last executing test programs: 1m11.297618138s ago: executing program 1 (id=899): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/disk', 0x228c00, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVen:Dd', 0xfffffffffffffffe) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x129a02, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) tee(0xffffffffffffffff, r1, 0x827, 0x8) read$FUSE(r1, &(0x7f0000004280)={0x2020}, 0x2020) writev(r0, &(0x7f0000002140)=[{&(0x7f0000000180)='T01\n', 0x4}, {&(0x7f00000003c0)="37c860346c168009fbef0c", 0xb}], 0x2) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000000)=0x80) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=ANY=[@ANYBLOB="7400000002060104000000000000000006000002050005000200000005"], 0x74}}, 0x4000004) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYRES64=r1, @ANYBLOB="51a1630ea1a2fd9a323d322a990315010c9ae944ddb10029a90dfcb1a3081e781fbff2497c3d0a983f812a5ccfaef469bebbba1b4d3b23c92fa8770352f6a4b0d41bcbecaf5f46ef92e2e1c5bc7115c31a0f22d5fd444406144706d412d7c8a316e8948d3f77fbfc4ab08a2237f3d1182645dd1b63d8a9632bb46673291911ee88d06523ae1cbdefa5b877b1a649b36ccf47aefb374d9e5acce86bc28dfbbd6df85ca47024c7eb0e1fb9a3ef4ae01736d9ee5dadd286e8c7a7e4df", @ANYRESHEX], 0x5c}}, 0x44040) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x31, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x20000040) r6 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r7, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x20007, 0xfffffffffffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, 0x8, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200000000, 0x1, 0x0, 0xfffffffffffffffe, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed9b, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0xfffffffe, 0x0, 0x7fffffffffffffff, 0x0, 0x4, 0x0, 0x4, 0x5, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newtfilter={0x40, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xb, 0x3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ETH_SRC={0xa}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x0) 1m9.054994823s ago: executing program 1 (id=917): socket$tipc(0x1e, 0x2, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) socket$tipc(0x1e, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x17ef, 0x60a4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x27, "", [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0xc1, 0xfe, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x9, 0xc0, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000080)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020601020000000000000010000000000900020073797a3100000000050004000000000011000300686173683a6e65742c6e6574000000000c00078008000640000000cd050005000a0000000500010006"], 0x58}}, 0x0) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fcf9efffffffffffff000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}, 0x1, 0x0, 0x0, 0x4008414}, 0x4800) 1m8.841656804s ago: executing program 0 (id=919): mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x9, 0x4d032, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001800), 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001"], 0x64}}, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0xffc00001) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_disconnect(r2) syz_usb_connect(0x0, 0x39, &(0x7f0000000040)=ANY=[], 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 1m8.670118124s ago: executing program 4 (id=920): r0 = socket(0x1d, 0x2, 0x6) accept4$packet(r0, 0x0, 0x0, 0x80000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="911061000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 1m8.549393243s ago: executing program 4 (id=922): syz_clone(0xb100, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x0) (async) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB="020300030c0000002cbd7000fcdbdf25030006000000004fd644670002004e2000000000000000000000000002000100000000000000070c0000000005000500000000000a00000000000004000000000000000000000000000000010700000000000000cc5857140df0be7d87e1108d83b78cc8bd7cea48fd3901b69fd1b554e106527bccd8e16ab23004fbf5897bc025389e3f6223e8f0f960a245db3e4e7e2914390b4867ae887308f8203c42d72f6cc5523c544d069805404353c9feac98496a6fa6bff534cbde5bb9035c2fd659003a"], 0x60}, 0x1, 0x7}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f00000006c0)=[{{&(0x7f0000000200)={0x2, 0x4e22, @remote}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x89, 0x4, "04d9"}]}}}], 0x18}}], 0x2, 0x0) (async) select(0x40, &(0x7f0000000140)={0x9, 0x6, 0xfffffffffffffffa, 0x1, 0x5, 0x1, 0x9, 0x1}, 0x0, 0x0, 0x0) (async) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x478, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x3a8, 0xffffffff, 0xffffffff, 0x3a8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@eui64={{0x28}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x1, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'pim6reg\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4d8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x40, 0x1e, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc4}}, 0x0) syz_usb_connect$uac3(0x0, 0x93, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x2a39, 0x3fd4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x3, 0x1, 0x7f, 0xc0, 0x8, {0x8, 0xb, 0x0, 0x1, 0x1, 0x1, 0x30, 0x23}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0x1d, 0x7}, [@output_terminal={0x13, 0x24, 0x3, 0x5, 0x302, 0x3, 0x4, 0x4, 0x8c87, 0xc, 0x41f4, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x60, 0x25, 0x3, 0x2, {0xa, 0x25, 0x25, 0x405, 0x5, 0x400}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x74, 0x8, 0xc0, {0xa, 0x25, 0x25, 0x7ffffffc, 0x2, 0xbe1}}}}}}}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) 1m7.162253367s ago: executing program 1 (id=933): syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x13, 0x2002) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b0001000000000904000001012900000905"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) write$cgroup_pid(r1, &(0x7f0000000000), 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="7a6c908eeb55a5ab5b5fb73ed5c2ca9018080000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0900000000000055090100000000009500000000000000b7020000001200007b2af0ff00000000d609080008000000db9af0ff50000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000001500000076000000bf9800000000000056080000020000008500000007000000b70000000000000095"], &(0x7f00000002c0)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m7.056098889s ago: executing program 4 (id=934): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000018c0)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x800}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0xf98, 0x2c, 0x0, @local, @mcast2, {[@fragment={0x3a}], @pkt_toobig={0x2, 0x0, 0x0, 0x800, {0xf, 0x6, "010380", 0x3ff, 0x0, 0x1, @loopback, @loopback, [@routing={0x2f, 0x10, 0x0, 0xa3, 0x3b00, [@private1={0xfc, 0x1, '\x00', 0x1}, @local, @private2, @empty, @remote, @loopback, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}]}, @hopopts={0x3a, 0x1d8, '\x00', [@generic={0xd, 0xebf, "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"}]}], "ab0924172f9c2a1d"}}}}}}, 0xfce) 1m6.856481772s ago: executing program 4 (id=935): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0x0) 1m6.610226681s ago: executing program 4 (id=936): openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001000ffff2abd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1503e3ffb309180008", @ANYRES32, @ANYBLOB="240012800c0001006d6163766c616e00140002800800070008000000060002000100000008000500", @ANYRES16=r0], 0x54}, 0x1, 0x0, 0x0, 0x24004845}, 0x8000002) 1m6.307617085s ago: executing program 4 (id=937): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='illinois', 0x8) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xa) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f03214e000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) syz_usb_connect(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="120100008e77e3405c1b0501f101010203010902240001000000000904000002a4d36f000905040900000000000905"], 0x0) 1m5.64812322s ago: executing program 3 (id=941): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x4cef40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) syz_emit_ethernet(0x7e, &(0x7f0000000440)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @parameter_prob={0xc, 0x0, 0x0, 0xff, 0x5, 0x0, {0x15, 0x4, 0x1, 0x8, 0x0, 0x65, 0x1, 0xc5, 0x33, 0x9, @loopback, @empty, {[@ssrr={0x89, 0x3, 0xcc}, @timestamp_addr={0x44, 0x3c, 0x18, 0x1, 0xa, [{@broadcast, 0x6}, {@private=0xa010100, 0x35dd}, {@multicast1, 0xff}, {@multicast2}, {@multicast2, 0x8}, {@local, 0x6}, {@multicast1, 0x100}]}]}}}}}}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000000040)=@other={0x2030000200000000, &(0x7f0000000100)}) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000280)) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) ioctl$XFS_IOC_GET_RESBLKS(r1, 0x80105873, &(0x7f0000000100)) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup_pressure(r4, &(0x7f0000000140)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r5, &(0x7f0000000040)={'some', 0x20, 0x17e, 0x20, 0x100002}, 0x2f) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0xc1, 0x0, 0x0) ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, &(0x7f00000005c0)={0xb6, 0x0, 0x80055e}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfdfffff3, 0xa, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0x2a35, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0xb, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f561e2c, 0x2, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xfffffffa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0xfffffffd, 0x3, 0x5, 0x4, 0x8, 0x3, 0x7, 0x0, 0x5, 0x6, 0x9, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x12f, 0x8000, 0x10, 0x8, 0x129432e2, 0xcb, 0xf9, 0xd, 0x2bf, 0x2, 0x9, 0xfffffffe, 0x7, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x8, 0xea4, 0xa, 0x4, 0x4000, 0x819, 0x9, 0xffffffff, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f32, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xfff7, 0x2, 0x7f, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0x5, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x8000, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x1, 0x7fff, 0x10000000, 0x8005, 0xb, 0x4, 0x5, 0x7, 0x0, 0x2, 0x5, 0x8, 0x86, 0x3, 0x1000000b, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x6, 0x6d01, 0x5, 0x3b, 0x3, 0x1fe, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d6, 0xbf, 0x203, 0x0, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x1, 0x3, 0x6, 0x9, 0x4, 0x3], [0x1000009, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x8ad, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x9, 0x8, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0xc8, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x9, 0x6, 0x4000001, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x1000009, 0x11, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000240)={'syzkaller0\x00', &(0x7f0000000180)=@ethtool_eeprom={0xc, 0x1, 0x80, 0xa6, "4223ef7774820516f2321521a9cb70911dbeea498dba46430e27064483ecc8cb4cae3731eb653ea9025f7618fe25d20d7b7ac87db9d14d035815915fc88eace6b98012022fe36ff5dc39683a7f0a73777f06792ce895dcf339886727bcbe39c4c276e319a2847722dd73adb40fc7d41d19479169f7fecfb44ce6145c5831cf5204e37d568dcb1f397bee608908665d62fcc7bd4e6dfc8132e505002c1a2d0103dca638fff960"}}) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={0xffffffffffffffff}, 0x4) close_range(r0, r8, 0x0) ioctl$EVIOCSMASK(r7, 0x40104593, &(0x7f0000000140)={0x0, 0x0, 0x0}) write$char_usb(r7, &(0x7f0000000040)="e2", 0x918) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1m5.61978961s ago: executing program 0 (id=942): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000130000000000000500000a28000000000a010400000000000000000200000708000240000000020900010073797a31000000004c000000030a01040000000000000000020000070900010073797a31000000000900030073797a320000000014000480080001000000000308000200000000000b00070066696c746572000084000000060a01040000000000000000020000070900010073797a31000000000900020073797a320000000058000480540001800a0001006d61746368000000440002800b0001006e6661636374000008000200000000002c0003"], 0x120}}, 0x0) 1m5.511856104s ago: executing program 3 (id=944): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4, 0x41}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x500}, 0x0) 1m5.471821455s ago: executing program 1 (id=945): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000070000000900012073797a3000000000080002400000000350000000120a01010000000000000000070000000900010073797a3000000000070002006f303000080003400000000720000480060001000002000005000200110000000c0003"], 0xcd0}}, 0x10) 1m5.341570384s ago: executing program 0 (id=946): r0 = syz_io_uring_setup(0x5fce, &(0x7f0000000940)={0x0, 0x40939e, 0x1, 0xfffffffe, 0x35}, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000900)={&(0x7f0000003000)={[{0x0, 0x0, 0x1}]}, 0x1, 0x3}, 0x1) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f00000003c0)={&(0x7f0000002000)={[{0x0, 0x3b, 0x400}, {0x0, 0xfffffffffffffe02, 0x2}, {0x0, 0x0, 0x74}, {0x0, 0x0, 0x3}, {0x0}, {0x0, 0x0, 0x2}, {0x0}, {0x0, 0x0, 0x3}]}, 0x8}, 0x1) io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x17, &(0x7f0000000f40)={0x0, 0x0, 0x3}, 0x1) syz_usb_connect$uac1(0x2, 0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004082057d0040000102030109027c0003010048060904000000010100000a240106000a0002010209040100000102000009040001010102000011240201090404035cd868ee6e1a5bc8e40b2402017f0206072d727309050109080000037f0725010c000200090402"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}]}]}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x104}}, 0x0) 1m5.278263597s ago: executing program 3 (id=948): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="500100001a000100000000000200000002001c1f0000c808ffffffea080006000700000008000400", @ANYRES32=r0, @ANYBLOB="06001c004e21000008000100ac1414", @ANYRES32], 0x150}, 0x1, 0x0, 0xfffffffffffffffd, 0x2000c094}, 0x4040080) 1m5.226135533s ago: executing program 1 (id=949): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400010000000900020073797a3000000000050005000000004005000100060000001c0007800600044000000000060005400000000008000640c9"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001240)={0x0, 0xffffffffffffff52, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="340000000906050f0a00000000000000000000000900020073797a30deffffff05000100060000000c00078006000440"], 0x34}}, 0x0) 1m5.171891955s ago: executing program 2 (id=950): openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x24004845}, 0x8000002) 1m5.145833673s ago: executing program 1 (id=951): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x6}, 0x0) pipe2$watch_queue(0x0, 0x80) close_range(r0, r1, 0x747a152a76f44f6) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_open_dev$evdev(0x0, 0x2, 0x862b01) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f0000000100)={0x51, 0x0, 0x0, {0xffff, 0x1}, {0x24, 0x8002}, @cond=[{0x8, 0x5388, 0x8, 0x800, 0x0, 0x7}, {0x0, 0x5, 0x1, 0x0, 0xfffa, 0xa}]}) setrlimit(0x8, 0x0) sendto$inet(r2, 0x0, 0x2c, 0x24044000, &(0x7f0000000380)={0x2, 0x4e22, @remote}, 0x10) r4 = shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) socket(0x2d, 0x2, 0x0) shmctl$IPC_RMID(r4, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) syz_usb_connect(0x2, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8, @ANYBLOB], 0x0) r5 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) r6 = fsopen(&(0x7f0000000000)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f00000003c0)='mountaddr\x00', &(0x7f0000000200)='127.0.0\xdb\x10\x00', 0x0) write$P9_RVERSION(r5, &(0x7f0000002200)=ANY=[], 0xfffffcd9) 1m5.094143056s ago: executing program 3 (id=952): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a010400000000060000000a0000020900010073797a31000000002c0004802800018007000100637400001c0002800800014000000013050003000000000008000240000000110900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x40480d4}, 0x24000000) 1m5.049736952s ago: executing program 2 (id=953): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@getqdisc={0x24, 0x26, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3, 0x10}, {0x8, 0xf}, {0xf, 0xffe0}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x90}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008"], 0xa4}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000014001a80100004800c"], 0x34}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r3 = socket$kcm(0x10, 0x2, 0x4) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001200)={0x64, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x21}]}]}, 0x64}}, 0x0) (async) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f00000000c0)={0x9, 0x0, 0x1200}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@gettaction={0x14, 0x5a, 0xc6b747b6bf1c6b95}, 0x14}}, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4048587b, &(0x7f0000000400)={{r3, &(0x7f0000000540)=')\x00\x15\x97H\x81\v1(K\xe1(\xef\x1d\x1f?\xad\x00\xf8\xc4Z\x0f\xbc\xd7X\x9c\x96C\xff\xb4 \x9e\xcf%q\xd9C\xc9\x9d\x05\xfb\x82\x81\xc6\x9c\xf2|H\x85\x84\xd9\xad\x88\xff\xeb\x0fS\bUH\x1a\xba\xd2\xad\x1a.\xcf\xa6Mo\x99\xd645\xb1b\x05\x15S\xa2\xbc\x00\xb0W90\xed\xfb\xf2\x0e\x95\x1a.hQ\x10|\a\x997mO\x96\x10\x12zb\xe0q\x85e\x88\xd6\xc0\xf4A5\xee\xee\xc0\xaaJJ\xd6w\xf0\xedq<\xc4\xb6\f\xa56\xd0\x01\xde\xef\x13\xb3\x85\x19\xb9\xdd-\xc2K\"\xdf\xb8\xf6\xc8\xbeF\x88\xe0t4c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00jMK\xce\xc9\xd6\v\x1b\xbb@\xd87\xc1\xfd\x95\xd3\xc4\xfa\x94\xd2\xe1W|\t\xc5\x10>\xd7\x0e\xb7G\xe4\xd8\x93&\x81\xe9r*\xf7F\xae \xbaJ\v9\xf3,\xbd\x10\xea\xc4\xd7@\xd3\xa4\xdf\xb7\xdf\xbaP\xa5>i\x7f\x14Bc\xfcm\x87\xffO22\xda\xe7\x8b!\xb4\bCec9E\x1eh\xd8\xe3,\xe8\x0f\xab\xaa\xc9\x95RF\xa7\xb7\xa0\xa7\xae\x82\\\x836\xe9V\xac\xb64e\x8c\xbf\xdfS\xe6\x06,\xd7\x92\x05\xbfE\t$', 0x111002, &(0x7f00000000c0)={@_ha_fsid={[0x2, 0x292]}, {0x1, 0x5, 0xe7f6, 0x3326}}, 0x3, &(0x7f0000000100), &(0x7f0000000680)=0x1}, 0x2, &(0x7f00000003c0)=[{0x1, 0x1002, &(0x7f0000000240)='\x8d\x00', &(0x7f0000000280)="99f298f61a76c28d0134f928c9c0c096c37912e20789ab26e9eedb335fbc21a11baa08a7f9acefad114d00571b398b5bb82f9ed66cadd08bea49b487a6a980897bc6c4beb7784925d115bb044e044f092775303986e2cf5043e1c5286653ade3fd2bfcc1899a8731", 0x68, 0xa}, {0x2, 0x2, &(0x7f0000000300)='$\x00', &(0x7f0000000340)="05335d6360fd889256c233b3994928793f3d2d5363f9d50f3d9442cfe7547ae0e13a9eb83087a66ec210aa33395b11dc1512c77a29c044611e3576b408eb94dc10b6ca0b", 0x44, 0x10}]}) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x608000, 0x0) (async) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000480)={0x1, 0x33e55cc6, 0x81, 0x4, 0x1}, 0x14) (async) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRES64=r6], 0x30}, 0x1, 0x0, 0x0, 0x4044411}, 0xc001) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1m5.041466002s ago: executing program 3 (id=954): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x4cef40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) syz_emit_ethernet(0x7e, &(0x7f0000000440)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @parameter_prob={0xc, 0x0, 0x0, 0xff, 0x5, 0x0, {0x15, 0x4, 0x1, 0x8, 0x0, 0x65, 0x1, 0xc5, 0x33, 0x9, @loopback, @empty, {[@ssrr={0x89, 0x3, 0xcc}, @timestamp_addr={0x44, 0x3c, 0x18, 0x1, 0xa, [{@broadcast, 0x6}, {@private=0xa010100, 0x35dd}, {@multicast1, 0xff}, {@multicast2}, {@multicast2, 0x8}, {@local, 0x6}, {@multicast1, 0x100}]}]}}}}}}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000000040)=@other={0x2030000200000000, &(0x7f0000000100)}) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000280)) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) ioctl$XFS_IOC_GET_RESBLKS(r1, 0x80105873, &(0x7f0000000100)) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup_pressure(r4, &(0x7f0000000140)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r5, &(0x7f0000000040)={'some', 0x20, 0x17e, 0x20, 0x100002}, 0x2f) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0xc1, 0x0, 0x0) ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, &(0x7f00000005c0)={0xb6, 0x0, 0x80055e}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfdfffff3, 0xa, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0x2a35, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0xb, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f561e2c, 0x2, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xfffffffa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0xfffffffd, 0x3, 0x5, 0x4, 0x8, 0x3, 0x7, 0x0, 0x5, 0x6, 0x9, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x12f, 0x8000, 0x10, 0x8, 0x129432e2, 0xcb, 0xf9, 0xd, 0x2bf, 0x2, 0x9, 0xfffffffe, 0x7, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x8, 0xea4, 0xa, 0x4, 0x4000, 0x819, 0x9, 0xffffffff, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f32, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xfff7, 0x2, 0x7f, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0x5, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x8000, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x1, 0x7fff, 0x10000000, 0x8005, 0xb, 0x4, 0x5, 0x7, 0x0, 0x2, 0x5, 0x8, 0x86, 0x3, 0x1000000b, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x6, 0x6d01, 0x5, 0x3b, 0x3, 0x1fe, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d6, 0xbf, 0x203, 0x0, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x1, 0x3, 0x6, 0x9, 0x4, 0x3], [0x1000009, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x8ad, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x9, 0x8, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0xc8, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x9, 0x6, 0x4000001, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x1000009, 0x11, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000240)={'syzkaller0\x00', &(0x7f0000000180)=@ethtool_eeprom={0xc, 0x1, 0x80, 0xa6, "4223ef7774820516f2321521a9cb70911dbeea498dba46430e27064483ecc8cb4cae3731eb653ea9025f7618fe25d20d7b7ac87db9d14d035815915fc88eace6b98012022fe36ff5dc39683a7f0a73777f06792ce895dcf339886727bcbe39c4c276e319a2847722dd73adb40fc7d41d19479169f7fecfb44ce6145c5831cf5204e37d568dcb1f397bee608908665d62fcc7bd4e6dfc8132e505002c1a2d0103dca638fff960"}}) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={0xffffffffffffffff}, 0x4) close_range(r0, r8, 0x0) ioctl$EVIOCSMASK(r7, 0x40104593, &(0x7f0000000140)={0x0, 0x0, 0x0}) write$char_usb(r7, &(0x7f0000000040)="e2", 0x918) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1m4.841647391s ago: executing program 2 (id=955): unshare(0x6020400) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000020000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff000000001fa900000000000007010000f8ffffffbfa400000000000007040000f0fffdffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000001000000b703000008000000850000006900000095"], &(0x7f0000005d80)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 1m4.744948799s ago: executing program 3 (id=956): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$uac1(0x6, 0xdb, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x2b73, 0x13, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc9, 0x3, 0x1, 0xff, 0x50, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x2c}, [@mixer_unit={0xa, 0x24, 0x4, 0x2, 0x2, "6fc54a2191"}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x300, 0x1, 0x6, 0x4}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x400, 0x3, 0x3, 0x10}, @mixer_unit={0x6, 0x24, 0x4, 0x5, 0x1, "d5"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x9, 0x4, 0x8, 0x4, "9382", "1471"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x3, 0x5b, 0x8, {0x7, 0x25, 0x1, 0xc, 0x7, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xdc, 0x7, 0x1000}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x9, 0x2, 0x5, 0x7, "c885f5", "30e9"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x9, 0x7, 0x3, 0x6, 0xd0}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x9, 0x6, 0x1, 0x4}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xb, 0x2, 0x4, 0xc8, "ec75"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x0, 0x0, 0x2, "a6"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3d7, 0x80, 0x4, 0x9, {0x7, 0x25, 0x1, 0x78ba1219759e063b, 0xe4}}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x0, 0x2, 0x7, 0x10, 0x3e}, 0x2a, &(0x7f0000000140)={0x5, 0xf, 0x2a, 0x4, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "25f2c2b196c908e9efdd9edc2c62c333"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0x4, 0xb1, 0x8, 0x3}, @ptm_cap={0x3}]}, 0x6, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x1407}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x414}}, {0x7, &(0x7f0000000240)=@string={0x7, 0x3, "ba9ae48c51"}}, {0xb9, &(0x7f0000000280)=@string={0xb9, 0x3, "ba3e573770cfc6cc316e3aa45e3ef3aa19ae40d0c83641c9752335b3fa2f9dad7d277d0f970ddd796147eb224652620946ce4917b17155f67c3dbe343c684026462f8520f927921ee7c85f159507da7c1cf4d00173e2d82a1c4cfbe47f1f48d343c2c2fcea67fab49add62488c4982d6a4c546acf48d4599c82717c9f4eb3ec9714d79ee0409ef981c7a14bc85b2e076602e7139876c774f5e41dc785206f817b51fc5ba0df6357a30aafd4c51a0876c49a27f45b7a70c"}}, {0xd3, &(0x7f0000000340)=@string={0xd3, 0x3, "872dd0a5f6c5a9b65b77b18fba96f0fb7b7b1e2db38aa222225cb5d61da8060d39eae28a44a6a8832ee2bce2201bb90455f9a1d283f644868826dd3230e000431b4ff7b85f543e25480441fcae69b6e118b2c614273fb9ea8a44993498a8512a1eaa40f1c9231e57f191d93c3a922429b82087de5c015f7b172db9703bf69d32247c687fd31ee68aac580bb9be769ac32501b0ed9eaa04ffa709f01713f92465457fecfe53c4a758e8088984be94c55822023d1026221fb3bc066ced674e1a8f7a5dab2739e50d1bd4a236f1d634e5f8ae"}}, {0x101, &(0x7f0000000440)=@string={0x101, 0x3, "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"}}]}) syz_usb_control_io$hid(r0, &(0x7f0000001200)={0x24, 0x0, 0x0, &(0x7f0000001180)={0x0, 0x22, 0x8, {[@local=@item_012={0x2, 0x2, 0x0, "2aaa"}, @main=@item_4={0x3, 0x0, 0x8, "198f63d7"}]}}, 0x0}, 0x0) 1m4.590329007s ago: executing program 2 (id=957): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000000000003b000000080003ff", @ANYRES32=r2, @ANYBLOB="2a003300d0000800080211000001080211000000505050505050"], 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1m4.401232041s ago: executing program 2 (id=958): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r8, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendto$packet(r9, &(0x7f0000000540)="f4efe0430444425a1a9942a2f606", 0xe, 0x0, &(0x7f0000000640)={0x11, 0x4, r12, 0x1, 0xff, 0x6, @remote}, 0x14) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002980)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {0x10}, {0x0, 0xfff1}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x4, 0x9, 0x0, 0xba64, 0x8, 0xd0f, 0x6, 0x7, 0xc16, 0x56, 0x1, 0x400000, 0x80000001, 0x8, 0x4, 0x1, 0x3ff, 0x4, 0x1, 0x2, 0x6, 0x0, 0x5, 0x9, 0x2, 0x8, 0x2, 0x525, 0x826e, 0x1, 0x2, 0x2108, 0x468b, 0x3, 0x7f, 0x9, 0xe36, 0x1, 0x1, 0xf, 0x0, 0x7, 0x6311, 0xb, 0x6, 0x3cd, 0x2e, 0x7, 0x4, 0x8, 0x4, 0xfffffffe, 0x4, 0x0, 0x81, 0x4, 0xf1, 0x7, 0x1000, 0x1000, 0x2, 0x8, 0x7, 0x4, 0x2, 0x8000, 0x0, 0x8, 0x39, 0x6, 0x5, 0x100, 0x9, 0xb427, 0xfffffffe, 0x3, 0x7, 0x2, 0x80000001, 0xf, 0x3, 0x0, 0xdfa9, 0x2, 0x4, 0x8, 0xfffffffe, 0x8fa, 0x4, 0x6, 0x6, 0x6, 0xffffffff, 0x7, 0x2, 0x165, 0xed, 0x400, 0x7c8, 0x5, 0x6, 0x9, 0x6, 0xd, 0xd, 0x0, 0x3, 0x1000, 0x5, 0x0, 0xc, 0x5, 0x7337, 0x2, 0xff, 0x1, 0x38000000, 0xe, 0x4, 0x1, 0x48, 0x0, 0x5, 0x1, 0x2, 0xd, 0x6795, 0xb, 0x9, 0x3, 0x495, 0x200, 0x8, 0x7, 0x1ff, 0x0, 0x8, 0x9, 0x1, 0x4, 0x3, 0x7, 0x0, 0x4, 0x80000000, 0x0, 0x5, 0x6a8, 0xc1, 0x0, 0x81, 0xc30, 0xffff01ad, 0xffffffff, 0x401, 0x5, 0x3, 0x7f, 0x9, 0x3, 0x7, 0x0, 0x9, 0x3, 0x79c0000, 0x3, 0x5, 0x100, 0x4, 0x8, 0xb535, 0x80, 0x32200, 0x9, 0x89c, 0xb3, 0x10, 0x7, 0x1, 0x3, 0xf, 0xc4e0, 0x89, 0x7, 0x9, 0xfffffffd, 0x9, 0xfffffff8, 0x4, 0x9, 0x7, 0x8, 0xe, 0xfffffffb, 0x739, 0x1ff, 0x4, 0x1, 0x5, 0x6, 0x5, 0x1629c76a, 0x40, 0x9, 0x8, 0x100, 0x1000, 0x8, 0x44, 0xe, 0x5, 0x289, 0x0, 0x3, 0x200, 0x4a5, 0x2, 0x2, 0x3, 0x1000, 0x2, 0x10, 0xfffffffa, 0x4, 0x1, 0x9, 0x2, 0x5, 0x7fffffff, 0xfffffffe, 0x1000, 0x407, 0x80, 0x1ff, 0x60e, 0x5, 0x1, 0xffff, 0x1, 0x0, 0xfffffff7, 0x358, 0x274, 0x7, 0x8, 0x4, 0x40, 0x4, 0x8, 0x8, 0x3, 0x7, 0x8000, 0x6a4b, 0x7, 0x5]}, @TCA_TBF_RTAB={0x404, 0x2, [0x7, 0x3, 0x6, 0x5, 0xa8e, 0x5, 0x407c, 0x80, 0x9, 0x3, 0x8000, 0x8, 0x3, 0x8, 0x5, 0xbc0, 0x7, 0x9c09, 0xffff, 0x3, 0x0, 0xc, 0xcfa, 0x0, 0xa, 0x6407, 0x80, 0x849, 0x8b, 0xffffffff, 0x4, 0x2, 0xa4c, 0x0, 0x9, 0x5, 0x200, 0x1ff, 0x4d76, 0x4, 0xb32, 0x3ff, 0x8, 0x0, 0x71, 0x5, 0x1, 0x8, 0x0, 0x7, 0xeb, 0x6, 0x87, 0x8, 0x0, 0x9, 0x3ff, 0xb, 0xfffffff8, 0xb6d, 0x10000081, 0x1, 0x8, 0xa, 0x0, 0x9, 0x81, 0x8, 0x26b, 0x8, 0x85b4, 0x9, 0x7, 0xfffffffe, 0x6, 0x8, 0xffffffc0, 0x3, 0x3, 0x4, 0x4, 0x80000001, 0xc8ee, 0xbacb161, 0x3ff, 0xffff12d0, 0x2, 0xffff8000, 0x10, 0x1ff, 0x2, 0x5, 0x2, 0x8, 0x7, 0x4, 0x2, 0x0, 0x1, 0x5, 0xfffffffb, 0x6, 0x0, 0x9, 0x8, 0x5, 0x6, 0xfffffffe, 0x2, 0x834f, 0x9, 0x1ff, 0x2, 0x62cd, 0xf98, 0xd8, 0x6, 0x6, 0x9, 0x3, 0xfffff000, 0x40000000, 0x7, 0x81, 0x0, 0x5, 0x10, 0x100, 0x40, 0xc, 0x400, 0x9151, 0x6, 0x7, 0x2, 0xb, 0x7, 0x4, 0x4, 0x64, 0x9, 0x400, 0x2, 0x6, 0x7, 0x971, 0x0, 0x6, 0x3, 0xa46a, 0x8, 0x23, 0x2, 0x8, 0x7fff, 0x8, 0x1, 0x557, 0x2, 0x3ff, 0x3ff, 0x2, 0x1, 0x1, 0x5c, 0x6, 0x1ff, 0x9, 0xb, 0x6, 0x0, 0x7ff, 0x868f, 0x9, 0xffffffff, 0x0, 0xfffffffe, 0x100, 0x40, 0x6c8, 0x8, 0x4, 0x4, 0x4, 0x81, 0xdf, 0x8, 0x4, 0x6, 0x4, 0xc59e, 0x9, 0x891a, 0x4, 0x1, 0x67a, 0x5, 0xaa, 0x2, 0x8000, 0x4, 0x5, 0x2, 0xfff, 0x9, 0x4533afbb, 0xd, 0x0, 0x593c, 0x1, 0xd99b, 0x55aa77c9, 0x56a, 0x9, 0x8, 0x200, 0x10001, 0x5, 0x6, 0x1000, 0xa, 0x5, 0x6, 0x4, 0x1ff, 0x40, 0x2, 0x5dff, 0xfffffffe, 0x8, 0x1, 0x4, 0x4, 0x1ff, 0x101, 0xffff, 0x12, 0x5, 0xfffffffc, 0x7e94, 0x6, 0xca55, 0x2, 0x5, 0x401, 0x8, 0x4, 0x80000000, 0x3, 0x1, 0x7, 0x4, 0x2, 0x8, 0x16, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0xb3538085985bb3d6}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d000000eaff010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) 1m3.963454474s ago: executing program 2 (id=959): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x71, &(0x7f00000002c0)="1a00000002000000", 0x8) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0xffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$getregs(0xe, r3, 0x6, &(0x7f0000000000)) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000500)={0x1, @win={{0x6, 0x7fffffff, 0x4, 0x100}, 0x4, 0x1, 0x0, 0x5, 0x0, 0x1}}) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000540)='nv', 0x2) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x6000000d}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x4d, 0x5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0xfffffffffffffedb) ioctl$KVM_RUN(r8, 0xae80, 0x0) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000120001030000000000000001230600fb4e230000ff7f00000200000081000000feffffff01000000fdffffff000001009eaf0000", @ANYRES32=0x0, @ANYBLOB="00000000148000000700000000000000"], 0x6d}, 0x1, 0x0, 0x0, 0x20044190}, 0x40004) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_usb_connect$cdc_ncm(0x5, 0x79, &(0x7f0000000080)=ANY=[@ANYBLOB="12010102020000082505a1a4400001e80301090267000201df70010904000001020d00000b24060001f4ef554c63f505240024000d240f01fcffffffba00b4000906241abcf8e60424010302090581031000dd00000904010002020d000009058202ff0308090909050302080000060b0000000000"], &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x1) 1m3.917058089s ago: executing program 0 (id=960): r0 = socket$igmp6(0xa, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x4}, 0x94) sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f00000022c0)={0xa, 0x2, 0x812, @dev={0xfe, 0x80, '\x00', 0x17}, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="280000000000000029000000040000003c0102000300"], 0x28}, 0xc0) 1m3.713308004s ago: executing program 0 (id=961): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r2, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=r2, @ANYBLOB="ac1414aaffffffff000000001400000000000000000f00000700000000000000ffff"], 0x38}, 0x200000e0) 1m3.038638466s ago: executing program 0 (id=962): r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7, 0x227c0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic', 0x3) io_uring_register$IORING_REGISTER_SEND_MSG_RING(r0, 0x1f, &(0x7f0000000180)={0x28, 0x67, 0x0, r0, &(0x7f0000000080)="72f7e2e41dfd127ccd0add930aea666993b176cd4d57e21420cb2b48680733c20b898298a2f5d8d64c84b017173f4a40ec601321487d1066b2dc957af816a3b44a76ff3db347f5de99f8e98b74e2c80bf0328ee5f70037edf417acbdd3233e5cf884fc07918479381ab1e7f0456524894fe29c0564a25b5ea7150b6c68005373eccd2919d84ed145b0c2ce558e596b6001500bb529561b2124cb82c8e27d0f1175fa7f4db77e20c6e1490e7c3244e16148db54f8142d38559e20ad17202029ca00237e87cb64b34fe744716b3ac528e83a38a450bc73cee5ea74100582a8a88582b080b2670d02c4249d1d0b57b43c7d5932ee", 0x0, 0x8, 0x0, 0x1, {0x0, 0x0, r0, 0x6}}, 0x1) ioctl$KVM_TDX_INIT_VCPU(r0, 0xc008aeba, &(0x7f00000001c0)={0x2, 0x0, 0x1}) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, 0x0, 0x1) ioctl$NILFS_IOCTL_SYNC(r0, 0x80086e8a, &(0x7f0000000200)) ioctl$NILFS_IOCTL_GET_SUSTAT(r0, 0x80306e85, &(0x7f0000000240)) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000280)=r0) write$UHID_INPUT2(r0, &(0x7f00000002c0)={0xc, {0xa2, "4b49ddfe76c4d9a9fa3e330a41a52cf1bbd004c449422ed77573b7330f3f95ecc6b399a57168a3b2d1aa65ba8c8048c7dab54229588a390fac5e7ae8e22678c19f56ac0a92979170d9fbfd3ac64a417dc852d59c639a14fcf851969f2bc5f17e730b564f8df86eadc45dfb2f97fce7481d21de3bad40883e217af387300ecd207e1f72d6d1b0becc7a78fb3ab0233dc38035a7472550c8f4dfe08de01be72bc20c19"}}, 0xa8) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000380)) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = syz_ublk_setup_io_uring(0x71f5, &(0x7f0000000400)={0x0, 0x152e, 0x81000, 0x2, 0x39c, 0x0, r1}, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)) process_madvise(r0, &(0x7f0000000640)=[{&(0x7f0000000540)="7f993af12cf67cfe846fd8ee4e66393a208e7c57834ba9ca24758e53eac0177ae10437e7d229e9ae2dc9c33cb525b95a91b5468b0d9fc95abe830bdafc55299ff8bd9da0a014f3221e495d1b96c39145016fc1b973fc71b66eeb55d383f284fb437a4a2cfd1d12424bec4018e58afc3505de950a5fea67ff80391899e8a03baa55fb6685f1fff5daf4017a0a390d3a29", 0x90}, {&(0x7f0000000600)='h', 0x1}], 0x2, 0x3, 0x0) ftruncate(r2, 0x7fffffff) r3 = syz_kvm_setup_syzos_vm$x86(r0, &(0x7f0000bff000/0x400000)=nil) syz_kvm_add_vcpu$x86(r3, &(0x7f0000000780)={0x0, &(0x7f0000000680)=[@nested_create_vm={0x12d, 0x18}, @nested_amd_vmsave={0x183, 0x18, 0x1}, @cpuid={0x64, 0x18, {0x8, 0x800}}, @wr_drn={0x68, 0x20, {0x2, 0x2}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @control_area=0x14, 0x10000, 0x7fff, 0x7}}, @wr_drn={0x68, 0x20, {0x1, 0x200}}, @nested_amd_set_intercept={0x181, 0x30, {0x3, 0x0, 0x8}}], 0xf0}) r4 = syz_open_dev$video4linux(&(0x7f00000007c0), 0x0, 0x200000) ioctl$VIDIOC_CROPCAP(r4, 0xc02c563a, &(0x7f0000000800)={0x4, {0x7, 0x4be2137c, 0x5c9, 0xfff}, {0x8000, 0x6, 0x10000, 0x1}, {0x4, 0x4}}) ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x4161, 0x0) close_range(r2, r0, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000840)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) close_range(r2, r4, 0x2) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000880)='wg2\x00', 0x4) r6 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r6, 0x0, 0x486, &(0x7f00000008c0), &(0x7f0000000900)=0xc) fstat(r6, &(0x7f0000000940)) openat$dir(0xffffffffffffff9c, &(0x7f00000009c0)='./file0\x00', 0x105000, 0x2) read$dsp(r5, &(0x7f0000000a00)=""/236, 0xec) ioctl$FS_IOC_GETFSUUID(0xffffffffffffffff, 0x80111500, &(0x7f0000000b00)) landlock_restrict_self(0xffffffffffffffff, 0xc6c0f4bfb8fa40de) 0s ago: executing program 32 (id=962): r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7, 0x227c0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic', 0x3) io_uring_register$IORING_REGISTER_SEND_MSG_RING(r0, 0x1f, &(0x7f0000000180)={0x28, 0x67, 0x0, r0, &(0x7f0000000080)="72f7e2e41dfd127ccd0add930aea666993b176cd4d57e21420cb2b48680733c20b898298a2f5d8d64c84b017173f4a40ec601321487d1066b2dc957af816a3b44a76ff3db347f5de99f8e98b74e2c80bf0328ee5f70037edf417acbdd3233e5cf884fc07918479381ab1e7f0456524894fe29c0564a25b5ea7150b6c68005373eccd2919d84ed145b0c2ce558e596b6001500bb529561b2124cb82c8e27d0f1175fa7f4db77e20c6e1490e7c3244e16148db54f8142d38559e20ad17202029ca00237e87cb64b34fe744716b3ac528e83a38a450bc73cee5ea74100582a8a88582b080b2670d02c4249d1d0b57b43c7d5932ee", 0x0, 0x8, 0x0, 0x1, {0x0, 0x0, r0, 0x6}}, 0x1) ioctl$KVM_TDX_INIT_VCPU(r0, 0xc008aeba, &(0x7f00000001c0)={0x2, 0x0, 0x1}) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, 0x0, 0x1) ioctl$NILFS_IOCTL_SYNC(r0, 0x80086e8a, &(0x7f0000000200)) ioctl$NILFS_IOCTL_GET_SUSTAT(r0, 0x80306e85, &(0x7f0000000240)) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000280)=r0) write$UHID_INPUT2(r0, &(0x7f00000002c0)={0xc, {0xa2, "4b49ddfe76c4d9a9fa3e330a41a52cf1bbd004c449422ed77573b7330f3f95ecc6b399a57168a3b2d1aa65ba8c8048c7dab54229588a390fac5e7ae8e22678c19f56ac0a92979170d9fbfd3ac64a417dc852d59c639a14fcf851969f2bc5f17e730b564f8df86eadc45dfb2f97fce7481d21de3bad40883e217af387300ecd207e1f72d6d1b0becc7a78fb3ab0233dc38035a7472550c8f4dfe08de01be72bc20c19"}}, 0xa8) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000380)) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = syz_ublk_setup_io_uring(0x71f5, &(0x7f0000000400)={0x0, 0x152e, 0x81000, 0x2, 0x39c, 0x0, r1}, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)) process_madvise(r0, &(0x7f0000000640)=[{&(0x7f0000000540)="7f993af12cf67cfe846fd8ee4e66393a208e7c57834ba9ca24758e53eac0177ae10437e7d229e9ae2dc9c33cb525b95a91b5468b0d9fc95abe830bdafc55299ff8bd9da0a014f3221e495d1b96c39145016fc1b973fc71b66eeb55d383f284fb437a4a2cfd1d12424bec4018e58afc3505de950a5fea67ff80391899e8a03baa55fb6685f1fff5daf4017a0a390d3a29", 0x90}, {&(0x7f0000000600)='h', 0x1}], 0x2, 0x3, 0x0) ftruncate(r2, 0x7fffffff) r3 = syz_kvm_setup_syzos_vm$x86(r0, &(0x7f0000bff000/0x400000)=nil) syz_kvm_add_vcpu$x86(r3, &(0x7f0000000780)={0x0, &(0x7f0000000680)=[@nested_create_vm={0x12d, 0x18}, @nested_amd_vmsave={0x183, 0x18, 0x1}, @cpuid={0x64, 0x18, {0x8, 0x800}}, @wr_drn={0x68, 0x20, {0x2, 0x2}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @control_area=0x14, 0x10000, 0x7fff, 0x7}}, @wr_drn={0x68, 0x20, {0x1, 0x200}}, @nested_amd_set_intercept={0x181, 0x30, {0x3, 0x0, 0x8}}], 0xf0}) r4 = syz_open_dev$video4linux(&(0x7f00000007c0), 0x0, 0x200000) ioctl$VIDIOC_CROPCAP(r4, 0xc02c563a, &(0x7f0000000800)={0x4, {0x7, 0x4be2137c, 0x5c9, 0xfff}, {0x8000, 0x6, 0x10000, 0x1}, {0x4, 0x4}}) ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x4161, 0x0) close_range(r2, r0, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000840)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) close_range(r2, r4, 0x2) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000880)='wg2\x00', 0x4) r6 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r6, 0x0, 0x486, &(0x7f00000008c0), &(0x7f0000000900)=0xc) fstat(r6, &(0x7f0000000940)) openat$dir(0xffffffffffffff9c, &(0x7f00000009c0)='./file0\x00', 0x105000, 0x2) read$dsp(r5, &(0x7f0000000a00)=""/236, 0xec) ioctl$FS_IOC_GETFSUUID(0xffffffffffffffff, 0x80111500, &(0x7f0000000b00)) landlock_restrict_self(0xffffffffffffffff, 0xc6c0f4bfb8fa40de) kernel console output (not intermixed with test programs): [ T991] usb 4-1: USB disconnect, device number 8 [ 207.973488][ T7119] usb 2-1: Using ep0 maxpacket: 8 [ 207.979605][ T7119] usb 2-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 207.996114][ T5910] udevd[5910]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 208.021092][ T7119] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.021148][ T7119] usb 2-1: Product: syz [ 208.029185][ T7119] usb 2-1: Manufacturer: syz [ 208.029232][ T7119] usb 2-1: SerialNumber: syz [ 208.087024][ T7119] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 208.335305][ T8495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.434'. [ 208.417044][ T7119] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 208.435061][ T5690] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 208.618456][ T5690] usb 4-1: unable to get BOS descriptor or descriptor too short [ 208.627137][ T5690] usb 4-1: not running at top speed; connect to a high speed hub [ 208.627219][ T5690] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 208.656858][ T5690] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 208.656937][ T5690] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 208.656961][ T5690] usb 4-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 208.657023][ T5690] usb 4-1: config 14 has no interface number 0 [ 208.657184][ T5690] usb 4-1: config 14 has no interface number 1 [ 208.657420][ T5690] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 208.657557][ T5690] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 208.657631][ T5690] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 208.657754][ T5690] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.657817][ T5690] usb 4-1: config 14 interface 57 has no altsetting 0 [ 208.657922][ T5690] usb 4-1: config 14 interface 228 has no altsetting 0 [ 208.761733][ T5690] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.761788][ T5690] usb 4-1: Product: syz [ 208.761824][ T5690] usb 4-1: Manufacturer: syz [ 208.761847][ T5690] usb 4-1: SerialNumber: syz [ 209.238255][ T5690] legousbtower 4-1:14.57: interrupt endpoints not found [ 209.622592][ T5690] legousbtower 4-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 209.645862][ T5690] legousbtower 4-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 210.131502][ T7119] usb 2-1: USB disconnect, device number 8 [ 210.240107][ T8512] usb 4-1: LEGO USB Tower reset control request failed [ 210.280102][ T5910] udevd[5910]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 210.397301][ T8516] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 210.455247][ T5690] usb 4-1: USB disconnect, device number 9 [ 210.472737][ T8522] netlink: 8 bytes leftover after parsing attributes in process `syz.4.443'. [ 210.623919][ T5690] legousbtower 4-1:14.228: LEGO USB Tower #-160 now disconnected [ 210.769547][ T8529] netlink: 16 bytes leftover after parsing attributes in process `syz.4.444'. [ 210.781109][ T8531] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 211.740980][ T31] kauditd_printk_skb: 17 callbacks suppressed [ 211.741056][ T31] audit: type=1326 audit(1788896095.344:1523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8553 comm="syz.3.450" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f966659e159 code=0x0 [ 211.897947][ T8561] loop0: detected capacity change from 0 to 3904 [ 211.931357][ T8561] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 211.940965][ T8561] ldm_validate_privheads(): Disk read failed. [ 211.949011][ T8561] ldm_parse_tocblock(): TOCBLOCK's second bitmap is 'log', should be ''. [ 211.957851][ T8561] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 211.966670][ T8561] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 2. [ 211.974224][ T8561] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 3. [ 211.974254][ T8561] ldm_validate_tocblocks(): Failed to find a valid TOCBLOCK. [ 211.974320][ T8561] loop0: [ 211.974343][ T8561] loop0: partition table partially beyond EOD, truncated [ 212.063181][ T7116] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 212.098055][ T8563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.122298][ T8563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.123882][ T5706] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 212.127263][ T991] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 212.226948][ T7116] usb 4-1: New USB device found, idVendor=0499, idProduct=104f, bcdDevice=25.2a [ 212.238941][ T7116] usb 4-1: config 9 has an invalid interface number: 46 but max is 1 [ 212.247160][ T7116] usb 4-1: config 9 has an invalid interface number: 12 but max is 1 [ 212.247221][ T7116] usb 4-1: config 9 has no interface number 0 [ 212.247244][ T7116] usb 4-1: config 9 has no interface number 1 [ 212.247329][ T7116] usb 4-1: config 9 interface 46 altsetting 163 endpoint 0x8 has invalid maxpacket 39357, setting to 64 [ 212.247373][ T7116] usb 4-1: config 9 interface 12 altsetting 122 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 212.247404][ T7116] usb 4-1: config 9 interface 46 has no altsetting 0 [ 212.247426][ T7116] usb 4-1: config 9 interface 12 has no altsetting 0 [ 212.255789][ T5706] usb 1-1: device descriptor read/64, error -71 [ 212.264363][ T7116] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.264431][ T7116] usb 4-1: Product: syz [ 212.264482][ T7116] usb 4-1: Manufacturer: ᑯ厕髚龲檛⼻ᰠ[ 212.264524][ T7116] usb 4-1: SerialNumber: syz [ 212.288347][ T7116] usb 4-1: rejected 1 configuration due to insufficient available bus power [ 212.288423][ T7116] usb 4-1: no configuration chosen from 1 choice [ 212.293467][ T991] usb 5-1: Using ep0 maxpacket: 8 [ 212.308278][ T991] usb 5-1: New USB device found, idVendor=17ef, idProduct=60a4, bcdDevice= 0.00 [ 212.334976][ T991] usb 5-1: config 0 interface 0 has no altsetting 0 [ 212.335025][ T991] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.346206][ T7119] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 212.401599][ T991] usb 5-1: config 0 descriptor?? [ 212.513189][ T5706] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 212.513230][ T7119] usb 2-1: Using ep0 maxpacket: 16 [ 212.529734][ T7119] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 212.542761][ T7119] usb 2-1: config index 0 descriptor too short (expected 65, got 36) [ 212.542829][ T7119] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 212.542870][ T7119] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 212.542901][ T7119] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 212.542932][ T7119] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 212.542980][ T7119] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.616305][ T7119] usb 2-1: config 0 descriptor?? [ 212.626030][ T8564] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 212.642639][ T7119] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input8 [ 212.644419][ T5706] usb 1-1: device descriptor read/64, error -71 [ 212.754388][ T5706] usb usb1-port1: attempt power cycle [ 212.761634][ T8568] syzkaller0: entered promiscuous mode [ 212.767255][ T8568] syzkaller0: entered allmulticast mode [ 212.784876][ T8568] tipc: Started in network mode [ 212.789978][ T8568] tipc: Node identity aa958b299102, cluster identity 4711 [ 212.799317][ T8568] tipc: Enabled bearer , priority 0 [ 212.809429][ T8567] tipc: Resetting bearer [ 212.856603][ T8567] tipc: Disabling bearer [ 212.867264][ T25] usb 2-1: USB disconnect, device number 9 [ 212.873295][ C0] pxrc 2-1:0.0: pxrc_usb_irq - usb_submit_urb failed with result: -19 [ 213.031691][ T991] usbhid 5-1:0.0: can't add hid device: -71 [ 213.031992][ T991] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 213.067941][ T991] usb 5-1: USB disconnect, device number 9 [ 213.115480][ T5706] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 213.134803][ T5706] usb 1-1: device descriptor read/8, error -71 [ 213.375763][ T5706] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 213.396611][ T5706] usb 1-1: device descriptor read/8, error -71 [ 213.503619][ T5706] usb usb1-port1: unable to enumerate USB device [ 213.690887][ T8587] syzkaller0: entered promiscuous mode [ 213.690947][ T8587] syzkaller0: entered allmulticast mode [ 213.707812][ T8587] tipc: Started in network mode [ 213.707870][ T8587] tipc: Node identity 0a19daa87e7, cluster identity 4711 [ 213.730749][ T8587] tipc: Enabled bearer , priority 0 [ 213.741237][ T8586] tipc: Resetting bearer [ 213.777240][ T8586] tipc: Disabling bearer [ 213.885778][ T8595] fuse: Bad value for 'fd' [ 214.383244][ T7119] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 214.521099][ T8621] netlink: 8 bytes leftover after parsing attributes in process `syz.1.477'. [ 214.535217][ T7119] usb 5-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 214.539533][ T7119] usb 5-1: config 0 has an invalid interface number: 205 but max is 0 [ 214.539617][ T7119] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.539670][ T7119] usb 5-1: config 0 has no interface number 0 [ 214.539781][ T7119] usb 5-1: config 0 interface 205 has no altsetting 0 [ 214.547594][ T7119] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.547665][ T7119] usb 5-1: Product: syz [ 214.547717][ T7119] usb 5-1: Manufacturer: syz [ 214.547756][ T7119] usb 5-1: SerialNumber: syz [ 214.614018][ T7119] usb 5-1: config 0 descriptor?? [ 214.624048][ T7119] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 214.624121][ T7119] dvb-usb: bulk message failed: -22 (3/0) [ 214.669512][ T7119] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 214.677176][ T7119] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 214.677331][ T7119] usb 5-1: media controller created [ 214.696984][ T7119] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 214.749497][ T991] usb 4-1: USB disconnect, device number 10 [ 214.750602][ T7119] dvb-usb: bulk message failed: -22 (6/0) [ 214.750707][ T7119] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 214.812808][ T7119] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input9 [ 214.920362][ T7119] dvb-usb: schedule remote query interval to 150 msecs. [ 214.920455][ T7119] dvb-usb: bulk message failed: -22 (3/0) [ 214.944998][ T7119] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 214.967787][ T7119] usb 5-1: USB disconnect, device number 10 [ 215.090111][ T8631] netlink: 'syz.2.481': attribute type 3 has an invalid length. [ 215.134618][ T7119] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 215.520899][ T8643] vlan2: entered promiscuous mode [ 215.520944][ T8643] bridge0: entered promiscuous mode [ 215.811826][ T8654] netlink: 8 bytes leftover after parsing attributes in process `syz.0.487'. [ 215.821836][ T8654] netlink: 4 bytes leftover after parsing attributes in process `syz.0.487'. [ 215.868429][ T8654] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.898733][ T8654] bond1: (slave bond0): making interface the new active one [ 215.918232][ T8654] bond1: (slave bond0): Enslaving as an active interface with an up link [ 216.121691][ T31] audit: type=1326 audit(1788896099.724:1524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8656 comm="syz.0.488" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde12f9e159 code=0x7ffc0000 [ 216.142065][ T31] audit: type=1326 audit(1788896099.734:1525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8656 comm="syz.0.488" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde12f9e159 code=0x7ffc0000 [ 216.147155][ T31] audit: type=1326 audit(1788896099.734:1526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8656 comm="syz.0.488" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fde12f9e159 code=0x7ffc0000 [ 216.147267][ T31] audit: type=1326 audit(1788896099.734:1527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8656 comm="syz.0.488" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde12f9e159 code=0x7ffc0000 [ 216.147311][ T31] audit: type=1326 audit(1788896099.734:1528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8656 comm="syz.0.488" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde12f9e159 code=0x7ffc0000 [ 216.167733][ T31] audit: type=1326 audit(1788896099.764:1529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8656 comm="syz.0.488" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fde12f9e159 code=0x7ffc0000 [ 216.177684][ T31] audit: type=1326 audit(1788896099.784:1530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8656 comm="syz.0.488" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde12f9e159 code=0x7ffc0000 [ 216.177744][ T31] audit: type=1326 audit(1788896099.784:1531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8656 comm="syz.0.488" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde12f9e159 code=0x7ffc0000 [ 216.269683][ T31] audit: type=1326 audit(1788896099.864:1532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8656 comm="syz.0.488" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fde12f9e159 code=0x7ffc0000 [ 216.351438][ T8658] netlink: 20 bytes leftover after parsing attributes in process `syz.0.488'. [ 216.483109][ T991] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 216.499973][ T8666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.519727][ T8666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.616022][ T8674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.627952][ T8674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.636158][ T8674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.636186][ T991] usb 4-1: Using ep0 maxpacket: 16 [ 216.648397][ T8674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.651082][ T991] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 216.652870][ T991] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 216.652895][ T991] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 216.653111][ T7115] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 216.672937][ T8674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.685683][ T8674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.701829][ T8674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.702274][ T8674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.738404][ T991] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.738449][ T991] usb 4-1: Product: syz [ 216.738484][ T991] usb 4-1: Manufacturer: syz [ 216.738503][ T991] usb 4-1: SerialNumber: syz [ 216.738543][ T8674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.759969][ T8674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.795253][ T991] usb 4-1: 0:2 : does not exist [ 216.815714][ T7115] usb 2-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 216.831211][ T7115] usb 2-1: config 5 has an invalid interface number: 123 but max is 0 [ 216.831269][ T7115] usb 2-1: config 5 has no interface number 0 [ 216.831400][ T7115] usb 2-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 216.831520][ T7115] usb 2-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 216.831586][ T7115] usb 2-1: config 5 interface 123 has no altsetting 0 [ 216.861551][ T7119] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 216.888410][ T7115] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.888467][ T7115] usb 2-1: Product: syz [ 216.888502][ T7115] usb 2-1: Manufacturer: syz [ 216.888523][ T7115] usb 2-1: SerialNumber: syz [ 217.026582][ T7119] usb 5-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 217.037597][ T7119] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.128424][ T7119] usb 5-1: selecting invalid altsetting 3 [ 217.128500][ T7119] comedi comedi5: could not set alternate setting 3 in high speed [ 217.134409][ T7119] usbduxsigma 5-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 217.149131][ T7119] usbduxsigma 5-1:128.0: probe with driver usbduxsigma failed with error -22 [ 217.211197][ T8660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.220453][ T8660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.234592][ T8660] netlink: 56 bytes leftover after parsing attributes in process `syz.3.490'. [ 217.355032][ T5682] usb 5-1: USB disconnect, device number 11 [ 217.479008][ T8660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.490260][ T8660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.509149][ T25] usb 4-1: USB disconnect, device number 11 [ 217.909492][ T7115] ni6501 2-1:5.123: driver 'ni6501' failed to auto-configure device. [ 217.942962][ T7115] usb 2-1: USB disconnect, device number 10 [ 218.254842][ T8707] netlink: 12 bytes leftover after parsing attributes in process `syz.4.497'. [ 218.368024][ T8707] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 218.414577][ T8713] netlink: 8 bytes leftover after parsing attributes in process `syz.0.502'. [ 218.570033][ T8707] loop8: detected capacity change from 0 to 7 [ 218.723389][ T8707] Dev loop8: unable to read RDB block 7 [ 218.729407][ T8707] loop8: unable to read partition table [ 218.729681][ T8707] loop8: partition table beyond EOD, truncated [ 218.744689][ T8707] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 219.313897][ T8732] bridge0: port 3(syz_tun) entered blocking state [ 219.320726][ T8732] bridge0: port 3(syz_tun) entered disabled state [ 219.328501][ T8732] syz_tun: entered allmulticast mode [ 219.366057][ T8732] syz_tun: entered promiscuous mode [ 219.394236][ T8732] bridge0: port 3(syz_tun) entered blocking state [ 219.398304][ T8732] bridge0: port 3(syz_tun) entered forwarding state [ 219.996374][ T8752] vivid-000: disconnect [ 220.040902][ T8752] dlm: no locking on control device [ 220.057512][ T5682] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 220.131050][ T8759] syzkaller0: entered promiscuous mode [ 220.131106][ T8759] syzkaller0: entered allmulticast mode [ 220.161416][ T8759] tipc: Enabled bearer , priority 0 [ 220.169921][ T8758] tipc: Resetting bearer [ 220.206707][ T8758] tipc: Disabling bearer [ 220.215634][ T5682] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 220.229496][ T5682] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 220.229570][ T5682] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 220.229633][ T5682] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 220.229663][ T5682] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 220.229718][ T5682] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.314059][ T25] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 220.320510][ T8761] fuse: Unknown parameter 'subj_role' [ 220.444783][ T25] usb 1-1: device descriptor read/64, error -71 [ 220.462794][ T8748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.473516][ T8748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.496612][ T8748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.514181][ T8748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.683209][ T25] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 220.813280][ T25] usb 1-1: device descriptor read/64, error -71 [ 220.923561][ T25] usb usb1-port1: attempt power cycle [ 221.008587][ T8780] netlink: 276 bytes leftover after parsing attributes in process `syz.4.525'. [ 221.056806][ T5682] gud 3-1:1.0: Failed to add properties (error=-71) [ 221.056932][ T5682] gud 3-1:1.0: probe with driver gud failed with error -71 [ 221.124043][ T5682] usb 3-1: USB disconnect, device number 20 [ 221.184095][ T991] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 221.264491][ T25] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 221.286309][ T25] usb 1-1: device descriptor read/8, error -71 [ 221.335373][ T991] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 221.346931][ T991] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.346984][ T991] usb 4-1: Product: syz [ 221.347002][ T991] usb 4-1: Manufacturer: syz [ 221.347056][ T991] usb 4-1: SerialNumber: syz [ 221.370085][ T8785] tc_dump_action: action bad kind [ 221.380399][ T991] usb 4-1: config 0 descriptor?? [ 221.406809][ T991] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 012 [ 221.523279][ T25] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 221.545381][ T25] usb 1-1: device descriptor read/8, error -71 [ 221.589528][ T8778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.591322][ T8778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.609234][ T8778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.618234][ T8778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.619220][ T8778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.619630][ T8778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.652942][ T8778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.654705][ T25] usb usb1-port1: unable to enumerate USB device [ 221.668863][ T8778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.680366][ T8778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.689350][ T8778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.737476][ T991] (null): error -EIO: failure setting delay to 10us [ 221.740208][ T991] i2c-tiny-usb 4-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 221.767910][ T991] usb 4-1: USB disconnect, device number 12 [ 222.113220][ T7115] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 222.276480][ T7115] usb 3-1: unable to get BOS descriptor or descriptor too short [ 222.284451][ T7115] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 222.296499][ T7115] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 222.306988][ T7115] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 222.322703][ T7115] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.330846][ T7115] usb 3-1: Product: syz [ 222.330867][ T7115] usb 3-1: Manufacturer: syz [ 222.330884][ T7115] usb 3-1: SerialNumber: syz [ 222.404676][ T7115] usb 3-1: selecting invalid altsetting 1 [ 222.411488][ T7115] usb 3-1: unit 6 not found! [ 222.996310][ T8749] vivid-000: reconnect [ 223.281577][ T7115] usb 3-1: 2:0: failed to get current value for ch 0 (-71) [ 223.428306][ T7115] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 223.445479][ T7115] usb 3-1: USB disconnect, device number 21 [ 223.509936][ T5910] udevd[5910]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 223.897531][ T8820] loop4: detected capacity change from 0 to 7 [ 223.931093][ T8820] Dev loop4: unable to read RDB block 7 [ 223.931155][ T8820] loop4: unable to read partition table [ 223.931408][ T8820] loop4: partition table beyond EOD, truncated [ 223.931438][ T8820] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 224.015644][ T8823] tipc: Enabling of bearer rejected, failed to enable media [ 224.993343][ T7115] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 225.024115][ T5690] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 225.172340][ T7115] usb 3-1: unable to get BOS descriptor or descriptor too short [ 225.181696][ T7115] usb 3-1: not running at top speed; connect to a high speed hub [ 225.181753][ T7115] usb 3-1: New USB device found, idVendor=0582, idProduct=0114, bcdDevice= 0.40 [ 225.200526][ T7115] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 225.212391][ T7115] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 225.230860][ T5690] usb 4-1: unable to get BOS descriptor or descriptor too short [ 225.230924][ T5690] usb 4-1: New USB device found, idVendor=0404, idProduct=0312, bcdDevice=42.c1 [ 225.253390][ T5690] usb 4-1: config 160 has an invalid interface number: 168 but max is 0 [ 225.253450][ T5690] usb 4-1: config 160 has an invalid descriptor of length 0, skipping remainder of the config [ 225.253492][ T5690] usb 4-1: config 160 has no interface number 0 [ 225.253539][ T5690] usb 4-1: config 160 interface 168 altsetting 8 has an endpoint descriptor with address 0xF4, changing to 0x84 [ 225.253568][ T5690] usb 4-1: config 160 interface 168 altsetting 8 endpoint 0x84 has invalid maxpacket 49717, setting to 1024 [ 225.253599][ T5690] usb 4-1: config 160 interface 168 altsetting 8 bulk endpoint 0x84 has invalid maxpacket 1024 [ 225.253629][ T5690] usb 4-1: config 160 interface 168 altsetting 8 endpoint 0x7 has an invalid bInterval 195, changing to 11 [ 225.253659][ T5690] usb 4-1: config 160 interface 168 altsetting 8 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 225.253690][ T5690] usb 4-1: config 160 interface 168 altsetting 8 has an endpoint descriptor with address 0xE9, changing to 0x89 [ 225.253720][ T5690] usb 4-1: config 160 interface 168 altsetting 8 endpoint 0x89 has an invalid bInterval 206, changing to 11 [ 225.253760][ T5690] usb 4-1: config 160 interface 168 altsetting 8 endpoint 0x89 has invalid maxpacket 18397, setting to 1024 [ 225.253794][ T5690] usb 4-1: config 160 interface 168 altsetting 8 endpoint 0xC has invalid wMaxPacketSize 0 [ 225.253821][ T5690] usb 4-1: config 160 interface 168 altsetting 8 bulk endpoint 0xC has invalid maxpacket 0 [ 225.253851][ T5690] usb 4-1: config 160 interface 168 has no altsetting 0 [ 225.274848][ T7115] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.274877][ T7115] usb 3-1: Product: syz [ 225.274894][ T7115] usb 3-1: Manufacturer: syz [ 225.274911][ T7115] usb 3-1: SerialNumber: syz [ 225.437537][ T5690] usb 4-1: string descriptor 0 read error: -22 [ 225.437704][ T5690] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.457150][ T8844] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 225.497907][ T8845] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 225.508801][ T8845] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 225.521210][ T5690] io_edgeport 4-1:160.168: EPiC device converter detected [ 225.521793][ T5690] usb 4-1: detected [ 225.912688][ T5690] usb 4-1: EPiC device converter now attached to ttyUSB0 [ 225.998099][ T8845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.004463][ T8845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.107542][ T5690] usb 4-1: USB disconnect, device number 13 [ 226.107651][ C0] usb 4-1: edge_interrupt_callback - Error -19 submitting control urb [ 226.150983][ T5690] epic ttyUSB0: EPiC device converter now disconnected from ttyUSB0 [ 226.161767][ T5690] io_edgeport 4-1:160.168: device disconnected [ 226.184283][ T7115] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 226.194156][ T7115] usb 3-1: MIDIStreaming interface descriptor not found [ 226.346848][ T7115] usb 3-1: USB disconnect, device number 22 [ 226.420095][ T8864] fuse: Bad value for 'fd' [ 226.526935][ T7256] udevd[7256]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 226.893419][ T7115] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 227.043124][ T7115] usb 5-1: Using ep0 maxpacket: 16 [ 227.049252][ T7115] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 227.049304][ T7115] usb 5-1: too many configurations: 123, using maximum allowed: 8 [ 227.068285][ T7115] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.080403][ T7115] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.094754][ T7115] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.096899][ T7115] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.108311][ T7115] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.134065][ T7115] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.146539][ T7115] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.158993][ T7115] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.173137][ T7115] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 227.181455][ T7115] usb 5-1: SerialNumber: syz [ 227.193939][ T7115] usb 5-1: config 0 descriptor?? [ 227.234290][ T7115] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input10 [ 227.424399][ T8873] netlink: 'syz.4.560': attribute type 32 has an invalid length. [ 227.464771][ T8873] input: syz0 as /devices/virtual/input/input11 [ 227.543508][ T8891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.563610][ T8891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.614719][ T30] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 227.654015][ T8893] netlink: 'syz.4.560': attribute type 32 has an invalid length. [ 227.797442][ T30] usb 1-1: unable to get BOS descriptor or descriptor too short [ 227.797521][ T30] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 227.829949][ T30] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 227.830006][ T30] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 227.863977][ T30] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.864022][ T30] usb 1-1: Product: syz [ 227.864063][ T30] usb 1-1: Manufacturer: syz [ 227.864083][ T30] usb 1-1: SerialNumber: syz [ 227.956471][ T30] usb 1-1: selecting invalid altsetting 1 [ 227.964817][ T4970] bcm5974 5-1:0.0: could not read from device [ 227.965990][ T30] usb 1-1: unit 6 not found! [ 227.967972][ T25] usb 5-1: USB disconnect, device number 12 [ 228.050063][ T8900] loop4: detected capacity change from 0 to 7 [ 228.075039][ T8900] Dev loop4: unable to read RDB block 7 [ 228.075132][ T8900] loop4: unable to read partition table [ 228.076958][ T8900] loop4: partition table beyond EOD, truncated [ 228.077102][ T8900] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 228.138912][ T8888] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 228.356002][ T8904] netlink: 8 bytes leftover after parsing attributes in process `syz.3.570'. [ 228.369694][ T30] usb 1-1: 2:0: cannot get min/max values for control 1 (id 2) [ 228.552587][ T30] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 228.580854][ T30] usb 1-1: USB disconnect, device number 26 [ 228.716340][ T5910] udevd[5910]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 229.011636][ T7115] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 229.156116][ T8917] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 229.173149][ T7115] usb 2-1: Using ep0 maxpacket: 32 [ 229.179718][ T7115] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 229.203327][ T7115] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.214620][ T7115] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.224825][ T7115] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.254673][ T7115] usb 2-1: config 0 descriptor?? [ 229.283739][ T7115] hub 2-1:0.0: USB hub found [ 229.483100][ T8902] netlink: 28 bytes leftover after parsing attributes in process `syz.1.569'. [ 229.525652][ T8920] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 229.807560][ T8931] tc_dump_action: action bad kind [ 230.065771][ T8936] netlink: 8 bytes leftover after parsing attributes in process `syz.4.582'. [ 230.733183][ T7116] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 230.894288][ T7116] usb 4-1: Using ep0 maxpacket: 8 [ 230.900263][ T7116] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 230.912094][ T7116] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.922510][ T7116] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 230.922535][ T7116] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 230.922553][ T7116] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 230.922570][ T7116] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 230.979024][ T7116] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 230.979099][ T7116] usb 4-1: Product: syz [ 230.979135][ T7116] usb 4-1: Manufacturer: syz [ 230.979155][ T7116] usb 4-1: SerialNumber: syz [ 231.025558][ T7116] usb 4-1: config 0 descriptor?? [ 231.087940][ T8954] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 231.250986][ T7116] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 231.261084][ T7116] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 231.276807][ T7116] radio-si470x 4-1:0.0: software version 0, hardware version 0 [ 231.276886][ T7116] radio-si470x 4-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 231.276928][ T7116] radio-si470x 4-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 231.431132][ T7115] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 231.458089][ T7115] usbhid 2-1:0.0: can't add hid device: -71 [ 231.465371][ T7115] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 231.474238][ T30] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 231.491017][ T7116] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 231.499690][ T7116] radio-si470x 4-1:0.0: submitting int urb failed (-90) [ 231.508756][ T7116] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 231.518011][ T7116] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -22 [ 231.535253][ T7116] usb 4-1: USB disconnect, device number 14 [ 231.563702][ T7115] usb 2-1: USB disconnect, device number 11 [ 231.633556][ T30] usb 3-1: Using ep0 maxpacket: 32 [ 231.634352][ T30] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 231.647750][ T30] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 231.647827][ T30] usb 3-1: config 0 has no interface number 0 [ 231.647985][ T30] usb 3-1: config 0 interface 12 has no altsetting 0 [ 231.680397][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.680459][ T30] usb 3-1: Product: syz [ 231.680492][ T30] usb 3-1: Manufacturer: syz [ 231.680510][ T30] usb 3-1: SerialNumber: syz [ 231.717122][ T30] usb 3-1: config 0 descriptor?? [ 231.858474][ T8970] loop5: detected capacity change from 0 to 7 [ 231.881208][ T8970] loop5: [ 231.881259][ T8970] loop5: partition table partially beyond EOD, truncated [ 232.062439][ T8977] tipc: Enabling of bearer rejected, failed to enable media [ 232.193171][ T5682] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 232.261072][ T8983] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 232.353353][ T5682] usb 5-1: Using ep0 maxpacket: 16 [ 232.360573][ T5682] usb 5-1: unable to get BOS descriptor or descriptor too short [ 232.360901][ T5682] usb 5-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 232.366762][ T5682] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 25605, setting to 1024 [ 232.377481][ T5682] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.377627][ T5682] usb 5-1: Product: syz [ 232.377685][ T5682] usb 5-1: Manufacturer: syz [ 232.377787][ T5682] usb 5-1: SerialNumber: syz [ 232.483123][ T7115] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 232.643136][ T7115] usb 4-1: Using ep0 maxpacket: 8 [ 232.644048][ T7115] usb 4-1: New USB device found, idVendor=17ef, idProduct=60a4, bcdDevice= 0.00 [ 232.647451][ T7115] usb 4-1: config 0 interface 0 has no altsetting 0 [ 232.647593][ T7115] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.683289][ T7115] usb 4-1: config 0 descriptor?? [ 233.292699][ T59] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.412727][ T7115] usbhid 4-1:0.0: can't add hid device: -71 [ 233.415000][ T7115] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 233.444878][ T7115] usb 4-1: USB disconnect, device number 15 [ 233.647811][ T59] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.852251][ T59] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.973422][ T59] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.305856][ T5622] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 234.318738][ T9000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.607'. [ 234.318785][ T9000] netlink: 12 bytes leftover after parsing attributes in process `syz.1.607'. [ 234.338210][ T5622] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 234.348243][ T5622] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 234.361261][ T5622] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 234.370270][ T5622] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 234.489048][ T59] bridge_slave_1: left allmulticast mode [ 234.489097][ T59] bridge_slave_1: left promiscuous mode [ 234.489406][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.520376][ T59] bridge_slave_0: left allmulticast mode [ 234.533080][ T59] bridge_slave_0: left promiscuous mode [ 234.533375][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.723692][ T991] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 234.807413][ T5682] usb 5-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 234.814225][ T5682] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 234.879233][ T991] usb 4-1: Using ep0 maxpacket: 8 [ 234.885659][ T991] usb 4-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=8f.67 [ 234.897207][ T991] usb 4-1: config 8 has an invalid interface number: 188 but max is 0 [ 234.897251][ T991] usb 4-1: config 8 has no interface number 0 [ 234.897330][ T991] usb 4-1: config 8 interface 188 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 234.897364][ T991] usb 4-1: config 8 interface 188 altsetting 0 endpoint 0x8D has an invalid bInterval 80, changing to 10 [ 234.938094][ T991] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.938166][ T991] usb 4-1: Product: syz [ 234.938204][ T991] usb 4-1: Manufacturer: syz [ 234.938226][ T991] usb 4-1: SerialNumber: syz [ 235.022330][ T5682] usb 5-1: USB disconnect, device number 13 [ 235.060115][ T30] f81534 3-1:0.12: f81534_set_register: reg: 1003 data: e8 failed: -71 [ 235.069296][ T30] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 235.069387][ T30] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 235.069506][ T30] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 235.131805][ T30] usb 3-1: USB disconnect, device number 23 [ 235.260632][ T59] bond1 (unregistering): (slave bond0): Releasing active interface [ 235.287679][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.325827][ T5674] udevd[5674]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 235.327060][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.371480][ T59] bond0 (unregistering): Released all slaves [ 235.437044][ T59] bond1 (unregistering): Released all slaves [ 235.465053][ T991] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8055 (VM110)'. [ 235.515834][ T991] usb 4-1: USB disconnect, device number 16 [ 235.858444][ T5280] 8021q: adding VLAN 0 to HW filter on device eth1 [ 236.053074][ T7116] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 236.207860][ T7116] usb 2-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 236.222820][ T7116] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 236.278154][ T7116] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.278203][ T7116] usb 2-1: Product: syz [ 236.278238][ T7116] usb 2-1: Manufacturer: syz [ 236.278257][ T7116] usb 2-1: SerialNumber: syz [ 236.420123][ T9047] netlink: 8 bytes leftover after parsing attributes in process `syz.3.619'. [ 236.430157][ T9047] netlink: 12 bytes leftover after parsing attributes in process `syz.3.619'. [ 236.437622][ T52] Bluetooth: hci2: command tx timeout [ 236.521982][ T9049] netlink: 4 bytes leftover after parsing attributes in process `syz.2.618'. [ 236.541785][ T9028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.613'. [ 236.541869][ T9028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.613'. [ 236.572564][ T7116] usb 2-1: selecting invalid altsetting 1 [ 236.583727][ T7116] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 236.585888][ T7116] dvb_usb_lmedm04 2-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 236.615100][ T7116] usb 2-1: USB disconnect, device number 12 [ 236.643981][ T9049] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 236.720816][ T9049] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.906281][ T59] hsr_slave_0: left promiscuous mode [ 236.917399][ T59] hsr_slave_1: left promiscuous mode [ 236.924675][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.924721][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.936203][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 236.936268][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.970896][ T59] veth1_macvtap: left promiscuous mode [ 236.970963][ T59] veth0_macvtap: left promiscuous mode [ 236.971275][ T59] veth1_vlan: left promiscuous mode [ 236.987580][ T59] veth0_vlan: left promiscuous mode [ 237.048204][ T9069] netlink: 152 bytes leftover after parsing attributes in process `syz.3.625'. [ 237.621464][ T59] team0 (unregistering): Port device team_slave_1 removed [ 237.636022][ T991] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 237.662321][ T59] team0 (unregistering): Port device team_slave_0 removed [ 237.793193][ T991] usb 2-1: Using ep0 maxpacket: 16 [ 237.795082][ T991] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 237.805273][ T991] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.805378][ T991] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.805443][ T991] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 237.805562][ T991] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.821768][ T991] usb 2-1: config 0 descriptor?? [ 237.960080][ T9069] netlink: 20 bytes leftover after parsing attributes in process `syz.3.625'. [ 238.034824][ T5280] 8021q: adding VLAN 0 to HW filter on device eth2 [ 238.385030][ T9094] netlink: 8 bytes leftover after parsing attributes in process `syz.4.630'. [ 238.467282][ T30] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 238.509341][ T52] Bluetooth: hci2: command tx timeout [ 238.630608][ T30] usb 4-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 238.651024][ T30] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.651136][ T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.690591][ T30] usb 4-1: config 0 descriptor?? [ 238.724043][ T30] smsusb:smsusb_probe: board id=8, interface number 0 [ 238.724426][ T30] smsusb:smsusb_probe: Device initialized with return code -19 [ 238.780520][ T991] usbhid 2-1:0.0: can't add hid device: -71 [ 238.780806][ T991] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 238.827016][ T991] usb 2-1: USB disconnect, device number 13 [ 239.166594][ T9120] netlink: NAT attribute has 1 unknown bytes [ 239.176954][ T9120] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 239.197590][ T991] usb 4-1: USB disconnect, device number 17 [ 239.340334][ T9004] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.340662][ T9004] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.341489][ T9004] bridge_slave_0: entered allmulticast mode [ 239.370436][ T9004] bridge_slave_0: entered promiscuous mode [ 239.391973][ T9004] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.395891][ T9004] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.399744][ T9004] bridge_slave_1: entered allmulticast mode [ 239.421191][ T9004] bridge_slave_1: entered promiscuous mode [ 239.592203][ T9004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.630666][ T9004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.631383][ T9127] syzkaller0: entered promiscuous mode [ 239.631445][ T9127] syzkaller0: entered allmulticast mode [ 239.730184][ T5280] 8021q: adding VLAN 0 to HW filter on device eth3 [ 239.742524][ T9004] team0: Port device team_slave_0 added [ 239.751907][ T9004] team0: Port device team_slave_1 added [ 239.795724][ T9004] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.803998][ T9004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 239.830338][ T9004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.831130][ T9127] tipc: Started in network mode [ 239.831160][ T9127] tipc: Node identity 723125f5e12c, cluster identity 4711 [ 239.855324][ T9127] tipc: Enabled bearer , priority 0 [ 239.863566][ T9004] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.870798][ T9004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 239.897639][ T9004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.937273][ T9126] tipc: Resetting bearer [ 239.997230][ T9126] tipc: Disabling bearer [ 240.095074][ T9004] hsr_slave_0: entered promiscuous mode [ 240.101889][ T9004] hsr_slave_1: entered promiscuous mode [ 240.555313][ T9156] __nla_validate_parse: 3 callbacks suppressed [ 240.562507][ T9156] netlink: 12 bytes leftover after parsing attributes in process `syz.1.646'. [ 240.579802][ T9161] netlink: 8 bytes leftover after parsing attributes in process `syz.2.647'. [ 240.593254][ T7116] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 240.593794][ T52] Bluetooth: hci2: command tx timeout [ 240.753334][ T7116] usb 4-1: Using ep0 maxpacket: 16 [ 240.764880][ T7116] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 240.782260][ T7116] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 240.793485][ T7116] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.801715][ T7116] usb 4-1: Product: syz [ 240.807101][ T7116] usb 4-1: Manufacturer: syz [ 240.807148][ T7116] usb 4-1: SerialNumber: syz [ 240.826010][ T7116] r8152-cfgselector 4-1: Unknown version 0x0000 [ 240.833615][ T7116] r8152-cfgselector 4-1: config 0 descriptor?? [ 240.850390][ T9170] FAULT_INJECTION: forcing a failure. [ 240.850390][ T9170] name failslab, interval 1, probability 0, space 0, times 0 [ 240.863316][ T9170] CPU: 0 UID: 0 PID: 9170 Comm: syz.2.648 Tainted: G L syzkaller #0 PREEMPT(full) [ 240.863350][ T9170] Tainted: [L]=SOFTLOCKUP [ 240.863358][ T9170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 240.863383][ T9170] Call Trace: [ 240.863393][ T9170] [ 240.863402][ T9170] dump_stack_lvl+0xe8/0x150 [ 240.863437][ T9170] should_fail_ex+0x410/0x560 [ 240.863475][ T9170] should_failslab+0xa8/0x100 [ 240.863503][ T9170] __kmalloc_cache_noprof+0xa3/0x600 [ 240.863524][ T9170] ? __pfx_wiphy_delayed_work_timer+0x10/0x10 [ 240.863556][ T9170] ? device_create+0x13d/0x300 [ 240.863576][ T9170] ? device_create+0x13d/0x300 [ 240.863601][ T9170] device_create+0x13d/0x300 [ 240.863627][ T9170] ? timer_init_key+0x161/0x2c0 [ 240.863649][ T9170] ? __pfx_device_create+0x10/0x10 [ 240.863673][ T9170] ? ieee80211_roc_setup+0x119/0x1d0 [ 240.863703][ T9170] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 240.863741][ T9170] mac80211_hwsim_new_radio+0x3f6/0x56b0 [ 240.863776][ T9170] ? __pfx___nla_validate_parse+0x10/0x10 [ 240.863819][ T9170] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 240.863845][ T9170] ? trace_kmalloc+0x2a/0xf0 [ 240.863885][ T9170] hwsim_new_radio_nl+0xd8b/0xf90 [ 240.863923][ T9170] genl_family_rcv_msg_doit+0x233/0x340 [ 240.863968][ T9170] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 240.864007][ T9170] ? bpf_lsm_capable+0x9/0x20 [ 240.864025][ T9170] ? security_capable+0x7e/0x2c0 [ 240.864057][ T9170] genl_rcv_msg+0x614/0x7a0 [ 240.864086][ T9170] ? __pfx_genl_rcv_msg+0x10/0x10 [ 240.864108][ T9170] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 240.864134][ T9170] ? __asan_memcpy+0x40/0x70 [ 240.864168][ T9170] ? __skb_clone+0x5c/0x6c0 [ 240.864201][ T9170] netlink_rcv_skb+0x226/0x4a0 [ 240.864233][ T9170] ? __pfx_genl_rcv_msg+0x10/0x10 [ 240.864259][ T9170] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 240.864306][ T9170] ? down_read+0x2be/0x330 [ 240.864345][ T9170] genl_rcv+0x28/0x40 [ 240.864366][ T9170] netlink_unicast+0x7bd/0x940 [ 240.864406][ T9170] netlink_sendmsg+0x813/0xb40 [ 240.864447][ T9170] ? __pfx_netlink_sendmsg+0x10/0x10 [ 240.864487][ T9170] ? apparmor_socket_sendmsg+0x98/0x360 [ 240.864510][ T9170] ? __pfx_netlink_sendmsg+0x10/0x10 [ 240.864538][ T9170] sock_sendmsg_nosec+0x13a/0x180 [ 240.864574][ T9170] ____sys_sendmsg+0x54e/0x850 [ 240.864608][ T9170] ? __pfx_____sys_sendmsg+0x10/0x10 [ 240.864644][ T9170] ? import_iovec+0x73/0xa0 [ 240.864673][ T9170] ___sys_sendmsg+0x2a5/0x360 [ 240.864698][ T9170] ? __lock_acquire+0x747/0x2de0 [ 240.864725][ T9170] ? __pfx____sys_sendmsg+0x10/0x10 [ 240.864791][ T9170] ? __fget_files+0x2a/0x420 [ 240.864820][ T9170] ? __fget_files+0x3a2/0x420 [ 240.864861][ T9170] __x64_sys_sendmsg+0x1b1/0x290 [ 240.864891][ T9170] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 240.864947][ T9170] do_syscall_64+0x166/0x520 [ 240.864969][ T9170] ? trace_irq_disable+0x3b/0x140 [ 240.864991][ T9170] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.865014][ T9170] ? clear_bhb_loop+0x70/0xc0 [ 240.865043][ T9170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.865065][ T9170] RIP: 0033:0x7f09d4d9e159 [ 240.865087][ T9170] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.865106][ T9170] RSP: 002b:00007f09d2ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 240.865131][ T9170] RAX: ffffffffffffffda RBX: 00007f09d5025fa0 RCX: 00007f09d4d9e159 [ 240.865148][ T9170] RDX: 0000000000000004 RSI: 0000200000000100 RDI: 0000000000000003 [ 240.865162][ T9170] RBP: 00007f09d2ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 240.865177][ T9170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 240.865190][ T9170] R13: 00007f09d5026038 R14: 00007f09d5025fa0 R15: 00007f09d514fa48 [ 240.865227][ T9170] [ 241.455032][ T9175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.650'. [ 241.831488][ T9183] veth1_to_hsr: Caught tx_queue_len zero misconfig [ 242.523261][ T9197] fuse: Bad value for 'group_id' [ 242.523303][ T9197] fuse: Bad value for 'group_id' [ 242.663663][ T52] Bluetooth: hci2: command tx timeout [ 243.273606][ T7116] r8152-cfgselector 4-1: Unknown version 0x0000 [ 243.280828][ T7116] r8152-cfgselector 4-1: No union descriptors [ 243.319562][ T7116] r8152-cfgselector 4-1: USB disconnect, device number 18 [ 243.678646][ T9004] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 243.702773][ T9004] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 243.714716][ T9004] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 243.764751][ T9004] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 243.809556][ T9004] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 243.831988][ T9004] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 243.838214][ T9004] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 243.877011][ T9004] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 244.210479][ T9236] bond0: (slave bond_slave_1): Releasing backup interface [ 244.456163][ T9004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.530455][ T9004] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.556136][ T6111] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.556273][ T6111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.577004][ T6097] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.577523][ T6097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.957045][ T9004] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.043623][ T9004] veth0_vlan: entered promiscuous mode [ 245.058538][ T9004] veth1_vlan: entered promiscuous mode [ 245.165643][ T9004] veth0_macvtap: entered promiscuous mode [ 245.230532][ T9004] veth1_macvtap: entered promiscuous mode [ 245.326882][ T9004] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.377190][ T9004] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.564245][ T1121] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.564319][ T1121] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.564386][ T1121] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.564431][ T1121] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.941583][ T1121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.941621][ T1121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.968825][ T9259] bond0: Caught tx_queue_len zero misconfig [ 246.176225][ T9269] netlink: 36 bytes leftover after parsing attributes in process `syz.2.666'. [ 246.297210][ T1121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.297262][ T1121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.360759][ T9269] netlink: 16 bytes leftover after parsing attributes in process `syz.2.666'. [ 246.371459][ T9269] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 246.900122][ T991] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 246.911622][ T31] kauditd_printk_skb: 36 callbacks suppressed [ 246.911668][ T31] audit: type=1326 audit(1788896130.514:1569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9264 comm="syz.2.666" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09d4d9e159 code=0x7fc00000 [ 246.911743][ T31] audit: type=1326 audit(1788896130.514:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9264 comm="syz.2.666" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7f09d4d9e159 code=0x7fc00000 [ 246.911788][ T31] audit: type=1326 audit(1788896130.514:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9264 comm="syz.2.666" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09d4d9e159 code=0x7fc00000 [ 246.915776][ T31] audit: type=1326 audit(1788896130.514:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9264 comm="syz.2.666" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09d4d9e159 code=0x7fc00000 [ 246.915918][ T31] audit: type=1326 audit(1788896130.514:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9264 comm="syz.2.666" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09d4d9e159 code=0x7fc00000 [ 246.930228][ T31] audit: type=1326 audit(1788896130.534:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9264 comm="syz.2.666" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09d4d9e159 code=0x7fc00000 [ 247.066963][ T991] usb 2-1: Using ep0 maxpacket: 32 [ 247.068901][ T991] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 247.078351][ T991] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.139775][ T991] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 247.282161][ T9300] vlan2: entered promiscuous mode [ 247.282243][ T9300] bond_slave_1: entered promiscuous mode [ 247.293191][ T5705] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 247.460353][ T5705] usb 4-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 247.475290][ T5705] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 247.475371][ T5705] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 247.475609][ T5705] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.761285][ T5705] ttusb_dec_send_command: result bulk message failed: error -22 [ 247.761547][ T5705] ttusb-dec 4-1:1.0: probe with driver ttusb-dec failed with error -22 [ 247.821258][ T991] usb 4-1: USB disconnect, device number 19 [ 247.844979][ T5705] usb 2-1: USB disconnect, device number 14 [ 247.943465][ T7115] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 247.994778][ T9324] netlink: 8 bytes leftover after parsing attributes in process `syz.4.678'. [ 248.105099][ T7115] usb 3-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 248.122612][ T7115] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 248.133240][ T7115] usb 3-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 248.133606][ T7115] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.723575][ C0] usb 3-1: received EP1 urb->status = -2 [ 248.729453][ T7115] usb 3-1: unable to init card! (ret=-110) [ 248.730073][ T7115] snd-usb-caiaq 3-1:1.0: probe with driver snd-usb-caiaq failed with error -110 [ 249.052228][ T9356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.684'. [ 249.139947][ T9356] macsec1: entered promiscuous mode [ 249.510774][ T9375] netlink: 16 bytes leftover after parsing attributes in process `syz.4.688'. [ 249.635378][ T9383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.644519][ T9383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.709510][ T9388] netlink: 8 bytes leftover after parsing attributes in process `syz.0.689'. [ 249.853142][ T5705] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 250.003727][ T5705] usb 2-1: Using ep0 maxpacket: 16 [ 250.011718][ T5705] usb 2-1: New USB device found, idVendor=1b3d, idProduct=013e, bcdDevice=e1.66 [ 250.032752][ T5705] usb 2-1: config 7 has an invalid interface number: 73 but max is 2 [ 250.032801][ T5705] usb 2-1: config 7 has an invalid interface number: 152 but max is 2 [ 250.032854][ T5705] usb 2-1: config 7 contains an unexpected descriptor of type 0x2, skipping [ 250.032897][ T5705] usb 2-1: config 7 has an invalid interface number: 160 but max is 2 [ 250.032924][ T5705] usb 2-1: config 7 has an invalid interface number: 170 but max is 2 [ 250.032950][ T5705] usb 2-1: config 7 has 4 interfaces, different from the descriptor's value: 3 [ 250.033092][ T5705] usb 2-1: config 7 has no interface number 0 [ 250.033115][ T5705] usb 2-1: config 7 has no interface number 1 [ 250.033137][ T5705] usb 2-1: config 7 has no interface number 2 [ 250.033158][ T5705] usb 2-1: config 7 has no interface number 3 [ 250.033236][ T5705] usb 2-1: config 7 interface 73 altsetting 4 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 250.033279][ T5705] usb 2-1: config 7 interface 73 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 250.033307][ T5705] usb 2-1: config 7 interface 73 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 250.033335][ T5705] usb 2-1: config 7 interface 73 altsetting 4 bulk endpoint 0xA has invalid maxpacket 1023 [ 250.033365][ T5705] usb 2-1: config 7 interface 73 altsetting 4 has a duplicate endpoint with address 0xE, skipping [ 250.033406][ T5705] usb 2-1: config 7 interface 152 altsetting 4 endpoint 0xC has invalid wMaxPacketSize 0 [ 250.033434][ T5705] usb 2-1: config 7 interface 152 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 250.033461][ T5705] usb 2-1: config 7 interface 152 altsetting 4 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 250.033494][ T5705] usb 2-1: config 7 interface 152 altsetting 4 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 250.033527][ T5705] usb 2-1: config 7 interface 152 altsetting 4 has a duplicate endpoint with address 0xE, skipping [ 250.033555][ T5705] usb 2-1: config 7 interface 152 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 250.033582][ T5705] usb 2-1: config 7 interface 152 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 250.033630][ T5705] usb 2-1: config 7 interface 160 altsetting 210 has a duplicate endpoint with address 0x6, skipping [ 250.033659][ T5705] usb 2-1: config 7 interface 160 altsetting 210 has a duplicate endpoint with address 0x9, skipping [ 250.033688][ T5705] usb 2-1: config 7 interface 160 altsetting 210 has a duplicate endpoint with address 0xD, skipping [ 250.033718][ T5705] usb 2-1: config 7 interface 160 altsetting 210 endpoint 0x8 has invalid maxpacket 1040, setting to 1024 [ 250.033750][ T5705] usb 2-1: config 7 interface 160 altsetting 210 has a duplicate endpoint with address 0x6, skipping [ 250.033781][ T5705] usb 2-1: config 7 interface 160 altsetting 210 has a duplicate endpoint with address 0x6, skipping [ 250.033809][ T5705] usb 2-1: config 7 interface 160 altsetting 210 has a duplicate endpoint with address 0xD, skipping [ 250.033838][ T5705] usb 2-1: config 7 interface 160 altsetting 210 has a duplicate endpoint with address 0x1, skipping [ 250.033867][ T5705] usb 2-1: config 7 interface 160 altsetting 210 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 250.033900][ T5705] usb 2-1: config 7 interface 160 altsetting 210 has a duplicate endpoint with address 0xA, skipping [ 250.033928][ T5705] usb 2-1: config 7 interface 160 altsetting 210 has a duplicate endpoint with address 0xD, skipping [ 250.033957][ T5705] usb 2-1: config 7 interface 160 altsetting 210 has a duplicate endpoint with address 0xD, skipping [ 250.033985][ T5705] usb 2-1: config 7 interface 160 altsetting 210 has an invalid descriptor for endpoint zero, skipping [ 250.034011][ T5705] usb 2-1: config 7 interface 160 altsetting 210 has 15 endpoint descriptors, different from the interface descriptor's value: 16 [ 250.034044][ T5705] usb 2-1: too many endpoints for config 7 interface 170 altsetting 5: 187, using maximum allowed: 30 [ 250.034087][ T5705] usb 2-1: config 7 interface 170 altsetting 5 bulk endpoint 0xB has invalid maxpacket 64 [ 250.034116][ T5705] usb 2-1: config 7 interface 170 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 187 [ 250.034149][ T5705] usb 2-1: config 7 interface 73 has no altsetting 0 [ 250.034173][ T5705] usb 2-1: config 7 interface 152 has no altsetting 0 [ 250.034196][ T5705] usb 2-1: config 7 interface 160 has no altsetting 0 [ 250.034219][ T5705] usb 2-1: config 7 interface 170 has no altsetting 0 [ 250.195949][ T5705] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.195979][ T5705] usb 2-1: Product: ã—ç±ë¸‘ä½—éš„ê¯ï’ƒî¶ªâ»€è‚žë‘™ä«åš é½—ä‚»ëŽà£©æ²±ëš²â·’儼傷彧晳éŒë·‡î¤å•µê±Šä®‹åº§ì°²ä›†ä¢®â“¢ï¿‡ãˆìŽ¬áš¬ç¢ê›½à·Žã½¾è½»æºë¼™âŠ¥è¦¥é…µìˆ´áŠžë ˆé•’佑燴塚ä¥ì¯¿ãƒµéˆ†èŠ»áƒ£ì«ºë°–螛çˆëŽ½î†«ë¡’胢㺸äˆç°’콀邆묂 [ 250.196007][ T5705] usb 2-1: Manufacturer: ã [ 250.196023][ T5705] usb 2-1: SerialNumber: 顅悜徳ᢠ糂嘜Ç￳倞℞฿쑕ᥕ [ 250.264350][ T7115] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 250.450157][ T7115] usb 4-1: Using ep0 maxpacket: 8 [ 250.452533][ T7115] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 250.462583][ T7115] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 250.462733][ T7115] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 250.462798][ T7115] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 250.462873][ T7115] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 250.462937][ T7115] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 250.467716][ T7115] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.478489][ T9381] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 250.693674][ T5705] ftdi_sio 2-1:7.73: FTDI USB Serial Device converter detected [ 250.704477][ T5705] ftdi_sio ttyUSB0: unknown device type: 0xe166 [ 250.736372][ T5705] ftdi_sio 2-1:7.152: FTDI USB Serial Device converter detected [ 250.748614][ T5705] ftdi_sio ttyUSB1: unknown device type: 0xe166 [ 250.778585][ T5705] ftdi_sio 2-1:7.160: FTDI USB Serial Device converter detected [ 250.791179][ T5705] ftdi_sio ttyUSB2: unknown device type: 0xe166 [ 250.821252][ T5705] ftdi_sio 2-1:7.170: FTDI USB Serial Device converter detected [ 250.832481][ T5705] ftdi_sio ttyUSB3: unknown device type: 0xe166 [ 250.863092][ T5705] usb 2-1: USB disconnect, device number 15 [ 250.875340][ T5705] ftdi_sio 2-1:7.73: device disconnected [ 250.913707][ T5705] ftdi_sio 2-1:7.152: device disconnected [ 250.928852][ T5705] ftdi_sio 2-1:7.160: device disconnected [ 250.952756][ T7115] usb 4-1: usb_control_msg returned -32 [ 250.952833][ T7115] usbtmc 4-1:16.0: can't read capabilities [ 250.970541][ T5705] ftdi_sio 2-1:7.170: device disconnected [ 251.025403][ T7116] usb 3-1: USB disconnect, device number 24 [ 251.247941][ T9401] mmap: syz.2.695 (9401) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 251.354283][ T9409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.363351][ T9409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.609718][ T9418] netlink: 8 bytes leftover after parsing attributes in process `syz.4.701'. [ 251.716286][ T7115] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 251.881787][ T7115] usb 2-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 251.889338][ T7115] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 251.889521][ T7115] usb 2-1: config 0 interface 0 altsetting 12 bulk endpoint 0x6 has invalid maxpacket 255 [ 251.889641][ T7115] usb 2-1: config 0 interface 0 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 251.889708][ T7115] usb 2-1: config 0 interface 0 has no altsetting 0 [ 251.941700][ T7115] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.941754][ T7115] usb 2-1: Product: syz [ 251.941836][ T7115] usb 2-1: Manufacturer: syz [ 251.941890][ T7115] usb 2-1: SerialNumber: syz [ 251.989987][ T7115] usb 2-1: config 0 descriptor?? [ 251.997095][ T9412] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 252.153069][ T9427] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 252.163167][ T9427] netlink: 4 bytes leftover after parsing attributes in process `syz.4.704'. [ 252.209480][ T7119] usb 2-1: USB disconnect, device number 16 [ 252.443117][ T7115] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 252.593070][ T7115] usb 3-1: Using ep0 maxpacket: 32 [ 252.594880][ T7115] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 252.606432][ T7115] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 252.606590][ T7115] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 252.606759][ T7115] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 252.606891][ T7115] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 252.606967][ T7115] usb 3-1: config 0 interface 0 has no altsetting 0 [ 252.628716][ T7115] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 252.628790][ T7115] usb 3-1: Product: syz [ 252.628905][ T7115] usb 3-1: Manufacturer: syz [ 252.628945][ T7115] usb 3-1: SerialNumber: syz [ 252.697787][ T7115] usb 3-1: config 0 descriptor?? [ 252.722214][ T7115] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 252.792811][ T7115] ldusb 3-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 252.977133][ T9437] netlink: 12 bytes leftover after parsing attributes in process `syz.1.708'. [ 253.016776][ T5690] usb 3-1: USB disconnect, device number 25 [ 253.234984][ T9437] input: syz1 as /devices/virtual/input/input13 [ 253.373080][ T25] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 253.421800][ T9445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.425645][ T9445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.524156][ T25] usb 1-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 253.534667][ T25] usb 1-1: config 0 has an invalid interface number: 205 but max is 0 [ 253.534713][ T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 253.534738][ T25] usb 1-1: config 0 has no interface number 0 [ 253.534773][ T25] usb 1-1: config 0 interface 205 has no altsetting 0 [ 253.574277][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.574322][ T25] usb 1-1: Product: syz [ 253.574362][ T25] usb 1-1: Manufacturer: syz [ 253.574379][ T25] usb 1-1: SerialNumber: syz [ 253.623181][ T991] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 253.640608][ T25] usb 1-1: config 0 descriptor?? [ 253.654385][ T25] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 253.668153][ T25] dvb-usb: bulk message failed: -22 (3/0) [ 253.711021][ T25] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 253.720792][ T25] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 253.732591][ T25] usb 1-1: media controller created [ 253.751019][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 253.773552][ T25] dvb-usb: bulk message failed: -22 (6/0) [ 253.792528][ T25] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 253.809151][ T25] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input14 [ 253.832255][ T25] dvb-usb: schedule remote query interval to 150 msecs. [ 253.832325][ T25] dvb-usb: bulk message failed: -22 (3/0) [ 253.845485][ T25] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 253.948484][ T7115] usb 1-1: USB disconnect, device number 27 [ 254.006258][ T9451] netlink: 276 bytes leftover after parsing attributes in process `syz.1.713'. [ 254.115383][ T7115] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 254.319580][ T9453] netlink: 32 bytes leftover after parsing attributes in process `syz.1.714'. [ 254.664512][ T991] usb 2-1: device descriptor read/64, error -71 [ 254.903193][ T991] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 255.030915][ T9465] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 255.053875][ T991] usb 2-1: Using ep0 maxpacket: 16 [ 255.059673][ T991] usb 2-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 255.071842][ T991] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 255.071954][ T991] usb 2-1: config 1 interface 2 altsetting 3 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 255.072054][ T991] usb 2-1: config 1 interface 2 has no altsetting 1 [ 255.101572][ T991] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.101614][ T991] usb 2-1: Product: syz [ 255.102389][ T991] usb 2-1: Manufacturer: syz [ 255.102444][ T991] usb 2-1: SerialNumber: syz [ 255.332905][ T991] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 255.335602][ T991] usb 2-1: 2:3 : no or invalid class specific endpoint descriptor [ 255.335673][ T991] usb 2-1: 2:3: invalid format type 0x1002 is detected, processed as PCM [ 255.335732][ T991] usb 2-1: 2:3 : sample bitwidth 60 in over sample bytes 3 [ 255.335794][ T991] usb 2-1: 2:3 : invalid UAC_FORMAT_TYPE desc [ 255.435430][ T991] usb 2-1: USB disconnect, device number 18 [ 255.444666][ T9469] syzkaller0: entered promiscuous mode [ 255.451666][ T9469] syzkaller0: entered allmulticast mode [ 255.545251][ T5910] udevd[5910]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 255.788134][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.788743][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.825956][ T9421] usbtmc 4-1:16.0: usb_control_msg returned -110 [ 256.853427][ T5690] ldusb 3-1:0.0: LD USB Device #1 now disconnected [ 256.892149][ T991] usb 4-1: USB disconnect, device number 20 [ 257.313248][ T991] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 257.869562][ T9484] tipc: Enabling of bearer rejected, failed to enable media [ 257.883219][ T9489] FAULT_INJECTION: forcing a failure. [ 257.883219][ T9489] name failslab, interval 1, probability 0, space 0, times 0 [ 257.883272][ T9489] CPU: 0 UID: 0 PID: 9489 Comm: syz.2.724 Tainted: G L syzkaller #0 PREEMPT(full) [ 257.883302][ T9489] Tainted: [L]=SOFTLOCKUP [ 257.883310][ T9489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 257.883323][ T9489] Call Trace: [ 257.883332][ T9489] [ 257.883341][ T9489] dump_stack_lvl+0xe8/0x150 [ 257.883378][ T9489] should_fail_ex+0x410/0x560 [ 257.883419][ T9489] should_failslab+0xa8/0x100 [ 257.883448][ T9489] __kmalloc_node_track_caller_noprof+0xfb/0x720 [ 257.883474][ T9489] ? kobject_set_name_vargs+0x61/0x110 [ 257.883499][ T9489] ? kobject_set_name_vargs+0x61/0x110 [ 257.883532][ T9489] kvasprintf+0xeb/0x1a0 [ 257.883560][ T9489] ? __pfx_kvasprintf+0x10/0x10 [ 257.883589][ T9489] ? __raw_spin_lock_init+0x45/0x100 [ 257.883624][ T9489] ? kvasprintf_const+0xe1/0x240 [ 257.883652][ T9489] kobject_set_name_vargs+0x61/0x110 [ 257.883681][ T9489] device_create+0x23d/0x300 [ 257.883718][ T9489] ? timer_init_key+0x161/0x2c0 [ 257.883740][ T9489] ? __pfx_device_create+0x10/0x10 [ 257.883783][ T9489] ? ieee80211_roc_setup+0x119/0x1d0 [ 257.883816][ T9489] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 257.883856][ T9489] mac80211_hwsim_new_radio+0x3f6/0x56b0 [ 257.883896][ T9489] ? __pfx___nla_validate_parse+0x10/0x10 [ 257.883942][ T9489] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 257.883968][ T9489] ? trace_kmalloc+0x2a/0xf0 [ 257.884010][ T9489] hwsim_new_radio_nl+0xd8b/0xf90 [ 257.884049][ T9489] genl_family_rcv_msg_doit+0x233/0x340 [ 257.884082][ T9489] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 257.884120][ T9489] ? bpf_lsm_capable+0x9/0x20 [ 257.884138][ T9489] ? security_capable+0x7e/0x2c0 [ 257.884177][ T9489] genl_rcv_msg+0x614/0x7a0 [ 257.884209][ T9489] ? __pfx_genl_rcv_msg+0x10/0x10 [ 257.884232][ T9489] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 257.884257][ T9489] ? __asan_memcpy+0x40/0x70 [ 257.884289][ T9489] ? __skb_clone+0x5c/0x6c0 [ 257.884323][ T9489] netlink_rcv_skb+0x226/0x4a0 [ 257.884360][ T9489] ? __pfx_genl_rcv_msg+0x10/0x10 [ 257.884385][ T9489] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 257.884432][ T9489] ? down_read+0x2be/0x330 [ 257.884462][ T9489] genl_rcv+0x28/0x40 [ 257.884482][ T9489] netlink_unicast+0x7bd/0x940 [ 257.884521][ T9489] netlink_sendmsg+0x813/0xb40 [ 257.884563][ T9489] ? __pfx_netlink_sendmsg+0x10/0x10 [ 257.884600][ T9489] ? apparmor_socket_sendmsg+0x98/0x360 [ 257.884626][ T9489] ? __pfx_netlink_sendmsg+0x10/0x10 [ 257.884656][ T9489] sock_sendmsg_nosec+0x13a/0x180 [ 257.884694][ T9489] ____sys_sendmsg+0x54e/0x850 [ 257.884728][ T9489] ? __pfx_____sys_sendmsg+0x10/0x10 [ 257.884764][ T9489] ? import_iovec+0x73/0xa0 [ 257.884793][ T9489] ___sys_sendmsg+0x2a5/0x360 [ 257.884819][ T9489] ? __lock_acquire+0x747/0x2de0 [ 257.884848][ T9489] ? __pfx____sys_sendmsg+0x10/0x10 [ 257.884914][ T9489] ? __fget_files+0x2a/0x420 [ 257.884944][ T9489] ? __fget_files+0x3a2/0x420 [ 257.884987][ T9489] __x64_sys_sendmsg+0x1b1/0x290 [ 257.885017][ T9489] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 257.885066][ T9489] do_syscall_64+0x166/0x520 [ 257.885088][ T9489] ? trace_irq_disable+0x3b/0x140 [ 257.885112][ T9489] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.885135][ T9489] ? clear_bhb_loop+0x70/0xc0 [ 257.885171][ T9489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.885194][ T9489] RIP: 0033:0x7f09d4d9e159 [ 257.885216][ T9489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.885236][ T9489] RSP: 002b:00007f09d2ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 257.885261][ T9489] RAX: ffffffffffffffda RBX: 00007f09d5025fa0 RCX: 00007f09d4d9e159 [ 257.885279][ T9489] RDX: 0000000000000004 RSI: 0000200000000100 RDI: 0000000000000003 [ 257.885293][ T9489] RBP: 00007f09d2ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 257.885308][ T9489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 257.885321][ T9489] R13: 00007f09d5026038 R14: 00007f09d5025fa0 R15: 00007f09d514fa48 [ 257.885358][ T9489] [ 258.492027][ T991] usb 4-1: unable to get BOS descriptor or descriptor too short [ 258.492130][ T991] usb 4-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 258.492170][ T991] usb 4-1: no configurations [ 258.492234][ T991] usb 4-1: can't read configurations, error -22 [ 258.602504][ T9494] 8021q: adding VLAN 0 to HW filter on device bond1 [ 259.604768][ T25] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 259.612682][ T991] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 259.772753][ T25] usb 2-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 259.781983][ T991] usb 4-1: Using ep0 maxpacket: 32 [ 259.793498][ T991] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 259.803375][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 259.806742][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.831385][ T991] usb 4-1: config 0 has no interfaces? [ 259.844616][ T25] usb 2-1: config 0 descriptor?? [ 259.860265][ T9525] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 259.890864][ T991] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.890934][ T991] usb 4-1: Product: syz [ 259.890976][ T991] usb 4-1: Manufacturer: syz [ 259.890995][ T991] usb 4-1: SerialNumber: syz [ 259.931053][ T991] usb 4-1: config 0 descriptor?? [ 260.258288][ T991] usb 4-1: USB disconnect, device number 23 [ 260.347835][ T25] asus 0003:0B05:1ABE.0005: unknown main item tag 0x0 [ 260.359715][ T25] asus 0003:0B05:1ABE.0005: unknown main item tag 0x0 [ 260.359781][ T25] asus 0003:0B05:1ABE.0005: unknown main item tag 0x0 [ 260.359815][ T25] asus 0003:0B05:1ABE.0005: unknown main item tag 0x0 [ 260.359849][ T25] asus 0003:0B05:1ABE.0005: unknown main item tag 0x0 [ 260.359882][ T25] asus 0003:0B05:1ABE.0005: unknown main item tag 0x0 [ 260.359915][ T25] asus 0003:0B05:1ABE.0005: unknown main item tag 0x0 [ 260.359948][ T25] asus 0003:0B05:1ABE.0005: unknown main item tag 0x0 [ 260.359981][ T25] asus 0003:0B05:1ABE.0005: unknown main item tag 0x0 [ 260.360014][ T25] asus 0003:0B05:1ABE.0005: unknown main item tag 0x0 [ 260.430356][ T25] asus 0003:0B05:1ABE.0005: reserved main item tag 0xd [ 260.472431][ T25] asus 0003:0B05:1ABE.0005: hidraw0: USB HID v7f.fd Device [HID 0b05:1abe] on usb-dummy_hcd.1-1/input0 [ 260.531660][ T9529] netlink: 8 bytes leftover after parsing attributes in process `syz.0.736'. [ 260.771812][ T25] asus 0003:0B05:1ABE.0005: Asus handshake 5a failed to receive ack: -71 [ 260.807281][ T25] usb 2-1: USB disconnect, device number 19 [ 261.013650][ T9536] netlink: 8 bytes leftover after parsing attributes in process `syz.4.739'. [ 261.013707][ T9536] netlink: 4 bytes leftover after parsing attributes in process `syz.4.739'. [ 261.192380][ T9540] tipc: Enabling of bearer rejected, failed to enable media [ 261.306163][ T25] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 261.464167][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 261.471423][ T25] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 261.487745][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.487793][ T25] usb 1-1: Product: syz [ 261.487828][ T25] usb 1-1: Manufacturer: syz [ 261.487849][ T25] usb 1-1: SerialNumber: syz [ 261.519515][ T25] usb 1-1: config 0 descriptor?? [ 261.553351][ T25] gspca_main: se401-2.14.0 probing 047d:5003 [ 261.580485][ T9548] vlan2: entered promiscuous mode [ 261.582335][ T9548] bond_slave_1: entered promiscuous mode [ 261.880243][ T9564] netlink: 52 bytes leftover after parsing attributes in process `syz.2.752'. [ 261.933955][ T25] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 261.934070][ T25] se401 1-1:0.0: probe with driver se401 failed with error -71 [ 261.960894][ T25] usb 1-1: USB disconnect, device number 28 [ 262.083375][ T991] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 262.167188][ T9567] netlink: 'syz.2.753': attribute type 1 has an invalid length. [ 262.253257][ T991] usb 4-1: Using ep0 maxpacket: 32 [ 262.259682][ T991] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 262.278483][ T991] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 262.278527][ T991] usb 4-1: config 0 has no interface number 0 [ 262.296197][ T991] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.296241][ T991] usb 4-1: Product: syz [ 262.296285][ T991] usb 4-1: Manufacturer: syz [ 262.296305][ T991] usb 4-1: SerialNumber: syz [ 262.325497][ T991] usb 4-1: config 0 descriptor?? [ 262.340196][ T991] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 262.349550][ T991] usb 4-1: selecting invalid altsetting 1 [ 262.355603][ T991] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 262.370593][ T991] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 262.381645][ T991] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 262.390426][ T991] usb 4-1: media controller created [ 262.411048][ T991] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 262.943329][ T5690] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 263.093424][ T5690] usb 2-1: Using ep0 maxpacket: 16 [ 263.095394][ T5690] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 263.097112][ T9605] netlink: 8 bytes leftover after parsing attributes in process `syz.4.767'. [ 263.109799][ T5690] usb 2-1: config 1 has an invalid descriptor of length 252, skipping remainder of the config [ 263.109867][ T5690] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 263.122245][ T5690] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.122330][ T5690] usb 2-1: Product: syz [ 263.122372][ T5690] usb 2-1: Manufacturer: syz [ 263.122415][ T5690] usb 2-1: SerialNumber: syz [ 263.190496][ T5690] usb 2-1: 0:2 : does not exist [ 263.263090][ T5705] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 263.327355][ T9608] lo: Caught tx_queue_len zero misconfig [ 263.396048][ T5690] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 263.423155][ T5705] usb 1-1: Using ep0 maxpacket: 32 [ 263.429863][ T5705] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 263.442948][ T5705] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.460958][ T5705] usb 1-1: config 0 descriptor?? [ 263.467450][ T991] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 263.491760][ T5705] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 263.499911][ T991] zl10353_read_register: readreg error (reg=127, ret==-110) [ 263.573664][ T9558] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 263.619803][ T5690] usb 2-1: USB disconnect, device number 20 [ 263.677232][ T7119] usb 4-1: USB disconnect, device number 24 [ 263.700763][ T9597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.713994][ T9597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.739715][ T5705] gspca_vc032x: reg_r err -71 [ 263.739767][ T5705] gspca_vc032x: I2c Bus Busy Wait 00 [ 263.739802][ T5705] gspca_vc032x: I2c Bus Busy Wait 00 [ 263.739816][ T5705] gspca_vc032x: I2c Bus Busy Wait 00 [ 263.739829][ T5705] gspca_vc032x: I2c Bus Busy Wait 00 [ 263.739843][ T5705] gspca_vc032x: I2c Bus Busy Wait 00 [ 263.739857][ T5705] gspca_vc032x: I2c Bus Busy Wait 00 [ 263.739871][ T5705] gspca_vc032x: I2c Bus Busy Wait 00 [ 263.739885][ T5705] gspca_vc032x: I2c Bus Busy Wait 00 [ 263.739898][ T5705] gspca_vc032x: I2c Bus Busy Wait 00 [ 263.739912][ T5705] gspca_vc032x: I2c Bus Busy Wait 00 [ 263.739926][ T5705] gspca_vc032x: I2c Bus Busy Wait 00 [ 263.739939][ T5705] gspca_vc032x: I2c Bus Busy Wait 00 [ 263.739952][ T5705] gspca_vc032x: I2c Bus Busy Wait 00 [ 263.739966][ T5705] gspca_vc032x: I2c Bus Busy Wait 00 [ 263.739979][ T5705] gspca_vc032x: I2c Bus Busy Wait 00 [ 263.739991][ T5705] gspca_vc032x: I2c Bus Busy Wait 00 [ 263.740002][ T5705] gspca_vc032x: I2c Bus Busy Wait 00 [ 263.740014][ T5705] gspca_vc032x: I2c Bus Busy Wait 00 [ 263.740033][ T5705] gspca_vc032x: Unknown sensor... [ 263.740108][ T5705] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 263.872927][ T5705] usb 1-1: USB disconnect, device number 29 [ 263.939819][ T5910] udevd[5910]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 264.051441][ T9617] netlink: 12 bytes leftover after parsing attributes in process `syz.2.771'. [ 264.059961][ T9618] netlink: 8 bytes leftover after parsing attributes in process `syz.1.772'. [ 264.152083][ T9620] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 264.169462][ T9620] bond2: (slave vti0): Error -95 calling set_mac_address [ 264.232272][ T9617] vlan2: entered allmulticast mode [ 264.237811][ T9617] bond2: entered allmulticast mode [ 264.243951][ T9617] bond2: (slave vlan2): Opening slave failed [ 264.280712][ T9624] hub 8-0:1.0: USB hub found [ 264.281522][ T9624] hub 8-0:1.0: 1 port detected [ 264.676615][ T9637] syzkaller0: entered promiscuous mode [ 264.676655][ T9637] syzkaller0: entered allmulticast mode [ 264.709831][ T9637] tipc: Enabled bearer , priority 0 [ 264.720814][ T9635] tipc: Resetting bearer [ 264.811958][ T9635] tipc: Disabling bearer [ 264.900326][ T9651] netlink: 8 bytes leftover after parsing attributes in process `syz.1.786'. [ 265.088294][ T9659] netlink: 4 bytes leftover after parsing attributes in process `syz.0.789'. [ 265.109878][ T9660] netlink: 8 bytes leftover after parsing attributes in process `syz.4.790'. [ 265.751290][ T9683] tc_dump_action: action bad kind [ 265.842043][ T9687] netlink: 276 bytes leftover after parsing attributes in process `syz.0.796'. [ 266.414777][ T9699] netlink: 4 bytes leftover after parsing attributes in process `syz.0.801'. [ 266.444916][ T5690] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 266.633850][ T5690] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 266.653829][ T5690] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.653880][ T5690] usb 3-1: Product: syz [ 266.653896][ T5690] usb 3-1: Manufacturer: syz [ 266.653971][ T5690] usb 3-1: SerialNumber: syz [ 266.682625][ T5690] usb 3-1: config 0 descriptor?? [ 266.693533][ T5690] hub 3-1:0.0: bad descriptor, ignoring hub [ 266.693583][ T5690] hub 3-1:0.0: probe with driver hub failed with error -5 [ 266.773110][ T991] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 266.893746][ T5690] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 266.908728][ T5690] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 266.911095][ T5690] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 266.911235][ T5690] usb 3-1: media controller created [ 266.936009][ T991] usb 1-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 266.950550][ T991] usb 1-1: config 0 has an invalid interface number: 205 but max is 0 [ 266.950593][ T991] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 266.950635][ T991] usb 1-1: config 0 has no interface number 0 [ 266.950670][ T991] usb 1-1: config 0 interface 205 has no altsetting 0 [ 266.969351][ T5705] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 266.994950][ T991] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.003157][ T991] usb 1-1: Product: syz [ 267.007430][ T991] usb 1-1: Manufacturer: syz [ 267.007452][ T991] usb 1-1: SerialNumber: syz [ 267.026009][ T991] usb 1-1: config 0 descriptor?? [ 267.034074][ T5690] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 267.047060][ T991] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 267.047128][ T991] dvb-usb: bulk message failed: -22 (3/0) [ 267.073094][ T991] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 267.123519][ T991] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 267.123604][ T991] usb 1-1: media controller created [ 267.143449][ T991] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 267.156423][ T5705] usb 5-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 267.168811][ T5705] usb 5-1: config 54 has an invalid interface number: 97 but max is 0 [ 267.168857][ T5705] usb 5-1: config 54 has an invalid descriptor of length 97, skipping remainder of the config [ 267.168914][ T5705] usb 5-1: config 54 has no interface number 0 [ 267.168949][ T5705] usb 5-1: too many endpoints for config 54 interface 97 altsetting 97: 97, using maximum allowed: 30 [ 267.169010][ T5705] usb 5-1: config 54 interface 97 altsetting 97 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 267.169043][ T5705] usb 5-1: config 54 interface 97 has no altsetting 0 [ 267.237056][ T5705] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.237100][ T5705] usb 5-1: Product: syz [ 267.237134][ T5705] usb 5-1: Manufacturer: syz [ 267.237154][ T5705] usb 5-1: SerialNumber: syz [ 267.260538][ T991] dvb-usb: bulk message failed: -22 (6/0) [ 267.269642][ T991] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 267.289276][ T991] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input15 [ 267.307927][ T991] dvb-usb: schedule remote query interval to 150 msecs. [ 267.315123][ T991] dvb-usb: bulk message failed: -22 (3/0) [ 267.333224][ T991] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 267.351493][ T991] usb 1-1: USB disconnect, device number 30 [ 267.420310][ T5690] DVB: Unable to find symbol dib7000p_attach() [ 267.420389][ T5690] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 267.462469][ T991] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 267.504886][ T9703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.515149][ T9703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.582197][ T5705] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 267.590249][ T5705] dvb-usb: bulk message failed: -22 (3/0) [ 267.615217][ T5705] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 267.640430][ T5705] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 error while loading driver (-19) [ 267.650831][ T5705] dvb_usb_umt_010 5-1:54.97: probe with driver dvb_usb_umt_010 failed with error -22 [ 267.663835][ T5705] usb 5-1: USB disconnect, device number 14 [ 267.665073][ T5690] rc_core: IR keymap rc-dib0700-rc5 not found [ 267.665115][ T5690] Registered IR keymap rc-empty [ 267.665975][ T5690] dvb-usb: could not initialize remote control. [ 267.666005][ T5690] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 268.085453][ T9721] syz_tun: entered allmulticast mode [ 268.183066][ T5705] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 268.279026][ T5690] usb 3-1: USB disconnect, device number 26 [ 268.335272][ T5705] usb 5-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 268.347026][ T5705] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 268.347073][ T5705] usb 5-1: config 1 has no interface number 0 [ 268.347132][ T5705] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 268.347172][ T5705] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 268.347217][ T5705] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 248, changing to 7 [ 268.398918][ T5705] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.407261][ T5705] usb 5-1: Product: syz [ 268.407316][ T5705] usb 5-1: Manufacturer: syz [ 268.407338][ T5705] usb 5-1: SerialNumber: syz [ 268.483306][ T5690] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 268.741239][ T9728] netlink: 8 bytes leftover after parsing attributes in process `syz.0.810'. [ 268.978815][ T9715] syz_tun: left allmulticast mode [ 269.234623][ T9733] netlink: 4 bytes leftover after parsing attributes in process `syz.0.812'. [ 269.323222][ T5705] usb 5-1: USB disconnect, device number 15 [ 269.469078][ T5689] udevd[5689]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 269.503105][ T5690] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 269.606626][ T9741] tipc: Enabled bearer , priority 0 [ 269.617890][ T9741] syzkaller0: entered promiscuous mode [ 269.623570][ T9741] syzkaller0: entered allmulticast mode [ 269.636230][ T9741] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 269.655977][ T5690] usb 3-1: Using ep0 maxpacket: 8 [ 269.673377][ T5690] usb 3-1: unable to get BOS descriptor or descriptor too short [ 269.673468][ T5690] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 269.684968][ T5690] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 269.685064][ T5690] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 269.685127][ T5690] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 269.685197][ T5690] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 269.685270][ T5690] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 269.685333][ T5690] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 44 [ 269.692056][ T5690] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.692083][ T5690] usb 3-1: Product: syz [ 269.692099][ T5690] usb 3-1: Manufacturer: syz [ 269.692115][ T5690] usb 3-1: SerialNumber: syz [ 269.713746][ T5690] usb 3-1: config 0 descriptor?? [ 269.727114][ T9735] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 269.727973][ T9735] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 269.808808][ T5690] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 269.828698][ T9743] tipc: Resetting bearer [ 269.842198][ T9740] tipc: Resetting bearer [ 269.938322][ T9740] tipc: Disabling bearer [ 269.954707][ T31] audit: type=1326 audit(1788896153.564:1575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9734 comm="syz.2.814" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f09d4d9e159 code=0x0 [ 270.262136][ T9747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.262457][ T9747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.451490][ T9761] syzkaller0: entered promiscuous mode [ 270.451555][ T9761] syzkaller0: entered allmulticast mode [ 270.594628][ T9761] tipc: Enabled bearer , priority 0 [ 270.609810][ T9760] tipc: Resetting bearer [ 270.724920][ T9760] tipc: Disabling bearer [ 270.871416][ T9776] netlink: 12 bytes leftover after parsing attributes in process `syz.4.825'. [ 271.233131][ T25] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 271.394713][ T25] usb 1-1: not running at top speed; connect to a high speed hub [ 271.394774][ T25] usb 1-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 271.414626][ T25] usb 1-1: config 0 has too many interfaces: 223, using maximum allowed: 32 [ 271.425846][ T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 271.425906][ T25] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 223 [ 271.425987][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.459896][ T25] usb 1-1: config 0 descriptor?? [ 271.476992][ T25] uvcvideo 1-1:0.0: Found UVC 9.00 device (046d:0825) [ 272.289210][ T25] uvcvideo 1-1:0.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 48). [ 272.289317][ T25] uvcvideo 1-1:0.1: Failed to initialize the device (-71). [ 272.289975][ T25] uvcvideo 1-1:0.0: probe with driver uvcvideo failed with error -71 [ 272.352725][ T25] usb 1-1: USB disconnect, device number 31 [ 272.473699][ T5690] usb 3-1: USB disconnect, device number 27 [ 272.923363][ T9807] netlink: 8 bytes leftover after parsing attributes in process `syz.1.837'. [ 272.923409][ T9807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.837'. [ 273.111757][ T9812] netlink: 12 bytes leftover after parsing attributes in process `syz.3.839'. [ 273.379304][ T9820] netlink: 8 bytes leftover after parsing attributes in process `syz.1.843'. [ 273.388659][ T9820] netlink: 'syz.1.843': attribute type 3 has an invalid length. [ 273.414297][ T5705] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 273.565732][ T5705] usb 1-1: Using ep0 maxpacket: 32 [ 273.568714][ T5705] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 273.570802][ T5705] usb 1-1: config 0 has no interfaces? [ 273.592209][ T5705] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.592264][ T5705] usb 1-1: Product: syz [ 273.592281][ T5705] usb 1-1: Manufacturer: syz [ 273.592316][ T5705] usb 1-1: SerialNumber: syz [ 273.638634][ T5705] usb 1-1: config 0 descriptor?? [ 273.889634][ T5705] usb 1-1: USB disconnect, device number 32 [ 274.413126][ T5690] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 274.543082][ T5690] usb 2-1: device descriptor read/64, error -71 [ 274.643617][ T9839] netlink: 12 bytes leftover after parsing attributes in process `syz.2.852'. [ 274.710060][ T9841] vlan2: entered promiscuous mode [ 274.716187][ T9841] bond_slave_1: entered promiscuous mode [ 274.784409][ T5690] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 274.865938][ T9849] netlink: 8 bytes leftover after parsing attributes in process `syz.0.855'. [ 274.865994][ T9849] netlink: 'syz.0.855': attribute type 3 has an invalid length. [ 274.923195][ T5690] usb 2-1: device descriptor read/64, error -71 [ 275.034879][ T5690] usb usb2-port1: attempt power cycle [ 275.273146][ T5705] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 275.294310][ T9869] netlink: 12 bytes leftover after parsing attributes in process `syz.0.863'. [ 275.348206][ T9867] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 275.373310][ T5690] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 275.393932][ T5690] usb 2-1: device descriptor read/8, error -71 [ 275.433767][ T5705] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 275.437911][ T5705] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 275.443155][ T7116] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 275.446205][ T5705] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.446263][ T5705] usb 5-1: Product: syz [ 275.446335][ T5705] usb 5-1: Manufacturer: syz [ 275.446378][ T5705] usb 5-1: SerialNumber: syz [ 275.496861][ T5705] usb 5-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 275.613837][ T7116] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 275.624427][ T25] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 275.637501][ T5690] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 275.639914][ T7116] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 275.639996][ T7116] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 275.640057][ T7116] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 275.640121][ T7116] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 275.658919][ T5690] usb 2-1: device descriptor read/8, error -71 [ 275.659275][ T7116] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.659329][ T7116] usb 3-1: Product: syz [ 275.659369][ T7116] usb 3-1: Manufacturer: syz [ 275.659409][ T7116] usb 3-1: SerialNumber: syz [ 275.711178][ T7116] usb 3-1: config 0 descriptor?? [ 275.766215][ T5690] usb usb2-port1: unable to enumerate USB device [ 275.779485][ T5705] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 275.791957][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 275.797967][ T5705] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 275.806698][ T5705] usb 5-1: media controller created [ 275.813166][ T25] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 275.824941][ T25] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 275.824990][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 275.825035][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 275.825065][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 275.825097][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 275.888343][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.888387][ T25] usb 1-1: Product: syz [ 275.888425][ T25] usb 1-1: Manufacturer: syz [ 275.888447][ T25] usb 1-1: SerialNumber: syz [ 275.913184][ T25] usb 1-1: config 0 descriptor?? [ 275.936067][ T5705] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 275.951594][ T9865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.958908][ T9865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.974874][ T9865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.988327][ T9865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.003261][ T9865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.014165][ T9865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.027592][ T9865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.043158][ T9865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.052599][ T9865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.063745][ T9865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.131554][ T7116] adutux 3-1:0.0: Could not retrieve serial number [ 276.144841][ T7116] adutux 3-1:0.0: probe with driver adutux failed with error -5 [ 276.228407][ T7116] usb 3-1: USB disconnect, device number 28 [ 276.297785][ T5705] usb 5-1: USB disconnect, device number 16 [ 276.348945][ T25] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 276.355579][ T25] input input17: Device does not respond to id packet M [ 276.371467][ T25] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 276.378602][ T25] input input17: Device does not respond to id packet P [ 276.472326][ T9872] kvm: kvm [9871]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x4000008d) = 0x40 [ 276.485593][ T25] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 276.491820][ T25] input input17: Device does not respond to id packet B [ 276.776546][ T25] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 276.783178][ T25] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 276.790168][ T25] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 276.799039][ T25] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 276.818109][ T25] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input17 [ 276.875594][ T25] usb 1-1: USB disconnect, device number 33 [ 276.885874][ T4970] iforce 1-1:0.0: usb_submit_urb failed -19 [ 276.888583][ T4970] iforce 1-1:0.0: usb_submit_urb failed -19 [ 276.898910][ T4970] iforce 1-1:0.0: usb_submit_urb failed -19 [ 276.922815][ T4970] iforce 1-1:0.0: usb_submit_urb failed -19 [ 276.964349][ T9897] netlink: 12 bytes leftover after parsing attributes in process `syz.3.874'. [ 277.118111][ T9900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.875'. [ 277.309913][ T9910] netlink: 8 bytes leftover after parsing attributes in process `syz.4.880'. [ 277.719657][ T9923] netlink: 32 bytes leftover after parsing attributes in process `syz.3.884'. [ 277.730539][ T9923] kvm: requested 5866 ns i8254 timer period limited to 200000 ns [ 277.914286][ T9923] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 277.934596][ T9923] block device autoloading is deprecated and will be removed. [ 278.061572][ T9932] netlink: 12 bytes leftover after parsing attributes in process `syz.4.887'. [ 278.078193][ T9935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.889'. [ 278.124955][ T9935] bond3: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 278.137971][ T9935] bond3: entered allmulticast mode [ 278.146334][ T9934] netlink: 'syz.2.889': attribute type 2 has an invalid length. [ 278.349665][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 278.674704][ T991] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 278.840542][ T991] usb 3-1: unable to get BOS descriptor or descriptor too short [ 278.848496][ T991] usb 3-1: New USB device found, idVendor=06cb, idProduct=73f6, bcdDevice= 0.40 [ 278.862519][ T991] usb 3-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 278.862575][ T991] usb 3-1: config 1 interface 0 has no altsetting 0 [ 278.887501][ T991] usb 3-1: string descriptor 0 read error: -22 [ 278.894269][ T991] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.931990][ T9969] syzkaller0: entered promiscuous mode [ 278.932043][ T9969] syzkaller0: entered allmulticast mode [ 279.132094][ T9972] netlink: 52 bytes leftover after parsing attributes in process `syz.3.900'. [ 279.312644][ T991] hid (null): invalid report_size 29539 [ 279.321027][ T991] hid (null): nested delimiters [ 279.350563][ T991] hid_parser_main: 453 callbacks suppressed [ 279.360170][ T991] itetech 0003:06CB:73F6.0006: unknown main item tag 0x5 [ 279.367764][ T991] itetech 0003:06CB:73F6.0006: unknown main item tag 0x0 [ 279.375354][ T991] itetech 0003:06CB:73F6.0006: unknown main item tag 0x0 [ 279.382787][ T991] itetech 0003:06CB:73F6.0006: unknown main item tag 0x0 [ 279.382822][ T991] itetech 0003:06CB:73F6.0006: unknown main item tag 0x0 [ 279.382852][ T991] itetech 0003:06CB:73F6.0006: unknown main item tag 0x0 [ 279.382881][ T991] itetech 0003:06CB:73F6.0006: unknown main item tag 0x0 [ 279.382910][ T991] itetech 0003:06CB:73F6.0006: unknown main item tag 0x0 [ 279.382938][ T991] itetech 0003:06CB:73F6.0006: unknown main item tag 0x0 [ 279.421712][ T991] itetech 0003:06CB:73F6.0006: unknown main item tag 0x0 [ 279.422188][ T991] itetech 0003:06CB:73F6.0006: invalid report_size 29539 [ 279.422208][ T991] itetech 0003:06CB:73F6.0006: item 0 2 1 7 parsing failed [ 279.452174][ T991] itetech 0003:06CB:73F6.0006: probe with driver itetech failed with error -22 [ 279.542099][ T9947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.893'. [ 279.616837][ T9982] netlink: 8 bytes leftover after parsing attributes in process `syz.2.893'. [ 279.742226][ T9947] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 279.758967][ T9947] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 279.788908][ T9982] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 279.906526][ T9982] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 280.039982][ T991] usb 3-1: USB disconnect, device number 29 [ 280.108133][ T9994] syzkaller0: entered promiscuous mode [ 280.113879][ T9994] syzkaller0: entered allmulticast mode [ 280.123500][ T9996] tipc: Enabled bearer , priority 0 [ 280.145389][ T9985] tipc: Resetting bearer [ 280.228848][ T9985] tipc: Disabling bearer [ 280.262451][ T9999] netlink: 8 bytes leftover after parsing attributes in process `syz.3.906'. [ 280.324266][ T9991] gre0: entered promiscuous mode [ 280.329442][ T9991] gre0: entered allmulticast mode [ 280.339465][ T9991] tc_dump_action: action bad kind [ 280.353278][ T9993] tipc: Started in network mode [ 280.358587][ T9993] tipc: Node identity b6705fd286dd, cluster identity 4711 [ 280.366893][ T9993] tipc: Enabled bearer , priority 0 [ 280.414789][ T9990] tipc: Disabling bearer [ 281.032785][T10027] tc_dump_action: action bad kind [ 281.353150][ T5690] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 281.523456][ T5690] usb 2-1: Using ep0 maxpacket: 8 [ 281.524213][ T5690] usb 2-1: New USB device found, idVendor=17ef, idProduct=60a4, bcdDevice= 0.00 [ 281.530017][ T5690] usb 2-1: config 0 interface 0 has no altsetting 0 [ 281.530056][ T5690] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.567879][ T5690] usb 2-1: config 0 descriptor?? [ 281.721799][T10044] xt_hashlimit: size too large, truncated to 1048576 [ 281.963186][ T7115] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 282.127676][ T7115] usb 5-1: unable to get BOS descriptor or descriptor too short [ 282.127834][ T7115] usb 5-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 282.139209][ T7115] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 282.139379][ T7115] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 282.154031][ T7115] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.154176][ T7115] usb 5-1: Product: syz [ 282.154220][ T7115] usb 5-1: Manufacturer: syz [ 282.154256][ T7115] usb 5-1: SerialNumber: syz [ 282.223173][ T7116] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 282.244940][ T5690] usbhid 2-1:0.0: can't add hid device: -71 [ 282.245390][ T5690] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 282.272498][ T5690] usb 2-1: USB disconnect, device number 25 [ 282.378710][ T7116] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 282.398222][ T7116] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.398307][ T7116] usb 1-1: Product: syz [ 282.398346][ T7116] usb 1-1: Manufacturer: syz [ 282.398424][ T7116] usb 1-1: SerialNumber: syz [ 282.463330][ T7115] usb 5-1: unit 4 not found! [ 282.519755][ T7113] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 282.717304][ T7115] usb 5-1: USB disconnect, device number 17 [ 282.776124][ T5910] udevd[5910]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 282.996770][ T5705] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 283.133679][ T991] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 283.158333][ T5705] usb 4-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 283.170509][ T5705] usb 4-1: config 0 has an invalid interface number: 205 but max is 0 [ 283.178904][ T5705] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.189148][ T5705] usb 4-1: config 0 has no interface number 0 [ 283.189191][ T5705] usb 4-1: config 0 interface 205 has no altsetting 0 [ 283.207922][ T5705] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.216638][ T5705] usb 4-1: Product: syz [ 283.220987][ T5705] usb 4-1: Manufacturer: syz [ 283.221010][ T5705] usb 4-1: SerialNumber: syz [ 283.234949][ T5705] usb 4-1: config 0 descriptor?? [ 283.244229][ T5705] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 283.255659][ T5705] dvb-usb: bulk message failed: -22 (3/0) [ 283.286679][ T5705] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 283.297080][T10041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.308366][ T991] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 283.311978][T10041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.329073][ T5705] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 283.340863][ T5705] usb 4-1: media controller created [ 283.348708][ T5705] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 283.358575][ T991] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x6E, changing to 0xE [ 283.358640][ T991] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 28719, setting to 64 [ 283.388890][ T5705] dvb-usb: bulk message failed: -22 (6/0) [ 283.394974][ T5705] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 283.410075][ T991] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.410117][ T991] usb 2-1: Product: syz [ 283.410151][ T991] usb 2-1: Manufacturer: syz [ 283.410171][ T991] usb 2-1: SerialNumber: syz [ 283.434832][ T5705] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input18 [ 283.451396][ T5705] dvb-usb: schedule remote query interval to 150 msecs. [ 283.458628][ T991] usb 2-1: config 0 descriptor?? [ 283.464160][ T5705] dvb-usb: bulk message failed: -22 (3/0) [ 283.493102][ T5705] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 283.525543][ T5705] usb 4-1: USB disconnect, device number 25 [ 283.600824][T10081] __nla_validate_parse: 4 callbacks suppressed [ 283.607652][T10081] netlink: 52 bytes leftover after parsing attributes in process `syz.4.936'. [ 283.623829][ T7113] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 283.634539][ T7113] ath9k_htc: Failed to initialize the device [ 283.685681][ T5705] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 283.769370][ T7113] usb 1-1: ath9k_htc: USB layer deinitialized [ 283.792293][ T7115] usb 1-1: USB disconnect, device number 34 [ 283.956607][T10074] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 283.967279][ T5705] usb 2-1: USB disconnect, device number 26 [ 284.539431][T10099] xt_nfacct: accounting object `' does not exist [ 284.603835][T10103] syz_tun: entered promiscuous mode [ 284.611641][T10103] syz_tun: left promiscuous mode [ 284.799629][T10111] netlink: 52 bytes leftover after parsing attributes in process `syz.2.947'. [ 284.894857][ T7116] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 284.984640][ T7115] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 285.053849][ T7116] usb 5-1: New USB device found, idVendor=1b5c, idProduct=0105, bcdDevice= 1.f1 [ 285.065024][ T7116] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 285.065075][ T7116] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 285.091766][ T7116] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.091806][ T7116] usb 5-1: Product: syz [ 285.091845][ T7116] usb 5-1: Manufacturer: syz [ 285.091864][ T7116] usb 5-1: SerialNumber: syz [ 285.113215][ T7116] usb 5-1: config 0 descriptor?? [ 285.121837][ T7116] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 285.127923][ T7116] usb 5-1: Detected SIO [ 285.127977][ T7116] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 4 [ 285.134957][ T7116] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 285.167072][ T7115] usb 1-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 285.180367][ T7115] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 285.180517][ T7115] usb 1-1: config 1 interface 0 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 285.195493][ T7115] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.195580][ T7115] usb 1-1: Product: syz [ 285.195634][ T7115] usb 1-1: Manufacturer: syz [ 285.195670][ T7115] usb 1-1: SerialNumber: syz [ 285.306198][ T7115] snd-ua101 1-1:1.1: invalid num_altsetting [ 285.333625][ T7115] snd-ua101 1-1:1.0: invalid format type [ 285.469827][ T5690] usb 1-1: USB disconnect, device number 35 [ 285.553342][ T991] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 285.653429][T10139] syzkaller0: entered promiscuous mode [ 285.653484][T10139] syzkaller0: entered allmulticast mode [ 285.663427][ T7115] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 285.714878][T10139] tipc: Enabled bearer , priority 0 [ 285.724035][ T991] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 285.735396][ T991] usb 2-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 285.747735][ T991] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 285.747862][T10138] tipc: Resetting bearer [ 285.758093][ T991] usb 2-1: config 0 interface 0 has no altsetting 0 [ 285.779221][ T991] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 285.779262][ T991] usb 2-1: Product: syz [ 285.779295][ T991] usb 2-1: Manufacturer: syz [ 285.779313][ T991] usb 2-1: SerialNumber: syz [ 285.814880][ T991] usb 2-1: config 0 descriptor?? [ 285.822848][ T7115] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 285.833211][ T7115] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.833255][ T7115] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.833361][ T7115] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.867703][ T991] usb 2-1: selecting invalid altsetting 0 [ 285.885920][T10138] tipc: Disabling bearer [ 285.896910][ T7115] usb 4-1: config 0 descriptor?? [ 286.362479][ T7115] cp2112 0003:10C4:EA90.0007: item fetching failed at offset 3/7 [ 286.372534][ T7115] cp2112 0003:10C4:EA90.0007: parse failed [ 286.372926][ T7115] cp2112 0003:10C4:EA90.0007: probe with driver cp2112 failed with error -22 [ 286.643670][ T991] usb 4-1: USB disconnect, device number 26 [ 287.193276][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 287.603268][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 288.370828][ T5690] usb 5-1: USB disconnect, device number 18 [ 288.788571][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 290.420117][ T5690] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 290.486255][ T5690] ftdi_sio 5-1:0.0: device disconnected [ 292.201244][ C1] sched: DL replenish lagged too much [ 300.426254][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 308.332873][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 319.398114][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 319.414849][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.558046][ T0] NOHZ tick-stop error: local softirq work is pending, handler #88!!! [ 329.500222][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 329.519198][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c8!!! [ 330.292508][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 330.333239][ T0] NOHZ tick-stop error: local softirq work is pending, handler #ca!!! [ 330.379979][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 360.440085][ T5621] Bluetooth: hci2: command 0x0406 tx timeout [ 379.151669][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.169498][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.169178][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.184326][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 448.082920][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 448.090008][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7869/1:b..l [ 448.097958][ C0] rcu: (detected by 0, t=10502 jiffies, g=60625, q=1288281 ncpus=2) [ 448.106073][ C0] task:syz-executor state:R running task stack:21960 pid:7869 tgid:7869 ppid:7861 task_flags:0x400140 flags:0x00080000 [ 448.119679][ C0] Call Trace: [ 448.123029][ C0] [ 448.125995][ C0] __schedule+0x17db/0x58f0 [ 448.130582][ C0] ? __pfx___schedule+0x10/0x10 [ 448.135487][ C0] ? __lock_acquire+0x747/0x2de0 [ 448.140482][ C0] preempt_schedule_irq+0x4b/0x90 [ 448.145567][ C0] irqentry_exit+0x14f/0x910 [ 448.150189][ C0] ? trace_irq_disable+0x3b/0x140 [ 448.155600][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 448.161623][ C0] RIP: 0010:lock_acquire+0x232/0x350 [ 448.166969][ C0] Code: ff ff ff e8 70 7e 41 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 c2 79 f1 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 87 31 da [ 448.186609][ C0] RSP: 0018:ffffc9000363f3c8 EFLAGS: 00000282 [ 448.192705][ C0] RAX: 5db18ed81fb27e00 RBX: 0000000000000000 RCX: 0000000000000046 [ 448.200800][ C0] RDX: 000000005211f2b0 RSI: ffffffff8e6fd6d4 RDI: ffffffff8c6d9480 [ 448.208922][ C0] RBP: ffff88801b198000 R08: ffffffff8177f1df R09: 0000000000000000 [ 448.216927][ C0] R10: ffffc9000363f558 R11: fffff520006c7ead R12: ffffffff8ed5c760 [ 448.224937][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 448.232958][ C0] ? unwind_next_frame+0x8f/0x2550 [ 448.238130][ C0] ? arch_stack_walk+0xe3/0x150 [ 448.243023][ C0] ? unwind_next_frame+0x8f/0x2550 [ 448.248190][ C0] unwind_next_frame+0xac/0x2550 [ 448.253169][ C0] ? unwind_next_frame+0x8f/0x2550 [ 448.258327][ C0] ? __unwind_start+0xed/0x660 [ 448.263143][ C0] ? unwind_next_frame+0x8f/0x2550 [ 448.268303][ C0] __unwind_start+0x514/0x660 [ 448.273015][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 448.279216][ C0] arch_stack_walk+0xe3/0x150 [ 448.283975][ C0] ? arch_stack_walk+0xe3/0x150 [ 448.288880][ C0] stack_trace_save+0xa9/0x100 [ 448.293689][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 448.299124][ C0] save_stack+0x122/0x230 [ 448.303495][ C0] ? __pfx_save_stack+0x10/0x10 [ 448.308399][ C0] ? page_ext_put+0x97/0xc0 [ 448.312942][ C0] __reset_page_owner+0x71/0x1f0 [ 448.317929][ C0] __free_frozen_pages+0xc93/0xd90 [ 448.323126][ C0] __slab_free+0x274/0x2c0 [ 448.327590][ C0] qlist_free_all+0x99/0x100 [ 448.332251][ C0] kasan_quarantine_reduce+0x148/0x160 [ 448.337740][ C0] __kasan_kmalloc+0x22/0xb0 [ 448.342369][ C0] __kmalloc_noprof+0x36b/0x720 [ 448.347260][ C0] ? __kmalloc_noprof+0x1ab/0x720 [ 448.352311][ C0] ? tomoyo_encode+0x2ad/0x570 [ 448.357115][ C0] ? tomoyo_encode+0x2ad/0x570 [ 448.361924][ C0] tomoyo_encode+0x2ad/0x570 [ 448.366560][ C0] tomoyo_realpath_from_path+0x5fa/0x640 [ 448.372266][ C0] tomoyo_path_perm+0x283/0x560 [ 448.377157][ C0] ? tomoyo_path_perm+0x251/0x560 [ 448.382216][ C0] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 448.387634][ C0] ? __x64_sys_openat+0x138/0x170 [ 448.392753][ C0] security_inode_getattr+0x12b/0x310 [ 448.398201][ C0] __x64_sys_newfstat+0x133/0x270 [ 448.403272][ C0] ? do_sys_openat2+0x14e/0x200 [ 448.408166][ C0] ? __pfx___x64_sys_newfstat+0x10/0x10 [ 448.413782][ C0] ? rcu_is_watching+0x16/0xb0 [ 448.418603][ C0] do_syscall_64+0x166/0x520 [ 448.423226][ C0] ? trace_irq_disable+0x3b/0x140 [ 448.428286][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.434400][ C0] ? clear_bhb_loop+0x70/0xc0 [ 448.439228][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.445165][ C0] RIP: 0033:0x7f09d4d9c767 [ 448.449622][ C0] RSP: 002b:00007f09d514fce8 EFLAGS: 00000206 ORIG_RAX: 0000000000000005 [ 448.458069][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f09d4d9c767 [ 448.466424][ C0] RDX: 0000000000000000 RSI: 00007f09d514fcf0 RDI: 0000000000000003 [ 448.474439][ C0] RBP: 00007f09d514fdec R08: 0000000000000000 R09: 0000000000000000 [ 448.482444][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000007c [ 448.490479][ C0] R13: 0000000000000000 R14: 00000000000462a9 R15: 00007f09d514fe40 [ 448.498503][ C0] [ 448.501553][ C0] rcu: rcu_preempt kthread starved for 3825 jiffies! g60625 f0x2 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=1 [ 448.512517][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 448.522521][ C0] rcu: RCU grace-period kthread stack dump: [ 448.528460][ C0] task:rcu_preempt state:R running task stack:27496 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 448.542014][ C0] Call Trace: [ 448.545337][ C0] [ 448.548314][ C0] __schedule+0x17db/0x58f0 [ 448.552920][ C0] ? __pfx___schedule+0x10/0x10 [ 448.557835][ C0] ? lock_acquire+0x115/0x350 [ 448.562579][ C0] ? schedule+0x90/0x2b0 [ 448.566889][ C0] schedule+0x164/0x2b0 [ 448.571128][ C0] schedule_timeout+0x152/0x2c0 [ 448.576037][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 448.581467][ C0] ? __pfx_process_timeout+0x10/0x10 [ 448.586859][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 448.592731][ C0] ? prepare_to_swait_event+0x322/0x350 [ 448.598340][ C0] rcu_gp_fqs_loop+0x30c/0x11f0 [ 448.603267][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 448.609505][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 448.614839][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 448.620111][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 448.624765][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 448.630009][ C0] ? __kthread_parkme+0x71/0x1f0 [ 448.635007][ C0] ? __kthread_parkme+0x199/0x1f0 [ 448.640095][ C0] kthread+0x38b/0x480 [ 448.644293][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 448.649531][ C0] ? __pfx_kthread+0x10/0x10 [ 448.654169][ C0] ret_from_fork+0x514/0xb70 [ 448.658810][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 448.663980][ C0] ? __switch_to+0xc89/0x1420 [ 448.668710][ C0] ? __pfx_kthread+0x10/0x10 [ 448.673347][ C0] ret_from_fork_asm+0x1a/0x30 [ 448.678185][ C0] [ 448.681241][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 448.687602][ C0] Sending NMI from CPU 0 to CPUs 1: [ 448.692925][ C1] NMI backtrace for cpu 1 [ 448.692994][ C1] CPU: 1 UID: 0 PID: 6102 Comm: kworker/u8:17 Tainted: G L syzkaller #0 PREEMPT(full) [ 448.693025][ C1] Tainted: [L]=SOFTLOCKUP [ 448.693033][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 448.693048][ C1] Workqueue: wg-kex-wg0 wg_packet_handshake_send_worker [ 448.693077][ C1] RIP: 0010:unwind_get_return_address+0x4d/0x90 [ 448.693106][ C1] Code: c0 75 4c 83 3b 00 74 3a 48 83 c3 48 49 89 df 49 c1 ef 03 43 80 3c 37 00 74 08 48 89 df e8 1b d5 bf 00 48 8b 3b e8 e3 db 18 00 <85> c0 74 14 43 80 3c 37 00 74 08 48 89 df e8 00 d5 bf 00 48 8b 03 [ 448.693126][ C1] RSP: 0018:ffffc90000a18008 EFLAGS: 00000202 [ 448.693144][ C1] RAX: 0000000000000001 RBX: ffffc90000a18070 RCX: 8000000000000100 [ 448.693160][ C1] RDX: ffffc90000a18001 RSI: ffffffff8e6fd6d4 RDI: ffffffff8188f176 [ 448.693176][ C1] RBP: ffffc90000a180b0 R08: ffffc90000a18f48 R09: 0000000000000000 [ 448.693192][ C1] R10: ffffc90000a18078 R11: fffff52000143011 R12: ffff888031098000 [ 448.693208][ C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff9200014300e [ 448.693224][ C1] FS: 0000000000000000(0000) GS:ffff888124dd6000(0000) knlGS:0000000000000000 [ 448.693241][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 448.693256][ C1] CR2: 000020000020d030 CR3: 0000000032b80000 CR4: 00000000003526f0 [ 448.693275][ C1] Call Trace: [ 448.693283][ C1] [ 448.693292][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 448.693328][ C1] arch_stack_walk+0xfb/0x150 [ 448.693355][ C1] ? handle_softirqs+0x226/0x860 [ 448.693386][ C1] stack_trace_save+0xa9/0x100 [ 448.693419][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 448.693451][ C1] ? kfree+0x1c5/0x650 [ 448.693485][ C1] ? __lock_acquire+0x747/0x2de0 [ 448.693508][ C1] kasan_save_track+0x3e/0x80 [ 448.693529][ C1] ? kasan_save_track+0x3e/0x80 [ 448.693549][ C1] ? kasan_save_free_info+0x40/0x50 [ 448.693578][ C1] ? __kasan_slab_free+0x5c/0x80 [ 448.693601][ C1] ? kmem_cache_free+0x182/0x650 [ 448.693621][ C1] ? nft_synproxy_eval_v4+0x36a/0x4e0 [ 448.693643][ C1] ? nft_synproxy_do_eval+0x335/0x550 [ 448.693665][ C1] ? nft_do_chain+0x48d/0x1b10 [ 448.693688][ C1] ? nft_do_chain_inet+0x360/0x4b0 [ 448.693710][ C1] ? nf_hook_slow+0xc5/0x220 [ 448.693742][ C1] ? NF_HOOK+0x21f/0x3c0 [ 448.693763][ C1] ? NF_HOOK+0x336/0x3c0 [ 448.693783][ C1] ? process_backlog+0xa6b/0x18b0 [ 448.693803][ C1] ? __napi_poll+0xaa/0x330 [ 448.693832][ C1] ? net_rx_action+0x61d/0xf50 [ 448.693876][ C1] ? nft_synproxy_eval_v4+0x36a/0x4e0 [ 448.693900][ C1] kasan_save_free_info+0x40/0x50 [ 448.693930][ C1] __kasan_slab_free+0x5c/0x80 [ 448.693953][ C1] kmem_cache_free+0x182/0x650 [ 448.693986][ C1] nft_synproxy_eval_v4+0x36a/0x4e0 [ 448.694014][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 448.694038][ C1] ? nf_ip_checksum+0x13c/0x510 [ 448.694064][ C1] nft_synproxy_do_eval+0x335/0x550 [ 448.694089][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 448.694111][ C1] ? ieee80211_rx_handlers+0xc849/0xc8b0 [ 448.694137][ C1] ? ieee80211_rx_handlers+0xc849/0xc8b0 [ 448.694176][ C1] nft_do_chain+0x48d/0x1b10 [ 448.694206][ C1] ? __pfx_ieee80211_rx_handlers+0x10/0x10 [ 448.694230][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 448.694257][ C1] ? ipt_do_table+0x2b9/0x15d0 [ 448.694294][ C1] nft_do_chain_inet+0x360/0x4b0 [ 448.694318][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 448.694341][ C1] ? ipt_do_table+0x2b9/0x15d0 [ 448.694365][ C1] ? nf_nat_ipv4_local_in+0x21f/0x720 [ 448.694396][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 448.694420][ C1] nf_hook_slow+0xc5/0x220 [ 448.694456][ C1] NF_HOOK+0x21f/0x3c0 [ 448.694479][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 448.694503][ C1] ? NF_HOOK+0x9e/0x3c0 [ 448.694524][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 448.694548][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 448.694575][ C1] ? ip_local_deliver+0x113/0x190 [ 448.694600][ C1] NF_HOOK+0x336/0x3c0 [ 448.694622][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 448.694645][ C1] ? NF_HOOK+0x9e/0x3c0 [ 448.694666][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 448.694690][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 448.694712][ C1] ? ip_rcv_core+0x88d/0xd50 [ 448.694737][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 448.694759][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 448.694781][ C1] process_backlog+0xa6b/0x18b0 [ 448.694804][ C1] ? process_backlog+0x3de/0x18b0 [ 448.694832][ C1] __napi_poll+0xaa/0x330 [ 448.694865][ C1] net_rx_action+0x61d/0xf50 [ 448.694892][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 448.694929][ C1] handle_softirqs+0x226/0x860 [ 448.694959][ C1] ? do_softirq+0x77/0xd0 [ 448.695012][ C1] ? kernel_fpu_end+0x62/0x80 [ 448.695038][ C1] do_softirq+0x77/0xd0 [ 448.695063][ C1] [ 448.695070][ C1] [ 448.695078][ C1] __local_bh_enable_ip+0x100/0x140 [ 448.695106][ C1] blake2s_compress+0xfa/0x1c00 [ 448.695147][ C1] ? __asan_memset+0x22/0x50 [ 448.695181][ C1] ? kernel_fpu_begin_mask+0x2bb/0x380 [ 448.695208][ C1] ? __pfx_blake2s_compress+0x10/0x10 [ 448.695238][ C1] ? kernel_fpu_end+0x62/0x80 [ 448.695265][ C1] ? __local_bh_enable_ip+0xd6/0x140 [ 448.695292][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 448.695312][ C1] ? kernel_fpu_end+0x62/0x80 [ 448.695336][ C1] ? __local_bh_enable_ip+0xd6/0x140 [ 448.695363][ C1] ? blake2s_compress+0x1b4d/0x1c00 [ 448.695398][ C1] blake2s_final+0x10f/0x260 [ 448.695428][ C1] hmac+0x204/0x3b0 [ 448.695458][ C1] ? __pfx_hmac+0x10/0x10 [ 448.695493][ C1] ? curve25519_generate_public+0x2fed/0x3050 [ 448.695536][ C1] ? __asan_memset+0x22/0x50 [ 448.695572][ C1] message_ephemeral+0x233/0x310 [ 448.695603][ C1] ? __pfx_message_ephemeral+0x10/0x10 [ 448.695650][ C1] ? down_read+0x2be/0x330 [ 448.695675][ C1] wg_noise_handshake_create_initiation+0x24f/0x810 [ 448.695729][ C1] ? __pfx_wg_noise_handshake_create_initiation+0x10/0x10 [ 448.695761][ C1] ? __lock_acquire+0x747/0x2de0 [ 448.695792][ C1] ? __lock_acquire+0x747/0x2de0 [ 448.695816][ C1] ? lock_acquire+0x115/0x350 [ 448.695839][ C1] ? ktime_get_coarse_with_offset+0x8a/0x150 [ 448.695865][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 448.695884][ C1] ? ktime_get_coarse_with_offset+0x8a/0x150 [ 448.695907][ C1] ? ktime_get_coarse_with_offset+0x102/0x150 [ 448.695930][ C1] wg_packet_handshake_send_worker+0x18c/0x370 [ 448.695955][ C1] ? __pfx_wg_packet_handshake_send_worker+0x10/0x10 [ 448.695983][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 448.696024][ C1] ? rcu_is_watching+0x16/0xb0 [ 448.696050][ C1] ? process_scheduled_works+0x97a/0x1630 [ 448.696078][ C1] process_scheduled_works+0xc3d/0x1630 [ 448.696124][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 448.696156][ C1] ? assign_work+0x3cf/0x5d0 [ 448.696185][ C1] worker_thread+0xa47/0xfb0 [ 448.696229][ C1] kthread+0x38b/0x480 [ 448.696249][ C1] ? __pfx_worker_thread+0x10/0x10 [ 448.696276][ C1] ? __pfx_kthread+0x10/0x10 [ 448.696296][ C1] ret_from_fork+0x514/0xb70 [ 448.696317][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 448.696350][ C1] ? __switch_to+0xc89/0x1420 [ 448.696380][ C1] ? __pfx_kthread+0x10/0x10 [ 448.696401][ C1] ret_from_fork_asm+0x1a/0x30 [ 448.696443][ C1]