last executing test programs: 8.423590202s ago: executing program 0 (id=874): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/clear_refs\x00', 0x1, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) read$FUSE(0xffffffffffffffff, &(0x7f0000002500)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r2, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0200000001, 0xfa11, 0xfffffffc}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="6800000013000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006772653000000000000000000000000034001a80100002800c000180080021000000000020000a80050008"], 0x68}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000780)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x20048c90}, 0x4008004) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x3) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) unshare(0x400) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001240)=ANY=[@ANYBLOB="bf16000000000000b707000001009fa35070000000000000280000000000c00095000000000000002ba728041598d6fbd30cb599e83d24a3aa81d36bb3010100bd2321afb56fa54f26fb0b71d0e6adff07f1d8f7faf75e0f226bd99eea7960707142fa2dc79b9723741c4a0e168c1886d0d4d94f2f4e345c652fbc16ee988ee99fbfbf9b0a4def23d410f6296b32a834388107200759cda9036b4e369a9e152ddcc7b1b85f3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c3b35967dec6e802f5ab3eea57b09a2ed4048d3b867ddd58211d6ececb0cd2b6d357b85a0218ce740068725837079e468ee207d2f73902fbcfcf49822775985bf31b715f5888b24efa000000000000ffffffdf0000000000000000000000000000020000000000000000000000000000b27cf3d1848a54d7132be1ffb0adf9deab29ea3323aa9fdfb52faf449c3bfd09000000b9349e31aa3701c38c527d3237c18e521ab219efdebb7b3de8f67581cf796a1d4223b90b80fcad3f6c962b9f292324b7ab7f7da31cf41ab12012fb1e0a494034127de745409e35a30b23bcee46762c2093bcc9eae5ee3e980026c96f80ee1a74e04bde740750fa4d9aaa705989b8e673e3296e52d307db98ca112874ec309baed0499104dcfe7c0f694bd5fc9e66d058b75fa4c81e5c9f42d9383e41d277b10392a96286744f049c3f128f8f92ef992239eafce5b43b4ec1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637598f37ad380a447483cac394c7bbdcd0e3b1c39b2e00916de48a4e70f03cc415ba77af02c1d4cef5379da860aed8477dfa8ceefb405005c6977c78cdbf37704ec73755539280b064bda144910fe050038ec9e47de89298b7bf4d769ccc18eede00e8ca5457870eb30d211e23ccc8e06cd58b638c234bbb55ff413c86ba9affb12ec757c7234c270246c87a901160e6c07bf6cf8809c3a0d46ff7f000000000000ad1e1f493354b2822b9837421134c0167d78e6c24ed0a2768e825972ea3b774a1467c89fa0f82e8440105051e5510a33dcda5e143fbfff161c12ca389cbe4cc302b52e2101de18a1f1f7c551b3fa00055cc1c46c5fd9c26a54d43fa050645bd6109b113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a84a4e378a9b15bc20f49e298727340e97c870800000047546103f123f661c84726e7c7c55eff231a1b033d8f841ba3442b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf46306f2ef7be184f5e93ba5c8c2a4c04450b652b8d4c2ff030000000000000007c6bbd6cb2b240ce7d47ae636a5dbe9864a117d27326850a7c3b57086a4482c218b10af13d7be94987005088a83880ccab9c99220002af8c5e13d52c87c3a3ee6c08384865b66d2b4dcb5dd9cba16b64ebbbf8702ae12c77e6e34991a225c120a3c950942fe0bc9f2a1a7506d35e5b439edeb7088aeda890cf8a4a6f31ba6d9b8cb098f935bdcbb29fd0f1a342c9eed00000000ab6648a9dea0b6c91996d65da6c24a700a86c814459f3cdaaf99000000000000000000bf2130d1b32c826563c718d0ad23bc83ba3f3757210a057e177615c0683f000000000000006d4e0413ab52f5aaab812201d1aba3d70471fcd9b466569f3ef72f39d87fcccab514fcff030000629c9b73ce7bc4be7f8be71cb7b2d0a4acff8f6abe7dbad64dfa63966945d93c33b038ce0d890f85f8a6ab8487c383e24d4a8051f80e1811e387723a25dda119f64b35e71c5400000000000000000000000000000034c751ebdf3f207ea3df3d6c0002a41783078e56c70afe8016b3dd9dc7785b36e609f173cc747837d600283b3452c57a5d44cacd363589845637071320921d32c1663964eddec97cc33158bc306d8c3bdae8108a23d2dc96a5cdb518f58832ec0906aaec43659c79c8ad37b0f961f3beaa3e02f7762c5dd633d13b5e487e996597b2ab42c81eb7dd8390e13b395aacce4683e55bcfe8c17615257364365fd48bd77da79e52ce9adfe6dcb0c42c4d719347f3d16304fa000008ffffffffffffff003049ca923d059c0ab5d886a491adacb7e4b43b1b57586e5fe2aa611f6232a9b71882ce24fce75cf105fa57f000756755b7230e2c0c1fed5487271c4f2981cf8f4351ef5d08641dacaed000080000000000000000000000fa36bbac00bb77c933d3961556f3fe647b05643b0000000000000000000000967aef9c5706e13d5889e77dab80a2548ec31629b7355a2bb8b93e4b6323061f545b26accc4621b568ab0bfaf30aa4f60705532c4a09c0a4a5487c762167edf362be35b9c90ad7e372a66bbb1471aa21000000000000104061c66a7432f25687618e31dcef8c5d4a2457a93f3fc6d3d7131746c75ccf400fc1a7a51826832ef7f5fbc78827d937768443a1c1ca3aba930826fd21aa1201d9225256df8de405d1f12c17cdaff3ad675aa333aa7e919459babd3cc1000000000000000000000000000000000000000000000000000000000000000059fdc6a54a2a8b28fa7d9b92aeb58e78e3b8594a5ef6bb67e52bf43b6145f544273a8f62852706c0abef368bfc72f92fa99a7bf121019cff8001fd7d2f6c2c295a5cab383235fec4c1decbed258ee9df8963c0fc828ad2119ffefe36c78692fffb6942b9da0922b2aa8f6b66c14ee7f42d5951edcc986356b41c0de3549f851ca340d9e425e355c1decb785a1042a72c1c98a084b04b1d9be473e50a15d76b110eda3b7cc1f2501211773cf510a43888422c1328476dd6f42659c61a18618fd28d5cd342c276aa9c4cc035077fa09d672b8dcfb3ac1751628647047d07338a8619037e3449a173ddd697f541a0795a2de7ef1396d70675341ebf004be122de04b5275fe7e53d28ebdc5051cec00759d73ca97229d93b965926060b6f91d01324bd458b425ea51c5d5b69551d599188fc6040370ac9ca7ae9eea9e5ede79bd66bd3d616dd7d7dd4c3a8fd055a3585af6fe7f5046c61154598cd33c33a48ece1072afd04b1fd85eb1655d9f3f813392c9634200d892dc6810b436820a1e0f6b464855e28953eb63cd3d6fc1b7bfb588ce28a51af1658d45d759a8399da55a3ff6597bb9f47167fe55ca240623a001e5fe15d9ddefea06a3750501916163844106c4ce662f418d9fc509e5447f712048d53e7e36ee7de083c5ea1119969d858eb6785395fc5a2c551de9a086cb4583f55c47828645e3046"], &(0x7f0000000140)='GPL\x00'}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="06000000040000005b0000008a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000008000000000000000045af890c00"/28], 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r7, r8}, 0xc) mknod$loop(0x0, 0x2000, 0x0) ioctl$TCSETSW2(r3, 0x80047456, &(0x7f0000000040)={0x3, 0xb, 0xfffffffe, 0x7fffffff, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0xffffffff}) 7.944073637s ago: executing program 3 (id=878): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) fcntl$getown(r4, 0x9) bind$vsock_stream(r4, 0x0, 0x0) listen(r4, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="48000000140081fb7059ae08060c040002fff903905800000000000000006fabca3b4e7d06a6bd7c00000000030000068a562ad6e74703c48f93bc06020000004603b886a5e54f8f", 0x48}], 0x1}, 0x4000000) r6 = socket$netlink(0x10, 0x3, 0x0) read(r6, &(0x7f0000000140)=""/166, 0xa6) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r7, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r7, 0x1000) r8 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) poll(&(0x7f0000000040)=[{r8, 0x1}], 0x1, 0x101) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r6) socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newtfilter={0x148, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x3}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x11c, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x1, 0x1, 0x3, 0x1, 0x4, 0x2, 0x6, 0x7ffffffa}}, @TCA_U32_MARK={0x10, 0xa, {0xffff, 0x6}}, @TCA_U32_SEL={0xf4, 0x5, {0x1, 0xc5, 0xe, 0x4, 0x401, 0x3, 0x9, 0x5, [{0x9, 0x4, 0x200}, {0xd, 0x4, 0x3ff, 0xc}, {0x6c86, 0xfffffff7, 0x0, 0xc9}, {0x2, 0xffffff00, 0x1, 0xe5b}, {0xf5, 0xdb, 0xfffffffb, 0x1}, {0x14, 0x9, 0x3, 0x3ff}, {0x9, 0x3, 0x4, 0x9}, {0x2, 0x5, 0x9, 0xfffffff8}, {0xfffffffa, 0x6, 0x10, 0x6}, {0x2, 0xffff, 0x0, 0x1}, {0x8, 0x0, 0xf33, 0x6}, {0x888, 0x9, 0x12a, 0x6066}, {0xfffffff1, 0x8, 0x0, 0x4}, {0x8, 0x8, 0x8, 0x1}]}}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x40840}, 0x24040084) 7.590579312s ago: executing program 4 (id=879): r0 = socket$kcm(0x11, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x1}, @TCA_TBF_PARMS={0x28, 0x1, {{0x40, 0x2, 0xad63, 0x9, 0x1}, {0x0, 0x2, 0x8000, 0x5, 0xe}, 0x1, 0x100, 0x15a5}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xfff8}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) (async) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r2, 0x3e}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000840)="8b", 0x1}], 0x1}, 0x4) (async) r3 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000640)={'\x00', 0xfffc, 0x1, 0x7, 0x1, 0xa, 0xffffffffffffffff}) getresuid(&(0x7f0000000800)=0x0, &(0x7f0000000840), &(0x7f0000000880)) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000008c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xee00}}, './file0\x00'}) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x348, 0x160, 0x940c, 0x3002, 0x160, 0x2c0, 0x278, 0x3d8, 0x3d8, 0x278, 0x3d8, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xffffff00, 0xffffff00, 0xffffffff], [0xffffffff, 0xff, 0xff000000, 0xff], 'geneve0\x00', 'veth1_to_bridge\x00', {}, {}, 0x84, 0x81, 0x2, 0x19}, 0x0, 0x100, 0x160, 0x0, {}, [@common=@frag={{0x30}, {[0x6, 0xfffe], 0x3, 0x2, 0x3}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@mcast2, [0x0, 0xffffffff, 0xff, 0xff], 0x4e24, 0x4e21, 0x4e24, 0x4e21, 0x81, 0x7, 0x33dd, 0x80000000}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, [0xff000000, 0xff, 0x0, 0xff000000], [0xffffff00, 0xffffffff, 0x0, 0xff000000], 'virt_wifi0\x00', 'pim6reg\x00', {0xff}, {0xff}, 0x32, 0x4, 0x2, 0x70}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xe}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@empty, 'ip6gre0\x00', {0x12}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8) (async) r8 = socket$rds(0x15, 0x5, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) (async) r11 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r10, @ANYBLOB="00000000000000001c001a80080002800800e500080000003e120000080002001040e5"], 0x44}}, 0x0) (async) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = fcntl$dupfd(r12, 0x0, r12) setsockopt$IPT_SO_SET_REPLACE(r13, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x1e8, 0xc, 0x5002004a, 0xb, 0x310, 0xea02, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x248) r14 = syz_open_pts(0xffffffffffffffff, 0x103800) (async) r15 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r15, 0x0) (async) r16 = socket$netlink(0x10, 0x3, 0x12) (async) r17 = syz_open_procfs(0x0, &(0x7f0000000f40)='net/packet\x00') socket$packet(0x11, 0x3, 0x300) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001000)=[{{&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000340)="9c482c13aa2d072b4864409a960e856bbd0e6900d92f2e7b007d0e2ec27a70eb071019d9b335f83a9c6ae263310c1f6de76ce151773a43585054e122e2401ad6c173072ff937e2c5bd9a4373af3dc2da0668ec4e4f8488545f1eba88f628df122618704b70d851560f0d0372d0cabf3d396bfe9c3e48f585aa322e579b122bddb972c2ebbbe76f2bbcb8d333121ea96c540c0f3ed13f809b6da89814fef2130e2a88d3bf4a364490ad42540adad18db23fc91aeaa5a005fe3dae4c993b6954c1a448d2ef089e1e", 0xc7}, {&(0x7f0000000440)="40ba913ff9a96a4fa1877c54d987f0afb80a80986fa8cca5ff1ee1b11e6be3734aa896088f261b97e6222aa99e63126f73e4b750d77b43f5359813d8c199c1fe191bc775e74601770235300ffc1e4804fa746fa24ff2f5108419c565f43d846c8ec5a901112d312ccd73ba43d1f2af1c1c02b81371b5638318d670aba612171ee4710549f53bc22b76488d9f3d178a5f1d0e", 0x92}, {&(0x7f0000000500)="cbbc0ee8069d6c531afdb5cbeb4192c59811352761ff449a63db9a660ecce8571f07b1a06e6620ccc36a876ed5cef85c1fad1c19b0735d6c586ad3e949ca9f33e112075a389fbaf1738bf51faf9e49169b985209a97aee195904a223c42e8d8a794de0803858021008aac94a2c6851a012b5789e782f6f59f949aab38ebb83edca0169bb3726a0dfdce44075cdab04857fcf5fd5f7777361fab94c13185638a60c06ff9b95ed80eb85970adeaa4418fec1a66302cbcb9d270bee8c3485cc27d7f1758864bd82ae5a4df36016699d2db7ae1d6108dfd023a458571b2a79632afc8844f729e1db05", 0xe7}], 0x3, &(0x7f00000006c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r5, r6}}}], 0x78, 0x20000000}}, {{&(0x7f0000000980)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000d80)=[{&(0x7f0000000a00)="edb2bd57a51b230e35f1cd96e6cf553da8b1be13fef322f1d278766afc20ee875b323505d0c3057521d589cc19ae503105a71f9a06e7bbac89f699bb4c6611550219cd036dafc08e43be1cd5c3fe0d12283d16d8f28d391af7d5f9de26c59f89284bd36e71ca7424686e2d87fa9b5cd02085a540870a6f14f072a50987eef044d4be2c9654dee0738fc4cd5be85dfd45cbc800dcfa6cea86838bbf4ccc1304b853288b0b72edb185fe2170cedd36fefdd15f680e3481052ffc88d925be23ddd3f0407d761af2299fe30247a682ee236ef7bee66ed38f6729a45095b5fec6f6be2ded84448bb085ae01", 0xe9}, {&(0x7f0000000b00)="c1789c993abc69a3a52d2e3b74c780e441ec918731d53368f0a95aa35bde346afcb741edaee61816e0b4a4b198fcf40f988a89a887cb8cbf6820f9bb9265f087aa58946cb71907d60db55ed8d11333278e328fc95ff96e6cda0d4d87c2f57f0be60e57d4fbf0c780fc941ae76f93e4ff02d7f24050d6bcb069ca4d6d797cca5d48b762a6fba96d0b47f8ede78eae8672e6cf129540411df95365043c566f19883fdb0e68c534a6c2188eb9a70d3d1ef2b85c195e19d1c07572aedb0bce82f74827", 0xc1}, {&(0x7f0000000c00)="ea39b855d6fed295313c1e5ef90cd2b617b9fb3a8971b9effa9a22a82813fcfdec5e36d7189c3d39c268d1ab3eb6cca40ce6ed5763ac26270f184ad4af90a3bbc70196718fdf2d991d01acf4361a", 0x4e}, {&(0x7f0000000c80)="54db9ac5e596c57a22374b8f057749386b701e879587ed64aaf5c4cb8926f4fac810d0b5922953", 0x27}, {&(0x7f0000000cc0)="88e197fc2b3f9b251648b827047ff59132fe861aa08fb773d3deb4840e4f739d8cf78827a350d44c2fc92b7623", 0x2d}, {&(0x7f0000000d00)="473765f84486b8476c9b20a34fd83c2acbce58159bf20feabaa38bbc20e5f0e7c67e363ebdd830af3ecf4c6e0fbd187b9f203600173d60dc23e10f128e32ef2a66ef5031118192381371d91dfd662912e1f1c56f429b30aab203abc9d3e1c8611e0ec6758e9abea72a", 0x69}], 0x6, 0x0, 0x0, 0x200088c0}}, {{&(0x7f0000000e00)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000ec0), 0x0, &(0x7f0000000740)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r7, r8, r13, r14, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r16, r17, r15]}}, @cred={{0x1c, 0x1, 0x2, {r4, r5}}}], 0x68, 0x40}}], 0x3, 0x200448a0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x50, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000c, 0x50, 0xffffffffffffffff, 0x10000000) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 7.464176523s ago: executing program 4 (id=880): r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x2}, 0x1c) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x6e21, 0x8, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='net/udplite6\x00') read$FUSE(r3, &(0x7f00000028c0)={0x2020}, 0x2020) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000005c0)=ANY=[@ANYBLOB="03000000000000000a004e230000000cff010000000000000000000000000001f8ffffff000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003"], 0x210) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000180)={0x3, {{0xa, 0x4e20, 0xbe, @mcast1, 0xbfd}}, {{0xa, 0x4624, 0x9, @empty, 0xfffffe01}}}, 0x108) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) syz_mount_image$fuse(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x4001, &(0x7f0000000440)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x1, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') io_setup(0xff, &(0x7f0000000b00)=0x0) io_submit(r6, 0x1, &(0x7f0000000100)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x8, r5, 0x0, 0x0, 0x0, 0x0, 0x4, r5}]) umount2(&(0x7f0000000080)='./file0\x00', 0x3) 7.167382403s ago: executing program 4 (id=882): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8005, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, @NFT_OBJECT_COUNTER=@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0xf5c32ca638527258, 0x0, 0x0, {}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}}, @NFT_MSG_DELCHAIN={0x38, 0x5, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_CHAIN_HOOK={0x24, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x23d77a8a}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x380779ab}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x459bbc66}, @NFTA_HOOK_HOOKNUM={0x8}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x6}}}, 0xa0}}, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000200)={0x0, 0x20000800, 0x2000, 0x0, 0x3, 0x1, 0x1, 0x1}, 0x10) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4, 0x0, 0x0}) ioctl$IOMMU_DESTROY$stdev(0xffffffffffffffff, 0x3b80, &(0x7f0000000400)={0x8, r5}) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x4ae60) r6 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r6, 0xc0405610, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000480)=0x2) r8 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') getdents64(r8, 0xffffffffffffffff, 0x43) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r8, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r9, {r2}}, './file0\x00'}) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const={0xc, 0x0, 0x0, 0xa, 0x1}]}}, 0x0, 0x26, 0x0, 0x1, 0x3, 0x10000}, 0x28) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000001e000103020000200000000001000000080003"], 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x4004000) 6.866937286s ago: executing program 1 (id=883): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc000000000000000000000000000000000000000000000a0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) 6.829999507s ago: executing program 3 (id=884): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b0f, &(0x7f0000000040)={'wlan1\x00', @random="0100"}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4001000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018000100feffffff0001000000000000000000000000ffffe0000002fc0100000000000000000000000000010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff00000000800000000035000002"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYRES32, @ANYBLOB], 0xb4}, 0x1, 0x0, 0x0, 0x4000}, 0x40044890) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x8907, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, 0x0) 6.549297999s ago: executing program 1 (id=885): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r0 = syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x28f}, &(0x7f00000003c0)=0x0, &(0x7f00000000c0)=0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(0xffffffffffffffff, 0x541b, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) syz_open_dev$tty1(0xc, 0x4, 0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000140)={0xf0f003}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4000900) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x6f, 0x0, 0x9, 0x0, 0xe999, 0xfa11, 0xffffffff}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010063616e"], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r8 = syz_open_dev$vim2m(&(0x7f0000000140), 0x8000008, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f0000000080)={0x8, 0x1, 0x3, "e89d4cb0da4450e2dd4fba3aa369c07d081231d950f1542d6899356b67e57975", 0x3031334d}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) semget(0x1, 0x4, 0x39c) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185500, 0x12345}) io_uring_enter(r0, 0x7277, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 6.328127418s ago: executing program 0 (id=887): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b0f, &(0x7f0000000040)={'wlan1\x00', @random="0100"}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4001000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000030000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700005350000020001002000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f000200000066d81a94206812e6b472788c7edef2b5a69a2d46417ee0e05de127d5"], 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = openat2(r3, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x4000, 0x100, 0x4}, 0x18) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x1, 0x1000, 0x1, 0x7ff, 0xf84, 0x3}, 0x1c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000280)=0x8000000) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r7 = socket(0x1e, 0x1, 0x0) connect$tipc(r7, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x3, 0x1}}, 0x10) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@gettfilter={0x3c, 0x2e, 0x20, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xc, 0x5}, {0x3}, {0xa, 0xc}}, [{0x8}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40c0090}, 0x20000000) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018000100feffffff0001000000000000000000000000ffffe0000002fc0100000000000000000000000000010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff00000000800000000035000002"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYRES32, @ANYBLOB], 0xb4}, 0x1, 0x0, 0x0, 0x4000}, 0x40044890) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x8907, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) socket$alg(0x26, 0x5, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r10 = dup(r9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r10, 0x2000) 5.43159593s ago: executing program 2 (id=889): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x28}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000480000000000070000000900010073797a300000000040020000090a010400000000000000000700000008000a40000000020900020073797a30000000000900010073797a3000000000080005400000000c0c0009800800014000000910080003400000011008000c40000000e758000d40cb1bb2a268f2a8d772f533aea2b34553e9f72db9c5511f08bcecdcaa2e8e6002ac0b393efc0b6a935573c2904eeb4ba4fe120b91be17f83871c579c18e340af9c1e78107697d4b07549fa1e2dd39556687194d610800084000000001"], 0x288}}, 0x20050800) r4 = getpgid(0x0) sched_setattr(r4, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r6, 0x4020aed2, &(0x7f00000000c0)={0xffff1000, 0x301000, 0x8}) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r6, 0x4020aed2, &(0x7f00000097c0)={0xffff1000, 0x11b000, 0x8}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="274211074376353d63115f00000000000d00000000000000950000000000000080565abb96e4178f759d14f7d0b648b23bc11db130e82b8d4d2ff17652fddf577f3cfb0720987f"], &(0x7f0000003ff6)='GPL\x00', 0x9, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x24}, 0x23) sendmsg$nl_route(r0, 0x0, 0x40000c0) r7 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r7, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) r8 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000026c0), 0x1, 0x0) writev(r8, &(0x7f0000000100)=[{&(0x7f0000000080)="023e1da8e8d15d70f7b9a30310c77c07fce305305e5a59148612011e87f3d2f88273f1dfcdded1e783076d0d2f", 0x2d}], 0x1) 4.967094376s ago: executing program 4 (id=890): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000007b80)=ANY=[@ANYBLOB="12010000000000106a058400000000000001090224000100000000090400000103000000092100000001220b0009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x2e238, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xa9}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket(0x1d, 0x2, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x1000006, 0xfffefffe}, &(0x7f0000000100)=0x0, &(0x7f0000000400)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r5 = syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x7, 0x1, 0x1, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x10, 0x90, 0xfe, "", [{{0x9, 0x4, 0x0, 0x10, 0x1, 0x0, 0x0, 0x0, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x5, 0xda, 0x8f}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x40, 0xd1, 0x1}}]}}}]}}]}}, &(0x7f00000008c0)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x201, 0x78, 0x0, 0x2, 0x8, 0xff}, 0x1fd, &(0x7f0000000540)={0x5, 0xf, 0x1fd, 0x5, [@generic={0x58, 0x10, 0xa, "5537f67099a861b2f72f254463b78dabeb7cfeb7f7e5001b0d1099b3b05322297dcb124c2af1bac3b6de71c2d21ad9915a72760422ae471b62ea6a6a81a089084880cfb9d0ddf44d64a84ed521b8c569d104f66037"}, @generic={0xdd, 0x10, 0x4, "417027e8136232dd019feaab5f1411bb13cd7190d684c177fdb71dacc7e712435cb4ad745efd958ca4c66925555af926a7f119b88202e9daa4ce01e1cf5a8817f1ebdac28a4fd471650a1fb9ddf9942fe09cfb9159479734474d132d4b7dcf0c068a71114435dce5f2630ce15be17ed6c18a9a158c97f901e52738b512f5e4838b6810ec638fdc15983a7c858a93c01d4305d2e53daa9fc4c0abfe92f28503b94bbba835c9691c01bf90b03ac9130403ae6df0e0b2fb3f6d4475594e491cbe788ab7787caf6ca60bc330a4da4c3a81eab03fcc4f40eb3af52d16"}, @generic={0xa8, 0x10, 0x4, "eaf3fa07c67ce9120546473738ce8692c2285f0f19e5dda9516be79e2804f4d3bcfee351e1674c1dbff973a48c8bdfe22a1fd020e13ccfdd84f6b6a9b43ea4779b5e2683a7491a3c4567a062899061d7eaa939edac950e80f4659ef984aa1514b96555c95134042b6e202876b6d61231ed3ebda9ff2a1f2f0f7e7f822327c4e0b748e166274e391b64d154b7824506b09ade054e5759537cffa6b23b5f17433089b81daf88"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0xf, 0x3, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "1305fe9d3fb4fc6473b4d9080e618e81"}]}, 0x4, [{0x4b, &(0x7f0000000440)=@string={0x4b, 0x3, "cdc0fbd1af58243639854e5cdf810e18c7e4ed801462d232cbf8a60a7e01552d679ae7ad1569a77018e060df67d3cff9c6cd1051a2b1854e8e614f11d5cb3749016a56a4c812656db4"}}, {0x96, &(0x7f0000000740)=@string={0x96, 0x3, "a9c14790a181912b02e0919fbf38fc9a48c768672ad0932754dfad085ff6311d4bd2f792946268787bcf1736d20ed42ba55590359e2fd10ae32a196a206b78f2bd8a895ce49db3741b3c6f7fe5bd5cb60021f09a59c9e0eddff746391a00a0f08601ca09da6e93903e37f436718ecca2dd240656c82bb866fadffab424f9db9bdbfc20bda15500ac6107085ce80cbb07892c7750"}}, {0xe, &(0x7f0000000300)=@string={0xe, 0x3, "7f4f2bcf100a28144a68fbf7"}}, {0xa7, &(0x7f0000000800)=@string={0xa7, 0x3, "89ac686ecb8f9aab3945eb53e247e142c0e0927f73d3b703d80e6151ae1cdc4f851aafd04f12e656e16735517cf6e26597ed3b43b85c35e7939990a9ec247b6d33acad42fe1e0a7e2b937af758bf95555bfc41f6c32bb82ed78ac7fa3b336aa9ccc0d25d9499f55d3ded36a0deea9d50a48c970a1c6ea4a3a50cf70c42760a1412051f7a58a0e26b1278e848691a210236d21a0129cc159aa88f68957ce66709d96abcdc92"}}]}) syz_usb_control_io$printer(r5, &(0x7f0000000b40)={0x14, &(0x7f0000000940)={0x20, 0x24, 0xd6, {0xd6, 0x21, "3d1e4c3eaf94cc6d6d78beda7158ea20812c56df4e00901847cee2ae9094971273ebf7614bbd688e42f65bb7e55d5de68830ea7c1522404e8556771bc2c23ed50c3b8e57e5710ea464bf9181180dcdb4283e69970b76d3aaf3c34d8d20b6acf5c1fa72614f2537fe6488c6902d5d79220e5c2c8b60f861583c66c94a38896cc26eff306b94a5dc5e40a58c3bbb1bf73439d76c34db80f37e4739a7e5e2951123081c6b48765bcc746f5d695ed078e91ed42b1c5888f50de3c2ce02fa58acf179766c55b41b8e5ffeff23d65790b027eca5f8d373"}}, &(0x7f0000000a40)={0x0, 0x3, 0xed, @string={0xed, 0x3, "bc821d00da3707b53a0c3fb558bbbcd28884607b513aa2e0d2f190d3ec21af796f461ea3d6b15024531f2bd55c5af83ebc0bafce647a63570586b4687f27f3c24d26c73a6789086c5323e973b069099316e618809e69c3b8c97c2dff7b8f73726c10c6d750d650a413ba4660b2d6b569c2c6f6017f1ef5d62d2b28b0af51fc835c06cb9b19aebe3b290873727a0a63e82ab884feaf834fd3e600c8297add9df843837ab5263914fd0a7de92db5f90eba436f25334444744c9b768051c154c6de8fd05b4cc5440b7fa2d3648804509007f4a116b1712fbd5d4e08bf2bbe3d0f3450efe8d1a42fecf7e28c6e"}}}, &(0x7f0000000d40)={0x34, &(0x7f0000000b80)={0x0, 0xf, 0xe, "dea2a7311270c596ed5e1a0fece6"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000c40)={0x20, 0x0, 0x58, {0x56, "b63349b5049875ee1018cfca7b23a60a697a6a9aeccc0756cb7b3a42a4b33dcb0f8d1289c00ac0faaa9cca5315cb3d091d0964fc93f6de8a3b05c76ca11fda49f51be53c6b538ed26b3f6631e7424cb3046c473211aa"}}, &(0x7f0000000cc0)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000d00)={0x20, 0x0, 0x1}}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x2d3e, 0xec84, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @sack_perm, @window={0x3, 0x9, 0x2}, @mss={0x2, 0x400}, @mss={0x2, 0xcb2}, @mss={0x2, 0x3}, @timestamp, @sack_perm], 0x2091) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0xa, "c84c9d46"}, @local=@item_4={0x3, 0x2, 0xa, "1c51aa7b"}, @local=@item_4={0x3, 0x2, 0xa}]}}, 0x0}, 0x0) 4.809405815s ago: executing program 3 (id=891): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x32) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="9f461ad02ef7", 0x6}], 0x1) 4.268355361s ago: executing program 3 (id=892): syz_open_dev$sg(0x0, 0x0, 0x8002) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e20}, 0x6e) (async) connect$unix(r0, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x50000208}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x17, 0x6, @l2={'ib', 0x3a, 'geneve1\x00'}}}}, ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x20008001}, 0x804) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x50000208}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x17, 0x6, @l2={'ib', 0x3a, 'geneve1\x00'}}}}, ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x20008001}, 0x804) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x1000003, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x1000003, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='maps\x00') (async) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='maps\x00') read$FUSE(r3, &(0x7f0000005200)={0x2020}, 0x2020) (async) read$FUSE(r3, &(0x7f0000005200)={0x2020}, 0x2020) statx(r3, &(0x7f0000000340)='./file0\x00', 0x100, 0x4, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r2, {0xffffffffffffffff, r4}}, './file0\x00'}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) (async) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) read(r2, &(0x7f0000000840)=""/40, 0x28) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000180)={0x381, @time={0x5}, 0x40, {0xc0, 0xff}, 0x46, 0x1, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4dc1}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @sit={{0x8}, {0x34, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e24}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x8c}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0xfffc}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e20}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_emit_ethernet(0xc2, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004b7d00b40064000000119078ac1414bbac1e000194040100830f34e0000002ac14000001e00000017f00000100000000ffffffff94040000441caca17f00000100000005e00000010bd4db50ac1e000100000000880dff07cda9d17e259eb054f0004e224e200048907803000000000000001f25a51472b4496de762f93a00ac5cf6fd160802be5fef56d506f1d6ce0ab67f93909c066fdfdfa5520e4c86cea9942a395830edad0ca26d"], 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) r7 = fanotify_init(0x200, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) fanotify_mark(r7, 0x101, 0x8000011, r8, 0x0) r9 = fanotify_init(0x200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) writev(r9, &(0x7f00000005c0)=[{&(0x7f00000001c0)="84", 0x8}, {0x0}], 0x2) (async) writev(r9, &(0x7f00000005c0)=[{&(0x7f00000001c0)="84", 0x8}, {0x0}], 0x2) 3.771552175s ago: executing program 0 (id=893): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) (async) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="0500ffff"], &(0x7f0000000040)='GPL\x00', 0xd, 0xff3, &(0x7f0000001840)=""/4083, 0x0, 0x20}, 0x94) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r2, 0x0) (async, rerun: 64) r3 = syz_open_dev$video4linux(&(0x7f0000003e80), 0x7, 0x8000) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000003f40)={0x9e0000, 0x400, 0xb, 0xffffffffffffffff, 0x0, &(0x7f0000003f00)={0x9909df, 0x5, '\x00', @p_u32=0x0}}) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r5, 0x4) (async, rerun: 64) setsockopt$inet_tcp_int(r5, 0x6, 0x4, &(0x7f0000000040)=0xf132, 0x4) (async, rerun: 64) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={0x14, r1, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4400c051}, 0xc0) (async, rerun: 64) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x80000, 0x0) (rerun: 64) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x2, 0x4, 0x5, '\x00', 0x1}) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f0000000500)={"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"}) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000003e0007010300000000000000017c0000040042800c00018006400602843b1200100002"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 3.769022474s ago: executing program 2 (id=894): openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0xc8601, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x0) r0 = syz_io_uring_setup(0xbdd, &(0x7f0000000640)={0x0, 0x6f34, 0x400, 0x200001, 0x3a1}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1, 0x0, 0x6, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x3c}, 0x2, @in6=@loopback, 0x6, 0x1, 0x3}]}]}, 0xfc}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) inotify_init1(0x80000) setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x34, r7, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x34}}, 0x18) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x25}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) r10 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r10, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x1, @dev}, 0x1c, 0x0}, 0xfdff) ioctl$BINDER_GET_EXTENDED_ERROR(r4, 0xc00c6211, &(0x7f0000000140)) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r13, 0x4008ae89, &(0x7f0000000400)={0x1, 0x0, [{0x40000093, 0x0, 0x84}]}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000000) io_uring_enter(r0, 0x847ba, 0x79c, 0x2e, 0x0, 0x0) 3.65505467s ago: executing program 0 (id=895): socket(0x22, 0x5, 0x4) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000b80)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)='v', 0xf4240}], 0x1}], 0x1, 0x8004) accept4(r1, 0x0, 0x0, 0x0) accept4(r1, 0x0, 0x0, 0x800) r2 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0xc5501, 0x104) write$FUSE_NOTIFY_RETRIEVE(r2, 0x0, 0x0) epoll_pwait(r2, &(0x7f0000000000)=[{}, {}, {}, {}], 0x4, 0x8001, &(0x7f0000000040)={[0x55d]}, 0x8) 3.24242052s ago: executing program 1 (id=896): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000200)=@int=0x7, 0x4) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000050000000060a01e092000000000000000500000008000b400000000028000480240001800b000100736f636b6574000014000280080002400000001608000140000000030900010073797a3000000000140000001100010000000000000000000000000a"], 0xc4}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7ffd, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$vim2m(&(0x7f00000003c0), 0xb, 0x2) r4 = geteuid() quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f0000000100)=@nullb, r4, &(0x7f0000000180)) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x1], 0x48) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-\x00Y'], 0xfe33) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) r8 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) bind$can_raw(r8, &(0x7f0000000000)={0x1d, r9}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r7, {0xb, 0x6}, {0xffff, 0xfff9}, {0x1}}}, 0x24}}, 0x0) 2.900177378s ago: executing program 2 (id=897): r0 = socket(0x10, 0x800, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000006a570100aabb000940c93ea0e30100200000000000721200e7648d3792ae067b8e99c60409a2647e61211105"], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x3f0, 0x208, 0x0, 0xffffffff, 0x2b0, 0x208, 0x358, 0x358, 0xffffffff, 0x358, 0x358, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xff, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x130, 0x168, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'fsm\x00', "4801d3e4c6b2bfd892aa7400051624fa8699db13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0xae, {0xf, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x4}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x9, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @icmp_id=0x67, @port=0x4e22}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x29}, @icmp_id=0x67, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) write$tun(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd49032800030020000000600000000104730081e949b93897bc3b0000070000007d01ff020000000000000000000000000001"], 0xfdef) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, 0x0, 0x800c000) open(&(0x7f0000000000)='./file0\x00', 0x14a600, 0x78e22799f4a46f8f) socket$nl_route(0x10, 0x3, 0x0) r9 = fcntl$getown(r5, 0x9) sched_getattr(r9, &(0x7f0000000040)={0x38}, 0x38, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000180)={0xff, 0x0, 0x8, 0x5, 0xfd, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x2, 0x0, 0x93}, 0xe) sendto$inet6(r5, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r5, 0x1) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="145a37b1d85b0100000000000000020002000000"], 0x14}}, 0x0) 2.852278559s ago: executing program 3 (id=898): futex(&(0x7f000000cffc), 0x4, 0x0, 0x0, &(0x7f0000048000)=0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x103000, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000180)={0xc, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r2, 0x3b84, &(0x7f0000000280)={0x20, r3, 0x3, 0x0, &(0x7f0000000200)=[{}, {}, {}]}) sendto$packet(r0, &(0x7f00000000c0)="91685102d300000013000010888e", 0xe, 0x0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r5, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002840)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r7, @ANYBLOB="0a0006000802110000010000060066008e8800001c0033"], 0x4c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) syz_usb_control_io(r9, &(0x7f00000001c0)={0x18, &(0x7f0000000340)=ANY=[@ANYBLOB="4015050000000500b1"], 0x0, 0x0, 0x0, 0x0}, 0x0) r10 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) write$hidraw(r10, &(0x7f0000000f00)="5bfd", 0x2) sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000100)={0x1c, r6, 0x303, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40802}, 0x0) futex(&(0x7f000000cffc), 0xb, 0x0, &(0x7f0000000040), &(0x7f0000048000)=0x1, 0x0) 2.665565662s ago: executing program 0 (id=899): socket(0x2d, 0x2, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0xa0042, 0x11) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000400)={0x8000, 0x4, 0x3, 0xffff}, 0x8) sendto$inet6(r3, &(0x7f0000000080)='w', 0x1, 0x94, &(0x7f0000000000)={0xa, 0x4, 0x3, @private1, 0x8}, 0x1c) setsockopt$inet6_int(r3, 0x84, 0x12, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private=0xa010100, 0x0, 0x0, 0x4e21, 0x0, 0x2}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9c0, 0x3}, {0xffffbffffffffffc, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@mcast2, 0x4d3, 0x3c}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x4000000, 0x1}}, 0xe8) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100), r0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r4, 0x7b19458e2a0d6889, 0x70bd26, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x20008800) 2.59414955s ago: executing program 4 (id=900): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r2, 0x3554000) timer_create(0x0, 0x0, &(0x7f0000000300)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) fadvise64(r1, 0x3, 0x4000000005, 0x4) r3 = syz_clone(0x4800, &(0x7f0000000080)="6a0805a56419efc15d3a2faebcae76bfde343b69cdb037521c3fdd5cc4134f871f0dbf9d092f17dd3b499e19e7f3b34331ecf628b7a6d2d3cdf850d054d7da9d236b76d9b0cf15e2ac6c6814b792d40578a0f1f4abf7f93fff2429325450711e78b34f0bcd4e3fee11d634fcf88406aa0efac979cc7e7126c5779d42fb8d", 0x7e, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="c86516f2aea950b5b5671490a30362e9eb09db061dd0310da8de4c22efb1fc954df4b2cd5847c54f6480d0fa5e8a4edeabdcfc7f5261459321bf0adf6ea3e0ae5d85f1831b924b186e792f6f55c03033ce9da4af54813feacbd4f9a5258929ea46f965f80d624f3284eeb4e7b890711c9d48a4435a7b6f7256e0ccc2cda01cfdccc6ed20e1efb20edbecfde9699db70a4fa091d9") ptrace(0x10, r3) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY(r4, 0x3b83, &(0x7f00000000c0)={0x28, 0x4, r5, r5, 0x0, 0x1, 0x3}) ptrace$setregs(0x19, r0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002b715f08e11d02c1894d0000000109021200010000006c0904"], 0x0) 2.226060939s ago: executing program 1 (id=901): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, 0x2, 0x3, 0x201, 0x0, 0x0, {0x4, 0x0, 0x9}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x29}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x20}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x10) 2.123638983s ago: executing program 1 (id=902): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="9f461ad02ef7", 0x6}], 0x1) 1.844281568s ago: executing program 1 (id=903): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b0f, &(0x7f0000000040)={'wlan1\x00', @random="0100"}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4001000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018000100feffffff0001000000000000000000000000ffffe0000002fc0100000000000000000000000000010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff00000000800000000035000002"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r5 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc295, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0xfe, 0x56, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0xf, 0xfc}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYRES32, @ANYBLOB], 0xb4}, 0x1, 0x0, 0x0, 0x4000}, 0x40044890) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x8907, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x29) ioctl$KVM_CAP_EXIT_HYPERCALL(r6, 0x4068aea3, &(0x7f0000000180)) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r9 = dup(r8) setsockopt$packet_fanout_data(r9, 0x107, 0x16, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x5, 0x5, 0x1, 0x4}, {0xf2, 0xf5, 0xa, 0x6}, {0xc0c, 0x6, 0x3, 0x7fffffff}]}, 0x10) mmap(&(0x7f000080a000/0x1000)=nil, 0x1000, 0x0, 0x4000010, r9, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r7, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 1.614685101s ago: executing program 4 (id=904): r0 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r1, 0x8b27, &(0x7f0000000040)) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="000d02"], 0x0, 0x0, 0x0, 0x0}) 1.544465377s ago: executing program 2 (id=905): r0 = socket$kcm(0x2, 0xa, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendto$inet6(r1, &(0x7f00000002c0)="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", 0xfd, 0x41, &(0x7f00000000c0)={0xa, 0x4e23, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x800}, 0x1c) accept4(r0, 0x0, &(0x7f0000000000), 0x800) socket(0x2c, 0x3, 0x1000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r4 = syz_io_uring_setup(0x3af2, &(0x7f00000000c0)={0x0, 0xa5f5, 0x80, 0x2, 0x131}, &(0x7f0000000140), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_MEM_REGION(r4, 0x22, 0x0, 0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r5, 0x0, 0x4000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="4001000010000100feffffbf000100000000000000000000000000000000000000000000000000000000ffffac1414bb000103944e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r8, 0x0) socket$tipc(0x1e, 0x5, 0x0) r9 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r9) getsockname$packet(r9, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r10, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r10, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x4048001) 1.487500152s ago: executing program 0 (id=906): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r0 = syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x28f}, &(0x7f00000003c0)=0x0, &(0x7f00000000c0)=0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(0xffffffffffffffff, 0x541b, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) syz_open_dev$tty1(0xc, 0x4, 0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000140)={0xf0f003}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4000900) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x6f, 0x0, 0x9, 0x0, 0xe999, 0xfa11, 0xffffffff}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010063616e"], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r8 = syz_open_dev$vim2m(&(0x7f0000000140), 0x8000008, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f0000000080)={0x8, 0x1, 0x3, "e89d4cb0da4450e2dd4fba3aa369c07d081231d950f1542d6899356b67e57975", 0x3031334d}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) semget(0x1, 0x4, 0x39c) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185500, 0x12345}) io_uring_enter(r0, 0x7277, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 554.497894ms ago: executing program 2 (id=907): sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf250700000008000300", @ANYRES32, @ANYBLOB="0cfe9800ff07000070000000"], 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000500)={0x2, 0x0, @ioapic={0x10000, 0x1, 0x401, 0x7fffffff, 0x0, [{0x3, 0x10, 0xff, '\x00', 0x38}, {0x4, 0xfe, 0x7c, '\x00', 0x31}, {0x5, 0xb3, 0x1, '\x00', 0xd}, {0x5, 0x9, 0x10, '\x00', 0x6}, {0x5, 0x7f, 0x6, '\x00', 0x79}, {0x3, 0x80, 0x0, '\x00', 0x6}, {0x6, 0x8, 0x1, '\x00', 0x45}, {0x52, 0x9, 0x3, '\x00', 0x9}, {0x40, 0x2, 0x73, '\x00', 0xff}, {0x1, 0x0, 0x89, '\x00', 0x80}, {0x6, 0x8, 0xa0, '\x00', 0x1}, {0x1, 0x1, 0x7, '\x00', 0x4}, {0x8, 0xc, 0x5, '\x00', 0x8}, {0xd, 0xf, 0x8c, '\x00', 0x4}, {0x0, 0xc0, 0x7, '\x00', 0x3}, {0x8, 0x2, 0xf6, '\x00', 0x2}, {0x7, 0x6, 0x8, '\x00', 0x5}, {0x8, 0x40, 0xfa, '\x00', 0x5}, {0x1, 0x4, 0x6, '\x00', 0x6}, {0xf8, 0x8, 0xa, '\x00', 0xf8}, {0x8, 0x1, 0xcf, '\x00', 0xf7}, {0x6, 0x6, 0xfe, '\x00', 0xa}, {0xff, 0x0, 0x3, '\x00', 0x7}, {0x16, 0x89, 0x4, '\x00', 0xff}]}}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) add_key(0x0, 0x0, &(0x7f0000000040)="1d", 0x1, 0xfffffffffffffffe) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2a, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffff3b) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000180)=0x40) ioctl$DRM_IOCTL_MODE_ADDFB(r2, 0xc01c64ae, &(0x7f0000000200)={0x0, 0x80000, 0x0, 0x0, 0x20, 0x19, 0xffffffff}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(r4, 0xae80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="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"/1810], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x35}, 0x48) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000240)=r7, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000280)="3823f3a448e2f9fb057a4e99f9eecc76134f88bd83f57cedfe2cf1f8424163f983be3c051dc73bc761b875a40aba8ac8f31a4def11a8d7cdcb858d9b9b923e4078a1c79e3c2aa5abc59d76e16c866a03cca2d7b28b7f1265816c651b12c019ae0af7292bd6309274c0f87cc28350cbea9ef26a5afb9164b61a0a136d47780937afe2", 0x0}, 0x20) write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[], 0x9) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x40000070, 0x0, 0x400006}]}) 322.41439ms ago: executing program 2 (id=908): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f00000000c0)=[@nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @control_area=0xa3, 0xfffffffffffffff7, 0x40, 0xfffffffffffffffb}}, @nested_load_code={0x12e, 0x5b, {0x2, "b9800000c00f3235008000000f30420f01f836410f23b4410f01c9431026c4a17e121dfe870000460f013bc4c33d426e071d66ba2000b87d1d8e71ef2e2666410f6f12"}}], 0x93}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_usb_connect(0x2, 0x48, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0xc4, 0xd, 0x8d, 0x8, 0x5ac, 0x22b, 0x8e39, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x3, 0x9, 0x30, 0x2, "", [{{0x9, 0x4, 0x9b, 0xf, 0x4, 0x3, 0xc, 0x2, 0x6, [], [{{0x9, 0x5, 0x4, 0x10, 0x200, 0x8, 0x3, 0x2}}, {{0x9, 0x5, 0x87, 0x3, 0x400, 0x3, 0x6, 0xe}}, {{0x9, 0x5, 0x1, 0x3, 0x8, 0x7, 0x1, 0x2}}, {{0x9, 0x5, 0xe, 0x10, 0x8, 0x63, 0xd2}}]}}]}}]}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000000c0)={0x3}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f00000007c0)=[@wr_crn={0x46, 0x20, {0x4, 0x6}}, @wr_drn={0x6e, 0x20, {0x0, 0x5}}, @rdmsr={0x32, 0x18, {0x181}}, @code={0xa, 0x53, {"67735a2e0f019ee0000000650f01cfab66ba420066b89b1566ef4d0fc79ee388ef1966450f38803266baf80cb8947a2c89ef66bafc0ced40e80018000043d07c7800"}}, @out_dx={0xaa, 0x28, {0x5b77, 0x5, 0x8}}, @cpuid={0x14, 0x18, {0x10001, 0x9}}, @rdmsr={0x32, 0x18, {0xb7d}}, @rdmsr={0x32, 0x18, {0x2f0}}, @out_dx={0xaa, 0x28, {0xe6cb, 0x3, 0x80000000004}}, @code={0xa, 0x46, {"26640f35360f060f2084b9f70b00000f32420fc75d00c461fc298f0a630000c462c3f521c40299ac66410f01c9b8010000000f01d9"}}, @rdmsr={0x32, 0x18, {0x966}}, @rdmsr={0x32, 0x18, {0x4000009e}}, @nested_create_vm={0x12d, 0x18, 0x1}, @in_dx={0x82, 0x20, {0xbde0, 0x7}}], 0x1f1}) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f00000002c0)={0xbe, 0x0, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 1) 0s ago: executing program 3 (id=909): r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x5, 0x200080) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000080)={{{@in6=@mcast1, @in=@local, 0x4e24, 0x7fff, 0x4e20, 0x0, 0xa, 0x0, 0x80, 0xc, r1, 0xee00}, {0xd8, 0x10001, 0xb, 0x8000, 0x4, 0x7, 0xa50, 0xb5}, {0x4, 0x8000000000000000, 0x2c06, 0x9}, 0xfffffffd, 0x6e6bc0}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d3, 0x2b}, 0x2, @in6=@mcast2, 0x34ff, 0x3, 0x0, 0x4, 0x6, 0x3ff, 0x8}}, 0xe8) (async) ioctl$XFS_IOC_GET_RESBLKS(r0, 0x80105873, &(0x7f0000000180)) (async) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x177) ioctl$KVM_SET_TSC_KHZ_cpu(r0, 0xaea2, 0x2) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000001c0)=r0, 0x4) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x82000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@gettaction={0x60, 0x32, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x3c, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x14, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x24010086) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f00000005c0), 0x101000, 0x0) ioctl$DVB_DEMUX_DMX_EXPBUF(r0, 0xc00c6f3e, &(0x7f0000000600)={0x4, 0x80000, 0xffffffffffffffff}) (async) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r5 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) (async) r6 = socket$rds(0x15, 0x5, 0x0) sendmmsg$unix(r0, &(0x7f0000000840)=[{{&(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000580)=[{&(0x7f00000003c0)="a0b4a23869b33c5b5fab3bdb90e799a788e13923b8b16f98adbd010c9d1483e50ce5332ab265b84c31c3f5467efc827f69d297777b2263a0f6b976fd6a96d06e4a02e025115692a83ed6bb28fec24054d36b453783bf3235364d5408b3bc7a7433230ff607e3602a7fc7bb56267c0b5f10746634bdf94055d90cd54c58c03a277a78bc5b3853ed99178a077cba4a6b3485cde67d84ce6eaf1576ad4bc7d55833ebbcbe78ee3b", 0xa6}, {&(0x7f0000000480)="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", 0xfd}], 0x2, &(0x7f0000000640)=[@rights={{0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r2]}}, @rights={{0x1c, 0x1, 0x1, [r0, r3, r4]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r0, r0, r0]}}], 0x68, 0x4000402}}, {{&(0x7f00000006c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740), 0x0, &(0x7f00000007c0)=[@rights={{0x2c, 0x1, 0x1, [r0, r0, r0, r0, r5, r0, r0]}}, @rights={{0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r6]}}], 0x58, 0x40800}}], 0x2, 0x4c000) (async) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) r8 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r7, 0x4c80, r8) (async) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/consoles\x00', 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x4c, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2f}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x8011) r10 = dup3(r2, r0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000b80)={&(0x7f0000000a80)=[0x0], &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b40)=[0x0, 0x0, 0x0], 0x1, 0x5, 0x6, 0x3}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000cc0)={&(0x7f0000000bc0)=[0x0, 0x0, 0x0], &(0x7f0000000c00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000c80)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x7, 0x5, 0x5}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000e00)={&(0x7f0000000d00)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000d40)=[0x0, 0x0, 0x0], &(0x7f0000000d80)=[0x0, 0x0], &(0x7f0000000dc0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x2, 0x5}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, &(0x7f0000000f40)={&(0x7f0000000e40)=[0x0], &(0x7f0000000e80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000ec0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000f00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x7, 0x4, 0x6}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001080)={&(0x7f0000000f80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000fc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001000)=[0x0], &(0x7f0000001040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x9, 0x1, 0x8}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000011c0)={&(0x7f00000010c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001140)=[0x0], &(0x7f0000001180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x5, 0x1, 0x8}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000001300)={&(0x7f0000001200)=[0x0], &(0x7f0000001240)=[0x0, 0x0], &(0x7f0000001280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000012c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x6, 0x7}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000001440)={&(0x7f0000001340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0], &(0x7f0000001400)=[0x0], 0x6, 0x9, 0x3, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001580)={&(0x7f0000001480)=[0x0], &(0x7f00000014c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x9, 0x8, 0xa}) ioctl$DRM_IOCTL_MODE_SETCRTC(r10, 0xc06864a2, &(0x7f0000001700)={&(0x7f0000001640)=[r11, r12, r13, r14, r15, r16, r17, r18, r19, 0x0], 0xa, 0x0, 0x0, 0x9c5, 0x7, 0xba6, 0x9, {0x2, 0xfffb, 0x5, 0x4, 0x37, 0xb, 0x2387, 0x3000, 0x5, 0xe, 0x0, 0x4, 0x74, 0xfffffeff, "90162d77e621c2ac4282708e31a169c7191dac4d91f64828bf9c1b4e77a4d6ae"}}) kernel console output (not intermixed with test programs): usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 173.929976][ T5918] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 173.950116][ T5918] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 173.977545][ T5918] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 173.987256][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.997782][ T5917] usb 1-1: USB disconnect, device number 36 [ 174.003859][ T5918] usb 2-1: Product: syz [ 174.008719][ T5918] usb 2-1: Manufacturer: syz [ 174.014187][ T5918] usb 2-1: SerialNumber: syz [ 174.081635][ T7516] netlink: 16 bytes leftover after parsing attributes in process `syz.4.426'. [ 174.241721][ T7521] netlink: 64 bytes leftover after parsing attributes in process `syz.0.427'. [ 174.268784][ T5918] usb 2-1: 0:2 : does not exist [ 174.715645][ T7531] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 174.722476][ T7531] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 174.743284][ T7531] vhci_hcd vhci_hcd.0: Device attached [ 174.784338][ T5918] usb 2-1: USB disconnect, device number 18 [ 174.930426][ T5837] udevd[5837]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 174.973741][ T7539] netlink: 60 bytes leftover after parsing attributes in process `syz.1.431'. [ 175.072355][ T5917] usb 40-1: SetAddress Request (2) to port 0 [ 175.240050][ T5917] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 175.519641][ T5918] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 175.564607][ T7533] vhci_hcd: connection reset by peer [ 175.575717][ T6053] vhci_hcd vhci_hcd.3: stop threads [ 175.581971][ T6053] vhci_hcd vhci_hcd.3: release socket [ 175.622610][ T6053] vhci_hcd vhci_hcd.3: disconnect device [ 175.671220][ T5918] usb 3-1: config 0 interface 0 altsetting 12 endpoint 0x87 has an invalid bInterval 102, changing to 10 [ 175.717954][ T5918] usb 3-1: config 0 interface 0 altsetting 12 endpoint 0x87 has invalid maxpacket 24624, setting to 1024 [ 175.806284][ T5918] usb 3-1: config 0 interface 0 has no altsetting 0 [ 175.862045][ T5918] usb 3-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 175.872991][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.911683][ T5918] usb 3-1: Product: syz [ 175.931018][ T5918] usb 3-1: Manufacturer: syz [ 175.944629][ T5918] usb 3-1: SerialNumber: syz [ 175.972663][ T5918] usb 3-1: config 0 descriptor?? [ 176.006096][ T5918] keyspan 3-1:0.0: Keyspan 2 port adapter converter detected [ 176.018639][ T5918] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 7 [ 176.066752][ T5918] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81 [ 176.081105][ T5918] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 176.090187][ T5918] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 176.098000][ T5918] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 85 [ 176.118983][ T5918] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 5 [ 176.230625][ T7555] usb usb8: usbfs: process 7555 (syz.0.434) did not claim interface 0 before use [ 176.237018][ T5918] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 176.254211][ T7555] netlink: 8 bytes leftover after parsing attributes in process `syz.0.434'. [ 176.817302][ T5918] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 83 [ 176.843171][ T5918] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 3 [ 176.876705][ T5918] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 4 [ 176.900388][ T5918] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 86 [ 176.909063][ T5918] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 6 [ 176.951787][ T5918] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 177.009703][ T5918] usb 3-1: USB disconnect, device number 30 [ 177.065561][ T5918] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 177.115509][ T5918] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 177.142529][ T5918] keyspan 3-1:0.0: device disconnected [ 177.629759][ T24] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 177.710493][ T798] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 177.785377][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 177.796004][ T24] usb 1-1: not running at top speed; connect to a high speed hub [ 177.881046][ T24] usb 1-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice= 0.40 [ 177.896184][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.912309][ T798] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 177.922675][ T798] usb 5-1: config 0 has no interface number 0 [ 177.928843][ T24] usb 1-1: Product: 《 [ 177.933247][ T798] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 177.949689][ T24] usb 1-1: Manufacturer: K [ 177.954923][ T24] usb 1-1: SerialNumber: Є [ 177.969652][ T798] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.982618][ T798] usb 5-1: config 0 descriptor?? [ 177.992424][ T798] usb 5-1: selecting invalid altsetting 1 [ 177.998504][ T798] dvb_ttusb_budget: ttusb_init_controller: error [ 178.006416][ T798] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 178.087769][ T7584] netlink: 12 bytes leftover after parsing attributes in process `syz.2.445'. [ 178.146379][ T798] DVB: Unable to find symbol cx22700_attach() [ 178.229137][ T798] DVB: Unable to find symbol tda10046_attach() [ 178.235753][ T798] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 178.252203][ T7588] netlink: 64 bytes leftover after parsing attributes in process `syz.1.444'. [ 178.298722][ T24] usb 1-1: 1:1 : bogus bTerminalLink 3 [ 178.308026][ T798] usb 5-1: USB disconnect, device number 18 [ 178.319630][ T24] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 178.339477][ T24] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 178.367076][ T24] usb 1-1: 1:1 : bogus bTerminalLink 3 [ 178.374097][ T24] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 178.386629][ T24] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 178.433350][ T24] usb 1-1: 1:1 : bogus bTerminalLink 3 [ 178.445832][ T24] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 178.552864][ T7595] usb usb8: usbfs: process 7595 (syz.2.446) did not claim interface 0 before use [ 178.573298][ T7595] netlink: 8 bytes leftover after parsing attributes in process `syz.2.446'. [ 178.712048][ T24] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 178.827114][ T24] usb 1-1: USB disconnect, device number 37 [ 179.152305][ T5837] udevd[5837]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 179.849612][ T5918] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 180.009708][ T5918] usb 4-1: Using ep0 maxpacket: 16 [ 180.016682][ T5918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.028127][ T5918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.039158][ T5918] usb 4-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 180.048785][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.058559][ T5918] usb 4-1: config 0 descriptor?? [ 180.068012][ T5918] usbhid 4-1:0.0: fixing wrong optional hid class descriptors count [ 180.265711][ T7621] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 180.288186][ T5918] usbhid 4-1:0.0: can't add hid device: -71 [ 180.302800][ T5918] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 180.314788][ T5918] usb 4-1: USB disconnect, device number 28 [ 180.349888][ T5917] usb 40-1: device descriptor read/8, error -110 [ 180.750865][ T5917] usb usb40-port1: attempt power cycle [ 181.311778][ T5917] usb usb40-port1: unable to enumerate USB device [ 191.232600][ T5143] Bluetooth: hci1: command 0x0406 tx timeout [ 191.239219][ T5143] Bluetooth: hci3: command 0x0406 tx timeout [ 191.245790][ T5832] Bluetooth: hci0: command 0x0406 tx timeout [ 194.277099][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.290337][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.712591][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.719044][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.694742][ T7636] netlink: 4 bytes leftover after parsing attributes in process `syz.0.454'. [ 256.715703][ T7643] netlink: 4 bytes leftover after parsing attributes in process `syz.0.454'. [ 256.735736][ T7636] erspan0: entered promiscuous mode [ 256.742997][ T7636] macvtap1: entered promiscuous mode [ 256.753102][ T7636] macvtap1: entered allmulticast mode [ 256.759469][ T7636] erspan0: entered allmulticast mode [ 257.068308][ T7643] erspan0: left allmulticast mode [ 257.084419][ T7643] erspan0: left promiscuous mode [ 257.099796][ T5917] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 257.283821][ T5917] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 257.292261][ T5917] usb 5-1: config 0 has no interface number 0 [ 257.298615][ T5917] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 257.308062][ T5917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.407066][ T7662] autofs4:pid:7662:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(65021.1), cmd(0xc018937e) [ 257.423063][ T7662] autofs4:pid:7662:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 257.489446][ T5917] usb 5-1: config 0 descriptor?? [ 257.509623][ T798] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 257.689599][ T30] audit: type=1800 audit(1773095871.128:16): pid=7662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.459" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 257.689972][ T5917] usb 5-1: selecting invalid altsetting 1 [ 257.793737][ T5917] dvb_ttusb_budget: ttusb_init_controller: error [ 257.803451][ T5917] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 257.939666][ T798] usb 1-1: Using ep0 maxpacket: 16 [ 257.946542][ T798] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.958116][ T798] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.968441][ T798] usb 1-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 258.091581][ T798] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.152495][ T798] usb 1-1: config 0 descriptor?? [ 258.164209][ T5917] DVB: Unable to find symbol cx22700_attach() [ 258.227293][ T5917] DVB: Unable to find symbol tda10046_attach() [ 258.249739][ T5917] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 258.307621][ T5917] usb 5-1: USB disconnect, device number 19 [ 258.319978][ T24] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 258.364633][ T7669] netlink: 16 bytes leftover after parsing attributes in process `syz.4.462'. [ 258.496204][ T24] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 258.506658][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.527200][ T24] usb 4-1: Product: syz [ 258.567704][ T24] usb 4-1: Manufacturer: syz [ 258.577417][ T24] usb 4-1: SerialNumber: syz [ 258.614014][ T7661] netlink: 'syz.0.460': attribute type 10 has an invalid length. [ 258.632540][ T24] usb 4-1: config 0 descriptor?? [ 258.643994][ T7661] netlink: 40 bytes leftover after parsing attributes in process `syz.0.460'. [ 258.670239][ T7661] batadv0: entered promiscuous mode [ 258.680333][ T7679] usb usb8: usbfs: process 7679 (syz.1.463) did not claim interface 0 before use [ 258.701803][ T7679] netlink: 8 bytes leftover after parsing attributes in process `syz.1.463'. [ 258.703171][ T798] apple 0003:05AC:024B.0008: fixing up MacBook JIS keyboard report descriptor [ 258.724265][ T7661] batadv0: entered allmulticast mode [ 258.749597][ T7661] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 258.777285][ T798] apple 0003:05AC:024B.0008: unknown global tag 0xe [ 258.855717][ T798] apple 0003:05AC:024B.0008: item 0 1 1 14 parsing failed [ 259.161502][ T7681] netlink: 64 bytes leftover after parsing attributes in process `syz.4.464'. [ 259.179810][ T24] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 259.242739][ T798] apple 0003:05AC:024B.0008: parse failed [ 259.273079][ T798] apple 0003:05AC:024B.0008: probe with driver apple failed with error -22 [ 259.352992][ T798] usb 1-1: USB disconnect, device number 38 [ 259.985096][ T24] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 260.159821][ T5918] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 260.333615][ T5918] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 260.351782][ T5918] usb 1-1: config 0 has no interface number 0 [ 260.358310][ T5918] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 260.373780][ T5918] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.393607][ T5918] usb 1-1: config 0 descriptor?? [ 260.420570][ T5918] usb 1-1: selecting invalid altsetting 1 [ 260.449463][ T5918] dvb_ttusb_budget: ttusb_init_controller: error [ 260.477111][ T5918] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 260.579004][ T5918] DVB: Unable to find symbol cx22700_attach() [ 260.601946][ T798] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 260.677154][ T5918] DVB: Unable to find symbol tda10046_attach() [ 260.686871][ T5918] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 260.716199][ T7732] usb usb8: usbfs: process 7732 (syz.1.477) did not claim interface 0 before use [ 260.735030][ T5917] usb 4-1: USB disconnect, device number 29 [ 260.762192][ T5918] usb 1-1: USB disconnect, device number 39 [ 260.811398][ T798] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 64 [ 260.952564][ T798] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 260.969912][ T7732] netlink: 8 bytes leftover after parsing attributes in process `syz.1.477'. [ 261.026063][ T798] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 261.172549][ T798] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 261.209199][ T798] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.679734][ T798] usb 3-1: Product: syz [ 261.705168][ T798] usb 3-1: Manufacturer: syz [ 261.718764][ T798] usb 3-1: SerialNumber: syz [ 261.749124][ T798] cdc_mbim 3-1:1.0: skipping garbage [ 261.799829][ T5918] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 261.955476][ T7723] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 261.966657][ T7723] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 261.986096][ T5918] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 262.006345][ T5918] usb 4-1: config 220 has an invalid descriptor of length 1, skipping remainder of the config [ 262.034522][ T5918] usb 4-1: config 220 has no interface number 2 [ 262.048422][ T5918] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 262.122523][ T5918] usb 4-1: config 220 interface 0 has no altsetting 0 [ 262.137616][ T5918] usb 4-1: config 220 interface 76 has no altsetting 0 [ 262.145440][ T5918] usb 4-1: config 220 interface 1 has no altsetting 0 [ 262.205965][ T5918] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 262.226215][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.253626][ T5918] usb 4-1: Product: syz [ 262.259703][ T5917] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 262.293404][ T5918] usb 4-1: Manufacturer: syz [ 262.298040][ T5918] usb 4-1: SerialNumber: syz [ 262.312590][ T798] cdc_mbim 3-1:1.0: failed GET_NTB_PARAMETERS [ 262.323335][ T798] cdc_mbim 3-1:1.0: bind() failure [ 262.353906][ T798] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 262.366525][ T798] cdc_ncm 3-1:1.1: bind() failure [ 262.446442][ T7761] netlink: 392 bytes leftover after parsing attributes in process `syz.0.483'. [ 262.520062][ T5917] usb 2-1: Using ep0 maxpacket: 16 [ 262.526885][ T5917] usb 2-1: unable to get BOS descriptor or descriptor too short [ 262.537512][ T5917] usb 2-1: no configurations [ 262.545357][ T5917] usb 2-1: can't read configurations, error -22 [ 262.689688][ T5917] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 262.859691][ T5917] usb 2-1: Using ep0 maxpacket: 16 [ 262.872165][ T5917] usb 2-1: unable to get BOS descriptor or descriptor too short [ 262.880656][ T5917] usb 2-1: no configurations [ 262.898380][ T5917] usb 2-1: can't read configurations, error -22 [ 262.960843][ T5917] usb usb2-port1: attempt power cycle [ 263.136019][ T7763] input: syz0 as /devices/virtual/input/input12 [ 263.379654][ T5917] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 263.400783][ T5917] usb 2-1: Using ep0 maxpacket: 16 [ 263.410907][ T5917] usb 2-1: unable to get BOS descriptor or descriptor too short [ 263.422136][ T5917] usb 2-1: no configurations [ 263.433933][ T5917] usb 2-1: can't read configurations, error -22 [ 263.466237][ T10] usb 3-1: USB disconnect, device number 31 [ 263.606847][ T5917] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 263.640211][ T5917] usb 2-1: Using ep0 maxpacket: 16 [ 263.700580][ T5917] usb 2-1: unable to get BOS descriptor or descriptor too short [ 263.708655][ T5917] usb 2-1: no configurations [ 263.718148][ T5917] usb 2-1: can't read configurations, error -22 [ 263.739231][ T5917] usb usb2-port1: unable to enumerate USB device [ 263.772992][ T7769] gretap0: entered promiscuous mode [ 264.535620][ T5918] usb 4-1: selecting invalid altsetting 0 [ 264.550076][ T5918] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 264.567728][ T5918] uvcvideo 4-1:220.0: No valid video chain found. [ 264.627408][ T5918] usb 4-1: selecting invalid altsetting 0 [ 264.665730][ T5918] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 264.718500][ T5918] usb 4-1: USB disconnect, device number 30 [ 265.153340][ T7794] netlink: 64 bytes leftover after parsing attributes in process `syz.0.488'. [ 265.467137][ T7802] usb usb8: usbfs: process 7802 (syz.1.492) did not claim interface 0 before use [ 265.504344][ T5918] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 265.504738][ T7802] netlink: 8 bytes leftover after parsing attributes in process `syz.1.492'. [ 265.599820][ T798] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 265.802121][ T5918] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 265.810993][ T5918] usb 4-1: config 0 has no interface number 0 [ 265.826816][ T5918] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 265.845631][ T798] usb 3-1: config 0 has an invalid descriptor of length 192, skipping remainder of the config [ 265.870644][ T798] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 266.004246][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.140664][ T5918] usb 4-1: config 0 descriptor?? [ 266.150914][ T5918] usb 4-1: selecting invalid altsetting 1 [ 266.156954][ T5918] dvb_ttusb_budget: ttusb_init_controller: error [ 266.271488][ T5918] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 266.303064][ T7804] netlink: 24 bytes leftover after parsing attributes in process `syz.4.490'. [ 266.482023][ T798] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 266.509660][ T798] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.532914][ T798] usb 3-1: Product: syz [ 266.537110][ T798] usb 3-1: Manufacturer: syz [ 266.811359][ T798] usb 3-1: SerialNumber: syz [ 266.901000][ T798] usb 3-1: config 0 descriptor?? [ 266.927010][ T5918] DVB: Unable to find symbol cx22700_attach() [ 267.094407][ T5918] DVB: Unable to find symbol tda10046_attach() [ 267.106322][ T5918] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 267.155795][ T5918] usb 4-1: USB disconnect, device number 31 [ 267.487650][ T7813] xt_SECMARK: invalid mode: 2 [ 267.818471][ T7789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.910387][ T7789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.169446][ T7824] netlink: 392 bytes leftover after parsing attributes in process `syz.0.495'. [ 269.385471][ T7838] netlink: 392 bytes leftover after parsing attributes in process `syz.4.499'. [ 269.665787][ T9] usb 3-1: USB disconnect, device number 32 [ 270.823520][ T7862] usb usb8: usbfs: process 7862 (syz.0.504) did not claim interface 0 before use [ 271.473821][ T7860] netlink: 64 bytes leftover after parsing attributes in process `syz.3.505'. [ 272.309965][ T5880] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 272.499619][ T5880] usb 1-1: Using ep0 maxpacket: 8 [ 272.506709][ T5880] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 272.519886][ T5880] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 272.534498][ T5918] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 272.535206][ T5880] usb 1-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 272.590140][ T5880] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 272.627714][ T5880] usb 1-1: SerialNumber: syz [ 272.709761][ T5918] usb 5-1: Using ep0 maxpacket: 8 [ 272.727608][ T5918] usb 5-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.740059][ T5918] usb 5-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.751904][ T5918] usb 5-1: config 0 interface 0 has no altsetting 0 [ 272.769288][ T5918] usb 5-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 272.814389][ T5918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.838835][ T5918] usb 5-1: config 0 descriptor?? [ 272.861410][ T5880] usb 1-1: config 0 descriptor?? [ 272.908305][ T5880] hso 1-1:0.0: Can't find BULK IN endpoint [ 273.207401][ T9] usb 1-1: USB disconnect, device number 40 [ 273.273173][ T5918] hid_parser_main: 222 callbacks suppressed [ 273.273190][ T5918] smartjoyplus 0003:6666:8804.0009: unknown main item tag 0x2 [ 273.310224][ T5918] smartjoyplus 0003:6666:8804.0009: hidraw0: USB HID v0.00 Device [HID 6666:8804] on usb-dummy_hcd.4-1/input0 [ 273.352331][ T5918] smartjoyplus 0003:6666:8804.0009: no output reports found [ 273.737048][ T5917] usb 5-1: USB disconnect, device number 20 [ 273.925198][ T7890] netlink: 16 bytes leftover after parsing attributes in process `syz.2.513'. [ 274.431337][ T7911] loop2: detected capacity change from 0 to 7 [ 274.448905][ T7911] loop2: [ 274.454691][ T7911] loop2: partition table partially beyond EOD, truncated [ 274.509201][ T7912] usb usb8: usbfs: process 7912 (syz.3.517) did not claim interface 0 before use [ 275.130940][ T5880] usb 5-1: new low-speed USB device number 21 using dummy_hcd [ 275.292852][ T5880] usb 5-1: Invalid ep0 maxpacket: 16 [ 275.439658][ T5880] usb 5-1: new low-speed USB device number 22 using dummy_hcd [ 275.620927][ T5880] usb 5-1: Invalid ep0 maxpacket: 16 [ 275.626687][ T5880] usb usb5-port1: attempt power cycle [ 275.801167][ T29] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 275.980243][ T5880] usb 5-1: new low-speed USB device number 23 using dummy_hcd [ 275.999571][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.036182][ T5880] usb 5-1: Invalid ep0 maxpacket: 16 [ 276.041721][ T29] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 276.053090][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.063399][ T29] usb 3-1: config 0 descriptor?? [ 276.179688][ T5880] usb 5-1: new low-speed USB device number 24 using dummy_hcd [ 276.194522][ T7939] netlink: 64 bytes leftover after parsing attributes in process `syz.3.527'. [ 276.293257][ T5880] usb 5-1: Invalid ep0 maxpacket: 16 [ 276.299661][ T5917] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 276.308487][ T5880] usb usb5-port1: unable to enumerate USB device [ 276.315990][ T29] usbhid 3-1:0.0: can't add hid device: -71 [ 276.322087][ T29] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 276.333439][ T29] usb 3-1: USB disconnect, device number 33 [ 276.580863][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.596287][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.616603][ T5917] usb 2-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 276.648603][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.670614][ T5917] usb 2-1: config 0 descriptor?? [ 276.839708][ T29] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 276.926781][ T7945] loop2: detected capacity change from 0 to 7 [ 276.947794][ T7945] loop2: [ 276.956487][ T7945] loop2: partition table partially beyond EOD, truncated [ 277.009681][ T29] usb 3-1: Using ep0 maxpacket: 32 [ 277.016767][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.038179][ T29] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 277.080283][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.107494][ T5917] playstation 0003:054C:0BA0.000A: unknown main item tag 0x6 [ 277.108524][ T29] usb 3-1: config 0 descriptor?? [ 277.121865][ T5917] playstation 0003:054C:0BA0.000A: item fetching failed at offset 5/7 [ 277.129027][ T29] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 277.152249][ T5917] playstation 0003:054C:0BA0.000A: Parse failed [ 277.157844][ T29] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 277.160089][ T5917] playstation 0003:054C:0BA0.000A: probe with driver playstation failed with error -22 [ 277.219080][ T7947] netlink: 20 bytes leftover after parsing attributes in process `syz.0.531'. [ 277.260787][ T7947] faux_driver vkms: [drm] Unknown color mode 9; guessing buffer size. [ 277.372343][ T7929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.413455][ T7929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.602249][ T7955] netlink: 25 bytes leftover after parsing attributes in process `syz.0.533'. [ 277.679401][ T7958] netlink: 392 bytes leftover after parsing attributes in process `syz.3.532'. [ 278.279873][ T9] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 278.470595][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 278.481839][ T9] usb 5-1: config 0 has an invalid interface number: 4 but max is 0 [ 278.492020][ T9] usb 5-1: config 0 has no interface number 0 [ 278.498260][ T9] usb 5-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.511506][ T9] usb 5-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.523944][ T9] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 278.534433][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.551573][ T9] usb 5-1: config 0 descriptor?? [ 278.673819][ T7965] usb usb8: usbfs: process 7965 (syz.0.535) did not claim interface 0 before use [ 278.824132][ T29] usb 3-1: USB disconnect, device number 34 [ 278.842889][ T29] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 279.272491][ T7960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.284829][ T7960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.338609][ T5880] usb 2-1: USB disconnect, device number 23 [ 279.419826][ T7960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.489015][ T7960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.514185][ T7960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.550458][ T7960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.575295][ T7960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.607715][ T7977] netlink: 60 bytes leftover after parsing attributes in process `syz.0.539'. [ 279.617004][ T7960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.851047][ T9] usbhid 5-1:0.4: can't add hid device: -71 [ 279.875872][ T9] usbhid 5-1:0.4: probe with driver usbhid failed with error -71 [ 279.877222][ T7983] kvm: user requested TSC rate below hardware speed [ 279.909334][ T9] usb 5-1: USB disconnect, device number 25 [ 280.166320][ T7985] netlink: 24 bytes leftover after parsing attributes in process `syz.1.538'. [ 280.530482][ T7991] netlink: 64 bytes leftover after parsing attributes in process `syz.4.542'. [ 281.678232][ T8005] netlink: 392 bytes leftover after parsing attributes in process `syz.3.546'. [ 283.049645][ T798] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 283.229919][ T798] usb 1-1: Using ep0 maxpacket: 32 [ 283.261155][ T798] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.301327][ T798] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 283.379639][ T798] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.408431][ T798] usb 1-1: Product: syz [ 283.473335][ T798] usb 1-1: Manufacturer: syz [ 283.477980][ T798] usb 1-1: SerialNumber: syz [ 283.482981][ T8025] netlink: 12 bytes leftover after parsing attributes in process `syz.1.552'. [ 283.503558][ T8026] loop2: detected capacity change from 0 to 7 [ 283.561165][ T798] usb 1-1: config 0 descriptor?? [ 283.582556][ T8026] loop2: [ 283.585582][ T8026] loop2: partition table partially beyond EOD, truncated [ 283.597226][ T798] quatech2 1-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 283.828003][ T798] usb 1-1: qt2_attach - failed to power on unit: -71 [ 283.868263][ T798] quatech2 1-1:0.0: probe with driver quatech2 failed with error -71 [ 283.921344][ T798] usb 1-1: USB disconnect, device number 41 [ 284.096550][ T8039] loop5: detected capacity change from 0 to 7 [ 284.217712][ T8039] Dev loop5: unable to read RDB block 7 [ 284.225715][ T8039] loop5: unable to read partition table [ 284.260150][ T8039] loop5: partition table beyond EOD, truncated [ 284.279133][ T8039] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 284.529675][ T24] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 284.584956][ T8072] block device autoloading is deprecated and will be removed. [ 284.679686][ T5880] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 284.691169][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 284.698314][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 284.709253][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 284.720430][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 284.770408][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 284.801174][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 284.854020][ T5880] usb 5-1: device descriptor read/64, error -71 [ 284.886177][ T24] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 284.895771][ T24] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 284.904219][ T24] usb 2-1: Manufacturer: syz [ 284.915877][ T24] usb 2-1: config 0 descriptor?? [ 284.947413][ T8075] netlink: 8 bytes leftover after parsing attributes in process `syz.0.560'. [ 285.109770][ T5880] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 285.141715][ T8047] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 285.239647][ T5880] usb 5-1: device descriptor read/64, error -71 [ 285.252854][ T8053] rtc_cmos 00:00: Alarms can be up to one day in the future [ 285.332427][ T24] rc_core: IR keymap rc-hauppauge not found [ 285.344780][ T24] Registered IR keymap rc-empty [ 285.356541][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 285.373831][ T5893] rtc_cmos 00:00: Alarms can be up to one day in the future [ 285.382730][ T5880] usb usb5-port1: attempt power cycle [ 285.388438][ T5893] rtc_cmos 00:00: Alarms can be up to one day in the future [ 285.410729][ T5893] rtc_cmos 00:00: Alarms can be up to one day in the future [ 285.433243][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 285.443359][ T5893] rtc_cmos 00:00: Alarms can be up to one day in the future [ 285.444147][ T5893] rtc rtc0: __rtc_set_alarm: err=-22 [ 285.460791][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 285.546673][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input14 [ 285.620664][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 285.646725][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 285.694516][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 285.734383][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 285.749790][ T5880] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 285.779812][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 285.787097][ T5880] usb 5-1: device descriptor read/8, error -71 [ 285.819757][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 286.070864][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 286.111839][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 286.140757][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 286.220386][ T5880] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 286.252468][ T5880] usb 5-1: device descriptor read/8, error -71 [ 286.270995][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 286.293054][ T24] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 286.335990][ T8097] netlink: 64 bytes leftover after parsing attributes in process `syz.2.564'. [ 286.352724][ T24] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 286.366376][ T5880] usb usb5-port1: unable to enumerate USB device [ 286.467342][ T24] usb 2-1: USB disconnect, device number 24 [ 286.598981][ T8100] loop2: detected capacity change from 0 to 7 [ 286.606480][ T8100] loop2: [ 286.611566][ T8100] loop2: partition table partially beyond EOD, truncated [ 286.951346][ T8107] netlink: 392 bytes leftover after parsing attributes in process `syz.3.568'. [ 287.324982][ T8112] F2FS-fs: Conflicting test_dummy_encryption options [ 288.960324][ T8147] netlink: 4 bytes leftover after parsing attributes in process `syz.3.576'. [ 288.969614][ T8147] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.198967][ T8147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.302270][ T8149] loop2: detected capacity change from 0 to 7 [ 289.310279][ T8149] loop2: [ 289.314920][ T8149] loop2: partition table partially beyond EOD, truncated [ 289.689932][ T8160] netlink: 60 bytes leftover after parsing attributes in process `syz.4.581'. [ 290.049667][ T5918] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 290.129968][ T9] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 290.189712][ T5918] usb 3-1: device descriptor read/64, error -71 [ 290.192821][ T8171] netlink: 24 bytes leftover after parsing attributes in process `syz.0.585'. [ 290.313260][ T9] usb 5-1: New USB device found, idVendor=0421, idProduct=0007, bcdDevice=b8.51 [ 290.322773][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.331869][ T9] usb 5-1: Product: syz [ 290.336147][ T9] usb 5-1: Manufacturer: syz [ 290.396922][ T9] usb 5-1: SerialNumber: syz [ 290.411480][ T8178] netlink: 64 bytes leftover after parsing attributes in process `syz.1.584'. [ 290.426708][ T9] usb 5-1: config 0 descriptor?? [ 290.437372][ T9] rndis_host 5-1:0.0: More than one union descriptor, skipping ... [ 290.447516][ T5918] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 290.457870][ T9] usb 5-1: bad CDC descriptors [ 290.464268][ T9] cdc_acm 5-1:0.0: More than one union descriptor, skipping ... [ 290.548621][ T5917] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 290.600389][ T5918] usb 3-1: device descriptor read/64, error -71 [ 290.730930][ T5918] usb usb3-port1: attempt power cycle [ 290.742935][ T5917] usb 1-1: Using ep0 maxpacket: 8 [ 290.766174][ T5917] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 290.777659][ T5917] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 290.786959][ T5917] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 290.803329][ T5917] usb 1-1: Product: syz [ 290.824210][ T5917] usb 1-1: Manufacturer: syz [ 290.836508][ T5917] usb 1-1: SerialNumber: syz [ 291.104894][ T5917] usb 1-1: palm_os_3_probe - error -71 getting connection information [ 291.113522][ T5918] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 291.162960][ T5918] usb 3-1: device descriptor read/8, error -71 [ 291.303976][ T5917] visor 1-1:1.0: probe with driver visor failed with error -71 [ 291.549892][ T5918] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 291.570389][ T5918] usb 3-1: device descriptor read/8, error -71 [ 291.680686][ T5918] usb usb3-port1: unable to enumerate USB device [ 291.720999][ T5917] usb 1-1: USB disconnect, device number 42 [ 292.249675][ T5917] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 292.391403][ T8190] loop2: detected capacity change from 0 to 7 [ 292.416884][ T8190] loop2: [ 292.420632][ T8190] loop2: partition table partially beyond EOD, truncated [ 292.443984][ T5193] loop2: [ 292.447238][ T5193] loop2: partition table partially beyond EOD, truncated [ 292.568764][ T5917] usb 1-1: unable to get BOS descriptor or descriptor too short [ 292.688301][ T5917] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 292.736714][ T5917] usb 1-1: can't read configurations, error -71 [ 292.954699][ T8195] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 292.987150][ T24] usb 5-1: USB disconnect, device number 30 [ 293.338552][ T8212] input: syz1 as /devices/virtual/input/input15 [ 293.831674][ T8227] netlink: 64 bytes leftover after parsing attributes in process `syz.0.598'. [ 294.010401][ T8229] FAULT_INJECTION: forcing a failure. [ 294.010401][ T8229] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 294.143380][ T8229] CPU: 1 UID: 0 PID: 8229 Comm: syz.3.599 Tainted: G L syzkaller #0 PREEMPT(full) [ 294.143412][ T8229] Tainted: [L]=SOFTLOCKUP [ 294.143418][ T8229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 294.143428][ T8229] Call Trace: [ 294.143433][ T8229] [ 294.143438][ T8229] dump_stack_lvl+0xe8/0x150 [ 294.143458][ T8229] should_fail_ex+0x412/0x560 [ 294.143475][ T8229] _copy_from_user+0x2d/0xb0 [ 294.143490][ T8229] ___sys_recvmsg+0x175/0x590 [ 294.143513][ T8229] ? __pfx____sys_recvmsg+0x10/0x10 [ 294.143533][ T8229] ? __fget_files+0x3a0/0x420 [ 294.143553][ T8229] do_recvmmsg+0x334/0x800 [ 294.143567][ T8229] ? __pfx_do_recvmmsg+0x10/0x10 [ 294.143582][ T8229] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 294.143600][ T8229] __x64_sys_recvmmsg+0x198/0x250 [ 294.143611][ T8229] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 294.143627][ T8229] do_syscall_64+0x14d/0xf80 [ 294.143636][ T8229] ? trace_irq_disable+0x3b/0x150 [ 294.143650][ T8229] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.143660][ T8229] ? clear_bhb_loop+0x40/0x90 [ 294.143671][ T8229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.143681][ T8229] RIP: 0033:0x7f3d6559c799 [ 294.143697][ T8229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.143706][ T8229] RSP: 002b:00007f3d6644d028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 294.143724][ T8229] RAX: ffffffffffffffda RBX: 00007f3d65815fa0 RCX: 00007f3d6559c799 [ 294.143731][ T8229] RDX: 0000000000000001 RSI: 00002000000056c0 RDI: 0000000000000003 [ 294.143737][ T8229] RBP: 00007f3d6644d090 R08: 0000000000000000 R09: 0000000000000000 [ 294.143743][ T8229] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 294.143749][ T8229] R13: 00007f3d65816038 R14: 00007f3d65815fa0 R15: 00007f3d6593fa48 [ 294.143763][ T8229] [ 294.623809][ T8234] loop2: detected capacity change from 0 to 7 [ 294.650420][ T8234] loop2: [ 294.659678][ T8234] loop2: partition table partially beyond EOD, truncated [ 294.879704][ T5918] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 295.019643][ T5918] usb 5-1: device descriptor read/64, error -71 [ 295.053833][ T8240] openvswitch: netlink: IP tunnel dst address not specified [ 295.083793][ T8241] netlink: 60 bytes leftover after parsing attributes in process `syz.1.603'. [ 295.289647][ T5918] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 295.419672][ T5918] usb 5-1: device descriptor read/64, error -71 [ 295.540166][ T5918] usb usb5-port1: attempt power cycle [ 295.828745][ T29] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 295.940935][ T5918] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 295.960310][ T5918] usb 5-1: device descriptor read/8, error -71 [ 296.009687][ T24] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 296.039680][ T29] usb 3-1: Using ep0 maxpacket: 32 [ 296.052620][ T29] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 296.062468][ T29] usb 3-1: config 0 has no interface number 0 [ 296.068748][ T29] usb 3-1: config 0 interface 184 has no altsetting 0 [ 296.081343][ T29] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 296.091201][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.102353][ T29] usb 3-1: Product: syz [ 296.107787][ T29] usb 3-1: Manufacturer: syz [ 296.116433][ T29] usb 3-1: SerialNumber: syz [ 296.142766][ T29] usb 3-1: config 0 descriptor?? [ 296.171314][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 296.179681][ T24] usb 1-1: not running at top speed; connect to a high speed hub [ 296.192021][ T24] usb 1-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40 [ 296.203920][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.215619][ T24] usb 1-1: Product: syz [ 296.222023][ T24] usb 1-1: Manufacturer: syz [ 296.229013][ T24] usb 1-1: SerialNumber: syz [ 296.230099][ T5918] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 296.280320][ T5918] usb 5-1: device descriptor read/8, error -71 [ 296.390356][ T5918] usb usb5-port1: unable to enumerate USB device [ 296.513745][ T24] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 296.542520][ T24] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 296.582482][ T24] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 296.598970][ T24] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 296.606811][ T24] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 296.615178][ T24] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 296.627850][ T24] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 296.636695][ T24] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 296.652825][ T5918] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 296.694533][ T24] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 296.721880][ T24] usb 1-1: USB disconnect, device number 45 [ 296.759082][ T7663] udevd[7663]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 297.301002][ T8261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.608'. [ 297.364421][ T5918] usb 4-1: unable to get BOS descriptor or descriptor too short [ 297.385680][ T5918] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 297.394468][ T5918] usb 4-1: can't read configurations, error -71 [ 297.686855][ T8266] FAULT_INJECTION: forcing a failure. [ 297.686855][ T8266] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 297.701079][ T8266] CPU: 1 UID: 0 PID: 8266 Comm: syz.4.610 Tainted: G L syzkaller #0 PREEMPT(full) [ 297.701107][ T8266] Tainted: [L]=SOFTLOCKUP [ 297.701114][ T8266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 297.701125][ T8266] Call Trace: [ 297.701132][ T8266] [ 297.701140][ T8266] dump_stack_lvl+0xe8/0x150 [ 297.701169][ T8266] should_fail_ex+0x412/0x560 [ 297.701199][ T8266] prepare_alloc_pages+0x22a/0x650 [ 297.701229][ T8266] __alloc_frozen_pages_noprof+0x12f/0x380 [ 297.701253][ T8266] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 297.701270][ T8266] ? __pfx_policy_nodemask+0x10/0x10 [ 297.701285][ T8266] ? __lock_acquire+0x6b5/0x2cf0 [ 297.701300][ T8266] alloc_pages_mpol+0x232/0x4a0 [ 297.701315][ T8266] vma_alloc_folio_noprof+0xea/0x210 [ 297.701329][ T8266] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 297.701346][ T8266] do_pte_missing+0x1656/0x3750 [ 297.701366][ T8266] handle_mm_fault+0x1bec/0x3310 [ 297.701387][ T8266] ? handle_mm_fault+0xee/0x3310 [ 297.701405][ T8266] ? __pfx_handle_mm_fault+0x10/0x10 [ 297.701425][ T8266] ? schedule+0x90/0x360 [ 297.701440][ T8266] ? lock_mm_and_find_vma+0xa7/0x340 [ 297.701452][ T8266] do_user_addr_fault+0x75b/0x1340 [ 297.701473][ T8266] exc_page_fault+0x6a/0xc0 [ 297.701495][ T8266] asm_exc_page_fault+0x26/0x30 [ 297.701512][ T8266] RIP: 0010:put_cmsg+0x1d8/0x5d0 [ 297.701534][ T8266] Code: 63 f3 0f 84 9e 00 00 00 49 8d 6e f0 0f 1f 44 00 00 e8 ec 8a 4c f8 48 b8 00 f0 ff ff ff 7f 00 00 49 39 c5 4c 0f 47 e8 0f 01 cb <4d> 89 75 00 8b 44 24 08 41 89 45 08 8b 44 24 0c 41 89 45 0c 49 83 [ 297.701548][ T8266] RSP: 0018:ffffc90004caf3c0 EFLAGS: 00050287 [ 297.701564][ T8266] RAX: 00007ffffffff000 RBX: 0000000000000018 RCX: ffff88802c74db80 [ 297.701577][ T8266] RDX: 0000000000000000 RSI: 0000000000000018 RDI: 0000000000000038 [ 297.701587][ T8266] RBP: 0000000000000008 R08: ffff88807b439080 R09: 1ffff11006e4a8ae [ 297.701599][ T8266] R10: dffffc0000000000 R11: ffffed1006e4a8af R12: dffffc0000000000 [ 297.701611][ T8266] R13: 0000200000003800 R14: 0000000000000018 R15: ffff88807b439080 [ 297.701634][ T8266] ip6_datagram_recv_specific_ctl+0xa43/0x1630 [ 297.701651][ T8266] ? __might_fault+0xaf/0x130 [ 297.701665][ T8266] ? __pfx_ip6_datagram_recv_specific_ctl+0x10/0x10 [ 297.701680][ T8266] ? __pfx_sk_busy_loop_end+0x10/0x10 [ 297.701694][ T8266] ? ip6_datagram_recv_common_ctl+0x156/0x3e0 [ 297.701709][ T8266] ? __pfx__copy_to_iter+0x10/0x10 [ 297.701723][ T8266] ? __pfx_ip6_datagram_recv_common_ctl+0x10/0x10 [ 297.701736][ T8266] ? process_measurement+0x321/0x1c80 [ 297.701752][ T8266] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 297.701768][ T8266] udpv6_recvmsg+0x10e3/0x15e0 [ 297.701790][ T8266] ? __pfx_udpv6_recvmsg+0x10/0x10 [ 297.701803][ T8266] ? aa_sk_perm+0x6d5/0x900 [ 297.701814][ T8266] ? __lock_acquire+0x6b5/0x2cf0 [ 297.701828][ T8266] ? __pfx_udpv6_recvmsg+0x10/0x10 [ 297.701839][ T8266] inet6_recvmsg+0x1fe/0x6c0 [ 297.701851][ T8266] ? __pfx_aa_sk_perm+0x10/0x10 [ 297.701862][ T8266] ? unwind_next_frame+0xa5/0x23c0 [ 297.701877][ T8266] ? __pfx_inet6_recvmsg+0x10/0x10 [ 297.701887][ T8266] ? aa_sock_msg_perm+0xf1/0x1b0 [ 297.701900][ T8266] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 297.701910][ T8266] ? security_socket_recvmsg+0x7e/0x2c0 [ 297.701926][ T8266] ? __pfx_inet6_recvmsg+0x10/0x10 [ 297.701936][ T8266] sock_recvmsg+0xfa/0x1b0 [ 297.701950][ T8266] ____sys_recvmsg+0x1e6/0x4a0 [ 297.701965][ T8266] ? __pfx_____sys_recvmsg+0x10/0x10 [ 297.701982][ T8266] ? import_iovec+0x73/0xa0 [ 297.702005][ T8266] ___sys_recvmsg+0x215/0x590 [ 297.702017][ T8266] ? __pfx____sys_recvmsg+0x10/0x10 [ 297.702039][ T8266] ? __fget_files+0x3a0/0x420 [ 297.702058][ T8266] do_recvmmsg+0x334/0x800 [ 297.702072][ T8266] ? __pfx_do_recvmmsg+0x10/0x10 [ 297.702088][ T8266] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 297.702106][ T8266] __x64_sys_recvmmsg+0x198/0x250 [ 297.702118][ T8266] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 297.702133][ T8266] do_syscall_64+0x14d/0xf80 [ 297.702141][ T8266] ? trace_irq_disable+0x3b/0x150 [ 297.702155][ T8266] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.702164][ T8266] ? clear_bhb_loop+0x40/0x90 [ 297.702176][ T8266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.702186][ T8266] RIP: 0033:0x7f721839c799 [ 297.702195][ T8266] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 297.702204][ T8266] RSP: 002b:00007f72192ed028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 297.702217][ T8266] RAX: ffffffffffffffda RBX: 00007f7218615fa0 RCX: 00007f721839c799 [ 297.702241][ T8266] RDX: 0000000000000001 RSI: 00002000000056c0 RDI: 0000000000000003 [ 297.702252][ T8266] RBP: 00007f72192ed090 R08: 0000000000000000 R09: 0000000000000000 [ 297.702262][ T8266] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 297.702272][ T8266] R13: 00007f7218616038 R14: 00007f7218615fa0 R15: 00007f721873fa48 [ 297.702298][ T8266] [ 298.360918][ T29] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 298.374689][ T29] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 298.427760][ T29] usb 3-1: USB disconnect, device number 39 [ 298.589665][ T24] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 298.647500][ T8284] netlink: 64 bytes leftover after parsing attributes in process `syz.2.615'. [ 298.742645][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 298.752956][ T24] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 298.762423][ T24] usb 5-1: config 0 has no interface number 0 [ 298.771212][ T24] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 298.781818][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.796877][ T24] usb 5-1: Product: syz [ 298.807261][ T24] usb 5-1: Manufacturer: syz [ 298.817932][ T24] usb 5-1: SerialNumber: syz [ 298.849846][ T5918] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 298.860705][ T24] usb 5-1: config 0 descriptor?? [ 298.872229][ T24] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 298.999787][ T5918] usb 4-1: device descriptor read/64, error -71 [ 299.072755][ T24] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 299.119531][ T24] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 299.249707][ T5918] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 299.279712][ T10] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 299.390598][ T5918] usb 4-1: device descriptor read/64, error -71 [ 299.431572][ T10] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 299.450246][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.473932][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 299.475273][ T5917] usb 5-1: USB disconnect, device number 35 [ 299.502005][ T10] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 299.511365][ T9] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 299.521948][ T5917] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 299.533979][ T5918] usb usb4-port1: attempt power cycle [ 299.541235][ T10] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 299.552767][ T10] usb 2-1: Manufacturer: syz [ 299.570493][ T5917] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 299.582510][ T10] usb 2-1: config 0 descriptor?? [ 299.594326][ T5917] quatech2 5-1:0.51: device disconnected [ 299.669713][ T9] usb 1-1: device descriptor read/64, error -71 [ 299.677233][ T10] rc_core: IR keymap rc-hauppauge not found [ 299.690518][ T10] Registered IR keymap rc-empty [ 299.698425][ T10] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 299.728502][ T10] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input16 [ 299.879699][ T5918] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 299.900829][ T5918] usb 4-1: device descriptor read/8, error -71 [ 299.918032][ T8304] FAULT_INJECTION: forcing a failure. [ 299.918032][ T8304] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 299.919778][ T9] usb 1-1: new full-speed USB device number 47 using dummy_hcd [ 299.931940][ T8304] CPU: 1 UID: 0 PID: 8304 Comm: syz.2.621 Tainted: G L syzkaller #0 PREEMPT(full) [ 299.931968][ T8304] Tainted: [L]=SOFTLOCKUP [ 299.931974][ T8304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 299.931985][ T8304] Call Trace: [ 299.931994][ T8304] [ 299.932002][ T8304] dump_stack_lvl+0xe8/0x150 [ 299.932032][ T8304] should_fail_ex+0x412/0x560 [ 299.932059][ T8304] _copy_to_user+0x31/0xb0 [ 299.932087][ T8304] simple_read_from_buffer+0xe1/0x170 [ 299.932115][ T8304] proc_fail_nth_read+0x1bb/0x230 [ 299.932143][ T8304] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 299.932170][ T8304] ? rw_verify_area+0x2a6/0x4d0 [ 299.932187][ T8304] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 299.932211][ T8304] vfs_read+0x20c/0xa70 [ 299.932227][ T8304] ? fdget_pos+0x246/0x320 [ 299.932249][ T8304] ? __pfx_do_recvmmsg+0x10/0x10 [ 299.932271][ T8304] ? __pfx___mutex_lock+0x10/0x10 [ 299.932289][ T8304] ? __pfx_vfs_read+0x10/0x10 [ 299.932308][ T8304] ? __fget_files+0x2a/0x420 [ 299.932335][ T8304] ? __fget_files+0x3a0/0x420 [ 299.932358][ T8304] ? __fget_files+0x2a/0x420 [ 299.932389][ T8304] ksys_read+0x150/0x270 [ 299.932409][ T8304] ? __pfx_ksys_read+0x10/0x10 [ 299.932435][ T8304] do_syscall_64+0x14d/0xf80 [ 299.932451][ T8304] ? trace_irq_disable+0x3b/0x150 [ 299.932474][ T8304] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.932492][ T8304] ? clear_bhb_loop+0x40/0x90 [ 299.932513][ T8304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.932530][ T8304] RIP: 0033:0x7f1d21d5cfce [ 299.932548][ T8304] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 299.932563][ T8304] RSP: 002b:00007f1d22b77fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 299.932582][ T8304] RAX: ffffffffffffffda RBX: 00007f1d22b786c0 RCX: 00007f1d21d5cfce [ 299.932595][ T8304] RDX: 000000000000000f RSI: 00007f1d22b780a0 RDI: 0000000000000004 [ 299.932606][ T8304] RBP: 00007f1d22b78090 R08: 0000000000000000 R09: 0000000000000000 [ 299.932617][ T8304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.932627][ T8304] R13: 00007f1d22016038 R14: 00007f1d22015fa0 R15: 00007f1d2213fa48 [ 299.932654][ T8304] [ 300.081459][ T24] usb 2-1: USB disconnect, device number 25 [ 300.219895][ T5918] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 300.229139][ T9] usb 1-1: device descriptor read/64, error -71 [ 300.240094][ T5918] usb 4-1: device descriptor read/8, error -71 [ 300.309640][ T5880] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 300.339980][ T9] usb usb1-port1: attempt power cycle [ 300.350352][ T5918] usb usb4-port1: unable to enumerate USB device [ 300.472351][ T5880] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 300.480674][ T5880] usb 3-1: config 0 has no interface number 0 [ 300.489018][ T5880] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=77.f4 [ 300.498218][ T5880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.506353][ T5880] usb 3-1: Product: syz [ 300.510651][ T5880] usb 3-1: Manufacturer: syz [ 300.515253][ T5880] usb 3-1: SerialNumber: syz [ 300.522089][ T5880] usb 3-1: config 0 descriptor?? [ 300.529238][ T8307] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 300.679647][ T9] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 300.711647][ T9] usb 1-1: device descriptor read/8, error -71 [ 300.738625][ T5880] asix 3-1:0.251: probe with driver asix failed with error -71 [ 300.754828][ T5880] usb 3-1: USB disconnect, device number 40 [ 300.949776][ T9] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 300.984106][ T9] usb 1-1: device descriptor read/8, error -71 [ 301.109874][ T9] usb usb1-port1: unable to enumerate USB device [ 301.279723][ T5880] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 301.452019][ T8325] input: syz1 as /devices/virtual/input/input17 [ 301.459664][ T5880] usb 5-1: Using ep0 maxpacket: 16 [ 301.473289][ T5880] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 301.482791][ T5880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.495806][ T5880] usb 5-1: config 0 descriptor?? [ 301.505127][ T5880] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 301.703971][ T5880] usb 5-1: Detected FT232B [ 302.005147][ T8340] netlink: 64 bytes leftover after parsing attributes in process `syz.3.631'. [ 302.111639][ T8319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.128621][ T8319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.639662][ T9] usb 1-1: new full-speed USB device number 50 using dummy_hcd [ 302.779710][ T9] usb 1-1: device descriptor read/64, error -71 [ 302.974241][ T5880] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 302.995017][ T5880] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 303.019763][ T5880] usb 5-1: USB disconnect, device number 36 [ 303.029780][ T9] usb 1-1: new full-speed USB device number 51 using dummy_hcd [ 303.051948][ T5880] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 303.075924][ T5880] ftdi_sio 5-1:0.0: device disconnected [ 303.199946][ T9] usb 1-1: device descriptor read/64, error -71 [ 303.319842][ T9] usb usb1-port1: attempt power cycle [ 303.566838][ T8379] loop2: detected capacity change from 0 to 7 [ 303.586806][ T8379] loop2: [ 303.591248][ T8379] loop2: partition table partially beyond EOD, truncated [ 303.669927][ T9] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 303.731714][ T9] usb 1-1: device descriptor read/8, error -71 [ 303.841444][ T5918] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 304.006938][ T9] usb 1-1: new full-speed USB device number 53 using dummy_hcd [ 304.037780][ T5918] usb 5-1: no configurations [ 304.042630][ T5918] usb 5-1: can't read configurations, error -22 [ 304.051404][ T9] usb 1-1: device descriptor read/8, error -71 [ 304.172799][ T9] usb usb1-port1: unable to enumerate USB device [ 304.199794][ T5918] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 304.380358][ T9] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 304.429921][ T5918] usb 5-1: no configurations [ 304.434686][ T5918] usb 5-1: can't read configurations, error -22 [ 304.453708][ T5918] usb usb5-port1: attempt power cycle [ 304.541517][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 304.554920][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 304.845570][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 304.855537][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 304.886664][ T5918] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 304.947763][ T5918] usb 5-1: no configurations [ 304.952579][ T5918] usb 5-1: can't read configurations, error -22 [ 304.979418][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 305.019043][ T5893] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 305.059637][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.088953][ T9] usb 2-1: config 0 descriptor?? [ 305.165308][ T5918] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 305.245224][ T5918] usb 5-1: no configurations [ 305.250423][ T5918] usb 5-1: can't read configurations, error -22 [ 305.277425][ T5918] usb usb5-port1: unable to enumerate USB device [ 305.279714][ T5893] usb 4-1: device descriptor read/64, error -71 [ 305.507556][ T9] plantronics 0003:047F:FFFF.000B: ignoring exceeding usage max [ 305.529940][ T5893] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 305.539224][ T9] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 305.659817][ T5893] usb 4-1: device descriptor read/64, error -71 [ 305.739658][ T5880] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 305.770752][ T5893] usb usb4-port1: attempt power cycle [ 305.911527][ T5880] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 305.921922][ T5880] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 305.934695][ T5880] usb 3-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 1.00 [ 305.944173][ T5880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.953375][ T5880] usb 3-1: Product: syz [ 305.957657][ T5880] usb 3-1: Manufacturer: syz [ 305.962383][ T5880] usb 3-1: SerialNumber: syz [ 305.969287][ T5880] usb 3-1: config 0 descriptor?? [ 306.119743][ T5893] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 306.151022][ T5893] usb 4-1: device descriptor read/8, error -71 [ 306.183128][ T8401] netlink: 32 bytes leftover after parsing attributes in process `syz.2.652'. [ 306.201742][ T8401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.210570][ T8401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.223363][ T5918] usb 3-1: USB disconnect, device number 41 [ 306.399747][ T5893] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 306.429732][ T5893] usb 4-1: device descriptor read/8, error -71 [ 306.550099][ T5893] usb usb4-port1: unable to enumerate USB device [ 306.762229][ T8419] netlink: 'syz.4.657': attribute type 2 has an invalid length. [ 306.856661][ T5918] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 307.009856][ T5893] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 307.029787][ T5918] usb 1-1: Using ep0 maxpacket: 32 [ 307.036689][ T5918] usb 1-1: config 0 has an invalid interface number: 111 but max is 1 [ 307.045046][ T5918] usb 1-1: config 0 has no interface number 1 [ 307.054508][ T5918] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 307.063740][ T5918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.071840][ T5918] usb 1-1: Product: syz [ 307.076099][ T5918] usb 1-1: Manufacturer: syz [ 307.081470][ T5918] usb 1-1: SerialNumber: syz [ 307.088110][ T5918] usb 1-1: config 0 descriptor?? [ 307.109693][ T5880] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 307.139784][ T5893] usb 5-1: device descriptor read/64, error -71 [ 307.271455][ T5880] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 307.287949][ T5880] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.310504][ T5880] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 307.335008][ T5880] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 307.345172][ T5880] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 307.377990][ T5880] usb 3-1: Manufacturer: syz [ 307.388971][ T5880] usb 3-1: config 0 descriptor?? [ 307.394974][ T5893] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 307.425156][ T5880] igorplugusb 3-1:0.0: incorrect number of endpoints [ 307.452554][ T5918] snd-usb-6fire 1-1:0.111: unable to receive device firmware state. [ 307.475701][ T5918] snd-usb-6fire 1-1:0.111: probe with driver snd-usb-6fire failed with error -71 [ 307.500613][ T5918] usb 1-1: USB disconnect, device number 54 [ 307.556725][ T5893] usb 5-1: device descriptor read/64, error -71 [ 307.594213][ T9] usb 2-1: USB disconnect, device number 26 [ 307.633662][ T8421] netlink: 4 bytes leftover after parsing attributes in process `syz.2.658'. [ 307.650259][ T8421] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 307.670069][ T5893] usb usb5-port1: attempt power cycle [ 307.676357][ T8421] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 307.734274][ T24] usb 3-1: USB disconnect, device number 42 [ 307.879868][ T8441] program syz.1.663 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 308.039665][ T5893] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 308.060591][ T5893] usb 5-1: device descriptor read/8, error -71 [ 308.312444][ T5893] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 308.344782][ T5893] usb 5-1: device descriptor read/8, error -71 [ 308.469892][ T5893] usb usb5-port1: unable to enumerate USB device [ 308.588577][ T8456] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 308.649659][ T5893] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 308.689669][ T9] usb 1-1: new full-speed USB device number 55 using dummy_hcd [ 308.799703][ T5893] usb 3-1: Using ep0 maxpacket: 8 [ 308.812367][ T5893] usb 3-1: config 3 has an invalid interface number: 45 but max is 0 [ 308.831243][ T5893] usb 3-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 308.850730][ T5893] usb 3-1: config 3 has no interface number 0 [ 308.856856][ T5893] usb 3-1: config 3 interface 45 altsetting 2 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 308.889706][ T5893] usb 3-1: config 3 interface 45 altsetting 2 endpoint 0xA has invalid wMaxPacketSize 0 [ 308.909656][ T5893] usb 3-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 308.912635][ T9] usb 1-1: no configurations [ 308.930959][ T9] usb 1-1: can't read configurations, error -22 [ 308.938415][ T5893] usb 3-1: config 3 interface 45 has no altsetting 0 [ 308.954495][ T5893] usb 3-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 308.963905][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.971996][ T5893] usb 3-1: Product: syz [ 308.976352][ T5893] usb 3-1: Manufacturer: syz [ 308.982544][ T5893] usb 3-1: SerialNumber: syz [ 309.060534][ T9] usb 1-1: new full-speed USB device number 56 using dummy_hcd [ 309.079639][ T10] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 309.211152][ T9] usb 1-1: no configurations [ 309.221003][ T10] usb 4-1: device descriptor read/64, error -71 [ 309.230221][ T9] usb 1-1: can't read configurations, error -22 [ 309.237090][ T9] usb usb1-port1: attempt power cycle [ 309.257574][ T5893] usb 3-1: USB disconnect, device number 43 [ 309.277105][ T7663] udevd[7663]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 309.310110][ T5918] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 309.461310][ T5918] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 309.470605][ T5918] usb 2-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 309.480912][ T10] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 309.488796][ T5918] usb 2-1: config 0 has no interface number 0 [ 309.497042][ T5918] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 309.506372][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.514402][ T5918] usb 2-1: Product: syz [ 309.518670][ T5918] usb 2-1: Manufacturer: syz [ 309.523802][ T5918] usb 2-1: SerialNumber: syz [ 309.530787][ T5918] usb 2-1: config 0 descriptor?? [ 309.579743][ T9] usb 1-1: new full-speed USB device number 57 using dummy_hcd [ 309.600771][ T9] usb 1-1: no configurations [ 309.605430][ T9] usb 1-1: can't read configurations, error -22 [ 309.619702][ T10] usb 4-1: device descriptor read/64, error -71 [ 309.703037][ T8465] netlink: zone id is out of range [ 309.708184][ T8465] netlink: zone id is out of range [ 309.716177][ T8465] netlink: zone id is out of range [ 309.721405][ T8465] netlink: zone id is out of range [ 309.726597][ T8465] netlink: zone id is out of range [ 309.730911][ T10] usb usb4-port1: attempt power cycle [ 309.740406][ T9] usb 1-1: new full-speed USB device number 58 using dummy_hcd [ 309.748182][ T8465] netlink: zone id is out of range [ 309.769831][ T8465] netlink: zone id is out of range [ 309.771032][ T9] usb 1-1: no configurations [ 309.774977][ T8465] netlink: zone id is out of range [ 309.775007][ T8465] netlink: zone id is out of range [ 309.775015][ T8465] netlink: zone id is out of range [ 309.819745][ T9] usb 1-1: can't read configurations, error -22 [ 309.830861][ T9] usb usb1-port1: unable to enumerate USB device [ 309.961767][ T5918] uvcvideo 2-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 309.972772][ T5918] uvcvideo 2-1:0.64: No valid video chain found. [ 309.981873][ T5918] usb 2-1: USB disconnect, device number 27 [ 310.119690][ T10] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 310.160394][ T10] usb 4-1: device descriptor read/8, error -71 [ 310.333912][ T8474] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 310.413082][ T10] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 310.440500][ T10] usb 4-1: device descriptor read/8, error -71 [ 310.550155][ T10] usb usb4-port1: unable to enumerate USB device [ 310.920570][ T8493] loop2: detected capacity change from 0 to 7 [ 310.927354][ T8493] loop2: [ 311.059754][ T8493] loop2: partition table partially beyond EOD, truncated [ 311.300958][ T10] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 311.519849][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 311.529531][ T10] usb 3-1: config 0 has no interfaces? [ 311.556586][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 311.571511][ T10] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 311.593840][ T10] usb 3-1: Manufacturer: syz [ 311.602759][ T8516] fuse: Unknown parameter '0x00000000000000090x000000000000000a' [ 311.613992][ T8516] netlink: 44 bytes leftover after parsing attributes in process `syz.0.681'. [ 311.673542][ T10] usb 3-1: config 0 descriptor?? [ 311.719826][ T5918] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 311.937878][ T5918] usb 5-1: config 0 has no interfaces? [ 311.945739][ T5918] usb 5-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 312.054619][ T5918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.098832][ T5918] usb 5-1: config 0 descriptor?? [ 312.221927][ T8531] x_tables: duplicate underflow at hook 1 [ 312.417002][ T5918] usb 5-1: USB disconnect, device number 45 [ 314.015867][ T8561] netlink: 64 bytes leftover after parsing attributes in process `syz.0.688'. [ 314.160779][ T8564] loop2: detected capacity change from 0 to 7 [ 314.200447][ T8564] loop2: [ 314.221378][ T8564] loop2: partition table partially beyond EOD, truncated [ 314.618000][ T1209] usb 3-1: USB disconnect, device number 44 [ 314.757430][ T8580] netlink: 83 bytes leftover after parsing attributes in process `syz.3.694'. [ 314.770115][ T5880] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 314.804238][ T5893] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 314.929722][ T5880] usb 5-1: Using ep0 maxpacket: 16 [ 314.942144][ T5880] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 314.969829][ T5880] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 314.993046][ T5880] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 315.010790][ T5893] usb 2-1: no configurations [ 315.016489][ T5893] usb 2-1: can't read configurations, error -22 [ 315.029051][ T5880] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 315.048417][ T5880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.064320][ T5880] usb 5-1: Product: syz [ 315.084639][ T5880] usb 5-1: Manufacturer: syz [ 315.094823][ T5880] usb 5-1: SerialNumber: syz [ 315.112475][ T5918] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 315.121043][ T1209] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 315.169699][ T5893] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 315.284283][ T5918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.295611][ T1209] usb 3-1: Using ep0 maxpacket: 32 [ 315.303910][ T5918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.325530][ T1209] usb 3-1: config index 0 descriptor too short (expected 164, got 36) [ 315.332045][ T5893] usb 2-1: no configurations [ 315.339850][ T5918] usb 4-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 315.348648][ T5893] usb 2-1: can't read configurations, error -22 [ 315.348926][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.359246][ T5893] usb usb2-port1: attempt power cycle [ 315.363363][ T1209] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.385088][ T1209] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.400254][ T1209] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 315.409832][ T1209] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.418879][ T5918] usb 4-1: config 0 descriptor?? [ 315.438086][ T1209] usb 3-1: config 0 descriptor?? [ 315.677748][ T8617] usb usb8: usbfs: process 8617 (syz.0.699) did not claim interface 0 before use [ 315.700996][ T8617] usb usb8: selecting invalid altsetting 2047 [ 315.703144][ T5918] usbhid 4-1:0.0: can't add hid device: -71 [ 315.730045][ T5893] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 315.738540][ T5918] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 315.776386][ T5880] usb 5-1: 0:2 : does not exist [ 315.780967][ T5918] usb 4-1: USB disconnect, device number 46 [ 315.783884][ T5893] usb 2-1: no configurations [ 315.803762][ T5893] usb 2-1: can't read configurations, error -22 [ 315.878031][ T5880] usb 5-1: 1:0: cannot get min/max values for control 4 (id 1) [ 315.891874][ T1209] logitech 0003:046D:C29C.000C: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.2-1/input0 [ 315.959760][ T5893] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 316.000942][ T5893] usb 2-1: no configurations [ 316.005611][ T5893] usb 2-1: can't read configurations, error -22 [ 316.017055][ T5880] usb 5-1: USB disconnect, device number 46 [ 316.052386][ T5893] usb usb2-port1: unable to enumerate USB device [ 316.211188][ T5918] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 316.275763][ T1209] logitech 0003:046D:C29C.000C: no inputs found [ 316.326730][ T1209] usb 3-1: USB disconnect, device number 45 [ 316.422378][ T5918] usb 4-1: unable to get BOS descriptor or descriptor too short [ 316.435065][ T5918] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 316.446271][ T5918] usb 4-1: can't read configurations, error -71 [ 316.573209][ T8632] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.701'. [ 316.584356][ T8632] netlink: 4 bytes leftover after parsing attributes in process `syz.4.701'. [ 317.006891][ T8658] netlink: 'syz.0.706': attribute type 8 has an invalid length. [ 317.156513][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.163601][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.205629][ T8667] netlink: 64 bytes leftover after parsing attributes in process `syz.3.707'. [ 318.313513][ T10] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 318.351667][ T10] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 318.429986][ T29] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 318.608729][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 318.640749][ T29] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.652456][ T29] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.663085][ T29] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 318.682082][ T29] usb 5-1: config 0 interface 0 has no altsetting 0 [ 318.692929][ T29] usb 5-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 318.709684][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.729484][ T29] usb 5-1: config 0 descriptor?? [ 318.995114][ T8700] netlink: 60 bytes leftover after parsing attributes in process `syz.3.715'. [ 319.137717][ T8700] bridge_slave_1: left allmulticast mode [ 319.143934][ T8700] bridge_slave_1: left promiscuous mode [ 319.169998][ T8700] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.190526][ T8700] bridge_slave_0: left allmulticast mode [ 319.196277][ T8700] bridge_slave_0: left promiscuous mode [ 319.205103][ T29] hid (null): invalid report_size 26545 [ 319.215253][ T8706] netlink: 60 bytes leftover after parsing attributes in process `syz.2.716'. [ 319.224614][ T29] magicmouse 0003:05AC:0265.000E: unknown main item tag 0x6 [ 319.224655][ T29] magicmouse 0003:05AC:0265.000E: invalid report_size 26545 [ 319.224671][ T29] magicmouse 0003:05AC:0265.000E: item 0 2 1 7 parsing failed [ 319.225327][ T29] magicmouse 0003:05AC:0265.000E: magicmouse hid parse failed [ 319.259860][ T8700] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.266190][ T29] magicmouse 0003:05AC:0265.000E: probe with driver magicmouse failed with error -22 [ 319.507175][ T8706] bridge_slave_1: left allmulticast mode [ 319.527539][ T8706] bridge_slave_1: left promiscuous mode [ 319.535121][ T8706] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.549005][ T10] usb 5-1: USB disconnect, device number 47 [ 319.584645][ T8706] bridge_slave_0: left allmulticast mode [ 319.593662][ T8706] bridge_slave_0: left promiscuous mode [ 319.599804][ T8706] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.719683][ T29] usb 1-1: new full-speed USB device number 59 using dummy_hcd [ 319.762892][ T8714] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.718'. [ 319.785065][ T8714] netlink: 4 bytes leftover after parsing attributes in process `syz.1.718'. [ 320.273293][ T8719] netlink: 4 bytes leftover after parsing attributes in process `syz.4.719'. [ 320.288742][ T8719] net_ratelimit: 4 callbacks suppressed [ 320.288760][ T8719] openvswitch: netlink: Flow actions attr not present in new flow. [ 320.381004][ T8719] netlink: 'syz.4.719': attribute type 2 has an invalid length. [ 321.123615][ T8722] netlink: 'syz.1.720': attribute type 6 has an invalid length. [ 321.140599][ T8722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.720'. [ 321.935796][ T8742] netlink: 64 bytes leftover after parsing attributes in process `syz.1.725'. [ 322.327559][ T8755] netlink: 8 bytes leftover after parsing attributes in process `syz.3.729'. [ 322.441799][ T29] usb 1-1: unable to get BOS descriptor or descriptor too short [ 322.469022][ T29] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 322.489120][ T29] usb 1-1: can't read configurations, error -71 [ 322.567782][ T10] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 322.594310][ T10] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 322.721359][ T8769] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.730'. [ 322.733615][ T8769] netlink: 4 bytes leftover after parsing attributes in process `syz.3.730'. [ 323.761118][ T8782] loop2: detected capacity change from 0 to 7 [ 323.777705][ T7663] loop2: [ 323.797936][ T7663] loop2: partition table partially beyond EOD, truncated [ 323.823906][ T8782] loop2: [ 323.826884][ T8782] loop2: partition table partially beyond EOD, truncated [ 324.025406][ T8793] netlink: 8 bytes leftover after parsing attributes in process `syz.3.740'. [ 324.211226][ T8800] autofs4:pid:8800:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(65021.1), cmd(0xc018937e) [ 324.224740][ T8800] autofs4:pid:8800:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 324.314568][ T8802] netlink: 20 bytes leftover after parsing attributes in process `syz.2.738'. [ 324.323774][ T8802] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 324.353604][ T30] audit: type=1326 audit(1773095937.908:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8803 comm="syz.1.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc7cd9c799 code=0x7ffc0000 [ 324.376193][ T30] audit: type=1326 audit(1773095937.928:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8803 comm="syz.1.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc7cd9c799 code=0x7ffc0000 [ 324.413932][ T8804] tun0: tun_chr_ioctl cmd 1074025675 [ 324.419331][ T8804] tun0: persist disabled [ 324.421380][ T5929] usb 1-1: new full-speed USB device number 61 using dummy_hcd [ 324.440029][ T30] audit: type=1326 audit(1773095937.958:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8803 comm="syz.1.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efc7cd9c799 code=0x7ffc0000 [ 324.463850][ T30] audit: type=1326 audit(1773095937.958:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8803 comm="syz.1.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc7cd9c799 code=0x7ffc0000 [ 324.490993][ T30] audit: type=1326 audit(1773095937.958:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8803 comm="syz.1.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc7cd9c799 code=0x7ffc0000 [ 324.519745][ T30] audit: type=1326 audit(1773095937.958:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8803 comm="syz.1.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efc7cd9c799 code=0x7ffc0000 [ 324.550073][ T30] audit: type=1326 audit(1773095937.958:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8803 comm="syz.1.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc7cd9c799 code=0x7ffc0000 [ 324.582374][ T30] audit: type=1326 audit(1773095937.958:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8803 comm="syz.1.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc7cd9c799 code=0x7ffc0000 [ 324.605266][ T30] audit: type=1326 audit(1773095937.958:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8803 comm="syz.1.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efc7cd9c799 code=0x7ffc0000 [ 324.627901][ T30] audit: type=1326 audit(1773095937.958:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8803 comm="syz.1.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc7cd9c799 code=0x7ffc0000 [ 324.719677][ T1209] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 324.984833][ T1209] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.005837][ T1209] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 325.048016][ T1209] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 325.069784][ T1209] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.085606][ T1209] usb 2-1: Product: syz [ 325.098008][ T1209] usb 2-1: Manufacturer: syz [ 325.109653][ T1209] usb 2-1: SerialNumber: syz [ 325.137729][ T1209] cdc_ncm 2-1:1.0: skipping garbage [ 325.154280][ T1209] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 325.163970][ T8811] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.744'. [ 325.175072][ T8811] netlink: 4 bytes leftover after parsing attributes in process `syz.4.744'. [ 325.194913][ T1209] cdc_ncm 2-1:1.0: bind() failure [ 325.207780][ T10] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 325.220851][ T10] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 325.232784][ T1209] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 325.489747][ T1209] cdc_ncm 2-1:1.1: bind() failure [ 325.552444][ T1209] usb 2-1: USB disconnect, device number 32 [ 325.625473][ T8814] fido_id[8814]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 325.763170][ T8819] netlink: 64 bytes leftover after parsing attributes in process `syz.3.746'. [ 327.100457][ T5929] usb 1-1: unable to get BOS descriptor or descriptor too short [ 327.112012][ T5929] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 327.130581][ T5929] usb 1-1: can't read configurations, error -71 [ 327.250532][ T8835] netlink: 8 bytes leftover after parsing attributes in process `syz.0.752'. [ 327.826905][ T1209] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 328.019869][ T1209] usb 5-1: Using ep0 maxpacket: 16 [ 328.041093][ T1209] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 328.149327][ T1209] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 328.173192][ T1209] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 328.225262][ T1209] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 328.271962][ T1209] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 328.311725][ T1209] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 328.322479][ T1209] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 328.342770][ T1209] usb 5-1: Manufacturer: syz [ 328.375237][ T1209] usb 5-1: config 0 descriptor?? [ 328.789679][ T24] usb 1-1: new full-speed USB device number 63 using dummy_hcd [ 328.854687][ T1209] rc_core: IR keymap rc-hauppauge not found [ 328.880986][ T1209] Registered IR keymap rc-empty [ 328.886889][ T1209] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 328.921256][ T1209] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 328.950484][ T1209] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 328.973223][ T1209] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input18 [ 328.974237][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 329.003318][ T1209] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 329.003955][ T24] usb 1-1: not running at top speed; connect to a high speed hub [ 329.030524][ T24] usb 1-1: config 2 has an invalid interface number: 226 but max is 1 [ 329.031709][ T1209] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 329.038738][ T24] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 329.038762][ T24] usb 1-1: config 2 has 1 interface, different from the descriptor's value: 2 [ 329.038780][ T24] usb 1-1: config 2 has no interface number 0 [ 329.038826][ T24] usb 1-1: config 2 interface 226 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 329.038850][ T24] usb 1-1: config 2 interface 226 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 329.038877][ T24] usb 1-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 329.041853][ T24] usb 1-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 329.139804][ T1209] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 329.145628][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.156155][ T24] usb 1-1: Product: syz [ 329.160629][ T24] usb 1-1: Manufacturer: syz [ 329.165291][ T24] usb 1-1: SerialNumber: syz [ 329.170771][ T1209] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 329.199723][ T1209] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 329.220550][ T1209] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 329.249733][ T1209] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 329.279822][ T1209] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 329.303304][ T798] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 329.314800][ T798] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 329.320304][ T1209] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 329.364421][ T1209] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 329.410085][ T1209] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 329.418434][ T1209] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 329.478169][ T24] usb 1-1: USB disconnect, device number 63 [ 329.529761][ T1209] usb 5-1: USB disconnect, device number 48 [ 329.550373][ T8862] fido_id[8862]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 329.685231][ T8868] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.757'. [ 329.697063][ T8868] netlink: 4 bytes leftover after parsing attributes in process `syz.1.757'. [ 329.759414][ T8870] netlink: 392 bytes leftover after parsing attributes in process `syz.3.758'. [ 330.393409][ T8883] netlink: 8 bytes leftover after parsing attributes in process `syz.4.763'. [ 330.560507][ T5929] usb 1-1: new full-speed USB device number 64 using dummy_hcd [ 330.633513][ T8889] netlink: 64 bytes leftover after parsing attributes in process `syz.1.765'. [ 331.419707][ T798] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 331.604302][ T798] usb 5-1: not running at top speed; connect to a high speed hub [ 331.614261][ T798] usb 5-1: config 13 has an invalid interface number: 23 but max is 0 [ 331.622886][ T798] usb 5-1: config 13 has no interface number 0 [ 331.648046][ T798] usb 5-1: config 13 interface 23 altsetting 8 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 331.679847][ T798] usb 5-1: config 13 interface 23 altsetting 8 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 331.712020][ T798] usb 5-1: config 13 interface 23 altsetting 8 has a duplicate endpoint with address 0x9, skipping [ 331.749687][ T798] usb 5-1: config 13 interface 23 has no altsetting 0 [ 331.764559][ T798] usb 5-1: New USB device found, idVendor=0403, idProduct=b810, bcdDevice=45.45 [ 331.777947][ T798] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.794734][ T798] usb 5-1: Product: syz [ 331.798942][ T798] usb 5-1: Manufacturer: syz [ 331.815371][ T798] usb 5-1: SerialNumber: syz [ 331.832122][ T8891] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 332.073903][ T798] ftdi_sio 5-1:13.23: FTDI USB Serial Device converter detected [ 332.083905][ T798] ftdi_sio ttyUSB0: unknown device type: 0x4545 [ 332.138476][ T798] usb 5-1: USB disconnect, device number 49 [ 332.153344][ T798] ftdi_sio 5-1:13.23: device disconnected [ 332.324698][ T1209] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 332.335002][ T1209] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 332.462378][ T8899] fido_id[8899]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 333.276390][ T8913] netlink: 12 bytes leftover after parsing attributes in process `syz.1.771'. [ 333.328339][ T5929] usb 1-1: unable to get BOS descriptor or descriptor too short [ 333.352816][ T5929] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 333.376433][ T5929] usb 1-1: can't read configurations, error -71 [ 333.541212][ T8920] netlink: 68 bytes leftover after parsing attributes in process `syz.0.773'. [ 333.868556][ T8928] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.775'. [ 333.883823][ T8928] netlink: 4 bytes leftover after parsing attributes in process `syz.0.775'. [ 333.907088][ T8930] syzkaller0: entered promiscuous mode [ 333.912777][ T8930] syzkaller0: entered allmulticast mode [ 333.927770][ T8922] kvm: vcpu 1: requested 131070 ns lapic timer period limited to 200000 ns [ 334.446178][ T8937] netlink: 8 bytes leftover after parsing attributes in process `syz.3.779'. [ 335.969676][ T5880] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 336.070441][ T8960] x_tables: duplicate underflow at hook 2 [ 336.161143][ T5880] usb 5-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 336.173380][ T5880] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 336.193646][ T5880] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 336.225527][ T5880] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 336.245726][ T5880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.271879][ T8950] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 336.496091][ T8949] PKCS7: Unknown OID: [4] 0.0 [ 336.542086][ T8949] PKCS7: Only support pkcs7_signedData type [ 336.630313][ T8967] __nla_validate_parse: 3 callbacks suppressed [ 336.630333][ T8967] netlink: 24 bytes leftover after parsing attributes in process `syz.0.786'. [ 336.761859][ T5880] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 336.799842][ T5880] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input19 [ 336.910071][ T5880] usb 5-1: USB disconnect, device number 50 [ 336.916154][ C1] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 337.506838][ T8985] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.791'. [ 337.517353][ T8985] netlink: 4 bytes leftover after parsing attributes in process `syz.3.791'. [ 338.679710][ T5918] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 338.778232][ T9015] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.800'. [ 338.787552][ T9015] openvswitch: netlink: Missing key (keys=40, expected=100) [ 338.856667][ T9016] netlink: 40 bytes leftover after parsing attributes in process `syz.3.802'. [ 338.885945][ T9020] syz_tun: entered allmulticast mode [ 338.982054][ T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.991265][ T5918] usb 5-1: Using ep0 maxpacket: 8 [ 339.059038][ T5918] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 339.193737][ T5918] usb 5-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 339.319645][ T10] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 339.346349][ T5918] usb 5-1: New USB device found, idVendor=2f86, idProduct=e092, bcdDevice=53.3f [ 339.355834][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.365108][ T5918] usb 5-1: Product: syz [ 339.376608][ T5918] usb 5-1: Manufacturer: syz [ 339.396743][ T5918] usb 5-1: SerialNumber: syz [ 339.469713][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 339.598402][ T10] usb 1-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 339.643082][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.663141][ T10] usb 1-1: Product: syz [ 339.667457][ T10] usb 1-1: Manufacturer: syz [ 339.749033][ T10] usb 1-1: SerialNumber: syz [ 340.079312][ T9027] netlink: 24 bytes leftover after parsing attributes in process `syz.3.803'. [ 340.173569][ T9020] netlink: 4 bytes leftover after parsing attributes in process `syz.0.801'. [ 340.219445][ T9020] syz_tun (unregistering): left allmulticast mode [ 340.395796][ T10] usb 1-1: palm_os_4_probe - error -110 getting connection info [ 340.404083][ T10] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 340.416213][ T10] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 340.451367][ T10] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 340.626085][ T10] usb 1-1: USB disconnect, device number 66 [ 340.646799][ T10] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 340.692093][ T10] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 340.754328][ T10] visor 1-1:1.0: device disconnected [ 340.963440][ T9045] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.807'. [ 341.009007][ T9045] netlink: 4 bytes leftover after parsing attributes in process `syz.0.807'. [ 341.167736][ T5929] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 341.319668][ T5929] usb 3-1: Using ep0 maxpacket: 8 [ 341.330087][ T5929] usb 3-1: New USB device found, idVendor=0e41, idProduct=4159, bcdDevice= 0.40 [ 341.345299][ T5929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.373160][ T5929] usb 3-1: Product: syz [ 341.390305][ T5929] usb 3-1: Manufacturer: syz [ 341.396927][ T1209] usb 5-1: USB disconnect, device number 51 [ 341.411665][ T5929] usb 3-1: SerialNumber: syz [ 341.541793][ T9050] use of bytesused == 0 is deprecated and will be removed in the future, [ 341.559147][ T9050] use the actual size instead. [ 341.601139][ T9050] CUSE: DEVNAME unspecified [ 341.607242][ T9050] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 341.666132][ T5929] usb 3-1: Unsupported UAC3 BADD profile [ 341.741010][ T5929] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 341.780300][ T5929] snd_usb_podhd 3-1:1.0: Line 6 POD HD500X found [ 341.800636][ T5929] usb 3-1: selecting invalid altsetting 1 [ 341.826682][ T5929] snd_usb_podhd 3-1:1.0: set_interface failed [ 341.839433][ T5929] snd_usb_podhd 3-1:1.0: Line 6 POD HD500X now disconnected [ 341.871683][ T5929] snd_usb_podhd 3-1:1.0: probe with driver snd_usb_podhd failed with error -22 [ 341.901536][ T10] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 341.936042][ T5929] usb 3-1: USB disconnect, device number 46 [ 341.959234][ T7646] udevd[7646]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 342.049737][ T10] usb 5-1: device descriptor read/64, error -71 [ 342.062269][ T9060] netlink: 'syz.1.812': attribute type 10 has an invalid length. [ 342.065899][ T9060] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.068074][ T9060] bond0: (slave team0): Enslaving as an active interface with an up link [ 342.148651][ T9063] netlink: 96 bytes leftover after parsing attributes in process `syz.1.813'. [ 342.289659][ T10] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 342.377297][ T9070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.814'. [ 342.387975][ T9070] netlink: 48 bytes leftover after parsing attributes in process `syz.1.814'. [ 342.452119][ T10] usb 5-1: device descriptor read/64, error -71 [ 342.582275][ T10] usb usb5-port1: attempt power cycle [ 343.239880][ T10] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 343.310957][ T10] usb 5-1: device descriptor read/8, error -71 [ 343.630775][ T10] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 343.650102][ T10] usb 5-1: device descriptor read/8, error -71 [ 343.759969][ T10] usb usb5-port1: unable to enumerate USB device [ 344.161893][ T9094] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.821'. [ 344.330651][ T9096] netlink: 60 bytes leftover after parsing attributes in process `syz.1.822'. [ 344.522037][ T9100] netlink: 24 bytes leftover after parsing attributes in process `syz.2.819'. [ 344.612687][ T9097] netlink: 4 bytes leftover after parsing attributes in process `syz.3.821'. [ 344.775620][ T9109] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 345.119386][ T9113] netlink: 24 bytes leftover after parsing attributes in process `syz.3.825'. [ 345.258377][ T9115] netlink: 212324 bytes leftover after parsing attributes in process `syz.3.827'. [ 345.502600][ T24] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 345.674200][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 345.711951][ T24] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 345.747237][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 345.770354][ T24] usb 5-1: config 0 has no interface number 0 [ 345.784907][ T24] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 345.797687][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.806125][ T24] usb 5-1: Product: syz [ 345.810753][ T24] usb 5-1: Manufacturer: syz [ 345.815473][ T24] usb 5-1: SerialNumber: syz [ 345.831713][ T24] usb 5-1: config 0 descriptor?? [ 345.848446][ T24] uvcvideo 5-1:0.105: Found Unit with invalid ID 0 [ 345.979728][ T5880] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 346.041356][ T24] uvcvideo 5-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 346.065672][ T24] uvcvideo 5-1:0.105: No valid video chain found. [ 346.083998][ T24] usb 5-1: USB disconnect, device number 56 [ 346.127937][ T9133] syzkaller0: entered promiscuous mode [ 346.139685][ T5880] usb 4-1: Using ep0 maxpacket: 16 [ 346.145068][ T9133] syzkaller0: entered allmulticast mode [ 346.153492][ T5880] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.174157][ T5880] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.186240][ T5880] usb 4-1: config 0 interface 0 has no altsetting 0 [ 346.195603][ T9133] tipc: Started in network mode [ 346.204496][ T9133] tipc: Node identity 069e3cd624db, cluster identity 4711 [ 346.210342][ T5880] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 346.221243][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.240040][ T5880] usb 4-1: config 0 descriptor?? [ 346.257249][ T9133] tipc: Enabled bearer , priority 0 [ 346.268288][ T9133] netlink: 80 bytes leftover after parsing attributes in process `syz.2.831'. [ 346.278927][ T9132] tipc: Resetting bearer [ 346.301927][ T9132] tipc: Disabling bearer [ 346.577235][ T30] kauditd_printk_skb: 80 callbacks suppressed [ 346.577253][ T30] audit: type=1326 audit(1773095960.128:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9139 comm="syz.0.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f847b79c799 code=0x7ffc0000 [ 346.616026][ T30] audit: type=1326 audit(1773095960.168:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9139 comm="syz.0.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f847b79c799 code=0x7ffc0000 [ 346.645001][ T30] audit: type=1326 audit(1773095960.168:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9139 comm="syz.0.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f847b79c799 code=0x7ffc0000 [ 346.669251][ T30] audit: type=1326 audit(1773095960.168:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9139 comm="syz.0.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f847b79c799 code=0x7ffc0000 [ 346.695176][ T30] audit: type=1326 audit(1773095960.168:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9139 comm="syz.0.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f847b79c799 code=0x7ffc0000 [ 346.738980][ T30] audit: type=1326 audit(1773095960.168:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9139 comm="syz.0.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f847b79c799 code=0x7ffc0000 [ 346.793169][ T30] audit: type=1326 audit(1773095960.168:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9139 comm="syz.0.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f847b79c799 code=0x7ffc0000 [ 346.821533][ T30] audit: type=1326 audit(1773095960.168:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9139 comm="syz.0.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f847b79c799 code=0x7ffc0000 [ 346.866766][ T9123] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 346.888540][ T5880] usbhid 4-1:0.0: can't add hid device: -71 [ 346.900432][ T5880] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 346.916606][ T5880] usb 4-1: USB disconnect, device number 49 [ 347.272275][ T9150] tun0: tun_chr_ioctl cmd 1074025675 [ 347.277803][ T9151] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.835'. [ 347.283148][ T9150] tun0: persist disabled [ 347.302761][ T9151] netlink: 4 bytes leftover after parsing attributes in process `syz.4.835'. [ 347.630757][ T10] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 347.769717][ T5929] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 347.790141][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 347.796682][ T10] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 347.818952][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.835588][ T10] pvrusb2: Hardware description: Terratec Grabster AV400 [ 347.843369][ T10] pvrusb2: ********** [ 347.847521][ T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 347.858882][ T10] pvrusb2: Important functionality might not be entirely working. [ 347.867152][ T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 347.882881][ T10] pvrusb2: ********** [ 347.931763][ T5929] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.942986][ T5929] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 348.138177][ T5929] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 348.153855][ T2344] pvrusb2: Invalid write control endpoint [ 348.164770][ T5929] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.215454][ T5929] usb 1-1: config 0 descriptor?? [ 348.293229][ T2344] pvrusb2: Invalid write control endpoint [ 348.320446][ T2344] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 348.357942][ T2344] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 348.416122][ T2344] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 348.452909][ T2344] pvrusb2: Device being rendered inoperable [ 348.475768][ T2344] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 348.497569][ T2344] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 348.533381][ T2344] pvrusb2: Attached sub-driver cx25840 [ 348.546768][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 348.571627][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 348.638673][ T5929] arvo 0003:1E7D:30D4.0013: unbalanced collection at end of report description [ 348.651543][ T5929] arvo 0003:1E7D:30D4.0013: parse failed [ 348.657448][ T5929] arvo 0003:1E7D:30D4.0013: probe with driver arvo failed with error -22 [ 348.672550][ T24] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 348.718065][ T9174] netlink: 24 bytes leftover after parsing attributes in process `syz.4.840'. [ 349.051078][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 349.060969][ T24] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 349.188389][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 349.198232][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 349.210501][ T24] usb 3-1: SerialNumber: syz [ 349.228895][ T24] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 349.443053][ T9167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.453495][ T9167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.978974][ T5880] usb 3-1: USB disconnect, device number 47 [ 350.003341][ T9191] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 350.021041][ T9191] xt_hashlimit: size too large, truncated to 1048576 [ 350.089678][ T24] usb 5-1: new low-speed USB device number 57 using dummy_hcd [ 350.261794][ T798] usb 2-1: USB disconnect, device number 33 [ 350.409694][ T5880] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 350.558339][ T5929] usb 1-1: USB disconnect, device number 67 [ 350.592699][ T5880] usb 3-1: Using ep0 maxpacket: 32 [ 350.606423][ T5880] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 1285, setting to 1024 [ 350.656293][ T5880] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 1024 [ 350.693174][ T5880] usb 3-1: config 0 interface 0 has no altsetting 0 [ 350.721341][ T5880] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 350.750964][ T5880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.775443][ T5880] usb 3-1: Product: syz [ 350.935456][ T5880] usb 3-1: Manufacturer: syz [ 350.940393][ T5880] usb 3-1: SerialNumber: syz [ 350.958401][ T5880] usb 3-1: config 0 descriptor?? [ 350.965270][ T9193] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 351.006520][ T9205] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.850'. [ 351.119762][ T24] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 351.129941][ T9205] netlink: 4 bytes leftover after parsing attributes in process `syz.0.850'. [ 351.320338][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 351.337145][ T24] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 351.354731][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.376264][ T5880] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 351.391699][ T24] usb 5-1: Product: syz [ 351.402372][ T24] usb 5-1: Manufacturer: syz [ 351.407382][ T24] usb 5-1: SerialNumber: syz [ 351.416674][ T24] usb 5-1: config 0 descriptor?? [ 351.859925][ T5880] usb 3-1: USB disconnect, device number 48 [ 351.974597][ T9233] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 352.040053][ T5893] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 352.064492][ T9198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.090512][ T9198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.130854][ T24] peak_usb 5-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 352.199631][ T5893] usb 4-1: device descriptor read/64, error -71 [ 352.258165][ T24] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 352.292602][ T24] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 352.373688][ T24] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -22 [ 352.407074][ T24] usb 5-1: USB disconnect, device number 58 [ 352.499668][ T5893] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 352.532898][ T9239] netlink: 24 bytes leftover after parsing attributes in process `syz.0.854'. [ 352.789637][ T5893] usb 4-1: device descriptor read/64, error -71 [ 352.823133][ T5929] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 352.902330][ T5893] usb usb4-port1: attempt power cycle [ 352.995954][ T5929] usb 2-1: config 1 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 353.023197][ T5929] usb 2-1: config 1 interface 0 altsetting 64 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 353.043680][ T5929] usb 2-1: config 1 interface 0 has no altsetting 0 [ 353.052125][ T5929] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 353.062538][ T5929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 353.073251][ T5929] usb 2-1: SerialNumber: syz [ 353.092140][ T5929] hub 2-1:1.0: bad descriptor, ignoring hub [ 353.104959][ T5929] hub 2-1:1.0: probe with driver hub failed with error -5 [ 353.113438][ T5929] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 353.230694][ T24] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 353.259682][ T5893] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 353.282347][ T5893] usb 4-1: device descriptor read/8, error -71 [ 353.301609][ T5929] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 353.330221][ T5929] usb 2-1: USB disconnect, device number 35 [ 353.389925][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 353.397421][ T24] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 353.406590][ T798] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 353.414532][ T24] usb 5-1: config 0 has no interface number 0 [ 353.421191][ T5880] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 353.431552][ T24] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 353.441156][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.449168][ T24] usb 5-1: Product: syz [ 353.453455][ T24] usb 5-1: Manufacturer: syz [ 353.458082][ T24] usb 5-1: SerialNumber: syz [ 353.465886][ T24] usb 5-1: config 0 descriptor?? [ 353.474558][ T24] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 353.519840][ T5893] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 353.540631][ T5893] usb 4-1: device descriptor read/8, error -71 [ 353.579656][ T5880] usb 1-1: Using ep0 maxpacket: 32 [ 353.586670][ T798] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 353.596268][ T798] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.606362][ T5880] usb 1-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 353.616190][ T5880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.625506][ T798] usb 3-1: config 0 descriptor?? [ 353.635470][ T5880] usb 1-1: Product: syz [ 353.639820][ T5880] usb 1-1: Manufacturer: syz [ 353.646747][ T798] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 353.652963][ T5880] usb 1-1: SerialNumber: syz [ 353.658870][ T5893] usb usb4-port1: unable to enumerate USB device [ 353.666784][ T5880] usb 1-1: config 0 descriptor?? [ 353.676147][ T5880] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 353.686082][ T24] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 353.698672][ T24] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 353.885162][ T5827] Bluetooth: hci3: unexpected event for opcode 0x042c [ 354.394318][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 354.402059][ T5893] usb 5-1: USB disconnect, device number 59 [ 354.426459][ T5893] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 354.491091][ T5893] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 354.511402][ T5893] quatech2 5-1:0.51: device disconnected [ 354.575427][ T798] gspca_cpia1: usb_control_msg 03, error -71 [ 354.615336][ T798] gspca_cpia1: usb_control_msg 01, error -71 [ 354.623221][ T798] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0) [ 354.647222][ T798] usb 3-1: USB disconnect, device number 49 [ 354.779130][ T9270] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.864'. [ 354.807718][ T9270] netlink: 4 bytes leftover after parsing attributes in process `syz.2.864'. [ 355.084276][ T5880] gspca_topro: Sensor cx0342 [ 355.194951][ T9279] sch_tbf: burst 1447 is lower than device macvtap0 mtu (1514) ! [ 355.294853][ T5880] usb 1-1: USB disconnect, device number 68 [ 355.614980][ T10] usb 2-1: new low-speed USB device number 36 using dummy_hcd [ 355.786540][ T9293] FAULT_INJECTION: forcing a failure. [ 355.786540][ T9293] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 355.800145][ T9293] CPU: 0 UID: 0 PID: 9293 Comm: syz.2.871 Tainted: G L syzkaller #0 PREEMPT(full) [ 355.800182][ T9293] Tainted: [L]=SOFTLOCKUP [ 355.800189][ T9293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 355.800199][ T9293] Call Trace: [ 355.800206][ T9293] [ 355.800214][ T9293] dump_stack_lvl+0xe8/0x150 [ 355.800248][ T9293] should_fail_ex+0x412/0x560 [ 355.800275][ T9293] _copy_from_user+0x2d/0xb0 [ 355.800302][ T9293] ___sys_sendmsg+0x1c6/0x360 [ 355.800325][ T9293] ? __pfx____sys_sendmsg+0x10/0x10 [ 355.800373][ T9293] ? __fget_files+0x2a/0x420 [ 355.800398][ T9293] ? __fget_files+0x3a0/0x420 [ 355.800430][ T9293] __x64_sys_sendmsg+0x1bd/0x2a0 [ 355.800451][ T9293] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 355.800476][ T9293] ? __pfx_ksys_write+0x10/0x10 [ 355.800505][ T9293] do_syscall_64+0x14d/0xf80 [ 355.800522][ T9293] ? trace_irq_disable+0x3b/0x150 [ 355.800547][ T9293] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.800565][ T9293] ? clear_bhb_loop+0x40/0x90 [ 355.800587][ T9293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.800604][ T9293] RIP: 0033:0x7f1d21d9c799 [ 355.800622][ T9293] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 355.800639][ T9293] RSP: 002b:00007f1d1ffd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 355.800658][ T9293] RAX: ffffffffffffffda RBX: 00007f1d22016180 RCX: 00007f1d21d9c799 [ 355.800670][ T9293] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000008 [ 355.800682][ T9293] RBP: 00007f1d1ffd5090 R08: 0000000000000000 R09: 0000000000000000 [ 355.800693][ T9293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 355.800703][ T9293] R13: 00007f1d22016218 R14: 00007f1d22016180 R15: 00007f1d2213fa48 [ 355.800730][ T9293] [ 356.030353][ T10] usb 2-1: config 0 has no interfaces? [ 356.033357][ T9295] netlink: 24 bytes leftover after parsing attributes in process `syz.3.870'. [ 356.035980][ T10] usb 2-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 356.053860][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.081060][ T10] usb 2-1: config 0 descriptor?? [ 356.958155][ T9311] netlink: 64 bytes leftover after parsing attributes in process `syz.2.872'. [ 356.976335][ T9310] netlink: 20 bytes leftover after parsing attributes in process `syz.0.874'. [ 356.985596][ T9310] netlink: 20 bytes leftover after parsing attributes in process `syz.0.874'. [ 357.425055][ T5929] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 357.459406][ T9323] netlink: 24 bytes leftover after parsing attributes in process `syz.4.877'. [ 357.482586][ T5929] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 357.925398][ T9337] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.881'. [ 357.936291][ T9337] netlink: 4 bytes leftover after parsing attributes in process `syz.2.881'. [ 358.335581][ T10] usb 2-1: USB disconnect, device number 36 [ 358.446891][ T9344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.883'. [ 358.937564][ T9352] netlink: 64 bytes leftover after parsing attributes in process `syz.3.884'. [ 359.456292][ T9359] netlink: 'syz.0.887': attribute type 29 has an invalid length. [ 359.521804][ T9359] netlink: 64 bytes leftover after parsing attributes in process `syz.0.887'. [ 360.231859][ T9364] netlink: 24 bytes leftover after parsing attributes in process `syz.1.885'. [ 360.869015][ T9365] netlink: 392 bytes leftover after parsing attributes in process `syz.2.889'. [ 361.109767][ T798] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 361.318414][ T798] usb 5-1: Using ep0 maxpacket: 16 [ 361.331486][ T798] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.347160][ T798] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.362259][ T798] usb 5-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 361.461000][ T798] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.506106][ T798] usb 5-1: config 0 descriptor?? [ 361.587591][ T9385] binder: 9384:9385 ioctl 4018620d 0 returned -22 [ 361.996605][ T9368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.049851][ T9368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.100945][ T798] usbhid 5-1:0.0: can't add hid device: -71 [ 362.108938][ T798] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 362.147623][ T798] usb 5-1: USB disconnect, device number 60 [ 362.187992][ T9393] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.896'. [ 362.198596][ T9393] netlink: 4 bytes leftover after parsing attributes in process `syz.1.896'. [ 362.669656][ T798] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 362.821641][ T798] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.835565][ T798] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 362.854245][ T798] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 362.877115][ T798] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.892887][ T798] usb 4-1: config 0 descriptor?? [ 363.325511][ T798] hid-steam 0003:28DE:1142.0015: unknown main item tag 0x0 [ 363.341240][ T798] hid-steam 0003:28DE:1142.0015: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 363.412327][ T798] hid-steam 0003:28DE:1142.0015: Steam wireless receiver connected [ 363.426025][ T798] hid-steam 0003:28DE:1142.0016: unknown main item tag 0x0 [ 363.463856][ T798] hid-steam 0003:28DE:1142.0016: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 363.615200][ T9419] netlink: 64 bytes leftover after parsing attributes in process `syz.1.903'. [ 363.870121][ T5929] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 363.979751][ T10] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 364.008931][ T9427] netlink: 24 bytes leftover after parsing attributes in process `syz.2.905'. [ 364.020038][ T5929] usb 2-1: Using ep0 maxpacket: 16 [ 364.169436][ T5929] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 364.181518][ T5929] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 364.200966][ T10] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 364.215033][ T10] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 364.230002][ T5929] usb 2-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 364.242251][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.250758][ T5929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.267309][ T10] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 364.316783][ T5929] usb 2-1: config 0 descriptor?? [ 364.369401][ T9430] netlink: 24 bytes leftover after parsing attributes in process `syz.0.906'. [ 364.791729][ T5929] logitech 0003:046D:C295.0017: unknown main item tag 0x0 [ 364.805148][ T5929] logitech 0003:046D:C295.0017: unknown main item tag 0x0 [ 364.813163][ T5929] logitech 0003:046D:C295.0017: unknown main item tag 0x0 [ 364.841900][ T5929] logitech 0003:046D:C295.0017: unknown main item tag 0x0 [ 364.867256][ T5929] logitech 0003:046D:C295.0017: unknown main item tag 0x0 [ 364.933036][ T5929] logitech 0003:046D:C295.0017: unknown main item tag 0x0 [ 364.954382][ T5929] logitech 0003:046D:C295.0017: unknown main item tag 0x0 [ 364.982984][ T5929] logitech 0003:046D:C295.0017: unknown main item tag 0x0 [ 365.083224][ T5929] logitech 0003:046D:C295.0017: hidraw1: USB HID v0.fe Device [HID 046d:c295] on usb-dummy_hcd.1-1/input0 [ 365.136177][ T5929] logitech 0003:046D:C295.0017: no inputs found [ 365.206596][ T9440] ================================================================== [ 365.214760][ T9440] BUG: KASAN: slab-use-after-free in report_descriptor_read+0xb5/0x100 [ 365.223154][ T9440] Read of size 41 at addr ffff888032febe80 by task fido_id/9440 [ 365.230789][ T9440] [ 365.233248][ T9440] CPU: 1 UID: 0 PID: 9440 Comm: fido_id Tainted: G L syzkaller #0 PREEMPT(full) [ 365.233273][ T9440] Tainted: [L]=SOFTLOCKUP [ 365.233277][ T9440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 365.233288][ T9440] Call Trace: [ 365.233298][ T9440] [ 365.233306][ T9440] dump_stack_lvl+0xe8/0x150 [ 365.233422][ T9440] print_report+0xba/0x230 [ 365.233442][ T9440] ? report_descriptor_read+0xb5/0x100 [ 365.233483][ T9440] kasan_report+0x117/0x150 [ 365.233513][ T9440] ? report_descriptor_read+0xb5/0x100 [ 365.233527][ T9440] kasan_check_range+0x264/0x2c0 [ 365.233539][ T9440] ? report_descriptor_read+0xb5/0x100 [ 365.233551][ T9440] __asan_memcpy+0x29/0x70 [ 365.233560][ T9440] report_descriptor_read+0xb5/0x100 [ 365.233573][ T9440] ? __pfx_sysfs_kf_bin_read+0x10/0x10 [ 365.233600][ T9440] kernfs_fop_read_iter+0x451/0x6b0 [ 365.233612][ T9440] vfs_read+0x582/0xa70 [ 365.233630][ T9440] ? __pfx_vfs_read+0x10/0x10 [ 365.233639][ T9440] ? kmem_cache_free+0x187/0x630 [ 365.233650][ T9440] ? fd_install+0x94/0x3d0 [ 365.233665][ T9440] ? do_sys_openat2+0x14c/0x200 [ 365.233681][ T9440] ksys_read+0x150/0x270 [ 365.233690][ T9440] ? __pfx_ksys_read+0x10/0x10 [ 365.233702][ T9440] do_syscall_64+0x14d/0xf80 [ 365.233765][ T9440] ? trace_irq_disable+0x3b/0x150 [ 365.233794][ T9440] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.233813][ T9440] ? clear_bhb_loop+0x40/0x90 [ 365.233823][ T9440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.233860][ T9440] RIP: 0033:0x7f268c6a7407 [ 365.233894][ T9440] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 365.233903][ T9440] RSP: 002b:00007ffd30ec97a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 365.233941][ T9440] RAX: ffffffffffffffda RBX: 00007f268ce3f880 RCX: 00007f268c6a7407 [ 365.233948][ T9440] RDX: 0000000000001000 RSI: 00007ffd30ec97f0 RDI: 0000000000000004 [ 365.233955][ T9440] RBP: 000056323a187730 R08: 0000000000000000 R09: 0000000000000000 [ 365.233961][ T9440] R10: 0000000000000000 R11: 0000000000000202 R12: 000056323a186930 [ 365.233967][ T9440] R13: 00007ffd30ec97f0 R14: 0000000000000004 R15: 00005631feaa34d8 [ 365.233977][ T9440] [ 365.233980][ T9440] [ 365.390546][ T10] stv0680 5-1:4.0: STV(e): camera ping failed!! [ 365.402562][ T9440] Allocated by task 5929: [ 365.402645][ T9440] kasan_save_track+0x3e/0x80 [ 365.402670][ T9440] __kasan_kmalloc+0x93/0xb0 [ 365.402685][ T9440] __kmalloc_node_track_caller_noprof+0x4db/0x7b0 [ 365.402702][ T9440] kmemdup_noprof+0x2b/0x70 [ 365.488095][ T9440] hid_open_report+0x216/0xf00 [ 365.492869][ T9440] lg_probe+0x29c/0x8a0 [ 365.497090][ T9440] hid_device_probe+0x416/0x7a0 [ 365.501941][ T9440] really_probe+0x267/0xaf0 [ 365.506517][ T9440] __driver_probe_device+0x18c/0x320 [ 365.511797][ T9440] driver_probe_device+0x4f/0x240 [ 365.516811][ T9440] __device_attach_driver+0x279/0x430 [ 365.522189][ T9440] bus_for_each_drv+0x258/0x2f0 [ 365.527092][ T9440] __device_attach+0x2c5/0x450 [ 365.531927][ T9440] device_initial_probe+0xa1/0xd0 [ 365.536939][ T9440] bus_probe_device+0x12a/0x220 [ 365.541780][ T9440] device_add+0x7b6/0xb70 [ 365.546096][ T9440] hid_add_device+0x272/0x3e0 [ 365.550764][ T9440] usbhid_probe+0xe3a/0x12f0 [ 365.555407][ T9440] usb_probe_interface+0x668/0xc90 [ 365.560570][ T9440] really_probe+0x267/0xaf0 [ 365.565070][ T9440] __driver_probe_device+0x18c/0x320 [ 365.570341][ T9440] driver_probe_device+0x4f/0x240 [ 365.575355][ T9440] __device_attach_driver+0x279/0x430 [ 365.580715][ T9440] bus_for_each_drv+0x258/0x2f0 [ 365.585560][ T9440] __device_attach+0x2c5/0x450 [ 365.590307][ T9440] device_initial_probe+0xa1/0xd0 [ 365.595317][ T9440] bus_probe_device+0x12a/0x220 [ 365.600158][ T9440] device_add+0x7b6/0xb70 [ 365.604478][ T9440] usb_set_configuration+0x1a87/0x2110 [ 365.609928][ T9440] usb_generic_driver_probe+0x8d/0x150 [ 365.615443][ T9440] usb_probe_device+0x1c4/0x3b0 [ 365.620285][ T9440] really_probe+0x267/0xaf0 [ 365.624898][ T9440] __driver_probe_device+0x18c/0x320 [ 365.630171][ T9440] driver_probe_device+0x4f/0x240 [ 365.635185][ T9440] __device_attach_driver+0x279/0x430 [ 365.640544][ T9440] bus_for_each_drv+0x258/0x2f0 [ 365.645387][ T9440] __device_attach+0x2c5/0x450 [ 365.650215][ T9440] device_initial_probe+0xa1/0xd0 [ 365.655230][ T9440] bus_probe_device+0x12a/0x220 [ 365.660073][ T9440] device_add+0x7b6/0xb70 [ 365.664384][ T9440] usb_new_device+0xa08/0x16f0 [ 365.669268][ T9440] hub_event+0x2a1c/0x4f30 [ 365.673766][ T9440] process_scheduled_works+0xb02/0x1830 [ 365.679501][ T9440] worker_thread+0xa50/0xfc0 [ 365.684079][ T9440] kthread+0x388/0x470 [ 365.688141][ T9440] ret_from_fork+0x51e/0xb90 [ 365.692730][ T9440] ret_from_fork_asm+0x1a/0x30 [ 365.697491][ T9440] [ 365.699806][ T9440] Freed by task 5929: [ 365.703780][ T9440] kasan_save_track+0x3e/0x80 [ 365.708446][ T9440] kasan_save_free_info+0x46/0x50 [ 365.713468][ T9440] __kasan_slab_free+0x5c/0x80 [ 365.718242][ T9440] kfree+0x1c1/0x630 [ 365.722296][ T9440] hid_close_report+0x632/0x720 [ 365.727219][ T9440] hid_device_probe+0x659/0x7a0 [ 365.732061][ T9440] really_probe+0x267/0xaf0 [ 365.736739][ T9440] __driver_probe_device+0x18c/0x320 [ 365.742009][ T9440] driver_probe_device+0x4f/0x240 [ 365.747117][ T9440] __device_attach_driver+0x279/0x430 [ 365.752566][ T9440] bus_for_each_drv+0x258/0x2f0 [ 365.757407][ T9440] __device_attach+0x2c5/0x450 [ 365.762173][ T9440] device_initial_probe+0xa1/0xd0 [ 365.767192][ T9440] bus_probe_device+0x12a/0x220 [ 365.772207][ T9440] device_add+0x7b6/0xb70 [ 365.776520][ T9440] hid_add_device+0x272/0x3e0 [ 365.781182][ T9440] usbhid_probe+0xe3a/0x12f0 [ 365.785787][ T9440] usb_probe_interface+0x668/0xc90 [ 365.794281][ T9440] really_probe+0x267/0xaf0 [ 365.798786][ T9440] __driver_probe_device+0x18c/0x320 [ 365.804098][ T9440] driver_probe_device+0x4f/0x240 [ 365.809115][ T9440] __device_attach_driver+0x279/0x430 [ 365.814475][ T9440] bus_for_each_drv+0x258/0x2f0 [ 365.819317][ T9440] __device_attach+0x2c5/0x450 [ 365.824159][ T9440] device_initial_probe+0xa1/0xd0 [ 365.829431][ T9440] bus_probe_device+0x12a/0x220 [ 365.834279][ T9440] device_add+0x7b6/0xb70 [ 365.838595][ T9440] usb_set_configuration+0x1a87/0x2110 [ 365.844041][ T9440] usb_generic_driver_probe+0x8d/0x150 [ 365.849486][ T9440] usb_probe_device+0x1c4/0x3b0 [ 365.854323][ T9440] really_probe+0x267/0xaf0 [ 365.858818][ T9440] __driver_probe_device+0x18c/0x320 [ 365.864350][ T9440] driver_probe_device+0x4f/0x240 [ 365.869449][ T9440] __device_attach_driver+0x279/0x430 [ 365.874941][ T9440] bus_for_each_drv+0x258/0x2f0 [ 365.879806][ T9440] __device_attach+0x2c5/0x450 [ 365.884558][ T9440] device_initial_probe+0xa1/0xd0 [ 365.889581][ T9440] bus_probe_device+0x12a/0x220 [ 365.894428][ T9440] device_add+0x7b6/0xb70 [ 365.898741][ T9440] usb_new_device+0xa08/0x16f0 [ 365.903498][ T9440] hub_event+0x2a1c/0x4f30 [ 365.907902][ T9440] process_scheduled_works+0xb02/0x1830 [ 365.913436][ T9440] worker_thread+0xa50/0xfc0 [ 365.918016][ T9440] kthread+0x388/0x470 [ 365.922066][ T9440] ret_from_fork+0x51e/0xb90 [ 365.926665][ T9440] ret_from_fork_asm+0x1a/0x30 [ 365.931429][ T9440] [ 365.933737][ T9440] The buggy address belongs to the object at ffff888032febe80 [ 365.933737][ T9440] which belongs to the cache kmalloc-64 of size 64 [ 365.947703][ T9440] The buggy address is located 0 bytes inside of [ 365.947703][ T9440] freed 64-byte region [ffff888032febe80, ffff888032febec0) [ 365.961253][ T9440] [ 365.963566][ T9440] The buggy address belongs to the physical page: [ 365.970204][ T9440] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x32feb [ 365.979044][ T9440] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 365.986200][ T9440] page_type: f5(slab) [ 365.990255][ T9440] raw: 00fff00000000000 ffff88813fea88c0 dead000000000100 dead000000000122 [ 365.998900][ T9440] raw: 0000000000000000 0000000800200020 00000000f5000000 0000000000000000 [ 366.007676][ T9440] page dumped because: kasan: bad access detected [ 366.014190][ T9440] page_owner tracks the page as allocated [ 366.019931][ T9440] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5160, tgid 5160 (mkdir), ts 23195214806, free_ts 19035647330 [ 366.040505][ T9440] post_alloc_hook+0x231/0x280 [ 366.045468][ T9440] get_page_from_freelist+0x24dc/0x2580 [ 366.051112][ T9440] __alloc_frozen_pages_noprof+0x18d/0x380 [ 366.056907][ T9440] allocate_slab+0x77/0x660 [ 366.061504][ T9440] refill_objects+0x331/0x3c0 [ 366.066191][ T9440] __pcs_replace_empty_main+0x2f9/0x5e0 [ 366.071849][ T9440] __kmalloc_noprof+0x474/0x760 [ 366.076694][ T9440] tomoyo_commit_ok+0x29/0x1d0 [ 366.081639][ T9440] tomoyo_update_domain+0x54a/0x880 [ 366.086825][ T9440] tomoyo_write_file+0x3d1/0xc50 [ 366.091770][ T9440] tomoyo_supervisor+0x1208/0x1570 [ 366.097031][ T9440] tomoyo_path_permission+0x25a/0x380 [ 366.102496][ T9440] tomoyo_check_open_permission+0x2b2/0x470 [ 366.108397][ T9440] security_file_open+0xa9/0x240 [ 366.113390][ T9440] do_dentry_open+0x384/0x14e0 [ 366.118151][ T9440] vfs_open+0x3b/0x340 [ 366.122209][ T9440] page last free pid 1209 tgid 1209 stack trace: [ 366.128728][ T9440] __free_frozen_pages+0xc2b/0xdb0 [ 366.134004][ T9440] kasan_depopulate_vmalloc_pte+0x6d/0x90 [ 366.139709][ T9440] __apply_to_page_range+0xbdc/0x1420 [ 366.145081][ T9440] __kasan_release_vmalloc+0xa2/0xd0 [ 366.150371][ T9440] purge_vmap_node+0x220/0x960 [ 366.155142][ T9440] __purge_vmap_area_lazy+0x779/0xb70 [ 366.160616][ T9440] drain_vmap_area_work+0x27/0x40 [ 366.165662][ T9440] process_scheduled_works+0xb02/0x1830 [ 366.171299][ T9440] worker_thread+0xa50/0xfc0 [ 366.175882][ T9440] kthread+0x388/0x470 [ 366.179988][ T9440] ret_from_fork+0x51e/0xb90 [ 366.184570][ T9440] ret_from_fork_asm+0x1a/0x30 [ 366.189347][ T9440] [ 366.191668][ T9440] Memory state around the buggy address: [ 366.197359][ T9440] ffff888032febd80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 366.206020][ T9440] ffff888032febe00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 366.214082][ T9440] >ffff888032febe80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 366.222136][ T9440] ^ [ 366.226201][ T9440] ffff888032febf00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 366.234349][ T9440] ffff888032febf80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 366.242398][ T9440] ================================================================== [ 366.259734][ T24] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 366.394219][ T5917] usb 4-1: USB disconnect, device number 54 [ 366.422665][ T5917] hid-steam 0003:28DE:1142.0015: Steam wireless receiver disconnected [ 366.479672][ T9440] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 366.486920][ T9440] CPU: 1 UID: 0 PID: 9440 Comm: fido_id Tainted: G L syzkaller #0 PREEMPT(full) [ 366.497520][ T9440] Tainted: [L]=SOFTLOCKUP [ 366.501852][ T9440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 366.512015][ T9440] Call Trace: [ 366.515315][ T9440] [ 366.518255][ T9440] vpanic+0x56c/0xa60 [ 366.522443][ T9440] ? __pfx_vpanic+0x10/0x10 [ 366.526987][ T9440] ? __pfx___schedule+0x10/0x10 [ 366.531984][ T9440] panic+0xc5/0xd0 [ 366.535704][ T9440] ? __pfx_panic+0x10/0x10 [ 366.540110][ T9440] ? preempt_schedule_thunk+0x16/0x30 [ 366.545492][ T9440] ? report_descriptor_read+0xb5/0x100 [ 366.550946][ T9440] check_panic_on_warn+0x89/0xb0 [ 366.555875][ T9440] ? report_descriptor_read+0xb5/0x100 [ 366.561414][ T9440] end_report+0x73/0x180 [ 366.565657][ T9440] ? report_descriptor_read+0xb5/0x100 [ 366.571106][ T9440] kasan_report+0x128/0x150 [ 366.575604][ T9440] ? report_descriptor_read+0xb5/0x100 [ 366.581057][ T9440] kasan_check_range+0x264/0x2c0 [ 366.585987][ T9440] ? report_descriptor_read+0xb5/0x100 [ 366.591443][ T9440] __asan_memcpy+0x29/0x70 [ 366.595849][ T9440] report_descriptor_read+0xb5/0x100 [ 366.601129][ T9440] ? __pfx_sysfs_kf_bin_read+0x10/0x10 [ 366.606599][ T9440] kernfs_fop_read_iter+0x451/0x6b0 [ 366.611893][ T9440] vfs_read+0x582/0xa70 [ 366.616103][ T9440] ? __pfx_vfs_read+0x10/0x10 [ 366.621039][ T9440] ? kmem_cache_free+0x187/0x630 [ 366.625968][ T9440] ? fd_install+0x94/0x3d0 [ 366.630380][ T9440] ? do_sys_openat2+0x14c/0x200 [ 366.635270][ T9440] ksys_read+0x150/0x270 [ 366.639603][ T9440] ? __pfx_ksys_read+0x10/0x10 [ 366.644375][ T9440] do_syscall_64+0x14d/0xf80 [ 366.649218][ T9440] ? trace_irq_disable+0x3b/0x150 [ 366.654237][ T9440] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.660639][ T9440] ? clear_bhb_loop+0x40/0x90 [ 366.665485][ T9440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.671387][ T9440] RIP: 0033:0x7f268c6a7407 [ 366.675806][ T9440] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 366.695787][ T9440] RSP: 002b:00007ffd30ec97a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 366.704201][ T9440] RAX: ffffffffffffffda RBX: 00007f268ce3f880 RCX: 00007f268c6a7407 [ 366.712163][ T9440] RDX: 0000000000001000 RSI: 00007ffd30ec97f0 RDI: 0000000000000004 [ 366.720123][ T9440] RBP: 000056323a187730 R08: 0000000000000000 R09: 0000000000000000 [ 366.728111][ T9440] R10: 0000000000000000 R11: 0000000000000202 R12: 000056323a186930 [ 366.736285][ T9440] R13: 00007ffd30ec97f0 R14: 0000000000000004 R15: 00005631feaa34d8 [ 366.744275][ T9440] [ 366.747674][ T9440] Kernel Offset: disabled [ 366.752012][ T9440] Rebooting in 86400 seconds..