last executing test programs: 26m50.33827596s ago: executing program 4 (id=365): socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0x6, &(0x7f0000006680)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)) r1 = syz_open_pts(r0, 0x101000) ioctl$TIOCMSET(r1, 0x5418, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, r6) r7 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) sendmmsg$unix(r4, &(0x7f0000003d80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {r3, r8}}}], 0x20, 0x4004014}}], 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0xa4, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0x7, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xf4240}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0xa4}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r11, {0xb, 0xfff2}, {0x10, 0xb}, {0x2, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x5012}, 0x20000050) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 26m48.342261443s ago: executing program 4 (id=369): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8680, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x39, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/ttyUSB0\x00', 0x12df00, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 26m44.336715086s ago: executing program 4 (id=378): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000280)={r0, r1, 0x16, 0x0, 0x0, 0x9, 0x9, 0x10cf, 0x5500, 0x43, 0x2, 0x8, 'syz1\x00'}) io_uring_setup(0x4a88, &(0x7f0000000440)={0x0, 0xe1d8, 0x800, 0x0, 0x2b6}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x240000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, 0x0, 0x777) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x979f, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) ioctl$XFS_IOC_GETBMAP(r3, 0xc0205826, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000005000)=[{{0x0, 0x0, 0x0}, 0xdb1}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f00000006c0)=""/201, 0xc9}, {&(0x7f00000007c0)=""/228, 0xe4}, {&(0x7f00000008c0)=""/107, 0x6b}, {&(0x7f0000000940)=""/34, 0x22}, {&(0x7f0000000980)=""/3, 0x3}, {&(0x7f00000009c0)=""/134, 0x86}, {&(0x7f0000000a80)=""/125, 0x7d}, {&(0x7f0000000b00)=""/190, 0xbe}, {&(0x7f0000000bc0)=""/126, 0x7e}, {&(0x7f0000000c40)=""/4096, 0x1000}], 0xa}, 0x7}], 0x3, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x6, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x4000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r8}, &(0x7f0000000180), &(0x7f0000000280)=r7}, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/net/veth0/threaded\x00', 0x2, 0x0) 26m43.699632073s ago: executing program 4 (id=381): connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000380)=@framed={{}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa1}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x60, 0x10, 0x0, 0xfffffffffffffd1c}, 0x80) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a000100000000ff010000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014"], 0x30}}, 0x40010) r1 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000c00)={0xe9, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x6, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x1], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffdfff, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0x9, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0xffc, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r1, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r1, 0x4142, 0x0) ppoll(&(0x7f00000000c0)=[{r1, 0x50a2}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r1, 0x40084146, &(0x7f0000000140)=0x8) 26m38.955241399s ago: executing program 4 (id=388): r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) r1 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8000, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x826, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0}, 0x94) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x800) (fail_nth: 2) 26m37.012416598s ago: executing program 4 (id=391): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000280)={r0, r1, 0x16, 0x0, 0x0, 0x9, 0x9, 0x10cf, 0x5500, 0x43, 0x2, 0x8, 'syz1\x00'}) io_uring_setup(0x4a88, &(0x7f0000000440)={0x0, 0xe1d8, 0x800, 0x0, 0x2b6}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x240000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, 0x0, 0x777) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x979f, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) ioctl$XFS_IOC_GETBMAP(r3, 0xc0205826, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000005000)=[{{0x0, 0x0, 0x0}, 0xdb1}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f00000006c0)=""/201, 0xc9}, {&(0x7f00000007c0)=""/228, 0xe4}, {&(0x7f00000008c0)=""/107, 0x6b}, {&(0x7f0000000940)=""/34, 0x22}, {&(0x7f0000000980)=""/3, 0x3}, {&(0x7f00000009c0)=""/134, 0x86}, {&(0x7f0000000a80)=""/125, 0x7d}, {&(0x7f0000000b00)=""/190, 0xbe}, {&(0x7f0000000bc0)=""/126, 0x7e}, {&(0x7f0000000c40)=""/4096, 0x1000}], 0xa}, 0x7}], 0x3, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x6, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x4000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r8}, &(0x7f0000000180), &(0x7f0000000280)=r7}, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/net/veth0/threaded\x00', 0x2, 0x0) 26m21.769627069s ago: executing program 32 (id=391): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000280)={r0, r1, 0x16, 0x0, 0x0, 0x9, 0x9, 0x10cf, 0x5500, 0x43, 0x2, 0x8, 'syz1\x00'}) io_uring_setup(0x4a88, &(0x7f0000000440)={0x0, 0xe1d8, 0x800, 0x0, 0x2b6}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x240000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, 0x0, 0x777) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x979f, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) ioctl$XFS_IOC_GETBMAP(r3, 0xc0205826, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000005000)=[{{0x0, 0x0, 0x0}, 0xdb1}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f00000006c0)=""/201, 0xc9}, {&(0x7f00000007c0)=""/228, 0xe4}, {&(0x7f00000008c0)=""/107, 0x6b}, {&(0x7f0000000940)=""/34, 0x22}, {&(0x7f0000000980)=""/3, 0x3}, {&(0x7f00000009c0)=""/134, 0x86}, {&(0x7f0000000a80)=""/125, 0x7d}, {&(0x7f0000000b00)=""/190, 0xbe}, {&(0x7f0000000bc0)=""/126, 0x7e}, {&(0x7f0000000c40)=""/4096, 0x1000}], 0xa}, 0x7}], 0x3, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x6, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x4000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r8}, &(0x7f0000000180), &(0x7f0000000280)=r7}, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/net/veth0/threaded\x00', 0x2, 0x0) 21m44.101353599s ago: executing program 1 (id=821): writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001500add427323b472545b4560a117fff0b0082001b5980000efffeffe809000000ff0000f03ac7100003ffffffff", 0x32}], 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="31200000000000000c002b80080003002000"], 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r2 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x14, &(0x7f0000000380), 0x4) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000200)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x4, 0x2}}, 0x80, 0x0}, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000124d5240e316e9f958000000000109021b00010000000009047800018fa68d000905", @ANYRES16, @ANYRES16=r2, @ANYBLOB="6fdbae284617bb3776cf4a1c9f4645f9ac73ff1867f927211f7bb88176302543816061993b706b2f666123810eade0fae8d642847aee0482172618cccbc1c19dc6b59293a7eaacc7626236f102737743c01e6a7fd3fdec4e5170ceb139415fb6e9928259ee22a58b5991cdc048ace2324880e54c43984f6166fa98240016d5308cf0fcc6", @ANYRES8=r2, @ANYBLOB="8c9cac997d3e0263c480eca01112d207410e2bdd874a27f4b15e073e11c67c0ae00e081849c2e2bedd873ccc640c7e1355285af5da55d0b6977b57"], 0x0) syz_open_dev$mouse(&(0x7f0000000040), 0x1, 0x24800) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r6, 0xe400, 0x0}, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="0e00"}) syz_usb_connect(0x1, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000305bfdd082e0c0007f4d40102030109022400016406200b0904ad8e02df30059e09050e124000fafa010905"], &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) socket$rxrpc(0x21, 0x2, 0x2) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) close(0x3) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r8}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r9}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r10}, 0xc) 21m41.035476891s ago: executing program 5 (id=824): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0x4) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2(&(0x7f0000000080), 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) recvmsg$kcm(r3, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f00000017c0)=""/4096, 0x1000}], 0x1}, 0x10022) sendmsg$inet(r3, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000640)="a1", 0x1}], 0x1}, 0x0) recvmsg$kcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/43, 0x2b}], 0x1}, 0x40) 21m40.362216809s ago: executing program 1 (id=825): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x40, 0x1, 0x2}, 0x30, 0x0) landlock_restrict_self(r0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000a40)='./file0\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002100)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000002080)={0x1, 0x1, 0x3, 0xdf57}) flock(r1, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r2, &(0x7f0000000040)={0x2020}, 0x229) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r4) sendmsg$NLBL_CIPSOV4_C_LISTALL(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="0103a214f3eb00010000040000008f8ae19d79a5aa006bfdfb914b566a2b0aca0a0c80a30055cde782000983b2cc337528c37ce9dfaedba7ebcf078f3c80167a0b4216c12606a3d20967f82c235fcb2755d87b3d197f5b0508b3046502ecc750e43c1355c143c7fe160c8e482a4f1089f369e63d4a864f901785683e66af920ef35fab8de7d36eff7dd4f3970e573bb913bb78ad645f"], 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000340), r4) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000021c0)={'ip6_vti0\x00', &(0x7f0000002140)={'syztnl2\x00', 0x0, 0x2f, 0x5, 0x4, 0x9, 0x40, @ipv4={'\x00', '\xff\xff', @empty}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10, 0x700, 0x8, 0x1}}) setsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000002200)={@private2={0xfc, 0x2, '\x00', 0x1}, r6}, 0x14) read$FUSE(r2, &(0x7f00000031c0)={0x2020}, 0x2020) syz_open_procfs(0x0, &(0x7f00000001c0)='auxv\x00') mlockall(0x2) shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r7 = getpgrp(0x0) sched_setaffinity(r7, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) 21m38.839270013s ago: executing program 5 (id=826): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='freezer.state\x00', 0x275a, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$inet_int(r1, 0x0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r0, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000b40)={0x54, 0x9, 0x1, {0x1, 0x1}, {0x60, 0x2}, @cond=[{0x7f, 0x2, 0x80, 0x33, 0x3, 0xe8}, {0x3, 0xffff, 0x1, 0x1, 0x2}]}) write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000000)=0x5, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}, 0xfffffff9}], 0x1, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000140)={0x1, 0x3, 0x3, 0x8}) fcntl$lock(r2, 0x26, &(0x7f0000000500)={0x2, 0x2, 0x2, 0x3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x6c}}, './file0\x00'}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000380)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x6, 0x400000000000014c}) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x3, 0x73e9}) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f00000004c0)={0x6}, 0x4) r4 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f00000003c0)='ceph\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, r4) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 21m38.265713611s ago: executing program 1 (id=828): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc, 0x2000002, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r4, 0x2, &(0x7f0000000980)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0xf8d2, r2, 0x0, 0x0, 0x101}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x6, 0x9, r2, 0x0, 0x0, 0x3, 0x0, 0x3, r3}]) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x40286608, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, &(0x7f0000000080)='size=4G\x00') fcntl$setpipe(r7, 0x407, 0x0) write$FUSE_INIT(r7, &(0x7f0000000340)={0x50, 0x2f, 0x0, {0x7, 0x29, 0x0, 0x800006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) vmsplice(r7, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x1}], 0x1, 0x0) close_range(r6, r0, 0x2) 21m34.322932087s ago: executing program 1 (id=834): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = socket$phonet(0x23, 0x2, 0x1) setsockopt$sock_int(r3, 0x1, 0xc, &(0x7f0000000280)=0x2, 0x4) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x400000000000000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9fd000000000000000800034000"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r5, 0x4188aec6, &(0x7f0000001c80)={0x1, [{0x3, 0x3d0, 0xf5, &(0x7f00000000c0)="d762bad743f7dadeacc2380a84880325313f0819530bc271735413a8f489f3924f25f5cd3f85c0b5951d3a54add28c8eaab129520b4fe81ea658e581ed543d9e1127746fe38a5e81f14ec2ae240582a047d4100885f598cfb43bfc906a5c211520b5501bf8540d1ebce2603f6e5f1ac8d2a0d75bc01d9d810144"}, {0x3, 0x1e0, 0x5, &(0x7f0000000180)="722e2146a874bfb9b0b6a197badd80332e6ed64eddbd76cbb4fbd85da41596e6d178e90875a66082e88007a5b804d95773d55f20a87e42b2ac469d74"}, {0x0, 0x0, 0x2, 0x0}, {0x3, 0x0, 0x4, 0x0}, {0x2, 0x1c8, 0x1, &(0x7f0000000400)="23fee04e0286f2f98912f35f8a0a4b4d48d787b2b2fdf77a2cf60fde545a01269623d26921dfd82e5085ceeb1c15e7bb5c4bb71cf7ce46c5b7"}, {0x3, 0x308, 0x2, &(0x7f0000000440)="9c10949ffa7eb0d1e98e1a11996624025ccf78478581be47efe41d973847d0d54a4de356d62d2c08e022b817570f1476af50c592bdbb8600dd98afb476df35a381ca4721ccbeed4d518eb82fac7cf3594b138898bea595247d98f4bd2387a61d9c"}, {0x3, 0x628, 0x7f, &(0x7f0000000540)="32113d64a3aeddf1bd5f8108f965df3417d781ff1e5dccd7fd3752b1e50102c98f8a59a3199b603c9318dfa58fa27cca8ef0b7112236d354125ae29dfa94d18aed97ff349f50df30942a5c0870ebff5b6c5ded4a8b550c47e458cf79e24b7d0b30ba3db9d162bc0b030ed7a832a71ca59b0fa57f8c2396f3bc32565f084825aaf00ca950363ada03cdd43d59d59a7f6d57feebb43e0bf91316cb539e138b6f06d27a3ce524efe18fd6da557c86c49e5c7432f9bf86160db7687fcf3dd5cc73166fdf2a7256"}, {0x1, 0x0, 0x7, &(0x7f00000006c0)}, {0x1, 0x660, 0x0, &(0x7f00000007c0)="1d4a493675a94e75f2065b84e05ad6827139d8a967fa13c808b9b1af1133d67a868715326b96efb02338988232750c8a05b86d948c5da1e5af9af7698966ea24bab4bb465ac40a3a27624e073b5db0f53675de5894f80c5676b563944afd37acec16b0a3e75fee653c0459fe03be845a34aa8bae3542fe5bbaafe05437b1e57da51d7a63d8b772003e4b7aa50005c742778428205e78f910f2eef8578f9279eb4bcc5b53aa35b7ff4ff75522a3ca5c09315d5962e21b59efb6a83072238cbecf9d8536047bb317dde788f726"}, {0x3, 0x1f8, 0x6, &(0x7f00000008c0)="f44d0caf127768b489eb4e3b1e9b03cbdff017d5a4a3c8b00ac7941cb0c02582275fa00dadae1dfda8bbe3e4c4bf18c6f5735667b7d188542f88c01ac8901a"}, {0x2, 0x5b8, 0x8, &(0x7f0000000940)="490c6c67b10b0c9742d2f169423936f171df0fc6e894936784d4d0cc9437ebf5b0a23ceebbf81ef35a8a4616a8b0625abc027f199929fb8394fb5f4f8a09eafc472d021cf8f653f73e37ceb4fd315c49b9072b4c7c1b8c78be2c8b3d8a0aff16248ff577a65180fcb91c705a5e26a9c8d6bba1b8dc2d107e979a4bc2880b869768553f36f1cbc160d7705ba1019ec20499f86b630cd1b28ef79f9b9f518e1228545ffdf0a46149a0805b47636b0010698c6bf08bbafd87"}, {0x3, 0x0, 0x6a, &(0x7f0000000a00)}, {0x2, 0x340, 0x2, &(0x7f0000001a00)="0012bdd5f447883c2e3ab5d058ea42eeeab0a28fa6380e9f336718666eae9e353999f2583eb26fcef47b6b87b8f4bdb13e267af49e2da2ddd8acd82fab96d8e1ef19c5a1fdd2108e597ba7e161b3e1f3c0a7ec2fc2fd8e884bfd3130813b1552f0ab8e7af28ed3ab"}, {0x3, 0x18, 0x401, &(0x7f0000001a80)="d05252"}, {0x3, 0x620, 0x8001, &(0x7f0000001ac0)="c326f400c19b1bba14f2436dcfdb1880ff115f77aa0edcd8f9d4441b0e6bc9a875919cd7a921a27f83e9ce7f512bcd6d857098d909a565e568317de682892fcc438e9ad000b17a38be429657ea0de68898365da51755dc7c2b70d65b045eb030b2de2f7d324c724df369bf8f93836d64b9b274da7909edfa4d4946c5eb4d661c1b8a91ca2feb87b586278a0cb13dea1eb1a47ec34e2a7e520e663880a24731a3f6b1773179f9e52c360b0d6c56e53020f99ebc39ef3deb466485706a45748e111e6e080c"}, {0x3, 0x5b8, 0x9, &(0x7f0000001bc0)="fb45207e98e5e9894d4d20d592f0d6c143e7766564e54915c7baf7162bce5838263a8624b6c245792b735070491f27c76887745919594ed604f43d0d09d463737809c5bfb5924bbfef5bd456aa342286ec94a6704f0e8b4c331a6863974f970f4ec68449fe11be5283fd0a882b91198a7587f3006e185b6a02b59f400224773fbfc228ce5915d69defe8b2289ef1e6778ecb625bb20e76fdb74884c5be113cb0839024bcba49c225760b558ad8d7815169b9c533fbf039"}]}) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x2, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000640)={0x0, 0x4000}) socket$inet6(0xa, 0x6, 0xd9) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000240)='.\x00', &(0x7f0000000040)='ocfs2\x00', 0x802, 0x0) 21m31.246595477s ago: executing program 5 (id=838): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x40, 0x1, 0x2}, 0x30, 0x0) landlock_restrict_self(r0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000a40)='./file0\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002100)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000002080)={0x1, 0x1, 0x3, 0xdf57}) flock(r1, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r2, &(0x7f0000000040)={0x2020}, 0x229) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r4) sendmsg$NLBL_CIPSOV4_C_LISTALL(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="0103a214f3eb00010000040000008f8ae19d79a5aa006bfdfb914b566a2b0aca0a0c80a30055cde782000983b2cc337528c37ce9dfaedba7ebcf078f3c80167a0b4216c12606a3d20967f82c235fcb2755d87b3d197f5b0508b3046502ecc750e43c1355c143c7fe160c8e482a4f1089f369e63d4a864f901785683e66af920ef35fab8de7d36eff7dd4f3970e573bb913bb78ad645f"], 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000340), r4) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000021c0)={'ip6_vti0\x00', &(0x7f0000002140)={'syztnl2\x00', 0x0, 0x2f, 0x5, 0x4, 0x9, 0x40, @ipv4={'\x00', '\xff\xff', @empty}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10, 0x700, 0x8, 0x1}}) setsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000002200)={@private2={0xfc, 0x2, '\x00', 0x1}, r6}, 0x14) read$FUSE(r2, &(0x7f00000031c0)={0x2020}, 0x2020) syz_open_procfs(0x0, &(0x7f00000001c0)='auxv\x00') mlockall(0x2) shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r7 = getpgrp(0x0) sched_setaffinity(r7, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) 21m30.7530199s ago: executing program 1 (id=839): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./debug\x00', &(0x7f00000001c0)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/regulator/regulator_summary\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21m29.27808489s ago: executing program 1 (id=841): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x60}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000401e09030001000102000109022700010100c0320904000003ffffff0007058103"], 0x0) capset(&(0x7f00000020c0)={0x20071026}, &(0x7f0000002100)={0x8, 0xc, 0x0, 0x0, 0x80000000, 0x4}) r3 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r3, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0xce21, 0x280000, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0xfffbffff}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000010000000c0000002b0000000000000718"], 0x30}, 0x4000010) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r4, 0x0, 0x23, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e24, @private=0xa010101}, 0x2, 0x0, 0x3}}, 0x26) r6 = dup3(0xffffffffffffffff, r5, 0x80000) getpeername$packet(r6, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x21a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7d, 0x10, 0xa, "", [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x1, 0x5, 0x6, {0x9, 0x21, 0x3, 0x8, 0x1, {0x22, 0xbb2}}, {{{0x9, 0x5, 0x81, 0x3, 0x3df, 0x1, 0x2, 0x7}}}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x7, 0x4, 0x6, 0xff, 0x40}, 0x2c, &(0x7f0000000500)={0x5, 0xf, 0x2c, 0x2, [@wireless={0xb, 0x10, 0x1, 0xc, 0x28, 0x2, 0x0, 0xc0, 0x2}, @ssp_cap={0x1c, 0x10, 0xa, 0x2, 0x4, 0xe, 0x0, 0x7ff, [0xff3f00, 0xc0, 0x3f30, 0xd8]}]}, 0x5}) 21m29.06657774s ago: executing program 5 (id=842): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x801}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x64, 0x9, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x1388}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x2710}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 21m27.392704496s ago: executing program 5 (id=844): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040), &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/net/bridge_slave_0/brport/multicast_router\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default trusted:syz -9223372036854779533'], 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x4) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) read$FUSE(r4, &(0x7f0000000500)={0x2020}, 0x2020) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = epoll_create1(0x80000) r7 = fcntl$dupfd(r5, 0x0, r5) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000040)={0x20000000}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000001c0)={0x10000014}) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = getpid() kcmp$KCMP_EPOLL_TFD(r9, r8, 0x7, r7, &(0x7f0000000100)={r6, r7}) write(r0, &(0x7f0000000200)='2\n', 0x2) 21m24.592785939s ago: executing program 5 (id=848): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='freezer.state\x00', 0x275a, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$inet_int(r1, 0x0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r0, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000b40)={0x54, 0x9, 0x1, {0x1, 0x1}, {0x60, 0x2}, @cond=[{0x7f, 0x2, 0x80, 0x33, 0x3, 0xe8}, {0x3, 0xffff, 0x1, 0x1, 0x2}]}) write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000000)=0x5, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}, 0xfffffff9}], 0x1, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000140)={0x1, 0x3, 0x3, 0x8}) fcntl$lock(r2, 0x26, &(0x7f0000000500)={0x2, 0x2, 0x2, 0x3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x6c}}, './file0\x00'}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000380)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x6, 0x400000000000014c}) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x3, 0x73e9}) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f00000004c0)={0x6}, 0x4) r4 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f00000003c0)='ceph\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, r4) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 21m22.556362465s ago: executing program 2 (id=850): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = socket$phonet(0x23, 0x2, 0x1) setsockopt$sock_int(r3, 0x1, 0xc, &(0x7f0000000280)=0x2, 0x4) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3d, 0x0, &(0x7f0000000140)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x400000000000000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9fd000000000000000800034000"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r5, 0x4188aec6, &(0x7f0000001c80)={0x1, [{0x3, 0x3d0, 0xf5, &(0x7f00000000c0)="d762bad743f7dadeacc2380a84880325313f0819530bc271735413a8f489f3924f25f5cd3f85c0b5951d3a54add28c8eaab129520b4fe81ea658e581ed543d9e1127746fe38a5e81f14ec2ae240582a047d4100885f598cfb43bfc906a5c211520b5501bf8540d1ebce2603f6e5f1ac8d2a0d75bc01d9d810144"}, {0x3, 0x1e0, 0x5, &(0x7f0000000180)="722e2146a874bfb9b0b6a197badd80332e6ed64eddbd76cbb4fbd85da41596e6d178e90875a66082e88007a5b804d95773d55f20a87e42b2ac469d74"}, {0x0, 0x0, 0x2, 0x0}, {0x3, 0x0, 0x4, 0x0}, {0x2, 0x1c8, 0x1, &(0x7f0000000400)="23fee04e0286f2f98912f35f8a0a4b4d48d787b2b2fdf77a2cf60fde545a01269623d26921dfd82e5085ceeb1c15e7bb5c4bb71cf7ce46c5b7"}, {0x3, 0x308, 0x2, &(0x7f0000000440)="9c10949ffa7eb0d1e98e1a11996624025ccf78478581be47efe41d973847d0d54a4de356d62d2c08e022b817570f1476af50c592bdbb8600dd98afb476df35a381ca4721ccbeed4d518eb82fac7cf3594b138898bea595247d98f4bd2387a61d9c"}, {0x3, 0x628, 0x7f, &(0x7f0000000540)="32113d64a3aeddf1bd5f8108f965df3417d781ff1e5dccd7fd3752b1e50102c98f8a59a3199b603c9318dfa58fa27cca8ef0b7112236d354125ae29dfa94d18aed97ff349f50df30942a5c0870ebff5b6c5ded4a8b550c47e458cf79e24b7d0b30ba3db9d162bc0b030ed7a832a71ca59b0fa57f8c2396f3bc32565f084825aaf00ca950363ada03cdd43d59d59a7f6d57feebb43e0bf91316cb539e138b6f06d27a3ce524efe18fd6da557c86c49e5c7432f9bf86160db7687fcf3dd5cc73166fdf2a7256"}, {0x1, 0x0, 0x7, &(0x7f00000006c0)}, {0x1, 0x660, 0x0, &(0x7f00000007c0)="1d4a493675a94e75f2065b84e05ad6827139d8a967fa13c808b9b1af1133d67a868715326b96efb02338988232750c8a05b86d948c5da1e5af9af7698966ea24bab4bb465ac40a3a27624e073b5db0f53675de5894f80c5676b563944afd37acec16b0a3e75fee653c0459fe03be845a34aa8bae3542fe5bbaafe05437b1e57da51d7a63d8b772003e4b7aa50005c742778428205e78f910f2eef8578f9279eb4bcc5b53aa35b7ff4ff75522a3ca5c09315d5962e21b59efb6a83072238cbecf9d8536047bb317dde788f726"}, {0x3, 0x1f8, 0x6, &(0x7f00000008c0)="f44d0caf127768b489eb4e3b1e9b03cbdff017d5a4a3c8b00ac7941cb0c02582275fa00dadae1dfda8bbe3e4c4bf18c6f5735667b7d188542f88c01ac8901a"}, {0x2, 0x5b8, 0x8, &(0x7f0000000940)="490c6c67b10b0c9742d2f169423936f171df0fc6e894936784d4d0cc9437ebf5b0a23ceebbf81ef35a8a4616a8b0625abc027f199929fb8394fb5f4f8a09eafc472d021cf8f653f73e37ceb4fd315c49b9072b4c7c1b8c78be2c8b3d8a0aff16248ff577a65180fcb91c705a5e26a9c8d6bba1b8dc2d107e979a4bc2880b869768553f36f1cbc160d7705ba1019ec20499f86b630cd1b28ef79f9b9f518e1228545ffdf0a46149a0805b47636b0010698c6bf08bbafd87"}, {0x3, 0x0, 0x6a, &(0x7f0000000a00)}, {0x2, 0x340, 0x2, &(0x7f0000001a00)="0012bdd5f447883c2e3ab5d058ea42eeeab0a28fa6380e9f336718666eae9e353999f2583eb26fcef47b6b87b8f4bdb13e267af49e2da2ddd8acd82fab96d8e1ef19c5a1fdd2108e597ba7e161b3e1f3c0a7ec2fc2fd8e884bfd3130813b1552f0ab8e7af28ed3ab"}, {0x3, 0x18, 0x401, &(0x7f0000001a80)="d05252"}, {0x3, 0x620, 0x8001, &(0x7f0000001ac0)="c326f400c19b1bba14f2436dcfdb1880ff115f77aa0edcd8f9d4441b0e6bc9a875919cd7a921a27f83e9ce7f512bcd6d857098d909a565e568317de682892fcc438e9ad000b17a38be429657ea0de68898365da51755dc7c2b70d65b045eb030b2de2f7d324c724df369bf8f93836d64b9b274da7909edfa4d4946c5eb4d661c1b8a91ca2feb87b586278a0cb13dea1eb1a47ec34e2a7e520e663880a24731a3f6b1773179f9e52c360b0d6c56e53020f99ebc39ef3deb466485706a45748e111e6e080c"}, {0x3, 0x5b8, 0x9, &(0x7f0000001bc0)="fb45207e98e5e9894d4d20d592f0d6c143e7766564e54915c7baf7162bce5838263a8624b6c245792b735070491f27c76887745919594ed604f43d0d09d463737809c5bfb5924bbfef5bd456aa342286ec94a6704f0e8b4c331a6863974f970f4ec68449fe11be5283fd0a882b91198a7587f3006e185b6a02b59f400224773fbfc228ce5915d69defe8b2289ef1e6778ecb625bb20e76fdb74884c5be113cb0839024bcba49c225760b558ad8d7815169b9c533fbf039"}]}) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x2, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000640)={0x0, 0x4000}) socket$inet6(0xa, 0x6, 0xd9) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000240)='.\x00', &(0x7f0000000040)='ocfs2\x00', 0x802, 0x0) 21m21.076407209s ago: executing program 2 (id=851): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005f00014100"/20], 0x1c}], 0x1}, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fadvise64(r2, 0xdb, 0x2, 0x5) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) getpeername$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000200)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=@bridge_setlink={0x20, 0x13, 0x1, 0x70bd2d, 0x25dfdbfd, {0x7, 0x0, 0x0, r10, 0x2400, 0x810}}, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x80, 0x20, 0x4, 0x2, {{0xa, 0x4, 0x0, 0x6, 0x28, 0x68, 0x0, 0x4, 0x4, 0x0, @private=0xa010100, @private=0xa010102, {[@rr={0x7, 0x13, 0xec, [@multicast1, @remote, @loopback, @multicast1]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vxcan1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000c80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000680)={0x5b8, 0x0, 0x4, 0x70bd2c, 0x25dfdbff, {}, [{{0x8, 0x1, r3}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8, 0x1, r5}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r11}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8, 0x1, r12}, {0x158, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x966, 0x58, 0x1, 0x3}, {0x9, 0x7f, 0x1, 0x5}, {0xfff8, 0xe1, 0xfe, 0x2}, {0x40, 0x5, 0x7b, 0xff}]}}}]}}, {{0x8, 0x1, r14}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}]}, 0x5b8}, 0x1, 0x0, 0x0, 0x40000}, 0xa8a156d3f51421d0) 21m20.346290358s ago: executing program 2 (id=852): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x40, 0x1, 0x2}, 0x30, 0x0) landlock_restrict_self(r0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000a40)='./file0\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1ff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r0, 0x6, &(0x7f0000002080)={0x1, 0x1, 0x3, 0xdf57}) flock(0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r1, &(0x7f0000000040)={0x2020}, 0x229) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) sendmsg$NLBL_CIPSOV4_C_LISTALL(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="0103a214f3eb00010000040000008f8ae19d79a5aa006bfdfb914b566a2b0aca0a0c80a30055cde782000983b2cc337528c37ce9dfaedba7ebcf078f3c80167a0b4216c12606a3d20967f82c235fcb2755d87b3d197f5b0508b3046502ecc750e43c1355c143c7fe160c8e482a4f1089f369e63d4a864f901785683e66af920ef35fab8de7d36eff7dd4f3970e573bb913bb78ad645f"], 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000340), r3) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000021c0)={'ip6_vti0\x00', &(0x7f0000002140)={'syztnl2\x00', 0x0, 0x2f, 0x5, 0x4, 0x9, 0x40, @ipv4={'\x00', '\xff\xff', @empty}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10, 0x700, 0x8, 0x1}}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000002200)={@private2={0xfc, 0x2, '\x00', 0x1}, r5}, 0x14) read$FUSE(r1, &(0x7f00000031c0)={0x2020}, 0x2020) syz_open_procfs(0x0, &(0x7f00000001c0)='auxv\x00') mlockall(0x2) shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r6 = getpgrp(0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) 21m17.554199509s ago: executing program 2 (id=857): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) getpriority(0x1, r0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000500)=""/102400, 0x19000) sched_setaffinity(r1, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x78, 0xa02) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x3, 0x11, r3, 0x100000000) 21m15.228881275s ago: executing program 2 (id=858): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040), &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/net/bridge_slave_0/brport/multicast_router\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default trusted:syz -9223372036854779533'], 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x4) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) read$FUSE(r4, &(0x7f0000000500)={0x2020}, 0x2020) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = epoll_create1(0x80000) r7 = fcntl$dupfd(r5, 0x0, r5) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000040)={0x20000000}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000001c0)={0x10000014}) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = getpid() kcmp$KCMP_EPOLL_TFD(r9, r8, 0x7, r7, &(0x7f0000000100)={r6, r7}) write(r0, &(0x7f0000000200)='2\n', 0x2) 21m13.324045188s ago: executing program 33 (id=841): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x60}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000401e09030001000102000109022700010100c0320904000003ffffff0007058103"], 0x0) capset(&(0x7f00000020c0)={0x20071026}, &(0x7f0000002100)={0x8, 0xc, 0x0, 0x0, 0x80000000, 0x4}) r3 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r3, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0xce21, 0x280000, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0xfffbffff}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000010000000c0000002b0000000000000718"], 0x30}, 0x4000010) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r4, 0x0, 0x23, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e24, @private=0xa010101}, 0x2, 0x0, 0x3}}, 0x26) r6 = dup3(0xffffffffffffffff, r5, 0x80000) getpeername$packet(r6, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x21a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7d, 0x10, 0xa, "", [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x1, 0x5, 0x6, {0x9, 0x21, 0x3, 0x8, 0x1, {0x22, 0xbb2}}, {{{0x9, 0x5, 0x81, 0x3, 0x3df, 0x1, 0x2, 0x7}}}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x7, 0x4, 0x6, 0xff, 0x40}, 0x2c, &(0x7f0000000500)={0x5, 0xf, 0x2c, 0x2, [@wireless={0xb, 0x10, 0x1, 0xc, 0x28, 0x2, 0x0, 0xc0, 0x2}, @ssp_cap={0x1c, 0x10, 0xa, 0x2, 0x4, 0xe, 0x0, 0x7ff, [0xff3f00, 0xc0, 0x3f30, 0xd8]}]}, 0x5}) 21m9.813930026s ago: executing program 2 (id=865): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x64, 0x2, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x801}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x64, 0x9, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x1388}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x2710}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 21m9.252434028s ago: executing program 34 (id=848): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='freezer.state\x00', 0x275a, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$inet_int(r1, 0x0, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r0, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000b40)={0x54, 0x9, 0x1, {0x1, 0x1}, {0x60, 0x2}, @cond=[{0x7f, 0x2, 0x80, 0x33, 0x3, 0xe8}, {0x3, 0xffff, 0x1, 0x1, 0x2}]}) write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000000)=0x5, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}, 0xfffffff9}], 0x1, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000140)={0x1, 0x3, 0x3, 0x8}) fcntl$lock(r2, 0x26, &(0x7f0000000500)={0x2, 0x2, 0x2, 0x3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x6c}}, './file0\x00'}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000380)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x6, 0x400000000000014c}) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x3, 0x73e9}) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f00000004c0)={0x6}, 0x4) r4 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f00000003c0)='ceph\x00', &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, r4) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 20m54.178711121s ago: executing program 35 (id=865): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x64, 0x2, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x801}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x64, 0x9, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x1388}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x2710}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 7.25247904s ago: executing program 0 (id=3217): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc71e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x362b, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x10}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) 6.854344274s ago: executing program 8 (id=3220): syz_usb_connect$cdc_ncm(0x6, 0x73, &(0x7f0000000040)=ANY=[@ANYBLOB="12015002020000002505a1a44000010203010902610002010484080000000001020d000005240600010524020006"], 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe00000090582"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) 4.68371815s ago: executing program 6 (id=3225): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x1, 0xf4240, 0x0, 0x0, 0x5}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 4.522133391s ago: executing program 6 (id=3226): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="10031200e0ff020002004788aa96a13bb100001100007f", 0x17, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 4.413048125s ago: executing program 6 (id=3227): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xeef, 0x72c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x9, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x0) 4.27031769s ago: executing program 8 (id=3228): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000060001001400"], 0x1c}}, 0x0) 4.214126873s ago: executing program 0 (id=3229): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x6, 0x248, 0x9b9a}, 0x3a, [0xfffffff5, 0x0, 0x5, 0x10009, 0x8, 0x155f, 0x6, 0x2, 0x25cd, 0x401, 0x40000b4, 0xa, 0x2, 0x4, 0x81, 0xe4, 0x6, 0xfc000000, 0x9, 0xbbf, 0x200, 0x1, 0x48, 0x100d, 0x3, 0x12a0, 0x8000, 0x1, 0x7, 0x6, 0x7, 0x81, 0x40008a, 0x79, 0x2, 0x10001, 0x4, 0x91, 0x4, 0xe768, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x84, 0x9, 0xf9a2, 0x80000001, 0xff, 0x2, 0x2, 0x2, 0x2, 0x7, 0x8, 0x7, 0x5, 0x4007f, 0xffffffff, 0x6], [0x3, 0x16e, 0x6, 0xf6ca, 0x4, 0xda, 0xb8a9, 0x20000070, 0x8e, 0xd50, 0x7, 0x5, 0xfffffffe, 0x80d, 0x5, 0xa7, 0x1000, 0x101, 0x200b395, 0x400000, 0x80000000, 0x4, 0x19, 0x7, 0x400001, 0x3, 0x3, 0xb, 0xffffff7f, 0x401, 0x6, 0x200, 0x96, 0x0, 0xfffffff6, 0x401, 0x6, 0xf1, 0x6, 0x55c, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x1, 0x0, 0x1ce, 0x1, 0x80000004, 0x80000001, 0x2, 0x2, 0x9, 0x95, 0x80000000, 0x4, 0xfffffff9, 0x40001003, 0x1000, 0xfffff804, 0x5], [0x2, 0xfffffffe, 0xfffc, 0x6, 0x2, 0x2e6bf783, 0xfffff100, 0x5, 0x400005, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x5, 0xee4b, 0x2008004, 0x1, 0x691, 0x5, 0x89, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xffe, 0x10000a, 0x8000, 0x401, 0x3e55, 0x9, 0xd3, 0x8, 0x3437, 0x2, 0xd, 0x7, 0x601, 0x101, 0x200dd80, 0x60a0, 0x3, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x4, 0x8000, 0x0, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xa, 0x10000, 0x3, 0x8, 0x1], [0xa772, 0x2, 0x7, 0x1afa, 0xbfc, 0x8, 0x3, 0x7f, 0x55, 0x40, 0xc, 0x1005, 0x1, 0x8000007, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xfffffeff, 0xffbffff7, 0x8, 0x7, 0x3, 0x939, 0x6, 0x80008001, 0x7777, 0x7fffffff, 0x2, 0x100, 0xffffffff, 0x7ffffffe, 0x4009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0x6, 0x10000, 0x0, 0x8004, 0x6fff, 0x2, 0x3, 0xf, 0xe, 0x5, 0x26c, 0x6, 0xfffffff9, 0x4, 0xfffffff8, 0x9, 0xf, 0x463f, 0x4, 0xdad, 0x8003, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x8, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x0, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x204344}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x9}], 0x1, 0x1d, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 4.124114921s ago: executing program 8 (id=3230): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) pwritev2(r0, &(0x7f0000002640)=[{&(0x7f00000003c0)="8609", 0x2}], 0x1, 0x7800, 0x0, 0x1f) 3.016730345s ago: executing program 8 (id=3234): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="8520000002000000186500000300000000000200010000006b54040001"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0x49, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.016468334s ago: executing program 0 (id=3235): syz_ublk_setup_io_uring(0x1f1d, 0x0, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x75, 0x7f, 0x2, 0x3ff, 0x9, 0x8000000000000000, 0x5, 0x0, 0x4, 0xefffffffffffffff, 0x2000000000000000, 0x5, 0x8c], 0xeeee8000, 0x284a93}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.714032187s ago: executing program 7 (id=3236): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000500), 0x8, &(0x7f0000000380)={[{@xino_auto}, {@workdir={'workdir', 0x3d, './file0'}}, {@uuid_off}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@redirect_dir_follow}, {@index_off}, {@nfs_export_on}]}) 2.587439677s ago: executing program 7 (id=3237): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="10031200e0ff020002004788aa96a13bb100001100007f", 0x17, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 2.534367001s ago: executing program 6 (id=3238): syz_usb_connect$cdc_ncm(0x6, 0x73, &(0x7f0000000040)=ANY=[@ANYBLOB="12015002020000002505a1a44000010203010902610002010484080000000001020d0000052406000105240200060006"], 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe00000090582"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) 2.525579253s ago: executing program 0 (id=3239): syz_usb_connect$midi(0x2, 0x31, &(0x7f0000000000)=ANY=[@ANYBLOB="1201880100000020861a2d7540000102020109021f00010147b00309040100010103301109050c03"], 0x0) 2.370158175s ago: executing program 7 (id=3240): setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06891bcdc493"}, 0x28) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0xff, 0x8563, 0x90b4}, 0x5) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24044040) 2.359830857s ago: executing program 8 (id=3241): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioprio_set$uid(0x3, 0x0, 0x4004) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x14, r1, 0x421, 0x70bd2f, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40005}, 0x400d4) 2.172468429s ago: executing program 7 (id=3242): mount$fuse(0x0, 0x0, 0x0, 0x80, &(0x7f0000000300)=ANY=[@ANYBLOB='fd', @ANYRESHEX]) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.568245517s ago: executing program 3 (id=3243): socket$inet6_tcp(0xa, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x2001) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_mptcp(0x2, 0x1, 0x106) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @private=0xa010101}, {0x2, 0x0, @remote}, {0x2, 0x4e23, @local}, 0x1d1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x6}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 1.514081251s ago: executing program 3 (id=3244): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x104) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x200000, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000004240)={{}, {0x1, 0x5}, [], {0x4, 0x2}, [], {0x10, 0x6}, {0x20, 0x2}}, 0x24, 0x3) getxattr(&(0x7f0000005140)='./file0\x00', &(0x7f0000005180)=@known='system.posix_acl_access\x00', 0x0, 0x0) 1.403472862s ago: executing program 3 (id=3245): gettid() timer_settime(0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./proc_mnt\x00', 0x1e9) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/12/smp_affinity\x00', 0x1, 0x6) write$cgroup_netprio_ifpriomap(r0, &(0x7f00000003c0)=ANY=[@ANYRESOCT], 0x8) 1.121384817s ago: executing program 3 (id=3246): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x5, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r3, 0x200a0204) keyctl$join(0x1, &(0x7f00000000c0)={'syz', 0x3}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) pselect6(0x40, &(0x7f00000001c0)={0x5, 0x2, 0x2, 0x7fffffff, 0x43, 0x80, 0x1}, 0x0, 0x0, 0x0, 0x0) 1.030470841s ago: executing program 0 (id=3247): r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0xa019, 0x2, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r2, 0x5460, 0x3) 843.775022ms ago: executing program 8 (id=3248): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xeef, 0x72c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x9, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x0) 759.733783ms ago: executing program 6 (id=3249): syz_ublk_setup_io_uring(0x1f1d, &(0x7f0000000080)={0x0, 0x1c3f, 0x10000, 0x3, 0x800002bb}, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x60140, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x75, 0x7f, 0x2, 0x3ff, 0x9, 0x8000000000000000, 0x5, 0x0, 0x4, 0xefffffffffffffff, 0x2000000000000000, 0x5, 0x8c], 0xeeee8000, 0x284a93}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 746.342283ms ago: executing program 7 (id=3250): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="10031200e0ff020002004788aa96a13bb100001100007fca1a", 0x19, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 510.020259ms ago: executing program 7 (id=3251): futex(&(0x7f0000000580), 0x0, 0x0, &(0x7f0000000600)={0x77359400}, 0x0, 0x0) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl(r0, 0x400452c8, &(0x7f0000000000)="000000000000000000000000000000000000000001") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) open$dir(&(0x7f0000000580)='./dev/rfcomm0\x00', 0x40000, 0x235) socket$nl_xfrm(0x10, 0x3, 0x6) openat$kvm(0xffffffffffffff9c, 0x0, 0x80102, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000004, 0x12, r1, 0x0) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) 501.837536ms ago: executing program 0 (id=3252): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="8520000002000000186500000300000000000200010000006b54040001"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0x49, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 310.694634ms ago: executing program 6 (id=3253): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1fb) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing\x00', 0x1ff) 126.079918ms ago: executing program 3 (id=3254): socket$inet6_tcp(0xa, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x2001) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_mptcp(0x2, 0x1, 0x106) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @private=0xa010101}, {0x2, 0x0, @remote}, {0x2, 0x4e23, @local}, 0x1d1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x6}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 0s ago: executing program 3 (id=3255): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x104) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x200000, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000004240)={{}, {0x1, 0x5}, [], {0x4, 0x2}, [], {0x10, 0x6}, {0x20, 0x2}}, 0x24, 0x3) getxattr(&(0x7f0000005140)='./file0\x00', &(0x7f0000005180)=@known='system.posix_acl_access\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): get_files+0x2a/0x420 [ 1796.507264][T18999] ? __fget_files+0x3a8/0x420 [ 1796.507276][T18999] ? __fget_files+0x2a/0x420 [ 1796.507290][T18999] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1796.507305][T18999] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1796.507321][T18999] __se_sys_ioctl+0xff/0x170 [ 1796.507339][T18999] do_syscall_64+0x166/0x520 [ 1796.507352][T18999] ? trace_irq_disable+0x3b/0x140 [ 1796.507367][T18999] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1796.507378][T18999] ? clear_bhb_loop+0x70/0xc0 [ 1796.507392][T18999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1796.507403][T18999] RIP: 0033:0x7f4caaf1e159 [ 1796.507415][T18999] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1796.507425][T18999] RSP: 002b:00007f4ca9176028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1796.507438][T18999] RAX: ffffffffffffffda RBX: 00007f4cab1a5fa0 RCX: 00007f4caaf1e159 [ 1796.507447][T18999] RDX: 0000200000000040 RSI: 00000000400454ca RDI: 0000000000000004 [ 1796.507457][T18999] RBP: 00007f4caafb506b R08: 0000000000000000 R09: 0000000000000000 [ 1796.507465][T18999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1796.507471][T18999] R13: 00007f4cab1a6038 R14: 00007f4cab1a5fa0 R15: 00007ffe36e86838 [ 1796.507489][T18999] [ 1796.648128][T18397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1796.693737][ T9845] usb 7-1: new full-speed USB device number 28 using dummy_hcd [ 1796.694129][T18397] 8021q: adding VLAN 0 to HW filter on device team0 [ 1796.757845][T18607] bridge0: port 1(bridge_slave_0) entered blocking state [ 1796.758085][T18607] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1796.832438][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 1796.832519][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 1796.835089][ T3284] bridge0: port 2(bridge_slave_1) entered blocking state [ 1796.835213][ T3284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1796.881689][ T9845] usb 7-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice= 1.00 [ 1796.888689][ T9845] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1796.888736][ T9845] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1796.963092][ T9845] mdc800 7-1:1.0: probe fails -> Wrong Endpoints. [ 1797.169375][T15062] usb 7-1: USB disconnect, device number 28 [ 1798.084450][ T36] usb 7-1: new full-speed USB device number 29 using dummy_hcd [ 1798.256201][ T36] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1798.256888][ T36] usb 7-1: not running at top speed; connect to a high speed hub [ 1798.256926][ T36] usb 7-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=96.31 [ 1798.258075][ T36] usb 7-1: config 6 has an invalid interface number: 210 but max is 0 [ 1798.258099][ T36] usb 7-1: config 6 has no interface number 0 [ 1798.258144][ T36] usb 7-1: config 6 interface 210 altsetting 125 has an endpoint descriptor with address 0xD6, changing to 0x86 [ 1798.258172][ T36] usb 7-1: config 6 interface 210 altsetting 125 endpoint 0x86 has invalid maxpacket 32264, setting to 64 [ 1798.258201][ T36] usb 7-1: config 6 interface 210 altsetting 125 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1798.258230][ T36] usb 7-1: config 6 interface 210 has no altsetting 0 [ 1798.284202][ T36] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1798.284230][ T36] usb 7-1: Product: syz [ 1798.284245][ T36] usb 7-1: Manufacturer: syz [ 1798.284261][ T36] usb 7-1: SerialNumber: syz [ 1798.387405][T18397] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1798.452864][T19024] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1798.516149][T18397] veth0_vlan: entered promiscuous mode [ 1798.582977][T18397] veth1_vlan: entered promiscuous mode [ 1798.704750][T18397] veth0_macvtap: entered promiscuous mode [ 1798.715598][ T36] vmk80xx 7-1:6.210: driver 'vmk80xx' failed to auto-configure device. [ 1798.740282][T18397] veth1_macvtap: entered promiscuous mode [ 1798.823259][ T36] usb 7-1: USB disconnect, device number 29 [ 1798.849240][T18397] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1798.902331][T18397] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1799.713787][ T36] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 1799.891945][ T36] usb 1-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 1799.901412][ T36] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1799.901446][ T36] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1799.901475][ T36] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1799.901510][ T36] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1799.974922][ T36] usb 1-1: config 0 descriptor?? [ 1800.236940][T19047] Bluetooth: MGMT ver 1.23 [ 1800.448218][ T5607] usb 9-1: new full-speed USB device number 52 using dummy_hcd [ 1800.480552][ T36] usbhid 1-1:0.0: can't add hid device: -71 [ 1800.480689][ T36] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1800.529447][ T2329] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1800.531789][ T36] usb 1-1: USB disconnect, device number 121 [ 1800.625719][ T5607] usb 9-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice= 1.00 [ 1800.627246][ T5607] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1800.627290][ T5607] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1800.681284][T18622] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1800.681307][T18622] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1800.740886][ T5607] mdc800 9-1:1.0: probe fails -> Wrong Endpoints. [ 1801.021118][ T5607] usb 9-1: USB disconnect, device number 52 [ 1801.144295][ T71] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1801.144748][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1801.144766][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1801.169198][T18622] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1801.169250][T18622] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1802.847502][ T5607] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 1803.005403][ T5607] usb 1-1: Using ep0 maxpacket: 16 [ 1803.006269][ T5607] usb 1-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 1803.007745][ T5607] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1803.007796][ T5607] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 1803.007825][ T5607] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 1803.007852][ T5607] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 1803.007876][ T5607] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1803.010964][ T5607] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1803.010988][ T5607] usb 1-1: Product: syz [ 1803.011003][ T5607] usb 1-1: Manufacturer: syz [ 1803.011019][ T5607] usb 1-1: SerialNumber: syz [ 1803.055267][T15062] usb 9-1: new full-speed USB device number 53 using dummy_hcd [ 1803.137354][ T5607] usb 1-1: config 0 descriptor?? [ 1803.158964][ T5607] xbox_remote_probe: endpoint_in message size==0? [ 1803.264436][T15062] usb 9-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice= 1.00 [ 1803.265703][T15062] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1803.265749][T15062] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1803.303970][T15062] mdc800 9-1:1.0: probe fails -> Wrong Endpoints. [ 1803.351172][T15062] usb 1-1: USB disconnect, device number 122 [ 1803.486429][ T9845] usb 9-1: USB disconnect, device number 53 [ 1803.843820][ T10] usb 7-1: new full-speed USB device number 30 using dummy_hcd [ 1803.997919][ T10] usb 7-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice= 1.00 [ 1803.999536][ T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1803.999582][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1804.049413][ T10] mdc800 7-1:1.0: probe fails -> Wrong Endpoints. [ 1804.255519][T19117] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1804.289432][ T9845] usb 7-1: USB disconnect, device number 30 [ 1804.513772][ T10] usb 9-1: new high-speed USB device number 54 using dummy_hcd [ 1804.664863][ T10] usb 9-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 5.00 [ 1804.667256][ T10] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1804.667338][ T10] usb 9-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1804.667383][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1804.807710][ T10] pl2303 9-1:1.0: required endpoints missing [ 1804.845315][ T10] pl2303 9-1:1.1: required endpoints missing [ 1805.025982][ T36] usb 9-1: USB disconnect, device number 54 [ 1805.543793][T15062] usb 1-1: new low-speed USB device number 123 using dummy_hcd [ 1805.725981][T15062] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1805.726041][T15062] usb 1-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 1805.727406][T15062] usb 1-1: config 142 has an invalid interface number: 251 but max is 0 [ 1805.727432][T15062] usb 1-1: config 142 has no interface number 0 [ 1805.727475][T15062] usb 1-1: config 142 interface 251 altsetting 11 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 1805.727502][T15062] usb 1-1: config 142 interface 251 altsetting 11 endpoint 0x8F is Bulk; changing to Interrupt [ 1805.727527][T15062] usb 1-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 1805.727550][T15062] usb 1-1: config 142 interface 251 has no altsetting 0 [ 1805.732397][T15062] usb 1-1: string descriptor 0 read error: -22 [ 1805.732540][T15062] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1805.832557][T19135] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1805.832781][T19135] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1805.856265][T15062] cypress_m8 1-1:142.251: HID->COM RS232 Adapter converter detected [ 1805.872321][T15062] usb 1-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 1806.311413][ C0] usb 1-1: cypress_write_int_callback - unexpected nonzero write status received: -71 [ 1806.311735][ C0] cyphidcom ttyUSB0: cypress_m8 suspending failing port 0 - interval might be too short [ 1806.318534][ C0] usb 1-1: cypress_read_int_callback - unexpected nonzero read status received: -71 [ 1806.778791][ T5607] usb 1-1: USB disconnect, device number 123 [ 1806.813062][ T5607] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 1806.827545][ T5607] cypress_m8 1-1:142.251: device disconnected [ 1807.214310][T12786] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1807.273752][T15062] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 1807.394237][T12786] usb 4-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 5.00 [ 1807.395769][T12786] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1807.395850][T12786] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1807.395894][T12786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1807.484436][T15062] usb 8-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 1807.486345][T15062] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1807.486374][T15062] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1807.540657][T15062] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1807.540687][T15062] usb 8-1: Product: syz [ 1807.540703][T15062] usb 8-1: Manufacturer: syz [ 1807.540719][T15062] usb 8-1: SerialNumber: syz [ 1807.582296][T12786] pl2303 4-1:1.0: required endpoints missing [ 1807.597377][T15062] ums-sddr09 8-1:1.0: USB Mass Storage device detected [ 1807.617368][T15062] ums-sddr09 8-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 1807.617368][T15062] Please send a copy of this message to and [ 1807.618608][T12786] pl2303 4-1:1.1: required endpoints missing [ 1807.811429][ T36] usb 4-1: USB disconnect, device number 29 [ 1808.293743][ T5607] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 1808.474221][ T5607] usb 1-1: Using ep0 maxpacket: 32 [ 1808.486161][ T5607] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1808.504771][ T5607] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1808.505383][ T5607] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58999, setting to 1024 [ 1808.505434][ T5607] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1808.566961][ T5607] usb 1-1: config 0 descriptor?? [ 1808.569189][T19200] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1808.592296][ T5607] hub 1-1:0.0: USB hub found [ 1808.648257][T15062] scsi host1: usb-storage 8-1:1.0 [ 1808.738959][T15062] usb 8-1: USB disconnect, device number 36 [ 1808.785184][ T5607] hub 1-1:0.0: 1 port detected [ 1809.253714][ T10] usb 9-1: new full-speed USB device number 55 using dummy_hcd [ 1809.517004][ T10] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1809.519247][ T10] usb 9-1: not running at top speed; connect to a high speed hub [ 1809.519286][ T10] usb 9-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=96.31 [ 1809.520702][ T10] usb 9-1: config 6 has an invalid interface number: 210 but max is 0 [ 1809.520729][ T10] usb 9-1: config 6 has no interface number 0 [ 1809.520778][ T10] usb 9-1: config 6 interface 210 has no altsetting 0 [ 1809.534671][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1809.534702][ T10] usb 9-1: Product: syz [ 1809.534717][ T10] usb 9-1: Manufacturer: syz [ 1809.534733][ T10] usb 9-1: SerialNumber: syz [ 1809.921871][ T5607] usb 1-1: reset high-speed USB device number 124 using dummy_hcd [ 1810.166969][ T10] vmk80xx 9-1:6.210: driver 'vmk80xx' failed to auto-configure device. [ 1810.206963][ T10] usb 9-1: USB disconnect, device number 55 [ 1811.428726][ T5607] usb 1-1: device descriptor read/64, error -71 [ 1812.134577][ T5711] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 1812.506150][T12786] usb 1-1: USB disconnect, device number 124 [ 1812.748252][ T5711] usb 4-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 1812.749696][ T5711] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1812.749767][ T5711] usb 4-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 1812.763480][ T5711] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1812.763510][ T5711] usb 4-1: Product: syz [ 1812.763525][ T5711] usb 4-1: Manufacturer: syz [ 1812.763540][ T5711] usb 4-1: SerialNumber: syz [ 1813.194152][ C1] usb 4-1: received EP1 urb->status = -2 [ 1813.194220][ T5711] usb 4-1: unable to init card! (ret=-110) [ 1813.194821][ T5711] snd-usb-caiaq 4-1:1.0: probe with driver snd-usb-caiaq failed with error -110 [ 1813.327339][ T5607] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1813.484438][ T5607] usb 7-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1813.485599][ T5607] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1813.485641][ T5607] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1813.485660][ T5607] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1813.487909][ T5607] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1813.487933][ T5607] usb 7-1: Product: syz [ 1813.487948][ T5607] usb 7-1: Manufacturer: syz [ 1813.487964][ T5607] usb 7-1: SerialNumber: syz [ 1813.492106][ T5607] usb 7-1: config 0 descriptor?? [ 1813.644222][ T5711] usb 8-1: new full-speed USB device number 37 using dummy_hcd [ 1813.900740][ T5607] adutux 7-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 1814.177633][T19273] input: syz0 as /devices/virtual/input/input87 [ 1814.661904][ T5711] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1814.672847][ T5711] usb 8-1: not running at top speed; connect to a high speed hub [ 1814.672891][ T5711] usb 8-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=96.31 [ 1814.699942][ T5607] usb 7-1: USB disconnect, device number 31 [ 1814.702282][ T5711] usb 8-1: config 6 has an invalid interface number: 210 but max is 0 [ 1814.702309][ T5711] usb 8-1: config 6 has no interface number 0 [ 1814.702358][ T5711] usb 8-1: config 6 interface 210 has no altsetting 0 [ 1814.731594][ T5711] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1814.731624][ T5711] usb 8-1: Product: syz [ 1814.731639][ T5711] usb 8-1: Manufacturer: syz [ 1814.731654][ T5711] usb 8-1: SerialNumber: syz [ 1814.802852][T19256] adutux: adu_open - error, can't find device for minor 0 [ 1815.021290][ T5843] usb 4-1: USB disconnect, device number 30 [ 1815.160786][ T5711] vmk80xx 8-1:6.210: driver 'vmk80xx' failed to auto-configure device. [ 1815.176209][ T5711] usb 8-1: USB disconnect, device number 37 [ 1815.284143][ T9845] usb 1-1: new low-speed USB device number 125 using dummy_hcd [ 1815.434862][ T9845] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1815.440778][ T9845] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1815.440807][ T9845] usb 1-1: config 0 has no interface number 0 [ 1815.440855][ T9845] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1815.440884][ T9845] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1815.440928][ T9845] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1815.533264][ T9845] usb 1-1: config 0 descriptor?? [ 1815.537139][T19278] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1815.600370][ T9845] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1815.790564][ T5607] usb 1-1: USB disconnect, device number 125 [ 1816.143793][ T5843] usb 7-1: new full-speed USB device number 32 using dummy_hcd [ 1816.183811][ T10] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 1816.294356][ T5843] usb 7-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice= 1.00 [ 1816.295474][ T5843] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1816.295517][ T5843] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1816.303787][ T9845] usb 9-1: new full-speed USB device number 56 using dummy_hcd [ 1816.343437][ T5843] mdc800 7-1:1.0: probe fails -> Wrong Endpoints. [ 1816.354470][ T10] usb 8-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 1816.359281][ T10] usb 8-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1816.359310][ T10] usb 8-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1816.359326][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1816.359347][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1816.425510][ T10] usb 8-1: config 0 descriptor?? [ 1816.466409][ T9845] usb 9-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 1816.470506][ T9845] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1816.470577][ T9845] usb 9-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 1816.507889][ T9845] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1816.507917][ T9845] usb 9-1: Product: syz [ 1816.507933][ T9845] usb 9-1: Manufacturer: syz [ 1816.507949][ T9845] usb 9-1: SerialNumber: syz [ 1816.542615][ T5843] usb 7-1: USB disconnect, device number 32 [ 1816.848791][ T10] usbhid 8-1:0.0: can't add hid device: -71 [ 1816.848927][ T10] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1816.877530][ T10] usb 8-1: USB disconnect, device number 38 [ 1816.936876][T19312] FAULT_INJECTION: forcing a failure. [ 1816.936876][T19312] name failslab, interval 1, probability 0, space 0, times 0 [ 1816.936949][T19312] CPU: 1 UID: 0 PID: 19312 Comm: syz.3.2741 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1816.936967][T19312] Tainted: [L]=SOFTLOCKUP [ 1816.936972][T19312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1816.936980][T19312] Call Trace: [ 1816.936985][T19312] [ 1816.936991][T19312] dump_stack_lvl+0xe8/0x150 [ 1816.937013][T19312] should_fail_ex+0x46b/0x600 [ 1816.937032][T19312] ? alloc_slab_obj_exts+0x5c/0x180 [ 1816.937050][T19312] should_failslab+0xa8/0x100 [ 1816.937062][T19312] ? alloc_slab_obj_exts+0x5c/0x180 [ 1816.937076][T19312] __kmalloc_flags_noprof+0x128/0x810 [ 1816.937093][T19312] ? alloc_slab_obj_exts+0x5c/0x180 [ 1816.937112][T19312] alloc_slab_obj_exts+0x5c/0x180 [ 1816.937129][T19312] __memcg_slab_post_alloc_hook+0x62d/0xde0 [ 1816.937153][T19312] ? dax_alloc_inode+0x2a/0x90 [ 1816.937169][T19312] kmem_cache_alloc_lru_noprof+0x41c/0x680 [ 1816.937184][T19312] ? dax_alloc_inode+0x2a/0x90 [ 1816.937198][T19312] ? dax_alloc_inode+0x2a/0x90 [ 1816.937215][T19312] ? __pfx_dax_alloc_inode+0x10/0x10 [ 1816.937229][T19312] dax_alloc_inode+0x2a/0x90 [ 1816.937243][T19312] alloc_inode+0x6a/0x1b0 [ 1816.937255][T19312] ? __pfx_dax_test+0x10/0x10 [ 1816.937268][T19312] ? __pfx_dax_set+0x10/0x10 [ 1816.937281][T19312] iget5_locked+0x4a/0xa0 [ 1816.937295][T19312] alloc_dax+0x11c/0x350 [ 1816.937309][T19312] ? __pfx_sprintf+0x10/0x10 [ 1816.937325][T19312] ? __pfx_alloc_dax+0x10/0x10 [ 1816.937349][T19312] dm_create+0xa9e/0xf80 [ 1816.937366][T19312] dev_create+0x1f7/0x400 [ 1816.937379][T19312] ? __pfx_dev_create+0x10/0x10 [ 1816.937395][T19312] dm_ctl_ioctl+0x9ec/0xe10 [ 1816.937414][T19312] ? __pfx_dev_create+0x10/0x10 [ 1816.937425][T19312] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 1816.937459][T19312] ? __fget_files+0x2a/0x420 [ 1816.937472][T19312] ? __fget_files+0x3a8/0x420 [ 1816.937483][T19312] ? __fget_files+0x2a/0x420 [ 1816.937497][T19312] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1816.937512][T19312] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 1816.937522][T19312] __se_sys_ioctl+0xff/0x170 [ 1816.937539][T19312] do_syscall_64+0x166/0x520 [ 1816.937551][T19312] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1816.937563][T19312] ? clear_bhb_loop+0x70/0xc0 [ 1816.937576][T19312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1816.937588][T19312] RIP: 0033:0x7fb78005e159 [ 1816.937601][T19312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1816.937611][T19312] RSP: 002b:00007fb77e2b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1816.937626][T19312] RAX: ffffffffffffffda RBX: 00007fb7802e5fa0 RCX: 00007fb78005e159 [ 1816.937634][T19312] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 1816.937642][T19312] RBP: 00007fb7800f506b R08: 0000000000000000 R09: 0000000000000000 [ 1816.937649][T19312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1816.937657][T19312] R13: 00007fb7802e6038 R14: 00007fb7802e5fa0 R15: 00007ffda911f808 [ 1816.937674][T19312] [ 1817.285626][ T5843] usb 1-1: new full-speed USB device number 126 using dummy_hcd [ 1817.455208][ T36] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1817.474736][ T5843] usb 1-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice= 1.00 [ 1817.476591][ T5843] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1817.476635][ T5843] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1817.525151][ T5843] mdc800 1-1:1.0: probe fails -> Wrong Endpoints. [ 1817.614050][ T36] usb 7-1: Using ep0 maxpacket: 32 [ 1817.634883][ T36] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1817.639239][ T36] usb 7-1: New USB device found, idVendor=1199, idProduct=0224, bcdDevice=a4.0d [ 1817.649800][ T36] usb 7-1: config 129 has an invalid interface number: 6 but max is 0 [ 1817.649829][ T36] usb 7-1: config 129 has no interface number 0 [ 1817.649952][ T36] usb 7-1: config 129 interface 6 altsetting 0 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 1817.688990][ T36] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1817.689020][ T36] usb 7-1: Product: syz [ 1817.689091][ T36] usb 7-1: Manufacturer: syz [ 1817.689108][ T36] usb 7-1: SerialNumber: syz [ 1817.735812][T15062] usb 1-1: USB disconnect, device number 126 [ 1817.764237][ T9105] Bluetooth: hci3: command tx timeout [ 1817.964559][ T36] hub 7-1:129.6: bad descriptor, ignoring hub [ 1817.964585][ T36] hub 7-1:129.6: probe with driver hub failed with error -5 [ 1817.966760][ T36] sierra 7-1:129.6: Sierra USB modem converter detected [ 1818.025543][ C1] usb 9-1: received EP1 urb->status = -2 [ 1818.027033][ T9845] usb 9-1: unable to init card! (ret=-19) [ 1818.051645][ T36] usb 7-1: Sierra USB modem converter now attached to ttyUSB0 [ 1818.138996][ T36] usb 7-1: USB disconnect, device number 33 [ 1818.178027][ T36] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1818.181751][ T36] sierra 7-1:129.6: device disconnected [ 1818.603831][ T5702] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 1818.773764][T15062] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 1818.804256][ T5702] usb 1-1: Using ep0 maxpacket: 32 [ 1818.805031][ T5702] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1818.805985][ T5702] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1818.806003][ T5702] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58999, setting to 1024 [ 1818.806028][ T5702] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1818.812569][ T5702] usb 1-1: config 0 descriptor?? [ 1818.813241][T19329] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1818.893416][ T5702] hub 1-1:0.0: USB hub found [ 1818.955314][T15062] usb 8-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 1818.960390][T15062] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1818.960419][T15062] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1818.960470][T15062] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1819.009435][T15062] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1819.009464][T15062] usb 8-1: Product: syz [ 1819.009480][T15062] usb 8-1: Manufacturer: syz [ 1819.009496][T15062] usb 8-1: SerialNumber: syz [ 1819.021487][ T5702] hub 1-1:0.0: 1 port detected [ 1819.065238][T15062] uvcvideo 8-1:1.0: Found UVC 1.00 device syz (046d:0821) [ 1819.126654][ T36] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1819.258258][T15062] uvcvideo 8-1:1.0: Failed to query (GET_INFO) UVC control 1 on unit 3: -71 (exp. 1). [ 1819.258386][T15062] uvcvideo 8-1:1.0: No streaming interface found for terminal 32770. [ 1819.277012][ T36] usb 7-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 1819.283090][ T36] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1819.283340][ T36] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1819.283376][ T36] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1819.283409][ T36] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1819.337925][T15062] usb 8-1: USB disconnect, device number 39 [ 1819.345648][ T36] usb 7-1: config 0 descriptor?? [ 1819.396090][ T5843] usb 9-1: USB disconnect, device number 56 [ 1819.800309][ T36] usbhid 7-1:0.0: can't add hid device: -71 [ 1819.800535][ T36] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1819.878981][ T5843] usb 1-1: USB disconnect, device number 127 [ 1819.915487][ T36] usb 7-1: USB disconnect, device number 34 [ 1820.423748][ T36] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 1820.724650][ T36] usb 8-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 1820.726171][ T36] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1820.726200][ T36] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1820.728910][ T36] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1820.728936][ T36] usb 8-1: Product: syz [ 1820.728952][ T36] usb 8-1: Manufacturer: syz [ 1820.728967][ T36] usb 8-1: SerialNumber: syz [ 1820.742563][ T36] ums-sddr09 8-1:1.0: USB Mass Storage device detected [ 1820.757973][ T36] ums-sddr09 8-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 1820.757973][ T36] Please send a copy of this message to and [ 1821.903704][ T5843] usb 9-1: new high-speed USB device number 57 using dummy_hcd [ 1822.074484][ T5843] usb 9-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 5.00 [ 1822.075997][ T5843] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1822.076075][ T5843] usb 9-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1822.076099][ T5843] usb 9-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1822.076123][ T5843] usb 9-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1822.076165][ T5843] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1822.181715][ T5843] pl2303 9-1:1.0: required endpoints missing [ 1822.219545][ T5843] pl2303 9-1:1.1: required endpoints missing [ 1822.273763][T15062] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 1822.435207][T15062] usb 4-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 1822.439705][T15062] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1822.439772][T15062] usb 4-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 1822.450301][ T36] scsi host1: usb-storage 8-1:1.0 [ 1822.460305][ T9845] usb 9-1: USB disconnect, device number 57 [ 1822.496346][T15062] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1822.496375][T15062] usb 4-1: Product: syz [ 1822.496390][T15062] usb 4-1: Manufacturer: syz [ 1822.496405][T15062] usb 4-1: SerialNumber: syz [ 1822.532661][ T36] usb 8-1: USB disconnect, device number 40 [ 1822.673855][ T5843] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1822.824988][ T5843] usb 7-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 1822.827143][ T5843] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1822.827170][ T5843] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1822.827480][ T5843] usb 7-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1822.832105][ T5843] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1822.832132][ T5843] usb 7-1: Product: syz [ 1822.832200][ T5843] usb 7-1: Manufacturer: syz [ 1822.832216][ T5843] usb 7-1: SerialNumber: syz [ 1822.938424][ T5843] uvcvideo 7-1:1.0: Found UVC 1.00 device syz (046d:0821) [ 1823.152058][ T5843] uvcvideo 7-1:1.0: Failed to query (GET_INFO) UVC control 1 on unit 3: -71 (exp. 1). [ 1823.152424][ T5843] uvcvideo 7-1:1.0: No streaming interface found for terminal 32770. [ 1823.243891][ T5843] usb 7-1: USB disconnect, device number 35 [ 1823.843490][T19405] No control pipe specified [ 1824.169641][T15062] input: à°Š as /devices/platform/dummy_hcd.3/usb4/4-1/input/input88 [ 1824.246212][T19412] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1824.253763][ T5607] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 1824.440054][ T5607] usb 8-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 5.00 [ 1824.468767][ T5607] usb 8-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1824.468802][ T5607] usb 8-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1824.468847][ T5607] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1824.567789][ T5607] pl2303 8-1:1.0: required endpoints missing [ 1824.602186][ T5607] pl2303 8-1:1.1: required endpoints missing [ 1824.633789][ T5702] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1824.794709][ T5702] usb 1-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 1824.796644][ T5702] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1824.796673][ T5702] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1824.799098][ T5702] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1824.799123][ T5702] usb 1-1: Product: syz [ 1824.799137][ T5702] usb 1-1: Manufacturer: syz [ 1824.799152][ T5702] usb 1-1: SerialNumber: syz [ 1824.880953][ T5607] usb 8-1: USB disconnect, device number 41 [ 1824.958709][ T5702] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 1825.050013][ T5702] ums-sddr09 1-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 1825.050013][ T5702] Please send a copy of this message to and [ 1825.456303][ C0] usb 4-1: received EP1 urb->status = -71 [ 1825.817339][T15062] usb 4-1: USB disconnect, device number 31 [ 1826.078225][ T5702] scsi host1: usb-storage 1-1:1.0 [ 1826.113420][ T5702] usb 1-1: USB disconnect, device number 2 [ 1826.224908][T19444] No control pipe specified [ 1826.565389][ T5607] usb 9-1: new full-speed USB device number 58 using dummy_hcd [ 1826.627895][T15680] udevd[15680]: setting owner of /dev/bus/usb/004/031 to uid=0, gid=0 failed: No such file or directory [ 1826.668512][T15797] udevd[15797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1826.726237][ T5607] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1826.727134][ T5607] usb 9-1: not running at top speed; connect to a high speed hub [ 1826.727178][ T5607] usb 9-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=96.31 [ 1826.730506][ T5607] usb 9-1: config 6 has an invalid interface number: 210 but max is 0 [ 1826.730533][ T5607] usb 9-1: config 6 has no interface number 0 [ 1826.730579][ T5607] usb 9-1: config 6 interface 210 altsetting 125 has an invalid endpoint descriptor of length 2, skipping [ 1826.730606][ T5607] usb 9-1: config 6 interface 210 altsetting 125 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1826.730635][ T5607] usb 9-1: config 6 interface 210 has no altsetting 0 [ 1826.764488][ T5607] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1826.764574][ T5607] usb 9-1: Product: syz [ 1826.764591][ T5607] usb 9-1: Manufacturer: syz [ 1826.764605][ T5607] usb 9-1: SerialNumber: syz [ 1827.196561][ T5607] vmk80xx 9-1:6.210: driver 'vmk80xx' failed to auto-configure device. [ 1827.239978][ T5607] usb 9-1: USB disconnect, device number 58 [ 1827.267607][T15666] udevd[15666]: setting mode of /dev/bus/usb/009/058 to 020664 failed: No such file or directory [ 1827.267796][T15666] udevd[15666]: setting owner of /dev/bus/usb/009/058 to uid=0, gid=0 failed: No such file or directory [ 1827.314188][ T36] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1827.463713][ T36] usb 1-1: Using ep0 maxpacket: 16 [ 1827.465961][ T36] usb 1-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 1827.467837][ T36] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1827.467872][ T36] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1827.467904][ T36] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1827.467940][ T36] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1827.537067][ T36] usb 1-1: config 0 descriptor?? [ 1827.653731][ T5702] usb 8-1: new full-speed USB device number 42 using dummy_hcd [ 1827.804857][ T5702] usb 8-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 1827.806802][ T5702] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1827.806928][ T5702] usb 8-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 1827.812312][ T5702] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1827.812340][ T5702] usb 8-1: Product: syz [ 1827.812732][ T5702] usb 8-1: Manufacturer: syz [ 1827.812749][ T5702] usb 8-1: SerialNumber: syz [ 1828.337426][ T36] hid-multitouch 0003:0EEF:72C4.002E: hiddev0,hidraw0: USB HID v0.00 Device [HID 0eef:72c4] on usb-dummy_hcd.0-1/input0 [ 1828.511719][ C1] usb 8-1: received EP1 urb->status = -2 [ 1828.523793][ T5702] usb 8-1: unable to init card! (ret=-110) [ 1828.623857][ T5702] snd-usb-caiaq 8-1:1.0: probe with driver snd-usb-caiaq failed with error -110 [ 1828.955019][ T36] usb 1-1: USB disconnect, device number 3 [ 1829.286999][T19475] fido_id[19475]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1830.944216][ T5702] usb 8-1: USB disconnect, device number 42 [ 1831.659948][T19530] program syz.6.2822 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1831.843854][T15062] usb 9-1: new high-speed USB device number 59 using dummy_hcd [ 1831.996644][T15062] usb 9-1: Using ep0 maxpacket: 32 [ 1831.997258][T15062] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1831.998362][T15062] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1831.998387][T15062] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58999, setting to 1024 [ 1831.998412][T15062] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1832.926581][T15062] usb 9-1: config 0 descriptor?? [ 1832.934615][T19528] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1832.956394][T15062] hub 9-1:0.0: USB hub found [ 1833.157671][T15062] hub 9-1:0.0: 1 port detected [ 1833.185435][T11516] Bluetooth: hci5: unexpected event for opcode 0x042c [ 1833.221603][T11516] Bluetooth: hci5: unexpected event for opcode 0x0803 [ 1833.237664][T19550] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2830'. [ 1833.925766][T19566] 9pnet_virtio: no channels available for device syz [ 1833.978074][T19528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1833.978705][T19528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1834.212453][ T9845] usb 9-1: USB disconnect, device number 59 [ 1834.239895][T15062] usb 9-1-port1: connect-debounce failed [ 1834.683770][T15062] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 1834.834608][T15062] usb 8-1: Using ep0 maxpacket: 16 [ 1834.837128][T15062] usb 8-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 1834.842114][T15062] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1834.842169][T15062] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 1834.842199][T15062] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 1834.842226][T15062] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 1834.842250][T15062] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1834.933016][T15062] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1834.933036][T15062] usb 8-1: Product: syz [ 1834.933045][T15062] usb 8-1: Manufacturer: syz [ 1834.933053][T15062] usb 8-1: SerialNumber: syz [ 1835.703739][T11516] Bluetooth: hci3: command 0x0406 tx timeout [ 1835.915077][T15062] usb 8-1: config 0 descriptor?? [ 1835.958955][T15062] xbox_remote_probe: endpoint_in message size==0? [ 1836.266147][ T5702] usb 8-1: USB disconnect, device number 43 [ 1836.487459][T19597] input: syz0 as /devices/virtual/input/input90 [ 1837.663717][ T5711] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1837.814666][ T5711] usb 1-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 5.00 [ 1837.825098][ T5711] usb 1-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1837.825133][ T5711] usb 1-1: config 1 interface 1 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 1837.825171][ T5711] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1837.890661][ T5711] pl2303 1-1:1.0: required endpoints missing [ 1837.916224][ T5711] pl2303 1-1:1.1: required endpoints missing [ 1838.084367][ T5607] usb 9-1: new high-speed USB device number 60 using dummy_hcd [ 1838.114030][ T5711] usb 1-1: USB disconnect, device number 4 [ 1838.234369][ T5607] usb 9-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 1838.242597][ T5607] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1838.242628][ T5607] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1838.289702][ T5607] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1838.289721][ T5607] usb 9-1: Product: syz [ 1838.289735][ T5607] usb 9-1: Manufacturer: syz [ 1838.289744][ T5607] usb 9-1: SerialNumber: syz [ 1838.340871][ T5607] ums-sddr09 9-1:1.0: USB Mass Storage device detected [ 1838.358965][ T5607] ums-sddr09 9-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 1838.358965][ T5607] Please send a copy of this message to and [ 1839.213750][ T5711] usb 8-1: new full-speed USB device number 44 using dummy_hcd [ 1839.370429][ T5711] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1839.371683][ T5711] usb 8-1: not running at top speed; connect to a high speed hub [ 1839.371722][ T5711] usb 8-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=96.31 [ 1839.386980][ T5711] usb 8-1: config 6 has an invalid interface number: 210 but max is 0 [ 1839.387043][ T5711] usb 8-1: config 6 has no interface number 0 [ 1839.387092][ T5711] usb 8-1: config 6 interface 210 altsetting 125 has an invalid endpoint descriptor of length 5, skipping [ 1839.387119][ T5711] usb 8-1: config 6 interface 210 altsetting 125 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1839.387148][ T5711] usb 8-1: config 6 interface 210 has no altsetting 0 [ 1839.403826][ T5702] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1839.465946][ T5711] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1839.465976][ T5711] usb 8-1: Product: syz [ 1839.465993][ T5711] usb 8-1: Manufacturer: syz [ 1839.466008][ T5711] usb 8-1: SerialNumber: syz [ 1839.496357][T19641] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1839.501415][ T5607] scsi host1: usb-storage 9-1:1.0 [ 1839.544931][ T5607] usb 9-1: USB disconnect, device number 60 [ 1839.556025][ T5702] usb 7-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 1839.564909][ T5702] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1839.565490][ T5702] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1839.565521][ T5702] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1839.565557][ T5702] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1839.631199][ T5702] usb 7-1: config 0 descriptor?? [ 1839.908877][ T5711] vmk80xx 8-1:6.210: driver 'vmk80xx' failed to auto-configure device. [ 1839.972685][ T5711] usb 8-1: USB disconnect, device number 44 [ 1840.088230][T19662] gadgetfs: bound to dummy_udc driver [ 1840.111451][ T5702] usbhid 7-1:0.0: can't add hid device: -71 [ 1840.111576][ T5702] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1840.115579][ T5702] usb 7-1: USB disconnect, device number 36 [ 1840.313859][ T9105] Bluetooth: hci6: unexpected event 0x03 length: 1 < 11 [ 1841.028430][ T5711] usb 8-1: new full-speed USB device number 45 using dummy_hcd [ 1841.553346][ T5711] usb 8-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 1841.572099][ T5711] usb 8-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1841.572216][ T5711] usb 8-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1841.572728][ T5711] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1841.572924][ T5711] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1842.093062][ T5711] usb 8-1: config 0 descriptor?? [ 1842.099585][T19678] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1842.724809][ T5711] usbhid 8-1:0.0: can't add hid device: -71 [ 1842.724939][ T5711] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1842.730509][ T5711] usb 8-1: USB disconnect, device number 45 [ 1842.733719][ T5607] usb 9-1: new full-speed USB device number 61 using dummy_hcd [ 1842.899196][ T5607] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1842.899736][ T5607] usb 9-1: not running at top speed; connect to a high speed hub [ 1842.899775][ T5607] usb 9-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=96.31 [ 1842.900859][ T5607] usb 9-1: config 6 has an invalid interface number: 210 but max is 0 [ 1842.900885][ T5607] usb 9-1: config 6 has no interface number 0 [ 1842.900930][ T5607] usb 9-1: config 6 interface 210 altsetting 125 has an invalid endpoint descriptor of length 6, skipping [ 1842.900955][ T5607] usb 9-1: config 6 interface 210 altsetting 125 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1842.900982][ T5607] usb 9-1: config 6 interface 210 has no altsetting 0 [ 1842.903784][ T5843] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1842.999424][ T5607] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1842.999453][ T5607] usb 9-1: Product: syz [ 1842.999469][ T5607] usb 9-1: Manufacturer: syz [ 1842.999486][ T5607] usb 9-1: SerialNumber: syz [ 1843.020602][T19701] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1843.080903][ T5843] usb 4-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 1843.085052][ T5843] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1843.085087][ T5843] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1843.085168][ T5843] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1843.085203][ T5843] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1843.102990][ T5843] usb 4-1: config 0 descriptor?? [ 1843.388439][ T9105] Bluetooth: hci5: unexpected event for opcode 0x2012 [ 1843.435684][ T5607] vmk80xx 9-1:6.210: driver 'vmk80xx' failed to auto-configure device. [ 1843.499034][ T5607] usb 9-1: USB disconnect, device number 61 [ 1843.571981][ T5843] usbhid 4-1:0.0: can't add hid device: -71 [ 1843.572060][ T5843] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1843.630293][ T5843] usb 4-1: USB disconnect, device number 32 [ 1844.633794][ T36] usb 7-1: new full-speed USB device number 37 using dummy_hcd [ 1844.787200][ T36] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1844.791058][ T36] usb 7-1: config index 0 descriptor too short (expected 95, got 46) [ 1844.791088][ T36] usb 7-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1844.791108][ T36] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1844.791165][ T36] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1844.853507][ T36] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1844.853538][ T36] usb 7-1: Product: syz [ 1844.853555][ T36] usb 7-1: Manufacturer: syz [ 1844.863977][ T36] usb 7-1: SerialNumber: syz [ 1845.130730][ T36] usb 7-1: 0:2 : does not exist [ 1845.183975][ T5702] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 1845.211903][ T36] usb 7-1: USB disconnect, device number 37 [ 1845.288068][T15800] udevd[15800]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1845.357372][ T5702] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1845.358122][ T5702] usb 1-1: not running at top speed; connect to a high speed hub [ 1845.358159][ T5702] usb 1-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=96.31 [ 1845.366454][ T5702] usb 1-1: config 6 has an invalid interface number: 210 but max is 0 [ 1845.366482][ T5702] usb 1-1: config 6 has no interface number 0 [ 1845.366531][ T5702] usb 1-1: config 6 interface 210 altsetting 125 has an invalid endpoint descriptor of length 6, skipping [ 1845.366559][ T5702] usb 1-1: config 6 interface 210 altsetting 125 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1845.366587][ T5702] usb 1-1: config 6 interface 210 has no altsetting 0 [ 1845.393709][ T5702] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1845.393735][ T5702] usb 1-1: Product: syz [ 1845.393748][ T5702] usb 1-1: Manufacturer: syz [ 1845.393760][ T5702] usb 1-1: SerialNumber: syz [ 1845.539136][T19747] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1845.936786][ T5702] vmk80xx 1-1:6.210: driver 'vmk80xx' failed to auto-configure device. [ 1846.000899][ T5702] usb 1-1: USB disconnect, device number 5 [ 1846.079543][T19769] FAULT_INJECTION: forcing a failure. [ 1846.079543][T19769] name failslab, interval 1, probability 0, space 0, times 0 [ 1846.079583][T19769] CPU: 1 UID: 0 PID: 19769 Comm: syz.3.2915 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1846.079613][T19769] Tainted: [L]=SOFTLOCKUP [ 1846.079621][T19769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1846.079635][T19769] Call Trace: [ 1846.079644][T19769] [ 1846.079656][T19769] dump_stack_lvl+0xe8/0x150 [ 1846.079695][T19769] should_fail_ex+0x46b/0x600 [ 1846.079731][T19769] should_failslab+0xa8/0x100 [ 1846.079756][T19769] __kmalloc_noprof+0xfb/0x790 [ 1846.079784][T19769] ? snd_pcm_hw_refine+0xa18/0x17d0 [ 1846.079806][T19769] ? snd_pcm_hw_refine+0xa18/0x17d0 [ 1846.079836][T19769] snd_pcm_hw_refine+0xa18/0x17d0 [ 1846.079868][T19769] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 1846.079917][T19769] ? __kmalloc_cache_noprof+0x3d5/0x680 [ 1846.079946][T19769] ? snd_pcm_oss_change_params_locked+0x910/0x3c80 [ 1846.079975][T19769] ? snd_pcm_oss_change_params_locked+0x910/0x3c80 [ 1846.080004][T19769] ? snd_pcm_oss_change_params_locked+0x92c/0x3c80 [ 1846.080039][T19769] ? snd_interval_refine+0x5f8/0xa40 [ 1846.080071][T19769] snd_pcm_oss_change_params_locked+0xb2d/0x3c80 [ 1846.080134][T19769] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1846.080163][T19769] ? do_raw_spin_lock+0x12b/0x2f0 [ 1846.080199][T19769] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1846.080229][T19769] ? mutex_lock_interruptible_nested+0x152/0x1d0 [ 1846.080259][T19769] ? snd_pcm_oss_get_active_substream+0x198/0x280 [ 1846.080294][T19769] snd_pcm_oss_get_active_substream+0x20b/0x280 [ 1846.080330][T19769] snd_pcm_oss_ioctl+0x9e7/0xe00 [ 1846.080358][T19769] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1846.080386][T19769] __se_sys_ioctl+0xff/0x170 [ 1846.080416][T19769] do_syscall_64+0x166/0x520 [ 1846.080438][T19769] ? trace_irq_disable+0x3b/0x140 [ 1846.080466][T19769] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1846.080487][T19769] ? clear_bhb_loop+0x70/0xc0 [ 1846.080533][T19769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1846.080555][T19769] RIP: 0033:0x7fb78005e159 [ 1846.080576][T19769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1846.080595][T19769] RSP: 002b:00007fb77e2b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1846.080619][T19769] RAX: ffffffffffffffda RBX: 00007fb7802e5fa0 RCX: 00007fb78005e159 [ 1846.080636][T19769] RDX: 0000200000000040 RSI: 0000000080045002 RDI: 0000000000000004 [ 1846.080651][T19769] RBP: 00007fb7800f506b R08: 0000000000000000 R09: 0000000000000000 [ 1846.080666][T19769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1846.080679][T19769] R13: 00007fb7802e6038 R14: 00007fb7802e5fa0 R15: 00007ffda911f808 [ 1846.080720][T19769] [ 1846.943719][ T5607] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1847.095818][ T5607] usb 1-1: Using ep0 maxpacket: 16 [ 1847.096648][ T5607] usb 1-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 1847.098273][ T5607] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1847.098306][ T5607] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1847.098335][ T5607] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1847.098369][ T5607] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1847.110387][ T5607] usb 1-1: config 0 descriptor?? [ 1847.173836][ T10] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1847.294961][ T5843] usb 8-1: new full-speed USB device number 46 using dummy_hcd [ 1847.327637][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 1847.333505][ T10] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1847.338915][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1847.338947][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58999, setting to 1024 [ 1847.338992][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1847.409258][ T10] usb 7-1: config 0 descriptor?? [ 1847.426335][T19789] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1847.472066][ T10] hub 7-1:0.0: USB hub found [ 1847.542473][ T5607] usbhid 1-1:0.0: can't add hid device: -71 [ 1847.554026][ T5843] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1847.555755][ T5843] usb 8-1: config index 0 descriptor too short (expected 95, got 46) [ 1847.555784][ T5843] usb 8-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1847.555806][ T5843] usb 8-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1847.555888][ T5843] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1847.571002][ T5843] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1847.571030][ T5843] usb 8-1: Product: syz [ 1847.571045][ T5843] usb 8-1: Manufacturer: syz [ 1847.571061][ T5843] usb 8-1: SerialNumber: syz [ 1847.631008][ T5607] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1847.753482][ T5607] usb 1-1: USB disconnect, device number 6 [ 1847.758018][ T10] hub 7-1:0.0: 1 port detected [ 1847.994032][ T5843] usb 8-1: 0:2 : does not exist [ 1848.045646][ T5843] usb 8-1: USB disconnect, device number 46 [ 1848.151847][T15800] udevd[15800]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1848.351272][T19801] kvm: requested 6704 ns i8254 timer period limited to 200000 ns [ 1848.386874][T15062] usb 7-1: USB disconnect, device number 38 [ 1848.473740][ T10] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 1848.485223][T18609] usb 7-1: Failed to suspend device, error -19 [ 1848.636991][ T10] usb 1-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 1848.638560][ T10] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1848.638594][ T10] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1848.638622][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1848.638655][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1848.706840][ T10] usb 1-1: config 0 descriptor?? [ 1848.708042][T19800] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1849.013861][T15062] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 1849.119629][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 1849.120054][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 1849.120451][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 1849.120617][ T10] usbhid 1-1:0.0: can't add hid device: -32 [ 1849.120736][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 1849.143888][ T10] usb 1-1: USB disconnect, device number 7 [ 1849.163729][T15062] usb 7-1: Using ep0 maxpacket: 32 [ 1849.179054][T15062] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1849.194103][T15062] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1849.194151][T15062] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58999, setting to 1024 [ 1849.194198][T15062] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1849.218158][T15062] usb 7-1: config 0 descriptor?? [ 1849.251380][T19789] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1849.261906][T15062] hub 7-1:0.0: USB hub found [ 1849.472427][T15062] hub 7-1:0.0: 4 ports detected [ 1849.765707][T15062] hub 7-1:0.0: config failed, can't get hub status (err -71) [ 1849.788691][T15062] usbhid 7-1:0.0: can't add hid device: -71 [ 1849.788823][T15062] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1849.834645][T15062] usb 7-1: USB disconnect, device number 39 [ 1851.101568][T19849] FAULT_INJECTION: forcing a failure. [ 1851.101568][T19849] name failslab, interval 1, probability 0, space 0, times 0 [ 1851.101594][T19849] CPU: 0 UID: 0 PID: 19849 Comm: syz.8.2946 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1851.101610][T19849] Tainted: [L]=SOFTLOCKUP [ 1851.101615][T19849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1851.101622][T19849] Call Trace: [ 1851.101627][T19849] [ 1851.101634][T19849] dump_stack_lvl+0xe8/0x150 [ 1851.101655][T19849] should_fail_ex+0x46b/0x600 [ 1851.101675][T19849] should_failslab+0xa8/0x100 [ 1851.101692][T19849] __kmalloc_node_track_caller_noprof+0xfb/0x7b0 [ 1851.101712][T19849] ? kasprintf+0xe2/0x140 [ 1851.101728][T19849] ? kasprintf+0xe2/0x140 [ 1851.101749][T19849] kvasprintf+0xeb/0x1a0 [ 1851.101767][T19849] ? __pfx_kvasprintf+0x10/0x10 [ 1851.101792][T19849] kasprintf+0xe2/0x140 [ 1851.101811][T19849] ? __pfx_kasprintf+0x10/0x10 [ 1851.101829][T19849] ? simple_xattr_alloc+0xbd/0x100 [ 1851.101849][T19849] shmem_initxattrs+0x2f4/0x530 [ 1851.101865][T19849] security_inode_init_security+0x29b/0x3e0 [ 1851.101879][T19849] ? __pfx_shmem_initxattrs+0x10/0x10 [ 1851.101892][T19849] ? __pfx_security_inode_init_security+0x10/0x10 [ 1851.101905][T19849] ? set_cached_acl+0xd2/0x180 [ 1851.101919][T19849] ? simple_acl_create+0x184/0x1b0 [ 1851.101937][T19849] shmem_mknod+0x1ea/0x340 [ 1851.101950][T19849] shmem_mkdir+0x33/0x70 [ 1851.101961][T19849] vfs_mkdir+0x408/0x620 [ 1851.101981][T19849] filename_mkdirat+0x289/0x520 [ 1851.102000][T19849] ? __pfx_filename_mkdirat+0x10/0x10 [ 1851.102018][T19849] ? do_getname+0x151/0x250 [ 1851.102031][T19849] __se_sys_mkdirat+0x35/0x150 [ 1851.102048][T19849] do_syscall_64+0x166/0x520 [ 1851.102060][T19849] ? trace_irq_disable+0x3b/0x140 [ 1851.102076][T19849] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1851.102088][T19849] ? clear_bhb_loop+0x70/0xc0 [ 1851.102102][T19849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1851.102114][T19849] RIP: 0033:0x7f49f39fe159 [ 1851.102125][T19849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1851.102139][T19849] RSP: 002b:00007f49f1c56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1851.102153][T19849] RAX: ffffffffffffffda RBX: 00007f49f3c85fa0 RCX: 00007f49f39fe159 [ 1851.102162][T19849] RDX: 00000000000001ff RSI: 0000200000000100 RDI: ffffffffffffff9c [ 1851.102170][T19849] RBP: 00007f49f3a9506b R08: 0000000000000000 R09: 0000000000000000 [ 1851.102178][T19849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1851.102193][T19849] R13: 00007f49f3c86038 R14: 00007f49f3c85fa0 R15: 00007ffc3a490f48 [ 1851.102211][T19849] [ 1852.819601][ T5711] usb 8-1: new full-speed USB device number 47 using dummy_hcd [ 1853.376067][ T5711] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1853.377043][ T5711] usb 8-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=96.31 [ 1853.378050][ T5711] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 1853.378085][ T5711] usb 8-1: can't read configurations, error -71 [ 1853.633018][T19895] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1854.093803][ T10] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 1854.180524][T19906] fuse: root generation should be zero [ 1854.254714][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1854.256093][ T10] usb 1-1: config index 0 descriptor too short (expected 95, got 46) [ 1854.256121][ T10] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1854.256140][ T10] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1854.256161][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1854.259740][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1854.259766][ T10] usb 1-1: Product: syz [ 1854.259781][ T10] usb 1-1: Manufacturer: syz [ 1854.259797][ T10] usb 1-1: SerialNumber: syz [ 1854.303936][T15062] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 1854.433918][T15062] usb 7-1: device descriptor read/64, error -71 [ 1854.481047][ T10] usb 1-1: 0:2 : does not exist [ 1854.508487][ T10] usb 1-1: USB disconnect, device number 8 [ 1854.537974][T15800] udevd[15800]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1854.673851][T15062] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 1854.803848][T15062] usb 7-1: device descriptor read/64, error -71 [ 1854.811916][T19922] jffs2: notice: (19922) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 1854.914301][T15062] usb usb7-port1: attempt power cycle [ 1855.253785][T15062] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 1855.275261][T15062] usb 7-1: device descriptor read/8, error -71 [ 1855.513757][T15062] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 1855.534997][T15062] usb 7-1: device descriptor read/8, error -71 [ 1855.644668][T15062] usb usb7-port1: unable to enumerate USB device [ 1855.843949][ T5702] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 1855.993785][T15062] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 1856.000660][ T5702] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1856.001631][ T5702] usb 1-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=96.31 [ 1856.002693][ T5702] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1856.002728][ T5702] usb 1-1: can't read configurations, error -71 [ 1856.123762][T15062] usb 7-1: device descriptor read/64, error -71 [ 1856.223747][ T36] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 1856.363836][T15062] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 1856.395929][ T36] usb 4-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 1856.397134][ T36] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1856.397154][ T36] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1856.397170][ T36] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1856.397188][ T36] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1856.402323][ T36] usb 4-1: config 0 descriptor?? [ 1856.404304][T19946] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1856.493788][T15062] usb 7-1: device descriptor read/64, error -71 [ 1856.605224][T15062] usb usb7-port1: attempt power cycle [ 1856.620410][T19950] jffs2: notice: (19950) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 1856.826462][ T36] usbhid 4-1:0.0: can't add hid device: -71 [ 1856.826588][ T36] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1856.850555][ T36] usb 4-1: USB disconnect, device number 33 [ 1857.414939][T19978] kAFS: bad VL server IP address [ 1857.514783][T15062] usb usb7-port1: Cannot enable. Maybe the USB cable is bad? [ 1857.604769][ T5702] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 1857.643799][T15062] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 1857.666517][T15062] usb 7-1: Using ep0 maxpacket: 8 [ 1857.667469][T15062] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1857.669545][T15062] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1857.669601][T15062] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1857.669617][T15062] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1857.669630][T15062] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1857.669644][T15062] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1857.669668][T15062] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1857.824553][ T5702] usb 8-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 1857.826311][ T5702] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1857.829318][ T5702] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1857.833556][ T5702] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1857.849991][ T5702] usb 8-1: Product: syz [ 1857.850012][ T5702] usb 8-1: Manufacturer: syz [ 1857.850028][ T5702] usb 8-1: SerialNumber: syz [ 1857.908747][ T5702] ti_usb_3410_5052 8-1:2.0: TI USB 5052 2 port adapter converter detected [ 1857.924051][ T5702] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 1857.930693][T15062] usb 7-1: usb_control_msg returned -32 [ 1857.930757][T15062] usbtmc 7-1:16.0: can't read capabilities [ 1857.931516][ T5702] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 1858.246726][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 1858.246799][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 1858.423339][T20000] usbtmc 7-1:16.0: usb_clear_halt returned -32 [ 1858.503768][T15167] usb 9-1: new full-speed USB device number 62 using dummy_hcd [ 1858.603787][ T5702] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1858.628480][T15062] usb 7-1: USB disconnect, device number 47 [ 1858.674662][T15167] usb 9-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 1858.708962][T15167] usb 9-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1858.709000][T15167] usb 9-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1858.709029][T15167] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1858.709063][T15167] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1858.728039][T15167] usb 9-1: config 0 descriptor?? [ 1858.763896][ T5702] usb 1-1: device descriptor read/64, error -71 [ 1858.764902][T19998] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1859.023880][ T5702] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1859.153780][ T5702] usb 1-1: device descriptor read/64, error -71 [ 1859.190456][ C0] raw-gadget.2 gadget.8: ignoring, device is not running [ 1859.190888][ C0] raw-gadget.2 gadget.8: ignoring, device is not running [ 1859.193884][T15167] usbhid 9-1:0.0: can't add hid device: -71 [ 1859.194005][T15167] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1859.208027][T15167] usb 9-1: USB disconnect, device number 62 [ 1859.274465][ T5702] usb usb1-port1: attempt power cycle [ 1859.445020][T19976] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command, -110 [ 1859.450268][ T36] usb 8-1: USB disconnect, device number 49 [ 1859.519908][ T36] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 1859.526086][ T36] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 1859.527167][ T36] ti_usb_3410_5052 8-1:2.0: device disconnected [ 1859.633777][ T5702] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1859.654655][ T5702] usb 1-1: device descriptor read/8, error -71 [ 1859.893733][ T5702] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1859.915543][ T5702] usb 1-1: device descriptor read/8, error -71 [ 1860.025596][ T5702] usb usb1-port1: unable to enumerate USB device [ 1860.152611][T20050] FAULT_INJECTION: forcing a failure. [ 1860.152611][T20050] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1860.152635][T20050] CPU: 1 UID: 0 PID: 20050 Comm: syz.7.3020 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1860.152652][T20050] Tainted: [L]=SOFTLOCKUP [ 1860.152657][T20050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1860.152668][T20050] Call Trace: [ 1860.152676][T20050] [ 1860.152686][T20050] dump_stack_lvl+0xe8/0x150 [ 1860.152721][T20050] should_fail_ex+0x46b/0x600 [ 1860.152755][T20050] prepare_alloc_pages+0x223/0x650 [ 1860.152789][T20050] __alloc_frozen_pages_noprof+0x1a1/0x5c0 [ 1860.152818][T20050] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1860.152838][T20050] ? __pfx_policy_nodemask+0x10/0x10 [ 1860.152855][T20050] alloc_pages_mpol+0xd4/0x280 [ 1860.152869][T20050] alloc_pages_noprof+0xd2/0x2f0 [ 1860.152882][T20050] kvm_arch_vcpu_create+0x1d7/0x8a0 [ 1860.152897][T20050] kvm_vm_ioctl_create_vcpu+0x29a/0x720 [ 1860.152918][T20050] kvm_vm_ioctl+0x889/0xd30 [ 1860.152937][T20050] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1860.152963][T20050] ? kasan_quarantine_put+0xbb/0x1f0 [ 1860.152983][T20050] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1860.152999][T20050] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1860.153022][T20050] ? do_vfs_ioctl+0x1184/0x1550 [ 1860.153040][T20050] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1860.153062][T20050] ? hook_file_ioctl+0x1f5/0x610 [ 1860.153077][T20050] ? __asan_memset+0x22/0x50 [ 1860.153092][T20050] ? smack_file_ioctl+0x335/0x370 [ 1860.153107][T20050] ? __pfx_smack_file_ioctl+0x10/0x10 [ 1860.153126][T20050] ? __fget_files+0x2a/0x420 [ 1860.153138][T20050] ? __fget_files+0x3a8/0x420 [ 1860.153151][T20050] ? __fget_files+0x2a/0x420 [ 1860.153165][T20050] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1860.153178][T20050] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1860.153194][T20050] __se_sys_ioctl+0xff/0x170 [ 1860.153211][T20050] do_syscall_64+0x166/0x520 [ 1860.153224][T20050] ? trace_irq_disable+0x3b/0x140 [ 1860.153239][T20050] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1860.153251][T20050] ? clear_bhb_loop+0x70/0xc0 [ 1860.153265][T20050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1860.153277][T20050] RIP: 0033:0x7f427d21e159 [ 1860.153290][T20050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1860.153300][T20050] RSP: 002b:00007f427b476028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1860.153314][T20050] RAX: ffffffffffffffda RBX: 00007f427d4a5fa0 RCX: 00007f427d21e159 [ 1860.153322][T20050] RDX: 0000000000000001 RSI: 000000000000ae41 RDI: 0000000000000005 [ 1860.153330][T20050] RBP: 00007f427d2b506b R08: 0000000000000000 R09: 0000000000000000 [ 1860.153337][T20050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1860.153345][T20050] R13: 00007f427d4a6038 R14: 00007f427d4a5fa0 R15: 00007ffc5534ccb8 [ 1860.153362][T20050] [ 1860.195332][T20052] FAULT_INJECTION: forcing a failure. [ 1860.195332][T20052] name failslab, interval 1, probability 0, space 0, times 0 [ 1860.195371][T20052] CPU: 1 UID: 0 PID: 20052 Comm: syz.3.3022 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1860.195401][T20052] Tainted: [L]=SOFTLOCKUP [ 1860.195409][T20052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1860.195423][T20052] Call Trace: [ 1860.195432][T20052] [ 1860.195441][T20052] dump_stack_lvl+0xe8/0x150 [ 1860.195478][T20052] should_fail_ex+0x46b/0x600 [ 1860.195513][T20052] should_failslab+0xa8/0x100 [ 1860.195537][T20052] __kmalloc_cache_noprof+0xa1/0x680 [ 1860.195571][T20052] ? snd_pcm_hw_param_near+0x80/0x4d0 [ 1860.195599][T20052] ? snd_pcm_hw_param_near+0x80/0x4d0 [ 1860.195633][T20052] snd_pcm_hw_param_near+0x80/0x4d0 [ 1860.195668][T20052] snd_pcm_oss_change_params_locked+0x1e07/0x3c80 [ 1860.195725][T20052] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1860.195754][T20052] ? do_raw_spin_lock+0x12b/0x2f0 [ 1860.195790][T20052] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1860.195818][T20052] ? mutex_lock_interruptible_nested+0x152/0x1d0 [ 1860.195848][T20052] ? snd_pcm_oss_get_active_substream+0x198/0x280 [ 1860.195883][T20052] snd_pcm_oss_get_active_substream+0x20b/0x280 [ 1860.195918][T20052] snd_pcm_oss_ioctl+0x9e7/0xe00 [ 1860.195947][T20052] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1860.195975][T20052] __se_sys_ioctl+0xff/0x170 [ 1860.196008][T20052] do_syscall_64+0x166/0x520 [ 1860.196035][T20052] ? trace_irq_disable+0x3b/0x140 [ 1860.196063][T20052] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1860.196086][T20052] ? clear_bhb_loop+0x70/0xc0 [ 1860.196111][T20052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1860.196132][T20052] RIP: 0033:0x7fb78005e159 [ 1860.196153][T20052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1860.196172][T20052] RSP: 002b:00007fb77e2b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1860.196195][T20052] RAX: ffffffffffffffda RBX: 00007fb7802e5fa0 RCX: 00007fb78005e159 [ 1860.196211][T20052] RDX: 0000200000000040 RSI: 0000000080045002 RDI: 0000000000000004 [ 1860.196226][T20052] RBP: 00007fb7800f506b R08: 0000000000000000 R09: 0000000000000000 [ 1860.196241][T20052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1860.196254][T20052] R13: 00007fb7802e6038 R14: 00007fb7802e5fa0 R15: 00007ffda911f808 [ 1860.196288][T20052] [ 1860.953765][ T10] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1861.093744][T15167] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 1861.112642][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 1861.113466][ T10] usb 4-1: New USB device found, idVendor=06cb, idProduct=2968, bcdDevice= 0.00 [ 1861.128808][ T10] usb 4-1: config 0 interface 0 altsetting 69 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1861.128831][ T10] usb 4-1: config 0 interface 0 altsetting 69 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1861.128846][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1861.128866][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1861.174198][ T10] usb 4-1: config 0 descriptor?? [ 1861.243712][T15167] usb 7-1: Using ep0 maxpacket: 8 [ 1861.244517][T15167] usb 7-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=3a.11 [ 1861.249851][T15167] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1861.249902][T15167] usb 7-1: Product: syz [ 1861.249911][T15167] usb 7-1: Manufacturer: syz [ 1861.249920][T15167] usb 7-1: SerialNumber: syz [ 1861.311097][T15167] usb 7-1: config 0 descriptor?? [ 1861.327917][T15167] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected. [ 1861.532320][T15167] pwc: Failed to set LED on/off time (-71) [ 1861.532911][T15167] pwc: send_video_command error -71 [ 1861.532925][T15167] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1861.533092][T15167] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71 [ 1861.567202][T15167] usb 7-1: USB disconnect, device number 48 [ 1861.603363][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 1861.611080][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 1861.611508][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 1861.611682][ T10] usbhid 4-1:0.0: can't add hid device: -32 [ 1861.611908][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 1861.652220][ T10] usb 4-1: USB disconnect, device number 34 [ 1861.660003][T20089] FAULT_INJECTION: forcing a failure. [ 1861.660003][T20089] name failslab, interval 1, probability 0, space 0, times 0 [ 1861.660044][T20089] CPU: 1 UID: 0 PID: 20089 Comm: syz.8.3038 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1861.660075][T20089] Tainted: [L]=SOFTLOCKUP [ 1861.660083][T20089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1861.660097][T20089] Call Trace: [ 1861.660106][T20089] [ 1861.660115][T20089] dump_stack_lvl+0xe8/0x150 [ 1861.660155][T20089] should_fail_ex+0x46b/0x600 [ 1861.660191][T20089] should_failslab+0xa8/0x100 [ 1861.660215][T20089] __kmalloc_cache_noprof+0xa1/0x680 [ 1861.660245][T20089] ? kvm_arch_vcpu_create+0x28a/0x8a0 [ 1861.660267][T20089] ? kvm_arch_vcpu_create+0x28a/0x8a0 [ 1861.660297][T20089] kvm_arch_vcpu_create+0x28a/0x8a0 [ 1861.660324][T20089] kvm_vm_ioctl_create_vcpu+0x29a/0x720 [ 1861.660364][T20089] kvm_vm_ioctl+0x889/0xd30 [ 1861.660397][T20089] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1861.660445][T20089] ? kasan_quarantine_put+0xbb/0x1f0 [ 1861.660483][T20089] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1861.660512][T20089] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1861.660542][T20089] ? do_vfs_ioctl+0x1184/0x1550 [ 1861.660575][T20089] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1861.660616][T20089] ? hook_file_ioctl+0x1f5/0x610 [ 1861.660642][T20089] ? __asan_memset+0x22/0x50 [ 1861.660668][T20089] ? smack_file_ioctl+0x335/0x370 [ 1861.660696][T20089] ? __pfx_smack_file_ioctl+0x10/0x10 [ 1861.660731][T20089] ? __fget_files+0x2a/0x420 [ 1861.660754][T20089] ? __fget_files+0x3a8/0x420 [ 1861.660776][T20089] ? __fget_files+0x2a/0x420 [ 1861.660803][T20089] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1861.660827][T20089] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1861.660858][T20089] __se_sys_ioctl+0xff/0x170 [ 1861.660896][T20089] do_syscall_64+0x166/0x520 [ 1861.660919][T20089] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1861.660942][T20089] ? clear_bhb_loop+0x70/0xc0 [ 1861.660969][T20089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1861.660990][T20089] RIP: 0033:0x7f49f39fe159 [ 1861.661011][T20089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1861.661030][T20089] RSP: 002b:00007f49f1c56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1861.661053][T20089] RAX: ffffffffffffffda RBX: 00007f49f3c85fa0 RCX: 00007f49f39fe159 [ 1861.661069][T20089] RDX: 0000000000000001 RSI: 000000000000ae41 RDI: 0000000000000005 [ 1861.661083][T20089] RBP: 00007f49f3a9506b R08: 0000000000000000 R09: 0000000000000000 [ 1861.661097][T20089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1861.661111][T20089] R13: 00007f49f3c86038 R14: 00007f49f3c85fa0 R15: 00007ffc3a490f48 [ 1861.661144][T20089] [ 1862.243813][T15167] usb 7-1: new full-speed USB device number 49 using dummy_hcd [ 1862.394830][T15167] usb 7-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=3a.11 [ 1862.399725][T15167] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1862.399743][T15167] usb 7-1: Product: syz [ 1862.399751][T15167] usb 7-1: Manufacturer: syz [ 1862.399760][T15167] usb 7-1: SerialNumber: syz [ 1862.437730][T15167] usb 7-1: config 0 descriptor?? [ 1862.456467][T15167] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected. [ 1862.493885][ T5843] usb 9-1: new full-speed USB device number 63 using dummy_hcd [ 1862.649351][ T5843] usb 9-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice= 1.00 [ 1862.657582][ T5843] usb 9-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1862.657611][ T5843] usb 9-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1862.669641][ T5843] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1862.721838][ T5843] mdc800 9-1:1.0: probe fails -> wrong Interface [ 1862.825487][ T5843] usb 9-1: 0:2 : does not exist [ 1862.883938][T12786] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 1863.005549][ T6236] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1863.025065][T12786] usb 8-1: device descriptor read/64, error -71 [ 1863.031262][ T5843] usb 9-1: USB disconnect, device number 63 [ 1863.119009][T15167] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1863.119636][T15167] pwc: recv_control_msg error -32 req 02 val 2700 [ 1863.120168][T15167] pwc: recv_control_msg error -32 req 04 val 1600 [ 1863.120744][T15167] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1863.121312][T15167] pwc: recv_control_msg error -32 req 04 val 1000 [ 1863.121902][T15167] pwc: recv_control_msg error -32 req 04 val 1300 [ 1863.122427][T15167] pwc: recv_control_msg error -32 req 04 val 1400 [ 1863.123019][T15167] pwc: recv_control_msg error -32 req 02 val 2000 [ 1863.123536][T15167] pwc: recv_control_msg error -32 req 02 val 2100 [ 1863.154554][ T6236] usb 1-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 1863.175067][ T6236] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1863.175103][ T6236] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1863.175131][ T6236] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1863.175166][ T6236] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1863.182361][ T6236] usb 1-1: config 0 descriptor?? [ 1863.242100][T15167] pwc: recv_control_msg error -32 req 06 val 0600 [ 1863.250891][T15167] pwc: recv_control_msg error -32 req 04 val 1500 [ 1863.253080][T15167] pwc: recv_control_msg error -32 req 02 val 2500 [ 1863.268268][T15167] pwc: recv_control_msg error -32 req 02 val 2400 [ 1863.268753][T15167] pwc: recv_control_msg error -71 req 02 val 2600 [ 1863.269208][T15167] pwc: recv_control_msg error -71 req 02 val 2900 [ 1863.269663][T15167] pwc: recv_control_msg error -71 req 02 val 2800 [ 1863.271244][T15167] pwc: recv_control_msg error -71 req 04 val 1100 [ 1863.271719][T15167] pwc: recv_control_msg error -71 req 04 val 1200 [ 1863.275607][T15167] pwc: Failed to power off camera (-71) [ 1863.293753][T12786] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 1863.332055][T15167] pwc: Registered as video103. [ 1863.345579][T15167] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input93 [ 1863.369327][T15167] usb 7-1: USB disconnect, device number 49 [ 1863.423746][T12786] usb 8-1: device descriptor read/64, error -71 [ 1863.534087][T12786] usb usb8-port1: attempt power cycle [ 1863.620013][ T6236] usbhid 1-1:0.0: can't add hid device: -71 [ 1863.620155][ T6236] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1863.648273][ T6236] usb 1-1: USB disconnect, device number 15 [ 1863.874350][T12786] usb 8-1: new high-speed USB device number 52 using dummy_hcd [ 1863.895692][T12786] usb 8-1: device descriptor read/8, error -71 [ 1864.133791][T12786] usb 8-1: new high-speed USB device number 53 using dummy_hcd [ 1864.156281][T12786] usb 8-1: device descriptor read/8, error -71 [ 1864.208318][T20139] FAULT_INJECTION: forcing a failure. [ 1864.208318][T20139] name failslab, interval 1, probability 0, space 0, times 0 [ 1864.208359][T20139] CPU: 1 UID: 0 PID: 20139 Comm: syz.8.3059 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1864.208389][T20139] Tainted: [L]=SOFTLOCKUP [ 1864.208397][T20139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1864.208411][T20139] Call Trace: [ 1864.208420][T20139] [ 1864.208431][T20139] dump_stack_lvl+0xe8/0x150 [ 1864.208467][T20139] should_fail_ex+0x46b/0x600 [ 1864.208504][T20139] should_failslab+0xa8/0x100 [ 1864.208530][T20139] __kmalloc_noprof+0xfb/0x790 [ 1864.208560][T20139] ? snd_pcm_hw_refine+0xa18/0x17d0 [ 1864.208584][T20139] ? snd_pcm_hw_refine+0xa18/0x17d0 [ 1864.208616][T20139] snd_pcm_hw_refine+0xa18/0x17d0 [ 1864.208653][T20139] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 1864.208718][T20139] ? __kmalloc_cache_noprof+0x3d5/0x680 [ 1864.208747][T20139] ? snd_pcm_hw_param_near+0x80/0x4d0 [ 1864.208772][T20139] ? snd_pcm_hw_param_near+0x80/0x4d0 [ 1864.208802][T20139] snd_pcm_hw_param_near+0x108/0x4d0 [ 1864.208837][T20139] snd_pcm_oss_change_params_locked+0x1e07/0x3c80 [ 1864.208893][T20139] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1864.208924][T20139] ? do_raw_spin_lock+0x12b/0x2f0 [ 1864.208959][T20139] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1864.208987][T20139] ? mutex_lock_interruptible_nested+0x152/0x1d0 [ 1864.209016][T20139] ? snd_pcm_oss_get_active_substream+0x198/0x280 [ 1864.209051][T20139] snd_pcm_oss_get_active_substream+0x20b/0x280 [ 1864.209088][T20139] snd_pcm_oss_ioctl+0x9e7/0xe00 [ 1864.209118][T20139] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1864.209147][T20139] __se_sys_ioctl+0xff/0x170 [ 1864.209179][T20139] do_syscall_64+0x166/0x520 [ 1864.209201][T20139] ? trace_irq_disable+0x3b/0x140 [ 1864.209228][T20139] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1864.209250][T20139] ? clear_bhb_loop+0x70/0xc0 [ 1864.209277][T20139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1864.209297][T20139] RIP: 0033:0x7f49f39fe159 [ 1864.209317][T20139] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1864.209336][T20139] RSP: 002b:00007f49f1c56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1864.209360][T20139] RAX: ffffffffffffffda RBX: 00007f49f3c85fa0 RCX: 00007f49f39fe159 [ 1864.209377][T20139] RDX: 0000200000000040 RSI: 0000000080045002 RDI: 0000000000000004 [ 1864.209391][T20139] RBP: 00007f49f3a9506b R08: 0000000000000000 R09: 0000000000000000 [ 1864.209405][T20139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1864.209418][T20139] R13: 00007f49f3c86038 R14: 00007f49f3c85fa0 R15: 00007ffc3a490f48 [ 1864.209449][T20139] [ 1864.264055][T12786] usb usb8-port1: unable to enumerate USB device [ 1864.273674][ T9105] Bluetooth: Unknown LE signaling command 0x11 [ 1864.273705][ T9105] Bluetooth: Wrong link type (-22) [ 1864.794689][ T6236] usb 7-1: new full-speed USB device number 50 using dummy_hcd [ 1864.954802][ T6236] usb 7-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice= 1.00 [ 1864.956329][ T6236] usb 7-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1864.956354][ T6236] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1864.956402][ T6236] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1865.018436][ T6236] mdc800 7-1:1.0: probe fails -> wrong Interface [ 1865.034514][ T6236] usb 7-1: 0:2 : does not exist [ 1865.295424][ T6236] usb 7-1: USB disconnect, device number 50 [ 1866.435881][ T9] usb 9-1: new high-speed USB device number 64 using dummy_hcd [ 1866.564243][ T9] usb 9-1: device descriptor read/64, error -71 [ 1866.723972][T12786] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 1866.804756][ T9] usb 9-1: new high-speed USB device number 65 using dummy_hcd [ 1866.884639][T12786] usb 1-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice= 1.00 [ 1866.887405][T12786] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1866.887431][T12786] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1866.887500][T12786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1866.911681][T12786] mdc800 1-1:1.0: probe fails -> wrong Interface [ 1866.932656][T12786] usb 1-1: 0:2 : does not exist [ 1866.934134][ T9] usb 9-1: device descriptor read/64, error -71 [ 1867.046907][ T9] usb usb9-port1: attempt power cycle [ 1867.056314][ T5843] usb 8-1: new high-speed USB device number 54 using dummy_hcd [ 1867.109648][T12786] usb 1-1: USB disconnect, device number 16 [ 1867.216745][ T5843] usb 8-1: Using ep0 maxpacket: 32 [ 1867.217542][ T5843] usb 8-1: New USB device found, idVendor=06cb, idProduct=2968, bcdDevice= 0.00 [ 1867.223921][ T5843] usb 8-1: config 0 interface 0 altsetting 69 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1867.223953][ T5843] usb 8-1: config 0 interface 0 altsetting 69 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1867.223981][ T5843] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1867.224014][ T5843] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1867.232557][ T5843] usb 8-1: config 0 descriptor?? [ 1867.383889][ T9] usb 9-1: new high-speed USB device number 66 using dummy_hcd [ 1867.406744][ T9] usb 9-1: device descriptor read/8, error -71 [ 1867.664252][ T9] usb 9-1: new high-speed USB device number 67 using dummy_hcd [ 1867.684556][ T9] usb 9-1: device descriptor read/8, error -71 [ 1867.710219][ T5843] usbhid 8-1:0.0: can't add hid device: -71 [ 1867.710345][ T5843] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1867.721212][ T5843] usb 8-1: USB disconnect, device number 54 [ 1867.794065][ T9] usb usb9-port1: unable to enumerate USB device [ 1868.303782][ T5843] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 1868.433855][ T5843] usb 7-1: device descriptor read/64, error -71 [ 1868.673830][ T5843] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 1868.803826][ T5843] usb 7-1: device descriptor read/64, error -71 [ 1868.915278][ T5843] usb usb7-port1: attempt power cycle [ 1869.203780][ T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1869.254006][ T5843] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 1869.263774][T12786] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 1869.275081][ T5843] usb 7-1: device descriptor read/8, error -71 [ 1869.353843][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 1869.358983][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1869.359041][ T9] usb 1-1: New USB device found, idVendor=0009, idProduct=0000, bcdDevice= 0.00 [ 1869.361624][ T9] usb 1-1: config 3 interface 1 has no altsetting 0 [ 1869.362807][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1869.362831][ T9] usb 1-1: SerialNumber: syz [ 1869.414501][T12786] usb 4-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice= 1.00 [ 1869.417590][T12786] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1869.417647][T12786] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 1869.417747][T12786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1869.486438][T12786] mdc800 4-1:1.0: probe fails -> wrong Interface [ 1869.520274][ T5843] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 1869.546801][ T5843] usb 7-1: device descriptor read/8, error -71 [ 1869.611875][ T9] usb 1-1: selecting invalid altsetting 0 [ 1869.612515][ T9] rndis_host 1-1:3.0: probe with driver rndis_host failed with error -22 [ 1869.619696][ T9] usb 1-1: USB disconnect, device number 17 [ 1869.654088][ T5843] usb usb7-port1: unable to enumerate USB device [ 1869.687545][ T5702] usb 4-1: USB disconnect, device number 35 [ 1870.855794][ T9] usb 9-1: new high-speed USB device number 68 using dummy_hcd [ 1870.983864][ T9] usb 9-1: device descriptor read/64, error -71 [ 1871.117762][T20300] overlayfs: failed to resolve './file2': -2 [ 1871.223839][ T9] usb 9-1: new high-speed USB device number 69 using dummy_hcd [ 1871.353771][ T9] usb 9-1: device descriptor read/64, error -71 [ 1871.465648][ T9] usb usb9-port1: attempt power cycle [ 1871.654072][ T5702] usb 8-1: new full-speed USB device number 55 using dummy_hcd [ 1872.059286][ T5702] usb 8-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice= 1.00 [ 1872.453743][ T9] usb 9-1: new high-speed USB device number 70 using dummy_hcd [ 1872.474660][ T9] usb 9-1: device descriptor read/8, error -71 [ 1872.586954][ T5702] usb 8-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1872.587026][ T5702] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 1872.587071][ T5702] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1872.711185][ T5702] mdc800 8-1:1.0: probe fails -> wrong Interface [ 1872.783784][ T9] usb 9-1: new high-speed USB device number 71 using dummy_hcd [ 1872.804282][ T9] usb 9-1: device descriptor read/8, error -71 [ 1872.849842][ T6236] usb 8-1: USB disconnect, device number 55 [ 1872.917939][ T9] usb usb9-port1: unable to enumerate USB device [ 1873.163799][ T5711] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 1873.233783][ T9] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1873.277179][T20333] overlayfs: failed to resolve './file2': -2 [ 1873.323772][ T5711] usb 7-1: Using ep0 maxpacket: 32 [ 1873.324461][ T5711] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1873.325891][ T5711] usb 7-1: config 1 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1873.325922][ T5711] usb 7-1: config 1 interface 0 altsetting 254 bulk endpoint 0x82 has invalid maxpacket 608 [ 1873.325949][ T5711] usb 7-1: config 1 interface 0 altsetting 254 has an endpoint descriptor with address 0x66, changing to 0x6 [ 1873.325975][ T5711] usb 7-1: config 1 interface 0 altsetting 254 bulk endpoint 0x6 has invalid maxpacket 102 [ 1873.326007][ T5711] usb 7-1: config 1 interface 0 altsetting 254 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1873.326035][ T5711] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1873.327237][ T5711] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1873.327260][ T5711] usb 7-1: SerialNumber: syz [ 1873.370155][T20324] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1873.370285][T20324] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1873.391268][ T5711] cdc_acm 7-1:1.0: probe with driver cdc_acm failed with error -12 [ 1873.413746][ T9] usb 4-1: device descriptor read/64, error -71 [ 1873.582031][ T5711] usb 7-1: USB disconnect, device number 55 [ 1873.655261][ T9] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1873.783778][ T9] usb 4-1: device descriptor read/64, error -71 [ 1873.894211][ T9] usb usb4-port1: attempt power cycle [ 1875.083792][ T5711] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 1875.213743][ T9] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1875.233731][ T5711] usb 7-1: Using ep0 maxpacket: 32 [ 1875.235466][ T9] usb 4-1: device descriptor read/8, error -71 [ 1875.242660][ T5711] usb 7-1: New USB device found, idVendor=06cb, idProduct=2968, bcdDevice= 0.00 [ 1875.266169][ T5711] usb 7-1: config 0 interface 0 altsetting 69 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1875.266206][ T5711] usb 7-1: config 0 interface 0 altsetting 69 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1875.266232][ T5711] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1875.266266][ T5711] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1875.314558][ T5711] usb 7-1: config 0 descriptor?? [ 1875.394754][T20364] overlayfs: failed to resolve './file2': -2 [ 1875.473742][ T9] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1875.495876][ T9] usb 4-1: device descriptor read/8, error -71 [ 1875.605279][ T9] usb usb4-port1: unable to enumerate USB device [ 1875.663836][ T5843] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 1875.742051][ T5711] itetech 0003:06CB:2968.002F: unknown main item tag 0x0 [ 1875.742089][ T5711] itetech 0003:06CB:2968.002F: unknown main item tag 0x0 [ 1875.742119][ T5711] itetech 0003:06CB:2968.002F: unknown main item tag 0x0 [ 1875.742147][ T5711] itetech 0003:06CB:2968.002F: unknown main item tag 0x0 [ 1875.742176][ T5711] itetech 0003:06CB:2968.002F: unknown main item tag 0x0 [ 1875.742204][ T5711] itetech 0003:06CB:2968.002F: unknown main item tag 0x0 [ 1875.742233][ T5711] itetech 0003:06CB:2968.002F: unknown main item tag 0x0 [ 1875.742262][ T5711] itetech 0003:06CB:2968.002F: unknown main item tag 0x0 [ 1875.742291][ T5711] itetech 0003:06CB:2968.002F: unknown main item tag 0x0 [ 1875.742318][ T5711] itetech 0003:06CB:2968.002F: unknown main item tag 0x0 [ 1875.742442][ T5711] itetech 0003:06CB:2968.002F: unbalanced collection at end of report description [ 1875.743527][ T5711] itetech 0003:06CB:2968.002F: probe with driver itetech failed with error -22 [ 1875.814710][ T5843] usb 1-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice= 1.00 [ 1875.816454][ T5843] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1875.816507][ T5843] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 1875.816547][ T5843] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1875.942061][ T5843] mdc800 1-1:1.0: probe fails -> wrong Interface [ 1876.008577][ T9] usb 7-1: USB disconnect, device number 56 [ 1876.113849][ T5843] usb 8-1: new high-speed USB device number 56 using dummy_hcd [ 1876.125362][ T10] usb 1-1: USB disconnect, device number 18 [ 1876.268900][ T5843] usb 8-1: Using ep0 maxpacket: 8 [ 1876.270281][ T5843] usb 8-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=3a.11 [ 1876.292046][ T5843] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1876.292075][ T5843] usb 8-1: Product: syz [ 1876.292089][ T5843] usb 8-1: Manufacturer: syz [ 1876.292097][ T5843] usb 8-1: SerialNumber: syz [ 1876.299784][ T5843] usb 8-1: config 0 descriptor?? [ 1876.311791][ T5843] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected. [ 1876.543233][ T5843] pwc: Failed to set LED on/off time (-71) [ 1876.544078][ T5843] pwc: send_video_command error -71 [ 1876.544094][ T5843] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1876.544203][ T5843] Philips webcam 8-1:0.0: probe with driver Philips webcam failed with error -71 [ 1876.552761][ T5843] usb 8-1: USB disconnect, device number 56 [ 1877.012259][T20398] tmpfs: Unsupported parameter 'huge' [ 1877.053854][ T5711] usb 8-1: new full-speed USB device number 57 using dummy_hcd [ 1877.226528][ T5711] usb 8-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=3a.11 [ 1877.244182][ T5711] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1877.244220][ T5711] usb 8-1: Product: syz [ 1877.244236][ T5711] usb 8-1: Manufacturer: syz [ 1877.244252][ T5711] usb 8-1: SerialNumber: syz [ 1877.279549][ T5711] usb 8-1: config 0 descriptor?? [ 1877.296255][ T5711] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected. [ 1877.934496][ T5711] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1877.952473][ T5711] pwc: recv_control_msg error -32 req 02 val 2700 [ 1877.953202][ T5711] pwc: recv_control_msg error -32 req 04 val 1600 [ 1877.966657][ T5711] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1877.969495][ T5711] pwc: recv_control_msg error -32 req 04 val 1000 [ 1877.993969][ T5711] pwc: recv_control_msg error -32 req 04 val 1300 [ 1878.000125][ T5711] pwc: recv_control_msg error -32 req 04 val 1400 [ 1878.017473][ T5711] pwc: recv_control_msg error -32 req 02 val 2000 [ 1878.035728][ T5711] pwc: recv_control_msg error -32 req 02 val 2100 [ 1878.042039][ T5711] pwc: recv_control_msg error -32 req 06 val 0600 [ 1878.057672][ T5711] pwc: recv_control_msg error -32 req 04 val 1500 [ 1878.060843][ T5711] pwc: recv_control_msg error -32 req 02 val 2500 [ 1878.062048][ T5711] pwc: recv_control_msg error -32 req 02 val 2400 [ 1878.062407][ C1] raw-gadget.0 gadget.7: ignoring, device is not running [ 1878.063058][ T5711] pwc: recv_control_msg error -32 req 02 val 2600 [ 1878.098158][ T5711] pwc: recv_control_msg error -71 req 02 val 2900 [ 1878.099151][ T5711] pwc: recv_control_msg error -71 req 02 val 2800 [ 1878.099805][ T5711] pwc: recv_control_msg error -71 req 04 val 1100 [ 1878.100315][ T5711] pwc: recv_control_msg error -71 req 04 val 1200 [ 1878.102380][ T5711] pwc: Failed to power off camera (-71) [ 1878.148387][ T5711] pwc: Registered as video103. [ 1878.159734][ T5711] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input94 [ 1878.179289][ T5711] usb 8-1: USB disconnect, device number 57 [ 1878.473734][ T6236] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 1878.624718][ T6236] usb 1-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00 [ 1878.626321][ T6236] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 247, using maximum allowed: 30 [ 1878.626376][ T6236] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 247 [ 1878.626419][ T6236] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1878.681693][ T6236] usb 1-1: config 0 descriptor?? [ 1878.902702][T20415] Bluetooth: hci0: invalid len left 7, exp >= 112 [ 1879.186363][ T6236] apple 0003:05AC:027D.0030: hidraw0: USB HID v0.05 Device [HID 05ac:027d] on usb-dummy_hcd.0-1/input0 [ 1879.313765][ T5711] usb 8-1: new full-speed USB device number 58 using dummy_hcd [ 1879.358181][ T10] usb 1-1: USB disconnect, device number 19 [ 1879.459796][T20398] syz.3.3164 (20398): drop_caches: 2 [ 1879.474583][ T5711] usb 8-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice= 1.00 [ 1879.477276][ T5711] usb 8-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1879.477333][ T5711] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1033, setting to 64 [ 1879.477361][ T5711] usb 8-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1879.477401][ T5711] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1879.561724][ T5711] mdc800 8-1:1.0: probe fails -> wrong Interface [ 1879.765151][ T10] usb 8-1: USB disconnect, device number 58 [ 1879.963743][ T5711] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1880.114589][ T5711] usb 4-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 1880.115737][ T5711] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1880.115770][ T5711] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1880.115785][ T5711] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1880.115805][ T5711] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1880.120776][ T5711] usb 4-1: config 0 descriptor?? [ 1880.613945][ T5711] chicony 0003:04F2:1421.0031: unbalanced collection at end of report description [ 1880.614710][ T5711] chicony 0003:04F2:1421.0031: Chicony hid parse failed: -22 [ 1880.616310][ T5711] chicony 0003:04F2:1421.0031: probe with driver chicony failed with error -22 [ 1881.564796][ T10] usb 4-1: USB disconnect, device number 40 [ 1881.666965][T20445] Bluetooth: hci0: invalid len left 7, exp >= 112 [ 1881.828725][ T9105] Bluetooth: hci1: unexpected event for opcode 0x2012 [ 1882.353819][T12786] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 1882.504969][T12786] usb 4-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00 [ 1882.507172][T12786] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 247, using maximum allowed: 30 [ 1882.507219][T12786] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 247 [ 1882.507262][T12786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1882.527365][T12786] usb 4-1: config 0 descriptor?? [ 1882.979059][T12786] hid_parser_main: 61 callbacks suppressed [ 1882.979085][T12786] apple 0003:05AC:027D.0032: unknown main item tag 0x0 [ 1882.979116][T12786] apple 0003:05AC:027D.0032: unknown main item tag 0x0 [ 1882.979142][T12786] apple 0003:05AC:027D.0032: unknown main item tag 0x0 [ 1882.979167][T12786] apple 0003:05AC:027D.0032: unknown main item tag 0x0 [ 1882.979192][T12786] apple 0003:05AC:027D.0032: unknown main item tag 0x0 [ 1882.979219][T12786] apple 0003:05AC:027D.0032: unknown main item tag 0x0 [ 1882.979245][T12786] apple 0003:05AC:027D.0032: unknown main item tag 0x0 [ 1882.979272][T12786] apple 0003:05AC:027D.0032: unknown main item tag 0x0 [ 1882.979299][T12786] apple 0003:05AC:027D.0032: unknown main item tag 0x0 [ 1882.979325][T12786] apple 0003:05AC:027D.0032: unknown main item tag 0x0 [ 1883.012925][T12786] apple 0003:05AC:027D.0032: hidraw0: USB HID v0.05 Device [HID 05ac:027d] on usb-dummy_hcd.3-1/input0 [ 1883.302344][T20475] Bluetooth: hci0: invalid len left 7, exp >= 112 [ 1883.359447][T12786] usb 4-1: USB disconnect, device number 41 [ 1884.177397][T20481] cgroup: Unknown subsys name 'cpuset' [ 1884.503744][ T10] usb 9-1: new full-speed USB device number 72 using dummy_hcd [ 1884.655086][ T10] usb 9-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice= 1.00 [ 1884.656846][ T10] usb 9-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1884.656905][ T10] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1033, setting to 64 [ 1884.656936][ T10] usb 9-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1884.656981][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1884.686210][ T10] mdc800 9-1:1.0: probe fails -> wrong Interface [ 1885.058958][ T9] usb 9-1: USB disconnect, device number 72 [ 1885.073724][ T36] usb 8-1: new high-speed USB device number 59 using dummy_hcd [ 1885.223759][ T36] usb 8-1: Using ep0 maxpacket: 16 [ 1885.224699][ T36] usb 8-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 1885.226226][ T36] usb 8-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1885.226244][ T36] usb 8-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1885.226259][ T36] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1885.226279][ T36] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1885.230920][ T36] usb 8-1: config 0 descriptor?? [ 1885.420717][ T9105] Bluetooth: hci0: unexpected event for opcode 0x2012 [ 1885.430630][ T10] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1885.577978][ T10] usb 1-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 1885.594330][ T10] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1885.594367][ T10] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1885.594394][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1885.594426][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1885.646371][ T10] usb 1-1: config 0 descriptor?? [ 1885.670947][ T36] usbhid 8-1:0.0: can't add hid device: -71 [ 1885.671070][ T36] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1885.709978][ T36] usb 8-1: USB disconnect, device number 59 [ 1886.060036][ T10] chicony 0003:04F2:1421.0033: unbalanced collection at end of report description [ 1886.060694][ T10] chicony 0003:04F2:1421.0033: Chicony hid parse failed: -22 [ 1886.060765][ T10] chicony 0003:04F2:1421.0033: probe with driver chicony failed with error -22 [ 1886.250401][T15167] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1886.272382][ T6236] usb 1-1: USB disconnect, device number 20 [ 1886.423738][T15167] usb 4-1: Using ep0 maxpacket: 8 [ 1886.424610][T15167] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1886.426908][T15167] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 1886.426934][T15167] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 1886.426958][T15167] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1886.426981][T15167] usb 4-1: config 250 has no interface number 0 [ 1886.427041][T15167] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1886.427070][T15167] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1886.427097][T15167] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1886.427122][T15167] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1886.427151][T15167] usb 4-1: config 250 interface 228 has no altsetting 0 [ 1886.429864][T15167] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1886.429889][T15167] usb 4-1: Product: syz [ 1886.429904][T15167] usb 4-1: SerialNumber: syz [ 1886.630033][T15167] hub 4-1:250.228: bad descriptor, ignoring hub [ 1886.630076][T15167] hub 4-1:250.228: probe with driver hub failed with error -5 [ 1887.244137][ T6236] usb 4-1: USB disconnect, device number 42 [ 1888.323783][ T5702] usb 8-1: new full-speed USB device number 60 using dummy_hcd [ 1888.483861][ T9] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 1888.486245][ T5702] usb 8-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice= 1.00 [ 1888.487441][ T5702] usb 8-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1888.487497][ T5702] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1033, setting to 64 [ 1888.487526][ T5702] usb 8-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1888.487568][ T5702] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1888.513928][T15167] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 1888.553695][T12786] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1888.579583][ T5702] mdc800 8-1:1.0: probe fails -> wrong Interface [ 1888.643754][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 1888.644497][ T9] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1888.645617][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1888.645649][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58999, setting to 1024 [ 1888.645680][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1888.664481][T15167] usb 4-1: New USB device found, idVendor=046d, idProduct=c20a, bcdDevice= 0.00 [ 1888.666448][T15167] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1888.666476][T15167] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1888.666519][T15167] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1888.704015][T12786] usb 1-1: Using ep0 maxpacket: 16 [ 1888.734746][T12786] usb 1-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 1888.737887][T12786] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1888.737919][T12786] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1888.737947][T12786] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1888.737980][T12786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1888.781249][ T10] usb 8-1: USB disconnect, device number 60 [ 1888.803278][ T9] usb 7-1: config 0 descriptor?? [ 1888.809100][T20538] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1888.820751][T15167] usb 4-1: config 0 descriptor?? [ 1888.838847][T12786] usb 1-1: config 0 descriptor?? [ 1888.881590][ T9] hub 7-1:0.0: USB hub found [ 1889.018764][ T9] hub 7-1:0.0: config failed, can't read hub descriptor (err -22) [ 1889.041565][ T9] usbhid 7-1:0.0: can't add hid device: -71 [ 1889.042402][ T9] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1889.106102][ T9] usb 7-1: USB disconnect, device number 57 [ 1889.277729][T12786] usbhid 1-1:0.0: can't add hid device: -71 [ 1889.277862][T12786] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1889.289344][T15167] input: HID 046d:c20a as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:046D:C20A.0034/input/input95 [ 1889.358435][T12786] usb 1-1: USB disconnect, device number 21 [ 1889.564600][ T9] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 1889.689778][T15167] logitech 0003:046D:C20A.0034: input,hidraw0: USB HID v0.01 Joystick [HID 046d:c20a] on usb-dummy_hcd.3-1/input0 [ 1889.689897][T15167] logitech 0003:046D:C20A.0034: missing HID_OUTPUT_REPORT 0 [ 1889.733773][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 1889.741956][ T9] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1889.754390][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1889.754423][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58999, setting to 1024 [ 1889.754467][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1889.903833][ T9] usb 7-1: config 0 descriptor?? [ 1889.904744][T20538] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1889.913524][ T9] hub 7-1:0.0: USB hub found [ 1890.118578][ T9] hub 7-1:0.0: 4 ports detected [ 1890.303744][T12786] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1890.463817][ T9] hub 7-1:0.0: config failed, can't get hub status (err -71) [ 1890.468637][T12786] usb 1-1: New USB device found, idVendor=046d, idProduct=c71e, bcdDevice= 0.00 [ 1890.493999][T12786] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1890.494024][T12786] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1890.494038][T12786] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1890.494059][T12786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1890.994415][ T6236] usb 9-1: new high-speed USB device number 73 using dummy_hcd [ 1891.025330][ C1] raw-gadget.0 gadget.8: ignoring, device is not running [ 1891.273716][ T6236] usb 9-1: device descriptor read/64, error -32 [ 1891.410646][ T9] usbhid 7-1:0.0: can't add hid device: -71 [ 1891.421725][ T9] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1891.502861][T12786] usb 1-1: config 0 descriptor?? [ 1891.517435][ T9] usb 7-1: USB disconnect, device number 58 [ 1891.525644][ T6236] usb 9-1: new high-speed USB device number 74 using dummy_hcd [ 1891.604965][T15167] usb 4-1: USB disconnect, device number 43 [ 1891.683818][ T6236] usb 9-1: Using ep0 maxpacket: 8 [ 1891.686234][ T6236] usb 9-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1891.691744][ T6236] usb 9-1: config index 0 descriptor too short (expected 5924, got 36) [ 1891.691762][ T6236] usb 9-1: config 250 has an invalid interface number: 228 but max is -1 [ 1891.691782][ T6236] usb 9-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1891.691805][ T6236] usb 9-1: config 250 has no interface number 0 [ 1891.691852][ T6236] usb 9-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1891.691881][ T6236] usb 9-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1891.691900][ T6236] usb 9-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1891.691913][ T6236] usb 9-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1891.691929][ T6236] usb 9-1: config 250 interface 228 has no altsetting 0 [ 1891.754937][ T6236] usb 9-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1891.754967][ T6236] usb 9-1: Product: syz [ 1891.754983][ T6236] usb 9-1: SerialNumber: syz [ 1891.771562][ T6236] hub 9-1:250.228: bad descriptor, ignoring hub [ 1891.771601][ T6236] hub 9-1:250.228: probe with driver hub failed with error -5 [ 1891.863742][ T36] usb 8-1: new high-speed USB device number 61 using dummy_hcd [ 1891.965677][T12786] logitech-djreceiver 0003:046D:C71E.0035: hidraw0: USB HID v36.2b Joystick [HID 046d:c71e] on usb-dummy_hcd.0-1/input0 [ 1892.043211][ T36] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1892.050500][ T36] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1892.050543][ T36] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1892.050567][ T36] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1892.050622][ T36] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1892.071677][ T36] usb 8-1: config 0 descriptor?? [ 1892.095910][ T6236] usb 9-1: USB disconnect, device number 74 [ 1892.193933][ T5711] usb 1-1: USB disconnect, device number 22 [ 1892.323244][T20571] fido_id[20571]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 1892.393795][T12786] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1892.543725][T12786] usb 4-1: Using ep0 maxpacket: 32 [ 1892.544593][T12786] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1892.547974][T12786] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 189, changing to 11 [ 1892.548015][T12786] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1892.548040][T12786] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1892.548071][T12786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1892.578769][ T36] plantronics 0003:047F:FFFF.0036: hiddev0,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 1892.620258][T12786] usb 4-1: config 0 descriptor?? [ 1892.770425][ T36] usb 8-1: USB disconnect, device number 61 [ 1893.043756][T12786] hid_parser_main: 37 callbacks suppressed [ 1893.043781][T12786] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x2 [ 1893.043810][T12786] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 1893.043838][T12786] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 1893.090494][T12786] plantronics 0003:047F:FFFF.0037: hiddev0,hidraw0: USB HID v0.00 Keyboard [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1893.143731][T15167] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 1893.241023][T12786] usb 4-1: USB disconnect, device number 44 [ 1893.295218][T15167] usb 7-1: Using ep0 maxpacket: 16 [ 1893.296548][T15167] usb 7-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 1893.298195][T15167] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1893.298228][T15167] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1893.298256][T15167] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1893.298291][T15167] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1893.379304][T15167] usb 7-1: config 0 descriptor?? [ 1893.946115][T15167] usbhid 7-1:0.0: can't add hid device: -71 [ 1893.946236][T15167] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1893.980847][T15167] usb 7-1: USB disconnect, device number 59 [ 1894.293766][ T36] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1894.444640][ T36] usb 4-1: New USB device found, idVendor=1199, idProduct=0fff, bcdDevice= 0.00 [ 1894.447116][ T36] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1894.447146][ T36] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1894.447186][ T36] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1894.452025][T20607] overlayfs: conflicting options: nfs_export=on,index=off [ 1894.511297][ T36] usb-storage 4-1:1.0: USB Mass Storage device detected [ 1894.839269][T20617] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3240'. [ 1894.864970][T20617] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3240'. [ 1894.951326][ T5702] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 1895.043852][ T5843] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 1895.098714][ T36] usb-storage 4-1:1.0: probe with driver usb-storage failed with error -5 [ 1895.117211][ T36] usb 4-1: USB disconnect, device number 45 [ 1895.193771][ T5843] usb 7-1: Using ep0 maxpacket: 8 [ 1895.194685][ T5843] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1895.195199][ T5702] usb 1-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice= 0.40 [ 1895.196146][ T5843] usb 7-1: config index 0 descriptor too short (expected 5924, got 36) [ 1895.196174][ T5843] usb 7-1: config 250 has an invalid interface number: 228 but max is -1 [ 1895.196196][ T5843] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1895.196217][ T5843] usb 7-1: config 250 has no interface number 0 [ 1895.196266][ T5843] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1895.196291][ T5843] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1895.196317][ T5843] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1895.196341][ T5843] usb 7-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1895.196369][ T5843] usb 7-1: config 250 interface 228 has no altsetting 0 [ 1895.198536][ T5843] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1895.198561][ T5843] usb 7-1: Product: syz [ 1895.198575][ T5843] usb 7-1: SerialNumber: syz [ 1895.199972][ T5702] usb 1-1: config 1 has an invalid interface number: 1 but max is 0 [ 1895.199997][ T5702] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1895.200017][ T5702] usb 1-1: config 1 has no interface number 0 [ 1895.200067][ T5702] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 10 [ 1895.200094][ T5702] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 1895.210967][ T5702] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=2 [ 1895.210992][ T5702] usb 1-1: Product: syz [ 1895.211007][ T5702] usb 1-1: Manufacturer: syz [ 1895.211022][ T5702] usb 1-1: SerialNumber: syz [ 1895.420739][ T5843] hub 7-1:250.228: bad descriptor, ignoring hub [ 1895.420789][ T5843] hub 7-1:250.228: probe with driver hub failed with error -5 [ 1895.519403][ T5702] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1895.734144][T12786] usb 7-1: USB disconnect, device number 60 [ 1895.742271][T20619] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1895.742329][T20619] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1895.742355][T20619] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1896.243315][ T5702] usb 1-1: USB disconnect, device number 23 [ 1896.487022][T17618] udevd[17618]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1896.563987][ T36] usb 9-1: new high-speed USB device number 75 using dummy_hcd [ 1896.714582][ T36] usb 9-1: Using ep0 maxpacket: 16 [ 1896.715933][ T36] usb 9-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 1896.717678][ T36] usb 9-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1896.717710][ T36] usb 9-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1896.717739][ T36] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1896.717773][ T36] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1896.730925][ T36] usb 9-1: config 0 descriptor?? [ 1897.081246][T20650] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000008: 0000 [#1] SMP KASAN PTI [ 1897.093178][T20650] KASAN: null-ptr-deref in range [0x0000000000000040-0x0000000000000047] [ 1897.096710][T20654] FAULT_INJECTION: forcing a failure. [ 1897.096710][T20654] name failslab, interval 1, probability 0, space 0, times 0 [ 1897.096747][T20654] CPU: 0 UID: 0 PID: 20654 Comm: syz.6.3253 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1897.096775][T20654] Tainted: [L]=SOFTLOCKUP [ 1897.096783][T20654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1897.096796][T20654] Call Trace: [ 1897.096804][T20654] [ 1897.096813][T20654] dump_stack_lvl+0xe8/0x150 [ 1897.096846][T20654] should_fail_ex+0x46b/0x600 [ 1897.096876][T20654] should_failslab+0xa8/0x100 [ 1897.096896][T20654] ? security_inode_alloc+0x39/0x310 [ 1897.096917][T20654] kmem_cache_alloc_noprof+0x9e/0x690 [ 1897.096946][T20654] ? security_inode_alloc+0x39/0x310 [ 1897.096969][T20654] security_inode_alloc+0x39/0x310 [ 1897.096991][T20654] inode_init_always_gfp+0x983/0xd40 [ 1897.097014][T20654] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1897.097045][T20654] alloc_inode+0x82/0x1b0 [ 1897.097064][T20654] __sock_create+0x12d/0x9d0 [ 1897.097092][T20654] ? lock_release+0x4b/0x3c0 [ 1897.097119][T20654] ? __might_fault+0xaf/0x130 [ 1897.097147][T20654] __sys_socketpair+0x1c4/0x560 [ 1897.097178][T20654] __x64_sys_socketpair+0x9b/0xb0 [ 1897.097208][T20654] do_syscall_64+0x166/0x520 [ 1897.097229][T20654] ? trace_irq_disable+0x3b/0x140 [ 1897.097256][T20654] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1897.097276][T20654] ? clear_bhb_loop+0x70/0xc0 [ 1897.097298][T20654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1897.097318][T20654] RIP: 0033:0x7f868442e159 [ 1897.097336][T20654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1897.097355][T20654] RSP: 002b:00007f8682686028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1897.097378][T20654] RAX: ffffffffffffffda RBX: 00007f86846b5fa0 RCX: 00007f868442e159 [ 1897.097393][T20654] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 [ 1897.097406][T20654] RBP: 00007f86844c506b R08: 0000000000000000 R09: 0000000000000000 [ 1897.097420][T20654] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000000 [ 1897.097433][T20654] R13: 00007f86846b6038 R14: 00007f86846b5fa0 R15: 00007ffd29644cd8 [ 1897.097457][T20654] [ 1897.097554][T20654] socket: no more sockets [ 1897.325163][T20650] CPU: 1 UID: 0 PID: 20650 Comm: syz.7.3251 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1897.336640][T20650] Tainted: [L]=SOFTLOCKUP [ 1897.340974][T20650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1897.351035][T20650] RIP: 0010:rfcomm_dev_shutdown+0x48/0xb0 [ 1897.356791][T20650] Code: 8d b3 88 04 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 46 07 d1 f7 4d 8b 36 4d 8d 7e 40 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 29 07 d1 f7 49 83 3f 00 74 16 e8 [ 1897.376415][T20650] RSP: 0018:ffffc9000e5176a8 EFLAGS: 00010202 [ 1897.382504][T20650] RAX: 0000000000000008 RBX: ffff88804dbd6000 RCX: 0000000000080000 [ 1897.390496][T20650] RDX: ffffc9002601b000 RSI: 0000000000002386 RDI: 0000000000002387 [ 1897.398480][T20650] RBP: 0000000000000400 R08: 0000000000000000 R09: 0000000000000000 [ 1897.406470][T20650] R10: dffffc0000000000 R11: ffffffff8a61a720 R12: dffffc0000000000 [ 1897.414454][T20650] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000040 [ 1897.422433][T20650] FS: 00007f427b4346c0(0000) GS:ffff888125cc4000(0000) knlGS:0000000000000000 [ 1897.431365][T20650] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1897.437951][T20650] CR2: 00007f86846b7dac CR3: 000000005cb38000 CR4: 00000000003526f0 [ 1897.445922][T20650] Call Trace: [ 1897.449200][T20650] [ 1897.452126][T20650] ? __pfx_rfcomm_dev_shutdown+0x10/0x10 [ 1897.457769][T20650] tty_port_shutdown+0x1bf/0x220 [ 1897.462711][T20650] tty_port_close+0x4c/0x140 [ 1897.467322][T20650] ? __pfx_rfcomm_tty_close+0x10/0x10 [ 1897.472702][T20650] tty_release+0x35f/0x1680 [ 1897.477219][T20650] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1897.482860][T20650] ? tty_unlock+0x19/0x30 [ 1897.487193][T20650] tty_open+0x509/0xcd0 [ 1897.491375][T20650] ? __pfx_tty_open+0x10/0x10 [ 1897.496049][T20650] ? rt_spin_unlock+0x159/0x200 [ 1897.500937][T20650] ? rt_spin_unlock+0x165/0x200 [ 1897.505788][T20650] chrdev_open+0x4dc/0x600 [ 1897.510208][T20650] ? __pfx_chrdev_open+0x10/0x10 [ 1897.515140][T20650] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 1897.521468][T20650] ? __pfx_chrdev_open+0x10/0x10 [ 1897.526403][T20650] do_dentry_open+0x849/0x1420 [ 1897.531178][T20650] vfs_open+0x3b/0x350 [ 1897.535235][T20650] ? path_openat+0x142d/0x1d60 [ 1897.539998][T20650] path_openat+0x1448/0x1d60 [ 1897.544590][T20650] do_file_open+0x23e/0x4a0 [ 1897.549091][T20650] ? __pfx_do_file_open+0x10/0x10 [ 1897.554116][T20650] ? alloc_fd+0x654/0x6d0 [ 1897.558439][T20650] do_sys_openat2+0x115/0x200 [ 1897.563104][T20650] ? __se_sys_futex+0x3a8/0x450 [ 1897.567950][T20650] ? __pfx_do_sys_openat2+0x10/0x10 [ 1897.573154][T20650] ? rcu_is_watching+0x16/0xb0 [ 1897.577918][T20650] __x64_sys_open+0x11e/0x150 [ 1897.582587][T20650] do_syscall_64+0x166/0x520 [ 1897.587170][T20650] ? trace_irq_disable+0x3b/0x140 [ 1897.592189][T20650] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1897.598242][T20650] ? clear_bhb_loop+0x70/0xc0 [ 1897.602927][T20650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1897.608806][T20650] RIP: 0033:0x7f427d21e159 [ 1897.613220][T20650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1897.632814][T20650] RSP: 002b:00007f427b434028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1897.641218][T20650] RAX: ffffffffffffffda RBX: 00007f427d4a6180 RCX: 00007f427d21e159 [ 1897.649180][T20650] RDX: 0000000000000235 RSI: 0000000000040000 RDI: 0000200000000580 [ 1897.657144][T20650] RBP: 00007f427d2b506b R08: 0000000000000000 R09: 0000000000000000 [ 1897.665110][T20650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1897.673078][T20650] R13: 00007f427d4a6218 R14: 00007f427d4a6180 R15: 00007ffc5534ccb8 [ 1897.681060][T20650] [ 1897.684083][T20650] Modules linked in: [ 1897.688066][T20650] ---[ end trace 0000000000000000 ]--- [ 1897.702807][T20650] RIP: 0010:rfcomm_dev_shutdown+0x48/0xb0 [ 1897.702846][T20650] Code: 8d b3 88 04 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 46 07 d1 f7 4d 8b 36 4d 8d 7e 40 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 29 07 d1 f7 49 83 3f 00 74 16 e8 [ 1897.702864][T20650] RSP: 0018:ffffc9000e5176a8 EFLAGS: 00010202 [ 1897.702883][T20650] RAX: 0000000000000008 RBX: ffff88804dbd6000 RCX: 0000000000080000 [ 1897.702899][T20650] RDX: ffffc9002601b000 RSI: 0000000000002386 RDI: 0000000000002387 [ 1897.703078][T20650] RBP: 0000000000000400 R08: 0000000000000000 R09: 0000000000000000 [ 1897.703094][T20650] R10: dffffc0000000000 R11: ffffffff8a61a720 R12: dffffc0000000000 [ 1897.703109][T20650] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000040 [ 1897.703124][T20650] FS: 00007f427b4346c0(0000) GS:ffff888125cc4000(0000) knlGS:0000000000000000 [ 1897.703141][T20650] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1897.703155][T20650] CR2: 00007f86846b7dac CR3: 000000005cb38000 CR4: 00000000003526f0 [ 1897.703344][T20650] Kernel panic - not syncing: Fatal exception [ 1897.804262][T20650] Kernel Offset: disabled [ 1897.808582][T20650] Rebooting in 86400 seconds..