873.493116][ T5700] usb 6-1: new full-speed USB device number 37 using dummy_hcd [ 1873.504881][ T5361] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1873.533921][ T5700] usb 6-1: device descriptor read/8, error -71 [ 1873.544158][ T5361] usb 4-1: device descriptor read/8, error -71 [ 1873.573047][ T9] usb 5-1: device descriptor read/64, error -71 [ 1873.663749][ T5361] usb usb4-port1: unable to enumerate USB device [ 1873.693693][ T9] usb usb5-port1: attempt power cycle [ 1873.803002][ T5700] usb 6-1: new full-speed USB device number 38 using dummy_hcd [ 1873.843999][ T5700] usb 6-1: device descriptor read/8, error -71 [ 1873.963743][ T5700] usb usb6-port1: unable to enumerate USB device [ 1874.043080][ T9] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 1874.075310][ T9] usb 5-1: device descriptor read/8, error -71 [ 1874.323020][ T9] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 1874.353836][ T9] usb 5-1: device descriptor read/8, error -71 [ 1874.463354][ T9] usb usb5-port1: unable to enumerate USB device [ 1875.083213][ T9] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1875.261329][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1875.317268][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1875.360402][ T9] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1875.394901][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1875.438701][ T9] usb 1-1: config 0 descriptor?? [ 1875.980493][ T9] cp2112 0003:10C4:EA90.00D7: unknown main item tag 0x0 [ 1876.090241][ T9] cp2112 0003:10C4:EA90.00D7: unknown main item tag 0x0 [ 1876.112105][ T9] cp2112 0003:10C4:EA90.00D7: unknown main item tag 0x0 [ 1876.153352][ T9] cp2112 0003:10C4:EA90.00D7: unknown main item tag 0x0 [ 1876.164940][ T9] cp2112 0003:10C4:EA90.00D7: unknown main item tag 0x0 [ 1876.201141][ T9] cp2112 0003:10C4:EA90.00D7: unknown main item tag 0x0 [ 1876.260087][ T9] cp2112 0003:10C4:EA90.00D7: unknown main item tag 0x0 [ 1876.319817][ T9] cp2112 0003:10C4:EA90.00D7: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 1876.446544][ T9] cp2112 0003:10C4:EA90.00D7: error requesting version [ 1876.523329][ T5361] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1876.554816][ T9] cp2112 0003:10C4:EA90.00D7: probe with driver cp2112 failed with error -32 [ 1876.737673][ T5361] usb 3-1: New USB device found, idVendor=2040, idProduct=d853, bcdDevice=f8.f6 [ 1876.785994][ T5361] usb 3-1: New USB device strings: Mfr=65, Product=2, SerialNumber=3 [ 1876.809007][T25783] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5826'. [ 1876.820102][ T5361] usb 3-1: Product: syz [ 1876.842239][ T5361] usb 3-1: Manufacturer: syz [ 1876.863193][ T5361] usb 3-1: SerialNumber: syz [ 1876.889793][T25783] team0: Device syz_tun is up. Set it down before adding it as a team port [ 1876.911482][ T5361] usb 3-1: dvb_usb_v2: found a 'Hauppauge Mercury' in warm state [ 1877.008438][ T5361] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1877.054107][ T5361] dvbdev: DVB: registering new adapter (Hauppauge Mercury) [ 1877.087618][ T5361] usb 3-1: media controller created [ 1877.109645][T25775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5824'. [ 1877.200389][ T5361] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1877.263599][T25786] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000018: 0000 [#1] SMP KASAN PTI [ 1877.275642][T25786] KASAN: null-ptr-deref in range [0x00000000000000c0-0x00000000000000c7] [ 1877.284137][T25786] CPU: 0 UID: 0 PID: 25786 Comm: syz.0.5818 Tainted: G L syzkaller #0 PREEMPT(full) [ 1877.295079][T25786] Tainted: [L]=SOFTLOCKUP [ 1877.299445][T25786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1877.309506][T25786] RIP: 0010:__mutex_lock+0x14e/0x1550 [ 1877.314895][T25786] Code: e0 f3 44 9a 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 40 12 00 00 83 3d d0 28 9a 0e 00 75 23 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 74 05 e8 e6 39 86 f6 4d 39 64 24 58 0f 85 6c 11 00 [ 1877.334535][T25786] RSP: 0018:ffffc90007027420 EFLAGS: 00010206 [ 1877.340627][T25786] RAX: 0000000000000018 RBX: 0000000000000000 RCX: ffffffff9a44f303 [ 1877.348627][T25786] RDX: 0000000000000000 RSI: ffffffff8e220429 RDI: 00000000000000c0 [ 1877.356612][T25786] RBP: ffffc900070275d8 R08: ffffc90007027547 R09: 0000000000000000 [ 1877.364598][T25786] R10: ffffc90007027520 R11: fffff52000e04ea9 R12: 0000000000000068 [ 1877.372580][T25786] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff92000e04e9c [ 1877.380562][T25786] FS: 00007fdda9ae66c0(0000) GS:ffff888125287000(0000) knlGS:0000000000000000 [ 1877.389502][T25786] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1877.396087][T25786] CR2: 0000200000190030 CR3: 00000000515e8000 CR4: 00000000003526f0 [ 1877.404067][T25786] DR0: 0000000000000004 DR1: 0000000000000000 DR2: 0000000000000000 [ 1877.412043][T25786] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1877.420021][T25786] Call Trace: [ 1877.423308][T25786] [ 1877.426243][T25786] ? __mutex_lock+0x319/0x1550 [ 1877.431027][T25786] ? __mutex_trylock_common+0x158/0x260 [ 1877.436602][T25786] ? dvb_usbv2_generic_write+0x26/0x60 [ 1877.442164][T25786] ? __pfx___mutex_lock+0x10/0x10 [ 1877.447193][T25786] ? __pfx___mutex_lock+0x10/0x10 [ 1877.452227][T25786] ? __mutex_lock+0x319/0x1550 [ 1877.457013][T25786] dvb_usbv2_generic_write+0x26/0x60 [ 1877.462337][T25786] mxl111sf_ctrl_msg+0x160/0x2f0 [ 1877.467357][T25786] mxl111sf_write_reg+0xa9/0x1b0 [ 1877.472404][T25786] ? __pfx_mxl111sf_write_reg+0x10/0x10 [ 1877.477982][T25786] ? ww_mutex_trylock+0x3fa/0x900 [ 1877.483017][T25786] mxl111sf_i2c_xfer+0x496/0x5100 [ 1877.488048][T25786] ? unwind_next_frame+0xa6/0x2550 [ 1877.493177][T25786] ? __pfx_mxl111sf_i2c_xfer+0x10/0x10 [ 1877.498684][T25786] ? is_bpf_text_address+0x292/0x2b0 [ 1877.503977][T25786] ? is_bpf_text_address+0x26/0x2b0 [ 1877.509179][T25786] ? kernel_text_address+0xa5/0xe0 [ 1877.514313][T25786] ? __kernel_text_address+0xd/0x30 [ 1877.519546][T25786] ? unwind_get_return_address+0x4d/0x90 [ 1877.525185][T25786] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1877.531436][T25786] ? arch_stack_walk+0xfb/0x150 [ 1877.536302][T25786] ? stack_trace_save+0xa9/0x100 [ 1877.541249][T25786] ? __pfx_stack_trace_save+0x10/0x10 [ 1877.546629][T25786] ? stack_depot_save_flags+0x33/0x810 [ 1877.552114][T25786] ? __pfx_stack_trace_save+0x10/0x10 [ 1877.557519][T25786] ? look_up_lock_class+0x57/0x110 [ 1877.562646][T25786] ? register_lock_class+0x31/0x2e0 [ 1877.567860][T25786] ? __lock_acquire+0x6b5/0x2cf0 [ 1877.572837][T25786] __i2c_transfer+0x79a/0x1f70 [ 1877.577684][T25786] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1877.583499][T25786] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1877.589347][T25786] ? i2c_transfer+0xc8/0x2d0 [ 1877.593951][T25786] i2c_transfer+0x1cc/0x2d0 [ 1877.598461][T25786] i2cdev_ioctl_rdwr+0x460/0x740 [ 1877.603483][T25786] i2cdev_ioctl+0x6a5/0x880 [ 1877.607986][T25786] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1877.613022][T25786] ? __fget_files+0x3a0/0x420 [ 1877.617744][T25786] ? __fget_files+0x2a/0x420 [ 1877.622357][T25786] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1877.627304][T25786] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1877.632336][T25786] __se_sys_ioctl+0xfc/0x170 [ 1877.636940][T25786] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1877.643016][T25786] do_syscall_64+0x15f/0xf80 [ 1877.647610][T25786] ? trace_irq_disable+0x3b/0x140 [ 1877.652647][T25786] ? clear_bhb_loop+0x40/0x90 [ 1877.657329][T25786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1877.663230][T25786] RIP: 0033:0x7fdda8b9ce59 [ 1877.667670][T25786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1877.687280][T25786] RSP: 002b:00007fdda9ae6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1877.695719][T25786] RAX: ffffffffffffffda RBX: 00007fdda8e16180 RCX: 00007fdda8b9ce59 [ 1877.703693][T25786] RDX: 0000200000000500 RSI: 0000000000000707 RDI: 0000000000000005 [ 1877.711691][T25786] RBP: 00007fdda8c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1877.719668][T25786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1877.727644][T25786] R13: 00007fdda8e16218 R14: 00007fdda8e16180 R15: 00007fdda8f3fa48 [ 1877.735633][T25786] [ 1877.738662][T25786] Modules linked in: [ 1877.744397][T25786] ---[ end trace 0000000000000000 ]--- [ 1877.817806][T25786] RIP: 0010:__mutex_lock+0x14e/0x1550 [ 1877.833281][T25789] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1877.856569][ T5361] usb 3-1: selecting invalid altsetting 1 [ 1877.867900][T25788] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1877.869739][ T5361] set interface failed [ 1877.892767][T25786] Code: e0 f3 44 9a 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 40 12 00 00 83 3d d0 28 9a 0e 00 75 23 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 74 05 e8 e6 39 86 f6 4d 39 64 24 58 0f 85 6c 11 00 [ 1878.128963][T25786] RSP: 0018:ffffc90007027420 EFLAGS: 00010206 [ 1878.143896][T25786] RAX: 0000000000000018 RBX: 0000000000000000 RCX: ffffffff9a44f303 [ 1878.163054][T25786] RDX: 0000000000000000 RSI: ffffffff8e220429 RDI: 00000000000000c0 [ 1878.179428][T25786] RBP: ffffc900070275d8 R08: ffffc90007027547 R09: 0000000000000000 [ 1878.189125][T25786] R10: ffffc90007027520 R11: fffff52000e04ea9 R12: 0000000000000068 [ 1878.207257][T25786] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff92000e04e9c [ 1878.216716][T25786] FS: 00007fdda9ae66c0(0000) GS:ffff888125387000(0000) knlGS:0000000000000000 [ 1878.223437][ T9] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 1878.228672][T25786] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1878.240529][T25786] CR2: 00007f84ed5ea2f8 CR3: 00000000515e8000 CR4: 00000000003526f0 [ 1878.256301][T25786] DR0: 0000000000000006 DR1: 0000000000000000 DR2: 000000007fffdff5 [ 1878.264821][T25786] DR3: 0000800000000005 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1878.274919][T25786] Kernel panic - not syncing: Fatal exception [ 1878.281622][T25786] Kernel Offset: disabled [ 1878.285954][T25786] Rebooting in 86400 seconds..